last executing test programs: 4m30.524047811s ago: executing program 3 (id=168): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregs(0xe, r0, 0xffffffffffffdcaf, &(0x7f0000000040)=""/45) r1 = eventfd2(0x7, 0x80800) syz_init_net_socket$ax25(0x3, 0x5, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x6, 0x7, 0x1, 0x0, "5011"}]}], {0x14}}, 0x5c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x2c, 0x7, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x0) close(r1) 4m30.340350565s ago: executing program 3 (id=172): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1000000, 0xfffffffe}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x65, 0x4004, @fd_index=0xa, 0x6, 0x0, 0x0, 0x10}) syz_io_uring_submit(r1, r2, &(0x7f0000001700)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2c, 0x0, 0x40}) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r4, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[]) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) io_uring_enter(r0, 0x1808, 0x0, 0x0, 0x0, 0x0) 4m30.228376027s ago: executing program 3 (id=173): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da942"], 0xb0) getresuid(&(0x7f0000000000), &(0x7f0000000200), &(0x7f0000000400)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',privport,access=', @ANYRESDEC=r3]) chdir(&(0x7f0000000240)='./file0\x00') creat(&(0x7f00000000c0)='./file0\x00', 0x17) 4m30.138087528s ago: executing program 3 (id=175): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) quotactl$Q_SETQUOTA(0xffffffff80000900, &(0x7f0000000c80)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 4m28.50543893s ago: executing program 3 (id=176): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x30) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) 4m28.297744734s ago: executing program 3 (id=181): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000040)={0x1d, r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) socket$can_bcm(0x1d, 0x2, 0x2) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r3, {0x1}, {0x9, 0xc}, {0xfff2, 0x6}}}, 0x24}}, 0x40044) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x4, 0x8, 0x8, {}, {}, {0x4, 0x0, 0x0, 0x1}, 0x1, @can={{0x3, 0x1, 0x1, 0x1}, 0x4, 0x3, 0x0, 0x0, "8187dc4bf6d0fd86"}}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x240400c6) 4m22.438242366s ago: executing program 0 (id=224): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = mq_open(&(0x7f0000000480)='!selinuxwk1\x1f\xd0m\xc3\x7f9\xc9\x9e*\rT\x93\xfd\xe2\x91\xef\xaa\x16#j\x97\x8f\xbc\xdeY\x0f\xcc\xc5mV\xcb\x15vm(p\xc9-QZ#\xd2{\x84\xbf\x06\x00\x00\xd9', 0x840, 0x104, 0x0) finit_module(r1, 0x0, 0x0) bind$inet(r0, &(0x7f0000000c80)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) socket$packet(0x11, 0x2, 0x300) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendto$inet(r0, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) 4m22.23063628s ago: executing program 0 (id=225): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x80000) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r2, 0x1000) r3 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) close(0x3) dup(r3) setsockopt$inet_buf(r0, 0x0, 0x9, 0x0, 0x0) r4 = fcntl$dupfd(r0, 0x406, r1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000000)) 4m21.015544583s ago: executing program 0 (id=232): bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) syz_usb_connect$cdc_ncm(0x1, 0x0, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r3, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) 4m19.678201558s ago: executing program 0 (id=245): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) r0 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x20000, 0x23) openat(r1, &(0x7f0000000680)='./file0\x00', 0x100, 0x104) 4m19.59524585s ago: executing program 0 (id=246): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="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"/3601], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ftruncate(r1, 0x101) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x8001) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x14b800, 0x6abac60bab6c66fb) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)) ppoll(&(0x7f0000000780)=[{r3, 0x11b}], 0x1, 0x0, 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0xa5941, 0x0) 4m18.682133248s ago: executing program 0 (id=250): syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000002c40)=ANY=[], 0x40c}, 0x1, 0x0, 0x0, 0x90}, 0x8000) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000100)=@ccm_128={{0x304}, "04da380d00000036", "2743837c1ac13b56272aec02aac5263b", "8a2735e8", "e306b52ddd75ce9a"}, 0x28) syz_genetlink_get_family_id$nl80211(&(0x7f0000002b40), r1) 4m18.55557111s ago: executing program 32 (id=250): syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000002c40)=ANY=[], 0x40c}, 0x1, 0x0, 0x0, 0x90}, 0x8000) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000100)=@ccm_128={{0x304}, "04da380d00000036", "2743837c1ac13b56272aec02aac5263b", "8a2735e8", "e306b52ddd75ce9a"}, 0x28) syz_genetlink_get_family_id$nl80211(&(0x7f0000002b40), r1) 4m12.758712361s ago: executing program 33 (id=181): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000040)={0x1d, r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) socket$can_bcm(0x1d, 0x2, 0x2) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r3, {0x1}, {0x9, 0xc}, {0xfff2, 0x6}}}, 0x24}}, 0x40044) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x4, 0x8, 0x8, {}, {}, {0x4, 0x0, 0x0, 0x1}, 0x1, @can={{0x3, 0x1, 0x1, 0x1}, 0x4, 0x3, 0x0, 0x0, "8187dc4bf6d0fd86"}}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x240400c6) 4m11.175534581s ago: executing program 1 (id=292): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="24000000180003041dfffd946f610500020100000005fe060c10880008000f00fff3c00e", 0x24}], 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800dd8d00000000000000000200000000000006"], 0x30}}, 0x4090) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) 4m10.71364709s ago: executing program 1 (id=294): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 4m9.295838107s ago: executing program 1 (id=297): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000100)={[{@grpquota}, {@delalloc}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") socket$packet(0x11, 0x2, 0x300) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x8cc00, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x53b, &(0x7f0000000b80)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0xee00, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x2, 0x0, 0xca, 0x3, 0x100000a, 0x8, 0x0, 0x0, 0x9f}) syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000319021508fd070100e56a010203010902240001080a40060904000702b95fc30309058803200006020409"], &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0}) 4m5.920838101s ago: executing program 1 (id=314): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3f7, &(0x7f00000004c0)="$eJzs281rXFUbAPDn3nyUt2nfxFq/2qrTBjGgJk2iQsBNRUVBcKE7FxKaaSlOmtKM2BYXKoKr4saVrlzpH+DGhSDuXQmudC+FIMW1jNyZe5txMhMzyYyjvb8fTHLO3DOc88yZZ+bcc2cCKK1K9ieJOBIRP0fEdKv61waV1r/fb793Prsl0Wi8/lvSbJfVi6bF46byylwakX6UxMku/W5ev/H2aq1WvZrXF+rrVxY2r9946tL66sXqxerl5ZVnzi4trzy7sjywWG/ePvXTxuev/fHJmV+mnr/51gvZeI/kx9rjGJRKVKKR6zz22KA7G7GjbeVkfIQDoS9jEZFN10Qz/6djLLYnbzpe/HCkgwOGKvtsOtT78PsN4C6WxKhHAIxG8UFfnNsP4zz432zrXOsEaGf845HmbSY6zm8HKTvbuvbmx99mtxjSPgQAQLvvsvXPk93WP2nc39bu//m1oZmIuCcijkXEvRFxPCLui2i2fSAiHuyz/0pHfef6J721r8D2KFv/Pdd1/Vus/mJmLK8dbcY/kVy4VKuezZ+TuZg4lNUXd+njx1e++rLXsUrb+i+7Zf0Xa8F8HLfGOzbo1lbrqweJud3WBxEnuq5/kztXApKIeCgiTuyzj2/ONT7rdezv4x+uxhcRj3ed/+2roMnu1ycXmq+HheJVsdOpd6+s9ep/1PFn83949/hnkvbrtZv99/H1zOmtXsf2+/qfTN5olifz+66t1utXFyMmk1d33r+0/diiXrTP4p+b7Z7/x2L7mTiZzWNEPBwRj0TEo/nYT0fEmYiY3SX+l2Zfru4//uHK4l/ra/77L6wvff9Dr/73Nv9PN0tz+T17ef/b6wAP8twBAADAf0Xa/A58ks7fKafp/HzrO/zH43Ba29isP3Fh453La63vys/ERFrsdE237Ycu5nvDRX2po76c7xt/Ova/Zn3+/Eat56YY8I+Y6pH/mV/HRj06YOj8XgvKS/5Decl/KC/5D+Ul/6G85D+Ul/yH8pL/UF7yH8pL/kMpHeR3/QoKCndrYdTvTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIPxZwAAAP//jYTnFQ==") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) socket$alg(0x26, 0x5, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) socket$inet_sctp(0x2, 0x1, 0x84) mprotect(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) setpriority(0x0, 0x0, 0x2a14b58) ptrace$setsig(0x4203, r0, 0x80, &(0x7f00000000c0)={0x8, 0x7, 0x7}) 4m4.760031234s ago: executing program 1 (id=317): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x4000) r0 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xc2c}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept(r1, 0x0, 0x0) sendmsg$netlink(r2, 0x0, 0x20008001) ppoll(&(0x7f00000019c0), 0x0, &(0x7f0000003540)={0x0, 0x989680}, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8000000000000, 0xffffffffffffffff}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 4m3.649595465s ago: executing program 1 (id=320): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_VDPA_GET_AS_NUM(r0, 0x8004af7a, &(0x7f00000000c0)) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/mem_sleep', 0x2, 0x33) write$UHID_DESTROY(r1, &(0x7f0000000000), 0x4) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f0000000380)=0x1b1b, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, 0x0) wait4(r3, &(0x7f0000000100), 0x8, &(0x7f00000002c0)) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21000, 0x20800}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MTU={0x8, 0x3}, @IFLA_LINKMODE={0x5, 0x11, 0x2}]}, 0x44}}, 0x8000) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000001c0)="5e7d834191bf7d30830b053db1719342a0b313b36095228299dfba21dce132a289913e89be54800a33f8e91e2bfc124c2a97c3ec727e49d1ba85086e3afd0683cbdfe6594df3fd0baf4978e304042009e0bbffc644ad8680e67cbe53c87d4e382b13ea4c2dfe2db97b095a0c1d63b22e5f4529cbd5613311cf819bb7f847881045b7646bab62b564a2d0c7a816450382268bd70a5914686a6db96ec8614cf05dea98b8bf9584df4100362d6daa2aaaa4936d0c6f49f9e511b3d63b8d0a8f72a617068768452fef1612c59cd61d146203bc1c7038e91180e050f283b5857c3374020a920907a0ec8232b2", 0xea) 4m3.497914708s ago: executing program 34 (id=320): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_VDPA_GET_AS_NUM(r0, 0x8004af7a, &(0x7f00000000c0)) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/mem_sleep', 0x2, 0x33) write$UHID_DESTROY(r1, &(0x7f0000000000), 0x4) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f0000000380)=0x1b1b, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, 0x0) wait4(r3, &(0x7f0000000100), 0x8, &(0x7f00000002c0)) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21000, 0x20800}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MTU={0x8, 0x3}, @IFLA_LINKMODE={0x5, 0x11, 0x2}]}, 0x44}}, 0x8000) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000001c0)="5e7d834191bf7d30830b053db1719342a0b313b36095228299dfba21dce132a289913e89be54800a33f8e91e2bfc124c2a97c3ec727e49d1ba85086e3afd0683cbdfe6594df3fd0baf4978e304042009e0bbffc644ad8680e67cbe53c87d4e382b13ea4c2dfe2db97b095a0c1d63b22e5f4529cbd5613311cf819bb7f847881045b7646bab62b564a2d0c7a816450382268bd70a5914686a6db96ec8614cf05dea98b8bf9584df4100362d6daa2aaaa4936d0c6f49f9e511b3d63b8d0a8f72a617068768452fef1612c59cd61d146203bc1c7038e91180e050f283b5857c3374020a920907a0ec8232b2", 0xea) 8.785569262s ago: executing program 6 (id=1817): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r0, 0x8800000) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000000)={0x1, 0x5, 0x10}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) dup(0xffffffffffffffff) recvmmsg(r2, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r1, r0, 0x0, 0x578410e9) sendfile(r1, r0, 0x0, 0x100000000) 6.412369387s ago: executing program 5 (id=1835): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56561, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0x7}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x7, 0xfff1}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x4020080) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0x7, 0xfff1}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4020080) 6.090496804s ago: executing program 6 (id=1837): socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000100), 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000040d90455a018000000000109022400010000000009040100010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000ac0)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x2404c140) 6.038101094s ago: executing program 5 (id=1838): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 4.457619635s ago: executing program 7 (id=1842): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8933}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5f8, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) shutdown(r0, 0x1) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 4.413265936s ago: executing program 2 (id=1843): syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file5\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000640)='.log\x00', 0xa5d, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x161442, 0xb6) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) 4.040743473s ago: executing program 2 (id=1845): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file1\x00', 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB='dots,check=s,tz=UTC,nodots,nodots,nodots,quiet,nodots,nodots,nodots,nodots,dots,nodots,nodots,dots,nodots,errors=continue,dots,dots,dots,debug,\x00'/154], 0xfd, 0x1bf, &(0x7f0000000840)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x189800, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003080)={0x2020}, 0x2020) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_fuse_handle_req(r3, 0x0, 0x0, 0x0) statx(r0, 0x0, 0x4000, 0x400, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x20040800) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x40047211, &(0x7f00000000c0)) 4.040046593s ago: executing program 6 (id=1846): socket(0x2, 0x80805, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000004000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0xfffffffc}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x63d}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x9a8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000580), &(0x7f0000000200)=""/159}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={0x0, r4}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x70) 3.860816206s ago: executing program 6 (id=1847): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r1}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) userfaultfd(0x80001) timer_create(0x6, 0x0, 0x0) times(0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000280)) 3.800035287s ago: executing program 2 (id=1848): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x10) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',allow_other']) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000200)=0x20) socket$inet6_tcp(0xa, 0x1, 0x0) 3.479226663s ago: executing program 7 (id=1849): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r0, 0x8800000) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000000)={0x1, 0x5, 0x10}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) dup(0xffffffffffffffff) recvmmsg(r2, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r1, r0, 0x0, 0x578410e9) sendfile(r1, r0, 0x0, 0x100000000) 3.479046624s ago: executing program 2 (id=1850): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0}}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="150a0000000000007910480000000000610410000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 3.478837393s ago: executing program 6 (id=1851): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000005) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x240408c0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet6(r3, &(0x7f0000002c00)={&(0x7f0000000040)={0xa, 0x4e1d, 0x5, @remote, 0x9}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000002280)='I', 0x1}], 0x1, 0x0, 0x0, 0xf000000}, 0x200000c0) 3.045599052s ago: executing program 6 (id=1852): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40000000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.442278174s ago: executing program 2 (id=1854): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x40000}, 0x10}, 0x1c) 2.369664725s ago: executing program 7 (id=1855): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 2.289644376s ago: executing program 4 (id=1856): syz_mount_image$msdos(&(0x7f0000000680), &(0x7f0000000a80)='./file1\x00', 0x2800810, &(0x7f00000025c0)=ANY=[@ANYBLOB="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"], 0x3, 0x15d, &(0x7f0000000f00)="$eJzs27+KE1EUB+AzJmrUJrVYDNhYBbWyVCSCOKAoKbRSiDaJBEwzWgWfxNaHEyRVCuGKzpLshoRl/8zO7ub7mhz4ccM9xZ3LGZj3dz6PhpPpp8mreXSyLNqPI49FFt24Eq2ozAIAuEwWKcXvlFK6PosbPyKl1PSOAIC6uf8BYPccev8/amhjAEBtzP8AsHvevH334klR9F/neSfi16wclIPqt8qfPS/69/P/uqtV87IctJb5gyrPD+ZX4+Ze/nBjfi3u3a3yf9nTl8VafiuG9bcPAAAAO6GXL22c73u9bXlV7Xs/sDa/t+N2+8zaAACOYPr12+jDePzxi0JxQYs/KaVjLP/+szoC56SL0y2yiDjZ/zT9ZALqtjr0Te8EAAAAAAAAAAAAAADYpt6vkVpNtwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAb/Q0AAP//LjxONw==") pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="b00000"], 0xb0) write$FUSE_DIRENTPLUS(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="10"], 0x10) getresuid(&(0x7f0000000000), &(0x7f0000000200), &(0x7f0000000400)) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000240)='./file0\x00') mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) 1.327732275s ago: executing program 4 (id=1857): syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file5\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000640)='.log\x00', 0xa5d, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x161442, 0xb6) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) 1.316744235s ago: executing program 2 (id=1858): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x1a, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 1.109635229s ago: executing program 7 (id=1859): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000001600)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) accept4(r0, &(0x7f0000001540)=@generic, &(0x7f00000015c0)=0x80, 0x80000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95, 0x10, 0x0, 0xffffffffffffff0f}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000001380)={0xffffffffffffffff}) sendmsg$nl_route_sched(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000980)=@newtclass={0x24, 0x28, 0x4, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xa}, {0x5, 0xa}, {0xe, 0xffe0}}}, 0xfdef}, 0x1, 0x0, 0x0, 0x40d1}, 0x40d8) syz_genetlink_get_family_id$fou(&(0x7f0000000400), r3) bind$unix(r3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f00000005c0)) 958.589622ms ago: executing program 4 (id=1860): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) socket$inet6(0xa, 0x4, 0x8000) syz_emit_ethernet(0x52, &(0x7f00000003c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\f\n5', 0x1c, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4, 0xa}, @eol]}}}}}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x320, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x640100fe, @local}, {{0x3, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0xfffe, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc, 0x9, 0x1, 0x8, 0x2, 0x1}]}}}}}}}, 0x0) 887.405703ms ago: executing program 5 (id=1861): syz_open_dev$usbfs(&(0x7f0000000000), 0x101, 0x301002) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x2, &(0x7f00000000c0)=[{0x4, 0x2, 0x1, 0x1}, {0x5, 0x7, 0x8, 0xfe}]}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706070600000000000000000300000a080006400000009c0500010007000000"], 0x24}}, 0x400c800) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) fsopen(&(0x7f0000000140)='hpfs\x00', 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="08002600ad1600004000330010000000080211000000080211000000080211000001000000000000010001002d1a40000b0000000000000000040003000b0000000600500000000304006c"], 0x68}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[], 0x68}}, 0x20000000) 721.661296ms ago: executing program 4 (id=1862): r0 = socket$inet_udp(0x2, 0x2, 0x0) openat$capi20(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f00000001c0), 0x4000, 0x0) statfs(0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r1) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r2, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb542080005004100000090000880"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x200000000622c, 0x0) 584.583679ms ago: executing program 5 (id=1863): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a, 0x2}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000740)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x48, 0x18, &(0x7f00000005c0)={@flat=@weak_binder={0x77622a85, 0x0, 0x3}, @fd={0x66642a85, 0x0, r1}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"}) 548.86977ms ago: executing program 4 (id=1864): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x800810, &(0x7f0000000180)={[{@nobh}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") mknod$loop(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20008024) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) listxattr(&(0x7f0000000300)='./file1\x00', 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x163041, 0xc8) 406.689182ms ago: executing program 5 (id=1865): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffbfffff5]}, 0x8, 0x0) readv(r2, &(0x7f0000002940)=[{&(0x7f0000000000)=""/83, 0x53}, {0x0}], 0x2) msgctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f00000002c0)=""/4096) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@delsa={0x3c, 0x11, 0x1, 0x70bd28, 0x25dfdbfc, {@in6=@empty, 0x4d5, 0x2, 0x2b}, [@srcaddr={0x14, 0xd, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x20000010) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000080)) ioctl$KVM_SET_CLOCK(r2, 0x4048aec9, &(0x7f0000000040)={0x3, 0x2, 0x2001000, 0x4002000000, 0x40003}) ioctl$sock_ifreq(r0, 0x89a2, &(0x7f0000000280)={'bridge0\x00', @ifru_settings={0x43, 0x0, @sync=0x0}}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRESDEC=r0], 0x14) 265.654715ms ago: executing program 4 (id=1866): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r0, 0x8800000) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000000)={0x1, 0x5, 0x10}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) dup(0xffffffffffffffff) recvmmsg(r2, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r1, r0, 0x0, 0x578410e9) sendfile(r1, r0, 0x0, 0x100000000) 135.785327ms ago: executing program 5 (id=1867): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r1, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0xffe7) syz_fuse_handle_req(r1, &(0x7f00000062c0)="23db5037805f177d136115e6a1a5903469af39c1fb9cb38215fe64cff9f2f0444a57e22b0cc5cb4f74c9792365400d9e1c68539ea5eff0a5ed0864814d39251bee8dfea69aa052d900bc0c792e1c9752b7d3a3222f6a1ad3e44c1f65617b128aea51911861ca36ba7c96b96b2fba0fdaa49ffb2612f3e81fe565327dd9965a60046442c9dcd0d552c6a00388be3b438a08883c7349761531880294ad9887db97d8c2f74921c57910cf1f5cc528e17bd5c3746b6202f26d621535aac5f7872c2cb3295e42524b5acb249b2d1ac1b53a4e31271decfca3fad2e2f740768adf00875c18cb7d115150f83ceb73f77a1f61f1666c2bb9f6bd9f0fb55b3a619446e32bae2a1d99aa49e5f3822e048f8be44b707f2db10d7916ec9a10a695d573d871cf24959c3d15e61344a68309d186956537c6ea8532fc2e1c7649f8409d8dcde4c8ee1530470ac9c870f9f1837574e444ba6addf5ddb2dec67c0e76df79f265b403818dddb4efc27c90985ed69a48b12056e548f9c99edf80d2b195d26acb1127661727a0600257f4b2546513d03930a0638a71bd3223e51fbb75c832ef737907f2f4d3f0505f431ea02783c798b5c4579c99961fb73dc623a0d99c1b306435464d413b537d42c6444851b36482597140b22fbc0ebc7e795b2f96739bf139f5823bc869ede547da4f394fa1b1787836095e1013264042e53d5006ea059d0488cb2f5ccd44b30d25ea53c2dda71d112d7d441dbfc9f8462c99c098b1958c80b237d83c32f2759c9a9c081d7d7666a477cfda59354309b09f2a8b9f6c3077b0df1e8d0c71ac07232de4f437107cb0eb9b47b2267efe31938a337cf11cadad72ced56895bb14763cca5bdadd245d801e829a1eb3bb4ed851a345918efd2dcf8d38f66badc773068e6a2ef59b2bb838abd8b043cf6ac54550f3fde1bbb9e761095e4b8ef1891757d376be1f778142610c0acbbfc697f51fbb7a1602ed46e82813c74f41ee2bae818174809f3692084bea7310ebec3d6166702ae62aad84313e19b4d145167185ea8d53cb21d099fb592d7d7f8bc305dd375b5c0cd73be44f49ff53cee220085d4706bbf50c6f63b02e7e805e8fa4c73046a57a8700886da29ea53e5a316e7b011c44a0f7be5cc5cb5641ba0069ff591eee18966c7f005ef40046a5fe2bf325b2545b009867761264aa9611d184fa372ba3c5c33d9a50717210f7cec7f6dc4418a87a797eb6aaf6ab3892bd3f559547c88d8c29646c8173fad1588f52beb34ff863be65e7ec1598cfb465f270bd5532fa7035aae077eedbc846058fa19f58ffb1cf0f1863f6d33f2e5c454d18b66be766ca369af2cc9656fa34c6c10e4d4da44ce5e2370aaf60c4e130da331d3489e8f44c600246323409fdd35d11da27128c9d64be65dd3a90c1546a6eb9185cb6d3a4a9cfad0e41ea03896fd2346f745eb3563d7a79fd345b037c040e56f0677840bf9b0d295bcfa98b931464c5ce9fcaf745720deac2d8b4edeffc0fe6f089ed7c3880959fcf8e31f7b7054bc4f5c9d3ed3f66c968d0bc20b2d66c374f030f3f1965f43a98519e527caf693362412d523eeb38c8b016ff77f78f833d7513e4b5a53d5ed5143916673f822ceac9967b8788bc6428283181eaf8d99e48286aacf4f658a903e9f08659450f7f9483807c2e013a1d9d199f18886a8cb4e14d41c71e5731455a4394551281eca12a1bb6ae717f5da2949175d0f1f3d718b761dfc1099c7d9d8928c899ac8e936e69d19fcbfcfdee83b68ef8e15eed41a8ac0d54aa92d7d2ee58bb4799f378225ec9ba4709e5ce2b77208ecc85c22c64967a9ef3360c54d311b8917ceb7b432c90cc5e98de9327c1400f8ec89261b1d77d8874b0bbdd2c5eb59df415705de52b08b0e12c07fb7367c6d461c19f282d51e482cb4fb9ceb0249ac2d6400ca170fbd6c0063224179c616bb030a5c10102aa2eea92f1e6f5828590b250b09e6d1a9535c298a68160b7c281fecdd295dc3396c4e6eb3395d5a677d5fa95a732dfdef81f4346545dd1a74bb3aa9b516699bdf0a59165077ab459a5ffe0dbb3ef8afa7a8382a8441e0c36ffabbed8f93f4bbeb97e5f6a704bf63a0de9ccf8fef643ebc530a80920931002003b027014de317c42f861d98ef4fef66d232d9706e6bd263347384dadadaa43a7e106bbb21bd822d468ace171b3f04b996112135b63dcbd612b5888ec40da583ab549c340ddaf5d7406c3e99322c68874214356c1fd9b5f84348e629cc3487a901d1b7a2fa531b1509ac1c93de3da9f1c3773e3a2aba2b29d2419f240ae6d24ed9f14bf0b9b0f1e740a2db06dab64d6386f950bff4e4c94160ef4b832bbde3af4937b7528658b5c16a51cb22193fe99385721ce5b048d9338e289dcb40683140c413eca52c8e4b64b306f47569477379c864cfb3aa3e349262407d3935ab9a0916eb0f6db2be71a7eb8f9968dfac44995d5bff8ef617fceeaa448f5e5f8d4b39e3512fe7ae9ee1d8a0d5912b6148969ab0325f3f76e2340fbd67ce156bdf638140b3ccdb08e5049db15957915cb05db8901249b10c59cc5c3ff836290e3334eee2df387e44c57b4d6198c3749f5dc57f6c3de115ced6b43cbddd762b58f1fb40b2baf3b381febdc073142e30d2e9a1a69e8d86314221e540f195509d223b206173dc5406865d8064817c30c284c034035a63190ab86df3bae4168c58e01d2251748fd5d9d610024129e83a5730fe83cf0918790e6854ab765c78649b91c06655f0cb9e26d8432df78bbadd99583b6a8afcf177ed6f339e08c0b36a16c6d31d8a24cb6f2bc3ba58d7711b6f8b988dc3e3144be619548457d4f40509f17eeb186cb93a2928ecb951593d1907c8bbb9f4c8999caba3059c8e73dce54ad6f87bcd51d559f7759902b14e68d3b845c0b179b38f4e6f0bd3a89cbcd5ebed9972102048647da1eda5c8456442369f4ae871d4037ba26f27d27371ce57e23adca5af8dc93f934f2ef8d69ad3b2db66657b3868dd839c2b522f5461f24407ef091b77242fc70a48b7eec45f3bcbcfbc6bdc36e4b67295020a345233a32a0a0af4d03a53ef67e69716d5ae35342722afbe7558946475a9ebf5b39c18558a0011f68bc8a78590b0cb63618379a512790c42d94bb239dd3ef5b8d1036cf0391aded8802a7a447c38f231ae611aeeab9bba44cd14369473758b64108d0bc9b6bc9e9b497c2d1d2acbae7c620a55c226cf371331688eaddec61fe961c5fcef71dad45820ed0ac8dc7641d82150f1318ac15aa41e7be585b6a50da1b3cd95239ee61cfde15aba80ae8ebc21ba4540883c6f44cd35b6b97da4640c97f5a2b6efa8d184fec823abc754ab8a0db6c45c2293e90d9c154c4a3e0b9ec2b6113ce6583b80f0d234dec9a9815067244733e2134b9ba93bb9692fb44200bb5501bb109f2401e8baaf0115d795bb0346dfafaf953bed8e9a52a5b9b02d490c55fd89daf311ad5e08b070a9571f696d6df4715c8b69b840e4e03d6f361326e20d9546c47b3a63163e7df9bd260621358c166177ee7c69ed63a8c43dd4a78543aa9f922c0ef527f4aa61ff65bb14595f518412ce25a1e103df89cd4b363593da16c11d80a23a9b5ad8e3a7be8f697cecf82c8fbd889a4f743c839b67f7ba5453b10bbf59b1e4f4e821872c061a4125c0c15c1ca5164efe61a58bb54dcedc849800a6021a448d4660c3b85e2362b7cd8ce95156fbf408a09a30a8ccfc3554004e9f9a35382907eec00617e2ae1f8803146bc8c28b4f3bf3c6b183ae9248e7f05c4adce3e0b7ff29252b5be9b19431e3fe612d471f52c5c34cc12c83049189f4d2e5ca516df78766ba3449d07ef9436c68052c986d9dde8802c931194e2ce34acb8cc26663a09348b15c6c145d26306bded0d1f482803ae6dee26562b03fcb183b69ee4a0491e8776ecdadfca395cb4eac2948d4d64321a4e669f2f663eb54f05f12ed9c685835c3e79f982152dbe701073b9a4ab2932b46ee2424a5e18bbe5f25ce0b898ff6937927f4670defe430ac86021226ae055daf39b535cdc0899fcc99d15e67d66bd2dd89bb21b8d2689a8af10a1b0bd44103c469922c36fc0228d7b6febf5e366dceecf8bb1db385c8ab95d86ff09b76c2fa6282de81fd6864c495a4c8295df61a2548e1b81c3e3f30d7a41216801d6c2d1743f66ae2055756083e8bf403d436b8244ac214f4d84a693d13f299ba267401d094f2df70840e8a980622794212f0992ecf5a47980ab2cf7d5a6f12b0a489af3c3c847ac59bc89f36fbb0e08bf283b68213a17de38b3a45eade6f0b198def408f7711c16367bcc0ded794a9a323c7e7f07fad96ea9c4d7344c26e43844a27c21076b8d7cd07677602d91eac825eb5fd0631755c2dd1dbf7bce3eb3c3f7377fc6080ecd0b894e29769845725943e25932d4249abb4ab78d4e2ff2e2df42c8d884cd6bd13886cef080c6491c217abae0eec6e9d4d49eab6657f15cfd38e6cd6d0bd33198c4685ab302d0f46e42f4a5d5bb7d2840a0a8817b98a856700d4de74351896fe7d7d5a0d1bc57fb4c828aa51f9637807aeb905780f239527ed4affd83f68be8b7ad1e10d9e797ba39cdee24f7be0a0ab0ac22ea3968dac61eb4bdd522c9ce570edf63a439abfd9954bf6a16c88d86157d05477200a83255cde279b454979cee4de00e81cb44acdc4295c877566a749ab5b91d250f03d46ecc14210c196700338eea028c930ce104f20a9e7fabb0ad1d314ec1a2d97d1d1b9e09114dee0e3e513eacede01971ff85dc98634156073df4e8acd6c3aadd615adaffa7a81573813bc4ca21886ddd532021bba5c84b34c34665534db48d61903a03c1cca4ed955ca92c1e33b7664b494e3db6d1e637a49e537808a2669ebeca301691acd4fab0af197b9c7db01b7862466b568ab3a4712a25210264fb297a6b679dfc3fceb65bddd1a23d5b507a0d6da83d73b716d971c5179a92e57b9b93451eb943845a549de737f2d082a83682c32649b4941e787758ead9d2c256b2b4ed1e0255952ce83cccecc39e5bbdd38490f1960b26e5379943be3d9a64b5149c84d577e5fd099560baa292befa06ce9065fb03ed432a9e055ca4ad0e952f8368b3d230fd5239726f79f4c98a0b4a9648382b245d324cb61049562f765f923fc657ef36747658494d78590a1e27a2d09856acf50c3b26271c6d5aa96e8ff9bdb9043859665e21ea53a050c335cac414bbf27b0328ac2c7450acb26b093bf232358afd1135ee50ac3fb26b5f0256ccdd37033c8a59740607cfd549d4c6540afe4a6b4425ae1f633872dcfb5da8d0547cf0c4888817b71fbc7c45b2a641e9c1a76b6a6be124402422ada35edc02ed997d6b87b361aee95a16d2c528d89a52fe40dfd83434969bd86f02e63fc1ae72941209af39a08cfbb4c320bc47d853f5dbaf0cd60ec54608aadbc382fa6b5cab3e9cac57bea26609f4c79f6a6b4eb4a9336fa95783b0c0c366f36d5d6b8310b3cfdb800207919a131bc7f984f7fa11fd0bf2c89e060e9d1286e453fe97363ef72bd6eba29a85ffeccdc3bee72e12284333a5a40622c01619558d2750fc45abfa22059ebdf743f8e50ad29770d19f84d8a34232d6918514769b3bb2a1ea5e59e9556332ba669675764458e9349a1835c501a93e91dd3b31018979880a9913f54ec1e8526b8cffcb776b97fbb9424faa5c5eb60d2ac74955bba4b5182571d0d9f84f0df1baa722b20a78c9c0011c667f688b58489c9e450d83e40ac5eb41c5564b6d76a226448abe4a3f499927074125aa9c0e7e704c36df5bb110a0f15f8433a470e81db414827d5ce21ca1da1c8d51d746d1e1ca110127c15e92afd75d3cd05ce0b632cfa03745de3cdd4b57373d46676583c89f045c26c6fc5793e5489555ced08f83ba351135834a2028113c319af30cc85bc01a7f8208822d7d607aed0d2e12c80aa009100441b75beaccfe0adbda7e8bb870edf4963158794c8c3a5baacf6eec7b5efaefb7602dab8409d161beeb281cba21f1da0ccdc092d0433fb940d79699ffeb87ea775829a6e7e3b308a2ee0b7aec8ac5f35eed61be374c7c77196f7119a8882deff68230f461cb917b0ccb2b8597efcbdd1003b7b77b2c601ebd4b45c35b8426f7b9138ab3df0ec00819604ab8e1e64cf2aa2282b1269585af127a268cd207f964edff172e555398a16df44bdc52889538c3a27f8fbfffb61f7aeb55b259952bbfea81d73058d8b0f78ece9dc08e660437d21d4e3ec38b19e5afda7a6e33023f9158db8a1c14dabd9b8b307ddc66927f7b19df5e0da2237d98ddd890b81f1963808977d02198e8ae2e97419dbb1f8e51cad36a3424b955500fbdaab6ff8dbf028708b1f951fe43864b59b6c2368b816c98023d4480a91b3f1059e9c214bf55a7f8c7da907f79ff5568fd787d3aa022ab9d03cde551f7e3295f02c4f3aa37e4cebdd968c0f82f09eb004fbdb1a4ef3a0d426691bde3964c29ea65622f5d3ffd854053545ba1ec164495e4bef4845439c058f9438d13be7922b656db499c246ee6176a15b97e6a68e42f0c703033b699504e1f92b43054c7237199bd013d96faab47433b6b3f91dc66368706439d4ef7da3942ce8b9c1c9a9d0643fc4540e7d3f1c3821267e866cacd3e904be9f9df80381eec09eb2b0d745ff03ffb199b917a14fdd8fbfbffe8bfb0cf7023aa7183301a8a41e7097ff9f5247f8b78f7d08bbfc596a81047807cf0929677222e7e9e921b294e04088c3746d8dc19294645f1c093a21b4c5e6d92e54dd90465b11dd5d9d42af849070edff4ec63970f4088daaa33afdebb28d01df5ee043a8150ab1b25d864ef31e20c84696596cfbea92d02ea29c4a3933c41ec68aee7d68d7eea7f30d8920e14e62be42bcf856d7a58f46fdb2438b023e974f77281c5a462553627e9614504cbd3f1cae6e0fd9f7e89d9bce48946d0508616fbe542303dc542982c61d7bb4afbf3e76bf1fb2381cdc99f2175ef944dcd826aabdca2b7678db5262733c69ce504c38e7deb7adfb9b6d8bb00d8e4251e0438417ea615cde58bd76c2427b3d7a0578bbbff9fde2abbc5d60307aff0050b18176158aaedb34e283886378ff798b4f74e0a0c95d64271f1916280dd247304d9201c67f5e2640d9706add8703cac81795a0190107e2bb2941ed13738595da1c86ba0f68e2283a435cb5f162c74071a13dfe2266d05abaef080dd6b1dade115e883e04f0bb4be4d91f535ae6f822b02e814e65d2b7807d199a23d3f26209f6c9f93602a3a93ccfdebb5f8161b7928059674e15820d1848a980c8d1af5a73aadc5c402fbb6e730ba51227913ca27f0d78d331d6325d0a7926c238296b2a22b10a69cdffeb087dfe175511ed8e2cde8d7dae140e4ce92f892b129d9940e4a30b19f822ef7611b8750eaea8e55502604b7d2358c09a217af8be6c86d67cf6ff6130c971c9765d56631fe6224fbe1e833d497b534fbf6b030af93691f59295279aa1bdfb5d5d9d4668d5aea70e2b8fc117df0042e91c7e6225f27329727ed6e14a87c7943c040dfee4e5c06a20251c39a45ab4865951b0daefb9c05571fdcc21d1761945bd2b8047ccedd6f1e708646fbe61e75bb2728e8cee893d7e6f642119e786155a6cbab057d6d83b77716145119e974ad7355179d2adc3d748fa249cb58e32e6791d646240c05da4427b2f359976c8fd1486c604cb7ee647e24633d8fca8314cf1f85110ca6351156a2b26e44b040f7d2810acd36f45a3969c1fafd1a7e0bc14fd9b26593375be8e750c3f6534ffb85904d15d75fba05dac4a673de97f7543ee931724cd35474cd7ff5cf3e8abaf206f3030e92895633fa9d8499ea763601560260109dad18bd64b990531fc5377e6eaa5da050b98e1c6515ea48c7de1a15b63283d4a694cbad379356bfdac50e6c343879e29f6b9ab425600d51f257ceb35d0ca00f83cf5bd734223de716747614666ba1f1a8fa756e5f3ff0fc94fa4bd4073bddb0098cf565ee40af5732ee9218d262e5b64ad6b8118c54eeaf7072f2e15514a401779b425fa89d8abb1750e56cc3108dffdcf2d3fd86b8af4560d56f7ff0702154211f9949e3992d93e66892b297fa2d4bfe18de3fd74e96c9d30eb14fd458fdbc9e9a34e00f3280dd732520147fa2a8fa83e91dd0687501466a300015bf888c03fc08190c2753d7719acf6f84885c4c5642f466c1984f15a7716a9b608ee5f1b395726bcc8519766667d24d11e396e62ea39640c9e73e4e9e9e5076d7019ca1bebbd7097807f46b3b6fcb96ed4b433b25ec551fb176a5fa252ed1d81b0350cfdfb8069c9916495bef3a262b6668910896c0b37eee40547c663a901e92f41b417ac50e88d058d021a8f9a5783bd936cca4962bec1c9886689cc547970f9215232596392515182e563f720bb79d29baaabf0e2697de6500bc677e346847011ee3450358c0b16ca528368b5cbb8df5ab974a3cef072d20c9906fa585e0f3083ec6d8507b8561f64e65aa1aecf825fc47ad1459c87771549fd5c9a9cc094e7b1179ee1e90eff7158f28f59f029d90e708f4ec50b4f67d8b4bb7140065528354a7e25d63e92977183a0284ec22aa923210f0bfea89cca53547137381e5de0f60bc484bc2daf129b0380244f1ed4bfb674eb2791e76dce33cae684ad36620d5d67cb587f840caed316b7439b0e8c3de0e065e62680f3997369be3466670278168c9a1a644d870e3a8d0a79b2b720e8c3c51bb9133532beee64319e98714bb2e6d5c0b723962d923b0ef454361d4b3cb470bf8c39031ed4a75267f499741be15aacac92d8e6afdcb01a2e7d2dbf549ceb2a2108c4079c620f05ca1bd31d631c2c8d35ca0d73155f56ed020c25e389db356edf510ae088d11b5e4fed51d0dce4d3aa04924b09c28200ede5bec1a8f38cc5f081055e0f28d75afc4d588ca0e828d00085d150beafdda17b8df9e7d9218ea7d81f2e076412901c5ae04d6929d717fea2fcc8e5a1e69dbd7b5258799a2fa5eb108b6cc35dfab599fb27e6d75f1030b83f452af8137830337141f031942eba83123d3f87b5f01623d4613e5a44b4952c300baf3d4d3dbbfb0ad024a19b3810a174ef8453d85a25822f66e45eba2490f29de1077683ccc32e3517f88b51e010672a982f7c8591450c9ab1573143aefb61c17ebb0c92dcb0494d116b970c2a827a6b3608ae10d583d1f7d092263fa873de9f31cd59bc9491ff012059b63a9120af89477f2ccc34eee7bd66de60af64730c879128b49d31da6400c2471e0d5abf707e560574b477b8e20ca45d92182d639eb434e14aea1a3f91ad8fb60e4859b77389753990513181ea3a82884235e8520294359435cfba220502b591fc28ac36ec697442657d290bd7aad7fce53a3f1766f2bf7d55c24d7c0e9c7a71d6f1282ea1478e0a36378b50e4fee281f686bc53f50138036e2a5d6199d40caff084fde7b63b3c0a47da0791107c3218330f7c2e2c7609aba202fae5290243b6033379eb15edc572eee452008e04c9b53efd5f3d88327317b38934745bc3de4c55bd818febc7a7953bf03c4029f77177c2a974310f0485aa46252f1000dc71934947287c38ea5854f29c7b82f630afb8caf1fd880670307b155a6e7feddc019cfbbbdc18f3bc03da3bd371d93ccbf56bcb39eea55c2d113efc148127c30089d21ce6a5088dbfbcf8f8d75c19456bc962c371548634a95382acb5a0886efc46a87bdc111dc0d1e54084cea0d58054f00762c91d7fe0f0fbcf4c280f29f9cd5999a5e8c6f507f8080d7c7ea9a8685be50722cf1a082f3728dec8d6152cdc72f8da6b1805643c042f4f6780ba79cc8a2165d9d7acec8ab2f421bc3e77b51c62c4bbb262b5674ea7d2dcf9acb894d050e91b052364322a5b08bd9667249571c004fb495da7e24fc5620adda3af6848ccf238911a52bdbff766e4e279ac274afa2c2302faba25b5fe98d972a04aa13f77c0c05d7dd82b0a19f1ded8cf5f99c80e392b0aab1264a29e9fbcf0b69f6b0a9f2332e09ab74dea7277106d0883bb264e279c67e5bc69009225bf4fd1a8532f9392a011b55a73a7cf8d16a59d695b2a65b57fad64a2041f8c28804ee1a48845c5dab757d04f1d95520aa9ddb69904d6529c0e14bd789dfe37067073b3e0e136ae2aebb1c34c55b94ce942f786be4b45f801f35f7c768d91a460b92ffa57ff675f0b4b00437a07f871a8650f21b2bf7c722c1d9e860e8955fef5699ee53a5f6fe46fb9e5e17a1c69fe2538af4718b7215ad2c00c3d420589a8653ee511b809945451fb8205b19ce377c8d0253b05493c557cf2bd8ef208e8fc01beceea1acca38d025f328f28d69bcfaa3adc6d9573a3832dc3f3c758fe08cf9cd0c32acfddae81b3682869e8aa9725b64336252aeb2ee8eb78f0721aa3158217a3009948adb297c5ea45ec26cb6d963c7be47ee1b93fa136ebe73a21936df0148fa311206f8bca2e80719aeca8745ff74ddaad5182644762c66333f942d9a93c467d5f9fd5d0dbbe57480362d4bb0f760294f4eba3e1b08047d256dbda157635d21a43aff3a71f6ad574b402bb36e5270d7ed082c6fbae07771721513ae9ddb22d23b00733046c898ee6ac05ef8a51ce41919e1f241cb98e0592ace68214620ba1a748ef81131661f58f1635713ca2873e150a3e848c8d2ebd039769fda112b73050efa4d1c35dbb46ca5a7b7ccbed1dcded36af272f6838b4c1e7e6778e7e9ca3d794f275d49c9e32e768097349118d2337e7c031ada38d0cc5c04c286ff93083f6d58d73a821118c93432fda9a8c76fa2cbcc093a7decac8e4f001ecc9f67faf1c2f102120f0618469cf653bbd5fcefd4ef2bae86dc4f5393b840f9f47140cf7f46a186c21878a43612a71d3b540b9994f010ab623f878264cf46c7366d0bec5d43d481b47846091fd3cda73a9a28ceb7f839eca695c9f084a16c812475f6575ef2368c88cc6655f47663ef69ce4779fe3ccc4dd85a07a9e4c6f39f42690d231f5727f45c247a53fd8df029fcefda4f328658435892519c17205a3c715ad6bb7387d09a5e387c83f008daf626f5977c66203af1143ef7b59ccd8e3c17bb156bca317861f0b9f222ea63c044075a3a74beaf05c23d0a75caa60397d831bbe507234fff154960faf0f02776d3f9038c955bf0c1ec9c92523cf0b855c18d6ac3b35d437796420ba3dfd581dc6adac64315c1cb1a2c3a45ec4655bb2bd6e0b4a3082281ed0697a213d1d93142e96b4fd57431d2f4547451d008ab58bcd9765ccf3ca3297becd5de9e2be0263cfca09935c9334b5e687bc7e7057dc2ed03873be22200c9fe32a9497dd00a336cf4c723ead302340b5cd1fef8cd88330a9089fc93af4ef739295b94407b291bf33f4f39c936736e1166106428f8796a4b92805f4dfcf46d8692b54e40a9e8584c0eaac4caada87bb33f553eafeef5051b889402176ab766936a38ddd7e5205d2c87e133a02e84ab24ba2d889a4c4db8cbe18b271455e84da716f4a32acdbc0a5aaba25a2ec757c73847dd1c4ccb2967c651e5257692a4553dde227846bfe2977021805f46a287c835ea8dc5", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x2b, 0x0, 0x10004004, 0x0, 0xfffe, 0x0, 0x2, 0x0, 0x0, 0x100}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close_range(r0, r1, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r4 = fanotify_init(0xf00, 0x1000) fanotify_mark(r4, 0x105, 0x5000003a, r3, 0x0) 120.810188ms ago: executing program 7 (id=1868): write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) unshare(0x20000600) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) rename(0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x6, 0x0, 0x1, 0x1ff}, 0x50) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000001c0)={r0, 0x0, 0x0}, 0x20) 0s ago: executing program 7 (id=1869): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x2, 0x0, {}, [@NHA_OIF={0x8, 0x5, r2}]}, 0x20}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r4, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) r5 = socket(0x15, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x2720, &(0x7f0000019580)=""/102392, &(0x7f0000000000)=0x18ff8) kernel console output (not intermixed with test programs): k_nolock", "syz:syz" [ 89.419545][ T4881] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 89.536528][ T4881] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 89.581125][ T13] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 89.596237][ T13] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 89.614421][ T4906] team0: Port device vlan2 added [ 89.711286][ T13] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 115ms [ 89.766283][ T13] gfs2: fsid=syz:syz.0: jid=0: Done [ 89.773021][ T4881] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 89.947601][ T4921] loop0: detected capacity change from 0 to 16 [ 90.334646][ T4909] loop1: detected capacity change from 0 to 40427 [ 90.370501][ T4909] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 90.379033][ T4909] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 90.400286][ T4930] 9pnet: p9_errstr2errno: server reported unknown error [ 90.410096][ T4909] F2FS-fs (loop1): invalid crc value [ 90.455281][ T4909] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 9809626597) [ 90.555701][ T4909] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 90.563200][ T4909] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 90.687080][ T4938] netlink: 4 bytes leftover after parsing attributes in process `syz.2.195'. [ 90.719716][ T4909] fscrypt (loop1, inode 3): Error -61 getting encryption context [ 91.570158][ T4963] netlink: 12 bytes leftover after parsing attributes in process `syz.2.202'. [ 91.699365][ T4564] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 91.945900][ T4564] usb 5-1: Using ep0 maxpacket: 16 [ 92.066099][ T4564] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 92.077789][ T4564] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 92.091752][ T4564] usb 5-1: config 0 has no interface number 0 [ 92.256120][ T4564] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 92.265554][ T4564] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.279845][ T4564] usb 5-1: Product: syz [ 92.284219][ T4564] usb 5-1: Manufacturer: syz [ 92.290640][ T4564] usb 5-1: SerialNumber: syz [ 92.304678][ T4564] usb 5-1: config 0 descriptor?? [ 92.348474][ T4564] usb 5-1: Found UVC 0.00 device syz (046d:08f3) [ 92.359160][ T4564] usb 5-1: No valid video chain found. [ 92.592943][ T4564] usb 5-1: USB disconnect, device number 3 [ 93.133601][ T4983] binder: 4982:4983 ioctl c0306201 2000000002c0 returned -14 [ 93.174572][ T4985] binder: 4984:4985 unknown command 0 [ 93.180421][ T4985] binder: 4984:4985 ioctl c0306201 200000000080 returned -22 [ 93.613413][ T4996] device vlan2 entered promiscuous mode [ 93.621156][ T4996] device bridge0 entered promiscuous mode [ 93.630282][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 93.683893][ T4996] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 93.701275][ T4996] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 93.726815][ T4996] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 94.716370][ T5013] loop1: detected capacity change from 0 to 1024 [ 94.792389][ T5007] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 94.801450][ T5007] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 94.968143][ T5022] kernel read not supported for file /!selinuxwk1ÐmÃ9Éž*T“ýâ‘ïª#j—¼ÞYÌÅmVËvm(pÉ-QZ#Ò{„¿ (pid: 5022 comm: syz.0.224) [ 94.997444][ T5013] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 95.744151][ T4172] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 95.849677][ T4172] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 96.180411][ T5051] loop4: detected capacity change from 0 to 512 [ 96.203569][ T5051] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 96.219986][ T5051] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 96.245015][ T5051] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2825: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 96.259314][ T5051] EXT4-fs (loop4): 1 truncate cleaned up [ 96.265326][ T5051] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,minixdf,quota,,errors=continue. Quota mode: writeback. [ 96.354161][ T5054] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 96.362507][ T5054] batman_adv: batadv0: Interface deactivated: dummy0 [ 96.375535][ T5054] batman_adv: batadv0: Removing interface: dummy0 [ 96.386716][ T5054] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 96.395004][ T5054] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 96.403645][ T5054] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 96.413734][ T5054] device bridge_slave_0 left promiscuous mode [ 96.422296][ T5054] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.456047][ T5054] device bridge_slave_1 left promiscuous mode [ 96.463061][ T5054] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.488801][ T5054] bond0: (slave bond_slave_0): Releasing backup interface [ 96.518893][ T5054] bond0: (slave bond_slave_1): Releasing backup interface [ 96.588707][ T5054] team0: Port device team_slave_0 removed [ 96.612838][ T5054] team0: Port device team_slave_1 removed [ 96.623626][ T5054] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.632261][ T5054] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.653295][ T5054] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.661427][ T5054] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.683179][ T5055] netlink: 'syz.0.232': attribute type 10 has an invalid length. [ 96.718342][ T5055] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.727466][ T5055] team0: Port device bond0 added [ 96.732977][ T5056] netlink: 4 bytes leftover after parsing attributes in process `syz.0.232'. [ 96.834692][ T5056] team0 (unregistering): Port device bond0 removed [ 96.878254][ T5063] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.885541][ T5063] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.918104][ T5065] netlink: 28 bytes leftover after parsing attributes in process `syz.1.236'. [ 96.941802][ T5066] device bridge_slave_1 left promiscuous mode [ 96.950788][ T5066] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.967513][ T5066] device bridge_slave_0 left promiscuous mode [ 96.973994][ T5066] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.121568][ T5074] loop1: detected capacity change from 0 to 512 [ 97.154513][ T5074] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.239: casefold flag without casefold feature [ 97.185300][ T5074] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.239: couldn't read orphan inode 15 (err -117) [ 97.204113][ T5074] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 97.211701][ T5077] loop4: detected capacity change from 0 to 128 [ 97.269578][ T5077] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrjquota=,bsddf,,errors=continue. Quota mode: none. [ 97.296131][ T5077] ext4 filesystem being mounted at /60/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 97.380553][ T5077] EXT4-fs error (device loop4): ext4_map_blocks:629: inode #12: block 18: comm syz.4.240: lblock 0 mapped to illegal pblock 18 (length 1) [ 97.391171][ T4198] udevd[4198]: incorrect jbd checksum on /dev/loop4 [ 97.403875][ T5077] EXT4-fs warning (device loop4): ext4_empty_dir:3139: inode #12: lblock 0: comm syz.4.240: error -117 reading directory block [ 97.483245][ T4452] EXT4-fs error (device loop4): __ext4_get_inode_loc:4321: comm kworker/u4:11: Invalid inode table block 35 in block_group 0 [ 98.594463][ T5099] netlink: 'syz.4.249': attribute type 4 has an invalid length. [ 98.642132][ T5099] netlink: 'syz.4.249': attribute type 4 has an invalid length. [ 98.701670][ T4525] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.829557][ T4525] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.912353][ T4525] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.051843][ T4525] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.377495][ T5120] loop4: detected capacity change from 0 to 40427 [ 99.421041][ T5120] F2FS-fs (loop4): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 99.428855][ T5120] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 99.440764][ T5120] F2FS-fs (loop4): invalid crc value [ 99.480742][ T5120] F2FS-fs (loop4): Found nat_bits in checkpoint [ 99.533498][ T5120] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 99.540962][ T5120] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 99.639898][ T5120] attempt to access beyond end of device [ 99.639898][ T5120] loop4: rw=2051, want=45064, limit=40427 [ 99.652728][ T5120] attempt to access beyond end of device [ 99.652728][ T5120] loop4: rw=2051, want=131072, limit=40427 [ 99.681533][ T5120] F2FS-fs (loop4): Issue discard(4614, 4614, 1019) failed, ret: -5 [ 99.681584][ T5120] F2FS-fs (loop4): Issue discard(5637, 5637, 10747) failed, ret: -5 [ 99.891658][ T4525] tipc: Left network mode [ 99.923240][ T5115] chnl_net:caif_netlink_parms(): no params data found [ 100.174651][ T5115] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.186060][ T5115] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.194494][ T5115] device bridge_slave_0 entered promiscuous mode [ 100.205241][ T5115] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.213383][ T5115] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.221842][ T5115] device bridge_slave_1 entered promiscuous mode [ 100.352374][ T5115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.444707][ T5115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.592264][ T5115] team0: Port device team_slave_0 added [ 100.705588][ T5115] team0: Port device team_slave_1 added [ 100.800240][ T5115] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.814902][ T5115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.878957][ T5115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.905700][ T5175] netlink: 'syz.2.267': attribute type 13 has an invalid length. [ 100.921896][ T5175] netlink: 4 bytes leftover after parsing attributes in process `syz.2.267'. [ 100.933191][ T5115] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.943631][ T5115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.975211][ T5115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.991895][ T5175] netlink: 'syz.2.267': attribute type 13 has an invalid length. [ 101.001438][ T5175] netlink: 4 bytes leftover after parsing attributes in process `syz.2.267'. [ 101.316049][ T4613] Bluetooth: hci2: command 0x0409 tx timeout [ 101.331958][ T5115] device hsr_slave_0 entered promiscuous mode [ 101.382601][ T5115] device hsr_slave_1 entered promiscuous mode [ 101.576757][ T5115] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 101.591436][ T5115] Cannot create hsr debugfs directory [ 101.711944][ T5189] tipc: Started in network mode [ 101.718231][ T5189] tipc: Node identity ac1414aa, cluster identity 4711 [ 101.738266][ T5189] tipc: Enabled bearer , priority 10 [ 101.955231][ T4525] device hsr_slave_0 left promiscuous mode [ 101.982305][ T4525] device hsr_slave_1 left promiscuous mode [ 102.019696][ T4525] device veth1_macvtap left promiscuous mode [ 102.034276][ T4525] device veth0_macvtap left promiscuous mode [ 102.042503][ T4525] device veth1_vlan left promiscuous mode [ 102.056384][ T4525] device veth0_vlan left promiscuous mode [ 102.454390][ T4525] bond0 (unregistering): Released all slaves [ 102.547268][ T5189] tipc: Enabled bearer , priority 0 [ 103.449106][ T4613] Bluetooth: hci2: command 0x041b tx timeout [ 103.507984][ T5115] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 103.558117][ T4564] tipc: Node number set to 2886997162 [ 103.614488][ T5115] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 103.653125][ T5115] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 103.683331][ T5115] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 103.727825][ T5242] overlayfs: workdir and upperdir must reside under the same mount [ 103.840828][ T5115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.873759][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 103.885206][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 103.912352][ T5115] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.943492][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 104.665127][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 104.673697][ T4292] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.680795][ T4292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.692509][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 104.912450][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 104.927197][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 105.179738][ T4451] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.187166][ T4451] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.573628][ T4612] Bluetooth: hci2: command 0x040f tx timeout [ 105.590181][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 105.726052][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 105.750548][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 105.958682][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 106.066664][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 106.124067][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 106.236304][ T5115] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 106.258968][ T5115] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 106.303018][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 106.325614][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 106.357734][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 106.399180][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 106.409103][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 106.417821][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 107.285150][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 107.316181][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 107.363696][ T5115] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.391033][ T5290] chnl_net:caif_netlink_parms(): no params data found [ 108.123382][ T4239] Bluetooth: hci2: command 0x0419 tx timeout [ 108.210794][ T5327] loop1: detected capacity change from 0 to 1024 [ 108.446513][ T4239] Bluetooth: hci3: command 0x0409 tx timeout [ 108.473454][ T5327] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 108.585717][ T5327] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 108.947655][ T5327] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 108.959048][ T5327] System zones: 0-1, 3-36 [ 108.966782][ T5290] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.987265][ T5341] overlayfs: failed to clone upperpath [ 109.066792][ T5290] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.074845][ T5290] device bridge_slave_0 entered promiscuous mode [ 109.082654][ T5327] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 109.107501][ T5290] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.114663][ T5290] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.122795][ T5290] device bridge_slave_1 entered promiscuous mode [ 109.258813][ T5290] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.291945][ T5327] EXT4-fs (loop1): re-mounted. Opts: (null). Quota mode: writeback. [ 109.298506][ T5290] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.379046][ T5354] loop4: detected capacity change from 0 to 512 [ 109.442591][ T5290] team0: Port device team_slave_0 added [ 109.470754][ T5290] team0: Port device team_slave_1 added [ 109.487149][ T5354] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001004,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 109.507580][ T5290] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.518560][ T5290] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.625871][ T4564] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 109.644236][ T5354] ext4 filesystem being mounted at /77/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 109.668534][ T5290] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.692380][ T5354] EXT4-fs error (device loop4): ext4_do_update_inode:5204: inode #2: comm syz.4.303: corrupted inode contents [ 109.745995][ T5354] EXT4-fs error (device loop4): ext4_dirty_inode:6040: inode #2: comm syz.4.303: mark_inode_dirty error [ 109.761536][ T5290] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.772061][ T5290] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.806667][ T5290] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.816132][ T5354] EXT4-fs error (device loop4): ext4_do_update_inode:5204: inode #2: comm syz.4.303: corrupted inode contents [ 109.848346][ T5354] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #2: comm syz.4.303: mark_inode_dirty error [ 109.863176][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 109.871554][ T4564] usb 2-1: Using ep0 maxpacket: 8 [ 109.880238][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 109.915882][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 109.925620][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 109.977793][ T5354] EXT4-fs error (device loop4): ext4_map_blocks:629: inode #2: block 21: comm syz.4.303: lblock 0 mapped to illegal pblock 21 (length 1) [ 110.010768][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 110.036697][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 110.041204][ T4564] usb 2-1: unable to get BOS descriptor or descriptor too short [ 110.076182][ T5115] device veth0_vlan entered promiscuous mode [ 110.097672][ T4452] EXT4-fs error (device loop4): __ext4_get_inode_loc:4321: comm kworker/u4:11: Invalid inode table block 0 in block_group 0 [ 110.135973][ T4564] usb 2-1: config 8 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 110.164776][ T4452] EXT4-fs error (device loop4): __ext4_get_inode_loc:4321: comm kworker/u4:11: Invalid inode table block 0 in block_group 0 [ 110.169241][ T4564] usb 2-1: config 8 interface 0 has no altsetting 0 [ 110.221772][ T4452] EXT4-fs error (device loop4): __ext4_get_inode_loc:4321: comm kworker/u4:11: Invalid inode table block 0 in block_group 0 [ 110.242507][ T5290] device hsr_slave_0 entered promiscuous mode [ 110.285271][ T5290] device hsr_slave_1 entered promiscuous mode [ 110.292612][ T5290] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 110.300912][ T5290] Cannot create hsr debugfs directory [ 110.333071][ T5115] device veth1_vlan entered promiscuous mode [ 110.369802][ T5375] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 110.376145][ T4564] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 110.404761][ T4564] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.413473][ T4564] usb 2-1: Product: syz [ 110.424315][ T4564] usb 2-1: Manufacturer: syz [ 110.429091][ T4564] usb 2-1: SerialNumber: syz [ 110.574557][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 110.593252][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 110.613413][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 110.624774][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 110.634677][ T5115] device veth0_macvtap entered promiscuous mode [ 110.645301][ T5380] device wg1 entered promiscuous mode [ 110.666971][ T5115] device veth1_macvtap entered promiscuous mode [ 110.686032][ T4613] Bluetooth: hci3: command 0x041b tx timeout [ 110.734376][ T4525] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.765497][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.778038][ T4564] usb 2-1: selecting invalid altsetting 0 [ 110.783866][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.794127][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.820566][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.837740][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.863246][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.902736][ T5115] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.913627][ T4564] usb 2-1: USB disconnect, device number 3 [ 110.946406][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 110.957949][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 110.986816][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 111.008554][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 111.029595][ T5394] udevd[5394]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:8.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 111.057141][ T4525] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.091739][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.115756][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.127739][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.138446][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.148651][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.159344][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.170961][ T5115] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.193174][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 111.215124][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 111.243804][ T5115] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.261850][ T5115] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.273514][ T5115] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.290394][ T5115] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.350870][ T4525] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.591276][ T4525] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.236470][ T5420] loop1: detected capacity change from 0 to 512 [ 112.384968][ T4292] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.416081][ T5420] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 112.534648][ T4292] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.598369][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 113.145283][ T4448] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.280778][ T4448] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.313838][ T4613] Bluetooth: hci3: command 0x040f tx timeout [ 113.340149][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 113.633804][ T5290] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 113.701865][ T5290] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 113.720399][ T5290] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 113.764021][ T5290] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 114.767729][ T5290] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.841910][ T5468] netlink: 8 bytes leftover after parsing attributes in process `syz.2.324'. [ 114.869174][ T5468] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 114.915376][ T5290] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.940001][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 114.956627][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 114.990490][ T5468] netlink: 4 bytes leftover after parsing attributes in process `syz.2.324'. [ 115.035916][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 115.052277][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 115.081000][ T4448] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.088143][ T4448] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.101821][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 115.118507][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 115.131547][ T4448] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.138738][ T4448] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.147364][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 115.194394][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 115.204431][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 115.215613][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 115.234818][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 115.247346][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 115.259574][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 115.305283][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 115.323217][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 115.345105][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 115.378180][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 115.396023][ T4600] Bluetooth: hci3: command 0x0419 tx timeout [ 115.418854][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 115.451840][ T5290] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 115.634339][ T4525] device hsr_slave_0 left promiscuous mode [ 115.665363][ T4525] device hsr_slave_1 left promiscuous mode [ 115.674853][ T4525] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.689467][ T4525] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.705437][ T4525] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.728859][ T4525] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.745653][ T5475] loop5: detected capacity change from 0 to 32768 [ 115.770767][ T4525] device bridge_slave_1 left promiscuous mode [ 115.784769][ T4525] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.802709][ T5475] Dev loop5 SGI disklabel: csum bad, label corrupted [ 115.848000][ T4525] device bridge_slave_0 left promiscuous mode [ 115.863258][ T4525] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.883120][ T5492] netlink: 'syz.5.328': attribute type 11 has an invalid length. [ 115.905374][ T4525] device veth1_macvtap left promiscuous mode [ 115.914091][ T4525] device veth0_macvtap left promiscuous mode [ 115.928480][ T4525] device veth1_vlan left promiscuous mode [ 115.943851][ T4525] device veth0_vlan left promiscuous mode [ 116.562145][ T4525] team0 (unregistering): Port device team_slave_1 removed [ 116.584375][ T4525] team0 (unregistering): Port device team_slave_0 removed [ 116.625011][ T4525] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 116.755140][ T4525] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 117.225892][ T4289] Bluetooth: hci4: command 0x0409 tx timeout [ 117.460283][ T4525] bond0 (unregistering): Released all slaves [ 117.584653][ T5515] overlayfs: failed to clone upperpath [ 117.680317][ T5522] netlink: 112 bytes leftover after parsing attributes in process `syz.5.336'. [ 117.740859][ T5465] chnl_net:caif_netlink_parms(): no params data found [ 117.774821][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 117.784725][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 117.801615][ T5290] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.049383][ T5465] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.094565][ T5465] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.107123][ T5542] tipc: Failed to remove unknown binding: 66,1,1/2886997162:1277172763/1277172765 [ 118.157981][ T5465] device bridge_slave_0 entered promiscuous mode [ 118.170365][ T5549] tipc: Failed to remove unknown binding: 66,1,1/2886997162:1277172763/1277172765 [ 118.196508][ T5465] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.204389][ T5549] tipc: Failed to remove unknown binding: 66,1,1/2886997162:1277172763/1277172765 [ 118.222795][ T5465] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.234933][ T5465] device bridge_slave_1 entered promiscuous mode [ 118.394514][ T5465] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.433672][ T5562] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551609) [ 118.451531][ T5562] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 118.491186][ T5465] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 118.583978][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 118.611859][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 118.647117][ T5566] netlink: 156 bytes leftover after parsing attributes in process `syz.4.343'. [ 118.659940][ T5465] team0: Port device team_slave_0 added [ 118.707094][ T5465] team0: Port device team_slave_1 added [ 118.733271][ T5290] device veth0_vlan entered promiscuous mode [ 118.747085][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 118.762399][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 118.792003][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 118.808917][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 118.823423][ T5569] loop4: detected capacity change from 0 to 4096 [ 118.873627][ T5569] NILFS (loop4): unrecognized mount option "nobarrder=strict" [ 118.891836][ T5290] device veth1_vlan entered promiscuous mode [ 118.914014][ T5465] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.925232][ T5465] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.000360][ T5465] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.029597][ T5465] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.093458][ T5465] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.124339][ T5569] loop4: detected capacity change from 0 to 8192 [ 119.181143][ T5465] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.203002][ T5290] device veth0_macvtap entered promiscuous mode [ 119.235977][ T4564] Bluetooth: hci4: command 0x041b tx timeout [ 119.254803][ T5569] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 119.276620][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 119.284775][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 119.298447][ T5569] REISERFS (device loop4): using ordered data mode [ 119.304985][ T5569] reiserfs: using flush barriers [ 119.316832][ T5569] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 119.335425][ T5569] REISERFS (device loop4): checking transaction log (loop4) [ 119.344683][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 119.349411][ T5569] REISERFS (device loop4): Using r5 hash to sort names [ 119.378800][ T5569] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 119.425014][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 119.464682][ T5290] device veth1_macvtap entered promiscuous mode [ 119.490082][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 119.516337][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 119.563374][ T26] audit: type=1800 audit(1758557402.828:25): pid=5586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.347" name="file0" dev="fuse" ino=0 res=0 errno=0 [ 119.590966][ T5290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.638979][ T5290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.674569][ T5290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.710922][ T5290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.745981][ T5290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.783882][ T5290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.857672][ T5290] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.895416][ T5465] device hsr_slave_0 entered promiscuous mode [ 119.927967][ T5465] device hsr_slave_1 entered promiscuous mode [ 119.939346][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 119.974890][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 120.017459][ T5290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.083383][ T5290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.113899][ T5290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.167046][ T5290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.200052][ T5601] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 120.215858][ T5290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.243587][ T5290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.265515][ T5290] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.304624][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 120.318453][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 120.331174][ T5290] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.348221][ T5290] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.361362][ T5290] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.399042][ T5290] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.488766][ T5609] Unknown status report in ack skb [ 120.583690][ T5613] loop4: detected capacity change from 0 to 1024 [ 120.758198][ T5617] netlink: 'syz.2.354': attribute type 10 has an invalid length. [ 120.816423][ T5617] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.825052][ T5617] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.130203][ T5617] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.137392][ T5617] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.144819][ T5617] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.151940][ T5617] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.539724][ T4289] Bluetooth: hci4: command 0x040f tx timeout [ 121.559291][ T5617] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 121.567926][ T5621] loop5: detected capacity change from 0 to 8192 [ 121.608694][ T5621] FAT-fs (loop5): bogus number of directory entries (9) [ 121.617979][ T5621] FAT-fs (loop5): Can't find a valid FAT filesystem [ 121.641687][ T5625] netlink: 4 bytes leftover after parsing attributes in process `syz.2.354'. [ 121.720627][ T5625] device bridge_slave_1 left promiscuous mode [ 121.747380][ T5625] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.760843][ T5625] device bridge_slave_0 left promiscuous mode [ 121.772039][ T5625] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.815558][ T5625] bond0: (slave bridge0): Releasing backup interface [ 121.963034][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.990963][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.057089][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 122.097303][ T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.124039][ T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.150978][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 122.230277][ T5465] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 122.309723][ T5465] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 122.382009][ T5465] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 122.496222][ T5465] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 122.828165][ T5685] netlink: 830 bytes leftover after parsing attributes in process `syz.2.367'. [ 122.919600][ T5685] device bond_slave_0 entered promiscuous mode [ 122.926376][ T5685] device bond_slave_1 entered promiscuous mode [ 123.876169][ T21] Bluetooth: hci4: command 0x0419 tx timeout [ 123.900444][ T5465] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.972966][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 123.988921][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 124.060036][ T5465] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.116416][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 124.146314][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 124.163969][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.171146][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.221437][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 124.255382][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 124.271881][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 124.284752][ T4452] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.291896][ T4452] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.321658][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 124.367744][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 124.406035][ T5725] kvm: pic: single mode not supported [ 124.406234][ T5725] kvm: pic: single mode not supported [ 124.412555][ T5725] kvm: pic: single mode not supported [ 124.449187][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 124.467854][ T5725] kvm: pic: single mode not supported [ 124.468433][ T5725] kvm: pic: level sensitive irq not supported [ 124.481227][ T5725] kvm: pic: level sensitive irq not supported [ 124.483170][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 124.506101][ T5725] kvm: pic: single mode not supported [ 124.506126][ T5725] kvm: pic: level sensitive irq not supported [ 124.516547][ T5725] kvm: pic: single mode not supported [ 124.523018][ T5725] kvm: pic: level sensitive irq not supported [ 124.524295][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 124.556564][ T5725] kvm: pic: level sensitive irq not supported [ 124.556645][ T5725] kvm: pic: level sensitive irq not supported [ 124.578928][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 124.594075][ T5725] kvm: pic: single mode not supported [ 124.594103][ T5725] kvm: pic: level sensitive irq not supported [ 124.616255][ T5725] kvm: pic: single mode not supported [ 124.622407][ T5725] kvm: pic: level sensitive irq not supported [ 124.655623][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 124.680704][ T5725] kvm: pic: single mode not supported [ 124.680948][ T5725] kvm: pic: single mode not supported [ 124.692793][ T5725] kvm: pic: level sensitive irq not supported [ 124.704732][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 124.726296][ T5725] kvm: pic: level sensitive irq not supported [ 124.756696][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 124.840585][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 124.873227][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 125.028345][ T5465] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 125.378389][ T5754] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 127.056362][ T5754] cramfs: wrong magic [ 127.423489][ T5768] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 127.667133][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 127.683222][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 127.709280][ T5465] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.019026][ T5794] netlink: 24 bytes leftover after parsing attributes in process `syz.6.389'. [ 128.177309][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 128.241448][ T5805] loop6: detected capacity change from 0 to 128 [ 128.250379][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 128.319924][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 128.341680][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 128.394306][ T5465] device veth0_vlan entered promiscuous mode [ 128.406704][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 128.444360][ T5805] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 128.466252][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 128.502896][ T5805] hpfs: filesystem error: improperly stopped [ 128.514624][ T5465] device veth1_vlan entered promiscuous mode [ 128.536308][ T5805] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 128.544066][ T5805] hpfs: You really don't want any checks? You are crazy... [ 128.604730][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 128.616603][ T5805] hpfs: hpfs_map_sector(): read error [ 128.622003][ T5805] hpfs: code page support is disabled [ 128.626157][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 128.664481][ T5805] hpfs: hpfs_map_4sectors(): unaligned read [ 128.672359][ T5465] device veth0_macvtap entered promiscuous mode [ 128.685195][ T5805] hpfs: hpfs_map_4sectors(): unaligned read [ 128.692544][ T5805] hpfs: filesystem error: unable to find root dir [ 128.697812][ T5465] device veth1_macvtap entered promiscuous mode [ 128.773143][ T5805] hpfs: hpfs_map_4sectors(): unaligned read [ 128.807742][ T5823] mmap: syz.5.395 (5823) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 128.825158][ T5805] hpfs: hpfs_map_sector(): read error [ 128.847037][ T5465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.861134][ T5805] hpfs: hpfs_map_4sectors(): unaligned read [ 128.869702][ T5465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.888917][ T5805] hpfs: hpfs_map_sector(): read error [ 128.890380][ T5465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.921227][ T5465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.922119][ T5805] hpfs: hpfs_map_4sectors(): unaligned read [ 128.940299][ T5465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.961181][ T5465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.992117][ T5465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.005460][ T5465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.023911][ T5805] hpfs: hpfs_map_sector(): read error [ 129.030680][ T5465] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 129.053196][ T5827] hpfs: hpfs_map_4sectors(): unaligned read [ 129.074250][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 129.092514][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 129.093077][ T5827] hpfs: hpfs_map_sector(): read error [ 129.132812][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 129.142576][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 129.163098][ T5465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.186632][ T5465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.205842][ T5465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.217633][ T5465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.265925][ T5465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.301228][ T5465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.335828][ T5465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.376284][ T5465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.419230][ T5465] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 129.483723][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 129.545171][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 129.570830][ T5465] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.601494][ T5465] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.620562][ T5465] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.651932][ T5465] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.772013][ T5841] netlink: 24 bytes leftover after parsing attributes in process `syz.4.401'. [ 130.050934][ T5857] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 130.086002][ T4276] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.125872][ T4276] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.185995][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 130.231059][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.265472][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.311056][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 130.762054][ T5878] netlink: 'syz.5.407': attribute type 8 has an invalid length. [ 130.806367][ T5872] loop7: detected capacity change from 0 to 2048 [ 131.007916][ T5872] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 131.346242][ T5902] program syz.6.411 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 131.680242][ T5913] loop6: detected capacity change from 0 to 256 [ 131.986547][ T5913] FAT-fs (loop6): Directory bread(block 64) failed [ 132.156613][ T5913] FAT-fs (loop6): Directory bread(block 65) failed [ 132.163518][ T5913] FAT-fs (loop6): Directory bread(block 66) failed [ 132.315557][ T5913] FAT-fs (loop6): Directory bread(block 67) failed [ 132.352905][ T5913] FAT-fs (loop6): Directory bread(block 68) failed [ 132.380350][ T5913] FAT-fs (loop6): Directory bread(block 69) failed [ 132.402289][ T5913] FAT-fs (loop6): Directory bread(block 70) failed [ 132.427140][ T5913] FAT-fs (loop6): Directory bread(block 71) failed [ 132.465574][ T5913] FAT-fs (loop6): Directory bread(block 72) failed [ 132.495946][ T5913] FAT-fs (loop6): Directory bread(block 73) failed [ 132.649480][ T26] audit: type=1804 audit(1758557415.918:26): pid=5913 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.415" name="/newroot/14/bus/bus" dev="loop6" ino=1048597 res=1 errno=0 [ 132.709317][ T144] attempt to access beyond end of device [ 132.709317][ T144] loop6: rw=1, want=1228, limit=256 [ 132.735050][ T26] audit: type=1800 audit(1758557415.938:27): pid=5913 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.415" name="bus" dev="loop6" ino=1048597 res=0 errno=0 [ 132.762213][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.768574][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.198923][ T5947] netlink: 'syz.4.421': attribute type 1 has an invalid length. [ 134.194908][ T5956] netlink: 24 bytes leftover after parsing attributes in process `syz.5.419'. [ 134.276700][ T5969] block device autoloading is deprecated and will be removed. [ 134.289794][ T5965] md: md2 stopped. [ 134.357679][ T5957] bond2 (unregistering): Released all slaves [ 134.443291][ T5968] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 134.456230][ T5968] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 134.532971][ T5968] bond0: (slave bond_slave_0): Releasing backup interface [ 134.582208][ T5968] device bond_slave_0 left promiscuous mode [ 134.637403][ T5968] bond0: (slave bond_slave_1): Releasing backup interface [ 134.675261][ T5968] device bond_slave_1 left promiscuous mode [ 134.859460][ T5968] team0: Port device team_slave_1 removed [ 134.890683][ T5968] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.921101][ T5968] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 134.961418][ T5968] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.989293][ T5968] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.045695][ T5981] loop7: detected capacity change from 0 to 8 [ 135.075034][ T5968] bond1: (slave ip6gretap1): Releasing active interface [ 135.139000][ T5981] SQUASHFS error: lzo decompression failed, data probably corrupt [ 135.175281][ T5981] SQUASHFS error: Failed to read block 0x91: -5 [ 135.179974][ T5968] team0: Port device vlan2 removed [ 135.184408][ T5981] SQUASHFS error: Unable to read metadata cache entry [8f] [ 135.201666][ T5981] SQUASHFS error: Unable to read inode 0x11f [ 135.249691][ T5985] netlink: 60 bytes leftover after parsing attributes in process `syz.5.427'. [ 135.330548][ T5989] loop4: detected capacity change from 0 to 64 [ 135.434469][ T5989] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing [ 137.857698][ T6027] netlink: 24 bytes leftover after parsing attributes in process `syz.7.436'. [ 138.117918][ T6026] loop6: detected capacity change from 0 to 4096 [ 139.006836][ T6040] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 139.068249][ T6026] NILFS error (device loop6): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 139.133020][ T6026] Remounting filesystem read-only [ 141.027346][ T6097] loop7: detected capacity change from 0 to 1024 [ 142.063993][ T6097] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 142.223498][ T6097] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.489472][ T6097] EXT4-fs error (device loop7): __ext4_get_inode_loc:4321: comm syz.7.459: Invalid inode table block 11128260264111 in block_group 0 [ 142.535211][ T6097] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5836: Corrupt filesystem [ 142.601445][ T4452] EXT4-fs error (device loop7): __ext4_get_inode_loc:4321: comm kworker/u4:11: Invalid inode table block 11128260264111 in block_group 0 [ 146.897102][ T6222] tipc: Failed to remove unknown binding: 66,1,1/2886997162:3525713572/3525713574 [ 146.929696][ T6222] tipc: Failed to remove unknown binding: 66,1,1/2886997162:3525713572/3525713574 [ 146.975448][ T6222] tipc: Failed to remove unknown binding: 66,1,1/2886997162:3525713572/3525713574 [ 147.067733][ T6242] netlink: 12 bytes leftover after parsing attributes in process `syz.2.494'. [ 148.443889][ T6268] netlink: 'syz.6.503': attribute type 7 has an invalid length. [ 148.458156][ T6268] netlink: 'syz.6.503': attribute type 8 has an invalid length. [ 149.853054][ T6298] loop7: detected capacity change from 0 to 16 [ 149.924979][ T6298] erofs: (device loop7): mounted with root inode @ nid 36. [ 150.783856][ T6306] erofs: (device loop7): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 150.793638][ T6306] erofs: (device loop7): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 150.803228][ T6306] erofs: (device loop7): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 150.812664][ T6306] erofs: (device loop7): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 150.822022][ T6306] erofs: (device loop7): z_erofs_readahead: readahead error at page 44 @ nid 36 [ 150.831481][ T6306] erofs: (device loop7): z_erofs_readahead: readahead error at page 43 @ nid 36 [ 150.840804][ T6306] erofs: (device loop7): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 150.850430][ T6306] erofs: (device loop7): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 150.859702][ T6306] erofs: (device loop7): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 150.868954][ T6306] erofs: (device loop7): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 150.878456][ T6306] erofs: (device loop7): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 150.888045][ T6306] erofs: (device loop7): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 150.897753][ T6306] erofs: (device loop7): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 150.907738][ T6306] erofs: (device loop7): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 150.917244][ T6306] erofs: (device loop7): z_erofs_readahead: readahead error at page 31 @ nid 36 [ 150.926671][ T6306] erofs: (device loop7): z_erofs_readahead: readahead error at page 27 @ nid 36 [ 151.102131][ T6306] erofs: (device loop7): z_erofs_readahead: readahead error at page 26 @ nid 36 [ 151.111322][ T6306] erofs: (device loop7): z_erofs_map_blocks_iter: unknown type 3 @ offset 106495 of nid 36 [ 151.121359][ T6306] erofs: (device loop7): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 151.130619][ T6306] erofs: (device loop7): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 151.140520][ T6306] erofs: (device loop7): z_erofs_extent_lookback: unknown type 3 @ lcn 15 of nid 36 [ 151.150000][ T6306] erofs: (device loop7): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 151.159115][ T6306] erofs: (device loop7): z_erofs_map_blocks_iter: unknown type 3 @ offset 65535 of nid 36 [ 151.169129][ T6306] erofs: (device loop7): z_erofs_readahead: readahead error at page 15 @ nid 36 [ 151.178600][ T6306] attempt to access beyond end of device [ 151.178600][ T6306] loop7: rw=524288, want=848, limit=16 [ 151.189921][ T6306] attempt to access beyond end of device [ 151.189921][ T6306] loop7: rw=524288, want=13478624104, limit=16 [ 151.202754][ T6306] attempt to access beyond end of device [ 151.202754][ T6306] loop7: rw=524288, want=13478624080, limit=16 [ 151.214938][ T6306] attempt to access beyond end of device [ 151.214938][ T6306] loop7: rw=524288, want=32, limit=16 [ 151.230668][ T146] erofs: (device loop7): z_erofs_lz4_decompress: failed to decompress -29 in[58, 4038] out[2651] [ 152.069849][ T6330] loop4: detected capacity change from 0 to 512 [ 152.363012][ T6330] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 152.653239][ T6330] ext4 filesystem being mounted at /118/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 152.726274][ T4224] kernel read not supported for file [fanotify] (pid: 4224 comm: kworker/1:3) [ 153.193614][ T6362] netlink: 28 bytes leftover after parsing attributes in process `syz.7.526'. [ 153.230005][ T26] audit: type=1800 audit(1758557436.418:28): pid=6330 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.516" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 153.620799][ T6380] block device autoloading is deprecated and will be removed. [ 156.624057][ T6433] netlink: 24 bytes leftover after parsing attributes in process `syz.5.541'. [ 157.266807][ T6455] loop4: detected capacity change from 0 to 16 [ 157.783442][ T6458] team0: Port device gtp0 added [ 157.797845][ T6455] erofs: Unknown parameter 'syzkaller1' [ 157.924516][ T6469] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 157.950237][ T6452] loop4: detected capacity change from 0 to 2048 [ 158.206862][ T6452] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 158.367665][ T6452] EXT4-fs (loop4): shut down requested (0) [ 158.969394][ T6491] VFS: Mount too revealing [ 160.975485][ T6522] netlink: 'syz.7.559': attribute type 4 has an invalid length. [ 161.100566][ T6521] team0: Port device vlan2 added [ 161.122214][ T6525] netlink: 'syz.7.559': attribute type 4 has an invalid length. [ 162.351035][ T6560] fuse: Bad value for 'fd' [ 164.185883][ T4564] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 164.445954][ T4564] usb 5-1: Using ep0 maxpacket: 16 [ 164.572415][ T4564] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 164.584395][ T4564] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.646631][ T4564] usb 5-1: config 0 descriptor?? [ 164.650334][ T6645] device vlan3 entered promiscuous mode [ 164.687822][ T4564] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 164.697455][ T6645] device bridge0 entered promiscuous mode [ 164.712741][ T6652] kernel read not supported for file /!selinuxwk1ÐmÃ9Éž*T“ýâ‘ïª#j—¼ÞYÌÅmVËvm(pÉ-QZ#Ò{„¿ (pid: 6652 comm: syz.6.593) [ 165.799871][ T6674] batman_adv: batadv0: Adding interface: dummy0 [ 165.857876][ T6674] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.948389][ T6678] net_ratelimit: 10 callbacks suppressed [ 165.948404][ T6678] Set syz1 is full, maxelem 9 reached [ 165.973890][ T6674] batman_adv: batadv0: Interface activated: dummy0 [ 165.974680][ T6683] netlink: 28 bytes leftover after parsing attributes in process `syz.2.609'. [ 166.544990][ T6708] loop7: detected capacity change from 0 to 512 [ 166.929943][ T6708] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 167.124842][ T6708] EXT4-fs (loop7): 1 truncate cleaned up [ 167.138383][ T6708] EXT4-fs (loop7): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,minixdf,quota,,errors=continue. Quota mode: writeback. [ 167.460268][ T4564] gspca_sonixj: i2c_w8 err -71 [ 167.465298][ T4564] sonixj: probe of 5-1:0.0 failed with error -71 [ 167.511035][ T4564] usb 5-1: USB disconnect, device number 4 [ 167.868299][ T6744] overlayfs: failed to clone upperpath [ 168.062335][ T6757] netlink: 28 bytes leftover after parsing attributes in process `syz.5.617'. [ 168.088662][ T6757] netlink: 8 bytes leftover after parsing attributes in process `syz.5.617'. [ 168.141304][ T6757] bridge0: port 3(syz_tun) entered blocking state [ 168.174515][ T6757] bridge0: port 3(syz_tun) entered disabled state [ 168.199350][ T6757] device syz_tun entered promiscuous mode [ 168.215561][ T6757] bridge0: port 3(syz_tun) entered blocking state [ 168.222122][ T6757] bridge0: port 3(syz_tun) entered forwarding state [ 168.651968][ T6774] loop7: detected capacity change from 0 to 512 [ 168.810236][ T6774] EXT4-fs (loop7): mounted filesystem without journal. Opts: errors=remount-ro,max_dir_size_kb=0x0000000000000002,. Quota mode: writeback. [ 168.876852][ T6782] netlink: 8 bytes leftover after parsing attributes in process `syz.5.624'. [ 168.890705][ T6774] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.949038][ T6782] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 169.006028][ T6782] netlink: 4 bytes leftover after parsing attributes in process `syz.5.624'. [ 169.430005][ T6797] loop7: detected capacity change from 0 to 40427 [ 169.466458][ T6797] F2FS-fs (loop7): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 169.474126][ T6797] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 169.483829][ T6797] F2FS-fs (loop7): invalid crc value [ 169.608833][ T6797] F2FS-fs (loop7): Found nat_bits in checkpoint [ 170.313125][ T6797] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 170.320355][ T6797] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4 [ 170.651848][ T6820] ODEBUG: Out of memory. ODEBUG disabled [ 171.101747][ T6797] attempt to access beyond end of device [ 171.101747][ T6797] loop7: rw=2051, want=45064, limit=40427 [ 171.113073][ T6797] attempt to access beyond end of device [ 171.113073][ T6797] loop7: rw=2051, want=131072, limit=40427 [ 171.160014][ T6797] F2FS-fs (loop7): Issue discard(4614, 4614, 1019) failed, ret: -5 [ 171.160054][ T6797] F2FS-fs (loop7): Issue discard(5637, 5637, 10747) failed, ret: -5 [ 171.342621][ T6830] netlink: 'syz.5.635': attribute type 13 has an invalid length. [ 171.365889][ T6830] netlink: 4 bytes leftover after parsing attributes in process `syz.5.635'. [ 171.423894][ T6830] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 171.433035][ T6830] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 171.441787][ T6830] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 171.450486][ T6830] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 171.520030][ T6830] netlink: 'syz.5.635': attribute type 13 has an invalid length. [ 171.550031][ T6830] netlink: 4 bytes leftover after parsing attributes in process `syz.5.635'. [ 172.016179][ T6849] tipc: Started in network mode [ 172.052145][ T6849] tipc: Node identity ac1414aa, cluster identity 4711 [ 172.102846][ T6849] tipc: Enabled bearer , priority 10 [ 172.152521][ T6854] tipc: Enabled bearer , priority 0 [ 173.324833][ T4239] tipc: Node number set to 2886997162 [ 174.531099][ T6881] syz.7.649[6881] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 174.531232][ T6881] syz.7.649[6881] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 176.986558][ T4224] Bluetooth: hci0: command 0x0406 tx timeout [ 177.193809][ T4239] Bluetooth: hci1: command 0x0406 tx timeout [ 177.251436][ T6900] overlayfs: missing 'lowerdir' [ 177.567009][ T6912] pic_ioport_write: 8 callbacks suppressed [ 177.567021][ T6912] kvm: pic: single mode not supported [ 177.572880][ T6912] pic_ioport_write: 6 callbacks suppressed [ 177.572892][ T6912] kvm: pic: level sensitive irq not supported [ 177.795360][ T6930] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 177.808741][ T6930] IPv6: NLM_F_CREATE should be set when creating new route [ 178.655866][ T21] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 178.794650][ T6940] 9pnet: Insufficient options for proto=fd [ 179.056180][ T21] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.068737][ T21] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.124529][ T21] usb 8-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 179.166032][ T21] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.199933][ T21] usb 8-1: config 0 descriptor?? [ 179.656004][ T6931] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.663461][ T6931] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.950970][ T6931] batman_adv: batadv0: Interface deactivated: dummy0 [ 181.041435][ T6931] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 181.049254][ T21] usbhid 8-1:0.0: can't add hid device: -71 [ 181.058893][ T21] usbhid: probe of 8-1:0.0 failed with error -71 [ 181.074426][ T21] usb 8-1: USB disconnect, device number 2 [ 181.096203][ T6931] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 181.509595][ T6931] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.520203][ T6931] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.529891][ T6931] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.539448][ T6931] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.682572][ T6982] device wg1 entered promiscuous mode [ 181.777068][ T6990] netlink: 12 bytes leftover after parsing attributes in process `syz.7.674'. [ 182.589979][ T7050] smc: net device bond0 applied user defined pnetid SYZ2 [ 182.608999][ T7050] netlink: 14 bytes leftover after parsing attributes in process `syz.4.689'. [ 182.669198][ T7050] team0: Port device bond0 removed [ 182.693196][ T7050] smc: removing net device bond0 with user defined pnetid SYZ2 [ 182.725043][ T7050] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 182.754620][ T7050] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 182.801485][ T7050] bond0 (unregistering): Released all slaves [ 183.242661][ T7090] netlink: 'syz.2.698': attribute type 11 has an invalid length. [ 184.089459][ T7098] overlayfs: failed to clone upperpath [ 184.593612][ T7118] overlayfs: failed to clone upperpath [ 184.947160][ T7126] netlink: 16 bytes leftover after parsing attributes in process `syz.2.708'. [ 185.798114][ T7133] netlink: 44 bytes leftover after parsing attributes in process `syz.5.710'. [ 185.878886][ T7135] tipc: Failed to remove unknown binding: 66,1,1/0:741412498/741412500 [ 185.901074][ T7135] tipc: Failed to remove unknown binding: 66,1,1/0:741412498/741412500 [ 185.931094][ T7135] tipc: Failed to remove unknown binding: 66,1,1/0:741412498/741412500 [ 186.056098][ T4225] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 186.325886][ T4225] usb 5-1: Using ep0 maxpacket: 32 [ 186.397410][ T7152] netlink: 8 bytes leftover after parsing attributes in process `syz.2.719'. [ 186.409582][ T7152] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 186.606603][ T4225] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 186.630601][ T4225] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.672275][ T4225] usb 5-1: Product: syz [ 186.698094][ T4225] usb 5-1: Manufacturer: syz [ 186.722441][ T4225] usb 5-1: SerialNumber: syz [ 186.889203][ T4225] usb 5-1: config 0 descriptor?? [ 186.951991][ T4225] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 187.189619][ T4239] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 187.309366][ T7169] netlink: 112 bytes leftover after parsing attributes in process `syz.2.734'. [ 188.275974][ T4225] gspca_ov534_9: reg_w failed -71 [ 188.395535][ T4239] usb 8-1: Using ep0 maxpacket: 16 [ 188.536846][ T4239] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 78, changing to 10 [ 188.553944][ T4239] usb 8-1: New USB device found, idVendor=056a, idProduct=00b2, bcdDevice= 0.00 [ 188.563738][ T4239] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.577436][ T4239] usb 8-1: config 0 descriptor?? [ 188.795956][ T4225] gspca_ov534_9: Unknown sensor 0000 [ 188.796008][ T4225] ov534_9: probe of 5-1:0.0 failed with error -22 [ 188.827787][ T4225] usb 5-1: USB disconnect, device number 5 [ 188.904886][ T7193] loop7: detected capacity change from 0 to 1024 [ 188.935684][ T7195] netlink: 8 bytes leftover after parsing attributes in process `syz.4.733'. [ 188.997063][ T7195] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 189.023196][ T7193] EXT4-fs (loop7): mounted filesystem without journal. Opts: jqfmt=vfsv1,dioread_lock,barrier=0x0000000000000000,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000005,errors=continue,. Quota mode: none. [ 189.073660][ T7195] netlink: 4 bytes leftover after parsing attributes in process `syz.4.733'. [ 189.468497][ T4239] wacom 0003:056A:00B2.0004: Unknown device_type for 'HID 056a:00b2'. Assuming pen. [ 189.536296][ T4239] wacom 0003:056A:00B2.0004: hidraw0: USB HID v0.06 Device [HID 056a:00b2] on usb-dummy_hcd.7-1/input0 [ 189.572423][ T4239] input: Wacom Intuos3 9x12 Pen as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:056A:00B2.0004/input/input7 [ 189.708241][ T7234] netlink: 60 bytes leftover after parsing attributes in process `syz.6.744'. [ 189.751504][ T23] usb 8-1: USB disconnect, device number 3 [ 189.800695][ T7235] fido_id[7235]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/8-1/report_descriptor': No such file or directory [ 189.818298][ T7212] "syz.2.741" (7212) uses obsolete ecb(arc4) skcipher [ 190.033976][ T7247] overlayfs: failed to clone upperpath [ 190.216312][ T7253] overlayfs: failed to clone lowerpath [ 190.245615][ T7250] netlink: 104 bytes leftover after parsing attributes in process `syz.2.752'. [ 190.384880][ T26] audit: type=1326 audit(1758557473.648:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7256 comm="syz.6.754" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5caf750ec9 code=0x0 [ 191.681777][ T26] audit: type=1326 audit(1758557474.938:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7269 comm="syz.2.760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ce3011ec9 code=0x7fc00000 [ 191.694903][ T7261] loop7: detected capacity change from 0 to 32768 [ 191.727815][ T26] audit: type=1326 audit(1758557474.998:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7269 comm="syz.2.760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8ce3011ec9 code=0x7fc00000 [ 192.491430][ T26] audit: type=1326 audit(1758557474.998:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7269 comm="syz.2.760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ce3011ec9 code=0x7fc00000 [ 192.791491][ T7261] XFS (loop7): Mounting V5 Filesystem [ 193.165793][ C1] sched: RT throttling activated [ 193.217337][ T7261] XFS (loop7): Ending clean mount [ 193.232749][ T7261] XFS (loop7): Quotacheck needed: Please wait. [ 193.273104][ T4247] XFS (loop7): Metadata corruption detected at xfs_dinode_verify+0x293/0xcf0, inode 0x1807 dinode [ 193.291496][ T4247] XFS (loop7): Unmount and run xfs_repair [ 193.301007][ T4247] XFS (loop7): First 128 bytes of corrupted metadata buffer: [ 193.315186][ T4247] 00000000: 49 4e 81 ed 03 02 00 00 00 00 00 00 00 00 00 00 IN.............. [ 193.325642][ T4247] 00000010: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 193.362769][ T4247] 00000020: 34 f7 58 68 a5 a5 b6 11 34 f7 58 68 a5 a5 b6 11 4.Xh....4.Xh.... [ 193.453185][ T4247] 00000030: 34 f7 58 68 a5 a5 b6 11 7c 0b 00 00 00 00 00 00 4.Xh....|....... [ 193.484623][ T4247] 00000040: 00 00 00 00 00 00 00 05 00 00 00 00 00 00 00 01 ................ [ 193.494284][ T4247] 00000050: 00 00 18 02 00 00 00 00 00 00 00 00 bb 36 00 a5 .............6.. [ 193.503484][ T4247] 00000060: ff ff ff ff 8c da 54 79 00 00 00 00 00 00 00 06 ......Ty........ [ 193.521709][ T7296] IPVS: fo: FWM 3 0x00000003 - no destination available [ 193.529519][ T4247] 00000070: 00 00 00 01 00 00 00 10 00 00 00 00 00 00 00 08 ................ [ 193.580909][ T7261] XFS (loop7): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 193.637629][ T5465] XFS (loop7): Unmounting Filesystem [ 194.213316][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.222103][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.575957][ T4600] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 194.605344][ T7319] netlink: 'syz.7.768': attribute type 27 has an invalid length. [ 194.613979][ T7319] netlink: 'syz.7.768': attribute type 4 has an invalid length. [ 194.623406][ T7319] netlink: 144 bytes leftover after parsing attributes in process `syz.7.768'. [ 194.632985][ T7316] bridge0: port 1(wlan1) entered blocking state [ 194.642541][ T7316] bridge0: port 1(wlan1) entered disabled state [ 194.659036][ T7316] device wlan1 entered promiscuous mode [ 194.919299][ T4600] usb 5-1: Using ep0 maxpacket: 32 [ 195.056121][ T4600] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 195.109816][ T4600] usb 5-1: config 0 has no interface number 0 [ 195.407964][ T4600] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 195.451180][ T4600] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.465839][ T4600] usb 5-1: Product: syz [ 195.470027][ T4600] usb 5-1: Manufacturer: syz [ 195.474618][ T4600] usb 5-1: SerialNumber: syz [ 195.524653][ T4600] usb 5-1: config 0 descriptor?? [ 195.587447][ T4600] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 195.798773][ T4600] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 195.820545][ T4600] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 196.118278][ T7337] xt_CT: You must specify a L4 protocol and not use inversions on it [ 196.247511][ T4612] usb 5-1: USB disconnect, device number 6 [ 196.255871][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 196.312793][ T4612] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 196.363808][ T4612] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 196.423669][ T4612] quatech2 5-1:0.51: device disconnected [ 197.325988][ T23] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 197.418869][ T7374] sch_tbf: burst 1821 is lower than device lo mtu (65550) ! [ 197.435633][ T7374] netlink: 12 bytes leftover after parsing attributes in process `syz.5.793'. [ 197.446093][ T26] audit: type=1326 audit(1758557480.718:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7375 comm="syz.6.795" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5caf750ec9 code=0x0 [ 197.528504][ T7382] tipc: Enabling of bearer rejected, already enabled [ 197.616580][ T23] usb 8-1: Using ep0 maxpacket: 8 [ 197.624195][ T7390] 8021q: adding VLAN 0 to HW filter on device bond1 [ 197.643271][ T7390] device veth0 entered promiscuous mode [ 197.650737][ T7390] bond1: (slave macvlan2): making interface the new active one [ 197.660327][ T7390] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 197.669779][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 197.756163][ T23] usb 8-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.772910][ T23] usb 8-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.815676][ T23] usb 8-1: config 0 interface 0 has no altsetting 0 [ 197.827239][ T23] usb 8-1: New USB device found, idVendor=046d, idProduct=c219, bcdDevice= 0.00 [ 197.841670][ T23] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.873320][ T23] usb 8-1: config 0 descriptor?? [ 198.296160][ T23] usbhid 8-1:0.0: can't add hid device: -71 [ 198.302693][ T23] usbhid: probe of 8-1:0.0 failed with error -71 [ 198.332184][ T23] usb 8-1: USB disconnect, device number 4 [ 198.543734][ T7424] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 198.779228][ T7426] netlink: 'syz.6.814': attribute type 12 has an invalid length. [ 201.054410][ T7495] loop4: detected capacity change from 0 to 1024 [ 201.584089][ T7495] EXT4-fs (loop4): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000002,nombcache,,errors=continue. Quota mode: none. [ 201.798403][ T7495] ext4 filesystem being mounted at /157/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 202.415179][ T7525] netlink: 'syz.6.852': attribute type 1 has an invalid length. [ 202.515102][ T7529] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 202.656936][ T7525] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 202.700282][ T7525] bond1 (unregistering): Released all slaves [ 203.099149][ T7540] netlink: 24 bytes leftover after parsing attributes in process `syz.2.847'. [ 204.031594][ T7553] loop4: detected capacity change from 0 to 2048 [ 204.163842][ T7553] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 204.341199][ T7568] IPVS: dh: FWM 3 0x00000003 - no destination available [ 207.008325][ T7612] overlayfs: failed to clone upperpath [ 207.373159][ T7624] netlink: 40 bytes leftover after parsing attributes in process `syz.4.876'. [ 207.452126][ T7626] SET target dimension over the limit! [ 208.189259][ T7624] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 208.196618][ T7624] IPv6: NLM_F_CREATE should be set when creating new route [ 208.203857][ T7624] IPv6: NLM_F_CREATE should be set when creating new route [ 208.975071][ T7641] netlink: 'syz.7.882': attribute type 1 has an invalid length. [ 209.100943][ T7645] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 209.220806][ T7648] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 209.289079][ T7648] bond1 (unregistering): Released all slaves [ 209.527822][ T7657] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 209.586449][ T7657] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 209.616446][ T7657] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 209.637650][ T7657] device bridge_slave_0 left promiscuous mode [ 209.652195][ T7657] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.678678][ T7657] device bridge_slave_1 left promiscuous mode [ 209.706774][ T7657] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.746231][ T7657] bond0: (slave bond_slave_0): Releasing backup interface [ 209.805583][ T7657] bond0: (slave bond_slave_1): Releasing backup interface [ 209.911645][ T7657] team0: Port device team_slave_0 removed [ 209.954480][ T7657] team0: Port device team_slave_1 removed [ 209.967098][ T7657] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 209.979482][ T7657] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.001643][ T7657] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.018367][ T7657] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.062740][ T7659] netlink: 8 bytes leftover after parsing attributes in process `syz.5.890'. [ 210.103979][ T7659] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 210.113137][ T7671] fuse: Bad value for 'fd' [ 210.405325][ T7686] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 210.713902][ T7696] netlink: 'syz.2.900': attribute type 1 has an invalid length. [ 210.886326][ T7702] bond2 (unregistering): Released all slaves [ 211.226407][ T7707] 8021q: adding VLAN 0 to HW filter on device bond1 [ 212.653230][ T7736] netlink: 64 bytes leftover after parsing attributes in process `syz.4.909'. [ 214.429371][ T7759] netlink: 'syz.5.915': attribute type 1 has an invalid length. [ 214.474911][ T7760] netlink: 4 bytes leftover after parsing attributes in process `syz.7.918'. [ 214.907530][ T7759] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 214.939193][ T7764] bond2 (unregistering): (slave ip6gretap1): Releasing backup interface [ 214.963330][ T7764] bond2 (unregistering): Released all slaves [ 215.551960][ T7794] netlink: 'syz.6.927': attribute type 10 has an invalid length. [ 215.579358][ T7794] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 215.608963][ T7800] netlink: 4 bytes leftover after parsing attributes in process `syz.6.927'. [ 215.628900][ T7800] device bridge_slave_1 left promiscuous mode [ 215.636095][ T7800] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.659378][ T7800] device bridge_slave_0 left promiscuous mode [ 215.665609][ T7800] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.074720][ T7800] bond0: (slave bridge0): Releasing backup interface [ 217.924323][ T7816] fuse: Bad value for 'fd' [ 218.023608][ T7824] batman_adv: batadv0: Removing interface: dummy0 [ 218.130557][ T7824] bond0: (slave bond_slave_0): Releasing backup interface [ 218.142554][ T7824] bond0: (slave bond_slave_1): Releasing backup interface [ 218.421724][ T7824] team0: Port device team_slave_0 removed [ 218.426265][ T7836] tipc: Failed to remove unknown binding: 66,1,1/2886997162:1121620314/1121620316 [ 218.442373][ T7824] team0: Port device team_slave_1 removed [ 218.451859][ T7824] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 218.463602][ T7824] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.482411][ T7836] tipc: Failed to remove unknown binding: 66,1,1/2886997162:1121620314/1121620316 [ 218.508848][ T7824] team0: Port device vlan2 removed [ 218.514161][ T7836] tipc: Failed to remove unknown binding: 66,1,1/2886997162:1121620314/1121620316 [ 218.627223][ T7843] netlink: 24 bytes leftover after parsing attributes in process `syz.5.941'. [ 219.642849][ T7857] device syz_tun left promiscuous mode [ 219.659156][ T7857] bridge0: port 3(syz_tun) entered disabled state [ 219.689150][ T7857] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 219.703329][ T7857] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 219.728765][ T7857] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 219.744150][ T7857] device bridge_slave_0 left promiscuous mode [ 219.753798][ T7857] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.410299][ T7857] device bridge_slave_1 left promiscuous mode [ 220.417826][ T7857] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.430940][ T7857] bond0: (slave bond_slave_0): Releasing backup interface [ 220.475090][ T7857] bond0: (slave bond_slave_1): Releasing backup interface [ 220.533013][ T7857] team0: Port device team_slave_0 removed [ 220.551921][ T7857] team0: Port device team_slave_1 removed [ 220.561445][ T7857] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.586890][ T7857] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.608026][ T7857] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.615567][ T7857] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.631718][ T7857] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 220.649975][ T7862] netlink: 'syz.7.957': attribute type 1 has an invalid length. [ 220.697635][ T7867] netlink: 4 bytes leftover after parsing attributes in process `syz.7.957'. [ 220.741412][ T7886] netlink: 12 bytes leftover after parsing attributes in process `syz.5.950'. [ 221.063181][ T7893] netlink: 'syz.7.952': attribute type 10 has an invalid length. [ 221.526829][ T7893] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 221.839320][ T7897] netlink: 4 bytes leftover after parsing attributes in process `syz.7.952'. [ 221.874954][ T7897] bond0: (slave bridge0): Releasing backup interface [ 222.170442][ T23] Bluetooth: hci2: command 0x0406 tx timeout [ 222.179755][ T7903] netlink: 'syz.6.954': attribute type 8 has an invalid length. [ 223.372899][ T7925] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 223.390143][ T7925] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 223.399128][ T7925] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 223.504595][ T7925] team0: Port device team_slave_0 removed [ 223.543843][ T7925] team0: Port device team_slave_1 removed [ 223.561462][ T7925] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 223.593329][ T7925] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 223.608966][ T7925] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 223.626062][ T7925] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 223.671851][ T153] tipc: Resetting bearer [ 224.564774][ T7956] netlink: 'syz.2.972': attribute type 8 has an invalid length. [ 225.170582][ T7977] netlink: 'syz.4.978': attribute type 10 has an invalid length. [ 225.218631][ T7977] netlink: 4 bytes leftover after parsing attributes in process `syz.4.978'. [ 227.227593][ T8026] netlink: 4 bytes leftover after parsing attributes in process `syz.7.996'. [ 227.402526][ T4452] tipc: Subscription rejected, illegal request [ 227.567313][ T8048] netlink: 'syz.2.1014': attribute type 4 has an invalid length. [ 227.606141][ T8048] netlink: 'syz.2.1014': attribute type 4 has an invalid length. [ 228.413766][ T8070] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1009'. [ 228.484181][ T8068] team0: Port device gtp0 added [ 228.499485][ T8073] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1009'. [ 228.977741][ T153] tipc: Subscription rejected, illegal request [ 230.085830][ T8109] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 231.304035][ T8124] netlink: 'syz.4.1024': attribute type 4 has an invalid length. [ 231.355370][ T8124] netlink: 'syz.4.1024': attribute type 4 has an invalid length. [ 231.907508][ T8143] 8021q: adding VLAN 0 to HW filter on device bond1 [ 231.934594][ T8143] bond1: (slave ip6gretap2): making interface the new active one [ 231.946690][ T8143] bond1: (slave ip6gretap2): Enslaving as an active interface with an up link [ 232.133769][ T4172] Bluetooth: hci3: command 0x0406 tx timeout [ 235.631567][ T8204] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1057'. [ 237.314930][ T8254] device vlan2 entered promiscuous mode [ 237.322127][ T8254] device bridge0 entered promiscuous mode [ 237.337082][ T8254] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 237.352859][ T8254] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 237.363115][ T8254] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 237.386735][ T8254] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 237.479922][ T8259] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1076'. [ 238.425994][ T8273] batman_adv: batadv0: Adding interface: dummy0 [ 238.439468][ T8273] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.470177][ T8273] batman_adv: batadv0: Interface activated: dummy0 [ 238.523264][ T8279] batadv0: mtu less than device minimum [ 238.557901][ T8279] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 238.570256][ T8279] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 238.582542][ T8279] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 238.594799][ T8279] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 238.607128][ T8279] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 238.619414][ T8279] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 238.631710][ T8279] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 238.643986][ T8279] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 238.656335][ T8279] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 240.158408][ T8318] overlayfs: failed to clone upperpath [ 241.810929][ T8365] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1115'. [ 242.061862][ T8375] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1118'. [ 242.206456][ T8358] syz.2.1111[8358] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 242.206555][ T8358] syz.2.1111[8358] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 242.276039][ T8358] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1111'. [ 242.355903][ T4600] Bluetooth: hci4: command 0x0406 tx timeout [ 242.391641][ T8385] overlayfs: failed to clone upperpath [ 242.407724][ T8392] overlayfs: failed to clone upperpath [ 243.369139][ T8403] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1128'. [ 243.384929][ T8403] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1128'. [ 243.416431][ T8406] bridge0: port 1(syz_tun) entered blocking state [ 243.422912][ T8406] bridge0: port 1(syz_tun) entered disabled state [ 243.500207][ T8406] device syz_tun entered promiscuous mode [ 243.511207][ T8406] bridge0: port 1(syz_tun) entered blocking state [ 243.517732][ T8406] bridge0: port 1(syz_tun) entered forwarding state [ 243.539628][ T8408] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 243.548214][ T8408] tipc: Resetting bearer [ 243.553849][ T8408] batman_adv: batadv0: Interface deactivated: dummy0 [ 243.569034][ T8408] batman_adv: batadv0: Removing interface: dummy0 [ 243.589735][ T8408] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 243.606695][ T8408] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 243.616361][ T8408] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 243.655260][ T8410] netlink: 'syz.6.1131': attribute type 1 has an invalid length. [ 243.730276][ T8410] device bond2 entered promiscuous mode [ 243.761908][ T8410] 8021q: adding VLAN 0 to HW filter on device bond2 [ 243.871992][ T8412] 8021q: adding VLAN 0 to HW filter on device bond2 [ 243.886681][ T8412] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 243.930300][ T8412] bond2: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 243.947867][ T8412] bond2: (slave wireguard0): making interface the new active one [ 243.975954][ T8412] device wireguard0 entered promiscuous mode [ 244.021277][ T8412] bond2: (slave wireguard0): Enslaving as an active interface with an up link [ 244.046982][ T8411] netlink: 'syz.4.1130': attribute type 10 has an invalid length. [ 244.055871][ T8413] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 244.063116][ T8413] IPv6: NLM_F_CREATE should be set when creating new route [ 244.070443][ T8413] IPv6: NLM_F_CREATE should be set when creating new route [ 244.093039][ T8413] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 244.103026][ T8414] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1130'. [ 244.123393][ T8414] tipc: Resetting bearer [ 244.173714][ T8414] tipc: Disabling bearer [ 244.247652][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 244.259209][ T8421] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1133'. [ 244.307924][ T8421] device netdevsim0 entered promiscuous mode [ 244.335257][ T8413] bond2: (slave wireguard1): The slave device specified does not support setting the MAC address [ 244.359722][ T8413] bond2: (slave wireguard1): Enslaving as a backup interface with an up link [ 244.540274][ T8435] netlink: 'syz.7.1139': attribute type 13 has an invalid length. [ 244.565838][ T8435] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1139'. [ 244.588358][ T8435] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 244.597648][ T8435] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 244.606464][ T8435] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 244.615168][ T8435] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 244.627186][ T8435] netlink: 'syz.7.1139': attribute type 13 has an invalid length. [ 244.644003][ T8435] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1139'. [ 245.733605][ T8471] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1151'. [ 245.770536][ T8471] device netdevsim0 entered promiscuous mode [ 246.467295][ T8509] syz.4.1165[8509] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 246.467420][ T8509] syz.4.1165[8509] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 247.307404][ T8512] smc: net device bond0 applied user defined pnetid SYZ2 [ 247.334355][ T8513] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1166'. [ 248.877349][ T8513] device netdevsim0 entered promiscuous mode [ 248.889810][ T8512] netlink: 14 bytes leftover after parsing attributes in process `syz.7.1167'. [ 248.946594][ T8512] smc: removing net device bond0 with user defined pnetid SYZ2 [ 248.955168][ T8512] bond0 (unregistering): Released all slaves [ 249.973228][ T8554] tipc: Started in network mode [ 250.005928][ T8554] tipc: Node identity ac1414aa, cluster identity 4711 [ 250.043285][ T8554] tipc: Enabled bearer , priority 10 [ 250.192329][ T8554] tipc: Enabled bearer , priority 0 [ 250.406626][ T8567] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1182'. [ 252.036981][ T4612] tipc: Node number set to 2886997162 [ 252.327556][ T8579] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1187'. [ 252.496275][ T8600] device wg1 entered promiscuous mode [ 252.524251][ T8602] bridge0: port 1(syz_tun) entered disabled state [ 252.564539][ T8602] device syz_tun left promiscuous mode [ 252.580659][ T8602] bridge0: port 1(syz_tun) entered disabled state [ 252.647704][ T8618] bond1: option mode: unable to set because the bond device has slaves [ 252.664148][ T8618] bond1: (slave macvlan3): Enslaving as an active interface with a down link [ 253.003451][ T4224] net_ratelimit: 11 callbacks suppressed [ 253.003469][ T4224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.116003][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.131156][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.928650][ T8652] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1211'. [ 253.953387][ T8655] bond1: option mode: unable to set because the bond device is up [ 254.003940][ T8655] device veth0 entered promiscuous mode [ 254.053266][ T4225] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.063289][ T8655] bond1: (slave macvlan4): Enslaving as a backup interface with an up link [ 254.158798][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 254.967349][ T8669] device wlan1 left promiscuous mode [ 254.972938][ T8669] bridge0: port 1(wlan1) entered disabled state [ 255.076050][ T4224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.091728][ T4600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.640404][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.646865][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.494531][ T4225] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.556275][ T4224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.035656][ T8728] smc: adding net device bond0 with user defined pnetid SYZ2 [ 258.052355][ T8728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.129083][ T4600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.157819][ T8728] device veth0 entered promiscuous mode [ 258.188355][ T8728] bond0: (slave macvlan1): making interface the new active one [ 258.211178][ T8728] bond0: (slave macvlan1): Enslaving as an active interface with an up link [ 258.263496][ T8739] 9pnet: Insufficient options for proto=fd [ 258.264042][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 258.566719][ T8749] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 258.574660][ T8749] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 258.627416][ T8749] team0: Port device gtp0 removed [ 258.639725][ T8749] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 258.661514][ T8749] bond1: (slave macvlan2): Releasing active interface [ 258.679733][ T8749] device veth0 left promiscuous mode [ 258.694301][ T8750] netlink: 'syz.2.1245': attribute type 10 has an invalid length. [ 258.755644][ T8750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.787449][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.806879][ T8750] team0: Port device bond0 added [ 258.828501][ T4452] tipc: Resetting bearer [ 258.844423][ T8751] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1245'. [ 258.860934][ T8751] tipc: Resetting bearer [ 258.893070][ T8751] tipc: Disabling bearer [ 258.955240][ T8751] team0 (unregistering): Port device bond0 removed [ 259.263030][ T8755] overlayfs: failed to clone upperpath [ 260.029714][ T4225] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.101282][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.215922][ T4612] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.436030][ T4612] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.892950][ T8797] smc: adding net device bond0 with user defined pnetid SYZ2 [ 261.932540][ T8797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.076603][ T8802] device veth0 entered promiscuous mode [ 262.116360][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.163373][ T8802] bond0: (slave macvlan2): making interface the new active one [ 262.180777][ T8802] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 262.194911][ T8798] tipc: Enabling of bearer rejected, failed to enable media [ 262.211572][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 262.254153][ T8813] bond1: (slave ip6gretap2): Releasing active interface [ 262.291157][ T8813] bond2: (slave wireguard0): Releasing backup interface [ 262.306482][ T8813] device wireguard0 left promiscuous mode [ 262.320453][ T8813] bond2: (slave wireguard1): making interface the new active one [ 262.350468][ T8813] device wireguard1 entered promiscuous mode [ 262.390122][ T8813] bond2: (slave wireguard1): Releasing backup interface [ 262.406021][ T8813] device wireguard1 left promiscuous mode [ 262.520426][ T8813] bond1: (slave macvlan3): Releasing active interface [ 262.545412][ T8814] netlink: 'syz.6.1262': attribute type 10 has an invalid length. [ 262.563595][ T8814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.578942][ T8814] team0: Port device bond0 added [ 262.584994][ T8817] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1262'. [ 262.639564][ T8817] tipc: Disabling bearer [ 263.369546][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.399473][ T8817] team0 (unregistering): Port device bond0 removed [ 264.096040][ T8813] syz.6.1262 (8813) used greatest stack depth: 19280 bytes left [ 264.349760][ T8828] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 264.420188][ T4612] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.432632][ T8828] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 264.440933][ T8828] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 264.463075][ T4225] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.473998][ T4525] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.483924][ T4612] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.497578][ T4600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.538149][ T8828] team0: Port device gtp0 removed [ 265.158962][ T8828] bond0: (slave macvlan1): Releasing active interface [ 265.214643][ T8828] device veth0 left promiscuous mode [ 265.276504][ T8827] netlink: 'syz.7.1277': attribute type 10 has an invalid length. [ 265.480045][ T8849] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.654709][ T8849] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.843301][ T8849] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.956590][ T8849] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.005042][ T8834] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1277'. [ 268.300548][ T8886] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1284'. [ 268.460692][ T8899] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1287'. [ 268.737918][ T8910] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 268.746982][ T8910] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 268.754653][ T8910] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 268.770174][ T8910] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 268.783258][ T8910] bond1: (slave macvlan4): Removing an active aggregator [ 268.791249][ T4452] net_ratelimit: 6 callbacks suppressed [ 268.791263][ T4452] bond1: Warning: Found an uninitialized port [ 268.803457][ T8910] bond1: (slave macvlan4): Releasing backup interface [ 268.815209][ T8910] device veth0 left promiscuous mode [ 268.828058][ T8911] netlink: 'syz.5.1289': attribute type 10 has an invalid length. [ 268.859520][ T8911] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.867615][ T8911] team0: Device bond0 failed to register rx_handler [ 268.889983][ T8910] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1289'. [ 269.012375][ T8918] overlayfs: failed to clone lowerpath [ 270.850645][ T8941] tipc: Failed to remove unknown binding: 66,1,1/0:4045292857/4045292859 [ 270.892346][ T8942] tipc: Failed to remove unknown binding: 66,1,1/0:4045292857/4045292859 [ 270.943183][ T8942] tipc: Failed to remove unknown binding: 66,1,1/0:4045292857/4045292859 [ 271.168875][ T8940] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1311'. [ 271.188684][ T8935] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1298'. [ 271.345958][ T8948] bond0: option mode: unable to set because the bond device is up [ 271.405526][ T8948] bond0: (slave macvlan2): Opening slave failed [ 271.559304][ T8950] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1303'. [ 273.653610][ T8961] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.663163][ T8961] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.672904][ T8961] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.683230][ T8961] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.783347][ T8963] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1309'. [ 273.803940][ T8970] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1312'. [ 274.175397][ T9014] overlayfs: failed to clone lowerpath [ 276.700255][ T9058] overlayfs: failed to clone lowerpath [ 277.449464][ T9076] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 277.456765][ T9076] IPv6: NLM_F_CREATE should be set when creating new route [ 279.004645][ T9076] device wg1 left promiscuous mode [ 279.374039][ T9076] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.383016][ T9076] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.392270][ T9076] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.404070][ T9076] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.487260][ T9076] netdevsim netdevsim7 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 279.496299][ T9076] netdevsim netdevsim7 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 279.505206][ T9076] netdevsim netdevsim7 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 279.514333][ T9076] netdevsim netdevsim7 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 279.556408][ T9087] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1350'. [ 279.572952][ T9087] IPv6: ADDRCONF(NETDEV_CHANGE): gre2: link becomes ready [ 279.601185][ T9111] bond0: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 279.653206][ T9111] bond0: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 279.691042][ T9111] netlink: 'syz.7.1354': attribute type 10 has an invalid length. [ 279.714754][ T9111] device syz_tun entered promiscuous mode [ 279.722091][ T9119] netlink: 'syz.6.1359': attribute type 22 has an invalid length. [ 279.737463][ T9119] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1359'. [ 279.765372][ T9119] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.774364][ T9119] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.783098][ T9119] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.791828][ T9119] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 280.108004][ T9119] netlink: 'syz.6.1359': attribute type 22 has an invalid length. [ 280.151759][ T9119] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1359'. [ 282.632554][ T9179] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 282.639893][ T9179] IPv6: NLM_F_CREATE should be set when creating new route [ 283.106199][ T9179] device wg1 left promiscuous mode [ 283.793932][ T9179] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.803849][ T9179] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.815884][ T9179] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.824909][ T9179] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.141578][ T9219] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1391'. [ 285.586588][ T9232] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1396'. [ 285.750041][ T9241] overlayfs: failed to clone upperpath [ 286.578920][ T9262] 8021q: adding VLAN 0 to HW filter on device bond1 [ 286.706103][ T9266] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 286.713343][ T9266] IPv6: NLM_F_CREATE should be set when creating new route [ 287.771980][ T9270] device wg1 left promiscuous mode [ 288.229949][ T9270] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.239310][ T9270] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.248420][ T9270] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.257512][ T9270] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.331981][ T9270] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 288.340992][ T9270] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 288.349891][ T9270] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 288.358833][ T9270] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 288.405934][ T9262] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 288.415444][ T9262] bond1: (slave macvlan4): Enslaving as an active interface with a down link [ 288.471846][ T26] audit: type=1326 audit(1758557571.738:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9296 comm="syz.2.1414" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8ce3011ec9 code=0x0 [ 290.659058][ T9346] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1431'. [ 290.665868][ T9348] overlayfs: failed to clone upperpath [ 293.125197][ T9421] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1451'. [ 293.241197][ T9427] netlink: 'syz.4.1453': attribute type 10 has an invalid length. [ 293.320064][ T9433] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 293.498934][ T9441] tipc: Enabling of bearer rejected, failed to enable media [ 295.154185][ T9478] overlayfs: failed to resolve './file0': -2 [ 295.293300][ T9482] overlayfs: failed to clone upperpath [ 296.625724][ T9522] batman_adv: batadv0: Adding interface: dummy0 [ 296.647854][ T9522] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560. [ 296.709266][ T9522] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 298.062815][ T9555] overlayfs: failed to clone lowerpath [ 298.453162][ T9588] netlink: 'syz.6.1507': attribute type 4 has an invalid length. [ 298.483120][ T9588] netlink: 'syz.6.1507': attribute type 4 has an invalid length. [ 298.537313][ T9591] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1508'. [ 299.452998][ T9616] netlink: 'syz.4.1517': attribute type 4 has an invalid length. [ 299.964673][ T9582] overlayfs: failed to clone upperpath [ 299.972900][ T9582] overlayfs: failed to clone upperpath [ 300.347456][ T9661] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1536'. [ 300.495127][ T9673] tipc: Enabling of bearer rejected, failed to enable media [ 302.317035][ T9720] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 302.317035][ T9720] The task syz.2.1552 (9720) triggered the difference, watch for misbehavior. [ 306.351721][ T9804] bond0: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 306.377624][ T9804] bond0: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 306.404623][ T9804] netlink: 'syz.4.1586': attribute type 10 has an invalid length. [ 306.412768][ T9804] device syz_tun entered promiscuous mode [ 306.876850][ T9810] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1588'. [ 307.297824][ T9815] batman_adv: batadv0: Adding interface: dummy0 [ 307.331640][ T9815] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.381802][ T9815] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 307.415303][ T9821] netlink: 'syz.6.1601': attribute type 4 has an invalid length. [ 308.445010][ T9849] netlink: 'syz.5.1599': attribute type 10 has an invalid length. [ 308.458108][ T9849] device syz_tun entered promiscuous mode [ 308.488768][ T9849] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 310.454439][ T9900] netlink: 'syz.6.1618': attribute type 10 has an invalid length. [ 310.475978][ T9900] device syz_tun entered promiscuous mode [ 310.495114][ T9900] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 311.823323][ T9910] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1623'. [ 313.175818][ T9942] device geneve2 entered promiscuous mode [ 313.242286][ T26] audit: type=1326 audit(1758557596.508:35): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=9944 comm="syz.4.1642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefa342bec9 code=0x7ffc0000 [ 313.316897][ T26] audit: type=1326 audit(1758557596.538:36): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=9944 comm="syz.4.1642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefa342bec9 code=0x7ffc0000 [ 313.372152][ T9953] netlink: 'syz.2.1633': attribute type 10 has an invalid length. [ 313.400690][ T9953] device syz_tun entered promiscuous mode [ 313.427489][ T9953] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 313.501425][ T26] audit: type=1326 audit(1758557596.538:37): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=9944 comm="syz.4.1642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7fefa342bec9 code=0x7ffc0000 [ 313.539765][ T26] audit: type=1326 audit(1758557596.538:38): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=9944 comm="syz.4.1642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefa342bec9 code=0x7ffc0000 [ 313.799967][ T26] audit: type=1326 audit(1758557596.538:39): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=9944 comm="syz.4.1642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefa342bec9 code=0x7ffc0000 [ 317.088642][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.095026][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.128378][T10011] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1653'. [ 318.663164][T10038] netlink: 'syz.7.1670': attribute type 22 has an invalid length. [ 318.671203][T10038] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1670'. [ 318.681097][T10038] netlink: 'syz.7.1670': attribute type 22 has an invalid length. [ 318.696093][T10038] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1670'. [ 320.749061][T10071] netlink: 'syz.4.1673': attribute type 1 has an invalid length. [ 320.780578][T10071] bond2: (slave gretap1): making interface the new active one [ 320.789229][T10071] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 320.799903][T10071] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1673'. [ 320.811678][T10071] 8021q: adding VLAN 0 to HW filter on device bond2 [ 320.971569][T10082] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1677'. [ 321.795954][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 323.041623][ T26] audit: type=1326 audit(1758557606.308:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10115 comm="syz.6.1688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5caf750ec9 code=0x7fc00000 [ 323.081376][ T26] audit: type=1326 audit(1758557606.328:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10115 comm="syz.6.1688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5caf750ec9 code=0x7fc00000 [ 323.151301][ T26] audit: type=1326 audit(1758557606.338:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10115 comm="syz.6.1688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5caf750ec9 code=0x7fc00000 [ 324.183307][ T26] audit: type=1326 audit(1758557607.448:43): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=10144 comm="syz.5.1699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf586eaec9 code=0x7ffc0000 [ 324.240715][ T26] audit: type=1326 audit(1758557607.468:44): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=10144 comm="syz.5.1699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf586eaec9 code=0x7ffc0000 [ 324.381917][ T26] audit: type=1326 audit(1758557607.478:45): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=10144 comm="syz.5.1699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7faf586eaec9 code=0x7ffc0000 [ 324.515741][ T26] audit: type=1326 audit(1758557607.478:46): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=10144 comm="syz.5.1699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf586eaec9 code=0x7ffc0000 [ 324.691881][ T26] audit: type=1326 audit(1758557607.478:47): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=10144 comm="syz.5.1699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf586eaec9 code=0x7ffc0000 [ 326.905965][T10182] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1711'. [ 327.620976][ T26] audit: type=1326 audit(1758557610.888:48): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=10190 comm="syz.7.1712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa493b60ec9 code=0x7ffc0000 [ 327.661326][ T26] audit: type=1326 audit(1758557610.888:49): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=10190 comm="syz.7.1712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa493b60ec9 code=0x7ffc0000 [ 331.779234][T10246] futex_wake_op: syz.5.1734 tries to shift op by 144; fix this program [ 336.487150][T10302] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1748'. [ 336.882581][T10311] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1752'. [ 338.158500][T10342] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1761'. [ 341.726267][T10403] ptrace attach of "./syz-executor exec"[5115] was attempted by "./syz-executor exec"[10403] [ 341.975525][T10405] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1785'. [ 342.314950][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 342.314964][ T26] audit: type=1326 audit(1758557625.578:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10412 comm="syz.7.1787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa493b60ec9 code=0x7ffc0000 [ 342.350363][T10413] netlink: 'syz.7.1787': attribute type 4 has an invalid length. [ 342.365265][ T26] audit: type=1326 audit(1758557625.618:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10412 comm="syz.7.1787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa493b60ec9 code=0x7ffc0000 [ 342.394663][ T26] audit: type=1326 audit(1758557625.618:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10412 comm="syz.7.1787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa493b60ec9 code=0x7ffc0000 [ 342.439686][ T26] audit: type=1326 audit(1758557625.618:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10412 comm="syz.7.1787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa493b60ec9 code=0x7ffc0000 [ 342.485998][T10413] netlink: 'syz.7.1787': attribute type 3 has an invalid length. [ 342.497956][ T26] audit: type=1326 audit(1758557625.618:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10412 comm="syz.7.1787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa493b60ec9 code=0x7ffc0000 [ 342.505354][T10413] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1787'. [ 342.521149][ T26] audit: type=1326 audit(1758557625.618:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10412 comm="syz.7.1787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa493b60ec9 code=0x7ffc0000 [ 342.569697][ T26] audit: type=1326 audit(1758557625.618:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10412 comm="syz.7.1787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa493b60ec9 code=0x7ffc0000 [ 342.758797][ T26] audit: type=1326 audit(1758557625.618:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10412 comm="syz.7.1787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa493b60ec9 code=0x7ffc0000 [ 343.222010][ T26] audit: type=1326 audit(1758557625.618:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10412 comm="syz.7.1787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa493b60ec9 code=0x7ffc0000 [ 343.267569][ T26] audit: type=1326 audit(1758557625.618:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10412 comm="syz.7.1787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa493b60ec9 code=0x7ffc0000 [ 343.350629][T10434] netlink: 'syz.2.1793': attribute type 10 has an invalid length. [ 343.366227][T10434] batman_adv: batadv0: Removing interface: dummy0 [ 345.117899][T10462] sch_tbf: burst 1023 is lower than device lo mtu (11337746) ! [ 345.991806][T10472] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1806'. [ 347.614599][ T26] kauditd_printk_skb: 10 callbacks suppressed [ 347.614613][ T26] audit: type=1326 audit(1758557630.878:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10494 comm="syz.4.1814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefa342bec9 code=0x7ffc0000 [ 347.715863][ T26] audit: type=1326 audit(1758557630.918:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10494 comm="syz.4.1814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fefa342bec9 code=0x7ffc0000 [ 347.860154][ T26] audit: type=1326 audit(1758557630.918:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10494 comm="syz.4.1814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefa342bec9 code=0x7ffc0000 [ 348.354497][ T26] audit: type=1326 audit(1758557630.918:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10494 comm="syz.4.1814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fefa342bec9 code=0x7ffc0000 [ 348.383438][ T26] audit: type=1326 audit(1758557630.918:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10494 comm="syz.4.1814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefa342bec9 code=0x7ffc0000 [ 348.434083][ T26] audit: type=1326 audit(1758557630.918:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10494 comm="syz.4.1814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fefa342bec9 code=0x7ffc0000 [ 348.597461][ T26] audit: type=1326 audit(1758557630.918:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10494 comm="syz.4.1814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefa342bec9 code=0x7ffc0000 [ 348.704369][ T26] audit: type=1326 audit(1758557630.918:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10494 comm="syz.4.1814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fefa342bec9 code=0x7ffc0000 [ 348.747042][ T26] audit: type=1326 audit(1758557630.918:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10494 comm="syz.4.1814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefa342bec9 code=0x7ffc0000 [ 348.793401][ T26] audit: type=1326 audit(1758557630.918:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10494 comm="syz.4.1814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fefa342bec9 code=0x7ffc0000 [ 348.889613][T10530] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 348.931116][T10530] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 350.749658][T10559] overlayfs: failed to clone upperpath [ 351.033068][T10566] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 351.060595][T10566] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1836'. [ 355.576245][T10636] netlink: 830 bytes leftover after parsing attributes in process `syz.7.1855'. [ 356.979684][T10662] bridge0: port 1(netdevsim0) entered blocking state [ 357.025192][T10662] bridge0: port 1(netdevsim0) entered disabled state [ 357.382867][T10674] general protection fault, probably for non-canonical address 0xdffffc000000006b: 0000 [#1] PREEMPT SMP KASAN [ 357.394635][T10674] KASAN: null-ptr-deref in range [0x0000000000000358-0x000000000000035f] [ 357.403050][T10674] CPU: 1 PID: 10674 Comm: syz.7.1869 Not tainted syzkaller #0 [ 357.410522][T10674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 357.420597][T10674] RIP: 0010:fib_lookup_good_nhc+0x81/0x3d0 [ 357.426422][T10674] Code: 4c 89 24 24 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 8f 58 51 f9 41 bc 58 03 00 00 4c 03 23 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 70 58 51 f9 4d 8b 24 24 e8 47 19 [ 357.446048][T10674] RSP: 0018:ffffc900033bf390 EFLAGS: 00010202 [ 357.452129][T10674] RAX: 000000000000006b RBX: ffff88804881c920 RCX: ffff888022378000 [ 357.460112][T10674] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 357.468092][T10674] RBP: ffff88804881c92f R08: dffffc0000000000 R09: ffffc900033bf5c0 [ 357.476082][T10674] R10: fffff52000677ebe R11: 1ffff92000677eb8 R12: 0000000000000358 [ 357.484063][T10674] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff11009103925 [ 357.492045][T10674] FS: 00007fa491dc86c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 357.500983][T10674] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 357.507578][T10674] CR2: 0000001b3241bff8 CR3: 0000000061123000 CR4: 00000000003506e0 [ 357.515567][T10674] DR0: 000000000000004b DR1: 0000000000000000 DR2: 0000000000000000 [ 357.523562][T10674] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 357.531549][T10674] Call Trace: [ 357.534834][T10674] [ 357.537770][T10674] nexthop_get_nhc_lookup+0x1a8/0x400 [ 357.543396][T10674] fib_table_lookup+0xe76/0x15e0 [ 357.548354][T10674] __inet_dev_addr_type+0x28b/0x430 [ 357.553569][T10674] ? inet_addr_type_table+0x20/0x20 [ 357.558775][T10674] ? kfree+0xef/0x2a0 [ 357.562765][T10674] ? rds_ib_laddr_check+0x22f/0x440 [ 357.567977][T10674] ? rds6_ib_ic_info+0x100/0x100 [ 357.572931][T10674] rds_tcp_laddr_check+0xd8/0x2f0 [ 357.577982][T10674] rds_trans_get_preferred+0x225/0x3a0 [ 357.583451][T10674] __rds_conn_create+0x9e5/0x1e90 [ 357.588583][T10674] ? rds_conn_create+0x50/0x50 [ 357.593361][T10674] rds_conn_create_outgoing+0x3f/0x50 [ 357.598726][T10674] rds_sendmsg+0xfcc/0x1de0 [ 357.603229][T10674] ? rds_send_sndbuf_remove+0x230/0x230 [ 357.608770][T10674] ? aa_af_perm+0x2b0/0x2b0 [ 357.613259][T10674] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 357.619664][T10674] ? aa_sock_msg_perm+0x94/0x150 [ 357.624584][T10674] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 357.629849][T10674] ? security_socket_sendmsg+0x7c/0xa0 [ 357.635290][T10674] ? rds_send_sndbuf_remove+0x230/0x230 [ 357.640819][T10674] ____sys_sendmsg+0x5a2/0x8c0 [ 357.645573][T10674] ? memset+0x1e/0x40 [ 357.649546][T10674] ? __sys_sendmsg_sock+0x30/0x30 [ 357.654568][T10674] ? import_iovec+0x6f/0xa0 [ 357.659056][T10674] ___sys_sendmsg+0x1f0/0x260 [ 357.663720][T10674] ? __sys_sendmsg+0x250/0x250 [ 357.668474][T10674] ? __fdget+0x18b/0x210 [ 357.672701][T10674] __se_sys_sendmsg+0x190/0x250 [ 357.677530][T10674] ? __x64_sys_sendmsg+0x80/0x80 [ 357.682443][T10674] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 357.688409][T10674] ? lockdep_hardirqs_on+0x94/0x140 [ 357.693593][T10674] do_syscall_64+0x4c/0xa0 [ 357.697986][T10674] ? clear_bhb_loop+0x30/0x80 [ 357.702639][T10674] ? clear_bhb_loop+0x30/0x80 [ 357.707388][T10674] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 357.713262][T10674] RIP: 0033:0x7fa493b60ec9 [ 357.717659][T10674] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 357.737359][T10674] RSP: 002b:00007fa491dc8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 357.745788][T10674] RAX: ffffffffffffffda RBX: 00007fa493db7fa0 RCX: 00007fa493b60ec9 [ 357.753753][T10674] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000006 [ 357.761709][T10674] RBP: 00007fa493be3f91 R08: 0000000000000000 R09: 0000000000000000 [ 357.769755][T10674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 357.777710][T10674] R13: 00007fa493db8038 R14: 00007fa493db7fa0 R15: 00007fff9e9daca8 [ 357.785665][T10674] [ 357.788676][T10674] Modules linked in: [ 357.795915][T10674] ---[ end trace 7cc10b590b8fec99 ]--- [ 357.801396][T10674] RIP: 0010:fib_lookup_good_nhc+0x81/0x3d0 [ 357.869606][T10674] Code: 4c 89 24 24 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 8f 58 51 f9 41 bc 58 03 00 00 4c 03 23 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 70 58 51 f9 4d 8b 24 24 e8 47 19 [ 357.935832][T10674] RSP: 0018:ffffc900033bf390 EFLAGS: 00010202 [ 357.941939][T10674] RAX: 000000000000006b RBX: ffff88804881c920 RCX: ffff888022378000 [ 357.965879][T10674] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 357.974140][T10674] RBP: ffff88804881c92f R08: dffffc0000000000 R09: ffffc900033bf5c0 [ 358.006409][T10674] R10: fffff52000677ebe R11: 1ffff92000677eb8 R12: 0000000000000358 [ 358.025882][T10674] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff11009103925 [ 358.033951][T10674] FS: 00007fa491dc86c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 358.055857][T10674] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 358.065866][T10674] CR2: 00007f8ce3239358 CR3: 0000000061123000 CR4: 00000000003506f0 [ 358.085896][T10674] Kernel panic - not syncing: Fatal exception [ 358.092330][T10674] Kernel Offset: disabled [ 358.096773][T10674] Rebooting in 86400 seconds..