last executing test programs: 10m51.087396038s ago: executing program 32 (id=46): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$can_j1939(0x1d, 0x2, 0x7) recvmmsg(r0, &(0x7f0000000740), 0x3, 0x10000, &(0x7f0000000840)) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000001380)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x1, 0x1, 0x4}, 0x1}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="008101000040000000", 0x9}], 0x1}, 0x48045) 9m13.082596504s ago: executing program 4 (id=370): r0 = landlock_create_ruleset(&(0x7f0000000000)={0x0, 0x1}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r0, 0x2, &(0x7f00000000c0)={0x1, 0x2}, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r0, 0x2, &(0x7f0000000100)={0x1, 0x4}, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0x8, @loopback}, 0x1c) 9m12.416768721s ago: executing program 4 (id=372): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x439, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r3, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20048001}, 0x4000004) sendto$packet(r0, &(0x7f00000003c0)="311437873a963bf4856ad67f0b4e09d486dd", 0x12, 0x40, &(0x7f0000000200)={0x11, 0x8100, r3, 0x1, 0x0, 0x6, @local}, 0x14) 9m11.461813851s ago: executing program 4 (id=375): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000025c0)={0x2020}, 0x2020) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r2, 0x2) flock(r1, 0x5) 9m10.669421004s ago: executing program 4 (id=377): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x2001080, 0x0) 9m9.927216518s ago: executing program 4 (id=380): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x0, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe}, 0x9, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8}}}, 0xb8}}, 0x0) 9m9.30165907s ago: executing program 4 (id=383): r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x5a2119bf86ff29ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x0, 0x3, 0x3, 0x5}, 0x10}, 0x94) r2 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) 9m7.332973487s ago: executing program 33 (id=383): r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x5a2119bf86ff29ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x0, 0x3, 0x3, 0x5}, 0x10}, 0x94) r2 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) 5m44.7978989s ago: executing program 6 (id=1466): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) r2 = openat$binfmt(0xffffffffffffff9c, r0, 0x2, 0x0) close(r2) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x1000) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f00000004c0)={[&(0x7f0000000000)='\x00', &(0x7f00000003c0)=')!}\x00']}, 0x0, 0x0) 5m44.332271964s ago: executing program 6 (id=1470): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2}}, 0x2}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x1a4a, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) sendto$inet6(r0, &(0x7f0000000140)="8afb", 0x2, 0x8001, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) shutdown(r1, 0x1) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x0, 0x0, 0x1000000002, 0x0, 0x0, 0x6}, 0x0, 0x0) 5m43.124910137s ago: executing program 6 (id=1478): creat(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x143042, 0x80) 5m42.800561277s ago: executing program 6 (id=1480): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@noinit_itable}, {@dax_inode}, {@nolazytime}, {@abort}, {@dax_inode}, {@lazytime}, {@noload}, {}, {@noauto_da_alloc}]}, 0xfe, 0x567, &(0x7f0000003080)="$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") mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) unlink(&(0x7f0000000040)='./file0/file0\x00') 5m40.480561287s ago: executing program 6 (id=1488): syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000093c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, 0x0) 5m39.081785454s ago: executing program 6 (id=1494): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000100)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)="88", 0x1}], 0x1}, 0x0) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e24, @remote}], 0x10) sendto$inet6(r2, &(0x7f0000000040)='J', 0x1, 0x44085, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) sendto$inet6(r0, &(0x7f00000003c0)=']', 0x1, 0x4000, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) 5m37.343065706s ago: executing program 34 (id=1494): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000100)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)="88", 0x1}], 0x1}, 0x0) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e24, @remote}], 0x10) sendto$inet6(r2, &(0x7f0000000040)='J', 0x1, 0x44085, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) sendto$inet6(r0, &(0x7f00000003c0)=']', 0x1, 0x4000, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) 4m53.50838026s ago: executing program 7 (id=1727): syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x2, 0x1, 0xf000, 0x2000, &(0x7f0000005000/0x2000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)=@arm64={0x8, 0x2, 0x2, '\x00', 0x2}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x8, 0x0, 0x0) 4m51.343625649s ago: executing program 7 (id=1740): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r0, &(0x7f0000001980)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003740)="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", 0x281}], 0x1}}], 0x2, 0x240080a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r4, 0x0, 0x39000, 0x0) splice(r3, 0x0, r1, 0x0, 0x408c8, 0xe) write$binfmt_elf64(r2, &(0x7f0000001b40)=ANY=[], 0xfffffe3e) 4m50.087439021s ago: executing program 7 (id=1745): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000100)=0x9, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @loopback}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x54}, 0x0) sendto$packet(r0, &(0x7f00000003c0)="02", 0x1, 0x6044810, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) 4m49.47598462s ago: executing program 7 (id=1748): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)="67d8902400aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2d", 0x2c}, {&(0x7f0000000900)="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", 0x455}], 0x2}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) 4m49.130099884s ago: executing program 7 (id=1751): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82187202, 0x0) 4m48.671874533s ago: executing program 7 (id=1754): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x68, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34}]}}]}, 0x68}}, 0x0) 4m33.527992595s ago: executing program 35 (id=1754): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x68, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34}]}}]}, 0x68}}, 0x0) 4m19.18478201s ago: executing program 2 (id=1904): r0 = fsopen(&(0x7f0000000400)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='\xd1S{O', &(0x7f0000000080)='\x1e\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000001680)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\a\xa5\x8f\xab\x1a\xdaY\xfb\x03dhS\x97Uc\tnZ\xf8\xc6\x1f\xd3K\xfa\xc8\x8d#\xce)\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^\x97\b\x14\xc5\xa1\t\f\xdeg\x8d\x16wW\xf6\xacE\xa3\xc8\xe7\x05\x00\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B4/#W\xc5\x05\x9d\xd6\x02\x8cU!a\xdc|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3\x93\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xc2^', &(0x7f0000000640)='dU|\xcbM\xe6\x91q\xe0\x05\xbes\xc0\xd2\xdb0}\xa6\xc4tly\xe0+\xb8~\xd9ymx\xa1\x06\xb4F\xf3Q:\xfem\xea\xed\xfc\x04\xf88\xe0\xa1&\xa8\xff\x10\xb3\xb2\x92N\f\x00!\xdbV\xc3\xca\r\x8c\xfb\x8esJ\xb3\x1bf\xce\v\x0e\xe3\xd5', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000001ec0)='\\$#[\\/\x00\xd5\xd4^\xa7\xe4\xd4\x1f.yh\x18\xb8s\xe6\f\xaf*4\xe1\xa1e\x04%f\x8f\xde\x91\x04\xbb\xc8\x17\x15\xa4\xf0\x00\x15w\x00\x00\xed\xdd}\x00\x18\xf3\xde\n\xbe\x91\xc4\xc5\xe6\xd3o\xaau\xf34\t\x9d\x80rg\xbc\xee\x96p\x18\x9e(h\xeb\xd9\xde\xa6\xfc\x8e\xe3,\xae\xa8\xf0\x82y\x91\x1c{\x85 \xc7P\xa3\x9c\x06\xc1\xd3\x92\xcd\xcc\x17\xb2}\x13:\xbbh\"%;\b\x7f\x91\x8a\xa5Z\x92~<\xfe3\x19\xdcVJ\f\xd1\x89d\xf9N\xbd\x92\x86\xa2\xa8\xc0:\x1f\n\xc9\x8eUO\x8e\xea\x99\xe1\xbe%Y\x9eH#\xa4\x9d5\xa88m6\x89kE\xce\xc3\aBW\xec_\xea_\x81\xbe\x86~\x84F\xa9\xcd\xba\xfb\xd8\x8f\x01\x81~\x9c#\r\x87\xcf\x19\xb9\xbd \xcb\xff\x88io\xb0\xb1\xa0B\x8cI\x82+\xc4\xcf\xf4!+\x16v\xb6\x8a\xb7k}\x1d\xf2\x1c\x00\x8f\xd7\x84R\x12\xed){SM[\xe6g6\xfeF\x1dJ\x83', &(0x7f0000000380)='\xbd\x10\xe2\n\xc4\xa8\xa8?\a\x9e@O<\xf4s\x85~X\x85\xdc\x11\x04a\xf8\xa6f\x96nB\x02\x10+C$\f\xb3\xcc\xed\"M\xb6 V\xc5\x9a\x11o^\xda\xc8', 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000ec0)='\xcfD\xbc\xbf\x95@\xd6j\'$\x1d\x14\xb7!\x8b\xff\xdc\x83\xc5$\xb3\xecr\xe4G:\x93\xdfj\x96\x7f\x03\xe5\x94\x04[\x02\xa9[>\xf9\x9c\x83@\x1e\x99\xcah\x85\xb8\xbeSAk\xf4\xb6 \xdf\xa0P\x18\x19\xae\x8c\x9a\x19mm\r<|\xe8\x9e\xa0x\x84p2\xf9\xe2\xed\xb0\f\x7f;\xf6J18G\x84c\x88\x9d{\xf4~\xdby\xe1\xdf\x1a\xae\xd6ez\xe5\xa8\xe1\'', 0x0, r0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000a00)='wsync', &(0x7f0000000b40)="b2", 0x1) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000840)='\x00\x9b~\xd7\xde\x91d\r\xa3e\xec=Z\xce\xb0\xdfr\xbfQ\x85n4\xf5T\xc2\x86;\x03K\x80pF\xeaK\xb4t\xef\'\n\x05\xc9\xcfc\x92\bE\xf9\xf9\xcf\x96\x99\xde\x1e3\xcdA\xf9\x1bj\xc3\x8b\xbe\xee\xb3e\xd8Mk\xf1+\xbf\xd5\x98\x8c\x13\xdc\x85\x17\xcd\xf8\xf5\a\xde9\xd1\x8b\xf0&P\x92\x99u8\xb6,#\x0f\x89\xd9ic\xb5\xba\xe7\x03\x8d-\v\xd3S\x98\x89@\x8aWLU\xb1\xc4i6\xa5\xb7\x1d\xf3s\xaf\x7f\xb16\xa2\xbe\xfa\xfa~2\x1d\xeb\xd0G\xdc\a\xa3\x93n\x82\xa7h\xd7\x83N\x8aW\xaa\xc1\xc7\xec\xea\x13\xbe\xf3fQ\xfa\x8cP\xa7\xc1O,\x83\xec\xa9\xeb\xb2 u\x15A\xde\f8T\x81\xccces\xfa\xef\xf4 =z\xfc\xef]~tY \xef8\r,x~\xa0,\xc7@\xc0\xef\xc1`\xec}\xa2\x8d\x95\xff0c\xcd\x02~\xb7\x1a\x93\xff\xcd\xadB7\x13\x84BPC\xa4\xa2O\xf0\xdd\xde\xc5H.y\xfc\xe9$\xf6\xa6t\xa3\xdbr\x00+\x01{\xfb-\x1f\x1b\xeb\xd9b\xf0\n\x99\x0f4\xfa_\x10\xd0%\xe7o\xc9\bO\xfe\xfb\xca\xf8\x9d]\xa1\x98(Nw\x87\xd15', &(0x7f0000000100)="8d", 0x1) close(r0) 4m18.777316864s ago: executing program 2 (id=1905): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000025ad9835850000007b"], 0x0, 0x4}, 0x94) r0 = socket(0x200000000000011, 0x2, 0x1) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa424e1aa2e0d4080045000014"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 4m17.535741298s ago: executing program 2 (id=1910): symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) setresuid(0xee00, 0xee01, 0x0) utimensat(r0, 0x0, 0x0, 0x0) 4m17.028275207s ago: executing program 2 (id=1913): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f00000000c0)={[{@quota}, {@bsdgroups}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x46b, &(0x7f0000000580)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r0, &(0x7f0000003440)={0x2020}, 0x2020) 4m16.265740575s ago: executing program 2 (id=1918): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1810754, &(0x7f00000001c0)={[{@jqfmt_vfsold}, {@errors_continue}, {@delalloc}, {@prjquota}, {@usrquota}, {@resuid={'resuid', 0x3d, 0xee00}}, {@usrjquota, 0x5}, {@min_batch_time={'min_batch_time', 0x3d, 0xfffffffc}}, {@nodiscard}, {@test_dummy_encryption}]}, 0xff, 0x46e, &(0x7f0000000e40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0xd2f0}) unshare(0x22020400) mkdir(&(0x7f0000000140)='./file0\x00', 0x12) 4m15.707732725s ago: executing program 2 (id=1919): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x13}, &(0x7f0000000240)=0x0) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000500)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4m13.944230858s ago: executing program 36 (id=1919): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x13}, &(0x7f0000000240)=0x0) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000500)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m46.305546648s ago: executing program 8 (id=2326): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={0x30, r3, 0x1, 0x0, 0x25dfdbff, {0x7}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x81}, @L2TP_ATTR_IFNAME={0x14}]}, 0x30}}, 0x2) syz_emit_ethernet(0x4c, &(0x7f00000002c0)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], {0x3, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "ffb00a9c2023"}}}}}}}, 0x0) 2m45.924885494s ago: executing program 8 (id=2328): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(r1, 0x1, &(0x7f0000000100)={{0x0, 0x989680}, {r2, r3+10000000}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r5, 0x0, r4, 0x0, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') 2m45.261596376s ago: executing program 8 (id=2333): r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r2, 0x100, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getdents(r2, &(0x7f0000000680)=""/160, 0xa0) 2m44.84571686s ago: executing program 8 (id=2338): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x2048c5, &(0x7f0000000840)={[{@utf8no}, {@shortname_winnt}, {@uni_xlateno}, {@fat=@nfs_nostale_ro}, {@shortname_lower}, {@shortname_win95}, {@fat=@sys_immutable}, {@utf8}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x10000005}}, {@shortname_mixed}, {@fat=@quiet}, {@shortname_lower}]}, 0x0, 0x29f, &(0x7f0000000580)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000002c00)={0x2020}, 0x2020) 2m44.449048537s ago: executing program 8 (id=2342): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@delchain={0x84, 0x64, 0xf31, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xfff2, 0xffff}, {0xfff3, 0xffff}, {0xb, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x54, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x50, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4c, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0xd}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x4, 0x4, 0xf9}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x80}]}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x44044) 2m43.645080317s ago: executing program 8 (id=2346): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)=""/230, 0xe6}, {&(0x7f00000004c0)=""/168, 0xa8}, {&(0x7f0000000900)=""/106, 0x6a}, {&(0x7f00000000c0)=""/26, 0xfe4b}], 0x4}, 0x2000000}], 0x2, 0x101, 0x0) 2m42.667610188s ago: executing program 37 (id=2346): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)=""/230, 0xe6}, {&(0x7f00000004c0)=""/168, 0xa8}, {&(0x7f0000000900)=""/106, 0x6a}, {&(0x7f00000000c0)=""/26, 0xfe4b}], 0x4}, 0x2000000}], 0x2, 0x101, 0x0) 10.414999879s ago: executing program 5 (id=3267): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x2, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) 10.099582409s ago: executing program 5 (id=3270): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x18) syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000c80)='./file0\x00', 0x800400, &(0x7f0000000200)=ANY=[@ANYBLOB='lastblock=00000000000000000226,mode=00000000000000000000000,session=00000000000000000000,noadinicb,nostrict,uid=', @ANYRESDEC=0x0, @ANYBLOB="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"], 0x4, 0xc24, &(0x7f0000000d00)="$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") symlink(&(0x7f0000000280)='.\x02\x00', &(0x7f00000002c0)='.\x02\x00') mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) creat(&(0x7f0000000000)='.\x02\x00', 0x200) 9.333581731s ago: executing program 5 (id=3277): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000440)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x10, 0x10000000}, 0x0, &(0x7f0000000240)={0x1f}, 0x0, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x2d, 0x0) 8.151599414s ago: executing program 5 (id=3288): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000740)={0x24, 0x0, 0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000000), 0xd52, 0x882) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) close(0x3) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2804407, &(0x7f0000000080), 0x0, 0x55f, &(0x7f0000000c80)="$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") chdir(0x0) 7.457844868s ago: executing program 0 (id=3293): socket$inet6_sctp(0xa, 0x5, 0x84) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}, {0x0}, {0x0}], 0x1fc}, 0x0, 0x40000000, 0x1}) r0 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x59c4, 0x8, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0xc, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800, 0x1}) io_uring_enter(r0, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) 7.307679156s ago: executing program 5 (id=3295): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 5.96791483s ago: executing program 0 (id=3301): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0ff5b14104fe62cc60e413905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf2364149215108333719acd97cfa107d40224edc5465a93df8513a32ec450bebc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394f"], 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="000086dd0001110004000000a60c6eec00be004411"], 0xfdef) 5.247982289s ago: executing program 9 (id=3305): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x557, &(0x7f0000000600)="$eJzs3c9rHFUcAPDvbDb9rU2hFBWRQA9WajdN4o8KHupRtFjQe12SbSjZdEt2U5pYsD3YixcpgogF8a53j8V/wL+ioIUiJerBS2Q2M2ma3STbdOsG5/OBCe/tzO6btzPfl+/s22UCKKzR9E8p4sWI+CqJOBwRSbauHNnK0dXtlh9en0qXJFZWPv4jaW+X1vPXyp93MKu8EBG/fBFxstTZbnNxabZar9fms/pYa+7KWHNx6dSluepMbaZ2eWJy8sybkxPvvP1W3/r62vm/v/3o7vtnvjy+/M1P94/cTuJsHOrbq7fdWF8ZjdHsPRmOsxs2HO9vuwOXDHoH2JGhLM6HIx0DDsdQFvXA/9/nEbECFFQi/qGg8jwgv7Zffz1fBA/eW70A6ux/efWzkdjXvjY6sJw8dmWUXu+O9KH9tI2ff79zO11iw+cpAM/SjZsRcbpc7hz/kmz827nTPWyzsQ3jH/x37qb5z+vd8p/SWv4TXfKfg11idye2j//S/T40s6k0/3u3a/67Nmk1MpTVnmvnfMPJxUv1Wjq2PR8RJ2J4b1rfaj7nzPK91Tx7f+e69flfuqTt57lgth/3y3sff850tVV92n7nHtyMeKlr/pusHf+ky/FP34/zPbZxrHbnlc3Wbd//Z2vlh4hXux7/RzNaydbzk2Pt82EsPys6/XXr2K+btT/o/qfHf2jr/o8k6+drm0/exvf7/qlttu6x/kfv5/+e5JN2eU/22LVqqzU/HrEn+bDz8YlHz83r+fZp/08c33r863b+p6H8aY/9v3X0x5d76v+Ajv/0Ex3/Jy/c++Cz7zZrv7fx74126UT2SC/jX687+DTvHQAAAAAAAOw2pYg4FEmpslYulSqV1e93HI0DpXqj2Tp5sbFweTrav5UdieFSPtN9eN33Icaz78Pm9YkN9cmIOBIRXw/tb9crU4369KA7DwAAAAAAAAAAAAAAAAAAALvEwU1+/5/6bWjQewc8c275DcW1bfz3405PwK7k/z8UVzna97gGCsj/fygu8Q/FJf6huMQ/FJf4h+IS/wAAAAAAAAAAAAAAAAAAAAAAAAAAANBX58+dS5eV5YfXp9L69NXFhdnG1VPTteZsZW5hqjLVmL9SmWk0Zuq1ylRjbrvXqzcaV8YnYuHaWKvWbI01F5cuzDUWLrcuXJqrztQu1NxnEAAAAAAAAAAAAAAAAAAAADo1F5dmq/V6bV5BYUeFcl74c3fsj0J/CoMemQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgkX8DAAD//yRANW8=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x0) sendfile(r1, r1, 0x0, 0x80000000) capset(0x0, 0x0) socket(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x441, 0x105) fallocate(r2, 0x10, 0x3ffd, 0x8000) 5.206588828s ago: executing program 1 (id=3306): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file4/file6\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x2000, r1}, 0x0) landlock_restrict_self(r0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1/file4/file6\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file1/file4/file7/file6\x00', 0x0) 4.719042135s ago: executing program 9 (id=3307): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x0, r2, 0x1, 0x2, 0x6, @broadcast}, 0x14) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 4.629669207s ago: executing program 1 (id=3308): socket$xdp(0x2c, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x9, @empty}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x24, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x200003e1}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x1ff}, @TCA_FQ_FLOW_PLIMIT={0x8}, @TCA_FQ_RATE_ENABLE={0x8}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x51}, 0x20040000) shutdown(r0, 0x1) 4.307984144s ago: executing program 0 (id=3310): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mknodat$null(r0, &(0x7f0000000040)='./file1/file0\x00', 0x0, 0x103) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) 4.216624275s ago: executing program 9 (id=3311): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x80000, {0x0, 0x0, 0x0, r4, {0x0, 0x11}, {0x5, 0xb}, {0xb, 0x4}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4000000) 4.086711284s ago: executing program 1 (id=3312): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r1, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)={0x1c, r5, 0x1, 0x80, 0x0, {{0x8}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c000) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r0) 4.029567663s ago: executing program 3 (id=3313): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x3) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x3) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000400)=0x7) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000200)=0xa) 3.665669925s ago: executing program 3 (id=3314): syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) 3.448757547s ago: executing program 9 (id=3315): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000) 3.409359543s ago: executing program 1 (id=3316): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1/file4/file6\x00', 0x104) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x6125}, 0x18, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1/file4/file7\x00', 0x3470a3, 0x42) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x2000, r1}, 0x0) landlock_restrict_self(r0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1/file4/file6\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file1/file4/file7/file6\x00', 0x0) 3.406263846s ago: executing program 0 (id=3317): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x2}, {0xfffe}}}]}}]}]}]}}]}, 0x6c}}, 0x0) 3.121564679s ago: executing program 9 (id=3318): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x75, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003, 0x0, 0x0, 0x0, 0xe}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r1, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0xffffffff}], 0x1, 0x10000, 0x0) 3.121191329s ago: executing program 1 (id=3319): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x101c02, 0x26) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x101880a, &(0x7f0000005a80)=ANY=[@ANYBLOB="6e6f646973636172642c6261636b67726f756e645f67633d73796e632c61636c2c6673796e635f6d6f64653d7374726963742c696e6c696e655f78617474722c6673796e635f6d6f64653d706f7369782c646973636172645f756e69743d7365676d656e742c6261636b67726f756e645f67633d6f6e2c6e6f696e6c696e655f78617474722c646973636172645f756e69743d626c6f636b2c6673796e635f6d6f64653d7374726963742c617467632c657874656e745f63616368652c6661756c745f696e6a656374696f6e3d30303030303030303030303030303031343033302c00271d57a599b8b169a579679e220c689eaaec4fa6229021e75c68a687d319b615573b0b0ceefba8e2e2419434463974ef8174b66469344931de0ccad650792761"], 0x1, 0x550b, &(0x7f0000000540)="$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") add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) setreuid(0x0, 0xee00) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x108843, 0x98) 2.800984435s ago: executing program 3 (id=3320): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97"], 0xffe) 1.578740583s ago: executing program 3 (id=3321): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x87) connect$inet6(r0, &(0x7f0000000500)={0xa, 0xfffd, 0x0, @loopback, 0x5}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000440), 0x10057) sendfile(r0, r1, &(0x7f0000000000)=0x805, 0x20001) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x39000, 0x0) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[], 0xfffffe3e) 1.449316031s ago: executing program 0 (id=3322): prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) r0 = mq_open(&(0x7f0000000000)='batadv_slave_1\xbb', 0x8c2, 0x30, &(0x7f0000000080)={0x3, 0x8, 0x6, 0xc07}) mq_getsetattr(r0, &(0x7f0000000040)={0x0, 0x40, 0x4, 0xffff}, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, 0x8) mq_timedreceive(r0, &(0x7f0000000100)=""/90, 0x5a, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x5, 0x0) 1.331662173s ago: executing program 9 (id=3323): syz_open_dev$media(&(0x7f0000000240), 0x9, 0xc8000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="8091", 0x2) 1.285434079s ago: executing program 1 (id=3324): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000580)={0x0}) r2 = syz_io_uring_setup(0x9c, &(0x7f0000000500)={0x0, 0x5865, 0x10, 0x2, 0x24d}, &(0x7f0000000700)=0x0, &(0x7f0000000640)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f00000002c0)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x100847c0, 0x0, 0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f00000003c0)={r1, 0xfffffffffffffa6f, 0xfffffffc}) 660.434718ms ago: executing program 5 (id=3325): bpf$MAP_CREATE(0x0, 0x0, 0x48) mkdirat(0xffffffffffffff9c, 0x0, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000740), 0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0), 0x0, 0x2040000, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x60, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x18) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x0, 0xcbf, 0x4, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x8, 0x0, 0xd65}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x4, 0x5, 0x2, 0x4038a09, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2={0xff, 0x5}, 0x0, 0x40, 0xb3}}) 466.549232ms ago: executing program 3 (id=3326): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "d5a1d50399459b68"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) shutdown(r0, 0x0) 397.243202ms ago: executing program 0 (id=3327): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff986425dc, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x9}}, 0x50) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="d800000000000000f9ffffffffffffff05000000000000000200000000000000030000000000000002000000000000000500010004000200020000000000000006000000000000000000000000000000020140000000000001000000000000000000000000000000ffffff7f570000000300000000400000ff010000", @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="040000000300000000000000000000000000200037050000000000002b"], 0x0, 0x0, 0x0}) getdents64(r3, &(0x7f0000000100)=""/134, 0x86) 0s ago: executing program 3 (id=3328): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43a"], 0x340a) kernel console output (not intermixed with test programs): ce strings: Mfr=1, Product=2, SerialNumber=3 [ 567.717732][ T11] usb 1-1: Product: syz [ 567.722187][ T11] usb 1-1: Manufacturer: syz [ 567.727330][ T11] usb 1-1: SerialNumber: syz [ 567.862258][T10183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 567.948998][T10183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 568.049294][ T7333] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.199219][ T3855] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.266851][ T3855] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.327345][ T3855] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.729133][ T11] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000400. ret = -EPROTO [ 569.742551][ T11] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 569.753876][ T11] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 569.780479][T10323] 9pnet_fd: p9_fd_create_unix (10323): problem connecting socket: ./file0: -103 [ 569.830809][ T11] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 569.911302][ T11] usb 1-1: USB disconnect, device number 7 [ 572.488678][T10375] netlink: 2028 bytes leftover after parsing attributes in process `syz.3.1565'. [ 572.498224][T10375] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1565'. [ 572.519922][T10368] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1563'. [ 572.762235][ T7333] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 572.770761][ T7333] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 572.911484][ T7333] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 572.920788][ T7333] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 574.068682][T10393] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 574.478778][T10404] netlink: 'syz.2.1575': attribute type 4 has an invalid length. [ 574.513774][T10404] netlink: 'syz.2.1575': attribute type 4 has an invalid length. [ 574.686253][ T42] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 574.886092][ T42] usb 8-1: Using ep0 maxpacket: 32 [ 574.922757][ T42] usb 8-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 574.932542][ T42] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.941114][ T42] usb 8-1: Product: syz [ 574.945585][ T42] usb 8-1: Manufacturer: syz [ 574.950410][ T42] usb 8-1: SerialNumber: syz [ 575.340403][ T42] usb 8-1: config 0 descriptor?? [ 575.368695][ T42] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 577.111931][ T42] gspca_ov534_9: reg_r err -71 [ 577.117541][T10432] loop2: detected capacity change from 0 to 1024 [ 577.151811][T10432] EXT4-fs: Ignoring removed orlov option [ 577.158415][T10432] ext4: Bad value for 'max_dir_size_kb' [ 577.304891][T10435] netlink: 'syz.3.1588': attribute type 4 has an invalid length. [ 577.382486][T10435] netlink: 'syz.3.1588': attribute type 4 has an invalid length. [ 577.387933][ T42] gspca_ov534_9: Unknown sensor 0000 [ 577.390726][ T42] ov534_9 8-1:0.0: probe with driver ov534_9 failed with error -22 [ 577.443674][ T42] usb 8-1: USB disconnect, device number 2 [ 578.283691][T10453] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1593'. [ 578.419794][T10459] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1594'. [ 578.455066][T10459] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1594'. [ 578.506909][T10459] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1594'. [ 579.404045][T10478] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1600'. [ 579.471861][T10481] netlink: 'syz.7.1600': attribute type 1 has an invalid length. [ 582.245767][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 583.294211][T10555] syz.2.1616 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 585.295426][T10589] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1627'. [ 585.666740][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 585.666824][ T30] audit: type=1800 audit(1759827582.600:381): pid=10597 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1635" name="file1" dev="overlay" ino=80 res=0 errno=0 [ 587.049996][ T30] audit: type=1326 audit(1759827583.980:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10622 comm="syz.2.1645" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f18539 code=0x7ffc0000 [ 587.123239][ T30] audit: type=1326 audit(1759827584.010:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10622 comm="syz.2.1645" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f18539 code=0x7ffc0000 [ 587.146156][ T30] audit: type=1326 audit(1759827584.010:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10622 comm="syz.2.1645" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f18539 code=0x7ffc0000 [ 587.170972][ T30] audit: type=1326 audit(1759827584.020:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10622 comm="syz.2.1645" exe="/root/syz-executor" sig=0 arch=40000003 syscall=303 compat=1 ip=0xf7f18539 code=0x7ffc0000 [ 587.194232][ T30] audit: type=1326 audit(1759827584.020:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10622 comm="syz.2.1645" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f18539 code=0x7ffc0000 [ 587.217075][ T30] audit: type=1326 audit(1759827584.020:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10622 comm="syz.2.1645" exe="/root/syz-executor" sig=0 arch=40000003 syscall=353 compat=1 ip=0xf7f18539 code=0x7ffc0000 [ 587.239612][ T30] audit: type=1326 audit(1759827584.020:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10622 comm="syz.2.1645" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f18539 code=0x7ffc0000 [ 588.914508][T10645] all: renamed from bridge_slave_0 (while UP) [ 588.978821][T10636] loop2: detected capacity change from 0 to 40427 [ 589.018966][T10636] F2FS-fs (loop2): build fault injection rate: 771 [ 589.041510][T10636] F2FS-fs (loop2): invalid crc value [ 589.417639][T10654] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1659'. [ 589.622477][T10636] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 589.647277][T10636] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 589.696657][T10636] overlayfs: overlapping lowerdir path [ 589.775045][ T5792] syz-executor: attempt to access beyond end of device [ 589.775045][ T5792] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 589.791444][ T5792] CPU: 0 UID: 0 PID: 5792 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(none) [ 589.791634][ T5792] Tainted: [W]=WARN [ 589.791688][ T5792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 589.791777][ T5792] Call Trace: [ 589.791833][ T5792] [ 589.791893][ T5792] __dump_stack+0x26/0x30 [ 589.792074][ T5792] dump_stack_lvl+0x1df/0x270 [ 589.792261][ T5792] dump_stack+0x1e/0x25 [ 589.792416][ T5792] f2fs_handle_critical_error+0xa6f/0xc20 [ 589.792618][ T5792] f2fs_stop_checkpoint+0x65/0x80 [ 589.792775][ T5792] f2fs_write_end_io+0x101c/0x1bc0 [ 589.793006][ T5792] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 589.793168][ T5792] bio_endio+0xeb1/0x1010 [ 589.793337][ T5792] submit_bio_noacct+0x2009/0x2930 [ 589.793568][ T5792] submit_bio+0x57c/0x630 [ 589.793743][ T5792] f2fs_submit_write_bio+0x92/0x250 [ 589.793965][ T5792] __submit_merged_bio+0x16f/0x6a0 [ 589.794174][ T5792] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 589.794375][ T5792] __submit_merged_write_cond+0x458/0x9a0 [ 589.794620][ T5792] f2fs_write_data_pages+0x4bb2/0x5480 [ 589.794946][ T5792] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 589.795136][ T5792] ? folios_put_refs+0x1/0xb10 [ 589.795316][ T5792] ? filter_irq_stacks+0x49/0x190 [ 589.795475][ T5792] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 589.795669][ T5792] ? stack_depot_save_flags+0x35/0x7b0 [ 589.795828][ T5792] ? kmsan_get_metadata+0xfb/0x160 [ 589.796028][ T5792] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 589.796209][ T5792] ? kmsan_get_metadata+0xfb/0x160 [ 589.796387][ T5792] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 589.796570][ T5792] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 589.796731][ T5792] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 589.796895][ T5792] do_writepages+0x3ef/0x860 [ 589.797105][ T5792] ? _raw_spin_unlock+0x30/0x50 [ 589.797293][ T5792] ? wbc_attach_and_unlock_inode+0x131/0x680 [ 589.797526][ T5792] filemap_fdatawrite+0x207/0x260 [ 589.797772][ T5792] f2fs_sync_dirty_inodes+0x2ab/0x9e0 [ 589.797987][ T5792] f2fs_write_checkpoint+0xfe2/0x2b00 [ 589.798312][ T5792] kill_f2fs_super+0x2ff/0x970 [ 589.798514][ T5792] ? __pfx_kill_f2fs_super+0x10/0x10 [ 589.798691][ T5792] deactivate_locked_super+0xc8/0x3c0 [ 589.798877][ T5792] deactivate_super+0x12f/0x140 [ 589.799048][ T5792] cleanup_mnt+0x6fb/0x780 [ 589.799238][ T5792] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 589.799418][ T5792] ? __pfx___cleanup_mnt+0x10/0x10 [ 589.799617][ T5792] __cleanup_mnt+0x22/0x30 [ 589.799807][ T5792] task_work_run+0x206/0x2b0 [ 589.800008][ T5792] exit_to_user_mode_loop+0x2d1/0x370 [ 589.800210][ T5792] __do_fast_syscall_32+0x12a/0x150 [ 589.800370][ T5792] ? irqentry_exit_to_user_mode+0x7f/0xa0 [ 589.800594][ T5792] do_fast_syscall_32+0x38/0x80 [ 589.800748][ T5792] do_SYSENTER_32+0x1f/0x30 [ 589.800902][ T5792] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 589.801090][ T5792] RIP: 0023:0xf7f18539 [ 589.801200][ T5792] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 589.801336][ T5792] RSP: 002b:00000000ffa2e538 EFLAGS: 00000206 ORIG_RAX: 0000000000000034 [ 589.801477][ T5792] RAX: 0000000000000000 RBX: 00000000ffa2e5e0 RCX: 0000000000000009 [ 589.801570][ T5792] RDX: 00000000f73a5ff4 RSI: 00000000f71f6ae8 RDI: 00000000ffa2f674 [ 589.801670][ T5792] RBP: 00000000ffa2e5e0 R08: 0000000000000000 R09: 0000000000000000 [ 589.801762][ T5792] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 589.801852][ T5792] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 589.801987][ T5792] [ 590.161330][ T5792] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 590.168629][ T5792] CPU: 0 UID: 0 PID: 5792 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(none) [ 590.168844][ T5792] Tainted: [W]=WARN [ 590.168898][ T5792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 590.168988][ T5792] Call Trace: [ 590.169042][ T5792] [ 590.169100][ T5792] __dump_stack+0x26/0x30 [ 590.169283][ T5792] dump_stack_lvl+0x1df/0x270 [ 590.169476][ T5792] dump_stack+0x1e/0x25 [ 590.169638][ T5792] f2fs_handle_critical_error+0xa6f/0xc20 [ 590.169845][ T5792] f2fs_stop_checkpoint+0x65/0x80 [ 590.170007][ T5792] f2fs_write_end_io+0x101c/0x1bc0 [ 590.170223][ T5792] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 590.170393][ T5792] bio_endio+0xeb1/0x1010 [ 590.170564][ T5792] submit_bio_noacct+0x2009/0x2930 [ 590.170803][ T5792] submit_bio+0x57c/0x630 [ 590.170978][ T5792] f2fs_submit_write_bio+0x92/0x250 [ 590.171197][ T5792] __submit_merged_bio+0x16f/0x6a0 [ 590.171413][ T5792] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 590.171613][ T5792] __submit_merged_write_cond+0x458/0x9a0 [ 590.171863][ T5792] f2fs_write_data_pages+0x4bb2/0x5480 [ 590.172180][ T5792] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 590.172377][ T5792] ? folios_put_refs+0x1/0xb10 [ 590.172563][ T5792] ? filter_irq_stacks+0x49/0x190 [ 590.172726][ T5792] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 590.172932][ T5792] ? stack_depot_save_flags+0x35/0x7b0 [ 590.173095][ T5792] ? kmsan_get_metadata+0xfb/0x160 [ 590.173289][ T5792] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 590.173465][ T5792] ? kmsan_get_metadata+0xfb/0x160 [ 590.173645][ T5792] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 590.173834][ T5792] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 590.173995][ T5792] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 590.174157][ T5792] do_writepages+0x3ef/0x860 [ 590.174375][ T5792] ? _raw_spin_unlock+0x30/0x50 [ 590.174555][ T5792] ? wbc_attach_and_unlock_inode+0x131/0x680 [ 590.174802][ T5792] filemap_fdatawrite+0x207/0x260 [ 590.175052][ T5792] f2fs_sync_dirty_inodes+0x2ab/0x9e0 [ 590.175265][ T5792] f2fs_write_checkpoint+0xfe2/0x2b00 [ 590.175588][ T5792] kill_f2fs_super+0x2ff/0x970 [ 590.175803][ T5792] ? __pfx_kill_f2fs_super+0x10/0x10 [ 590.175979][ T5792] deactivate_locked_super+0xc8/0x3c0 [ 590.176166][ T5792] deactivate_super+0x12f/0x140 [ 590.176331][ T5792] cleanup_mnt+0x6fb/0x780 [ 590.176524][ T5792] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 590.176711][ T5792] ? __pfx___cleanup_mnt+0x10/0x10 [ 590.176916][ T5792] __cleanup_mnt+0x22/0x30 [ 590.177104][ T5792] task_work_run+0x206/0x2b0 [ 590.177304][ T5792] exit_to_user_mode_loop+0x2d1/0x370 [ 590.177507][ T5792] __do_fast_syscall_32+0x12a/0x150 [ 590.177671][ T5792] ? irqentry_exit_to_user_mode+0x7f/0xa0 [ 590.177906][ T5792] do_fast_syscall_32+0x38/0x80 [ 590.178066][ T5792] do_SYSENTER_32+0x1f/0x30 [ 590.178220][ T5792] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 590.178413][ T5792] RIP: 0023:0xf7f18539 [ 590.178523][ T5792] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 590.178657][ T5792] RSP: 002b:00000000ffa2e538 EFLAGS: 00000206 ORIG_RAX: 0000000000000034 [ 590.178805][ T5792] RAX: 0000000000000000 RBX: 00000000ffa2e5e0 RCX: 0000000000000009 [ 590.178900][ T5792] RDX: 00000000f73a5ff4 RSI: 00000000f71f6ae8 RDI: 00000000ffa2f674 [ 590.179010][ T5792] RBP: 00000000ffa2e5e0 R08: 0000000000000000 R09: 0000000000000000 [ 590.179106][ T5792] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 590.179199][ T5792] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 590.179327][ T5792] [ 590.538066][ T5792] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 592.366836][T10684] bridge0: port 3(veth0_virt_wifi) entered blocking state [ 592.374593][T10684] bridge0: port 3(veth0_virt_wifi) entered disabled state [ 592.385353][T10684] veth0_virt_wifi: entered allmulticast mode [ 592.395674][T10684] veth0_virt_wifi: entered promiscuous mode [ 593.071015][ T11] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 593.186097][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 593.266131][ T11] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 593.275859][ T11] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.284117][ T11] usb 6-1: Product: syz [ 593.288906][ T11] usb 6-1: Manufacturer: syz [ 593.293722][ T11] usb 6-1: SerialNumber: syz [ 593.793726][T10714] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1680'. [ 594.096263][ T11] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 594.109859][ T11] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 594.122156][ T11] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 594.251203][ T11] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 594.367099][ T11] usb 6-1: USB disconnect, device number 8 [ 595.215663][ T42] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 595.238762][T10738] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 595.439633][ T42] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 595.451721][ T42] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 595.463769][ T42] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 595.478521][ T42] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 595.488642][ T42] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.544121][ T42] usb 6-1: config 0 descriptor?? [ 596.054293][ T42] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 596.121796][T10755] loop7: detected capacity change from 0 to 256 [ 596.146119][T10755] exfat: Deprecated parameter 'utf8' [ 596.151889][T10755] exfat: Deprecated parameter 'namecase' [ 596.158755][T10755] exfat: Deprecated parameter 'namecase' [ 596.164710][T10755] exfat: Deprecated parameter 'utf8' [ 596.250582][T10755] exFAT-fs (loop7): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 596.326808][T10755] exFAT-fs (loop7): start_clu is invalid cluster(0x400) [ 596.625884][ T11] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 596.806738][ T11] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 596.818201][ T11] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 596.828557][ T11] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 596.838044][ T11] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.902721][ T11] usb 3-1: config 0 descriptor?? [ 597.358744][ T11] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 597.392943][ T11] cp2112 0003:10C4:EA90.0007: hidraw1: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 597.489744][T10772] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 597.516875][ T5867] IPVS: starting estimator thread 0... [ 597.555640][ T11] cp2112 0003:10C4:EA90.0007: Part Number: 0x82 Device Version: 0xFE [ 597.617720][T10775] IPVS: using max 192 ests per chain, 9600 per kthread [ 597.867083][T10782] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1708'. [ 598.141280][T10187] usb 6-1: USB disconnect, device number 9 [ 598.173085][T10761] cp2112 0003:10C4:EA90.0007: Error starting transaction: -38 [ 598.210218][ T11] cp2112 0003:10C4:EA90.0007: error reading lock byte: -71 [ 598.238610][ T11] usb 3-1: USB disconnect, device number 9 [ 599.773782][T10819] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1719'. [ 599.798043][T10819] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1719'. [ 599.823120][T10818] 9pnet: p9_errstr2errno: server reported unknown error 184467440 [ 600.572191][T10836] bond2: (slave wlan0): Releasing backup interface [ 601.153712][T10187] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 601.374411][T10187] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 601.385527][T10187] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.396832][T10187] usb 8-1: Product: syz [ 601.401237][T10187] usb 8-1: Manufacturer: syz [ 601.407961][T10187] usb 8-1: SerialNumber: syz [ 602.065692][T10187] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 602.078249][T10187] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 602.089244][T10187] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 602.118806][T10187] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -71 [ 602.255455][T10187] usb 8-1: USB disconnect, device number 3 [ 603.092820][T10875] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1739'. [ 603.455503][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 603.462614][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 604.755829][T10895] overlayfs: failed to clone upperpath [ 604.804441][T10895] overlayfs: failed to clone lowerpath [ 605.426364][T10906] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1750'. [ 606.246843][ T30] audit: type=1326 audit(1759827603.170:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10905 comm="syz.3.1753" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f28539 code=0x7fc00000 [ 606.444057][T10919] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1759'. [ 608.245568][T10187] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 608.453464][T10187] usb 3-1: config 0 has an invalid interface number: 10 but max is 0 [ 608.464410][T10187] usb 3-1: config 0 has no interface number 0 [ 608.472324][T10187] usb 3-1: New USB device found, idVendor=050d, idProduct=0122, bcdDevice=69.f6 [ 608.481957][T10187] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.505703][T10187] usb 3-1: config 0 descriptor?? [ 608.832543][T10961] netlink: 'syz.5.1774': attribute type 1 has an invalid length. [ 608.917853][T10961] 8021q: adding VLAN 0 to HW filter on device bond3 [ 609.110871][T10961] bond3: (slave veth11): Enslaving as an active interface with a down link [ 609.150881][T10964] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 609.159407][T10964] bond3: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 610.264636][T10187] pegasus 3-1:0.10: setup Pegasus II specific registers [ 610.412612][T10187] pegasus 3-1:0.10: can't locate MII phy, using default [ 610.452075][T10187] pegasus 3-1:0.10: eth13, Belkin F5U122 10/100 USB Ethernet, 5a:05:e6:34:13:ae [ 610.468297][T10187] usb 3-1: USB disconnect, device number 10 [ 611.404314][T11001] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1789'. [ 611.890395][ T30] audit: type=1326 audit(1759827608.820:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11004 comm="syz.3.1791" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f28539 code=0x7fc00000 [ 612.050055][ T30] audit: type=1326 audit(1759827608.850:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11004 comm="syz.3.1791" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f28539 code=0x7fc00000 [ 612.574133][ T30] audit: type=1326 audit(1759827609.500:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11004 comm="syz.3.1791" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f28558 code=0x7fc00000 [ 612.597356][ T30] audit: type=1326 audit(1759827609.500:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11004 comm="syz.3.1791" exe="/root/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f28567 code=0x7fc00000 [ 612.620185][ T30] audit: type=1326 audit(1759827609.500:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11004 comm="syz.3.1791" exe="/root/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf7f28539 code=0x7fc00000 [ 612.761456][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 613.456617][T11033] netlink: 'syz.2.1800': attribute type 8 has an invalid length. [ 613.875664][T11041] sd 0:0:1:0: PR command failed: 1026 [ 613.882601][T11041] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 613.890664][T11041] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 614.307180][T11048] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1807'. [ 614.821377][T11056] loop5: detected capacity change from 0 to 512 [ 614.831669][T11056] EXT4-fs: Ignoring removed mblk_io_submit option [ 614.852722][T11056] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 614.870653][T11056] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c118, mo2=0002] [ 614.885569][T11056] System zones: 1-12 [ 614.914716][T11056] EXT4-fs error (device loop5): ext4_iget_extra_inode:5104: inode #15: comm syz.5.1813: corrupted in-inode xattr: e_value size too large [ 614.965506][T11056] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.1813: couldn't read orphan inode 15 (err -117) [ 615.008103][T11056] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 615.233958][T11056] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 617.095559][T11099] loop5: detected capacity change from 0 to 256 [ 617.170953][T11099] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 618.776279][ T30] audit: type=1326 audit(1759827615.700:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11123 comm="syz.3.1836" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f28539 code=0x0 [ 620.446251][T11146] overlayfs: failed to clone upperpath [ 620.486626][ T42] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 620.638512][ T42] usb 6-1: device descriptor read/64, error -71 [ 620.801729][T11149] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1847'. [ 620.946360][ T42] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 621.125993][ T42] usb 6-1: device descriptor read/64, error -71 [ 621.247061][ T42] usb usb6-port1: attempt power cycle [ 621.344675][ T5789] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 621.378163][ T5789] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 621.388499][ T5789] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 621.401190][ T5789] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 621.413313][ T5789] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 621.624739][ T0] NOHZ tick-stop error: local softirq work is pending, handler #41!!! [ 621.695606][ T42] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 621.739661][ T42] usb 6-1: device descriptor read/8, error -71 [ 622.040346][ T42] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 622.106927][ T42] usb 6-1: device descriptor read/8, error -71 [ 622.219605][ T42] usb usb6-port1: unable to enumerate USB device [ 622.344100][T11157] chnl_net:caif_netlink_parms(): no params data found [ 622.618448][T11173] netlink: 'syz.3.1854': attribute type 1 has an invalid length. [ 622.709014][T11173] 8021q: adding VLAN 0 to HW filter on device bond3 [ 623.101729][T11173] bond3: (slave veth11): Enslaving as an active interface with a down link [ 623.162498][T11179] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 623.171412][T11179] bond3: (slave batadv2): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 623.509841][ T5789] Bluetooth: hci5: command tx timeout [ 623.737773][T11187] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1857'. [ 623.814500][T11157] bridge0: port 1(bridge_slave_0) entered blocking state [ 623.829107][T11157] bridge0: port 1(bridge_slave_0) entered disabled state [ 623.837427][T11157] bridge_slave_0: entered allmulticast mode [ 623.847597][T11157] bridge_slave_0: entered promiscuous mode [ 623.960350][ T3689] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.002252][T11157] bridge0: port 2(bridge_slave_1) entered blocking state [ 624.014231][T11157] bridge0: port 2(bridge_slave_1) entered disabled state [ 624.022566][T11157] bridge_slave_1: entered allmulticast mode [ 624.033630][T11157] bridge_slave_1: entered promiscuous mode [ 624.167686][ T3689] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.347379][ T3689] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.387682][T11157] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 624.484707][ T3689] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.535122][T11157] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 624.768635][T11157] team0: Port device team_slave_0 added [ 624.791065][T11157] team0: Port device team_slave_1 added [ 624.920737][T11157] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 624.929384][T11157] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 624.956429][T11157] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 625.101320][ T3689] bridge_slave_1: left allmulticast mode [ 625.110454][ T3689] bridge_slave_1: left promiscuous mode [ 625.117514][ T3689] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.143281][ T3689] bridge_slave_0: left allmulticast mode [ 625.149498][ T3689] bridge_slave_0: left promiscuous mode [ 625.157055][ T3689] bridge0: port 1(bridge_slave_0) entered disabled state [ 625.586558][ T5789] Bluetooth: hci5: command tx timeout [ 625.734714][ T42] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 625.848550][ T3689] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 625.896481][ T3689] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 625.923804][ T42] usb 1-1: config 0 has an invalid interface number: 10 but max is 0 [ 625.932767][ T42] usb 1-1: config 0 has no interface number 0 [ 625.939433][ T42] usb 1-1: New USB device found, idVendor=050d, idProduct=0122, bcdDevice=69.f6 [ 625.949067][ T42] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.950735][ T3689] bond0 (unregistering): Released all slaves [ 626.008541][ T42] usb 1-1: config 0 descriptor?? [ 626.028706][T11157] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 626.036295][T11157] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 626.062810][T11157] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 626.663429][T11157] hsr_slave_0: entered promiscuous mode [ 626.674766][T11157] hsr_slave_1: entered promiscuous mode [ 626.684490][T11157] debugfs: 'hsr0' already exists in 'hsr' [ 626.691331][T11157] Cannot create hsr debugfs directory [ 626.874132][ T3689] hsr_slave_0: left promiscuous mode [ 626.906028][ T3689] hsr_slave_1: left promiscuous mode [ 626.914948][ T3689] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 626.923729][ T3689] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 627.014914][ T3689] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 627.023033][ T3689] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 627.156387][ T3689] veth1_macvtap: left promiscuous mode [ 627.162183][ T3689] veth0_macvtap: left promiscuous mode [ 627.168441][ T3689] veth1_vlan: left promiscuous mode [ 627.174033][ T3689] veth0_vlan: left promiscuous mode [ 627.230274][T11220] loop5: detected capacity change from 0 to 128 [ 627.660518][T11220] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 627.684870][ T5789] Bluetooth: hci5: command tx timeout [ 627.689401][T11220] ext4 filesystem being mounted at /355/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 628.099450][ T42] pegasus 1-1:0.10: setup Pegasus II specific registers [ 628.331537][ T3689] team0 (unregistering): Port device team_slave_1 removed [ 628.392319][ T42] pegasus 1-1:0.10: can't locate MII phy, using default [ 628.438942][ T3689] team0 (unregistering): Port device team_slave_0 removed [ 628.683121][ T6130] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 628.959266][T11227] batman_adv: batadv0: Adding interface: dummy0 [ 628.966667][T11227] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 628.993110][T11227] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 629.047736][ T42] pegasus 1-1:0.10: eth17, Belkin F5U122 10/100 USB Ethernet, c2:87:26:ce:81:82 [ 629.095388][ T42] usb 1-1: USB disconnect, device number 8 [ 629.317085][ T3689] IPVS: stop unused estimator thread 0... [ 629.714260][T11236] loop5: detected capacity change from 0 to 128 [ 629.752822][ T5789] Bluetooth: hci5: command tx timeout [ 629.768335][T11236] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 629.943212][T11236] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 630.019143][ T30] audit: type=1804 audit(1759827626.930:396): pid=11236 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.1877" name="/newroot/357/file0/bus" dev="loop5" ino=115 res=1 errno=0 [ 630.092356][T11157] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 630.122700][T11157] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 630.170434][T11157] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 630.212179][T11157] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 630.983829][T11157] 8021q: adding VLAN 0 to HW filter on device bond0 [ 631.063199][T11157] 8021q: adding VLAN 0 to HW filter on device team0 [ 631.100330][ T7329] bridge0: port 1(bridge_slave_0) entered blocking state [ 631.107996][ T7329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 631.194352][ T7329] bridge0: port 2(bridge_slave_1) entered blocking state [ 631.202221][ T7329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 632.562077][ T30] audit: type=1326 audit(1759827629.360:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11272 comm="syz.2.1891" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f18539 code=0x7fc00000 [ 632.822286][T11157] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 633.116122][ T30] audit: type=1326 audit(1759827630.030:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11272 comm="syz.2.1891" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f18558 code=0x7fc00000 [ 633.140079][ T30] audit: type=1326 audit(1759827630.030:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11272 comm="syz.2.1891" exe="/root/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f18567 code=0x7fc00000 [ 633.165625][ T30] audit: type=1326 audit(1759827630.030:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11272 comm="syz.2.1891" exe="/root/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf7f18539 code=0x7fc00000 [ 633.935078][T11301] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1897'. [ 634.769580][T11157] veth0_vlan: entered promiscuous mode [ 634.837861][T11157] veth1_vlan: entered promiscuous mode [ 635.082149][T11157] veth0_macvtap: entered promiscuous mode [ 635.126036][T11157] veth1_macvtap: entered promiscuous mode [ 635.270934][T11157] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 635.352586][T11157] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 635.440194][ T7329] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.456899][ T7329] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.502782][ T7329] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.547013][ T7326] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.916040][T11328] overlayfs: failed to clone upperpath [ 637.327198][T11346] loop2: detected capacity change from 0 to 512 [ 637.340130][T11346] EXT4-fs: Ignoring removed oldalloc option [ 637.398009][T11346] EXT4-fs (loop2): 1 truncate cleaned up [ 637.406673][T11346] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 637.772651][ T5792] EXT4-fs error (device loop2): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 637.814145][ T5792] EXT4-fs (loop2): Remounting filesystem read-only [ 638.281475][ T5792] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 638.283651][ T7326] team0: Port device netdevsim3 removed [ 639.140258][ T7326] bridge_slave_1: left allmulticast mode [ 639.148571][ T7326] bridge_slave_1: left promiscuous mode [ 639.155567][ T7326] bridge0: port 2(bridge_slave_1) entered disabled state [ 639.189960][ T7326] bridge_slave_0: left allmulticast mode [ 639.196012][ T7326] bridge_slave_0: left promiscuous mode [ 639.202919][ T7326] bridge0: port 1(bridge_slave_0) entered disabled state [ 639.283602][ T7326] bond5 (unregistering): (slave ip6gretap1): Releasing active interface [ 639.414159][ T7326] bond3 (unregistering): (slave gretap1): Releasing active interface [ 639.605596][ T7326] bond2 (unregistering): (slave bridge1): Releasing active interface [ 639.667710][ T7326] bond1 (unregistering): Released all slaves [ 639.692146][ T7326] bond2 (unregistering): Released all slaves [ 639.719603][ T7326] bond3 (unregistering): Released all slaves [ 639.786875][ T7326] bond4 (unregistering): Released all slaves [ 639.839342][ T7326] bond5 (unregistering): Released all slaves [ 639.864258][ T7326] bond6 (unregistering): Released all slaves [ 640.117868][ T7326] tipc: Left network mode [ 640.410036][T11377] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1922'. [ 640.529511][ T7326] hsr_slave_0: left promiscuous mode [ 640.569090][ T7326] hsr_slave_1: left promiscuous mode [ 640.579233][ T7326] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 640.604946][ T7326] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 640.633652][ T7326] batman_adv: batadv0: Removing interface: dummy0 [ 641.015567][T11159] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 641.106904][ T5783] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 641.123785][T11388] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 641.133960][T11388] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 641.149238][T11388] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 641.162651][T11388] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 641.206504][T11159] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 641.216091][T11159] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.242903][T11159] usb 1-1: config 0 descriptor?? [ 641.253047][ T7326] team0 (unregistering): Port device team_slave_1 removed [ 641.288007][ T7326] team0 (unregistering): Port device team_slave_0 removed [ 641.875559][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 641.883734][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 642.057095][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 642.065713][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 642.242227][ T7326] IPVS: stop unused estimator thread 0... [ 642.554601][T11159] usb 1-1: Cannot set autoneg [ 642.560762][T11159] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 642.637071][T11159] usb 1-1: USB disconnect, device number 9 [ 642.888218][T11407] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1931'. [ 642.951234][T11407] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1931'. [ 643.054036][T11410] loop8: detected capacity change from 0 to 1024 [ 643.187667][T11388] Bluetooth: hci2: command tx timeout [ 643.227918][T11387] chnl_net:caif_netlink_parms(): no params data found [ 644.287978][T11429] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1938'. [ 644.297383][T11387] bridge0: port 1(bridge_slave_0) entered blocking state [ 644.309574][T11387] bridge0: port 1(bridge_slave_0) entered disabled state [ 644.317622][T11387] bridge_slave_0: entered allmulticast mode [ 644.327767][T11387] bridge_slave_0: entered promiscuous mode [ 644.437201][T11387] bridge0: port 2(bridge_slave_1) entered blocking state [ 644.444803][T11387] bridge0: port 2(bridge_slave_1) entered disabled state [ 644.453118][T11387] bridge_slave_1: entered allmulticast mode [ 644.463337][T11387] bridge_slave_1: entered promiscuous mode [ 644.644268][T11387] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 644.689976][T11387] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 644.903360][T11387] team0: Port device team_slave_0 added [ 644.966303][T11387] team0: Port device team_slave_1 added [ 645.133645][T11387] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 645.141322][T11387] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 645.168005][T11387] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 645.269963][T11388] Bluetooth: hci2: command tx timeout [ 645.276620][T11387] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 645.276711][T11387] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 645.276891][T11387] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 645.518775][T11387] hsr_slave_0: entered promiscuous mode [ 645.535058][T11387] hsr_slave_1: entered promiscuous mode [ 645.544526][T11387] debugfs: 'hsr0' already exists in 'hsr' [ 645.551024][T11387] Cannot create hsr debugfs directory [ 646.618680][T11387] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 646.663032][T11387] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 646.843934][T11387] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 646.889283][T11387] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 647.346976][T11388] Bluetooth: hci2: command tx timeout [ 648.018030][T11387] 8021q: adding VLAN 0 to HW filter on device bond0 [ 648.138171][T11387] 8021q: adding VLAN 0 to HW filter on device team0 [ 648.190248][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 648.198015][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 648.267455][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 648.275126][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 649.446386][T11388] Bluetooth: hci2: command tx timeout [ 650.153922][T11387] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 651.311556][T11521] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1966'. [ 651.987476][T11526] bridge0: port 3(veth0_virt_wifi) entered blocking state [ 651.995646][T11526] bridge0: port 3(veth0_virt_wifi) entered disabled state [ 652.003540][T11526] veth0_virt_wifi: entered allmulticast mode [ 652.013711][T11526] veth0_virt_wifi: entered promiscuous mode [ 653.186685][T11539] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1972'. [ 653.247906][T11540] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1972'. [ 653.299545][T11539] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1972'. [ 653.835052][T11387] veth0_vlan: entered promiscuous mode [ 653.943439][T11387] veth1_vlan: entered promiscuous mode [ 654.013701][T11529] overlayfs: failed to clone upperpath [ 654.222811][T11387] veth0_macvtap: entered promiscuous mode [ 654.305088][T11387] veth1_macvtap: entered promiscuous mode [ 654.433534][T11387] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 654.502480][T11387] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 654.611078][ T57] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.645805][ T57] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.686183][ T76] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.723227][ T76] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.044383][ T30] audit: type=1326 audit(1759827654.970:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11595 comm="syz.0.1988" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97539 code=0x7fc00000 [ 658.068502][ T30] audit: type=1326 audit(1759827654.970:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11595 comm="syz.0.1988" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97539 code=0x7fc00000 [ 658.165473][ T30] audit: type=1326 audit(1759827655.030:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11595 comm="syz.0.1988" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97539 code=0x7fc00000 [ 658.188405][ T30] audit: type=1326 audit(1759827655.100:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11595 comm="syz.0.1988" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97539 code=0x7fc00000 [ 658.211431][ T30] audit: type=1326 audit(1759827655.100:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11595 comm="syz.0.1988" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97539 code=0x7fc00000 [ 658.819681][ T30] audit: type=1326 audit(1759827655.750:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11595 comm="syz.0.1988" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97539 code=0x7fc00000 [ 659.992575][ T3689] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 660.001578][ T3689] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 660.124748][ T7329] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 660.133139][ T7329] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 662.222429][T11658] loop8: detected capacity change from 0 to 256 [ 662.329390][T11658] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4159830188 (66557283008 ns) > initial count (53884079504 ns). Using initial count to start timer. [ 662.809211][T11673] input: syz1 as /devices/virtual/input/input9 [ 663.190986][T11678] loop9: detected capacity change from 0 to 256 [ 663.218452][T11678] exfat: Deprecated parameter 'utf8' [ 663.224482][T11678] exfat: Deprecated parameter 'namecase' [ 663.232398][T11678] exfat: Deprecated parameter 'namecase' [ 663.238869][T11678] exfat: Deprecated parameter 'utf8' [ 663.334699][T11682] 9pnet: p9_errstr2errno: server reported unknown error 184467440 [ 663.360415][T11678] exFAT-fs (loop9): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 663.447651][T11678] exFAT-fs (loop9): start_clu is invalid cluster(0x400) [ 664.640020][T11698] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2024'. [ 664.754176][T11703] overlayfs: failed to clone upperpath [ 664.897452][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 664.904331][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 666.085815][T11721] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 666.225557][T11721] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 666.237652][T11721] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 666.318255][T11721] overlayfs: inode number too big (/cgroup.controllers, ino=4611686018427387908, xinobits=2) [ 666.379220][T11720] overlayfs: inode number too big (/cgroup.controllers, ino=4611686018427387908, xinobits=2) [ 666.455773][T11159] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 666.635436][T11159] usb 6-1: Using ep0 maxpacket: 16 [ 666.653641][T11159] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 666.664713][T11159] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 666.703018][T11159] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 666.713288][T11159] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.721769][T11159] usb 6-1: Product: syz [ 666.729159][T11159] usb 6-1: Manufacturer: syz [ 666.734004][T11159] usb 6-1: SerialNumber: syz [ 667.200147][T11159] usb 6-1: 0:2 : does not exist [ 667.221542][T11159] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 667.347038][T11159] usb 6-1: USB disconnect, device number 14 [ 667.479261][T11740] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2041'. [ 667.889262][ T30] audit: type=1800 audit(1759827664.820:407): pid=11746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2042" name="bus" dev="tmpfs" ino=2719 res=0 errno=0 [ 668.002154][ T30] audit: type=1800 audit(1759827664.850:408): pid=11746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2042" name="bus" dev="tmpfs" ino=2719 res=0 errno=0 [ 668.674484][T11755] overlayfs: failed to clone upperpath [ 669.511038][T11772] fuse: Bad value for 'fd' [ 669.574906][T11773] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 669.675715][T11773] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 669.687594][T11773] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 669.752948][T11775] overlayfs: inode number too big (/cgroup.controllers, ino=4611686018427387908, xinobits=2) [ 669.803429][T11771] overlayfs: inode number too big (/cgroup.controllers, ino=4611686018427387908, xinobits=2) [ 671.221671][T11793] VFS: Warning: syz.9.2058 using old stat() call. Recompile your binary. [ 671.532523][T11795] overlayfs: failed to clone upperpath [ 672.173908][T11803] overlayfs: failed to clone upperpath [ 672.877900][T11807] overlayfs: failed to clone lowerpath [ 672.931182][T11807] overlayfs: failed to clone upperpath [ 673.960758][T11820] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 673.970141][T11820] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 673.979339][T11820] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 674.277449][T11827] netlink: 168 bytes leftover after parsing attributes in process `syz.8.2071'. [ 674.287260][T11827] netlink: 168 bytes leftover after parsing attributes in process `syz.8.2071'. [ 674.460557][T11829] af_packet: tpacket_rcv: packet too big, clamped from 62 to 4294967286. macoff=82 [ 675.710979][T11841] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 675.718618][T11841] overlayfs: failed to set xattr on upper [ 675.724515][T11841] overlayfs: ...falling back to redirect_dir=nofollow. [ 675.731789][T11841] overlayfs: ...falling back to index=off. [ 675.739959][T11841] overlayfs: ...falling back to uuid=null. [ 676.663321][T11159] kernel write not supported for file [eventfd] (pid: 11159 comm: kworker/1:3) [ 677.057473][T11852] batman_adv: batadv0: Adding interface: dummy0 [ 677.064069][T11852] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 677.092818][T11852] batman_adv: batadv0: Interface activated: dummy0 [ 677.223709][T11859] batadv0: mtu less than device minimum [ 677.232344][T11859] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 677.245836][T11859] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 677.259365][T11859] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 677.272714][T11859] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 677.286251][T11859] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 677.299590][T11859] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 677.313048][T11859] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 677.326524][T11859] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 677.339689][T11859] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 678.523735][T11872] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2090'. [ 679.023603][T11877] tipc: MTU too low for tipc bearer [ 679.434289][T11880] netlink: 'syz.9.2095': attribute type 4 has an invalid length. [ 679.514003][T11880] netlink: 'syz.9.2095': attribute type 17 has an invalid length. [ 680.555751][T11893] batman_adv: batadv0: Adding interface: dummy0 [ 680.562224][T11893] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 680.588223][T11893] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 680.882211][T11896] fuse: Bad value for 'fd' [ 680.906052][T11898] netlink: 'syz.9.2100': attribute type 10 has an invalid length. [ 681.049152][T11898] team0: Port device dummy0 added [ 681.308302][T11903] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2102'. [ 681.317844][T11903] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2102'. [ 682.499918][T11923] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2109'. [ 684.951342][T11956] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2120'. [ 686.126361][T11963] bridge: RTM_NEWNEIGH with invalid ether address [ 687.212025][T11159] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 687.404808][T11159] usb 9-1: config 0 has no interfaces? [ 687.443216][T11159] usb 9-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 687.452839][T11159] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.461530][T11159] usb 9-1: Product: syz [ 687.466044][T11159] usb 9-1: Manufacturer: syz [ 687.470855][T11159] usb 9-1: SerialNumber: syz [ 687.502332][T11159] usb 9-1: config 0 descriptor?? [ 688.050767][T11991] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2134'. [ 688.168027][T11974] veth1_vlan: left promiscuous mode [ 688.429539][T11159] usb 9-1: USB disconnect, device number 2 [ 691.989760][T12056] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2142'. [ 692.065795][T12057] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 692.072997][T12057] overlayfs: failed to set xattr on upper [ 692.075001][T12060] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2142'. [ 692.079110][T12057] overlayfs: ...falling back to redirect_dir=nofollow. [ 692.079179][T12057] overlayfs: ...falling back to metacopy=off. [ 692.101769][T12057] overlayfs: ...falling back to index=off. [ 692.107910][T12057] overlayfs: ...falling back to uuid=null. [ 692.383504][ T30] audit: type=1326 audit(1759827689.310:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12061 comm="syz.9.2145" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7ff5539 code=0x0 [ 692.646008][T12068] netlink: 'syz.8.2147': attribute type 2 has an invalid length. [ 692.876317][T12072] overlayfs: failed to clone upperpath [ 694.632119][T12095] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2156'. [ 695.253625][T12105] overlayfs: failed to clone upperpath [ 695.319042][T12104] sctp: [Deprecated]: syz.0.2157 (pid 12104) Use of struct sctp_assoc_value in delayed_ack socket option. [ 695.319042][T12104] Use struct sctp_sack_info instead [ 695.389909][T12108] netlink: 'syz.3.2161': attribute type 1 has an invalid length. [ 695.432272][T12104] sctp: [Deprecated]: syz.0.2157 (pid 12104) Use of struct sctp_assoc_value in delayed_ack socket option. [ 695.432272][T12104] Use struct sctp_sack_info instead [ 695.641928][T12112] bond4: (slave vcan0): The slave device specified does not support setting the MAC address [ 695.653647][T12112] bond4: (slave vcan0): Setting fail_over_mac to active for active-backup mode [ 695.676831][T12112] bond4: (slave vcan0): making interface the new active one [ 695.688697][T12112] bond4: (slave vcan0): Enslaving as an active interface with an up link [ 696.099671][T12122] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2166'. [ 696.135998][T12122] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2166'. [ 696.706833][T12130] overlayfs: failed lookup in lower (newroot/273, name='file0', err=-40): overlapping layers [ 698.494743][T12145] veth0_vlan: entered allmulticast mode [ 699.238718][T12009] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 699.419461][T12009] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 699.432547][T12009] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 699.444053][T12009] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 699.454325][T12009] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 699.467960][T12009] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 699.477468][T12009] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 699.577846][T12009] usb 9-1: config 0 descriptor?? [ 700.112773][T12009] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 700.315545][T12157] netlink: 'syz.5.2178': attribute type 21 has an invalid length. [ 700.323951][T12157] netlink: 9758 bytes leftover after parsing attributes in process `syz.5.2178'. [ 700.530048][T12159] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2179'. [ 700.945989][T12009] usb 9-1: USB disconnect, device number 3 [ 702.911760][T12176] 8021q: VLANs not supported on gre0 [ 703.497834][T12178] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2186'. [ 703.783624][T12179] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2186'. [ 706.609915][T12219] fuse: Bad value for 'fd' [ 708.481216][T12239] netlink: 'syz.3.2211': attribute type 13 has an invalid length. [ 709.067330][ T4118] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 709.108731][ T4118] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 709.166008][ T4118] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 709.209014][ T4118] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 710.344051][T12270] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2222'. [ 712.373827][T12289] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2230'. [ 712.531904][T12291] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 712.539611][T12291] overlayfs: failed to set xattr on upper [ 712.547845][T12291] overlayfs: ...falling back to index=off. [ 712.553842][T12291] overlayfs: ...falling back to uuid=null. [ 712.980141][T12296] overlayfs: failed to clone upperpath [ 713.876944][T12308] netlink: 'syz.0.2238': attribute type 9 has an invalid length. [ 714.020883][ T30] audit: type=1326 audit(1759827710.940:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12310 comm="syz.3.2240" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f28539 code=0x7ffc0000 [ 714.046373][ T30] audit: type=1326 audit(1759827710.950:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12310 comm="syz.3.2240" exe="/root/syz-executor" sig=0 arch=40000003 syscall=175 compat=1 ip=0xf7f28539 code=0x7ffc0000 [ 714.069879][ T30] audit: type=1326 audit(1759827710.950:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12310 comm="syz.3.2240" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f28539 code=0x7ffc0000 [ 714.415851][ T30] audit: type=1326 audit(1759827711.030:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12310 comm="syz.3.2240" exe="/root/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf7f28539 code=0x7ffc0000 [ 714.438480][ T30] audit: type=1326 audit(1759827711.300:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12310 comm="syz.3.2240" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f28539 code=0x7ffc0000 [ 714.463629][ T30] audit: type=1326 audit(1759827711.300:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12310 comm="syz.3.2240" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f28539 code=0x7ffc0000 [ 715.112726][ T30] audit: type=1326 audit(1759827712.030:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12323 comm="syz.3.2247" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f28539 code=0x0 [ 715.450619][T12340] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2251'. [ 716.249166][T12354] netlink: 2048 bytes leftover after parsing attributes in process `syz.0.2254'. [ 716.259033][T12354] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2254'. [ 716.483732][T12356] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2258'. [ 716.659761][T12361] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2259'. [ 717.659995][T12376] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2264'. [ 717.669279][T12376] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2264'. [ 718.212423][T12388] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2269'. [ 718.268263][T12388] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2269'. [ 718.293654][T12388] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2269'. [ 719.402968][T12400] loop8: detected capacity change from 0 to 8192 [ 719.612051][T12400] FAT-fs (loop8): error, clusters badly computed (2 != 1) [ 719.619900][T12400] FAT-fs (loop8): Filesystem has been set read-only [ 719.635623][ T30] audit: type=1800 audit(1759827716.560:417): pid=12400 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2273" name="bus" dev="loop8" ino=1048637 res=0 errno=0 [ 720.374524][T12419] loop8: detected capacity change from 0 to 1024 [ 720.465794][T12419] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 720.478843][T12419] ext4 filesystem being mounted at /88/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 720.547582][ T30] audit: type=1800 audit(1759827717.470:418): pid=12419 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2280" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 720.596144][ T30] audit: type=1800 audit(1759827717.510:419): pid=12419 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2280" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 720.654451][T12419] EXT4-fs error (device loop8): ext4_map_blocks:814: inode #15: comm syz.8.2280: lblock 0 mapped to illegal pblock 0 (length 1) [ 720.693628][T12419] EXT4-fs error (device loop8): ext4_map_blocks:814: inode #15: comm syz.8.2280: lblock 0 mapped to illegal pblock 0 (length 1) [ 720.727818][T12419] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 720.740792][T12419] EXT4-fs (loop8): This should not happen!! Data will be lost [ 720.740792][T12419] [ 720.972073][T11157] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 721.025628][T11388] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 721.034228][T11388] Bluetooth: hci5: Injecting HCI hardware error event [ 721.042045][T11388] Bluetooth: hci5: hardware error 0x00 [ 722.961378][T12460] __nla_validate_parse: 1 callbacks suppressed [ 722.961466][T12460] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2296'. [ 723.105586][T11388] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 723.651980][T12471] overlayfs: failed to clone lowerpath [ 723.711274][T12471] overlayfs: failed to clone upperpath [ 724.035511][T12009] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 724.108334][T12475] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2302'. [ 724.248713][T12009] usb 9-1: Using ep0 maxpacket: 32 [ 724.267032][T12009] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 724.277231][T12476] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2302'. [ 724.280840][T12009] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 724.298415][T12009] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 724.307962][T12009] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.358214][T12009] usb 9-1: config 0 descriptor?? [ 724.984905][T12009] koneplus 0003:1E7D:2D51.0009: collection stack underflow [ 724.995834][T12009] koneplus 0003:1E7D:2D51.0009: item 0 0 0 12 parsing failed [ 726.102780][T12009] koneplus 0003:1E7D:2D51.0009: parse failed [ 726.110838][T12009] koneplus 0003:1E7D:2D51.0009: probe with driver koneplus failed with error -22 [ 726.137482][T12009] usb 9-1: USB disconnect, device number 4 [ 726.338906][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 726.346476][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 727.167171][T12508] 9pnet_fd: p9_fd_create_unix (12508): problem connecting socket: ./file0: -103 [ 727.596227][T12009] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 727.786471][T12009] usb 1-1: Using ep0 maxpacket: 8 [ 727.814807][T12009] usb 1-1: config 0 has an invalid interface number: 200 but max is 0 [ 727.823581][T12009] usb 1-1: config 0 has no interface number 0 [ 727.830302][T12009] usb 1-1: config 0 interface 200 altsetting 2 has an endpoint descriptor with address 0xB5, changing to 0x85 [ 727.842483][T12009] usb 1-1: config 0 interface 200 altsetting 2 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 727.854031][T12009] usb 1-1: config 0 interface 200 altsetting 2 endpoint 0x85 has invalid maxpacket 1126, setting to 1024 [ 727.867951][T12009] usb 1-1: config 0 interface 200 has no altsetting 0 [ 727.944790][T12009] usb 1-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 727.954373][T12009] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 727.965054][T12009] usb 1-1: Product: syz [ 727.970254][T12009] usb 1-1: Manufacturer: syz [ 727.975066][T12009] usb 1-1: SerialNumber: syz [ 727.994768][T12009] usb 1-1: config 0 descriptor?? [ 728.009431][T12523] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 728.409532][T12009] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.200/input/input12 [ 728.425009][ C1] usb 1-1: hanwang_irq - nonzero urb status received: -71 [ 728.434068][ C1] usb 1-1: hanwang_irq - nonzero urb status received: -71 [ 728.445364][ C1] usb 1-1: hanwang_irq - nonzero urb status received: -71 [ 728.453138][ C1] usb 1-1: hanwang_irq - nonzero urb status received: -71 [ 728.463605][ C1] usb 1-1: hanwang_irq - nonzero urb status received: -71 [ 728.472042][ C1] usb 1-1: hanwang_irq - nonzero urb status received: -71 [ 728.481957][ C1] usb 1-1: hanwang_irq - nonzero urb status received: -71 [ 728.489798][ C1] usb 1-1: hanwang_irq - nonzero urb status received: -71 [ 728.497573][ C1] usb 1-1: hanwang_irq - nonzero urb status received: -71 [ 728.505416][ C1] usb 1-1: hanwang_irq - nonzero urb status received: -71 [ 728.513144][ C1] usb 1-1: hanwang_irq - nonzero urb status received: -71 [ 728.521119][ C1] usb 1-1: hanwang_irq - nonzero urb status received: -71 [ 728.530540][T12009] usb 1-1: USB disconnect, device number 10 [ 728.535656][ C1] usb 1-1: hanwang_irq - nonzero urb status received: -71 [ 728.543880][ C1] usb 1-1: hanwang_irq - usb_submit_urb failed with result -19 [ 729.421776][T12563] loop8: detected capacity change from 0 to 128 [ 729.589293][T12568] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2340'. [ 730.732141][T12578] VFS: Warning: syz.5.2347 using old stat() call. Recompile your binary. [ 732.300851][ T5783] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 732.311806][ T5783] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 732.321894][ T5783] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 732.336504][ T5783] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 732.348752][ T5783] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 733.176100][T12595] chnl_net:caif_netlink_parms(): no params data found [ 733.408359][T12611] fuse: Bad value for 'fd' [ 733.573962][T12615] overlayfs: failed to resolve './file0': -2 [ 733.816397][T12617] ref_ctr increment failed for inode: 0x9da offset: 0x7 ref_ctr_offset: 0x2710 of mm: 0xffff88804a524800 [ 734.096674][T12625] netlink: 51 bytes leftover after parsing attributes in process `syz.3.2363'. [ 734.347439][T12595] bridge0: port 1(bridge_slave_0) entered blocking state [ 734.355030][T12595] bridge0: port 1(bridge_slave_0) entered disabled state [ 734.365625][T12595] bridge_slave_0: entered allmulticast mode [ 734.376047][T12595] bridge_slave_0: entered promiscuous mode [ 734.462542][T12595] bridge0: port 2(bridge_slave_1) entered blocking state [ 734.471212][T12595] bridge0: port 2(bridge_slave_1) entered disabled state [ 734.487533][T11388] Bluetooth: hci3: command tx timeout [ 734.490580][T12595] bridge_slave_1: entered allmulticast mode [ 734.518584][T12595] bridge_slave_1: entered promiscuous mode [ 734.805702][T12595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 734.841841][T12595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 734.875811][T12640] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2370'. [ 735.119339][T12641] sch_tbf: burst 511 is lower than device veth3 mtu (1514) ! [ 735.146812][T12595] team0: Port device team_slave_0 added [ 735.186384][T12595] team0: Port device team_slave_1 added [ 735.348338][T12643] overlayfs: failed to clone upperpath [ 735.460553][T12595] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 735.468687][T12595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 735.495267][T12595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 735.598881][T12647] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2373'. [ 735.686393][T12595] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 735.693565][T12595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 735.720207][T12595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 735.735080][T12647] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2373'. [ 736.062623][T12595] hsr_slave_0: entered promiscuous mode [ 736.073761][T12595] hsr_slave_1: entered promiscuous mode [ 736.083196][T12595] debugfs: 'hsr0' already exists in 'hsr' [ 736.089298][T12595] Cannot create hsr debugfs directory [ 736.545816][T11388] Bluetooth: hci3: command tx timeout [ 737.732588][T12595] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 737.763864][T12595] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 737.793821][T12595] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 737.854595][T12595] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 738.190105][T12686] fuse: Bad value for 'fd' [ 738.197322][ T30] audit: type=1326 audit(1759827735.120:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12683 comm="syz.0.2387" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f97539 code=0x0 [ 738.603414][T12694] fuse: Bad value for 'fd' [ 738.625479][T11388] Bluetooth: hci3: command tx timeout [ 738.844106][T12595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 738.988073][T12595] 8021q: adding VLAN 0 to HW filter on device team0 [ 739.049211][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 739.056898][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 739.109038][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 739.116802][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 739.503868][T12700] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2394'. [ 740.218995][T12715] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2400'. [ 740.747042][T11388] Bluetooth: hci3: command tx timeout [ 740.909585][T12595] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 741.342353][T12595] veth0_vlan: entered promiscuous mode [ 741.411468][T12595] veth1_vlan: entered promiscuous mode [ 741.609328][T12727] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2403'. [ 741.715096][T12595] veth0_macvtap: entered promiscuous mode [ 741.744102][T12595] veth1_macvtap: entered promiscuous mode [ 741.922795][T12595] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 742.040188][T12595] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 742.134004][ T4118] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.180906][ T4118] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.261603][ T4118] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.320846][ T4118] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.840380][T12766] netlink: 'syz.5.2418': attribute type 3 has an invalid length. [ 745.138916][T12780] netlink: 'syz.3.2423': attribute type 1 has an invalid length. [ 745.147370][T12780] netlink: 'syz.3.2423': attribute type 4 has an invalid length. [ 745.155612][T12780] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.2423'. [ 745.183715][T12780] netlink: 'syz.3.2423': attribute type 1 has an invalid length. [ 745.193583][T12780] netlink: 'syz.3.2423': attribute type 4 has an invalid length. [ 745.201762][T12780] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.2423'. [ 746.566505][T12811] netlink: 2040 bytes leftover after parsing attributes in process `syz.5.2431'. [ 746.576481][T12811] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2431'. [ 747.055712][ T3855] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 747.063875][ T3855] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 747.240209][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 747.249099][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 747.392354][T12821] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 747.401992][T12821] overlayfs: failed to set xattr on upper [ 747.410018][T12821] overlayfs: ...falling back to redirect_dir=nofollow. [ 747.421269][T12821] overlayfs: ...falling back to index=off. [ 747.429658][T12821] overlayfs: ...falling back to uuid=null. [ 750.952640][T12883] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2458'. [ 751.111476][T12883] net_ratelimit: 10 callbacks suppressed [ 751.111684][T12883] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 751.752994][T12890] batadv_slave_0: entered promiscuous mode [ 751.760899][T12892] overlayfs: failed to clone upperpath [ 751.787709][T12890] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2462'. [ 751.797788][T12890] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 751.805691][T12890] batadv0: mtu less than device minimum [ 751.814043][T12890] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 751.827525][T12890] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 751.840878][T12890] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 751.854251][T12890] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 751.867740][T12890] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 751.881067][T12890] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 751.894415][T12890] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 751.907858][T12890] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 752.132906][T12890] batadv_slave_0 (unregistering): left promiscuous mode [ 752.140684][T12890] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 752.933936][T12909] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2471'. [ 752.944854][T12909] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2471'. [ 753.279040][T12918] netlink: 240 bytes leftover after parsing attributes in process `syz.9.2473'. [ 753.519696][ T30] audit: type=1326 audit(1759827750.430:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12913 comm="syz.1.2474" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7fc00000 [ 753.731522][T12007] kernel write not supported for file bpf-prog (pid: 12007 comm: kworker/0:5) [ 754.053558][ T30] audit: type=1326 audit(1759827750.980:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12913 comm="syz.1.2474" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf709e539 code=0x7fc00000 [ 755.257818][T12952] netlink: 'syz.0.2487': attribute type 4 has an invalid length. [ 755.313384][T12952] netlink: 'syz.0.2487': attribute type 4 has an invalid length. [ 755.957947][T12957] sd 0:0:1:0: PR command failed: 1026 [ 755.963845][T12957] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 755.971425][T12957] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 756.401876][T12967] net_ratelimit: 11 callbacks suppressed [ 756.401967][T12967] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 757.424955][T11159] kernel write not supported for file bpf-prog (pid: 11159 comm: kworker/1:3) [ 758.325542][T12007] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 758.354115][T13003] netlink: 'syz.5.2508': attribute type 1 has an invalid length. [ 758.473935][T13003] 8021q: adding VLAN 0 to HW filter on device bond4 [ 758.491703][T13006] batman_adv: batadv0: Interface deactivated: dummy0 [ 758.502117][T13006] batman_adv: batadv0: Removing interface: dummy0 [ 758.538171][T12007] usb 2-1: Using ep0 maxpacket: 16 [ 758.584566][T12007] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 758.597345][T12007] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 758.598645][T13006] bond4: (slave dummy0): making interface the new active one [ 758.622912][T13006] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 758.727379][T12007] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 758.737285][T12007] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 758.745923][T12007] usb 2-1: Product: syz [ 758.750314][T12007] usb 2-1: Manufacturer: syz [ 758.755837][T12007] usb 2-1: SerialNumber: syz [ 758.807525][T13003] bond4 (unregistering): (slave dummy0): Releasing active interface [ 758.833539][T12007] usb 2-1: config 0 descriptor?? [ 758.863815][T13003] bond4 (unregistering): Released all slaves [ 758.864857][T12007] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 758.880518][T12007] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 759.472617][T12007] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 759.487267][T12007] em28xx 2-1:0.0: Config register raw data: 0xe6 [ 759.494095][T12007] em28xx 2-1:0.0: I2S Audio (1 sample rate(s)) [ 759.503378][T12007] em28xx 2-1:0.0: No AC97 audio processor [ 759.552474][T13021] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 759.563608][ T5764] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 759.858457][T11159] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 760.058785][T13031] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2517'. [ 760.082631][T11159] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 760.094231][T11159] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 760.104581][T11159] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 760.121758][T11159] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 760.132657][T11159] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 760.261541][T11159] usb 1-1: config 0 descriptor?? [ 760.390225][T10187] usb 2-1: USB disconnect, device number 2 [ 760.845636][T11159] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 761.592049][T11159] IPVS: starting estimator thread 0... [ 761.739772][T13057] IPVS: using max 192 ests per chain, 9600 per kthread [ 762.050187][T13059] ceph: No mds server is up or the cluster is laggy [ 762.063272][T12007] libceph: connect (1)[c::]:6789 error -101 [ 762.070525][T12007] libceph: mon0 (1)[c::]:6789 connect error [ 762.741720][T13070] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 762.757345][T13072] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2532'. [ 762.850636][T13070] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 763.032272][T11159] usb 1-1: USB disconnect, device number 11 [ 763.195985][T13078] loop1: detected capacity change from 0 to 128 [ 763.294142][T13078] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 763.318587][T13078] ext4 filesystem being mounted at /19/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 763.837736][T13091] netlink: 'syz.5.2537': attribute type 1 has an invalid length. [ 763.925637][T13091] 8021q: adding VLAN 0 to HW filter on device bond4 [ 763.992168][T13091] erspan0: entered allmulticast mode [ 763.992972][T13078] fscrypt (loop1): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 764.038654][T13091] bond4: (slave erspan0): making interface the new active one [ 764.053381][T13091] bond4: (slave erspan0): Enslaving as an active interface with an up link [ 764.307492][ T5783] Bluetooth: hci2: command 0x0406 tx timeout [ 764.644493][T12595] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 765.185778][T12007] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 765.247143][T13102] syz_tun: entered allmulticast mode [ 765.333156][T13101] syz_tun: left allmulticast mode [ 765.390877][T12007] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 765.399677][T12007] usb 2-1: config 0 has no interface number 0 [ 765.406221][T12007] usb 2-1: config 0 interface 41 has no altsetting 0 [ 765.452541][T12007] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 765.462339][T12007] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 765.470833][T12007] usb 2-1: Product: syz [ 765.475417][T12007] usb 2-1: Manufacturer: syz [ 765.480262][T12007] usb 2-1: SerialNumber: syz [ 765.527903][T12007] usb 2-1: config 0 descriptor?? [ 766.128358][T11388] Bluetooth: hci0: unexpected event for opcode 0x1405 [ 766.410545][T12007] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 767.682702][T12007] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 767.697158][T12007] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 767.708986][T12007] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71 [ 767.771290][T12007] usb 2-1: USB disconnect, device number 3 [ 768.145624][T13141] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2558'. [ 770.285472][ T30] audit: type=1326 audit(1759827767.200:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13169 comm="syz.0.2568" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97539 code=0x7ffc0000 [ 770.308269][ T30] audit: type=1326 audit(1759827767.200:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13169 comm="syz.0.2568" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97539 code=0x7ffc0000 [ 770.393304][ T30] audit: type=1326 audit(1759827767.270:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13169 comm="syz.0.2568" exe="/root/syz-executor" sig=0 arch=40000003 syscall=52 compat=1 ip=0xf7f97539 code=0x7ffc0000 [ 770.416165][ T30] audit: type=1326 audit(1759827767.300:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13169 comm="syz.0.2568" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97539 code=0x7ffc0000 [ 770.439260][ T30] audit: type=1326 audit(1759827767.320:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13169 comm="syz.0.2568" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97539 code=0x7ffc0000 [ 770.892659][T13183] pimreg: entered allmulticast mode [ 771.040670][T13182] pimreg: left allmulticast mode [ 774.662304][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 775.685726][T13255] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2600'. [ 775.991381][ T42] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 776.156132][ T42] usb 1-1: Using ep0 maxpacket: 32 [ 776.181438][ T42] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 776.196501][ T42] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 776.208132][ T42] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 776.217658][ T42] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.328431][ T42] usb 1-1: config 0 descriptor?? [ 776.846843][ T0] NOHZ tick-stop error: local softirq work is pending, handler #302!!! [ 776.883848][ T42] ft260 0003:0403:6030.000B: unknown main item tag 0x7 [ 777.079676][ T42] ft260 0003:0403:6030.000B: chip code: 6424 8183 [ 777.216750][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 777.290361][ T42] ft260 0003:0403:6030.000B: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0 [ 777.455976][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 777.540802][ T42] ft260 0003:0403:6030.000B: failed to retrieve status: -32, no wakeup [ 777.815654][T13272] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2607'. [ 777.834263][T13256] ft260 0003:0403:6030.000B: ft260_hid_output_report_check_status: failed to start transfer, ret -38 [ 777.853649][T13272] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2607'. [ 777.915757][ T0] NOHZ tick-stop error: local softirq work is pending, handler #302!!! [ 777.925434][T13272] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2607'. [ 777.976037][T13276] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2608'. [ 778.020949][T13272] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2607'. [ 778.085100][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 778.086376][T13256] ft260 0003:0403:6030.000B: failed to reset I2C controller: -108 [ 778.196692][ T42] usb 1-1: reset high-speed USB device number 12 using dummy_hcd [ 779.078508][T10187] usb 1-1: USB disconnect, device number 12 [ 783.350851][T13331] netlink: 'syz.5.2629': attribute type 12 has an invalid length. [ 783.795407][T13342] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2632'. [ 785.972106][T13370] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2644'. [ 786.000837][T13370] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2644'. [ 787.082169][T13389] overlayfs: failed to clone upperpath [ 787.777102][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 787.783985][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 790.153938][T13436] netlink: 232 bytes leftover after parsing attributes in process `syz.1.2668'. [ 790.163420][T13436] netlink: 232 bytes leftover after parsing attributes in process `syz.1.2668'. [ 790.554084][T13444] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2672'. [ 790.653477][T13444] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2672'. [ 791.023540][T13459] pimreg: entered allmulticast mode [ 791.060196][T13455] pimreg: left allmulticast mode [ 792.244939][T13479] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 793.387829][ T30] audit: type=1326 audit(1759827790.310:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13496 comm="syz.3.2692" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f28539 code=0x7ffc0000 [ 793.414622][ T30] audit: type=1326 audit(1759827790.310:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13496 comm="syz.3.2692" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f28539 code=0x7ffc0000 [ 793.438771][ T30] audit: type=1326 audit(1759827790.310:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13496 comm="syz.3.2692" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f28539 code=0x7ffc0000 [ 793.461346][ T30] audit: type=1326 audit(1759827790.310:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13496 comm="syz.3.2692" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f28539 code=0x7ffc0000 [ 793.483943][ T30] audit: type=1326 audit(1759827790.310:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13496 comm="syz.3.2692" exe="/root/syz-executor" sig=0 arch=40000003 syscall=288 compat=1 ip=0xf7f28539 code=0x7ffc0000 [ 793.524204][ T30] audit: type=1326 audit(1759827790.320:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13496 comm="syz.3.2692" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f28539 code=0x7ffc0000 [ 793.548842][ T30] audit: type=1326 audit(1759827790.320:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13496 comm="syz.3.2692" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f28539 code=0x7ffc0000 [ 793.571635][ T30] audit: type=1326 audit(1759827790.340:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13496 comm="syz.3.2692" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f28539 code=0x7ffc0000 [ 793.594793][ T30] audit: type=1326 audit(1759827790.340:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13496 comm="syz.3.2692" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f28539 code=0x7ffc0000 [ 793.620794][ T30] audit: type=1326 audit(1759827790.340:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13496 comm="syz.3.2692" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f28539 code=0x7ffc0000 [ 793.675663][ T57] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.894003][ T57] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.114993][ T57] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.542664][ T57] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 795.343102][ T57] bridge_slave_1: left allmulticast mode [ 795.350953][ T57] bridge_slave_1: left promiscuous mode [ 795.358104][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 795.459825][ T57] bridge_slave_0: left allmulticast mode [ 795.466103][ T57] bridge_slave_0: left promiscuous mode [ 795.473198][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 796.476279][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 796.552329][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 796.742125][ T57] bond0 (unregistering): Released all slaves [ 797.649956][ T57] hsr_slave_0: left promiscuous mode [ 797.659327][ T57] hsr_slave_1: left promiscuous mode [ 797.667983][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 797.675889][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 797.708055][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 797.716927][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 797.787605][ T57] veth1_macvtap: left promiscuous mode [ 797.793679][ T57] veth0_macvtap: left promiscuous mode [ 797.801310][T13544] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2707'. [ 798.067497][T12007] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 798.209655][T13544] netlink: 'syz.0.2707': attribute type 11 has an invalid length. [ 798.341960][T12007] usb 2-1: Using ep0 maxpacket: 8 [ 798.377098][T12007] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 798.388308][T12007] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 798.397962][T12007] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 798.453410][T12007] usb 2-1: config 0 descriptor?? [ 798.501564][T12007] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 798.762435][ T57] team0 (unregistering): Port device team_slave_1 removed [ 798.806061][ T57] team0 (unregistering): Port device team_slave_0 removed [ 799.855991][T13561] overlayfs: failed to clone upperpath [ 799.876225][T13563] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2718'. [ 799.897897][T13561] overlayfs: failed to clone upperpath [ 799.978607][T13563] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2718'. [ 800.058021][T13567] netlink: 1312 bytes leftover after parsing attributes in process `syz.3.2717'. [ 800.314685][T12007] gspca_vc032x: reg_w err -71 [ 800.320151][T12007] vc032x 2-1:0.0: probe with driver vc032x failed with error -71 [ 800.341299][T12007] usb 2-1: USB disconnect, device number 4 [ 800.448200][T13574] netlink: 2048 bytes leftover after parsing attributes in process `syz.0.2721'. [ 800.458788][T13574] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2721'. [ 801.490641][T13587] overlayfs: failed to resolve './file0': -2 [ 801.662414][T13593] netlink: 'syz.1.2730': attribute type 1 has an invalid length. [ 801.739370][T13593] 8021q: adding VLAN 0 to HW filter on device bond1 [ 801.787629][T13594] netlink: 'syz.3.2731': attribute type 12 has an invalid length. [ 801.836607][T13593] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2730'. [ 801.865378][T13593] ipvlan2: entered promiscuous mode [ 801.872650][T13593] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 801.883034][T13593] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 802.374559][T13609] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2736'. [ 802.686565][T13609] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2736'. [ 803.928498][T13621] Bluetooth: MGMT ver 1.23 [ 804.793923][T13635] netlink: 'syz.0.2745': attribute type 12 has an invalid length. [ 807.234404][T13675] bridge0: port 3(veth0_virt_wifi) entered blocking state [ 807.242302][T13675] bridge0: port 3(veth0_virt_wifi) entered forwarding state [ 807.251802][T13675] bridge0: port 2(bridge_slave_1) entered blocking state [ 807.259582][T13675] bridge0: port 2(bridge_slave_1) entered forwarding state [ 807.268533][T13675] bridge0: port 1(bridge_slave_0) entered blocking state [ 807.276339][T13675] bridge0: port 1(bridge_slave_0) entered forwarding state [ 807.401420][T13675] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 807.849633][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 807.849718][ T30] audit: type=1326 audit(1759827804.780:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13685 comm="syz.3.2768" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f28539 code=0x0 [ 809.073931][T13709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 809.108428][T13709] batman_adv: batadv0: Interface activated: dummy0 [ 809.115315][T13709] batadv0: mtu less than device minimum [ 809.123733][T13709] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 809.137188][T13709] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 809.150521][T13709] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 809.163911][T13709] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 809.177283][T13709] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 809.190658][T13709] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 809.204064][T13709] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 809.217458][T13709] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 811.583826][T13749] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.719318][T13749] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.853653][T13754] netlink: 'syz.3.2797': attribute type 1 has an invalid length. [ 811.870065][T13749] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.917475][T13755] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2797'. [ 811.999467][T13754] bond5: entered promiscuous mode [ 812.006658][T13754] 8021q: adding VLAN 0 to HW filter on device bond5 [ 812.104320][T13749] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 812.267700][T13755] bond5: (slave bridge3): making interface the new active one [ 812.277152][T13755] bridge3: entered promiscuous mode [ 812.290973][T13755] bond5: (slave bridge3): Enslaving as an active interface with an up link [ 812.427802][T13754] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2797'. [ 812.471150][T13759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 812.486974][T13759] 8021q: adding VLAN 0 to HW filter on device team0 [ 812.601936][T13759] net_ratelimit: 12 callbacks suppressed [ 812.602007][T13759] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 812.671778][T13754] bond5: (slave bridge4): Enslaving as a backup interface with an up link [ 812.714222][ T57] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 812.845929][ T57] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 812.905534][ T57] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 812.914268][ T57] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.250676][T13767] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.421582][T13767] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.541659][T13767] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.738559][T13767] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.957887][T13778] bridge0: entered promiscuous mode [ 813.963928][T13778] macvtap1: entered allmulticast mode [ 813.970735][T13778] bridge0: entered allmulticast mode [ 814.010830][T13778] bridge0: left allmulticast mode [ 814.016529][T13778] bridge0: left promiscuous mode [ 814.226245][ T30] audit: type=1804 audit(1759827811.150:464): pid=13781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.2805" name="file0" dev="tmpfs" ino=3056 res=1 errno=0 [ 814.227392][T13781] ref_ctr going negative. vaddr: 0x80ffc002, curr val: -29824, delta: 1 [ 814.256046][T13781] ref_ctr increment failed for inode: 0xbf0 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff888119737800 [ 815.254256][T13799] netlink: 44 bytes leftover after parsing attributes in process `syz.9.2815'. [ 815.777193][T13813] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2821'. [ 816.020992][T13816] tipc: Enabling of bearer rejected, failed to enable media [ 816.770738][ T7335] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.797642][ T7335] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.873429][ T7335] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.896046][ T7335] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.231776][T13837] netlink: 2028 bytes leftover after parsing attributes in process `syz.3.2830'. [ 817.241726][T13837] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2830'. [ 818.702489][T12008] IPVS: starting estimator thread 0... [ 818.796975][T13863] IPVS: using max 192 ests per chain, 9600 per kthread [ 819.163123][T13870] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.318951][T13870] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.489014][T13870] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.646083][T13870] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.984346][ T3855] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.002622][ T3855] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.037796][ T3855] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.163677][ T4118] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 821.109020][T13889] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2849'. [ 821.552058][ T30] audit: type=1326 audit(1759827818.480:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13899 comm="syz.3.2852" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f28539 code=0x7ffc0000 [ 821.613155][ T30] audit: type=1326 audit(1759827818.510:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13899 comm="syz.3.2852" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7f28539 code=0x7ffc0000 [ 821.636475][ T30] audit: type=1326 audit(1759827818.510:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13899 comm="syz.3.2852" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f28539 code=0x7ffc0000 [ 821.659343][ T30] audit: type=1326 audit(1759827818.520:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13899 comm="syz.3.2852" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f28539 code=0x7ffc0000 [ 821.682670][ T30] audit: type=1326 audit(1759827818.520:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13899 comm="syz.3.2852" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f28539 code=0x7ffc0000 [ 821.705683][ T30] audit: type=1326 audit(1759827818.520:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13899 comm="syz.3.2852" exe="/root/syz-executor" sig=0 arch=40000003 syscall=345 compat=1 ip=0xf7f28539 code=0x7ffc0000 [ 821.728257][ T30] audit: type=1326 audit(1759827818.520:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13899 comm="syz.3.2852" exe="/root/syz-executor" sig=0 arch=40000003 syscall=7 compat=1 ip=0x80000006 code=0x7ffc0000 [ 821.750917][ T30] audit: type=1326 audit(1759827818.530:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13899 comm="syz.3.2852" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f28539 code=0x7ffc0000 [ 822.120567][T13913] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 822.403078][T13913] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 822.523323][T13913] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 822.752924][T13913] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 823.296571][ T57] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.329366][ T57] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.360506][ T57] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.385569][ T57] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.789382][T13941] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2867'. [ 823.819673][T13941] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2867'. [ 824.439507][T13952] overlayfs: failed to clone upperpath [ 824.906934][T13958] 9pnet: p9_errstr2errno: server reported unknown error ‌@يخ0x0000000000000007 [ 825.291127][T13968] vlan2: entered promiscuous mode [ 825.296874][T13968] bridge0: entered promiscuous mode [ 825.303184][T13968] vlan2: entered allmulticast mode [ 825.308791][T13968] bridge0: entered allmulticast mode [ 825.407240][T13971] bridge_slave_0: left allmulticast mode [ 825.413196][T13971] bridge_slave_0: left promiscuous mode [ 825.420602][T13971] bridge0: port 1(bridge_slave_0) entered disabled state [ 825.470255][T13971] bridge_slave_1: left allmulticast mode [ 825.476465][T13971] bridge_slave_1: left promiscuous mode [ 825.483348][T13971] bridge0: port 2(bridge_slave_1) entered disabled state [ 825.558857][T13971] bond0: (slave bond_slave_0): Releasing backup interface [ 825.597580][T13971] bond0: (slave bond_slave_1): Releasing backup interface [ 825.683620][T13971] team0: Port device team_slave_0 removed [ 825.732946][T13971] team0: Port device team_slave_1 removed [ 825.744936][T13971] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 825.752869][T13971] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 825.799797][T13971] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 825.808854][T13971] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 825.860240][T13971] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 826.348214][T13986] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2884'. [ 826.525885][ T30] audit: type=1326 audit(1759827823.450:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13988 comm="syz.3.2885" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f28539 code=0x7ffc0000 [ 826.548912][ T30] audit: type=1326 audit(1759827823.450:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13988 comm="syz.3.2885" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f28539 code=0x7ffc0000 [ 826.571855][ T30] audit: type=1326 audit(1759827823.460:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13988 comm="syz.3.2885" exe="/root/syz-executor" sig=0 arch=40000003 syscall=26 compat=1 ip=0xf7f28539 code=0x7ffc0000 [ 826.594424][ T30] audit: type=1326 audit(1759827823.460:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13988 comm="syz.3.2885" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f28539 code=0x7ffc0000 [ 826.617047][ T30] audit: type=1326 audit(1759827823.460:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13988 comm="syz.3.2885" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7f28539 code=0x7ffc0000 [ 826.639779][ T30] audit: type=1326 audit(1759827823.460:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13988 comm="syz.3.2885" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f28539 code=0x7ffc0000 [ 826.672698][ T30] audit: type=1326 audit(1759827823.460:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13988 comm="syz.3.2885" exe="/root/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf7f28539 code=0x7ffc0000 [ 826.695617][ T30] audit: type=1326 audit(1759827823.460:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13988 comm="syz.3.2885" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f28539 code=0x7ffc0000 [ 826.720762][ T30] audit: type=1326 audit(1759827823.460:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13988 comm="syz.3.2885" exe="/root/syz-executor" sig=0 arch=40000003 syscall=131 compat=1 ip=0xf7f28539 code=0x7ffc0000 [ 826.743597][ T30] audit: type=1326 audit(1759827823.460:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13988 comm="syz.3.2885" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f28539 code=0x7ffc0000 [ 826.766474][ T30] audit: type=1326 audit(1759827823.490:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13988 comm="syz.3.2885" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f28539 code=0x7ffc0000 [ 826.789269][ T30] audit: type=1326 audit(1759827823.490:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13988 comm="syz.3.2885" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f28539 code=0x7ffc0000 [ 827.026499][T13994] overlayfs: failed to clone upperpath [ 827.529372][T14005] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2891'. [ 827.851117][T14012] netlink: 2028 bytes leftover after parsing attributes in process `syz.1.2895'. [ 827.861102][T14012] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2895'. [ 827.870509][T14012] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2895'. [ 828.511537][T14023] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2898'. [ 828.572180][T14023] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2898'. [ 828.836447][T14027] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2899'. [ 829.013407][T14030] 8021q: adding VLAN 0 to HW filter on device bond6 [ 829.028932][T14030] bond5: (slave bond6): Enslaving as an active interface with an up link [ 829.088725][T14027] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2899'. [ 829.100021][T14027] bond5: entered promiscuous mode [ 829.105520][T14027] bond6: entered promiscuous mode [ 829.111678][T14027] bond5: entered allmulticast mode [ 829.117319][T14027] bond6: entered allmulticast mode [ 829.124328][T14027] 8021q: adding VLAN 0 to HW filter on device bond5 [ 829.335510][T14034] syzkaller0: entered promiscuous mode [ 829.344904][T14034] syzkaller0: entered allmulticast mode [ 830.637497][T14062] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2912'. [ 830.700464][T14062] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2912'. [ 831.082937][T14067] binder: 14066:14067 unknown command 24592 [ 831.089417][T14067] binder: 14066:14067 ioctl c0306201 800001c0 returned -22 [ 832.003627][T14093] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2925'. [ 832.019544][T14093] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2925'. [ 832.036604][T14093] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2925'. [ 832.051168][T14093] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2925'. [ 832.444311][T14102] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2926'. [ 832.477317][T14102] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2926'. [ 832.513312][T14104] netlink: 'syz.9.2930': attribute type 10 has an invalid length. [ 832.523520][T14104] syz_tun: entered promiscuous mode [ 832.557260][T14104] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 834.217166][T14142] overlayfs: failed to clone upperpath [ 834.413066][T14144] netlink: 'syz.0.2944': attribute type 4 has an invalid length. [ 835.981949][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 836.060176][T14172] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 836.445627][T14178] 8021q: adding VLAN 0 to HW filter on device bond7 [ 836.606092][T14180] bond7: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 836.666745][ T4118] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 836.785793][ T4118] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 837.538905][T14193] __nla_validate_parse: 3 callbacks suppressed [ 837.538997][T14193] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.2962'. [ 838.233112][T14203] overlayfs: refusing to follow metacopy origin for (/file1) [ 839.649036][T14224] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2973'. [ 839.779944][T14224] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2973'. [ 841.647919][T14258] netlink: 'syz.0.2987': attribute type 1 has an invalid length. [ 841.838936][T14264] 8021q: adding VLAN 0 to HW filter on device bond2 [ 841.854914][T14264] bond1: (slave bond2): making interface the new active one [ 841.865994][T14264] bond1: (slave bond2): Enslaving as an active interface with an up link [ 842.014241][T14258] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2987'. [ 842.029992][T14258] bond1: entered promiscuous mode [ 842.035654][T14258] bond2: entered promiscuous mode [ 842.041774][T14258] bond1: entered allmulticast mode [ 842.047434][T14258] bond2: entered allmulticast mode [ 842.054495][T14258] 8021q: adding VLAN 0 to HW filter on device bond1 [ 842.579381][T14275] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2994'. [ 843.265917][T12008] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 843.289164][T11388] Bluetooth: hci4: unexpected event 0x03 length: 1 < 11 [ 843.429057][T12008] usb 2-1: Using ep0 maxpacket: 16 [ 843.460860][T12008] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 843.472516][T12008] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 843.486296][T12008] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 843.496337][T12008] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 843.510940][T12008] usb 2-1: config 0 descriptor?? [ 843.589899][T14300] overlayfs: failed to clone upperpath [ 843.821467][T14302] netlink: 48 bytes leftover after parsing attributes in process `syz.9.3006'. [ 844.003102][T12008] HID 045e:07da: Invalid code 65791 type 1 [ 844.047768][T12008] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.000C/input/input13 [ 844.133262][T12008] microsoft 0003:045E:07DA.000C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 844.387002][ T42] usb 2-1: USB disconnect, device number 5 [ 845.162913][T14318] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3013'. [ 846.147206][T14338] bridge: RTM_NEWNEIGH with invalid ether address [ 846.260535][T14333] loop1: detected capacity change from 0 to 4096 [ 846.361102][T14333] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 846.439674][T14333] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 846.531403][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 846.531489][ T30] audit: type=1804 audit(1759827843.464:488): pid=14351 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3019" name="/newroot/118/file0/file1" dev="loop1" ino=15 res=1 errno=0 [ 846.670857][T14355] overlayfs: failed to clone upperpath [ 846.829362][T12595] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 847.136958][ T42] kernel write not supported for file bpf-prog (pid: 42 comm: kworker/1:1) [ 848.652784][T14403] loop1: detected capacity change from 0 to 16 [ 848.721640][T14403] overlayfs: failed to get index nlink (file2/file1, err=-61) [ 849.113664][T14412] 8021q: adding VLAN 0 to HW filter on device bond3 [ 849.231714][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 849.238789][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 849.357663][T14412] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 850.226833][T14429] loop1: detected capacity change from 0 to 512 [ 850.247120][T14429] ext4: Unknown parameter 'noacl' [ 852.406399][T14471] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3073'. [ 852.415911][T14471] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3073'. [ 853.100232][T14486] loop1: detected capacity change from 0 to 1024 [ 853.129914][T14486] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 853.173849][T14486] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.3078: Invalid block bitmap block 0 in block_group 0 [ 853.213944][T14486] EXT4-fs (loop1): Remounting filesystem read-only [ 853.225413][T14486] Quota error (device loop1): write_blk: dquota write failed [ 853.233330][T14486] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 853.244470][T14486] EXT4-fs (loop1): 1 orphan inode deleted [ 853.252850][T14486] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 853.291724][T14483] overlayfs: upper fs does not support tmpfile. [ 853.319451][T14486] syz.1.3078 (14486) used greatest stack depth: 3240 bytes left [ 853.430560][T12595] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 856.388799][ T5783] Bluetooth: hci3: command 0x0406 tx timeout [ 856.458725][T14534] overlayfs: failed to clone upperpath [ 856.515027][T14534] overlayfs: failed to clone upperpath [ 857.441043][T14559] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3105'. [ 859.209185][T14583] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3114'. [ 860.380474][T14591] loop1: detected capacity change from 0 to 8192 [ 860.520000][T14610] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3124'. [ 860.967622][T14617] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3127'. [ 861.768599][T14629] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3133'. [ 861.841030][T14630] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 861.848641][T14630] IPv6: NLM_F_CREATE should be set when creating new route [ 861.938940][T14629] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 861.946759][T14629] IPv6: NLM_F_CREATE should be set when creating new route [ 862.591392][T14646] loop1: detected capacity change from 0 to 256 [ 862.927633][T14652] netlink: 'syz.9.3139': attribute type 12 has an invalid length. [ 862.935970][T14652] netlink: 'syz.9.3139': attribute type 29 has an invalid length. [ 862.943987][T14652] netlink: 148 bytes leftover after parsing attributes in process `syz.9.3139'. [ 862.953734][T14652] netlink: 'syz.9.3139': attribute type 3 has an invalid length. [ 862.969474][T14654] netlink: 'syz.9.3139': attribute type 12 has an invalid length. [ 862.979272][T14654] netlink: 'syz.9.3139': attribute type 29 has an invalid length. [ 862.987590][T14654] netlink: 148 bytes leftover after parsing attributes in process `syz.9.3139'. [ 862.997034][T14654] netlink: 'syz.9.3139': attribute type 3 has an invalid length. [ 864.325743][T14675] bond7: option mode: unable to set because the bond device has slaves [ 864.597997][T14677] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3159'. [ 864.609210][T14677] netlink: 'syz.0.3159': attribute type 7 has an invalid length. [ 864.617978][T14677] netlink: 'syz.0.3159': attribute type 8 has an invalid length. [ 864.626160][T14677] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3159'. [ 864.737366][T14683] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3151'. [ 867.691368][T14714] 8021q: adding VLAN 0 to HW filter on device bond2 [ 868.077284][T14714] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 870.652937][T14739] binder_alloc: 14738: binder_alloc_buf, no vma [ 871.593290][T14689] Set syz1 is full, maxelem 65536 reached [ 872.824675][T14755] tipc: Failed to remove unknown binding: 66,1,1/0:1400278124/1400278126 [ 872.907118][T14760] tipc: Failed to remove unknown binding: 66,1,1/0:1400278124/1400278126 [ 872.916127][T14760] tipc: Failed to remove unknown binding: 66,1,1/0:1400278124/1400278126 [ 873.579605][T14778] netlink: 'syz.1.3187': attribute type 1 has an invalid length. [ 873.680336][T14778] 8021q: adding VLAN 0 to HW filter on device bond3 [ 873.840943][T14783] macvlan2: entered promiscuous mode [ 873.846894][T14783] macvlan2: entered allmulticast mode [ 873.858660][T14783] bond3: entered promiscuous mode [ 873.867269][T14783] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 873.920321][T14783] bond3: left promiscuous mode [ 874.048535][T14786] 9pnet_fd: Insufficient options for proto=fd [ 874.519365][T14797] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3194'. [ 875.267838][T14807] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3201'. [ 875.798122][T14822] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3206'. [ 877.125702][T14848] netlink: 'syz.3.3217': attribute type 5 has an invalid length. [ 877.133774][T14848] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.3217'. [ 877.420195][T14850] bridge0: port 3(veth0_virt_wifi) entered disabled state [ 877.429041][T14850] bridge0: port 2(bridge_slave_1) entered disabled state [ 877.437756][T14850] bridge0: port 1(bridge_slave_0) entered disabled state [ 877.822861][T14850] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 878.763047][ T57] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 878.815626][ T57] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 878.852318][ T57] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 878.901690][ T57] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 879.396008][T14884] netlink: 'syz.5.3229': attribute type 10 has an invalid length. [ 881.060820][T14919] overlayfs: failed to resolve './file0': -2 [ 883.113934][T14967] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3264'. [ 883.296751][T14969] overlayfs: failed to clone upperpath [ 885.167835][T15007] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3280'. [ 885.590092][T15016] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3284'. [ 886.152474][T15027] input: syz0 as /devices/virtual/input/input14 [ 887.829661][T15054] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 887.838675][T15054] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 888.589973][T15063] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3301'. [ 889.539997][T15077] netlink: 'syz.9.3307': attribute type 10 has an invalid length. [ 889.573264][T15077] 8021q: adding VLAN 0 to HW filter on device team0 [ 889.590909][T15077] bond0: (slave team0): Enslaving as an active interface with an up link [ 891.040707][T15102] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3317'. [ 891.238010][T15102] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3317'. [ 892.149563][T15106] loop1: detected capacity change from 0 to 40427 [ 892.251487][T15106] F2FS-fs (loop1): build fault injection rate: 771 [ 892.265658][T15106] F2FS-fs (loop1): invalid crc value [ 892.604065][T15106] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 892.620554][T15106] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 894.201823][T15127] ===================================================== [ 894.209098][T15127] BUG: KMSAN: uninit-value in aes_encrypt+0x125d/0x1960 [ 894.216262][T15127] aes_encrypt+0x125d/0x1960 [ 894.221079][T15127] aesti_encrypt+0x7d/0xf0 [ 894.225723][T15127] cipher_crypt_one+0x120/0x2e0 [ 894.230841][T15127] crypto_cipher_encrypt_one+0x33/0x40 [ 894.236585][T15127] drbg_ctr_update+0x19a9/0x3700 [ 894.241774][T15127] drbg_seed+0xb1e/0xe20 [ 894.246280][T15127] drbg_kcapi_seed+0xe0c/0x1e40 [ 894.251374][T15127] crypto_rng_reset+0x190/0x250 [ 894.256454][T15127] rng_setkey+0x52/0x70 [ 894.260819][T15127] alg_setkey+0x262/0x3b0 [ 894.265343][T15127] alg_setsockopt+0x503/0x760 [ 894.270217][T15127] __sys_setsockopt+0x43b/0x580 [ 894.275318][T15127] __ia32_sys_setsockopt+0xf3/0x1a0 [ 894.280865][T15127] ia32_sys_call+0x24c2/0x4310 [ 894.285917][T15127] __do_fast_syscall_32+0xb0/0x150 [ 894.291256][T15127] do_fast_syscall_32+0x38/0x80 [ 894.296297][T15127] do_SYSENTER_32+0x1f/0x30 [ 894.301025][T15127] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 894.307614][T15127] [ 894.310048][T15127] [ 894.310048][T15127] [ 894.318932][T15127] Uninit was stored to memory at: [ 894.324274][T15127] crypto_sha3_finup+0x136/0xe00 [ 894.329476][T15127] crypto_shash_finup+0x327/0xe80 [ 894.334768][T15127] jent_hash_time+0x247/0x590 [ 894.339736][T15127] jent_condition_data+0x4f0/0x510 [ 894.345134][T15127] jent_measure_jitter+0x547/0x770 [ 894.350495][T15127] jent_gen_entropy+0x209/0x450 [ 894.355583][T15127] jent_read_entropy+0x353/0xeb0 [ 894.360767][T15127] jent_kcapi_random+0x6c/0x250 [ 894.365880][T15127] drbg_seed+0x3f2/0xe20 [ 894.370367][T15127] drbg_kcapi_seed+0xe0c/0x1e40 [ 894.375494][T15127] crypto_rng_reset+0x190/0x250 [ 894.380572][T15127] rng_setkey+0x52/0x70 [ 894.384942][T15127] alg_setkey+0x262/0x3b0 [ 894.389477][T15127] alg_setsockopt+0x503/0x760 [ 894.394352][T15127] __sys_setsockopt+0x43b/0x580 [ 894.399456][T15127] __ia32_sys_setsockopt+0xf3/0x1a0 [ 894.404922][T15127] ia32_sys_call+0x24c2/0x4310 [ 894.409945][T15127] __do_fast_syscall_32+0xb0/0x150 [ 894.415235][T15127] do_fast_syscall_32+0x38/0x80 [ 894.420249][T15127] do_SYSENTER_32+0x1f/0x30 [ 894.424911][T15127] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 894.431444][T15127] [ 894.433847][T15127] Uninit was stored to memory at: [ 894.439145][T15127] crypto_shash_finup+0xc5a/0xe80 [ 894.444377][T15127] jent_hash_time+0x1de/0x590 [ 894.449247][T15127] jent_condition_data+0x4f0/0x510 [ 894.454555][T15127] jent_measure_jitter+0x547/0x770 [ 894.459858][T15127] jent_gen_entropy+0x209/0x450 [ 894.464905][T15127] jent_read_entropy+0x353/0xeb0 [ 894.470039][T15127] jent_kcapi_random+0x6c/0x250 [ 894.475099][T15127] drbg_seed+0x3f2/0xe20 [ 894.479530][T15127] drbg_kcapi_seed+0xe0c/0x1e40 [ 894.484562][T15127] crypto_rng_reset+0x190/0x250 [ 894.489661][T15127] rng_setkey+0x52/0x70 [ 894.493982][T15127] alg_setkey+0x262/0x3b0 [ 894.498467][T15127] alg_setsockopt+0x503/0x760 [ 894.503335][T15127] __sys_setsockopt+0x43b/0x580 [ 894.508404][T15127] __ia32_sys_setsockopt+0xf3/0x1a0 [ 894.513808][T15127] ia32_sys_call+0x24c2/0x4310 [ 894.518794][T15127] __do_fast_syscall_32+0xb0/0x150 [ 894.524102][T15127] do_fast_syscall_32+0x38/0x80 [ 894.529108][T15127] do_SYSENTER_32+0x1f/0x30 [ 894.533768][T15127] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 894.540313][T15127] [ 894.542767][T15127] Uninit was stored to memory at: [ 894.548040][T15127] crypto_sha3_finup+0xc98/0xe00 [ 894.553178][T15127] crypto_shash_finup+0x327/0xe80 [ 894.558414][T15127] jent_hash_time+0x247/0x590 [ 894.563288][T15127] jent_condition_data+0x4f0/0x510 [ 894.568687][T15127] jent_measure_jitter+0x547/0x770 [ 894.574005][T15127] jent_gen_entropy+0x209/0x450 [ 894.579075][T15127] jent_read_entropy+0x353/0xeb0 [ 894.584215][T15127] jent_kcapi_random+0x6c/0x250 [ 894.589275][T15127] drbg_seed+0x3f2/0xe20 [ 894.593701][T15127] drbg_kcapi_seed+0xe0c/0x1e40 [ 894.598835][T15127] crypto_rng_reset+0x190/0x250 [ 894.603897][T15127] rng_setkey+0x52/0x70 [ 894.608247][T15127] alg_setkey+0x262/0x3b0 [ 894.612816][T15127] alg_setsockopt+0x503/0x760 [ 894.617658][T15127] __sys_setsockopt+0x43b/0x580 [ 894.622723][T15127] __ia32_sys_setsockopt+0xf3/0x1a0 [ 894.628152][T15127] ia32_sys_call+0x24c2/0x4310 [ 894.633176][T15127] __do_fast_syscall_32+0xb0/0x150 [ 894.638498][T15127] do_fast_syscall_32+0x38/0x80 [ 894.643509][T15127] do_SYSENTER_32+0x1f/0x30 [ 894.648171][T15127] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 894.654699][T15127] [ 894.657107][T15127] Uninit was stored to memory at: [ 894.662423][T15127] keccakf+0x1efb/0x2110 [ 894.666852][T15127] crypto_sha3_finup+0x772/0xe00 [ 894.671980][T15127] crypto_shash_finup+0x327/0xe80 [ 894.677213][T15127] jent_hash_time+0x247/0x590 [ 894.682084][T15127] jent_condition_data+0x4f0/0x510 [ 894.687416][T15127] jent_measure_jitter+0x547/0x770 [ 894.692722][T15127] jent_gen_entropy+0x209/0x450 [ 894.697761][T15127] jent_read_entropy+0x353/0xeb0 [ 894.702885][T15127] jent_kcapi_random+0x6c/0x250 [ 894.707944][T15127] drbg_seed+0x3f2/0xe20 [ 894.712364][T15127] drbg_kcapi_seed+0xe0c/0x1e40 [ 894.717393][T15127] crypto_rng_reset+0x190/0x250 [ 894.722411][T15127] rng_setkey+0x52/0x70 [ 894.726717][T15127] alg_setkey+0x262/0x3b0 [ 894.731188][T15127] alg_setsockopt+0x503/0x760 [ 894.736017][T15127] __sys_setsockopt+0x43b/0x580 [ 894.741069][T15127] __ia32_sys_setsockopt+0xf3/0x1a0 [ 894.746469][T15127] ia32_sys_call+0x24c2/0x4310 [ 894.751437][T15127] __do_fast_syscall_32+0xb0/0x150 [ 894.756707][T15127] do_fast_syscall_32+0x38/0x80 [ 894.761709][T15127] do_SYSENTER_32+0x1f/0x30 [ 894.766362][T15127] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 894.772901][T15127] [ 894.775299][T15127] Uninit was stored to memory at: [ 894.780528][T15127] crypto_sha3_finup+0x5be/0xe00 [ 894.785672][T15127] crypto_shash_finup+0x327/0xe80 [ 894.790903][T15127] jent_hash_time+0x247/0x590 [ 894.795774][T15127] jent_condition_data+0x4f0/0x510 [ 894.801082][T15127] jent_measure_jitter+0x547/0x770 [ 894.806383][T15127] jent_gen_entropy+0x209/0x450 [ 894.811416][T15127] jent_read_entropy+0x353/0xeb0 [ 894.816541][T15127] jent_kcapi_random+0x6c/0x250 [ 894.821592][T15127] drbg_seed+0x3f2/0xe20 [ 894.826007][T15127] drbg_kcapi_seed+0xe0c/0x1e40 [ 894.831036][T15127] crypto_rng_reset+0x190/0x250 [ 894.836052][T15127] rng_setkey+0x52/0x70 [ 894.840372][T15127] alg_setkey+0x262/0x3b0 [ 894.844846][T15127] alg_setsockopt+0x503/0x760 [ 894.849671][T15127] __sys_setsockopt+0x43b/0x580 [ 894.854716][T15127] __ia32_sys_setsockopt+0xf3/0x1a0 [ 894.860109][T15127] ia32_sys_call+0x24c2/0x4310 [ 894.865090][T15127] __do_fast_syscall_32+0xb0/0x150 [ 894.870382][T15127] do_fast_syscall_32+0x38/0x80 [ 894.875391][T15127] do_SYSENTER_32+0x1f/0x30 [ 894.880047][T15127] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 894.886567][T15127] [ 894.888970][T15127] Uninit was stored to memory at: [ 894.894238][T15127] crypto_sha3_finup+0x136/0xe00 [ 894.899354][T15127] crypto_shash_finup+0x327/0xe80 [ 894.904578][T15127] jent_hash_time+0x247/0x590 [ 894.909448][T15127] jent_condition_data+0x4f0/0x510 [ 894.914758][T15127] jent_measure_jitter+0x547/0x770 [ 894.920060][T15127] jent_gen_entropy+0x209/0x450 [ 894.925099][T15127] jent_read_entropy+0x353/0xeb0 [ 894.930228][T15127] jent_kcapi_random+0x6c/0x250 [ 894.935276][T15127] drbg_seed+0x3f2/0xe20 [ 894.939692][T15127] drbg_kcapi_seed+0xe0c/0x1e40 [ 894.944726][T15127] crypto_rng_reset+0x190/0x250 [ 894.949743][T15127] rng_setkey+0x52/0x70 [ 894.954050][T15127] alg_setkey+0x262/0x3b0 [ 894.958517][T15127] alg_setsockopt+0x503/0x760 [ 894.963343][T15127] __sys_setsockopt+0x43b/0x580 [ 894.968381][T15127] __ia32_sys_setsockopt+0xf3/0x1a0 [ 894.973773][T15127] ia32_sys_call+0x24c2/0x4310 [ 894.978744][T15127] __do_fast_syscall_32+0xb0/0x150 [ 894.984032][T15127] do_fast_syscall_32+0x38/0x80 [ 894.989040][T15127] do_SYSENTER_32+0x1f/0x30 [ 894.993694][T15127] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 895.000211][T15127] [ 895.002613][T15127] Uninit was stored to memory at: [ 895.007890][T15127] crypto_shash_finup+0xc5a/0xe80 [ 895.013118][T15127] jent_hash_time+0x1de/0x590 [ 895.018104][T15127] jent_condition_data+0x4f0/0x510 [ 895.023433][T15127] jent_measure_jitter+0x547/0x770 [ 895.028737][T15127] jent_gen_entropy+0x209/0x450 [ 895.033776][T15127] jent_read_entropy+0x353/0xeb0 [ 895.039156][T15127] jent_kcapi_random+0x6c/0x250 [ 895.044200][T15127] drbg_seed+0x3f2/0xe20 [ 895.048605][T15127] drbg_kcapi_seed+0xe0c/0x1e40 [ 895.053630][T15127] crypto_rng_reset+0x190/0x250 [ 895.058725][T15127] rng_setkey+0x52/0x70 [ 895.063060][T15127] alg_setkey+0x262/0x3b0 [ 895.067534][T15127] alg_setsockopt+0x503/0x760 [ 895.072428][T15127] __sys_setsockopt+0x43b/0x580 [ 895.077563][T15127] __ia32_sys_setsockopt+0xf3/0x1a0 [ 895.082973][T15127] ia32_sys_call+0x24c2/0x4310 [ 895.087970][T15127] __do_fast_syscall_32+0xb0/0x150 [ 895.093255][T15127] do_fast_syscall_32+0x38/0x80 [ 895.098257][T15127] do_SYSENTER_32+0x1f/0x30 [ 895.102917][T15127] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 895.109434][T15127] [ 895.111835][T15127] Local variable intermediary created at: [ 895.117638][T15127] jent_hash_time+0x9b/0x590 [ 895.122423][T15127] jent_condition_data+0x4f0/0x510 [ 895.127734][T15127] [ 895.130163][T15127] CPU: 1 UID: 0 PID: 15127 Comm: syz.9.3323 Tainted: G W syzkaller #0 PREEMPT(none) [ 895.141280][T15127] Tainted: [W]=WARN [ 895.145172][T15127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 895.155349][T15127] ===================================================== [ 895.162362][T15127] Disabling lock debugging due to kernel taint [ 895.168702][T15127] Kernel panic - not syncing: kmsan.panic set ... [ 895.175259][T15127] CPU: 1 UID: 0 PID: 15127 Comm: syz.9.3323 Tainted: G B W syzkaller #0 PREEMPT(none) [ 895.186399][T15127] Tainted: [B]=BAD_PAGE, [W]=WARN [ 895.191511][T15127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 895.201696][T15127] Call Trace: [ 895.205091][T15127] [ 895.208211][T15127] __dump_stack+0x26/0x30 [ 895.212729][T15127] dump_stack_lvl+0x53/0x270 [ 895.217502][T15127] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 895.223503][T15127] dump_stack+0x1e/0x25 [ 895.227827][T15127] vpanic+0x435/0xd30 [ 895.232013][T15127] panic+0x15d/0x160 [ 895.236140][T15127] kmsan_report+0x31c/0x320 [ 895.240830][T15127] ? __msan_warning+0x1b/0x30 [ 895.245667][T15127] ? aes_encrypt+0x125d/0x1960 [ 895.250588][T15127] ? aesti_encrypt+0x7d/0xf0 [ 895.255354][T15127] ? cipher_crypt_one+0x120/0x2e0 [ 895.260592][T15127] ? crypto_cipher_encrypt_one+0x33/0x40 [ 895.266559][T15127] ? drbg_ctr_update+0x19a9/0x3700 [ 895.271917][T15127] ? drbg_seed+0xb1e/0xe20 [ 895.276533][T15127] ? drbg_kcapi_seed+0xe0c/0x1e40 [ 895.281751][T15127] ? crypto_rng_reset+0x190/0x250 [ 895.286948][T15127] ? rng_setkey+0x52/0x70 [ 895.291444][T15127] ? alg_setkey+0x262/0x3b0 [ 895.296100][T15127] ? alg_setsockopt+0x503/0x760 [ 895.301121][T15127] ? __sys_setsockopt+0x43b/0x580 [ 895.306351][T15127] ? __ia32_sys_setsockopt+0xf3/0x1a0 [ 895.311935][T15127] ? ia32_sys_call+0x24c2/0x4310 [ 895.317083][T15127] ? __do_fast_syscall_32+0xb0/0x150 [ 895.322615][T15127] ? do_fast_syscall_32+0x38/0x80 [ 895.327804][T15127] ? do_SYSENTER_32+0x1f/0x30 [ 895.332642][T15127] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 895.339354][T15127] ? crypto_sha3_finup+0xd11/0xe00 [ 895.344763][T15127] ? kmsan_get_metadata+0xfb/0x160 [ 895.350070][T15127] ? kmsan_internal_memmove_metadata+0x181/0x230 [ 895.356589][T15127] ? kmsan_get_metadata+0xfb/0x160 [ 895.361888][T15127] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 895.367916][T15127] ? kmsan_get_metadata+0xfb/0x160 [ 895.373226][T15127] __msan_warning+0x1b/0x30 [ 895.377890][T15127] aes_encrypt+0x125d/0x1960 [ 895.382651][T15127] ? kmsan_get_metadata+0xfb/0x160 [ 895.387988][T15127] aesti_encrypt+0x7d/0xf0 [ 895.392603][T15127] cipher_crypt_one+0x120/0x2e0 [ 895.397676][T15127] ? __pfx_aesti_encrypt+0x10/0x10 [ 895.402975][T15127] ? crypto_cipher_setkey+0x380/0x430 [ 895.408577][T15127] ? kmsan_get_metadata+0xfb/0x160 [ 895.413879][T15127] crypto_cipher_encrypt_one+0x33/0x40 [ 895.419648][T15127] drbg_ctr_update+0x19a9/0x3700 [ 895.424875][T15127] ? __pfx_drbg_ctr_update+0x10/0x10 [ 895.430363][T15127] drbg_seed+0xb1e/0xe20 [ 895.434838][T15127] ? __pfx_jent_kcapi_random+0x10/0x10 [ 895.440524][T15127] ? kmsan_get_metadata+0xfb/0x160 [ 895.445821][T15127] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 895.451840][T15127] drbg_kcapi_seed+0xe0c/0x1e40 [ 895.457053][T15127] ? kmsan_get_metadata+0xfb/0x160 [ 895.462380][T15127] ? __pfx_drbg_kcapi_seed+0x10/0x10 [ 895.467875][T15127] crypto_rng_reset+0x190/0x250 [ 895.472938][T15127] rng_setkey+0x52/0x70 [ 895.477264][T15127] ? __pfx_rng_setkey+0x10/0x10 [ 895.482278][T15127] alg_setkey+0x262/0x3b0 [ 895.486803][T15127] alg_setsockopt+0x503/0x760 [ 895.491686][T15127] ? __pfx_alg_setsockopt+0x10/0x10 [ 895.497059][T15127] __sys_setsockopt+0x43b/0x580 [ 895.502155][T15127] __ia32_sys_setsockopt+0xf3/0x1a0 [ 895.507585][T15127] ia32_sys_call+0x24c2/0x4310 [ 895.512656][T15127] __do_fast_syscall_32+0xb0/0x150 [ 895.517953][T15127] do_fast_syscall_32+0x38/0x80 [ 895.522987][T15127] do_SYSENTER_32+0x1f/0x30 [ 895.527710][T15127] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 895.534259][T15127] RIP: 0023:0xf7ff5539 [ 895.538463][T15127] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 895.558249][T15127] RSP: 002b:00000000f54a455c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 895.566843][T15127] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000117 [ 895.575039][T15127] RDX: 0000000000000001 RSI: 0000000080000040 RDI: 0000000000000002 [ 895.583156][T15127] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 895.591432][T15127] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 895.599540][T15127] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 895.607697][T15127] [ 895.611143][T15127] Kernel Offset: disabled [ 895.615554][T15127] Rebooting in 86400 seconds..