last executing test programs: 19m2.655627991s ago: executing program 32 (id=551): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x4, r1, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x5}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000100)={0x28, 0x6, r1, 0x0, &(0x7f0000343000/0x3000)=nil, 0x3000, 0x9}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x5, r1, r1, 0x80, 0x4, 0x3fff}) 18m55.926561937s ago: executing program 33 (id=583): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x30, r2, 0x5, 0x1000000, 0xff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x7a7}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x7ff}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x4000840) 18m19.914601348s ago: executing program 34 (id=776): symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000180)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 18m18.137135657s ago: executing program 35 (id=794): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000000c0)=r1, 0x4) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)="39000000140081ae10003c000500018311001f9f660fcf066a05acb612f691f3bd3508abca1be6eeb89c44ebb3730800000000000000e92155", 0x39}], 0x1}, 0x0) 18m15.315104206s ago: executing program 36 (id=817): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000440)={r2}) 16m13.269584654s ago: executing program 37 (id=1597): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x9, 0x1, &(0x7f0000000140)={0x77359400}, 0x0) 14m28.486772524s ago: executing program 38 (id=2348): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x300, 0x0, 0x1, 0x9, 0x0, 0x6}, 0x20) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f0000000040)=0x9, 0x4) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f00000000c0)=0x7f, 0x4) sendto$inet6(r0, &(0x7f0000000180)="c412", 0xffe6, 0x40, &(0x7f0000000240)={0xa, 0x4ea2, 0x5, @empty, 0x401}, 0x1c) 13m56.710667761s ago: executing program 39 (id=2464): ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000140)={0x84, @rand_addr=0x64010105, 0x4e22, 0x3, 'lblcr\x00', 0x0, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) sendmsg$sock(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 8m43.459127251s ago: executing program 40 (id=4319): ioprio_set$pid(0x2, 0x0, 0x0) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat(r1, &(0x7f00000003c0)='./file0\x00', 0x42, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x4000000000000, 0xffffffffffbffffe, 0x7f, 0xfffffffd}, 0x0) sendfile(r2, r2, 0x0, 0xe3aa6ea) 8m4.104632674s ago: executing program 41 (id=4712): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) read(r0, &(0x7f00000002c0)=""/138, 0x8a) 7m28.282405059s ago: executing program 42 (id=5023): r0 = socket$kcm(0x29, 0x2, 0x0) close(r0) r1 = socket$kcm(0x2b, 0x1, 0x0) close(r1) r2 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r2, &(0x7f00000007c0)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000900)=[{&(0x7f0000000080)="92", 0x1}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x158}, 0x40) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x2cb) close(r1) 6m21.668014632s ago: executing program 9 (id=5536): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3801000010000100fefffffffddbdf25fe889637429010eb0f82000000000001fc010000000000000000000000000001000107144e230005000000803c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0200000000000000ffffffffffffffff2a000000000000001f00000000000000b80700000000000002000000fcffffffbcfbffff2abd700000000000020001002000000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xa8, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x22, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x15}, @in=@private=0xa010100, 0x4e1f, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffeffffa}, {}, 0x4, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@empty, 0x4d4, 0x32}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x0, 0x0, 0xb7, 0x9, 0xfffffffe, 0x3}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) 6m20.449783992s ago: executing program 9 (id=5545): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x200000000622c, 0x0) 6m19.375613266s ago: executing program 9 (id=5551): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={r3, 0xa22}, 0x8) 6m19.088336872s ago: executing program 9 (id=5554): timer_create(0x2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0), 0x1, 0x4fa, &(0x7f0000000ac0)="$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") mknod$loop(0x0, 0x400, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={&(0x7f00000010c0)=""/124, 0x7c}) 6m18.491752973s ago: executing program 9 (id=5558): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto(r2, &(0x7f00000001c0)="1a04452f1524a4dd8f680a71dfb1930e4c9fad1e3cf76c27bc1e9316b87e79595519d8fdff3a930d829cb9a69235ab723e5d63d71bd57f4435b3edc0492b6672469ad5ac19a814076c2c30ce416d11582d7d2f5de534c172aae3000eb014e10fa8c43131c43cde9e4d2f455ef61e1e98ca6fe62e9f077eb00a9fabbc28288b832c30001cb267708904f3bc", 0xffffffffffffff46, 0x30000090, 0x0, 0x0) recvmmsg(r1, &(0x7f0000005cc0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/56, 0x38}], 0x1}}], 0x1, 0x102, 0x0) 6m15.847385921s ago: executing program 9 (id=5579): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0xb, 0x1000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x2e}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}]}, 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x34, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r1, &(0x7f0000000080)="b3019c28", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) 6m15.185055101s ago: executing program 43 (id=5579): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0xb, 0x1000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x2e}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}]}, 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x34, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r1, &(0x7f0000000080)="b3019c28", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) 5m47.158291s ago: executing program 5 (id=5792): ioperm(0x3, 0x5, 0x7) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) rmdir(&(0x7f0000000000)='./file0\x00') 5m45.481347137s ago: executing program 5 (id=5803): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@redirect_dir_nofollow}, {@nfs_export_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setuid(0xee00) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000000340)={0x2020}, 0x2020) 5m43.698290886s ago: executing program 5 (id=5816): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c0009800800014000000005080008400000000114000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000aefff000900020073797a310000ffdf0900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) recvmmsg(r2, &(0x7f0000001f00)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x0, 0x0) 5m43.21899783s ago: executing program 5 (id=5820): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x18f883, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x14) umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0xa) 5m42.876003035s ago: executing program 5 (id=5824): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setregid(0xee00, 0xee00) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = syz_pidfd_open(r2, 0x0) setns(r4, 0x10000000) 5m42.471175937s ago: executing program 5 (id=5826): r0 = syz_usb_connect$cdc_ecm(0x0, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a4400001020301090248000101570040090400000002060000052406000005240000000d240f0100080000000000000004240200090581031000000000090582"], 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e"], 0x0) syz_usb_disconnect(r0) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000940)={0x44, &(0x7f0000000700)={0x40, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, &(0x7f0000000000)={0x14, &(0x7f0000000140)={0x40, 0x31, 0xb, {0xb, 0xd, "5d768d97c37e80aa81"}}, 0x0}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) 5m41.983855072s ago: executing program 44 (id=5826): r0 = syz_usb_connect$cdc_ecm(0x0, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a4400001020301090248000101570040090400000002060000052406000005240000000d240f0100080000000000000004240200090581031000000000090582"], 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e"], 0x0) syz_usb_disconnect(r0) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000940)={0x44, &(0x7f0000000700)={0x40, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, &(0x7f0000000000)={0x14, &(0x7f0000000140)={0x40, 0x31, 0xb, {0xb, 0xd, "5d768d97c37e80aa81"}}, 0x0}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) 3m31.812966765s ago: executing program 6 (id=6727): socket$key(0xf, 0x3, 0x2) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x400}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00001e9000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89c, 0xc000, 0x2, 0x6}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xe, 0xfff0}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3m31.440409862s ago: executing program 6 (id=6729): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) setpriority(0x2, 0x0, 0x3) 3m29.973223298s ago: executing program 6 (id=6734): r0 = socket$nl_audit(0x10, 0x3, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$AUDIT_TRIM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3eb, 0x200, 0x70bd25, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x90}, 0x0) 3m28.25338333s ago: executing program 6 (id=6740): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7e}, 0x10) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="2c0000001a00012200000000000000050a000000000000000000000006001d000000000008001e80"], 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x204001, &(0x7f0000000240), 0x1, 0xb9f, &(0x7f0000000c00)="$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") r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r1, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xff\a\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x5c) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x42428, 0x0) syz_usb_connect$uac1(0x5, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000010861a2d7540000102030109026000030101280a0904000000010100000a24010e000a00020102090d010000010200000904010101010200000905010900"], 0x0) truncate(&(0x7f0000000080)='./file2\x00', 0x7) syz_usb_connect(0x5, 0x12f, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x0) 3m24.504402123s ago: executing program 6 (id=6758): r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x18d03e, 0x0) r2 = open(&(0x7f00000004c0)='./bus\x00', 0xc2802, 0x100) ftruncate(r2, 0x2008002) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) r3 = gettid() process_vm_writev(r3, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x2b, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) io_submit(0x0, 0x1, &(0x7f0000000240)=[&(0x7f0000000000)={0x180a, 0x0, 0x3, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8}]) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000000), 0x0) fallocate(r0, 0x0, 0x0, 0x400001) 3m23.855995231s ago: executing program 6 (id=6764): r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(0x3) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xf, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0xab, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0xe000202b}) 3m23.397829327s ago: executing program 45 (id=6764): r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(0x3) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xf, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0xab, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0xe000202b}) 3m17.498827295s ago: executing program 8 (id=6798): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x40) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 3m17.052407591s ago: executing program 8 (id=6800): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626", 0xa) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r0, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="10000000feff5366"], 0x10) syz_clone(0x81080000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) 3m16.386600099s ago: executing program 8 (id=6803): syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008200122010009058103"], 0x0) write(0xffffffffffffffff, &(0x7f00000002c0)="fc0000001c000704ab5b", 0xa) r1 = syz_open_procfs(0x0, 0x0) fchdir(r1) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000040)={0x2c, &(0x7f0000000680)={0x40, 0x0, 0x4, "0c8ac451"}, 0x0, 0x0, 0x0, 0x0}) mremap(&(0x7f00004f9000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f00007f8000/0x1000)=nil) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000380)={0x20, 0x15, 0x4, "7ff367f6"}, 0x0, 0x0, 0x0, 0x0}) 3m15.321846602s ago: executing program 8 (id=6809): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4) recvmmsg(r0, &(0x7f0000001600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/51, 0x33}, 0x58}], 0x1, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x16, 0x0, 0xffffff36) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r1 = socket$inet6(0xa, 0x800000000000002, 0xfffffffc) sendmmsg$inet6(r1, 0x0, 0x0, 0x400c404) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x18004, &(0x7f0000000680)={[{@grpid}, {@auto_da_alloc}, {@lazytime}, {@errors_remount}, {@dioread_nolock}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x9}}, {@noblock_validity}, {@barrier}, {@resuid}, {@bsdgroups}]}, 0x3, 0x4d4, &(0x7f0000000180)="$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") 3m13.947038239s ago: executing program 8 (id=6818): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r3, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) close(0x3) 3m13.461441767s ago: executing program 8 (id=6819): ftruncate(0xffffffffffffffff, 0xc17a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 2m57.992924136s ago: executing program 46 (id=6819): ftruncate(0xffffffffffffffff, 0xc17a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 21.49303626s ago: executing program 3 (id=7340): socket$kcm(0x10, 0x400000002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, 0x0, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x312000, 0x800, 0x0, 0x5}, 0x20) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x40000000}) 16.331149152s ago: executing program 3 (id=7350): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001040)=0x6) open_tree(0xffffffffffffffff, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r3, r3, r3}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={'sha384\x00'}}) 11.868136417s ago: executing program 3 (id=7365): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x48c}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) getdents64(r2, &(0x7f0000001f80)=""/4108, 0x100c) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000100)={0x0, 0x0, 0x101c, 0x6, 0x9, 0x9fb4, 0xd, 0x1}) bind$tipc(r1, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) 10.084305229s ago: executing program 4 (id=7369): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x202, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902f0"], 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000840)={0x44, &(0x7f0000000600)={0x0, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000001080)={0x80000000, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000004c0)=0x7) getpid() r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r1, &(0x7f0000002000)={0x10, 0x17, 0x2, {0xfffffffffffffced, './file0'}}, 0xfffffdab) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x2000000, 0x0, 0x15, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file1\x00', 0x42, 0x0) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) 8.972528105s ago: executing program 3 (id=7373): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x9, &(0x7f0000000000)=0x102) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x200000005c832, 0xffffffffffffffff, 0x0) r1 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) r2 = syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000640)='./file1\x00', 0x0, &(0x7f00000000c0)={[{@part={'part', 0x3d, 0x4}}, {@force}, {@nls={'nls', 0x3d, 'cp861'}}]}, 0x1, 0x5c8, &(0x7f00000006c0)="$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") seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@fallback=r2, 0x35, 0x0, 0x800, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) write$evdev(r3, &(0x7f0000000200)=[{{}, 0x14, 0x10, 0x6295}, {{0x77359400}, 0x0, 0x8, 0x4}, {{r5, r6/1000+60000}, 0x2, 0x8, 0x7}], 0x48) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xa5e438, &(0x7f0000000380)=ANY=[@ANYRESOCT=r1, @ANYRESHEX=0x0, @ANYRES64=0x0, @ANYBLOB="4ea4164323d0136eb525e4df0380654dda5ebcf2de4311b52a2281c85ff08dbd024f787cd68755278fc572e23916a8c3d6696a0bf0670d64b4f5a0a0e534317a2966e83ce615c95af5aecc2e04a42b3bb6c722a5849ba823ebc75abf6d4b6e5fffc844d9d095cbd2eb8a982eb3140257", @ANYRESOCT=r4, @ANYRESDEC=r5, @ANYRES16, @ANYBLOB="37b57cfa7d0121345c29b6064f49a0f95b88671b8e9149556e5ff3c7012f7856b6557be6b51d61efea623114a0b4b52f68387d2040dd08c5aa753b596ede3f3d637f96752310a389efcd8cf335ca9dbbbc10bda7a16342968c9ab4fd1ac65da604cd9b42d6d0dc0e895e0b2f42822f1b342f88a8d607008d20b22b776a70a07a2c53fc32be094c857279c58542b176bfbcc6c7e9808da687b44a8b21d23cc2f80050f8fd457f5a5595226d2008bcded226ab2e75d00ab5592daa23e809e04c2b370af460ae93b7efc32bf174830779058ad75290b9abb59be5f8859001e651c1d4", @ANYRESOCT=r3, @ANYRESDEC, @ANYRESDEC, @ANYRES64, @ANYRES64, @ANYRESHEX=0x0], 0xb, 0x0, &(0x7f0000000000)) 8.948827517s ago: executing program 7 (id=7374): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000180)={[{@shortname_lower}, {@shortname_lower}, {@rodir}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'cp866'}}, {@iocharset={'iocharset', 0x3d, 'maccroatian'}}, {@utf8no}, {@shortname_mixed}, {@fat=@nfs}, {@utf8}, {@shortname_mixed}, {@fat=@codepage={'codepage', 0x3d, '866'}}, {@fat=@showexec}, {@utf8no}, {@utf8no}, {@shortname_mixed}]}, 0x1, 0x38c, &(0x7f00000015c0)="$eJzs3U+IW8UfAPBv+pLdTeHX3cMPioISvQm69A8eFA9byhaKuaiEVg9isFuUzVrYYHB7aLpexKPgUUHwIh704KFnERTx5sGrVbQqHrS3gsWRJC/Ja5PdrtRtXfx8DuWb78y8mXmdTd6+R2ZfuJ5Wz1Ti7NWrV2JurhTlpeNLca0UC5HF0MWYNDMlBwDsDddSit/TwCiZTYnGSndoaADALul9/qduMfP659vVTz79AWDPy3//r25XZ24y9eMTvX/P7d64AIDdM3H//8Fx2f2Dx/yFR/3lqQ8EAIC95Zlnn3vyWD3i6WptLmLtjU6j04jHx+XHzsbL0YqVOBTzcT1icKGQUjr9ff/FiZP15UO1Wq0bPy1EIyLe6zQi1rqdxuBK4VjWbz8bh2M+FvL2+dVGSik78Ul9+XCtLyIudvv9x1qp06jE/rz/b/fHShyJWvx/on3EyfrykVp+gMbasH03YnN836I3/sWYj69fjHPRijPVU5HS8LKmvnzhcK12PNVvaN9pzMaZ0VmYcgcEAAAAAAAAAAAAAAAAAAAAAABuw2JtZGG0/00a79+zuDilvL8/zqB9vj/Q5mB/oDSbIqXfXnuk8WY22KtnuD/QzfvzdBrl2Hd3pw4AAAAAAAAAAAAAAAAAAAD/Gu2NmWi2Wivr7Y3zq8Wgu97e2BcRvcwrX370WTUm69wiKOd9FIpqeer8ajNlw8opu6FOHmS9zoeZDy+NRlysMzuaxdRh9IrbM1vU+d8DP7wzztyXDY/857hOFtMnmN00jGFQiYi1AxFRjRgVVcZT3vKMHc2DI7c4q5dTSlsd58Lzk62iFFH++/9x2wepF3xx5aV7jrYPPtrPfJoGHnp4/tTlt9//ZbXZ6vXc0/pgZr19Pa0289fTF9tKqbxFp1lh/ZTyc1gqroTydkPdvDHTzL759fS9b321s5mmYubVKXWywXQ+Xm9vlPKflH7RzCDo5W5qVW2dzCLOL0XxOJUpi//2gqmL7eC7S81LF777eafHKbxJjDfqqP7T7z8AAAAAAAAAAAAAAAAAAMBY4bviufzLvpXtWj32VB7M7e7oAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODOGP/9/0KwOZHZSfBHNyaLZlfW2xEH7vY0AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4j/srAAD//x9pY8c=") openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) mount$overlay(0x0, 0x0, 0x0, 0x8, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000034c0)=ANY=[@ANYBLOB="240000003f0007010300000000000000027c0000100003800c0008"], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r2 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r2, 0x80286722, 0x0) 8.191437779s ago: executing program 4 (id=7376): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_io_uring_setup(0xf00, &(0x7f0000000380)={0x0, 0x1e58, 0x13000, 0x0, 0x2ff}, &(0x7f0000000100), &(0x7f00000001c0), &(0x7f0000000000)) eventfd2(0x10001, 0x80000) io_uring_enter(r3, 0x1, 0x71a3, 0x1, 0x0, 0x0) 7.64618912s ago: executing program 2 (id=7380): socket$packet(0x11, 0x3, 0x300) socket(0x10, 0x803, 0x9) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) dup2(r2, r0) r3 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x69ee, 0xc00, 0x1, 0x11}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x7, 0x8, 0x0, 0x0, 0x14}) io_uring_enter(r3, 0x1, 0x1, 0x1, 0x0, 0x0) 7.596567782s ago: executing program 7 (id=7381): sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd1}, 0x50) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000008c0)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="400001801400020070696d367265673000000000000000001400020073797a5f74"], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={0x0}, 0x1, 0x0, 0x0, 0x4060040}, 0x20054044) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000500)=0x8, 0x4) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x8044) 6.286019736s ago: executing program 0 (id=7382): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000800)=@updpolicy={0xb8, 0x19, 0x1, 0xfffffffc, 0x40010000, {{@in=@multicast2, @in=@empty, 0x0, 0x10, 0x0, 0x0, 0xa, 0x20, 0x0, 0x62}, {0x8, 0x12, 0x100000002, 0x0, 0xfff, 0xfffffffffffffffb, 0xffffffffffffffff}, {0x6, 0x2000000000000003, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000940), 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000540)="7ee5", 0x2}], 0x1) shutdown(r2, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="b800000019000100fcffffff00000140e0000002000000000000000000000000000000000000000000000000000008"], 0xb8}}, 0x4004) sendmsg$nl_xfrm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x800, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x4e24, 0x0, 0xa, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x10001}, {0x8000000000000000, 0x6, 0x0, 0xfffffffffffffffe}, 0x0, 0x6e6bbc}}, 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x0) 5.627687839s ago: executing program 1 (id=7383): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg(r0, 0x0, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000100001000000000000000071ff9aee24", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000008001b"], 0x30}}, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2a}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r5, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r4, 0x0, r1, 0x0, 0x317e, 0x4) write$tun(r2, &(0x7f0000000840)=ANY=[@ANYBLOB="461d11b00064000003069078ac1414bbac1e0101890b9bffffffffe0000001890b69000000007f000001070b3de0000001e0000001444c2093ac1e010100007652ac1414440000000f000000006e247ae2ac1414aa00000003000000000000000eac1e010100000000ac1414bb00000101ac1e000100000d61ff"], 0x11b0) 5.498847168s ago: executing program 7 (id=7384): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) r0 = userfaultfd(0x80801) close(r0) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x15) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f00000002c0)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}}) 5.49632717s ago: executing program 4 (id=7385): syz_mount_image$nilfs2(&(0x7f0000000140), &(0x7f0000000f00)='./file1\x00', 0x208800, &(0x7f0000003100)=ANY=[], 0x2, 0xf20, &(0x7f0000001e80)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x20000, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40106e80, &(0x7f0000000100)={0x1, 0x100000000, 0x6, 0x400000, 0x4000040c, 0x4fe4, 0x2401}) 5.302956759s ago: executing program 2 (id=7386): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000380), 0x149842, 0x0) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r0, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x20008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040), 0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000775693f163a262734f41955318fd807e7ddb13bbb64e0c4f284dc9d8f864a46cceba45fc7b7e50278d71637feacc2f119d1e58f04f299d026452cfe723cd5aed08a25a0f203657aa461fe703e0"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000ffffffff180800002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000400008500000010000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.973130961s ago: executing program 3 (id=7387): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x17c}) timer_create(0x0, &(0x7f0000000140)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) mmap$binder(&(0x7f00003af000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x543) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f000011b000/0x1000)=nil, 0x1000, 0x4) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000200)=""/124, 0x20}], 0x3f) 4.83298841s ago: executing program 0 (id=7388): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000140)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x36, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) 4.463303397s ago: executing program 1 (id=7389): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000046c0)=[{{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f00000006c0)="04c9498e6b718d1482cabcd20c57fcce064eb617077d1c2f0b544b96d26701497766f542a6e98afd8dbeb1e29229132a52d2717bf85a5a74926b70d66961be378424e2457ee98943672f9de2b24f5a736fc3a73aff079571fd8a84afbc632f9463154293388cafef428132fa5c311b99df93386680bf34c520a9b224d816d83d8b", 0x81}], 0x1}}], 0x1, 0x20000004) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x6, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000540)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x11fe726f7e78fcf0}, 0x28) close(r3) write(r1, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r4, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x82, &(0x7f00000001c0)=@sack_info={0x0, 0xffff, 0x8}, &(0x7f0000000200)=0xc) 4.423712722s ago: executing program 7 (id=7390): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0xd) syz_open_dev$vim2m(&(0x7f0000000140), 0x8001, 0x2) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0x7, 0x80000006, 0x400}, 0x0, 0x0) openat$vim2m(0xffffff9c, 0x0, 0x2, 0x0) 4.303665128s ago: executing program 0 (id=7391): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000480)=0x9, 0x189) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="21032bbd7000e6a8d5d202fac3"], 0x14}, 0x1, 0x0, 0x0, 0x4044094}, 0x4) 4.080085388s ago: executing program 4 (id=7392): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000080)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001480)={0x34, &(0x7f0000001240)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000001cc0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001bc0)={0x84, &(0x7f0000001700)={0x20, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x41, 0x6, 0x0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 3.267711792s ago: executing program 0 (id=7393): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x122}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) getsockopt$sock_cred(r0, 0x1, 0x4d, 0x0, &(0x7f0000000200)=0x33) 3.247270213s ago: executing program 2 (id=7394): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsmount(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = add_key$keyring(&(0x7f0000000080), &(0x7f0000001100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000300)="300e3080", 0x4, r4) 2.949266555s ago: executing program 1 (id=7395): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000fc0)={0x18, r4, 0x705, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8084}, 0x0) 2.920762606s ago: executing program 7 (id=7396): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r1, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) bind$tipc(r0, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000300)=[{0x6, 0x9, 0xfb, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 2.91960433s ago: executing program 0 (id=7397): socket$inet6(0xa, 0x3, 0x8000000003c) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x29}, 0x48) socket(0x200000000000011, 0x2, 0xd) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000440)={r1, r0}, 0xc) 2.041385486s ago: executing program 2 (id=7398): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x13, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007112b9000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(r1, 0x2, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x8, 0x0, 0x0) 1.759412413s ago: executing program 3 (id=7399): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000280)='./file2\x00', 0x10, &(0x7f00000000c0)=ANY=[@ANYRES8=0x0, @ANYRES64, @ANYRES16], 0x1, 0x25c, &(0x7f0000000a00)="$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") statfs(0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000180)='./bus\x00', 0x804, &(0x7f0000000d80)=ANY=[@ANYBLOB="726f6469722c6e6f6e756d7461696c3d102c696f636861727365743d69736f383835392d678d443a372c756e695f786c6174653d302c73686f72746e616d653d6d697865642c757466383d302c726f6469722c757466383d302c636865636b3d6e6f726d616c05636f6465706167653d3836362c757466383d3149c5c0842099722c73686f72746e616d653d77696e6e742c73686f72746e616d653d77696e6e742c757466383d302c757466383d3000", @ANYRESDEC, @ANYRESHEX, @ANYRESOCT, @ANYRES16, @ANYRESDEC], 0x1, 0x27e, &(0x7f0000000380)="$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") prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x48) 1.489726018s ago: executing program 1 (id=7400): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x8000000) r3 = semget$private(0x0, 0x4000, 0x555) semtimedop(r3, &(0x7f0000000100)=[{0x4, 0x1004, 0x1800}], 0x1, 0x0) unshare(0x2c040000) 1.412700273s ago: executing program 2 (id=7401): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) open(&(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0) rmdir(&(0x7f0000000280)='./file0/file0\x00') r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, r3) setpgid(0x0, r3) lstat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) 1.392818076s ago: executing program 4 (id=7402): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x8}) r3 = fsopen(&(0x7f0000000180)='gfs2meta\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 1.192087307s ago: executing program 7 (id=7403): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000140)={0xfe, "7bb9595931028deda525e19bdeffafde2500f6d15c9e31df9454310ad7c18e65"}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084) r2 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 384.511844ms ago: executing program 1 (id=7404): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r0, 0x40086e81, &(0x7f00000000c0)=0x4) r1 = syz_open_dev$usbmon(&(0x7f0000000200), 0x7, 0x141000) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000000206030000000300686173683a69000000000100000000000900020073797a311b000097cc26afc28057001400078008001340000017e508001240000000090000000000"], 0x48}}, 0x4080) socket(0x1, 0x5, 0x0) socket$igmp6(0xa, 0x3, 0x2) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) clock_adjtime(0x0, &(0x7f0000000640)={0x17, 0x9, 0x380000, 0x8, 0xfffffffffffffff9, 0xfffffffffffffff7, 0x9, 0x4, 0xae, 0x6, 0x7, 0x4, 0xfffffffffffff04f, 0x7, 0x80000000, 0xfffffffffffffff8, 0xffffffffffffffff, 0x6, 0x100000000, 0x100, 0x4, 0x2, 0x4bf, 0x3, 0x8, 0x8}) clock_adjtime(0x0, &(0x7f0000000900)={0x6, 0x20000000e, 0xf, 0x0, 0xf, 0x8000000000000000, 0xa, 0x2, 0x9, 0x4, 0x5, 0x9, 0xc, 0x9, 0x7, 0x9, 0x8, 0x3, 0xb, 0xfffffffffffffffc, 0x2, 0x5, 0x7, 0x7, 0x3, 0x6}) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x48000, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0x1000, 0xffff8000) 228.081588ms ago: executing program 4 (id=7405): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') bpf$MAP_CREATE(0x0, 0x0, 0x48) keyctl$get_persistent(0x16, 0x0, 0x0) syz_mount_image$exfat(&(0x7f0000000a00), &(0x7f0000001540)='./file0\x00', 0x2010c00, &(0x7f00000003c0)=ANY=[], 0x1, 0x150f, &(0x7f0000001c00)="$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") r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000000000)={0x0, 0x87}, 0x20) 134.290247ms ago: executing program 0 (id=7406): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) io_setup(0x101, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls}, 0x43) 132.902648ms ago: executing program 2 (id=7407): openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r1, 0x69b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040040}, 0x4000000) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}}, 0x0) 0s ago: executing program 1 (id=7408): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) unshare(0x26020480) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = epoll_create1(0x0) add_key$fscrypt_provisioning(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00'}, 0x80) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@cgroup=r4, r2, 0x11, 0x0, r4}, 0x14) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)={@cgroup=r1, r2, 0x11, 0x0, r1}, 0x11) kernel console output (not intermixed with test programs): (format 1801)... [ 949.763524][ T8609] bridge_slave_0: left allmulticast mode [ 949.797519][ T8609] bridge_slave_0: left promiscuous mode [ 949.809194][T24640] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 949.818955][ T5644] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 949.847384][ T5644] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 949.850526][ T8609] bridge0: port 1(bridge_slave_0) entered disabled state [ 950.229937][ T5644] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 382ms [ 950.325259][ T5644] gfs2: fsid=syz:syz.0: jid=0: Done [ 950.361647][T24640] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 950.743070][ T5634] Bluetooth: hci0: command tx timeout [ 951.145383][T24678] fuse: fd is not a fuse device [ 951.219564][ T30] audit: type=1800 audit(951.200:1363): pid=24637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.5603" name="file1" dev="loop6" ino=9378 res=0 errno=0 [ 951.280914][ T8609] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 951.332135][ T8609] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 951.374356][ T8609] bond0 (unregistering): Released all slaves [ 951.653710][ T5290] 8021q: adding VLAN 0 to HW filter on device eth5 [ 952.187820][T24700] fuse: fd is not a fuse device [ 952.297878][T24705] cgroup: Unknown subsys name 'cpuset' [ 952.457746][ T8609] hsr_slave_0: left promiscuous mode [ 952.493568][ T8609] hsr_slave_1: left promiscuous mode [ 952.522851][ T8609] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 952.539621][ T8609] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 952.560976][ T8609] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 952.591344][ T8609] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 952.822604][ T5634] Bluetooth: hci0: command tx timeout [ 952.977740][T24732] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5632'. [ 953.752042][ T8609] veth1_macvtap: left promiscuous mode [ 953.767744][ T8609] veth0_macvtap: left promiscuous mode [ 953.791281][ T8609] veth1_vlan: left promiscuous mode [ 953.806973][ T8609] veth0_vlan: left promiscuous mode [ 953.864192][T24746] fuse: fd is not a fuse device [ 954.393862][ T8609] team0 (unregistering): Port device team_slave_1 removed [ 954.425901][ T8609] team0 (unregistering): Port device team_slave_0 removed [ 954.902832][ T5634] Bluetooth: hci0: command tx timeout [ 954.944465][T24739] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5632'. [ 954.978715][ T5290] 8021q: adding VLAN 0 to HW filter on device eth6 [ 955.351852][T24780] fuse: fd is not a fuse device [ 955.527278][T24572] bridge0: port 1(bridge_slave_0) entered blocking state [ 955.558502][T24572] bridge0: port 1(bridge_slave_0) entered disabled state [ 955.584721][T24572] bridge_slave_0: entered allmulticast mode [ 955.621089][T24572] bridge_slave_0: entered promiscuous mode [ 955.664652][T24572] bridge0: port 2(bridge_slave_1) entered blocking state [ 955.665017][T24792] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5650'. [ 955.732328][T24572] bridge0: port 2(bridge_slave_1) entered disabled state [ 955.760278][T24572] bridge_slave_1: entered allmulticast mode [ 955.845275][T24572] bridge_slave_1: entered promiscuous mode [ 955.871820][T24797] fuse: fd is not a fuse device [ 955.894072][T24792] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 955.976791][T24792] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 956.275219][T24572] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 956.338914][T24572] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 956.531425][T24572] team0: Port device team_slave_0 added [ 956.570147][T24572] team0: Port device team_slave_1 added [ 956.716421][T24572] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 956.741157][T24572] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 956.808076][T24572] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 956.846290][T24572] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 956.879314][T24572] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 956.922370][T24572] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 957.437328][T24818] overlayfs: failed to resolve './file0': -2 [ 957.464484][T24572] hsr_slave_0: entered promiscuous mode [ 957.485784][T24572] hsr_slave_1: entered promiscuous mode [ 957.514865][T24572] debugfs: 'hsr0' already exists in 'hsr' [ 957.544162][T24572] Cannot create hsr debugfs directory [ 958.020899][ T5290] 8021q: adding VLAN 0 to HW filter on device eth7 [ 958.644439][T24879] loop6: detected capacity change from 0 to 256 [ 958.667586][T24879] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 958.768523][T24879] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 960.762192][ T5290] 8021q: adding VLAN 0 to HW filter on device eth8 [ 961.186957][T24927] xt_hashlimit: size too large, truncated to 1048576 [ 961.754132][T24948] fuse: fd is not a fuse device [ 962.110449][T24572] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 962.133524][T24572] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 962.147339][T24957] xt_hashlimit: size too large, truncated to 1048576 [ 962.155397][T24572] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 962.163480][T24957] xt_hashlimit: max too large, truncated to 1048576 [ 962.173370][T24572] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 962.192414][T24572] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 962.208890][T24572] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 962.223788][T24572] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 962.249482][T24572] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 962.409082][T24572] 8021q: adding VLAN 0 to HW filter on device bond0 [ 962.451176][T24572] 8021q: adding VLAN 0 to HW filter on device team0 [ 962.490614][T12843] bridge0: port 1(bridge_slave_0) entered blocking state [ 962.497856][T12843] bridge0: port 1(bridge_slave_0) entered forwarding state [ 962.546657][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 962.553901][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 963.821970][T24971] loop6: detected capacity change from 0 to 32768 [ 964.089857][ T30] audit: type=1800 audit(964.070:1364): pid=24971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.5698" name="file1" dev="loop6" ino=7 res=0 errno=0 [ 964.661905][T24572] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 965.409754][T25068] x_tables: duplicate underflow at hook 2 [ 965.690051][T24572] veth0_vlan: entered promiscuous mode [ 965.740291][T24572] veth1_vlan: entered promiscuous mode [ 965.819377][ T30] audit: type=1326 audit(965.800:1365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25079 comm="syz.8.5727" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7f04a1796bd7 code=0x0 [ 965.883043][T24572] veth0_macvtap: entered promiscuous mode [ 965.920181][T24572] veth1_macvtap: entered promiscuous mode [ 966.035596][T24572] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 966.094904][T24572] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 966.158062][ T8609] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 966.205869][ T8609] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 966.250420][ T8609] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 966.293084][ T8609] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 966.760455][T20955] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 966.794828][T20955] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 966.911003][ T8605] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 966.941642][ T8605] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 969.190522][T25163] fuse: fd is not a fuse device [ 969.794105][T25197] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5760'. [ 970.177336][T15215] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 970.261205][T25214] Invalid ELF header len 7 [ 970.284680][T25214] Invalid ELF header len 7 [ 970.354575][T15215] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 970.398011][T15215] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 970.447201][T15215] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 970.478110][T15215] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 970.522241][T15215] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 970.560051][T15215] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 970.610508][T15215] usb 7-1: config 0 descriptor?? [ 971.110969][T15215] plantronics 0003:047F:FFFF.0026: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 971.190337][T25242] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 971.301443][T25250] bond0: (slave syz_tun): Releasing backup interface [ 972.019419][ T29] usb 7-1: USB disconnect, device number 15 [ 972.892949][T25279] netlink: 'syz.5.5782': attribute type 1 has an invalid length. [ 973.002535][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 973.277041][ T30] audit: type=1804 audit(973.260:1366): pid=25291 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.5786" name="cgroup.controllers" dev="tmpfs" ino=5688 res=1 errno=0 [ 973.392708][ T30] audit: type=1800 audit(973.290:1367): pid=25291 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5786" name="cgroup.controllers" dev="tmpfs" ino=5688 res=0 errno=0 [ 973.486640][T25295] ref_ctr_offset mismatch. inode: 0x2bf offset: 0x0 ref_ctr_offset(old): 0x2000000000c0 ref_ctr_offset(new): 0x1000000008 [ 975.354680][T25327] loop6: detected capacity change from 0 to 8192 [ 975.420277][T25327] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 975.797433][T25346] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5804'. [ 975.827732][T25346] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5804'. [ 976.431962][T25366] netlink: 'syz.4.5811': attribute type 1 has an invalid length. [ 976.692306][T25373] bond2: (slave dummy0): making interface the new active one [ 976.803102][T25373] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 976.862903][T25376] bond2: entered promiscuous mode [ 976.924033][T25376] dummy0: entered promiscuous mode [ 976.964379][T25365] bond2: left promiscuous mode [ 977.004043][T25365] dummy0: left promiscuous mode [ 978.004580][T25410] netlink: 'syz.4.5822': attribute type 10 has an invalid length. [ 978.027962][T25410] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 978.037281][T25410] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 978.829717][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 978.836995][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 979.057303][ T8609] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.284427][T16585] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 979.306299][T16585] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 979.314525][T16585] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 979.327144][T16585] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 979.335233][T16585] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 979.569525][ T8609] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 980.000608][ T8609] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 980.431171][ T8609] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 981.078371][T25487] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5842'. [ 981.463609][T16585] Bluetooth: hci0: command tx timeout [ 981.514512][T25494] fuse: fd is not a fuse device [ 982.024772][T25527] xt_hashlimit: size too large, truncated to 1048576 [ 982.109923][T25502] cgroup: fork rejected by pids controller in /syz2 [ 982.611976][ T8609] bridge_slave_1: left allmulticast mode [ 982.635294][ T8609] bridge_slave_1: left promiscuous mode [ 982.655734][ T8609] bridge0: port 2(bridge_slave_1) entered disabled state [ 982.689669][ T8609] bridge_slave_0: left allmulticast mode [ 982.714253][ T8609] bridge_slave_0: left promiscuous mode [ 982.734562][ T8609] bridge0: port 1(bridge_slave_0) entered disabled state [ 983.561162][T16585] Bluetooth: hci0: command tx timeout [ 983.666743][ T8609] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 983.686171][ T8609] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 983.703287][ T8609] bond0 (unregistering): Released all slaves [ 983.818225][T25750] fuse: fd is not a fuse device [ 985.158604][ T8609] hsr_slave_0: left promiscuous mode [ 985.186113][ T8609] hsr_slave_1: left promiscuous mode [ 985.198102][ T8609] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 985.213635][ T8609] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 985.247855][ T8609] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 985.264185][ T8609] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 985.338505][ T8609] veth1_macvtap: left promiscuous mode [ 985.373922][ T8609] veth0_macvtap: left promiscuous mode [ 985.406022][ T8609] veth1_vlan: left promiscuous mode [ 985.448209][ T8609] veth0_vlan: left promiscuous mode [ 985.623398][T16585] Bluetooth: hci0: command tx timeout [ 986.454943][T25810] fuse: fd is not a fuse device [ 986.964136][ T8609] team0 (unregistering): Port device team_slave_1 removed [ 987.007030][ T8609] team0 (unregistering): Port device team_slave_0 removed [ 987.483993][T25847] xt_hashlimit: size too large, truncated to 1048576 [ 987.548125][T25819] bond0: (slave bond_slave_0): Releasing backup interface [ 987.610249][T25819] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 987.654839][T25439] bridge0: port 1(bridge_slave_0) entered blocking state [ 987.679743][T25439] bridge0: port 1(bridge_slave_0) entered disabled state [ 987.696555][T25439] bridge_slave_0: entered allmulticast mode [ 987.706030][T16585] Bluetooth: hci0: command tx timeout [ 987.711150][T25439] bridge_slave_0: entered promiscuous mode [ 987.764919][T25439] bridge0: port 2(bridge_slave_1) entered blocking state [ 987.781277][T25439] bridge0: port 2(bridge_slave_1) entered disabled state [ 987.789174][T25439] bridge_slave_1: entered allmulticast mode [ 987.797770][T25439] bridge_slave_1: entered promiscuous mode [ 987.925334][T25439] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 987.981579][T25439] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 988.096012][T25439] team0: Port device team_slave_0 added [ 988.157228][T25439] team0: Port device team_slave_1 added [ 988.347151][T25439] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 988.390591][T25439] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 988.440947][T25439] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 988.514627][T25439] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 988.546139][T25439] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 988.630281][T25439] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 988.891638][T25880] loop6: detected capacity change from 0 to 256 [ 988.905986][T25880] vfat: Unknown parameter 'nonumÖW>tail' [ 989.200497][T25439] hsr_slave_0: entered promiscuous mode [ 989.225648][T25439] hsr_slave_1: entered promiscuous mode [ 989.245236][T25439] debugfs: 'hsr0' already exists in 'hsr' [ 989.261865][T25439] Cannot create hsr debugfs directory [ 989.279059][T25886] uprobe: syz.8.5897:25886 failed to unregister, leaking uprobe [ 989.555952][T25904] lo: Caught tx_queue_len zero misconfig [ 990.634033][T25925] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5909'. [ 990.645979][T25925] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5909'. [ 990.689797][T25925] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5909'. [ 990.704514][T25925] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5909'. [ 990.737012][T25439] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 990.750196][T25439] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 990.786369][T25439] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 990.889484][ T5290] 8021q: adding VLAN 0 to HW filter on device eth9 [ 990.937946][T25931] fuse: fd is not a fuse device [ 991.120714][T25940] overlayfs: failed to clone upperpath [ 991.281431][T25439] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 991.301886][T25439] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 991.333811][T25439] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 991.499362][T25946] fuse: fd is not a fuse device [ 991.676751][T25439] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 991.702149][T25439] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 991.727181][T25439] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 991.841312][T25957] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5921'. [ 991.901768][T25957] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5921'. [ 992.040150][T25439] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 992.090446][T25439] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 992.132212][T25439] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 992.265043][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.271751][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.282380][ T1312] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 992.359454][T25978] netlink: 'syz.6.5927': attribute type 19 has an invalid length. [ 993.239286][T25996] loop6: detected capacity change from 0 to 512 [ 993.307955][ C1] Unknown status report in ack skb [ 993.340878][T25439] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 993.392245][T25439] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 993.423626][T25439] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 993.459719][T25439] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 993.481901][T25439] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 993.563560][T25439] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 993.571916][T25439] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 993.639898][T25439] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 993.934670][ T5290] 8021q: adding VLAN 0 to HW filter on device eth10 [ 994.065250][T26029] fuse: fd is not a fuse device [ 994.125962][T25439] 8021q: adding VLAN 0 to HW filter on device bond0 [ 994.253963][T25439] 8021q: adding VLAN 0 to HW filter on device team0 [ 994.306264][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 994.313541][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 994.375929][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 994.383170][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 994.618269][T26042] loop6: detected capacity change from 0 to 512 [ 994.817088][T26042] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 995.169377][T21715] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 995.793129][T26082] loop6: detected capacity change from 0 to 32768 [ 995.860901][T26082] XFS (loop6): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 995.949030][T26082] XFS (loop6): Ending clean mount [ 995.994807][T26082] XFS (loop6): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 [ 996.006024][T26082] XFS (loop6): Unmount and run xfs_repair [ 996.011749][T26082] XFS (loop6): First 128 bytes of corrupted metadata buffer: [ 996.019295][T26082] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 996.029023][T26082] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 996.038057][T26082] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 996.048471][T26082] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01 .....;%......... [ 996.057646][T26082] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 996.066752][T26082] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 996.075837][T26082] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 996.084763][T26082] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 996.093823][T26082] XFS (loop6): metadata I/O error in "xfs_btree_read_buf_block+0x2b0/0x490" at daddr 0x4 len 4 error 74 [ 996.211515][T25439] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 996.227198][T21715] XFS (loop6): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 996.328104][T21715] XFS (loop6): Uncorrected metadata errors detected; please run xfs_repair. [ 996.476034][T25439] veth0_vlan: entered promiscuous mode [ 996.588029][T25439] veth1_vlan: entered promiscuous mode [ 996.775127][T25439] veth0_macvtap: entered promiscuous mode [ 996.821543][T25439] veth1_macvtap: entered promiscuous mode [ 996.909554][T25439] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 996.977730][T25439] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 997.061714][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 997.107331][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 997.132043][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 997.156784][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 997.386720][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 997.575807][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 997.611663][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 997.765296][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 997.813715][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 997.902559][ T5759] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 998.009976][T26145] netlink: 'syz.8.5968': attribute type 1 has an invalid length. [ 998.093249][ T5759] usb 7-1: Using ep0 maxpacket: 32 [ 998.132894][ T5759] usb 7-1: config 0 has an invalid interface number: 89 but max is 0 [ 998.186432][ T5759] usb 7-1: config 0 has no interface number 0 [ 998.236886][ T5759] usb 7-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 998.253890][T26145] 8021q: adding VLAN 0 to HW filter on device bond2 [ 998.304671][ T5759] usb 7-1: config 0 interface 89 has no altsetting 0 [ 998.358752][T26155] netlink: 'syz.8.5968': attribute type 10 has an invalid length. [ 998.364899][ T5759] usb 7-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 998.390356][T26155] netlink: 40 bytes leftover after parsing attributes in process `syz.8.5968'. [ 998.418202][ T5759] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 998.479097][ T5759] usb 7-1: Product: syz [ 998.505467][ T5759] usb 7-1: Manufacturer: syz [ 998.545493][ T5759] usb 7-1: SerialNumber: syz [ 998.546403][T26150] bond2: (slave veth3): Enslaving as a backup interface with a down link [ 998.593842][ T5759] usb 7-1: config 0 descriptor?? [ 998.616288][ T5759] em28xx 7-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 998.641751][ T5759] em28xx 7-1:0.89: Video interface 89 found: [ 999.254972][ T5759] em28xx 7-1:0.89: unknown em28xx chip ID (0) [ 999.577058][ T5290] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1000.023935][ T5759] em28xx 7-1:0.89: board has no eeprom [ 1000.282616][ T5759] em28xx 7-1:0.89: Identified as Terratec Grabby (card=67) [ 1000.312301][ T5759] em28xx 7-1:0.89: analog set to bulk mode. [ 1000.339203][ T802] em28xx 7-1:0.89: Registering V4L2 extension [ 1000.392085][ T5759] usb 7-1: USB disconnect, device number 16 [ 1000.443454][ T5759] em28xx 7-1:0.89: Disconnecting em28xx [ 1000.556947][T26199] fuse: fd is not a fuse device [ 1000.755006][ T802] em28xx 7-1:0.89: Config register raw data: 0xffffffed [ 1000.801719][ T802] em28xx 7-1:0.89: AC97 chip type couldn't be determined [ 1000.842169][T26206] fuse: fd is not a fuse device [ 1000.851097][ T802] em28xx 7-1:0.89: No AC97 audio processor [ 1001.135916][ T802] usb 7-1: Decoder not found [ 1001.164379][ T802] em28xx 7-1:0.89: failed to create media graph [ 1001.184603][ T802] em28xx 7-1:0.89: V4L2 device video103 deregistered [ 1001.352785][ T802] em28xx 7-1:0.89: Registering snapshot button... [ 1001.399611][ T802] input: em28xx snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.89/input/input47 [ 1001.498436][ T802] em28xx 7-1:0.89: Remote control support is not available for this card. [ 1001.517662][ T5759] em28xx 7-1:0.89: Closing input extension [ 1001.530784][ T5759] em28xx 7-1:0.89: Deregistering snapshot button [ 1001.780494][T26242] syz.4.5993 (26242): attempted to duplicate a private mapping with mremap. This is not supported. [ 1001.867317][ T5759] em28xx 7-1:0.89: Freeing device [ 1002.379741][T26264] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5999'. [ 1003.580583][ T5759] libceph: connect (1)[c::]:6789 error -101 [ 1003.605242][ T5759] libceph: mon0 (1)[c::]:6789 connect error [ 1003.625809][T26291] ceph: No mds server is up or the cluster is laggy [ 1003.709360][T26301] team_slave_1: Caught tx_queue_len zero misconfig [ 1003.814328][ T5290] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1006.943426][T26402] loop6: detected capacity change from 0 to 512 [ 1007.026765][T26402] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1007.195197][ T30] audit: type=1800 audit(1007.170:1368): pid=26402 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.6041" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 1007.268303][T26411] fuse: fd is not a fuse device [ 1007.591710][T21715] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1007.880467][T26429] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6046'. [ 1007.945888][T26429] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6046'. [ 1007.946315][T20955] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1008.027102][T20955] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1008.075404][T20955] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1008.119285][T20955] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1008.833899][T26441] loop6: detected capacity change from 0 to 32768 [ 1008.849368][T26441] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1008.858221][T26441] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1008.904379][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1008.911653][ C0] bridge0: topology change detected, propagating [ 1008.918505][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1008.918793][T26446] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1008.925742][ C0] bridge0: topology change detected, propagating [ 1008.987400][T26441] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 1009.015413][ T10] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 1009.051650][ T10] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 1009.309998][T26457] fuse: fd is not a fuse device [ 1009.540043][ T10] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 488ms [ 1009.583364][ T10] gfs2: fsid=syz:syz.0: jid=0: Done [ 1009.627558][T26441] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 1010.960888][T26495] bond0: (slave team0): Releasing backup interface [ 1011.005964][T26499] netlink: 'syz.8.6069': attribute type 10 has an invalid length. [ 1011.102303][T26495] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1011.232198][T26499] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1011.275766][T26499] team0: Port device bond0 added [ 1011.391712][ T30] audit: type=1326 audit(1011.370:1369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26504 comm="syz.6.6066" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5b7b9ce59 code=0x7ffc0000 [ 1011.460319][T26509] fuse: fd is not a fuse device [ 1011.477488][ T30] audit: type=1326 audit(1011.370:1370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26504 comm="syz.6.6066" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5b7b9ce59 code=0x7ffc0000 [ 1011.560557][ T30] audit: type=1326 audit(1011.420:1371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26504 comm="syz.6.6066" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fb5b7b9ce59 code=0x7ffc0000 [ 1011.643319][ T30] audit: type=1326 audit(1011.420:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26504 comm="syz.6.6066" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5b7b9ce59 code=0x7ffc0000 [ 1011.737870][ T30] audit: type=1326 audit(1011.420:1373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26504 comm="syz.6.6066" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5b7b9ce59 code=0x7ffc0000 [ 1011.767288][T19236] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1011.787882][ T30] audit: type=1326 audit(1011.420:1374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26504 comm="syz.6.6066" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fb5b7b9ce59 code=0x7ffc0000 [ 1011.846980][ T30] audit: type=1326 audit(1011.420:1375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26504 comm="syz.6.6066" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5b7b9ce59 code=0x7ffc0000 [ 1011.906463][ T30] audit: type=1326 audit(1011.420:1376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26504 comm="syz.6.6066" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5b7b9ce59 code=0x7ffc0000 [ 1012.005842][ T30] audit: type=1326 audit(1011.430:1377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26504 comm="syz.6.6066" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb5b7b9ce59 code=0x7ffc0000 [ 1012.123856][T26529] kernel read not supported for file /file1 (pid: 26529 comm: syz.1.6080) [ 1013.012959][T16585] Bluetooth: hci5: unexpected event for opcode 0x0c6d [ 1013.600292][T26564] fuse: fd is not a fuse device [ 1015.086864][T26581] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1016.146378][T26598] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6104'. [ 1016.434569][T26610] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6109'. [ 1016.482520][ T5644] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 1016.664897][ T5644] usb 7-1: config 150 has an invalid interface number: 204 but max is 2 [ 1016.674142][ T5644] usb 7-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config [ 1016.713289][ T5644] usb 7-1: config 150 has 1 interface, different from the descriptor's value: 3 [ 1016.741431][ T5644] usb 7-1: config 150 has no interface number 0 [ 1016.772565][ T5644] usb 7-1: config 150 interface 204 has no altsetting 0 [ 1016.796357][ T5644] usb 7-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 1016.811042][ T5644] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1016.837701][ T5644] usb 7-1: Product: syz [ 1016.852790][ T5644] usb 7-1: Manufacturer: syz [ 1016.853237][T26624] syz_tun: entered allmulticast mode [ 1016.869177][ T5644] usb 7-1: SerialNumber: syz [ 1016.943370][T26622] syz_tun: left allmulticast mode [ 1017.139664][ T5644] usb 7-1: USB disconnect, device number 17 [ 1017.159549][T26631] fuse: fd is not a fuse device [ 1017.329165][T26635] netlink: 'syz.2.6120': attribute type 4 has an invalid length. [ 1018.526920][T26655] loop1: detected capacity change from 0 to 40427 [ 1018.541433][T26655] F2FS-fs (loop1): invalid crc value [ 1018.673952][T26655] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1018.690597][T26655] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1018.792708][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 1018.792729][ T30] audit: type=1800 audit(1018.770:1386): pid=26655 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6127" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 1018.823586][T26655] syz.1.6127: attempt to access beyond end of device [ 1018.823586][T26655] loop1: rw=34817, sector=77824, nr_sectors = 8 limit=40427 [ 1018.946992][T25439] syz-executor: attempt to access beyond end of device [ 1018.946992][T25439] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1019.047102][T25439] CPU: 0 UID: 0 PID: 25439 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 1019.047142][T25439] Tainted: [L]=SOFTLOCKUP [ 1019.047153][T25439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1019.047169][T25439] Call Trace: [ 1019.047179][T25439] [ 1019.047190][T25439] dump_stack_lvl+0xe8/0x150 [ 1019.047227][T25439] f2fs_stop_checkpoint+0x3c7/0x590 [ 1019.047269][T25439] f2fs_write_end_io+0x1274/0x1740 [ 1019.047336][T25439] __submit_merged_bio+0x256/0x6a0 [ 1019.047383][T25439] __submit_merged_write_cond+0x3c9/0x4e0 [ 1019.047428][T25439] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 1019.047477][T25439] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1019.047521][T25439] f2fs_write_data_pages+0x287e/0x34f0 [ 1019.047559][T25439] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1019.047634][T25439] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1019.047670][T25439] ? is_bpf_text_address+0x26/0x2b0 [ 1019.047713][T25439] ? arch_stack_walk+0xfb/0x150 [ 1019.047781][T25439] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1019.047816][T25439] ? add_lock_to_list+0xc7/0x100 [ 1019.047853][T25439] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1019.047883][T25439] ? __lock_acquire+0x146e/0x2cf0 [ 1019.047946][T25439] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1019.047975][T25439] ? do_raw_spin_lock+0x12b/0x2f0 [ 1019.048027][T25439] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1019.048062][T25439] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1019.048091][T25439] ? do_raw_spin_unlock+0xf5/0x210 [ 1019.048130][T25439] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1019.048170][T25439] do_writepages+0x32e/0x550 [ 1019.048201][T25439] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1019.048234][T25439] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1019.048270][T25439] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1019.048300][T25439] ? do_raw_spin_unlock+0xf5/0x210 [ 1019.048344][T25439] filemap_fdatawrite+0x1e9/0x2f0 [ 1019.048380][T25439] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 1019.048455][T25439] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1019.048488][T25439] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1019.048524][T25439] ? do_raw_spin_unlock+0xf5/0x210 [ 1019.048567][T25439] f2fs_sync_dirty_inodes+0x30e/0x830 [ 1019.048628][T25439] f2fs_write_checkpoint+0x9df/0x26a0 [ 1019.048669][T25439] ? __lock_acquire+0x6b5/0x2cf0 [ 1019.048736][T25439] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 1019.048774][T25439] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1019.048871][T25439] kill_f2fs_super+0x314/0x730 [ 1019.048917][T25439] ? __pfx_kill_f2fs_super+0x10/0x10 [ 1019.048969][T25439] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1019.048999][T25439] ? lockdep_hardirqs_on+0x7a/0x110 [ 1019.049034][T25439] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1019.049082][T25439] deactivate_locked_super+0xbc/0x130 [ 1019.049121][T25439] cleanup_mnt+0x437/0x4d0 [ 1019.049159][T25439] ? _raw_spin_unlock_irq+0x23/0x50 [ 1019.049204][T25439] task_work_run+0x1d9/0x270 [ 1019.049246][T25439] ? __pfx_task_work_run+0x10/0x10 [ 1019.049296][T25439] exit_to_user_mode_loop+0x193/0x680 [ 1019.049322][T25439] ? rcu_is_watching+0x15/0xb0 [ 1019.049355][T25439] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1019.049384][T25439] do_syscall_64+0x353/0x580 [ 1019.049410][T25439] ? trace_irq_disable+0x3b/0x140 [ 1019.049458][T25439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1019.049484][T25439] RIP: 0033:0x7f570359e097 [ 1019.049507][T25439] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 1019.049529][T25439] RSP: 002b:00007ffffbdad828 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1019.049555][T25439] RAX: 0000000000000000 RBX: 00007f57036321ca RCX: 00007f570359e097 [ 1019.049573][T25439] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffffbdad8e0 [ 1019.049590][T25439] RBP: 00007ffffbdad8e0 R08: 00007ffffbdae8e0 R09: 00000000ffffffff [ 1019.049608][T25439] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffffbdae970 [ 1019.049626][T25439] R13: 00007f57036321ca R14: 00000000000f8bcc R15: 00007ffffbdae9b0 [ 1019.049668][T25439] [ 1019.493796][T25439] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 1019.623235][T26694] fuse: fd is not a fuse device [ 1019.642058][T26690] netlink: 'syz.6.6139': attribute type 2 has an invalid length. [ 1020.028203][T26704] fuse: fd is not a fuse device [ 1020.117026][T26708] fuse: fd is not a fuse device [ 1020.251896][T26705] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1020.402964][T26718] netlink: 168 bytes leftover after parsing attributes in process `syz.2.6148'. [ 1020.441146][ T30] audit: type=1800 audit(1020.420:1387): pid=26717 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.6150" name="bus" dev="tmpfs" ino=4745 res=0 errno=0 [ 1020.711027][T26724] overlayfs: failed to clone upperpath [ 1020.993681][T26733] netlink: 'syz.6.6155': attribute type 4 has an invalid length. [ 1021.058514][T26733] netlink: 'syz.6.6155': attribute type 4 has an invalid length. [ 1021.264987][T26737] VFS: Mount too revealing [ 1021.398797][T26743] loop2: detected capacity change from 0 to 7 [ 1021.442595][T26743] loop2: p1 [ 1021.457405][T26743] loop2: partition table partially beyond EOD, truncated [ 1021.495056][T26743] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 1021.659050][ T5886] udevd[5886]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 1021.832702][ T5644] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1022.002696][ T5644] usb 2-1: Using ep0 maxpacket: 16 [ 1022.023171][ T5644] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 1022.055178][ T5644] usb 2-1: config 0 has no interface number 0 [ 1022.059112][T26759] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6166'. [ 1022.101779][ T5644] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 1022.158607][ T5644] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 1022.213235][ T5644] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 1022.240798][ T5644] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1022.283968][ T5644] usb 2-1: Product: syz [ 1022.301580][ T5644] usb 2-1: Manufacturer: syz [ 1022.316901][ T5644] usb 2-1: SerialNumber: syz [ 1022.344330][ T5644] usb 2-1: config 0 descriptor?? [ 1022.365427][T26747] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1022.380521][T26747] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1022.803332][T26747] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1022.907320][T26747] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1023.259009][ T5644] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1024.837220][T26806] netlink: 'syz.4.6177': attribute type 2 has an invalid length. [ 1024.884791][ T5644] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1024.960963][ T5644] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 1025.031055][ T5644] asix 2-1:0.34: probe with driver asix failed with error -71 [ 1025.151677][T26814] team0: Caught tx_queue_len zero misconfig [ 1025.164740][ T5644] usb 2-1: USB disconnect, device number 41 [ 1025.165788][ T30] audit: type=1326 audit(1025.150:1388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26810 comm="syz.2.6178" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69c1b9ce59 code=0x7ffc0000 [ 1025.309339][ T30] audit: type=1326 audit(1025.180:1390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26810 comm="syz.2.6178" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69c1b9ce59 code=0x7ffc0000 [ 1025.459772][ T30] audit: type=1326 audit(1025.180:1391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26810 comm="syz.2.6178" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69c1b9ce59 code=0x7ffc0000 [ 1025.500585][T26821] netlink: 'syz.8.6180': attribute type 1 has an invalid length. [ 1025.591830][ T30] audit: type=1326 audit(1025.180:1389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26810 comm="syz.2.6178" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69c1b9ce59 code=0x7ffc0000 [ 1025.721305][ T30] audit: type=1326 audit(1025.180:1392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26810 comm="syz.2.6178" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f69c1b9ce59 code=0x7ffc0000 [ 1025.825211][ T30] audit: type=1326 audit(1025.260:1393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26810 comm="syz.2.6178" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69c1b9ce59 code=0x7ffc0000 [ 1025.929656][ T30] audit: type=1326 audit(1025.260:1394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26810 comm="syz.2.6178" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f69c1b9cbc2 code=0x7ffc0000 [ 1026.047963][ T30] audit: type=1326 audit(1025.260:1395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26810 comm="syz.2.6178" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f69c1b9cc57 code=0x7ffc0000 [ 1026.134709][ T30] audit: type=1326 audit(1025.260:1396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26810 comm="syz.2.6178" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f69c1b59b51 code=0x7ffc0000 [ 1026.269654][ T30] audit: type=1326 audit(1025.260:1397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26810 comm="syz.2.6178" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f69c1b9dc49 code=0x7ffc0000 [ 1026.378254][T26821] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1026.583434][T26823] bond3: (slave geneve3): making interface the new active one [ 1026.633515][T26823] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 1027.280645][ T5644] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 1027.833375][T26875] netlink: 'syz.2.6193': attribute type 12 has an invalid length. [ 1028.307853][T26885] fuse: fd is not a fuse device [ 1028.851134][ T5644] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1028.894493][ T5644] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1028.935441][ T5644] usb 2-1: can't read configurations, error -71 [ 1030.185611][ T30] kauditd_printk_skb: 76 callbacks suppressed [ 1030.185632][ T30] audit: type=1800 audit(1030.170:1474): pid=26911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.6201" name="bus" dev="tmpfs" ino=1006 res=0 errno=0 [ 1030.767898][T26925] fuse: fd is not a fuse device [ 1031.210754][T26936] fuse: fd is not a fuse device [ 1032.283084][T26949] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6212'. [ 1033.851606][T27004] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6228'. [ 1033.970226][T27004] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6228'. [ 1034.591006][T27023] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1034.682976][T27033] loop1: detected capacity change from 0 to 32768 [ 1034.690277][T27033] btrfs: Deprecated parameter 'usebackuproot' [ 1034.696401][T27033] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 1034.729522][T27033] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.6237 (27033) [ 1034.768455][T27033] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1034.781997][T27033] BTRFS info (device loop1): using crc32c checksum algorithm [ 1035.107579][T12848] BTRFS warning (device loop1): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 1035.135078][T27057] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6240'. [ 1035.145335][T27025] bond4: (slave veth5): Enslaving as an active interface with an up link [ 1035.205205][T27057] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6240'. [ 1035.299950][T27033] BTRFS error (device loop1): failed to load root extent [ 1035.311150][T27033] BTRFS warning (device loop1): try to load backup roots slot 1 [ 1035.319226][T12848] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 1035.345093][T27026] bond2: (slave dummy0): Releasing active interface [ 1035.388798][T27033] BTRFS warning (device loop1): couldn't read tree root [ 1035.396183][T27033] BTRFS warning (device loop1): try to load backup roots slot 2 [ 1035.404413][T12846] BTRFS error (device loop1): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 1035.451732][T27026] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 1035.515951][T27033] BTRFS warning (device loop1): couldn't read tree root [ 1035.524426][T27033] BTRFS warning (device loop1): try to load backup roots slot 3 [ 1035.581391][T27033] BTRFS info (device loop1): rebuilding free space tree [ 1035.612952][T27033] BTRFS info (device loop1): checking UUID tree [ 1035.621107][T27033] BTRFS info (device loop1): enabling ssd optimizations [ 1035.628986][T27033] BTRFS info (device loop1): turning on async discard [ 1035.635903][T27033] BTRFS info (device loop1): enabling free space tree [ 1035.642725][T27033] BTRFS info (device loop1): force clearing of disk cache [ 1035.649843][T27033] BTRFS info (device loop1): enabling auto defrag [ 1035.656354][T27033] BTRFS info (device loop1): trying to use backup root at mount time [ 1035.664461][T27033] BTRFS info (device loop1): use zlib compression, level 3 [ 1036.140952][T25439] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1036.296154][T27081] unsupported nlmsg_type 40 [ 1036.761043][ T5798] kernel read not supported for file [fscontext] (pid: 5798 comm: kworker/0:6) [ 1036.983170][ T5644] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1037.207349][ T5644] usb 7-1: Using ep0 maxpacket: 32 [ 1037.235687][ T5644] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1037.277390][T27113] bond5: (slave ip6gretap2): making interface the new active one [ 1037.294526][ T5644] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1037.370943][ T5644] usb 7-1: New USB device found, idVendor=25dd, idProduct=f3d2, bcdDevice=d2.37 [ 1037.403139][T27113] bond5: (slave ip6gretap2): Enslaving as an active interface with an up link [ 1037.406593][ T5644] usb 7-1: New USB device strings: Mfr=84, Product=45, SerialNumber=0 [ 1037.462078][ T5644] usb 7-1: Product: syz [ 1037.492460][ T5644] usb 7-1: Manufacturer: syz [ 1037.605146][ T5644] usb 7-1: config 0 descriptor?? [ 1038.169904][ T5644] hid-generic 0003:25DD:F3D2.0027: hiddev0,hidraw0: USB HID v0.00 Device [syz syz] on usb-dummy_hcd.6-1/input0 [ 1038.357132][ T5798] usb 7-1: USB disconnect, device number 18 [ 1038.565095][T27151] fido_id[27151]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 1039.285619][T27174] uprobe: syz.8.6270:27174 failed to unregister, leaking uprobe [ 1039.355193][ T5798] usb 7-1: new full-speed USB device number 19 using dummy_hcd [ 1039.557314][ T5798] usb 7-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x3B, changing to 0xB [ 1039.619646][ T5798] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0xB has invalid maxpacket 32454, setting to 64 [ 1039.695996][ T5798] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1039.738132][ T5798] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1039.772113][ T5798] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1039.809634][ T5798] usb 7-1: Product: syz [ 1039.820497][ T5798] usb 7-1: Manufacturer: syz [ 1039.830103][ T5798] usb 7-1: SerialNumber: syz [ 1039.864504][ T5798] usb 7-1: config 0 descriptor?? [ 1039.878508][T27169] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1039.889572][T27194] netlink: 'syz.1.6276': attribute type 10 has an invalid length. [ 1039.905259][T27194] team0: Port device dummy0 added [ 1039.912899][ T5798] usb 7-1: selecting invalid altsetting 0 [ 1040.520832][ T5798] usb 7-1: USB disconnect, device number 19 [ 1040.810264][T27207] fuse: fd is not a fuse device [ 1041.011883][ T7497] udevd[7497]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1041.091008][T27210] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6285'. [ 1041.095269][T27215] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6286'. [ 1041.102314][T27211] loop1: detected capacity change from 0 to 512 [ 1041.128908][T27215] netlink: 'syz.2.6286': attribute type 5 has an invalid length. [ 1041.139269][T27215] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6286'. [ 1041.182293][T27211] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1041.351240][T27201] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1041.405651][T27201] 8021q: adding VLAN 0 to HW filter on device team0 [ 1041.502546][T27201] bridge0: port 3(vlan2) entered blocking state [ 1041.510388][T27201] bridge0: port 3(vlan2) entered forwarding state [ 1041.615240][T27211] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1041.735220][T27201] veth1_vlan: left promiscuous mode [ 1041.748754][T27201] veth0_vlan: left promiscuous mode [ 1041.762238][T27201] veth0_vlan: entered promiscuous mode [ 1041.791792][T27201] veth1_vlan: entered promiscuous mode [ 1041.881940][T27201] veth1_macvtap: left promiscuous mode [ 1041.905213][T27201] veth0_macvtap: left promiscuous mode [ 1041.929272][T27201] veth0_macvtap: entered promiscuous mode [ 1041.963593][T27201] veth1_macvtap: entered promiscuous mode [ 1042.000924][T27201] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1042.053623][T27201] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1042.069187][T27201] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1042.171088][T27201] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 1042.236910][T27215] geneve3: entered promiscuous mode [ 1042.257344][T27215] geneve3: entered allmulticast mode [ 1042.279569][T27219] bridge1: port 1(veth0_to_bond) entered blocking state [ 1042.295328][T27219] bridge1: port 1(veth0_to_bond) entered disabled state [ 1042.318068][T27219] veth0_to_bond: entered allmulticast mode [ 1042.348467][T27219] veth0_to_bond: entered promiscuous mode [ 1042.368668][T27219] bridge1: port 1(veth0_to_bond) entered blocking state [ 1042.375817][T27219] bridge1: port 1(veth0_to_bond) entered forwarding state [ 1042.418666][ T8612] bridge0: port 1(bridge_slave_0) entered blocking state [ 1042.425942][ T8612] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1042.458282][ T8612] bridge0: port 2(bridge_slave_1) entered blocking state [ 1042.465475][ T8612] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1042.675849][T12848] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1042.698872][T12848] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1042.738350][T12848] netdevsim netdevsim7 netdevsim0: set [1, 1] type 2 family 0 port 38260 - 0 [ 1042.779581][T12848] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1042.821424][T12848] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1042.861411][T12848] netdevsim netdevsim7 netdevsim1: set [1, 1] type 2 family 0 port 38260 - 0 [ 1042.971697][T12848] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1043.025630][T12848] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1043.075328][T12848] netdevsim netdevsim7 netdevsim2: set [1, 1] type 2 family 0 port 38260 - 0 [ 1043.119322][T12848] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1043.159268][T12848] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1043.214154][T12848] netdevsim netdevsim7 netdevsim3: set [1, 1] type 2 family 0 port 38260 - 0 [ 1043.261005][T12848] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 43364 - 0 [ 1043.316080][T12848] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 43364 - 0 [ 1043.357397][T12848] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 43364 - 0 [ 1043.370721][T27262] 9p: Bad value for 'rfdno' [ 1043.450526][T12848] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 43364 - 0 [ 1043.608689][T27265] netlink: 'syz.8.6304': attribute type 83 has an invalid length. [ 1043.644969][T27268] fuse: fd is not a fuse device [ 1044.931016][T27299] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6317'. [ 1046.038093][T27325] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1046.071520][T27325] overlayfs: failed to set xattr on upper [ 1046.097765][T27325] overlayfs: ...falling back to redirect_dir=nofollow. [ 1046.100136][T27327] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1046.137492][T27325] overlayfs: ...falling back to index=off. [ 1046.167156][T27325] overlayfs: ...falling back to uuid=null. [ 1046.324115][T27329] fuse: fd is not a fuse device [ 1046.736498][T27338] xt_hashlimit: size too large, truncated to 1048576 [ 1046.877310][T27345] loop6: detected capacity change from 0 to 2048 [ 1046.928212][T27345] UDF-fs: error (device loop6): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 1046.970028][T27345] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 1047.054362][T27345] UDF-fs: Scanning with blocksize 512 failed [ 1047.104020][T27353] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6334'. [ 1047.150907][T27354] netlink: 'syz.8.6336': attribute type 1 has an invalid length. [ 1047.291626][T27345] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1047.768060][T27365] fuse: fd is not a fuse device [ 1047.920204][T27372] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6341'. [ 1047.937392][T27372] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6341'. [ 1049.337704][ T30] audit: type=1326 audit(1049.320:1475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27385 comm="syz.4.6345" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2085b9ce59 code=0x0 [ 1049.983622][T27401] fuse: fd is not a fuse device [ 1050.825506][T27414] overlayfs: failed to clone lowerpath [ 1053.723683][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1053.730051][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1053.737091][ T1312] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1057.966195][T27460] overlayfs: failed to clone upperpath [ 1059.697322][T27497] fuse: fd is not a fuse device [ 1060.237541][T27515] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1060.430453][T27515] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1060.573308][T27520] erspan0: entered promiscuous mode [ 1060.604540][T27520] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6385'. [ 1060.850574][T27532] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6391'. [ 1061.089210][T27539] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6394'. [ 1061.238080][T27542] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000 [ 1062.668614][T27572] netlink: 32 bytes leftover after parsing attributes in process `syz.8.6406'. [ 1062.754573][T27574] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6407'. [ 1062.769143][T27572] netlink: 32 bytes leftover after parsing attributes in process `syz.8.6406'. [ 1064.424419][T27603] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6418'. [ 1064.696629][T27611] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6421'. [ 1064.979615][T27615] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 1065.032867][T27620] netlink: 'syz.2.6424': attribute type 1 has an invalid length. [ 1065.273101][T27624] bond2: (slave bridge3): making interface the new active one [ 1065.294440][T27624] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 1065.400252][T27636] netlink: 'syz.7.6428': attribute type 1 has an invalid length. [ 1065.691960][T27636] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1066.373490][T27645] IPVS: Scheduler module ip_vs_sip not found [ 1066.470219][T27640] bond3: (slave bridge1): making interface the new active one [ 1066.577846][T27640] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 1067.605196][T27644] bond3: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1068.238439][T27658] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 1068.543943][T27667] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6438'. [ 1070.322832][T27706] netlink: 'syz.4.6456': attribute type 39 has an invalid length. [ 1070.400957][T27710] fuse: Bad value for 'fd' [ 1072.881285][T27760] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6473'. [ 1073.040262][T27764] xt_hashlimit: size too large, truncated to 1048576 [ 1073.275822][T27771] loop6: detected capacity change from 0 to 4096 [ 1073.422228][T27771] ntfs3(loop6): ino=1a, mi_enum_attr [ 1073.442816][T27771] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 1074.549425][T27794] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6484'. [ 1074.604065][T27795] netlink: 76 bytes leftover after parsing attributes in process `syz.4.6484'. [ 1074.673533][T16585] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 1074.682911][T16585] Bluetooth: hci0: Injecting HCI hardware error event [ 1074.697498][ T5634] Bluetooth: hci0: hardware error 0x00 [ 1074.715984][T27794] bridge0: port 2(bridge_slave_1) entered disabled state [ 1074.723331][T27794] bridge0: port 1(bridge_slave_0) entered disabled state [ 1074.733427][T27799] xt_hashlimit: size too large, truncated to 1048576 [ 1074.765278][T27795] bridge0: port 2(bridge_slave_1) entered blocking state [ 1074.772624][T27795] bridge0: port 2(bridge_slave_1) entered listening state [ 1074.780066][T27795] bridge0: port 1(bridge_slave_0) entered blocking state [ 1074.787297][T27795] bridge0: port 1(bridge_slave_0) entered listening state [ 1074.815766][T27795] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6484'. [ 1074.869221][T27795] bridge0: port 2(bridge_slave_1) entered disabled state [ 1074.876584][T27795] bridge0: port 1(bridge_slave_0) entered disabled state [ 1074.877660][T19236] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1075.158846][T27815] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6493'. [ 1075.220954][T27815] hsr_slave_0 (unregistering): left promiscuous mode [ 1075.464268][T27825] fuse: fd is not a fuse device [ 1075.693804][T27840] overlayfs: failed to clone upperpath [ 1076.331197][T27846] loop6: detected capacity change from 0 to 32768 [ 1076.351450][T27846] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1076.359763][T27846] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1076.441584][T27846] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 1076.454406][ T5644] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 1076.476734][ T5644] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 1076.878167][ T5644] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 401ms [ 1076.894733][ T5644] gfs2: fsid=syz:syz.0: jid=0: Done [ 1076.895686][T27870] syz_tun: entered allmulticast mode [ 1076.901072][T27846] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 1076.907126][ T5634] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1076.999691][T27870] syz_tun: left allmulticast mode [ 1079.504757][T27923] fuse: fd is not a fuse device [ 1079.821318][T27931] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6537'. [ 1079.986048][T27939] syz_tun: entered allmulticast mode [ 1080.110566][T27945] random: crng reseeded on system resumption [ 1080.323110][T27946] syz_tun: left allmulticast mode [ 1082.895063][T27987] bridge0: port 4(vlan3) entered blocking state [ 1082.927689][T27987] bridge0: port 4(vlan3) entered disabled state [ 1082.980286][T27987] vlan3: entered allmulticast mode [ 1083.040137][T27987] vlan3: entered promiscuous mode [ 1083.176118][T27989] team0: left allmulticast mode [ 1083.216083][T27989] team_slave_0: left allmulticast mode [ 1083.253841][T27989] team_slave_1: left allmulticast mode [ 1083.282196][T27989] batadv0: left allmulticast mode [ 1083.327041][T27994] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6559'. [ 1083.338989][T27989] team0: left promiscuous mode [ 1083.361601][T27989] team_slave_0: left promiscuous mode [ 1083.375438][T27994] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6559'. [ 1083.382777][T27989] team_slave_1: left promiscuous mode [ 1083.414352][T27989] batadv0: left promiscuous mode [ 1083.438950][T27989] bridge0: port 3(team0) entered disabled state [ 1083.538803][T27989] team0: Port device batadv0 removed [ 1083.585789][T27989] bridge0: port 1(bridge_slave_0) entered disabled state [ 1083.661933][T27989] bridge_slave_1: left allmulticast mode [ 1083.687551][T27989] bridge_slave_1: left promiscuous mode [ 1083.708779][T27989] bridge0: port 2(bridge_slave_1) entered disabled state [ 1083.971637][T28005] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6564'. [ 1084.014359][T28005] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6564'. [ 1084.220797][T28009] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6564'. [ 1084.757900][T27989] vlan3: left promiscuous mode [ 1084.907484][T27989] bridge_slave_0: left promiscuous mode [ 1085.299471][T27989] bond0: (slave bond_slave_0): Releasing backup interface [ 1085.382969][T27989] bond0: (slave bond_slave_1): Releasing backup interface [ 1085.497299][T27989] team0: Port device team_slave_0 removed [ 1085.539797][T27989] team0: Port device team_slave_1 removed [ 1085.561262][T28022] netlink: 168 bytes leftover after parsing attributes in process `syz.7.6570'. [ 1085.562512][T27989] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1085.589346][T27989] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1085.615085][T27989] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1085.624456][T27989] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1085.639655][T27989] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1085.789005][T20956] bridge_slave_1: left allmulticast mode [ 1085.802334][T20956] bridge_slave_1: left promiscuous mode [ 1085.820491][T20956] bridge0: port 2(bridge_slave_1) entered disabled state [ 1085.849992][T20956] bridge_slave_0: left allmulticast mode [ 1085.857945][T20956] bridge_slave_0: left promiscuous mode [ 1085.865100][T20956] bridge0: port 1(bridge_slave_0) entered disabled state [ 1085.875961][T28033] fuse: fd is not a fuse device [ 1085.876410][T28034] netlink: 'syz.6.6572': attribute type 13 has an invalid length. [ 1086.314695][T20956] bond3 (unregistering): (slave gretap1): Releasing backup interface [ 1086.450294][T20956] bond0 (unregistering): Released all slaves [ 1086.483622][T20956] bond1 (unregistering): Released all slaves [ 1086.510331][T20956] bond2 (unregistering): (slave veth3): Releasing backup interface [ 1086.520800][T20956] bond2 (unregistering): Released all slaves [ 1086.549874][T20956] bond3 (unregistering): Released all slaves [ 1086.574416][T20956] bond4 (unregistering): Released all slaves [ 1086.601080][T28035] syz_tun: entered allmulticast mode [ 1086.822243][T28051] fuse: fd is not a fuse device [ 1087.042577][T28029] syz_tun: left allmulticast mode [ 1087.054641][T28055] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6582'. [ 1087.139654][T28059] netlink: 'syz.6.6584': attribute type 1 has an invalid length. [ 1088.191967][T28071] overlayfs: failed to clone upperpath [ 1088.268635][T28059] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6584'. [ 1088.289384][T28068] bond1: (slave gretap1): making interface the new active one [ 1088.319981][T28068] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1088.406668][T28059] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1089.086608][T20956] hsr_slave_0: left promiscuous mode [ 1089.162103][T20956] hsr_slave_1: left promiscuous mode [ 1089.531361][T20956] veth1_macvtap: left promiscuous mode [ 1089.580515][T20956] veth0_macvtap: left promiscuous mode [ 1089.619876][T20956] veth1_vlan: left promiscuous mode [ 1089.673686][T20956] veth0_vlan: left promiscuous mode [ 1090.628358][T28127] loop6: detected capacity change from 0 to 128 [ 1090.678734][T28127] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1090.862055][T28127] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1091.317640][T20956] team0 (unregistering): Port device team_slave_1 removed [ 1091.396791][T20956] team0 (unregistering): Port device team_slave_0 removed [ 1091.757206][T28151] fuse: fd is not a fuse device [ 1092.730005][T28177] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6622'. [ 1093.009923][T28183] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6622'. [ 1093.043259][T28180] netlink: 14 bytes leftover after parsing attributes in process `syz.6.6620'. [ 1093.779473][T20956] IPVS: stop unused estimator thread 0... [ 1094.177178][T28212] fuse: fd is not a fuse device [ 1094.938875][T28218] netlink: 'syz.6.6636': attribute type 1 has an invalid length. [ 1095.008248][T28218] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1095.102336][T28221] veth0_virt_wifi: entered promiscuous mode [ 1095.188353][T28221] bond2: (slave veth0_virt_wifi): making interface the new active one [ 1095.211626][T28228] fuse: Bad value for 'fd' [ 1095.239856][T28221] bond2: (slave veth0_virt_wifi): Enslaving as an active interface with an up link [ 1095.280570][T28218] bond2: (slave veth0_virt_wifi): Releasing active interface [ 1098.207010][T28282] netlink: 'syz.6.6657': attribute type 1 has an invalid length. [ 1098.641894][T28282] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1098.826863][T28286] gretap2: entered promiscuous mode [ 1098.901865][T28286] bond3: (slave gretap2): making interface the new active one [ 1098.930259][T28286] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 1098.958859][T28301] netlink: 'syz.1.6664': attribute type 13 has an invalid length. [ 1100.695169][T28321] netlink: 'syz.8.6670': attribute type 11 has an invalid length. [ 1100.731975][T28321] 8021q: adding VLAN 0 to HW filter on device team0 [ 1100.804293][T28321] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1100.997786][T28321] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1101.112582][T28321] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1101.275723][ T8609] bond2: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 1101.314490][ T8609] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1101.396971][ T8609] bond2: active interface up! [ 1101.510616][T28343] fuse: fd is not a fuse device [ 1101.521839][ T30] audit: type=1804 audit(1101.500:1476): pid=28344 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.6678" name="/newroot/253/file0" dev="tmpfs" ino=1365 res=1 errno=0 [ 1101.571536][ T5780] kernel write not supported for file bpf-prog (pid: 5780 comm: kworker/1:7) [ 1101.739836][T28353] fuse: fd is not a fuse device [ 1101.754898][T28355] fuse: fd is not a fuse device [ 1102.045598][T28362] overlayfs: failed to clone upperpath [ 1102.487717][T28380] fuse: fd is not a fuse device [ 1104.678057][T28422] loop6: detected capacity change from 0 to 4096 [ 1104.762251][T28422] EXT4-fs: Ignoring removed orlov option [ 1104.802141][T28422] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1105.462096][T28432] netlink: 'syz.4.6710': attribute type 27 has an invalid length. [ 1105.480969][T28435] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6709'. [ 1105.551565][T28435] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6709'. [ 1105.584027][T28422] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1105.713884][ T30] audit: type=1800 audit(1105.690:1477): pid=28422 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.6703" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 1105.789322][T28435] vlan0: entered promiscuous mode [ 1105.810607][T28441] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1105.841030][T28441] batadv_slave_0: entered promiscuous mode [ 1106.049397][ T30] audit: type=1804 audit(1106.020:1478): pid=28442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.6703" name="/newroot/256/file0/file1" dev="loop6" ino=15 res=1 errno=0 [ 1107.067861][T21715] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1107.105727][ T30] audit: type=1326 audit(1107.080:1479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28452 comm="syz.4.6716" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2085b9ce59 code=0x7ffc0000 [ 1107.163567][ T30] audit: type=1326 audit(1107.080:1480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28452 comm="syz.4.6716" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2085b9ce59 code=0x7ffc0000 [ 1107.188767][ T30] audit: type=1326 audit(1107.090:1481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28452 comm="syz.4.6716" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2085b9ce59 code=0x7ffc0000 [ 1107.222246][ T30] audit: type=1326 audit(1107.090:1482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28452 comm="syz.4.6716" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f2085b9ce59 code=0x7ffc0000 [ 1107.325284][ T30] audit: type=1326 audit(1107.090:1483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28452 comm="syz.4.6716" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2085b9ce59 code=0x7ffc0000 [ 1107.420552][ T30] audit: type=1326 audit(1107.090:1484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28452 comm="syz.4.6716" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2085b9ce59 code=0x7ffc0000 [ 1107.508989][ T30] audit: type=1326 audit(1107.090:1485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28452 comm="syz.4.6716" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2085b9ce59 code=0x7ffc0000 [ 1107.553849][ T30] audit: type=1326 audit(1107.090:1486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28452 comm="syz.4.6716" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2085b9ce59 code=0x7ffc0000 [ 1107.631512][ T30] audit: type=1326 audit(1107.090:1487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28452 comm="syz.4.6716" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f2085b9ce59 code=0x7ffc0000 [ 1107.659926][ T30] audit: type=1326 audit(1107.090:1488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28452 comm="syz.4.6716" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2085b9ce59 code=0x7ffc0000 [ 1107.711950][T28467] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1107.719282][T28467] IPv6: NLM_F_CREATE should be set when creating new route [ 1108.044038][T28467] bridge1: port 1(veth0_to_bond) entered disabled state [ 1108.417264][T28485] xt_hashlimit: overflow, try lower: 3/0 [ 1109.473554][T28468] syz_tun: entered allmulticast mode [ 1109.874931][T28472] syz_tun (unregistering): left allmulticast mode [ 1109.949763][ T762] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1109.990646][ T762] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1110.037556][ T762] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1110.129910][ T762] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1110.161840][ T762] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1110.175242][ T762] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1110.847933][T20956] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1110.915714][T20956] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1113.158771][T28533] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1113.173623][T28533] @0Ù: renamed from bond_slave_1 [ 1113.427705][T28537] team0: Port device bond0 removed [ 1113.430430][T28536] loop6: detected capacity change from 0 to 4096 [ 1113.460958][T28536] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1113.487786][T28537] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1113.721193][T28545] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 1113.745347][T28545] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6742'. [ 1113.780372][T28546] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 1114.023130][ T5780] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1114.182882][ T5780] usb 7-1: Using ep0 maxpacket: 16 [ 1114.195762][ T5780] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1114.224810][ T5780] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1114.254149][ T5780] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1114.278777][ T5780] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1114.298877][ T5780] usb 7-1: config 1 interface 1 has no altsetting 0 [ 1114.317171][ T5780] usb 7-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice= 0.40 [ 1114.333827][ T5780] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1114.352159][ T5780] usb 7-1: Product: syz [ 1114.361185][ T5780] usb 7-1: Manufacturer: syz [ 1114.399611][ T5780] usb 7-1: SerialNumber: syz [ 1114.682414][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 1115.369870][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.376375][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.383823][ T1312] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1115.588338][T28536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1115.662875][T28536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1115.740921][ T5780] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1115.856369][ T5780] snd-usb-audio 7-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 1115.887720][ T5780] usb 7-1: USB disconnect, device number 20 [ 1116.004730][T28104] udevd[28104]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1116.057567][T28578] fuse: fd is not a fuse device [ 1116.219726][T28585] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6757'. [ 1116.270955][T28585] team0 (unregistering): Port device team_slave_0 removed [ 1116.290007][T28585] team0 (unregistering): Port device team_slave_1 removed [ 1116.308788][T28585] team0 (unregistering): Port device geneve1 removed [ 1116.505324][T21715] __quota_error: 92 callbacks suppressed [ 1116.505349][T21715] Quota error (device loop6): find_block_dqentry: Quota for id 0 referenced but not present [ 1116.575387][T21715] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 1116.617008][T21715] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz-executor: Failed to acquire dquot type 1 [ 1116.908745][T28598] netlink: 'syz.4.6762': attribute type 1 has an invalid length. [ 1117.216660][T28598] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1117.294312][T28604] macvlan2: entered promiscuous mode [ 1117.338085][T28604] macvlan2: entered allmulticast mode [ 1118.631288][T20955] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1118.738589][T20955] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1118.769433][T16585] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1118.791322][T16585] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1118.800837][T16585] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1118.815154][T16585] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1118.826220][T16585] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1119.165830][T28631] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6771'. [ 1119.225726][T20955] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1119.251428][T20955] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1119.420673][T28637] fuse: fd is not a fuse device [ 1119.540592][T20955] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1119.566959][T20955] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1120.001679][T20955] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1120.074747][T20955] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1121.460622][ T5634] Bluetooth: hci2: command tx timeout [ 1122.350256][T28690] fuse: fd is not a fuse device [ 1122.416293][T20955] bridge_slave_1: left allmulticast mode [ 1122.434500][T20955] bridge_slave_1: left promiscuous mode [ 1122.459143][T20955] bridge0: port 2(bridge_slave_1) entered disabled state [ 1122.511529][T20955] bridge_slave_0: left allmulticast mode [ 1122.549054][T20955] bridge_slave_0: left promiscuous mode [ 1122.576828][T20955] bridge0: port 1(bridge_slave_0) entered disabled state [ 1123.543371][ T5634] Bluetooth: hci2: command tx timeout [ 1124.247266][T20955] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 1124.353126][T28735] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6801'. [ 1124.431581][T20955] bond3 (unregistering): (slave gretap2): Releasing active interface [ 1124.762076][T20955] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1124.822224][T20955] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1124.869403][T20955] bond0 (unregistering): Released all slaves [ 1124.938815][T20955] bond1 (unregistering): Released all slaves [ 1125.045553][T20955] bond2 (unregistering): Released all slaves [ 1125.119372][T20955] bond3 (unregistering): Released all slaves [ 1125.208683][ T5290] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1125.629155][ T5634] Bluetooth: hci2: command tx timeout [ 1126.398292][T20955] hsr_slave_0: left promiscuous mode [ 1126.421813][T20955] hsr_slave_1: left promiscuous mode [ 1126.441138][T20955] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1126.475869][T20955] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1126.537943][T20955] veth1_macvtap: left promiscuous mode [ 1126.566839][T20955] veth0_macvtap: left promiscuous mode [ 1126.587128][T20955] veth1_vlan: left promiscuous mode [ 1126.610670][T20955] veth0_vlan: left promiscuous mode [ 1126.754137][T28783] fuse: fd is not a fuse device [ 1127.712440][ T5634] Bluetooth: hci2: command tx timeout [ 1127.815587][T20955] team0 (unregistering): Port device team_slave_1 removed [ 1127.895807][T20955] team0 (unregistering): Port device team_slave_0 removed [ 1128.220453][ T5290] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1128.603716][T28623] bridge0: port 1(bridge_slave_0) entered blocking state [ 1128.621993][T28623] bridge0: port 1(bridge_slave_0) entered disabled state [ 1128.644448][T28623] bridge_slave_0: entered allmulticast mode [ 1128.658776][T28623] bridge_slave_0: entered promiscuous mode [ 1128.710232][T28623] bridge0: port 2(bridge_slave_1) entered blocking state [ 1128.720679][T28623] bridge0: port 2(bridge_slave_1) entered disabled state [ 1128.729907][T28623] bridge_slave_1: entered allmulticast mode [ 1128.738411][T28623] bridge_slave_1: entered promiscuous mode [ 1129.663736][T28623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1129.732404][T28623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1129.850632][T28828] fuse: fd is not a fuse device [ 1130.033606][T28623] team0: Port device team_slave_0 added [ 1130.073918][T28623] team0: Port device team_slave_1 added [ 1130.263119][T28623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1130.302410][T28623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1130.472727][T28623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1130.763777][T28623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1130.804780][T28623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1130.916277][T28623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1131.324821][T28623] hsr_slave_0: entered promiscuous mode [ 1131.395640][T28623] hsr_slave_1: entered promiscuous mode [ 1131.645037][ T30] audit: type=1800 audit(1131.630:1581): pid=28848 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.6832" name="bus" dev="ramfs" ino=75263 res=0 errno=0 [ 1133.299642][ T5290] 8021q: adding VLAN 0 to HW filter on device eth19 [ 1134.671931][T28879] tipc: Started in network mode [ 1134.694391][T28879] tipc: Node identity ac1414aa, cluster identity 4711 [ 1134.743619][T28879] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1134.821073][T28879] tipc: Enabled bearer , priority 10 [ 1134.882744][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1135.022847][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1135.162492][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1135.243330][T28891] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6844'. [ 1135.303039][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1135.442457][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1135.582545][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1135.723018][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1135.871537][ T5798] tipc: Node number set to 2886997162 [ 1136.002775][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1136.272654][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1138.819112][ T5290] 8021q: adding VLAN 0 to HW filter on device eth20 [ 1139.675906][T28936] fuse: fd is not a fuse device [ 1139.681579][T28940] fuse: fd is not a fuse device [ 1139.942462][ C0] net_ratelimit: 3 callbacks suppressed [ 1139.942490][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1139.950152][T28951] fuse: fd is not a fuse device [ 1140.424524][T28956] IPv6: NLM_F_CREATE should be specified when creating new route [ 1140.982466][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1142.035200][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1143.062451][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1144.102452][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1144.493779][T16585] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1144.525830][T16585] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1144.535698][T16585] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1144.549842][T16585] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1144.558047][T16585] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1145.142533][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1146.182460][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1146.682799][ T5634] Bluetooth: hci6: command tx timeout [ 1146.819298][T28623] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1146.973095][T28623] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1147.018211][T28623] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1147.088241][T28623] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1147.128174][T28623] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1147.187793][T28623] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1147.222470][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1147.223119][T28623] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1147.269022][T16585] Bluetooth: hci5: Unknown advertising packet type: 0x16 [ 1147.269086][T16585] Bluetooth: hci5: Unknown advertising packet type: 0x1c [ 1147.276939][T16585] Bluetooth: hci5: Malformed LE Event: 0x0d [ 1147.327138][T28623] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1147.807007][ T30] audit: type=1804 audit(1147.790:1582): pid=29054 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.6883" name="file0" dev="tmpfs" ino=6708 res=1 errno=0 [ 1147.839722][T29054] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: 1 [ 1147.913022][T29054] ref_ctr increment failed for inode: 0x1a34 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88802c6f0000 [ 1148.262780][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1148.614115][T29060] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: -1 [ 1148.674899][T29060] ref_ctr decrement failed for inode: 0x1a34 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88802c6f0000 [ 1148.745155][T29060] uprobe: syz.2.6883:29060 failed to unregister, leaking uprobe [ 1148.753160][T16585] Bluetooth: hci6: command tx timeout [ 1148.819764][T28623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1149.302452][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1149.546469][T29081] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6889'. [ 1149.921093][T28623] 8021q: adding VLAN 0 to HW filter on device team0 [ 1150.064321][ T8609] bridge0: port 1(bridge_slave_0) entered blocking state [ 1150.071565][ T8609] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1150.342453][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1150.809299][ T8609] bridge0: port 2(bridge_slave_1) entered blocking state [ 1150.816511][ T8609] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1150.832646][T16585] Bluetooth: hci6: command tx timeout [ 1151.173482][T29113] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6897'. [ 1151.382505][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1152.244540][T29125] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6900'. [ 1152.372043][T28994] bridge0: port 1(bridge_slave_0) entered blocking state [ 1152.397063][T28994] bridge0: port 1(bridge_slave_0) entered disabled state [ 1152.422320][T28994] bridge_slave_0: entered allmulticast mode [ 1152.422438][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1152.461463][T28994] bridge_slave_0: entered promiscuous mode [ 1152.531548][T28994] bridge0: port 2(bridge_slave_1) entered blocking state [ 1152.575939][T28994] bridge0: port 2(bridge_slave_1) entered disabled state [ 1152.589417][T28994] bridge_slave_1: entered allmulticast mode [ 1152.604417][T28994] bridge_slave_1: entered promiscuous mode [ 1152.787379][T28994] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1152.885335][T28994] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1152.912866][T16585] Bluetooth: hci6: command tx timeout [ 1152.996797][T28994] team0: Port device team_slave_0 added [ 1153.008624][T28994] team0: Port device team_slave_1 added [ 1153.053109][T29135] ipt_REJECT: ECHOREPLY no longer supported. [ 1153.134033][T28994] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1153.176838][T28994] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1153.292213][T28994] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1153.338209][T28994] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1153.358921][T28994] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1153.418808][T28994] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1153.462447][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1153.601376][T28994] hsr_slave_0: entered promiscuous mode [ 1153.614983][T28994] hsr_slave_1: entered promiscuous mode [ 1153.621785][T28994] debugfs: 'hsr0' already exists in 'hsr' [ 1153.630168][T28994] Cannot create hsr debugfs directory [ 1154.502448][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1154.714511][T19236] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1155.542857][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1155.963264][T29172] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6913'. [ 1156.001326][T29172] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6913'. [ 1156.582702][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1157.622558][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1158.662702][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1158.915628][T29205] futex_wake_op: à³OñJ÷N\ìg´é tries to shift op by 144; fix this program [ 1159.713785][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1160.569790][T28623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1160.744108][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1161.082206][T28623] veth0_vlan: entered promiscuous mode [ 1161.130705][T28623] veth1_vlan: entered promiscuous mode [ 1161.311601][T28623] veth0_macvtap: entered promiscuous mode [ 1161.359560][T28623] veth1_macvtap: entered promiscuous mode [ 1161.411767][T29255] fuse: fd is not a fuse device [ 1161.512311][T28623] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1161.660959][T28623] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1161.751059][ T762] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1161.782450][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1161.797757][ T762] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1161.946371][T12848] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1161.974652][T12848] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1162.180208][T28994] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1162.270353][T29274] overlayfs: failed to resolve './cgroup': -2 [ 1162.440677][T28994] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1162.464679][T28994] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1162.520797][T28994] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1162.616139][T28994] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1162.649378][T28994] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1162.680208][T28994] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1162.726807][T28994] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1162.822442][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1163.862620][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1164.335912][T20955] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1164.393728][T20955] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1164.733613][T12848] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1164.902483][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1165.707425][T12848] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1165.942444][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1166.455260][T28994] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1166.796827][T28994] 8021q: adding VLAN 0 to HW filter on device team0 [ 1166.982694][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1167.943968][T29320] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1167.966148][ T8612] bridge0: port 1(bridge_slave_0) entered blocking state [ 1167.973346][ T8612] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1168.022448][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1168.058135][ T8612] bridge0: port 2(bridge_slave_1) entered blocking state [ 1168.065334][ T8612] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1169.062436][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1170.102445][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1171.142463][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1171.696092][T29393] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6956'. [ 1171.754496][T29393] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6956'. [ 1172.068121][ T5795] libceph: connect (1)[c::]:6789 error -99 [ 1172.087719][ T5795] libceph: mon0 (1)[c::]:6789 connect error [ 1172.109478][T29402] ceph: No mds server is up or the cluster is laggy [ 1172.182442][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1172.374037][T28483] libceph: connect (1)[c::]:6789 error -99 [ 1172.715738][T28483] libceph: mon0 (1)[c::]:6789 connect error [ 1173.222447][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1174.262481][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1175.039567][T28994] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1175.060048][ T30] audit: type=1326 audit(1175.020:1583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29443 comm="syz.2.6970" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69c1b9ce59 code=0x7ffc0000 [ 1175.145147][ T30] audit: type=1326 audit(1175.030:1584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29443 comm="syz.2.6970" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69c1b9ce59 code=0x7ffc0000 [ 1175.302640][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1175.764983][ T30] audit: type=1326 audit(1175.040:1585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29443 comm="syz.2.6970" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69c1b9ce59 code=0x7ffc0000 [ 1175.789718][ T30] audit: type=1326 audit(1175.040:1586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29443 comm="syz.2.6970" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f69c1b9ce59 code=0x7ffc0000 [ 1175.967578][ T30] audit: type=1326 audit(1175.040:1587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29443 comm="syz.2.6970" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69c1b9ce59 code=0x7ffc0000 [ 1176.024706][ T30] audit: type=1326 audit(1175.040:1588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29443 comm="syz.2.6970" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69c1b9ce59 code=0x7ffc0000 [ 1176.050025][ T30] audit: type=1326 audit(1175.070:1589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29443 comm="syz.2.6970" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69c1b9ce59 code=0x7ffc0000 [ 1176.075322][ T30] audit: type=1326 audit(1175.070:1590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29443 comm="syz.2.6970" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69c1b9ce59 code=0x7ffc0000 [ 1176.103849][ T30] audit: type=1326 audit(1175.070:1591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29443 comm="syz.2.6970" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69c1b9ce59 code=0x7ffc0000 [ 1176.342448][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1176.848680][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1176.864879][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1176.871851][ T1312] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1176.944466][ T30] audit: type=1326 audit(1175.070:1592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29443 comm="syz.2.6970" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f69c1b9ce59 code=0x7ffc0000 [ 1176.971469][T28994] veth0_vlan: entered promiscuous mode [ 1177.382442][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1177.740354][T28994] veth1_vlan: entered promiscuous mode [ 1177.759095][T29467] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6972'. [ 1178.422442][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1178.990644][T28994] veth0_macvtap: entered promiscuous mode [ 1179.302216][T28994] veth1_macvtap: entered promiscuous mode [ 1179.462440][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1180.160449][T28994] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1180.226336][T28994] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1180.314751][ T8611] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1180.502461][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1181.299328][ T8612] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1181.436046][ T8612] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1181.509893][ T8612] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1181.542432][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1181.815069][T29519] Bluetooth: MGMT ver 1.23 [ 1182.585577][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1182.721578][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1182.758299][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1182.781232][T29537] fuse: fd is not a fuse device [ 1182.874016][ T8611] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1183.116493][ T8611] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1183.622861][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1184.088923][T29557] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6995'. [ 1184.142640][T29560] netlink: 'syz.2.6996': attribute type 1 has an invalid length. [ 1184.172237][T29560] netlink: 'syz.2.6996': attribute type 4 has an invalid length. [ 1184.225271][T29560] netlink: 15334 bytes leftover after parsing attributes in process `syz.2.6996'. [ 1184.662436][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1185.702453][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1186.566832][T16585] Bluetooth: hci6: unexpected event 0x2f length: 1017 > 260 [ 1186.742433][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1187.782439][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1188.822441][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1189.862530][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1190.916237][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1191.525402][T29640] Set syz0 is full, maxelem 0 reached [ 1191.623500][ T5780] IPVS: starting estimator thread 0... [ 1191.735956][T29657] IPVS: using max 24 ests per chain, 57600 per kthread [ 1191.942834][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1192.982464][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1194.022428][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1195.062428][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1196.102609][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1197.217377][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1198.343055][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1199.469434][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1200.581462][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1201.705104][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1202.834984][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1203.862216][T29795] IPv6: NLM_F_CREATE should be specified when creating new route [ 1203.870917][T29795] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1203.878174][T29795] IPv6: NLM_F_CREATE should be set when creating new route [ 1203.908656][T29795] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1203.959141][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1204.557497][T29804] (syz.7.7059,29804,0):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 1205.078719][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1206.205071][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1206.534516][T29831] loop3: detected capacity change from 0 to 2048 [ 1207.240115][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1208.079098][T29831] loop3: p1 < > p3 [ 1208.366138][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1208.371172][T29831] loop3: p3 size 134217728 extends beyond EOD, truncated [ 1208.999823][T29878] netlink: 'syz.0.7077': attribute type 1 has an invalid length. [ 1209.161398][T29878] bond1: entered promiscuous mode [ 1209.167249][T29878] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1209.194653][T29888] bridge0: port 3(vlan2) entered disabled state [ 1209.201216][T29888] bridge0: port 2(bridge_slave_1) entered disabled state [ 1209.208733][T29888] bridge0: port 1(bridge_slave_0) entered disabled state [ 1209.301332][T29865] udevd[29865]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 1209.384268][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1209.407011][T29860] udevd[29860]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 1209.552622][T29878] bond1: (slave bridge1): making interface the new active one [ 1209.579409][T29878] bridge1: entered promiscuous mode [ 1210.334542][T29878] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 1210.508745][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1211.457826][T29918] netlink: 'syz.2.7085': attribute type 10 has an invalid length. [ 1211.610616][T29925] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7086'. [ 1211.636111][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1211.670791][T29918] 8021q: adding VLAN 0 to HW filter on device team0 [ 1211.913775][T29930] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7084'. [ 1211.923596][T29930] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1212.765962][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1212.968514][T29930] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1213.079277][T29945] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7088'. [ 1213.805895][T29958] raw_sendmsg: syz.1.7093 forgot to set AF_INET. Fix it! [ 1213.891510][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1214.911859][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1216.042636][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1217.169799][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1218.229913][T30010] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7104'. [ 1218.263636][T30010] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7104'. [ 1218.294606][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1219.137134][T30044] loop3: detected capacity change from 0 to 256 [ 1219.271238][T30044] exfat: Deprecated parameter 'namecase' [ 1219.311622][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1219.360862][T30044] exfat: Deprecated parameter 'namecase' [ 1219.366580][T30044] exfat: Bad value for 'gid' [ 1219.371174][T30044] exfat: Bad value for 'gid' [ 1219.653893][T30061] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1220.141233][T30076] tipc: Started in network mode [ 1220.151298][T30076] tipc: Node identity b29a3c32139b, cluster identity 4711 [ 1220.158641][T30076] tipc: Enabled bearer , priority 0 [ 1220.185158][T30076] syzkaller0: entered promiscuous mode [ 1220.190682][T30076] syzkaller0: entered allmulticast mode [ 1220.274207][T30076] tipc: Resetting bearer [ 1220.300581][T30075] tipc: Resetting bearer [ 1220.435818][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1220.504165][T30091] fuse: fd is not a fuse device [ 1220.831566][T30075] tipc: Disabling bearer [ 1221.571741][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1221.952186][T30105] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7127'. [ 1222.225896][T30106] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7127'. [ 1222.387481][ T30] kauditd_printk_skb: 50 callbacks suppressed [ 1222.387503][ T30] audit: type=1326 audit(1222.340:1643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30130 comm="syz.3.7133" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f355319ce59 code=0x7ffc0000 [ 1222.424183][T30129] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7132'. [ 1222.511076][ T30] audit: type=1326 audit(1222.340:1644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30130 comm="syz.3.7133" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f355319ce59 code=0x7ffc0000 [ 1222.583702][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1222.634602][ T30] audit: type=1326 audit(1222.460:1645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30130 comm="syz.3.7133" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f355319ce59 code=0x7ffc0000 [ 1223.044546][ T30] audit: type=1326 audit(1222.460:1646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30130 comm="syz.3.7133" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f355319ce59 code=0x7ffc0000 [ 1223.405766][ T30] audit: type=1326 audit(1222.460:1647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30136 comm="syz.3.7133" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f355315d68e code=0x7ffc0000 [ 1223.688467][ T30] audit: type=1326 audit(1222.460:1648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30130 comm="syz.3.7133" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f355319ce59 code=0x7ffc0000 [ 1223.705047][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1223.786556][ T30] audit: type=1326 audit(1222.460:1649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30130 comm="syz.3.7133" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f355319ce59 code=0x7ffc0000 [ 1224.801453][ T30] audit: type=1326 audit(1222.460:1650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30130 comm="syz.3.7133" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f355319ce59 code=0x7ffc0000 [ 1224.817938][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1225.205899][ T30] audit: type=1326 audit(1222.460:1651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30130 comm="syz.3.7133" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f355319ce59 code=0x7ffc0000 [ 1225.318212][ T30] audit: type=1326 audit(1222.460:1652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30130 comm="syz.3.7133" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f355319ce59 code=0x7ffc0000 [ 1225.653537][T30165] netlink: 'syz.2.7142': attribute type 13 has an invalid length. [ 1225.945795][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1227.076698][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1228.207620][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1228.977470][T30219] fuse: fd is not a fuse device [ 1229.224950][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1229.851704][T30231] fuse: fd is not a fuse device [ 1230.166069][T19236] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1230.365278][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1231.488837][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1232.611909][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1232.791398][T30265] fuse: fd is not a fuse device [ 1233.628818][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1234.755338][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1235.881527][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1236.996152][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1238.119379][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1238.178680][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.185189][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.195165][ T1312] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1239.166349][T30335] syzkaller0: entered promiscuous mode [ 1239.217686][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1239.397974][T30335] syzkaller0: entered allmulticast mode [ 1240.327382][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1241.453937][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1242.572497][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1243.679346][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1244.807156][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1245.488656][ T5634] Bluetooth: hci2: command 0x0406 tx timeout [ 1245.938191][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1246.146337][T30420] ptrace attach of "ci-upstream-kasan-gce-root/syz-executor exec"[5639] was attempted by " [ 1246.996047][T30424] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7206'. [ 1247.102235][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1248.114092][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1249.225122][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1250.349192][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1250.543008][T30454] fuse: fd is not a fuse device [ 1251.474335][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1252.602985][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1253.726352][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1254.107969][T30498] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7230'. [ 1254.246722][T30497] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7225'. [ 1254.418714][T30507] fuse: fd is not a fuse device [ 1254.852250][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1255.070592][T30527] overlayfs: failed to clone upperpath [ 1255.867733][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1256.994088][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1258.095423][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1259.203842][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1260.314678][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1260.395712][T30577] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7247'. [ 1260.814270][T30580] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7242'. [ 1260.840918][T30579] ip6erspan0: entered allmulticast mode [ 1261.443199][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1262.573267][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1262.846766][T30580] vlan2 (unregistering): left allmulticast mode [ 1263.050899][T30580] dummy0 (unregistering): left allmulticast mode [ 1263.253129][T30619] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7246'. [ 1263.420264][T30580] vlan2 (unregistering): left promiscuous mode [ 1263.426600][T30580] dummy0 (unregistering): left promiscuous mode [ 1263.433054][T30580] bridge0: port 3(vlan2) entered disabled state [ 1263.716267][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1264.840765][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1264.986397][T30632] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7249'. [ 1265.106868][T30636] loop3: detected capacity change from 0 to 8 [ 1265.148598][T30636] SQUASHFS error: Failed to read block 0xe000000000001ea: -5 [ 1265.190157][T30636] unable to read xattr id index table [ 1265.334477][T30633] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 1265.366443][T30644] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7258'. [ 1265.399459][T30635] bond2 (unregistering): (slave geneve2): Releasing backup interface [ 1265.556667][T30635] bond2 (unregistering): Released all slaves [ 1265.969473][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1266.955359][T30661] netlink: 'syz.1.7263': attribute type 12 has an invalid length. [ 1266.965136][T30664] lo: Caught tx_queue_len zero misconfig [ 1266.985973][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1267.016805][T30664] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1268.123824][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1269.150696][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1270.286495][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1270.673489][T30690] atomic_op ffff8880274d7198 conn xmit_atomic 0000000000000000 [ 1271.412847][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1271.436438][T16585] Bluetooth: hci6: command 0x0406 tx timeout [ 1272.425064][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1273.541379][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1274.664166][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1275.782850][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1276.892924][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1278.008289][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1279.004123][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 1279.115066][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1279.537082][T30770] syzkaller0: entered promiscuous mode [ 1279.595655][T30770] syzkaller0: entered allmulticast mode [ 1280.232264][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1280.960823][T30794] IPVS: set_ctl: invalid protocol: 0 172.30.1.4:20001 [ 1281.286802][T30791] fuse: fd is not a fuse device [ 1281.363669][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1282.490845][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1283.616211][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1284.738743][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1285.854230][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1286.953049][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1288.068073][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1289.189650][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1290.318848][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1291.436764][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1291.650451][T30880] syz_tun: entered allmulticast mode [ 1292.563575][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1293.671486][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1294.690925][T30916] atomic_op ffff88803c256198 conn xmit_atomic 0000000000000000 [ 1294.791515][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1295.280025][T19236] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1295.910878][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1297.037804][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1298.050832][T30933] netlink: 'syz.7.7325': attribute type 1 has an invalid length. [ 1298.151032][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1298.280946][T30933] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7325'. [ 1299.265864][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1299.490621][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1299.497543][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1299.504543][ T1312] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1300.379098][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1301.481930][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1302.594344][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1303.701989][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1304.804550][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1305.039097][T31005] fuse: fd is not a fuse device [ 1305.930106][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1307.043541][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1308.171794][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1309.296423][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1310.000587][T31066] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7366'. [ 1310.418444][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1311.244650][ T5798] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1311.545993][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1311.612537][T31078] overlayfs: failed to clone upperpath [ 1312.664746][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1313.192726][T31098] netlink: 'syz.7.7374': attribute type 8 has an invalid length. [ 1313.780074][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1314.632224][T31114] fuse: fd is not a fuse device [ 1314.900665][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1316.005903][T31127] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7382'. [ 1316.027338][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1317.148138][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1318.261794][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1319.388261][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1319.707994][T31175] loop3: detected capacity change from 0 to 128 [ 1320.320957][T31190] gfs2: path_lookup on  returned error -2 [ 1320.511814][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1425.902254][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1425.909257][ C1] rcu: (detected by 1, t=10506 jiffies, g=197565, q=873 ncpus=2) [ 1425.917154][ C1] rcu: All QSes seen, last rcu_preempt kthread activity 10506 (4295079780-4295069274), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 1425.930522][ C1] rcu: rcu_preempt kthread starved for 10506 jiffies! g197565 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1425.941808][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1425.951779][ C1] rcu: RCU grace-period kthread stack dump: [ 1425.957661][ C1] task:rcu_preempt state:R running task stack:27536 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1425.971279][ C1] Call Trace: [ 1425.974641][ C1] [ 1425.977574][ C1] __schedule+0x1821/0x5740 [ 1425.982094][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1425.987078][ C1] ? __pfx___schedule+0x10/0x10 [ 1425.991951][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1425.997595][ C1] ? schedule+0x90/0x360 [ 1426.001875][ C1] schedule+0x164/0x360 [ 1426.006051][ C1] schedule_timeout+0x158/0x2c0 [ 1426.010909][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1426.016545][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1426.021925][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1426.027224][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1426.032861][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1426.038687][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1426.044322][ C1] ? prepare_to_swait_event+0x340/0x370 [ 1426.049889][ C1] rcu_gp_fqs_loop+0x312/0x11d0 [ 1426.054745][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1426.060380][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 1426.065578][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1426.071395][ C1] ? rcu_gp_init+0x1315/0x15b0 [ 1426.076195][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1426.081482][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1426.086888][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 1426.091487][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1426.096683][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1426.102503][ C1] ? __kthread_parkme+0x7a/0x1f0 [ 1426.107442][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1426.113081][ C1] ? __kthread_parkme+0x19c/0x1f0 [ 1426.118121][ C1] kthread+0x389/0x470 [ 1426.122261][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1426.127460][ C1] ? __pfx_kthread+0x10/0x10 [ 1426.132057][ C1] ret_from_fork+0x514/0xb70 [ 1426.136686][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1426.141826][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1426.147463][ C1] ? __switch_to+0xc79/0x1410 [ 1426.152156][ C1] ? __pfx_kthread+0x10/0x10 [ 1426.156756][ C1] ret_from_fork_asm+0x1a/0x30 [ 1426.161587][ C1] [ 1426.164597][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1426.171079][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1426.176290][ C0] NMI backtrace for cpu 0 [ 1426.176312][ C0] CPU: 0 UID: 0 PID: 31198 Comm: syz.2.7407 Tainted: G L syzkaller #0 PREEMPT(full) [ 1426.176344][ C0] Tainted: [L]=SOFTLOCKUP [ 1426.176352][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1426.176367][ C0] RIP: 0010:rcu_is_watching+0x35/0xb0 [ 1426.176401][ C0] Code: 05 30 73 8d 11 e8 cb b4 fc 09 89 c3 83 f8 08 73 65 49 bf 00 00 00 00 00 fc ff df 4c 8d 34 dd 90 27 26 8e 4c 89 f0 48 c1 e8 03 <42> 80 3c 38 00 74 08 4c 89 f7 e8 ec 41 86 00 48 c7 c3 d8 79 39 93 [ 1426.176421][ C0] RSP: 0018:ffffc90000007ca0 EFLAGS: 00000012 [ 1426.176442][ C0] RAX: 1ffffffff1c4c4f2 RBX: 0000000000000000 RCX: 0000000080010005 [ 1426.176459][ C0] RDX: 0000000000000001 RSI: ffffffff8c28b8c0 RDI: ffffffff8c28b880 [ 1426.176475][ C0] RBP: ffff888034e04558 R08: 0000000000000003 R09: 0000000000000004 [ 1426.176491][ C0] R10: dffffc0000000000 R11: fffff52000000f94 R12: ffff888034e04550 [ 1426.176509][ C0] R13: ffffffff84bc8a20 R14: ffffffff8e262790 R15: dffffc0000000000 [ 1426.176530][ C0] FS: 0000555593625500(0000) GS:ffff88812529c000(0000) knlGS:0000000000000000 [ 1426.176551][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1426.176567][ C0] CR2: 0000001b34a22ff8 CR3: 00000000574f8000 CR4: 0000000000350ef0 [ 1426.176586][ C0] Call Trace: [ 1426.176597][ C0] [ 1426.176610][ C0] lock_release+0x4b/0x3c0 [ 1426.176645][ C0] _raw_spin_unlock_irqrestore+0x1b/0x80 [ 1426.176686][ C0] debug_object_activate+0x320/0x580 [ 1426.176719][ C0] enqueue_hrtimer+0xa9/0x2c0 [ 1426.176756][ C0] __hrtimer_run_queues+0x4d2/0xa20 [ 1426.176809][ C0] hrtimer_interrupt+0x44b/0x950 [ 1426.176864][ C0] __sysvec_apic_timer_interrupt+0x102/0x430 [ 1426.176898][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 1426.176938][ C0] [ 1426.176946][ C0] [ 1426.176955][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1426.176982][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 1426.177020][ C0] Code: f7 e8 9d 38 f8 f5 f7 c3 00 02 00 00 74 05 e8 d0 d2 23 f6 9c 58 a9 00 02 00 00 75 27 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 b4 b7 e9 f5 65 8b 05 ad 2e 8e 07 85 c0 74 18 5b 41 5e e9 7c 2f [ 1426.177039][ C0] RSP: 0018:ffffc90003dd7b20 EFLAGS: 00000206 [ 1426.177059][ C0] RAX: 0000000000000002 RBX: 0000000000000287 RCX: 0000000080000002 [ 1426.177074][ C0] RDX: 0000000000000000 RSI: ffffffff8dfa4398 RDI: 0000000000000001 [ 1426.177089][ C0] RBP: ffff88801db68000 R08: ffffffff90302af7 R09: 1ffffffff206055e [ 1426.177107][ C0] R10: dffffc0000000000 R11: fffffbfff206055f R12: dffffc0000000000 [ 1426.177125][ C0] R13: 1ffff110170c77a4 R14: ffff88801db68a70 R15: ffff8880b863bd20 [ 1426.177159][ C0] try_to_wake_up+0x7b4/0x1380 [ 1426.177205][ C0] wake_up_q+0x85/0xd0 [ 1426.177233][ C0] futex_wake+0x49a/0x580 [ 1426.177267][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1426.177301][ C0] ? __pfx_futex_wake+0x10/0x10 [ 1426.177344][ C0] ? handle_mm_fault+0xf1/0x3170 [ 1426.177377][ C0] do_futex+0x395/0x420 [ 1426.177410][ C0] ? __pfx_do_futex+0x10/0x10 [ 1426.177446][ C0] __se_sys_futex+0x3a8/0x450 [ 1426.177480][ C0] ? __pfx___se_sys_futex+0x10/0x10 [ 1426.177510][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1426.177544][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1426.177571][ C0] ? __x64_sys_futex+0x21/0xf0 [ 1426.177600][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1426.177625][ C0] do_syscall_64+0x174/0x580 [ 1426.177649][ C0] ? trace_irq_disable+0x3b/0x140 [ 1426.177691][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1426.177715][ C0] RIP: 0033:0x7f69c1b9ce59 [ 1426.177737][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1426.177755][ C0] RSP: 002b:00007ffc6f625928 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1426.177783][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f69c1b9ce59 [ 1426.177800][ C0] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f69c1e15fa8 [ 1426.177815][ C0] RBP: 000000000000006e R08: 0000000000000018 R09: 0000000000000000 [ 1426.177829][ C0] R10: 00007f69c1e15fa0 R11: 0000000000000246 R12: 0000000000000000 [ 1426.177844][ C0] R13: 00007f69c1e15fac R14: 00007f69c1e15fa8 R15: 00007f69c1e15fa0 [ 1426.177876][ C0]