last executing test programs: 7m59.463791196s ago: executing program 32 (id=31): syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000400)='./file2\x00', 0x8, &(0x7f0000000000)=ANY=[], 0x1, 0x1ce, &(0x7f0000000800)="$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") quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x28011, r0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x3c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) r1 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) write$binfmt_script(r2, &(0x7f0000000180), 0x4) 7m48.283202256s ago: executing program 4 (id=77): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r2, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r1}, 0x20) recvmmsg(r1, &(0x7f0000000b80)=[{{0x0, 0xffffffffffffff6c, 0x0, 0x0, 0x0, 0x52}, 0xa}], 0x360, 0x120, 0x0) 7m46.570281035s ago: executing program 33 (id=11): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4, 0x6c033, 0xffffffffffffffff, 0x0) 7m45.352348955s ago: executing program 4 (id=84): mkdir(&(0x7f0000000000)='./file0\x00', 0x2) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006840)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x81, 0x0, 0x0, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x10b}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x2, 0x0) write$FUSE_INIT(r2, 0x0, 0x0) 7m44.807527578s ago: executing program 4 (id=86): mknodat$null(0xffffffffffffff9c, &(0x7f0000002440)='./file0\x00', 0x8000, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002240), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000040)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) read$FUSE(r0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r2) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0xc014) llistxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffff52) 7m44.457121423s ago: executing program 4 (id=87): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x3800813, &(0x7f0000000080)=ANY=[@ANYBLOB='iocharset=cp1251,unhide,nojoliet,nojoliet,norock,overriderockperm,dmode=0x000000000000,nocompress,check=relaxed,norock,map=normal,check=relaxed,cruft,dmode=0x0\x0000000000000009,map=acorn,\x00'], 0x9, 0xa51, &(0x7f0000001240)="$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") inotify_init() syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x120c40a, &(0x7f0000000a00)={[{@noblock_validity}, {@dioread_lock}, {@nobh}, {@errors_remount}, {@inlinecrypt}, {@usrjquota, 0x2e}, {@sb={'sb', 0x3d, 0x7}}, {@nodiscard}, {@jqfmt_vfsv0}, {@noload}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@test_dummy_encryption}], [], 0x2c}, 0x81, 0x463, &(0x7f0000000480)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1887008, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x206e) 7m43.867384871s ago: executing program 4 (id=92): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r1, 0x100) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r2, 0x7) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f0000004d40)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1, 0x2}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}], 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000200)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 7m43.419399615s ago: executing program 4 (id=93): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x80200, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'pimreg0\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r5, r4, 0x25, 0x0, @val=@netfilter={0x1, 0x0, 0x7}}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 7m42.623165033s ago: executing program 34 (id=93): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x80200, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'pimreg0\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r5, r4, 0x25, 0x0, @val=@netfilter={0x1, 0x0, 0x7}}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 7m11.527515504s ago: executing program 6 (id=229): r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r1, 0x2) listen(r0, 0x80) r2 = socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) bind$inet(r2, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10) listen(r2, 0x3a5) 7m10.488615876s ago: executing program 6 (id=232): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d2, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffefffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x20008841}, 0x0) 7m9.63486099s ago: executing program 6 (id=236): sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x200000d0}, 0x8050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000500)={0x2, 0x0, @ioapic={0x4, 0x0, 0xc, 0x5, 0x0, [{0x7, 0x7, 0x8}, {0x7, 0xed, 0x8, '\x00', 0xff}, {0x7, 0x8, 0x3, '\x00', 0x83}, {0xe9, 0xd6, 0x0, '\x00', 0x4}, {0x7, 0xff, 0x6, '\x00', 0xb9}, {0x7, 0x3, 0x3, '\x00', 0xb3}, {0x8, 0xab, 0x8, '\x00', 0x6}, {0x8, 0x92, 0x4, '\x00', 0x8}, {0x1, 0xaf, 0x9, '\x00', 0x8}, {0x6, 0x27, 0x0, '\x00', 0x10}, {0x2, 0xfd, 0x7, '\x00', 0xc6}, {0x6, 0xcf, 0xc, '\x00', 0x7}, {0x40, 0x9, 0x2, '\x00', 0x7}, {0x0, 0x72, 0x6, '\x00', 0xa}, {0x8, 0x84, 0x2}, {0xf9, 0x8, 0x3, '\x00', 0x14}, {0xa, 0x0, 0x3, '\x00', 0xa}, {0x3, 0x6, 0x1, '\x00', 0xd}, {0x58, 0x4, 0x61, '\x00', 0x1}, {0x3, 0xb, 0x2, '\x00', 0x5e}, {0x5, 0xfa, 0x48, '\x00', 0x9}, {0xf, 0x2, 0x3, '\x00', 0x1}, {0x5, 0xe, 0x3, '\x00', 0x2}, {0xfe, 0x1, 0xa}]}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000240)=ANY=[@ANYBLOB="98"]) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0x40000070, 0x0, 0x6}]}) 7m9.041050988s ago: executing program 6 (id=241): r0 = socket(0xa, 0x1, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000780)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r0, @ANYBLOB=',discard,\x00', @ANYBLOB="3a8d75a267b001234a1e919d26dfdd0d8b316510e9c9cf606c6db6505304ee2649c88f03f9ef98bcebc5d721a7081b3509e543147eec5a0fa6d6eb57eed4197249efe6fa10323b6cf959897b3f1908c82c14974d31b0d080f8c86c196c0ee8eb707a73d201bbe15a02a37118aa1d4aaa4d2484b05dbb73e44387f620f46a3a2e06436e6296b05bd07717accf667e0331c0f323a7529f6b471ec30340347d3f405257c8bad57ddef290ea1d376a20", @ANYRESHEX=0x0, @ANYBLOB="d3d6d055f090bdc2587c11dcd402f29060", @ANYBLOB="0002001100000000303030303030303030303030303030303030303135322c796f636884c178f94be4ee34617273657439697300926f38", @ANYBLOB="51060c4f1adb6e795b70e7edcdc5cd30e197bb9cceacee351e08a6e2ee4650101fb28229b16aecf828a55c8aa0efd840e40fef6612e7b389eb304c41e39360e1f5cb6f78bd7100bd30bbd42aa24b2dc9171d068e92ac848e", @ANYRES64, @ANYRESDEC], 0x81, 0x152e, &(0x7f0000003fc0)="$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") syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x8000, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1001000, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r1, &(0x7f0000003440)={0x2020}, 0x2020) 7m8.71529768s ago: executing program 2 (id=242): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x21, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1000) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x40000073, 0x0, 0x81}]}) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}], 0x3) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x2, 0x0, 0x0, 0x0, 0xffff7ff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7m8.439359307s ago: executing program 6 (id=244): mkdir(&(0x7f0000000000)='./file0\x00', 0x2) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006840)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x0, 0x0, 0xf15, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x10b}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x2, 0x0) read$FUSE(r2, 0x0, 0x0) 7m8.334292188s ago: executing program 2 (id=246): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r6, {0xe, 0x7}, {0x0, 0xfff1}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_KEY_ID={0x8, 0x1a, 0xfffffffb}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 7m8.157660645s ago: executing program 2 (id=248): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000093c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x2026012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x40000, 0x2) getdents64(r2, 0x0, 0x0) statx(r2, &(0x7f0000000b00)='./file0\x00', 0x0, 0x400, 0x0) syz_fuse_handle_req(r0, &(0x7f0000006380)="52ab4071b01d98cd768757f6fc37906910a2d2be860f5a573cd4bc49e712dbe1ba6c7694fe5e9373009fa05870d8ec3b24443902e52ff513921a15cb229a68d54710a429510190987eb58cb21232a334165e4695dbf687c92eec05c0e8f4375515c71578363735bf417968e1f72f8607bf32de6207b62cd9f6cced7fad4dd0587279590b0e55b2c411e5d02527936399c69e1ce6c95f62037b32d04fe4ecd86b292b4832a5794a25ea167de5a03b4bb7ad29a653ecc141202c6825b740c046dc21b6928146daa0351ccb02bcec7574433b4e65df87378f1106892d7a193db2857200ac1cb4ef0ed82fff7676e024b178378e4fd0b5d00e7816cb7e1455dce3d44f88e18b979de4c266b5657db947d66ecde7a08170e0f8852c7bc354345c0fd9c49fdfad8b3be1d51aec3c7c0f644e14f25cb3a3f96d27a18f05c3672fc112e47a2455fc0c4d9c72f8c80582cc1dd7a6828e2b6a3a5ec8305a3465c11703ff69f29f85c5e1076556d4bf0c772f482803a388623744361157b7556ad5c5d63734e18910ca71b4625d9ad56006c5b42b3749c3b7765bef733de99e4ddfe4ccd7b0170394d61d0663451977a2fd86030c5bcdde6d3c19ddfebf8082a26b5436846a1d0915d1a5715dac976398ba36e001583ac1424d450ae5ed95d77a307b18c2d3de942568123f6835a5b9899dd38b7b223c9c6dba1a176b6b89dd3a49941d721c07c59e49940c29245aa2ce06bddbe18597707bb5566cc6323ef9e91f6b0fe9515f1545ca4945bc136ad30d36291cc25284303c5696c5e51368ea59b11eb7243deca104d15635b7799bd51730d748bf9229fcc15dd1399bfaf295b8e341a0b42951c300db87d32c3fb8b22a61f9a86d100bc45d0bd43c5ea12a9009f3890a29e270191d6095d8aa11f657aedaadb2125b781a8bf5f966c7f478b0a082a02e8a7347edec0977eb88f1f276515f128700ee0f5e9970cca4d092311e378bf1be592122e256a3734e9c4038e8649a9ada3d449dfb6c1c88d14a547985e34507063974d294cc50a2f8cff7d366fca1c4deb28971fb7aefc87443e46776086d8aacf7a54d85cf1233643d558206c3da85dfd52045ad188a0bd52c558c805a0ec603b8023c29f1c18ff7a2e2fd41b6d694e05224a0c5f5cd01d957c39d984d2774dba13552314cf146a49e1412df613ad6cf305ccc3c72b9a165adcd4419ea6c0cba1d0e1a0a8759fab6fb02af5713722a170f8210f24570bb7f5858ba7b075fbe088231b0ea72e947b611798e670d1858d81f1c3f23bd16cebd793916babfde9bc0978c7fce17974296d9c0bd7e326d9f77d40d0172582768401ce3255838696312f1f38d95237b7731fba4513d9566d31ac1fcaa841a9bda84a65495a2bd2a70d10e1fcdadc5ddd0ea2fe529d98ba9fa323d82378a0a283f1535b9962046e06d9c8fc98d06d198f52cb95c5b0a738f719607c484bac1e8f03123bdd824711710094af2295a7fbdfc6982c4b9243b90efc75bf3c37e7637cc75e537b9787231ef57b331b8c52d070d6a0efd7c263521b2effdded2c0eb6709b21027f24c28f65848ec37216a8507c6ca890870131fa748ed40b47f95c0dec6c1e83afb99767e8213696e9756bc8fb67893c32bc8b2307b815b0662ec4108af2dc97964e7182ccf7c150bbd43f4144c8537140e2deb96265a52c088412be9d1de90cb557661740e54a126d0024edffa947fd49550ba3111d022fcb8eba0f8b8d5d326355a301f71fcfd3116c7e5af7384969cac447c6adc832c873a58a2bf4398dea796ca5b2bd784a6857024948214c7072830e78058686d8a9e2827769e3cc5beeb7b9395644dcab82aa7da5e35378d715ba53dbe0cf14e4de8ee9577078e47bdfb499c6a4296283b2e8790cf182f9c6db89db519360fa1e0252c33b5f67c514f76738593bfcdaa954b64a1d31ecb4608932eb527add52d6831e53af591ddf2201689ca22e5aa00f07dde705750d568a4e67bb2700a5ed53709348d24be680e3b305b79ef260b1db6ae38aede88ad4d41db59c522eefc00d9e24730fd967afa537c2ef89af75044696cca109a26a0cce0402369e98c8c1dd7b21915730a5f53ed394f9daf793a9302d3e72ad4e8aeca4e618d437388f791193c55d4deb46dedbead576b22182a730fac5551f0e5561c589b26c937fba3ac92a7f8c84cfcc230aa2d806850e36a596018334ca3edd0386a102811fa687f0fc762afc17639b9dde107fe63672fdd006d1b95b47348f1bd2ce7d4d5466575d4aa73b992b90e2e645503d9e39686d29e6b6e2cfecbaa2236adab80e7150456d56e1905268ac350ef04e0b7a0cc38b72020918b64f7f1fa5fb7da3ac45b11ad06f3b4fb55a824c5ba9f5d5eede35f611207f0cf62953229770bb857919aa21609fb886e2316e73abd74342881bb7a37e838fb4ccd37c3610402c38f4da0e2e591f9e8028aee60e88806dcda99e76b9ff58c6e08d5a42982f216180202cd2bfa959a64c0293283157744b249a66f43050d9dd6804ae92a39a402cddb420249727c3398ed813bc1c3e7e8ae12873d455044d362a946a747914104407d3a9962b48d561903d4445bc3a35e9f6b59306b657c41dd2a9471eabd4f7a8d4b7acd43b20a87a7733874b7e0d065c3b230011dea1b5a1b984d14cdd6358c85eb593cfef45d3d9396a29c0870e121283e164c63ce0eff15f4645bc151c24ba91d75acbe8605080f27026c8638b75b0177a507f23ae9357b45ca6ed7c032733d137724f300423734238458118378ed7f3dea50684cab54602a4141e12e4250a2e94f2f91a89f191d35425e15b6821a8c8eb1334ae3d50ed7595adbc4c88c6f828e4ba44641d7ffc0fc2d940d38be237192f128d948b143d2139eb1e0d057539d786b946b43dfefe4077ee163248d2030c6753a538ddce9fea888a7db8ea4270b17fb13c96327f6ec771c50069a7e7b54de2db3d3f6b7603e43d8bcf3261204ebe2dee127fd7eb996b20848ded77cfdd2f96e93f8b7c1b7ddf9641dcad3386b8b8cea2ba4ca7cc352e3e449d6fd81620ded3b3da658557571df39906c40daf14a3a387fcb739570afd76a9d159f32c9490d85a58abff4209ec49a4b5d44659f30d6bd0a7cc7e55cee0dfed99c3c16364c21aafef6926bb16432ef2f7b4830246e6653eea63dbac45a86b40592d032230842b588e6b2c831a5822d3458756d5d5550eac3e050d7890a2d017ea07e68eacd6f72ab065848c7cf22915fbd8443777b032c933ee34439b2f62986ec9d458b7c1f34e6cb547cda3cb23e4243672751b07d66581fe487c4ec8997e98f64948102a5fe67b3bfef96ffc21c46d3f9b0977e56ab58ae69901b2067765bd16b6ac54e925221e7349a553ae19b328282d949d814fbb70575eb5aa55e3525e1b1bce77e13c9307be99dde6d998a2bda1802c2e048879ef233af6e78452495540f9f795da36aa4e548b4739b4448555b6519c015c4dbc85795469c94d638512b2daa285160d7dbf4982100f53b21cbb0d2c89b21a65da9f353cfff4707cff79f5c6a596284b2b6bdb53dd0b9bee27556541cdc417eef740fecbbd858a8eeb46c10d06ed4fa57dcfdca8553ced59bd83fd3f2a6fd459365ab49907deb537ba3e23672c3b4655494dfea37a463f3370bb42feee874cc4ec68e6b6e9a107e1154f8c582b3e061b1b03bf5f25f1d46645bb11cd316104e4944a88abeb0922c56297e921d22296f7f84a05fac632fbe19562c29be073eb926be65c6247f5cb8c2ff5710a3090f4d4f4e45e15fe9022d0610b386d9c7fe79269393a3df89568ae991c5599456a00dfb5b94a993edb2500217bb67148b5c3c8592a163014b26a38c262cd762ebba8357d380194c2396f8f40225649935b43b8c7ca5705c73e3d985f8c93134d5895de4030148c841de80983c38794eb4939b047e295225eca7245bf714891d65e9c6237933040c599cf3f34cf8d2b001459104d4a4e2277460cdae3815550a3ec7a7448af817faf4afda83f6ec135ae1290854fad29aaf922b18f9c9dce652f62a2a543578579c131c3eb26ac96622d703ca259201137ffc8c1ec505da1a06a18683f9509df0528dd3238b13aec20998255503bd67e4995f59594405f472b43b2672a0f212e1a160319bfa05677e61538775a56f33cca64c739a1695744808dc6dfde0da538239df4b73d1bd8a76f012ad4b65aac424c5b45428acd482252c621dae5d6cc73bb93b2cc1d60fa906203a00b53b5d496b73f182cb1ed5b4e24b17497e6b0865434fc90c6e055f11ccf3141d10fbd637b0b741860316ec4cd7f3ab57fe40e9c6dec6c131f079b65c2e493329c48f7b0e7aa0a030d4451f79a2fa01621c6df96cc5e21caf82995e0addf12be4255137ddc71741fb7fd12352566cbd65dcbe11af106b68500d8e4f1ef8c29474199e6321332ff4bc0bf21f7a9ad4f7d15aa7225c87664ed128f705d8ccc003e719e8a5992d6d3de14ec76e4a2086befe79eae2a89f89fd529164f935e25a280775382e5e807bb2df42eff3cbe93141b53826e164252cc393d7f5c8b2485e182ab74288651133cb0ba29d5050a89919812cd006097088f4736e7ed8fd412d6a1c446cc333ebbb16f4efc02d1f4d1030874f04813fa955761f88dcd15c8da94a907012ffab44cca654f6ffcbb8a5239422196b8f7fcb9e6991881ad15360624fe7dc90e14dc72aec65be17a68ebf1a03b781970f945a9e379824d76a8312d8af3def98126ac838c6f6347b62903fb37a89c8285380a608f6c293bb099da10a00586a5ae864d5fd138cac05a3d83c5eab5a9893d2672e8ccbe8b057ebf22b9c1a89d62f4b0583fcc61b80610c5ae20a88ab2ba4e1bd93221d186545b381a401b0c65274bc7d5731b4154c5b41df87d984535caab185fa9498f092adb959edc0350bdaca28f4e422b8e258ddd0e3b8e9e59b2307e079b89f06ef97b64b135940bf6e85ea37eaa2cfe24eb774724ab17c54ddbc367fa4d54becb1eff428ab80a097a52dbe374ee5f5c811351e511a64691747714a6582e423181925b48942a9b8d0e087c430b4457ff2913d5d9cf780c37ffe4549571d060357ae3bcdc0acaef91ab9f3dee17a084c2003b7fa8b4ccf2a212ea9f7fd55ba924534fb948c2f8454d18b859f600338e78ff9d88007e1904c62fe985320c72a972e03056362d1226f8870ea13a14c08cebca02dcfd18eed2cfe36f6d09b10e89fab49b4df6bea4c0eefadfd6382a9d4d51e9de9889709ed61678c856324cde8bf82c2a39b7a3aa21c4e9ef1bfcce4b5ef50a3e3b128542ee5928fb3fd26b05a32f3e1d95db59ca4bbd1ff84c9a10de7f58154b705006c99173e38596792d7749f2274b3b0a955a4da84c915eb94ff20872a2fa1e3bf11ddc256d0cc0f235c7aa988a006fed099797d94ce8af9af77b5b02fbab6750431dbc23afdb08dcda13d3af26110165ade25eae0c36b087d42d81cf8466f69ed0dbddf8169be741d8ad07f6ba8df885618f619bb9240a8a3422260e63c33c74d32521876ebf7151f2ba1a1791813aad46843e0343f8f7aa0e8f217fcec1aabf121eb26270908f9a8fcea4067e1779853e4679c6aedcf083a6449ae95e0c5176fab9ec798b8d650e428b2ca97b258f3253814eebad1e66ec7facafc4b2fc74674b6984e76e631c427fa7180d701fbcfa353f0486e68bffe02a9ac214d7442e6b898a72c67fda365863530050ee6996a86a56e49de90ad16e5e90928b56ed0f490312e292de173c6708f93b878bcdc5b3cadd112cd319af503077f338be17dd6e188835e18b8d56a736716bb9fc67101885e729a30bfe7e87870701f88aad583610b5b79c89dfaeaad528ec5cee83b97156eae5585af28f5c3037f9890a1c631a3ba820d612cdca52a88663b790cf0bd09f6ea22f8fdaf27c964ab9433b775b0a1542cc3df7a88e797a7eb49c537b9db58a01b06df1ae8e974b1480a431edb03e4220e89cb14e5cd5ef5f68fe391745146f4ff70531d5737531d1041c3703260d4b68576ec53250736f291f8ff51922918962620be60f9d31130c82e2104d0cc5d9080ee7f64395a0fea49576b0253aed104a797da6460250f5b0a4ea2f76f31747407d6d564f4d2e3cea88bea580a4a2e334d7cc81fa13fab267ee45c5c6e04af6b9263a2802ec1a55e397214653f33738544545d9d8176785a5d970f56cc716e2276b1d38a2779bfec1093943b5b7fd806e6e042dd898fe9cedab9f570cbfba8f230052551be4b523dac0738979f96ca1c3716dcec268c1ce03996f63082f5efe5b82520a98b7dc8079e9ef644ced08fc63f0d864a82062970c4e49034a1a7e9167f9d6f9d8f06744430b3b323a7311cdb3bc91b0cbc890f8155ddcb1659c284990c765c4a327762f5bf8a5ad71a07c91897bab67ccdc5ef28098de41afd844b04bd4d2ac65aa2cffb70300f999c23b0c42deadc4e6d74bf5899df38301ac35a70cc3f4fb0b4454dc125a201fbeb946a8962c1a7bcd2bcccadcaf4bbb29f7f00c681c463fae3c83a1ca656e5572b1258a0b300cc617f306b528087e7574bf7cc1ab2ab51000308aba9606c7ea9c15316dc6b544181a00c62c915c5026430ecb1063013c1b6a4f91e7d875376d2cc08a87a04fd36c046c252d17137e8b66e801e4d7a50ceb15699f4339bd95d67310a536280e9e4079104ee39272748ccc72fdcea3f07ab81343058b83692cccbcbb615976b044c98935209f3ddc15479544aec9ee99df6f7b2e71276bccfeabcd463b86fbc05740c72fcdb0e8af241d087bb5bf6db76343e63656cdb72cec59ef55625660a9d6712b0ce531706b34fea9c8145be4ef9fec11bcc69b6e87c71ac8260b759e01f5ca7e708635e02e912335bc04bf0004f14cdc309ae5ea6ca454edcb81526e740255ccdf4f8034ac85bb52488a3d88e326506bc8e1bb5a9eb893a051dfc73b18c10b2261263b6f70263edda36c81db241b9365384db0b54ff1e0daf5f1ffe83f83262f64f209d61e4afe5d77c733bdea77e6481ec218c44869c27e9e10662a2d8ee5028cff452cbab3029d8a02dc91354730b8051f0fecdbb63a44b9f35c2ca82e534101dff33722b0398c773a8459d91560be3e590b6fb1659f4101f6724b5c5891d84cec74b0cb2ff6cb1c3497194dcafff893b037aac81360fa017829a0362c0b7458dd630bf02026646de6ca5047a3bf718241384cbbad7f61cb85d81886905bb4b2b4dbe93b393ca6e06f9c3d03c698f1f4afe22e85cc02d3a25d8e2aab6cbe292b331b7ec8be443d227bcd374110680ff9df069335a61f8d9d44dd1c26b81d27a7be7b494e21ca3fd608dc8b2013cc5f874d38859f8fd4f8245bf2bdf5afe8cf22031a50010b2be8cb026a0c3e6f3152b306cc6f3463cdaf72f1c273baa08fd95ed3ea1132bdde81fb5fcb80ef3d9f158d47854be4a54f17def7c991e55d61418e31a05c4d0209490fca566d58c38892e2f9a8686e8fdd0a06fedad43d3529dce36b701ede4ccc7742e6ce1758477dfb778026324691931770425c95a78e3400378752aa2f54dfe3f7c01c2a2afe3f4e79d450cc38ccecd1c5b76d8a95012ce492218f04620332b410957471e7f60b7a35da10a8d7d70672e2775b5c94448dc8bfb5889152a2d48e9961bb458def52e47ff8ea386b22ad999f88ec770dc23b74f53b4f71d8245fd791e939bcac12d9c9ee331cf31058e9e04b4ba6de70fa924ce5bd2d6726b2c590fce35bf7af327c295a07fd86f465e8e77a2d70de0e843c00a2333b78f4ffc60629b07ab5aa0b0c48cb0a2e88d9d65e3051c29ae441fa5ff04bb8b705722372f27450c2fdad78b2a98f3ef6f05e3ded0f3affb295e07ee2ed94ecdfc6a35cdd44c13aacb54c237d489efc3fb878a0cb6a97b910eba63d5a0afabcace0e5493f2d1a4ce381ece836492f47743e50699999d753ecc4487e3f412e6d1b737c7249541c5a1136a005cf6b4dad813069f14434aa82d0d0da79ce5866ba8aebd8cea212a779809927844d2188e75050b4c39cd5f6b311f1618953abb1e304ea6881870b8069d9241abd33cdb62d780b1f47961b6d7a01c04cf7d78c8eca1c583c4d0fda5fe788aaa519fc86fcd7dbb333298677fe7b0df7546d6ba75c6586b63538931b534754b1fe768425dfa8d6711f047d535b06cca16db732b40736536caa941634392e4dbaf81e59e73d844e4695471ba74e770eb89d9637d4bca98ef7fb7a16a801a4fbe0f511d195f4515c142a60fc503683be6765dc0cdc1c891d72664732b6ba533a00293552d7427008918634610e14e3dec8ef4e39c48acfa3c13069a299643db14587d101124ad6d57a03597c5052f73e5e6bc9d2a2d6bdbc6f8d3668972b78aa2928487535d88cecc18d6bd61265041f38275b9474b8db818fa584a794a612ed3cefa0d7dd8012af4db745635cc2ede47e3547a1d5ef3531da0e420bb6b0e1ebe9c658621d569f62f43f32cfe241ab442cef22e2ac3c75792e5607b81fe9a9c09be6b751eb90469df1d8e2d222944fbe627439eb79512f1aae956eec1f4c84b368b4377110e7143973c59484618fd00cceb58a5b3f945aeb64f96ae8088aaa6ebdfb19bf81ecaa20835dd46180d572730a75212283d92fca4103e0672600a13958727224c7d63b11e748c487948945477c0a89259e9ff9857ab50926d55ee7d18c3191e7b8f371cff1ff1d68ed8926c3a1c46ace960f1a9d78d6d09e3d9affbc8a81e902719f06763510489100404c64506672436ff2856dd21abc98f05f4895fc206da4b3cc2d09e1e94f2e7ee882d725ab2ef1f64a9b962bb000a98fa6e4148473f4a2ef7370759bdb5286a64981b2c66384a0d8c7e18b3bc2d145676bd2446bb12c546b939cd62de1f2ddbed2fbab22254a5313ce9530f6836ffe529c6d63d91fb7f7a1a6d93a39e63b8a59894e5500609bb3ffdb037c65b0d56ed449187aa1e8a2114817600e1e9e8fd2d68398a1c32b66b11be7736065cbf0efb4d83a3461810947023caf90e9557143c22cdd52a70fa5262c0e39a7bc8b6f08b0c2d7003f8a54605312ee301ac1c0a0755c6da07f12697694528279bb7c15c56a828517b8c3a600b2f75b3eb7e9d330c4c1496722569eb51f0aac88ec8c430f5b537a5c8d85b94995e00b16f4067bcabdd43e01753a5a222f836fee4a4b9be882aca9d86ef6bc413ccd101599753c50fc86e542804e569779ad2fdff2d243e9b22ef3badb0ed8ca8955b4b308a798e3ba7b7b0a7bc745a10d37251c8ba2898773c1b0289ad2fd17d3367dd2f84bf6bcc14080db9910c18de6e6d8b3487be1f23b3b75381b58d2a91a9f3df7aba870c7b08f9d3569d4cb5e4dcd809e642656afcc804424887a7d425162856549589e1383f4869cb89b7c82a831574e364841808046e04606de80c61d4047ad7d511fc09890cf95c5c9e593f4be0e433975b9d93b1fbb2b9b88d1eb634e8305d79fdda69aed059f8cd9e629d9e2b1ac32a8510941760a91d9948b669b5a1c93d1b103d788909af65716ab47e99f7585cbfd2d511995a5ba3317220315a14361ed67b48961a9704b9cd9c55240575a88fc7a0379fbfc336fd47940d836801364f04b63443a0e8344114d5248bd0ec396cdc5308932f311672ad96c096d3a410705cad1087006a8e5d3b9c4e3527ecc9992f8e57663a555055f9db3b0f1575c748e9b02983bccfe3b9ba009ab70fc2a79ca7cfde82382c3f8e6863926e1daa3ae7056f40582b82b7649c2dd9100f6938be8b946f0bff1685fbc60931e39716b813471d29b19deabe0a6a292809110bcad6e52cfe419a10b718e77db3dab64cc1ce1c958806cc3b18e470249edd2d6aef8c1c88f927ed52177209620f85689839af1a3ec13361ec8a1917ecaa764c501d92f30b9c49a6fa0da80bb770e6ac7cf80479cada2ad873614dc9c8db665a81b0eedf33d2f0bf6b1291f32da78499b861272cfbad83b355355c6633e6fd2d308ffe1334abea7a45b10c9ca96e838b815b79d398fee6d60f486a184fb8b8ccd289b52a1a353b529ef17ec8ffaf1b06294660ecf59e20d48f7e553b6253d5e21375f46c284c4b72f87c94a746a82f135af33116360a863ae9d3fb03c37365e06f72f5109de77d732e0c64936dab0c77ed99bd7df76083130dd01607dee7a051234b40d26641dc68f16b749794bad2fdf185855ef2a7063a6e6654649c6190b3bf3203338792510a0f83a08b4449b50684bf8416fec1396f561da029d28d929adc7c9e333347c6a1654df702234d7e7ac727f2a3f01425569f566a4664f7bbc691b09060165e8b268a2d1adae87e0f4f8ade2aecb99d80c01964e02f56cb46afb37b8bac3c8fc5e35d73cfa41c9d9b9ef76daa0e51ad35f32aaa22775128077ae3de1b4ca8aa984032b379dc398112cd03f05f3172b150d25657be1a1d23b491afb80e0123945de30b8cc6ea48e5bcd7186279aba06bec34a6399169ccd1781c4cc6cf851eca3ab7505c8191c359470af1dfcfa22025e8e8018c4701e2a3d3f84186c94cd55e9bd96462c9f242eefd15186b35f1fbeafeac4cab2575314cca94a48d2d543c75e03379fccfb7f60a7f3aeda7377374dfbdd4c27320cd6455591f3e434a198509c04ff551e3aa5bb525a953f0c3bc5ce4e5b06070b8202a2d5e89459d0d1ea231af350db73de8fa3fae088860cd26e81d2ac63e6e9d3e79c5ac7a3f17fab2e5e18ad3d78b6e433fdb33dee96396ca6e6ff1b26e768bbb4e92eaecbb8a61b6ab9b532f01d2b5dae738d58473e857e526d3820ba27f7d42b8a0db947df1d092036271bce5e74bebc2a2bd6df2d7e409afa748b31967f2fad14513ec671776ae568ae631e6b3d63bd84f5dfa78c69a688305a14900bb74d14a7b261993a60aead75b7786d97f5447b0feaafc3fa173bfeaf5332b58ba9d2c4518d1118b0dd85d3d475cf628e0526c1d615f2487d6a3635ec3afca0775ff922b5cebeeade2b7d55bf252ece027078e7970cd46b8fcc0417a091ccd200c59c292fb0648f493c22afd394dd61cd5074ddbfc2b500fcbfbffc5a96b1d9c621cda498af26d3a8c9354b939283a4adffae2882fcb3039c42ef9731f51e0f078b541d1d176105a8896c912341156006579af09cd0db113ae2d51cbd0f2f3866b191ad2a3fe663504486e43b2f90d39bd5a65c0c8ef6672a8dd8a3084238b21c617a1b7085171e87e832198748ba526e90b0e976de40b5a1226c85c8b7e10dc092a2763dfca41d8931243121c46d3fd7a97ad525d492909f2d77c9c282dcede989a726b658f59b44da3975448d93eb71ea4e51202f0e97405b879c92a7c0330ba4a1f3d967eabeb575bc22e997a00268907c3ec7267dcce7c84d7fa43db54782828ea314c690ecd8148969f15e2802fe9fe9cb090111fb42984be14fce59981424a3999a591cfdd3c1f3874a6dde51a6c1a12e4c9c4e01572000833760deaae6aad5e37e14e0a7384ddb402336f4632d32210f7f67bc9001e44f3aef7e571c6b886a3dc6756534f21ccd0837a06ffabc453135980ab87c6022b318b6e78", 0x2000, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="10"], 0x0, 0x0, 0x0}) 7m7.19662193s ago: executing program 2 (id=253): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) r1 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') truncate(&(0x7f0000000000)='./file1\x00', 0x3) execveat$binfmt(0xffffffffffffff9c, r1, 0x0, 0x0, 0x0) 7m6.963656742s ago: executing program 6 (id=255): r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="0503000000000000f6", @ANYRES32=r3], 0x1c}}, 0x24044080) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x121000) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r4, 0xc0045540, &(0x7f0000000080)=0x7) 7m6.68466072s ago: executing program 35 (id=255): r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="0503000000000000f6", @ANYRES32=r3], 0x1c}}, 0x24044080) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x121000) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r4, 0xc0045540, &(0x7f0000000080)=0x7) 7m6.677771231s ago: executing program 2 (id=259): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r0, &(0x7f0000000200)='./file1\x00', 0x40, 0x1) chdir(&(0x7f00000003c0)='./bus\x00') link(&(0x7f0000000940)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') unlink(&(0x7f0000000180)='./file1\x00') 7m6.403615808s ago: executing program 2 (id=262): socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet(0xa, 0x801, 0x84) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) listen(r0, 0x0) 7m6.120752306s ago: executing program 36 (id=262): socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet(0xa, 0x801, 0x84) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) listen(r0, 0x0) 6m5.30864137s ago: executing program 8 (id=675): sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 6m4.935937857s ago: executing program 8 (id=679): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000002c00)=ANY=[@ANYBLOB="b0"], 0xb0) getresuid(&(0x7f0000000800), &(0x7f0000000000), &(0x7f0000000340)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',privport,access=', @ANYRESDEC=r4]) statfs(&(0x7f0000000080)='./file0\x00', 0x0) 6m4.744891556s ago: executing program 8 (id=680): close(0x3) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) close(0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [], {0x95, 0x0, 0x700}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x14, &(0x7f0000000040), 0x3b) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) 6m3.909934968s ago: executing program 8 (id=691): syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x88, &(0x7f00000009c0)={[{@nogrpid}, {@auto_da_alloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@errors_continue}, {@lazytime}, {@quota}]}, 0x3, 0x438, &(0x7f0000000580)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x101042, 0x0) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x80) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./bus\x00', 0x0, 0x63d014, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r3, 0x0) syz_mount_image$squashfs(&(0x7f00000000c0), &(0x7f00000001c0)='./file1\x00', 0x8000, &(0x7f0000000cc0)=ANY=[@ANYRESOCT=r2, @ANYBLOB="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", @ANYRES64=r2, @ANYBLOB="a92fe8de136908e852768595aa546296821087e5b1bbc32156ada61f7c8a700880fe17c721514fd66f6d073702603f43f39d10ed62b784f0ea603a459b42f61a2174a30374bec0296612104179832730d5741398231d9ffd1e9995a06bb5ada99b9f2d4a71c580fe19a6dea2485a8ef6042e0d96839465522c03ac9b1e3e4be07bd09a1568add843860228063e6e4a59adc27ad98e26260605e1df1bd5e5dcc1735af362ce57237d4455a267daeea0b2368f8c69ed577f4849d608dcd60b0dabe1d6dada51feb6b1751dfa136da4ab1a73a25bcfba9ba846676558290f27b2a256c2257003da000000", @ANYRESHEX=r3, @ANYRESHEX, @ANYRES16=0x0, @ANYRES32=r2, @ANYRESHEX, @ANYRESHEX, @ANYRES8, @ANYBLOB="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"], 0x10, 0x1c4, &(0x7f0000000440)="$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") pwrite64(r1, &(0x7f0000000000)="7f", 0x1, 0x24fed0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc1105511, &(0x7f00000000c0)={{0xb, 0x0, 0x2}, 0x0, [0xfffffffffffffffc, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc7b5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x2, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xf]}) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x80100, 0x100000003, 0x1, 0x80000000}) 6m3.303372177s ago: executing program 8 (id=689): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x380}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000113000/0x3000)=nil, 0x400000, 0x0, 0x2}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r1, &(0x7f0000000580)='1\x00', 0x2) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x63, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x8}}}}}]}}]}}, 0x0) write$sysctl(r1, &(0x7f00000000c0)='2\x00', 0x2) 6m2.271435529s ago: executing program 8 (id=700): r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0xf}, {0x10, 0xfff1}, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4004) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) 6m1.830705752s ago: executing program 37 (id=700): r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0xf}, {0x10, 0xfff1}, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4004) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) 1m26.966148722s ago: executing program 1 (id=1693): setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x2, 0x10, 0x4, 0x64, 0x2, 0x5, 0x4b, 0xa7, @loopback, @dev={0xac, 0x14, 0x14, 0x35}}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000200)={@empty=0x1f, @multicast2=0xe000031f, 0x0, "ff00000058b274e6d845167fefe428970548fc3c7b00000000000000fcff00", 0xb2, 0x0, 0x6, 0x6}, 0x3c) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x2, 0x3, 0x1, 0x392b, 0x8, 0xfffffffd}, 0x1c) r3 = socket(0x1e, 0x4, 0x0) recvmsg$unix(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) close(0x4) 1m25.303011436s ago: executing program 1 (id=1700): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x1, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) accept4$alg(r4, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r2, 0x5, 0x0, 0xb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="8b"}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4800}, 0x0) sendmmsg$inet(r0, 0x0, 0x0, 0x40) 1m24.64267877s ago: executing program 1 (id=1703): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000000000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec081208", 0x4d}], 0x1}, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x3fe, 0x0, 0x13, {[@window={0xb, 0x3}, @timestamp={0x5, 0x2, 0x46000040, 0x4000}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x4048051}, 0x4c080) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="a1c0ffff000039a9029e2d3416", 0xd}], 0x1}}], 0x1, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 1m23.040746238s ago: executing program 1 (id=1706): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x2a08000, &(0x7f0000000140), 0xfc, 0x474, &(0x7f00000003c0)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x185641, 0x0) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x84902, 0x0) syz_extract_tcp_res(0x0, 0xd7, 0x2) sched_setscheduler(0x0, 0x2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r3, 0x2000009) sendfile(r2, r3, 0x0, 0x7ffff004) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r1, 0x0) write$FUSE_ATTR(r0, &(0x7f0000000440)={0x78, 0x0, 0x0, {0x2000000000000001, 0x9b, 0x0, {0xffffffffff7ffffe, 0x1, 0xffffffffbfffffff, 0x10, 0xffffffffffff592c, 0x6, 0x4, 0x54, 0x0, 0x4000, 0x0, 0x0, 0x0, 0xfffffffb}}}, 0x78) 1m21.443835646s ago: executing program 1 (id=1714): socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x810, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) ioctl$CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) fdatasync(0xffffffffffffffff) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) recvmsg$qrtr(r1, 0x0, 0x0, 0x2) mount$cgroup(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x20, 0x0) syz_open_dev$vim2m(0x0, 0x47b, 0x2) truncate(0x0, 0x6400) 1m19.300535767s ago: executing program 1 (id=1717): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x500, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x60602, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) syz_open_dev$audion(&(0x7f0000000040), 0x1ff, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x80000000, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x109002) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x1cf) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) 1m18.194464616s ago: executing program 38 (id=1717): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x500, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x60602, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) syz_open_dev$audion(&(0x7f0000000040), 0x1ff, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x80000000, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x109002) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x1cf) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) 19.939526835s ago: executing program 3 (id=1848): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x800006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r8, {}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x80000001}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000071}, 0x4008000) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 17.401421395s ago: executing program 3 (id=1852): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r0}, 0x18) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r1, 0x80044dff, &(0x7f00000003c0)) bind$packet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000280)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() syz_pidfd_open(r3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x1258c1, 0x60) preadv(r4, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0) read$FUSE(r4, &(0x7f0000005b80)={0x2020}, 0x2020) gettid() r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) write$rfkill(r5, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) 14.871321385s ago: executing program 9 (id=1854): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) 14.802631651s ago: executing program 3 (id=1856): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x22803) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0xf3, 0x1b1c07, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x80d02, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0x40a85323, &(0x7f0000000000)={{0x80}, 'port0\x00', 0x0, 0x0, 0x0, 0x0, 0x80000001}) dup3(r4, r5, 0x0) 13.614743578s ago: executing program 9 (id=1860): r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000540)=""/238, 0xee}], 0x1, 0xfffffffd, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000140), 0xb, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x20000000019}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f00000010c0)=""/102400, 0x19000) eventfd(0xfffffff9) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x3, 0x0, 0x0) pselect6(0x900, 0x0, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 13.259264683s ago: executing program 0 (id=1862): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$qrtr(0x2a, 0x2, 0x0) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private=0x4000000}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x18}, 0xc000) 12.898087419s ago: executing program 3 (id=1863): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = socket$unix(0x1, 0x2, 0x0) connect$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r4, &(0x7f00000008c0)=[{&(0x7f0000000580)='`', 0x1}], 0x1) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) recvmmsg(r3, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) 11.834059644s ago: executing program 3 (id=1865): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_exec(r3, 0x0, 0x7) syz_mount_image$squashfs(&(0x7f0000000240), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000300)={[{}]}, 0x1, 0x235, &(0x7f0000000000)="$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") r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000540)=@nat={'nat\x00', 0x670, 0x5, 0x4b0, 0x2c8, 0x370, 0xffffffff, 0x0, 0x2c8, 0x418, 0x418, 0xffffffff, 0x418, 0x418, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010104, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'wg1\x00', {}, {0xff}, 0x16}, 0x0, 0x1f0, 0x228, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'kmp\x00', "4801d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x0, {0x1}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@dev={0xfe, 0x80, '\x00', 0x10}, [0xffffff00, 0xffffffff, 0x0, 0xff000000], @ipv4=@dev={0xac, 0x14, 0x14, 0x29}, [0x0, 0xffffff00, 0xff000000, 0xffffffff], @ipv6=@local, [0xff000000, 0xff, 0x0, 0xff], @ipv4=@broadcast, [0xffffffff, 0x0, 0xff], 0x7, 0x1, 0x5c, 0x4e1c, 0x4e22, 0x4e24, 0x4e24, 0x814, 0x20c0}, 0x80, 0x2}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@uncond, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @icmp_id=0x68, @port=0x4e23}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x510) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2a9e035c390affd9}, 0x28) 10.650218441s ago: executing program 0 (id=1866): connect$inet6(0xffffffffffffffff, 0x0, 0x0) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x122) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(0x0, 0x34) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, 0x0) fcntl$notify(r0, 0x402, 0x91ea6c1af182532) 9.239370799s ago: executing program 5 (id=1869): ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a0000"], &(0x7f00000001c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d030100000000009500000c000000006926000000000000bf67000000000000150600000fff070067060000200000006a0200000ee60000bf050000000000003d350000000000006507000002000000070700004a0000000f75000000000000bf54000000000000070400000400f9ff4e53010000000000840400000000000073720000000000009500000000000000db13d5d8b741f2cdaabc8383caf56b8c2b84a8d09535a1574aefc97d8addaa65b925cd3ded25b8b9e2a095d2c51ef45c5588ec78c7f32946b17cecfe54c53ab530c58b67851b7e0e82452a083b98a6aa766401047d150203b0417edef332233b081df18961d6822d133bf73b18e509402a4de1c2ea17f04537fc211576846ac629d1d93265ba474580047a9dc88de358ce795731891a2031de4e09740c64e5306f991ed4785a9773a433e0db9c1a7d4ab9d658ce9cfdb4db3bed62bcb2bc91ddcdfac2e6d4421c49fb6641cbf56914e76702f673b586c767562a90a3967093b000e3806f825f1d0da2a304e06543b56d35235d78b7a7fe912971aab876022e96f5143b6234f5a6b701690b07fb664a44e22b72e843e7cf55f394cf75d1cd3ee79a25fb98cc45b3fde43e42e150d4a2fddd9a9767748ca3522443097c55dc97c09d38485b18ad2cff7873"], &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000024c0)=@base={0x9, 0x1, 0x9, 0x7fc}, 0x50) 7.364501314s ago: executing program 5 (id=1870): socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mprotect(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1) r1 = syz_open_procfs(0x0, 0x0) fchdir(r1) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x20, r3, 0x701, 0x70bd25, 0x25dfdbfc, {0x16}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 7.363667694s ago: executing program 7 (id=1871): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) keyctl$update(0x2, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0xc3ac}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SETINTERFACE(r2, 0x80045510, &(0x7f0000000000)) 7.335998677s ago: executing program 0 (id=1872): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mq_unlink(0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r4}, 0x18) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r3, 0x28, 0x6, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 7.241405256s ago: executing program 9 (id=1873): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x501a, 0x3, 0x3}, 0x18, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14) pselect6(0x40, &(0x7f0000000140)={0x202d, 0x1, 0x7, 0x1, 0x1, 0x4f8, 0xf}, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6.9953048s ago: executing program 7 (id=1874): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x17, &(0x7f0000000080)=0x1, 0x4) unshare(0x2040400) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 6.255012053s ago: executing program 0 (id=1875): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) pipe2$9p(0x0, 0x80000) r0 = dup(0xffffffffffffffff) write$FUSE_BMAP(r0, &(0x7f0000000300)={0x18, 0x0, 0x0, {0xfffffffffffffffe}}, 0x18) socket(0x9, 0x4, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000000)={'pim6reg1\x00', @link_local}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x6, @bcast, @bpq0, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) 6.206418248s ago: executing program 5 (id=1876): openat$nullb(0xffffffffffffff9c, 0x0, 0x185802, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x900, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c040}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56f41, 0x1070b923, 0x80001, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xd, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 5.058826871s ago: executing program 7 (id=1877): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r4, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r4, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r4, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff14) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, 0x0, 0x20040840) 5.013855395s ago: executing program 9 (id=1878): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00@\x00'/28], 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r4, 0x5}, 0x10) syz_pidfd_open(r0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000029000b05d25a806f8c6394f90424fc60", 0x14}], 0x1}, 0x0) 3.779086057s ago: executing program 9 (id=1879): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000020850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r0, &(0x7f0000000780)}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080), 0x111}}, 0x20) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x4}]}) r4 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, 0x0, &(0x7f0000000040)='c:::\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r5 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r5, &(0x7f0000048040)=""/102392, 0x18ff8) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) tkill(0x0, 0xb) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) getgroups(0xfffffffffffffdb2, 0xfffffffffffffffe) close_range(r3, 0xffffffffffffffff, 0x0) 3.778661807s ago: executing program 7 (id=1880): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r4 = add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r4, r4, r4}, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) 3.737422101s ago: executing program 5 (id=1881): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r4 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r4, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r5 = syz_io_uring_setup(0x417, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x232}, &(0x7f00000004c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r4, 0x0, 0x0}) io_uring_enter(r5, 0x693b, 0x217, 0x2, 0x0, 0x0) dup3(r5, r3, 0x80000) 3.507372704s ago: executing program 0 (id=1882): connect$inet6(0xffffffffffffffff, 0x0, 0x0) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x122) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(0x0, 0x34) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, 0x0) fcntl$notify(r0, 0x402, 0x91ea6c1af182532) 2.746540359s ago: executing program 7 (id=1883): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) ioctl$DRM_IOCTL_MODE_GETGAMMA(0xffffffffffffffff, 0xc02064a4, &(0x7f00000004c0)={0x0, 0x2, &(0x7f0000000040)=[0x76, 0x101], 0x0, &(0x7f0000000480)=[0x7ff, 0x2, 0x401, 0x8000, 0x6, 0x6, 0x46]}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$rds(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCGETNODEID(r4, 0x89e1, &(0x7f00000009c0)={0x3}) 1.810552791s ago: executing program 5 (id=1884): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, 0x0, 0x1811c0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x20000000019}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0x3, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000001980)=[{{0x0, 0x0, 0x0}}], 0x4000000000000d6, 0x4000845) 1.32173689s ago: executing program 7 (id=1885): ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) recvmmsg(r4, &(0x7f0000008880), 0x45b, 0x2, 0x0) 278.609592ms ago: executing program 5 (id=1886): r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0x4) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0x8) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0xfffffffd) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) r4 = socket$inet(0xa, 0x801, 0x84) listen(r4, 0x8) r5 = socket$inet(0xa, 0x801, 0x84) listen(r5, 0x1) r6 = socket$netlink(0x10, 0x3, 0x4) r7 = socket$inet(0xa, 0x801, 0x84) listen(r7, 0x8008) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r6) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 278.158152ms ago: executing program 9 (id=1887): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4}, 0x94) 15.789518ms ago: executing program 0 (id=1888): mkdirat(0xffffffffffffff9c, 0x0, 0x180) socketpair(0x1, 0x1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500)="002e2e0000000000d8c1a2", 0xb}], 0x1, 0x9, 0x8000400, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000059c0)=[0x0], &(0x7f0000007d40)=[{}, {}, {}, {}, {}], &(0x7f00000000c0), &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x3c3c3c3c3c3c49c, 0x0, 0x1, 0x0, r2}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f00000002c0), 0x0}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000140), 0x2, 0x1) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 0s ago: executing program 3 (id=1889): r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) kernel console output (not intermixed with test programs): ave bond_slave_0): Enslaving as an active interface with an up link [ 141.660918][ T5396] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.852951][ T5396] team0: Port device team_slave_0 added [ 141.884434][ T5396] team0: Port device team_slave_1 added [ 141.972927][ T5396] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 142.005704][ T5396] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.041411][ T5396] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 142.054415][ T5396] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 142.061486][ T5396] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.087913][ T5396] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 142.117379][ T5405] chnl_net:caif_netlink_parms(): no params data found [ 142.385564][ T5396] device hsr_slave_0 entered promiscuous mode [ 142.428927][ T5396] device hsr_slave_1 entered promiscuous mode [ 142.452291][ T5396] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 142.460228][ T5396] Cannot create hsr debugfs directory [ 142.505047][ T5405] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.512238][ T5405] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.539975][ T5405] device bridge_slave_0 entered promiscuous mode [ 142.645984][ T4354] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.719001][ T5405] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.752266][ T5405] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.760869][ T5405] device bridge_slave_1 entered promiscuous mode [ 142.856668][ T4354] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.947506][ T4282] Bluetooth: hci1: command 0x041b tx timeout [ 143.086884][ T4354] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.226293][ T5405] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 143.274945][ T5405] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 143.503576][ T4282] Bluetooth: hci2: command 0x041b tx timeout [ 143.585504][ T4354] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.631044][ T5436] loop7: detected capacity change from 0 to 32768 [ 143.687380][ T5405] team0: Port device team_slave_0 added [ 143.693738][ T5436] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 scanned by syz.7.273 (5436) [ 143.740745][ T5405] team0: Port device team_slave_1 added [ 143.752326][ T5436] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 143.793589][ T5436] BTRFS info (device loop7): using crc32c (crc32c-intel) checksum algorithm [ 143.802357][ T5436] BTRFS info (device loop7): using free space tree [ 143.982589][ T5405] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.010413][ T5405] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.085838][ T5436] BTRFS info (device loop7): enabling ssd optimizations [ 144.202211][ T5405] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 144.272859][ T5405] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 144.286003][ T5405] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.360542][ T4809] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 144.386034][ T5405] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 144.509119][ T5396] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 144.635568][ T5421] 9pnet_fd: Insufficient options for proto=fd [ 144.752521][ T5396] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 144.885209][ T5405] device hsr_slave_0 entered promiscuous mode [ 144.904592][ T5405] device hsr_slave_1 entered promiscuous mode [ 144.933495][ T5405] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 144.941121][ T5405] Cannot create hsr debugfs directory [ 145.041499][ T4282] Bluetooth: hci1: command 0x040f tx timeout [ 145.194754][ T5396] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 145.229004][ T5396] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 145.483732][ T34] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 145.584223][ T4282] Bluetooth: hci2: command 0x040f tx timeout [ 145.678827][ T34] usb 8-1: config 0 has an invalid interface number: 41 but max is 0 [ 145.696987][ T34] usb 8-1: config 0 has no interface number 0 [ 145.703330][ T34] usb 8-1: config 0 interface 41 has no altsetting 0 [ 145.719433][ T34] usb 8-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 145.731937][ T34] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.740754][ T34] usb 8-1: Product: syz [ 145.745159][ T34] usb 8-1: Manufacturer: syz [ 145.749795][ T34] usb 8-1: SerialNumber: syz [ 145.756929][ T34] usb 8-1: config 0 descriptor?? [ 145.881094][ T5396] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.924884][ T4823] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 145.933086][ T4823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 145.946718][ T5396] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.958970][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 145.969729][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 145.978642][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.985855][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.995099][ T5405] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 146.008950][ T5405] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 146.071436][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 146.084216][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 146.093117][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 146.101775][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.108931][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.118216][ T5405] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 146.132303][ T5405] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 146.165807][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 146.229115][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 146.248774][ T4823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 146.260878][ T4823] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 146.272979][ T4823] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 146.286288][ T4823] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 146.295820][ T4823] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 146.329825][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 146.340051][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 146.352857][ T4354] device hsr_slave_0 left promiscuous mode [ 146.360658][ T4354] device hsr_slave_1 left promiscuous mode [ 146.367850][ T4354] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.375624][ T4354] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.384112][ T4354] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.391571][ T4354] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.399593][ T4354] device bridge_slave_1 left promiscuous mode [ 146.406008][ T4354] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.416298][ T4354] device bridge_slave_0 left promiscuous mode [ 146.422654][ T4354] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.452896][ T4354] device veth1_macvtap left promiscuous mode [ 146.459494][ T4354] device veth0_macvtap left promiscuous mode [ 146.465975][ T4354] device veth1_vlan left promiscuous mode [ 146.471796][ T4354] device veth0_vlan left promiscuous mode [ 146.615420][ T34] CoreChips 8-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 147.050189][ T4354] team0 (unregistering): Port device team_slave_1 removed [ 147.113433][ T4282] Bluetooth: hci1: command 0x0419 tx timeout [ 147.121249][ T4354] team0 (unregistering): Port device team_slave_0 removed [ 147.167456][ T4354] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 147.218576][ T4354] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 147.666938][ T4282] Bluetooth: hci2: command 0x0419 tx timeout [ 147.698919][ T4354] bond0 (unregistering): Released all slaves [ 147.795009][ T5396] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 147.810719][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 147.820008][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 147.910766][ T34] CoreChips 8-1:0.41 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffb9 [ 147.945255][ T34] CoreChips 8-1:0.41 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 147.965180][ T5405] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.973906][ T34] CoreChips: probe of 8-1:0.41 failed with error -71 [ 147.995570][ T34] usb 8-1: USB disconnect, device number 2 [ 148.004853][ T5405] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.011880][ T4823] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 148.032715][ T4823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 148.055223][ T4823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 148.079050][ T4823] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 148.099477][ T4823] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.106725][ T4823] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.116281][ T4823] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 148.125474][ T4823] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 148.136840][ T4823] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.144074][ T4823] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.160529][ T4823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 148.184856][ T4823] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 148.193227][ T4823] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 148.210947][ T4823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 148.231360][ T4823] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 148.242374][ T4823] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 148.255319][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 148.275181][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 148.307981][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 148.317260][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 148.333132][ T5405] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 148.345733][ T5405] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 148.364036][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 148.381109][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 148.392325][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 148.424037][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 148.435903][ T5396] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.835574][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 148.847705][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 148.877883][ T5405] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.003570][ T5461] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 149.223476][ T5461] usb 6-1: Using ep0 maxpacket: 8 [ 149.234161][ T5461] usb 6-1: config 0 has no interfaces? [ 149.255317][ T5461] usb 6-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 149.281055][ T5461] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.308420][ T5461] usb 6-1: Product: syz [ 149.321534][ T5461] usb 6-1: Manufacturer: syz [ 149.336423][ T5461] usb 6-1: SerialNumber: syz [ 149.359067][ T5461] usb 6-1: config 0 descriptor?? [ 149.618580][ T4824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 149.638830][ T4824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 149.693510][ T5529] serio: Serial port ptm0 [ 149.714943][ T4824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 149.734489][ T4824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 149.749599][ T4824] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 149.782096][ T4824] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 149.804941][ T5396] device veth0_vlan entered promiscuous mode [ 149.842998][ T5396] device veth1_vlan entered promiscuous mode [ 149.944641][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 149.948310][ T4318] usb 6-1: USB disconnect, device number 5 [ 149.960753][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 149.992350][ T5396] device veth0_macvtap entered promiscuous mode [ 150.031843][ T5396] device veth1_macvtap entered promiscuous mode [ 150.048123][ T5538] loop7: detected capacity change from 0 to 1024 [ 150.091348][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 150.114716][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 150.126098][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 150.140242][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 150.161395][ T5405] device veth0_vlan entered promiscuous mode [ 150.170634][ T4823] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 150.182355][ T4823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 150.210512][ T5396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.229777][ T5396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.242580][ T5396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.253304][ T5396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.283539][ T5396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.305920][ T5396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.319510][ T5396] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.326626][ T4403] hfsplus: bad catalog file entry [ 150.328118][ T4823] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 150.333199][ T4403] hfsplus: b-tree write err: -5, ino 3 [ 150.347896][ T4823] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 150.359505][ T4823] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 150.371718][ T4823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 150.394180][ T5405] device veth1_vlan entered promiscuous mode [ 150.421955][ T5396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.440836][ T5396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.452573][ T5396] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.487894][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 150.497153][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 150.516784][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 150.535146][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 150.556771][ T5396] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.566967][ T5396] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.598341][ T5396] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.607636][ T5396] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.821847][ T4824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 150.838581][ T5548] loop7: detected capacity change from 0 to 1024 [ 150.851524][ T4824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 150.865251][ T5405] device veth0_macvtap entered promiscuous mode [ 150.915259][ T4824] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 150.946655][ T5405] device veth1_macvtap entered promiscuous mode [ 151.012441][ T26] audit: type=1800 audit(1760719891.929:58): pid=5545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.294" name="file1" dev="loop7" ino=20 res=0 errno=0 [ 151.040684][ T5547] loop5: detected capacity change from 0 to 32768 [ 151.128959][ T5405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.166204][ T5405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.188115][ T5405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.201111][ T5405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.220221][ T5405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.233690][ T5405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.238193][ T5547] ocfs2: Slot 0 on device (7,5) was already allocated to this node! [ 151.254365][ T5405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.267034][ T5405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.279379][ T5405] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.351064][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 151.361488][ T5547] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 151.406162][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 151.464003][ T5405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.491738][ T5405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.553984][ T5405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.573029][ T5405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.595165][ T5405] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.662405][ T4824] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 151.684406][ T4824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 151.744867][ T5405] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.763783][ T5405] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.781005][ T5405] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.790263][ T5405] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.838335][ T4824] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.906620][ T4824] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.928758][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 151.965288][ T4491] ocfs2: Unmounting device (7,5) on (node local) [ 151.972739][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.982948][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.022845][ T4823] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.029820][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 152.042353][ T4823] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.082008][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 152.128246][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.139004][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.157203][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 152.433702][ T5568] binder: BINDER_SET_CONTEXT_MGR already set [ 152.461969][ T5568] binder: 5566:5568 ioctl 4018620d 200000000040 returned -16 [ 152.813957][ T5579] loop5: detected capacity change from 0 to 2048 [ 152.846763][ T5579] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=3932051, location=3932051 [ 152.917793][ T5579] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 153.010791][ T5560] loop9: detected capacity change from 0 to 32768 [ 153.077062][ T5560] XFS (loop9): Mounting V5 Filesystem [ 153.159036][ T5560] XFS (loop9): Ending clean mount [ 153.265427][ T4318] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 153.329891][ T5560] XFS (loop9): User initiated shutdown received. [ 153.354217][ T5560] XFS (loop9): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x101/0x150 (fs/xfs/xfs_fsops.c:489). Shutting down filesystem. [ 153.378299][ T5560] XFS (loop9): Please unmount the filesystem and rectify the problem(s) [ 153.463775][ T4318] usb 8-1: Using ep0 maxpacket: 16 [ 153.471361][ T4318] usb 8-1: config 6 has an invalid interface number: 227 but max is 0 [ 153.486080][ T4318] usb 8-1: config 6 has no interface number 0 [ 153.502397][ T5405] XFS (loop9): Unmounting Filesystem [ 153.507977][ T4318] usb 8-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice= 7.79 [ 153.508007][ T4318] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.508027][ T4318] usb 8-1: Product: syz [ 153.508102][ T4318] usb 8-1: Manufacturer: syz [ 153.508118][ T4318] usb 8-1: SerialNumber: syz [ 153.545820][ T4318] kalmia: probe of 8-1:6.227 failed with error -22 [ 153.601963][ T5596] loop8: detected capacity change from 0 to 32768 [ 153.668086][ T5596] loop8: p9 p11 p16 [ 154.079226][ T4338] usb 8-1: USB disconnect, device number 3 [ 154.167813][ T5612] loop9: detected capacity change from 0 to 256 [ 154.175342][ T5612] FAT-fs (loop9): Unrecognized mount option "?—÷æƒÁ[ÀJÌ /ͨ[ë³i`$ðå&¢u“¬î+ 8eUßéí7ùÍY· ÷v¯ U¥½ Ö›>å—^úÄÑ”&͘€g£x{3G醾:ÏMµåóoÍ4<9ß³D‹Æ¿±ž´ÿ"صaÃB©Õ.Óך‹Ç[ýÛíªM«äzÑSí%ø+as CâC8‹Ç«(â÷s×5ǺÉÑl°F„AÁ󗑬.¥ÂÐãa¢†žøpèt˜A¥™âX¿" or missing value [ 154.873528][ T4322] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 155.066335][ T4322] usb 9-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 155.083466][ T4322] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.114458][ T4322] usb 9-1: config 0 descriptor?? [ 155.132763][ T4322] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 155.152199][ T5647] netlink: 12 bytes leftover after parsing attributes in process `syz.9.323'. [ 155.699582][ T5661] netlink: 16 bytes leftover after parsing attributes in process `syz.5.331'. [ 156.032813][ T5668] loop9: detected capacity change from 0 to 1024 [ 156.089035][ T5668] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 156.103891][ T5668] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.202657][ T5668] EXT4-fs (loop9): unmounting filesystem. [ 156.777079][ T4322] usb 9-1: USB disconnect, device number 2 [ 157.248053][ T5686] netlink: 12 bytes leftover after parsing attributes in process `syz.5.339'. [ 157.573322][ T5693] loop7: detected capacity change from 0 to 1024 [ 157.849320][ T5693] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 158.828078][ T5694] loop3: detected capacity change from 0 to 32768 [ 158.894493][ T5694] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 158.961534][ T5694] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 159.176894][ T5693] EXT4-fs error (device loop7) in ext4_setattr:5658: Out of memory [ 159.236679][ T4278] ocfs2: Unmounting device (7,3) on (node local) [ 159.609214][ T4338] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 159.916144][ T4809] EXT4-fs (loop7): unmounting filesystem. [ 160.128858][ T4338] usb 9-1: Using ep0 maxpacket: 8 [ 160.144954][ T4338] usb 9-1: config 0 has no interfaces? [ 160.184457][ T4338] usb 9-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 160.205016][ T4338] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.213089][ T4338] usb 9-1: Product: syz [ 160.244515][ T4338] usb 9-1: Manufacturer: syz [ 160.260275][ T4338] usb 9-1: SerialNumber: syz [ 160.285213][ T4338] usb 9-1: config 0 descriptor?? [ 160.686706][ T5727] loop7: detected capacity change from 0 to 1024 [ 160.732485][ T5727] hfsplus: request for non-existent node 2 in B*Tree [ 160.749165][ T5727] hfsplus: request for non-existent node 2 in B*Tree [ 160.869996][ T4740] usb 9-1: USB disconnect, device number 3 [ 161.424699][ T5734] netlink: 12 bytes leftover after parsing attributes in process `syz.3.354'. [ 161.703538][ T4740] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 161.897220][ T4740] usb 8-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 161.913522][ T4740] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.933683][ T4740] usb 8-1: config 0 descriptor?? [ 161.955383][ T4740] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 162.029520][ T5732] loop5: detected capacity change from 0 to 32768 [ 162.298902][ T5763] binder: 5762:5763 unknown command 0 [ 162.307045][ T5763] binder: 5762:5763 ioctl c0306201 200000000080 returned -22 [ 162.593069][ T5769] netlink: 4 bytes leftover after parsing attributes in process `syz.3.370'. [ 162.951098][ T5761] loop8: detected capacity change from 0 to 32768 [ 163.136848][ T5777] loop3: detected capacity change from 0 to 128 [ 163.184762][ T5777] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 163.225502][ T5777] ext4 filesystem being mounted at /105/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 163.492018][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 163.515344][ T5783] binder: 5782:5783 ioctl c0306201 200000000080 returned -14 [ 163.575879][ T4740] usb 8-1: USB disconnect, device number 4 [ 163.793512][ T4333] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 164.412130][ T4282] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 164.793501][ T4333] usb 9-1: Using ep0 maxpacket: 32 [ 164.798701][ T4737] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 164.807831][ T4333] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 164.840668][ T4333] usb 9-1: config 0 has no interface number 0 [ 164.857457][ T4333] usb 9-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 164.903785][ T4333] usb 9-1: config 0 interface 1 has no altsetting 0 [ 164.947930][ T4333] usb 9-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 164.968121][ T4333] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.978495][ T5805] netlink: 4 bytes leftover after parsing attributes in process `syz.7.382'. [ 165.002832][ T4333] usb 9-1: Product: syz [ 165.007412][ T4737] usb 4-1: Using ep0 maxpacket: 8 [ 165.014422][ T5805] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.022264][ T4737] usb 4-1: config 0 has no interfaces? [ 165.028507][ T4333] usb 9-1: Manufacturer: syz [ 165.035430][ T4333] usb 9-1: SerialNumber: syz [ 165.048459][ T4737] usb 4-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 165.060947][ T4333] usb 9-1: config 0 descriptor?? [ 165.068295][ T4737] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.089224][ T4737] usb 4-1: Product: syz [ 165.100305][ T4737] usb 4-1: Manufacturer: syz [ 165.110753][ T4737] usb 4-1: SerialNumber: syz [ 165.131069][ T4737] usb 4-1: config 0 descriptor?? [ 165.297830][ T4333] cx231xx 9-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 165.317398][ T4333] cx231xx 9-1:0.1: Failed to read PCB config [ 165.351264][ T4333] cx231xx: probe of 9-1:0.1 failed with error -71 [ 165.388581][ T4333] usb 9-1: USB disconnect, device number 4 [ 165.425765][ T5805] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.685213][ T4318] usb 4-1: USB disconnect, device number 6 [ 165.822247][ T5809] loop5: detected capacity change from 0 to 32768 [ 165.883113][ T5809] XFS (loop5): Mounting V5 Filesystem [ 165.931640][ T5809] XFS (loop5): Ending clean mount [ 165.937075][ T4333] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 166.056503][ T5809] XFS (loop5): User initiated shutdown received. [ 166.074196][ T5809] XFS (loop5): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x101/0x150 (fs/xfs/xfs_fsops.c:489). Shutting down filesystem. [ 166.128739][ T5809] XFS (loop5): Please unmount the filesystem and rectify the problem(s) [ 166.137830][ T4333] usb 9-1: Using ep0 maxpacket: 32 [ 166.148309][ T4333] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 166.166370][ T4333] usb 9-1: config 0 has no interface number 0 [ 166.172914][ T4333] usb 9-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 166.197723][ T4333] usb 9-1: config 0 interface 1 has no altsetting 0 [ 166.216907][ T4333] usb 9-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 166.234068][ T4333] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.251040][ T4333] usb 9-1: Product: syz [ 166.255919][ T4333] usb 9-1: Manufacturer: syz [ 166.256143][ T4491] XFS (loop5): Unmounting Filesystem [ 166.260646][ T4333] usb 9-1: SerialNumber: syz [ 166.287419][ T4333] usb 9-1: config 0 descriptor?? [ 166.405379][ T5830] loop3: detected capacity change from 0 to 16 [ 166.437024][ T5830] erofs: (device loop3): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 25144) [ 166.528406][ T4333] cx231xx 9-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 166.549220][ T4333] cx231xx 9-1:0.1: bad config in buspower!!!! [ 166.549220][ T4333] config_info=40 [ 166.579119][ T4333] cx231xx 9-1:0.1: Identified as Conexant Hybrid TV - RDU253S (card=4) [ 166.705104][ T4333] cx231xx 9-1:0.1: cx231xx_send_gpio_cmd: failed with status --110 [ 166.735735][ T4333] cx231xx 9-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 166.766407][ T4333] cx231xx 9-1:0.1: cx231xx_send_gpio_cmd: failed with status --71 [ 166.813118][ T4333] cx231xx 9-1:0.1: cx231xx_send_gpio_cmd: failed with status --71 [ 166.843812][ T4333] cx231xx 9-1:0.1: cx231xx_send_gpio_cmd: failed with status --71 [ 166.892815][ T4333] cx231xx 9-1:0.1: Failed to set devmode to analog: error: -71 [ 166.922004][ T4333] i2c i2c-2: Added multiplexed i2c bus 4 [ 166.948386][ T4333] i2c i2c-2: Added multiplexed i2c bus 5 [ 166.962695][ T4333] cx231xx 9-1:0.1: cx231xx_dev_init: Failed to set Power - errCode [-71]! [ 166.979767][ T4333] cx231xx 9-1:0.1: cx231xx_init_dev: cx231xx_i2c_register - errCode [-71]! [ 167.009934][ T4333] cx231xx: probe of 9-1:0.1 failed with error -71 [ 167.037019][ T4333] usb 9-1: USB disconnect, device number 5 [ 167.703520][ T4333] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 167.917756][ T4333] usb 8-1: Using ep0 maxpacket: 8 [ 167.939160][ T4333] usb 8-1: config 0 has no interfaces? [ 167.966720][ T4333] usb 8-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 167.993646][ T4333] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.022156][ T4333] usb 8-1: Product: syz [ 168.032139][ T4333] usb 8-1: Manufacturer: syz [ 168.047078][ T4333] usb 8-1: SerialNumber: syz [ 168.058430][ T4333] usb 8-1: config 0 descriptor?? [ 168.119873][ T26] audit: type=1800 audit(1760719909.039:59): pid=5866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.406" name="/" dev="fuse" ino=1 res=0 errno=0 [ 168.191472][ T5856] loop3: detected capacity change from 0 to 32768 [ 168.301620][ T5856] XFS (loop3): Mounting V5 Filesystem [ 168.390971][ T5862] loop8: detected capacity change from 0 to 32768 [ 168.427934][ T5862] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 scanned by syz.8.404 (5862) [ 168.462828][ T5856] XFS (loop3): Ending clean mount [ 168.469253][ T5862] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 168.484850][ T5862] BTRFS info (device loop8): using crc32c (crc32c-intel) checksum algorithm [ 168.509026][ T5862] BTRFS info (device loop8): turning off barriers [ 168.533964][ T34] usb 8-1: USB disconnect, device number 5 [ 168.540498][ T5862] BTRFS info (device loop8): setting nodatasum [ 168.556236][ T5862] BTRFS info (device loop8): use zlib compression, level 3 [ 168.563767][ T5862] BTRFS info (device loop8): using free space tree [ 168.593993][ T5856] XFS (loop3): User initiated shutdown received. [ 168.600702][ T5856] XFS (loop3): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x101/0x150 (fs/xfs/xfs_fsops.c:489). Shutting down filesystem. [ 168.614928][ T5856] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 168.639830][ T26] audit: type=1800 audit(1760719909.559:60): pid=5862 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.404" name="file1" dev="loop8" ino=260 res=0 errno=0 [ 168.666988][ T4278] XFS (loop3): Unmounting Filesystem [ 168.679764][ T26] audit: type=1800 audit(1760719909.599:61): pid=5862 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.404" name="file1" dev="loop8" ino=260 res=0 errno=0 [ 168.739483][ T4333] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 168.761199][ T26] audit: type=1800 audit(1760719909.679:62): pid=5904 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.404" name="file1" dev="loop8" ino=260 res=0 errno=0 [ 168.963667][ T4333] usb 6-1: Using ep0 maxpacket: 32 [ 168.973802][ T4333] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 168.987041][ T4333] usb 6-1: config 0 has no interface number 0 [ 169.000403][ T4333] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 169.033559][ T4333] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.041676][ T4333] usb 6-1: Product: syz [ 169.046346][ T4333] usb 6-1: Manufacturer: syz [ 169.051005][ T4333] usb 6-1: SerialNumber: syz [ 169.095175][ T4333] usb 6-1: config 0 descriptor?? [ 169.105067][ T4333] smsc95xx v2.0.0 [ 169.211988][ T5911] netlink: 'syz.7.413': attribute type 3 has an invalid length. [ 169.277246][ T5396] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 169.612482][ T5919] overlayfs: failed to clone lowerpath [ 169.646132][ T5919] overlayfs: failed to clone upperpath [ 169.963222][ T5926] loop3: detected capacity change from 0 to 1024 [ 170.062484][ T5926] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 171.047165][ T5913] loop7: detected capacity change from 0 to 262144 [ 171.054840][ T4333] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 171.065731][ T4333] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 171.091799][ T5913] BTRFS error: device /dev/loop7 already registered with a higher generation, found 8 expect 25 [ 171.132003][ T5926] EXT4-fs error (device loop3): ext4_xattr_ibody_get:603: inode #15: comm syz.3.419: corrupted in-inode xattr [ 171.651566][ T5926] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2195: inode #15: comm syz.3.419: corrupted in-inode xattr [ 171.684970][ T5926] EXT4-fs error (device loop3): ext4_map_blocks:745: inode #15: block 1803188595: comm syz.3.419: lblock 0 mapped to illegal pblock 1803188595 (length 1) [ 171.741437][ T5926] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 171.768885][ T4333] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 171.796691][ T5926] EXT4-fs (loop3): This should not happen!! Data will be lost [ 171.796691][ T5926] [ 171.816849][ T4333] smsc95xx: probe of 6-1:0.67 failed with error -71 [ 171.846936][ T4333] usb 6-1: USB disconnect, device number 6 [ 171.923892][ T4824] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2195: inode #15: comm kworker/u4:16: corrupted in-inode xattr [ 171.956448][ T4824] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2195: inode #15: comm kworker/u4:16: corrupted in-inode xattr [ 171.972974][ T5940] [ 171.986364][ T4278] EXT4-fs (loop3): Inode 15 (ffff888054839e18): i_reserved_data_blocks (1) not cleared! [ 172.011216][ T5944] 9pnet_fd: Insufficient options for proto=fd [ 172.040733][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 173.375738][ T5971] Bluetooth: (null): Invalid header checksum [ 173.476776][ T5957] loop8: detected capacity change from 0 to 32768 [ 173.557455][ T5978] overlayfs: statfs failed on './file0' [ 173.575119][ T5957] XFS (loop8): Mounting V5 Filesystem [ 173.699286][ T5957] XFS (loop8): Ending clean mount [ 173.840906][ T5957] XFS (loop8): User initiated shutdown received. [ 173.849724][ T5957] XFS (loop8): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x101/0x150 (fs/xfs/xfs_fsops.c:489). Shutting down filesystem. [ 173.864755][ T5957] XFS (loop8): Please unmount the filesystem and rectify the problem(s) [ 173.901606][ T4282] Bluetooth: hci4: unexpected event 0x03 length: 1 < 11 [ 173.963542][ T5396] XFS (loop8): Unmounting Filesystem [ 174.232993][ T6005] overlayfs: failed to clone upperpath [ 175.377263][ T6028] loop3: detected capacity change from 0 to 1024 [ 175.444381][ T6028] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 175.453256][ T6028] ext4 filesystem being mounted at /121/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.500713][ T6028] EXT4-fs (loop3): unmounting filesystem. [ 175.883070][ T6046] netlink: 4 bytes leftover after parsing attributes in process `syz.9.458'. [ 175.907219][ T6046] device veth0_macvtap left promiscuous mode [ 176.257507][ T6054] loop7: detected capacity change from 0 to 128 [ 176.311871][ T6054] EXT4-fs (loop7): Test dummy encryption mode enabled [ 176.323848][ T6054] EXT4-fs (loop7): couldn't mount as ext2 due to feature incompatibilities [ 176.428689][ T6042] loop8: detected capacity change from 0 to 32768 [ 176.521100][ T26] audit: type=1800 audit(1760719917.439:63): pid=6042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.455" name="file1" dev="loop8" ino=13 res=0 errno=0 [ 176.938768][ T6072] loop7: detected capacity change from 0 to 1024 [ 176.959214][ T6073] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(3) [ 176.966157][ T6073] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 176.985195][ T6073] vhci_hcd vhci_hcd.0: Device attached [ 176.994574][ T6078] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 177.011112][ T4737] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 177.024872][ T6072] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 177.052770][ T6072] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.098353][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888055a00000: rx timeout, send abort [ 177.105882][ T6073] vhci_hcd vhci_hcd.0: pdev(8) rhport(2) sockfd(7) [ 177.113244][ T6073] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 177.160566][ T6072] EXT4-fs (loop7): unmounting filesystem. [ 177.185306][ T6073] vhci_hcd vhci_hcd.0: Device attached [ 177.201206][ T4737] usb 6-1: Using ep0 maxpacket: 16 [ 177.203595][ T5917] vhci_hcd: vhci_device speed not set [ 177.209189][ T4737] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 177.257167][ T4737] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 177.279671][ T4737] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.283583][ T5917] usb 49-1: new full-speed USB device number 2 using vhci_hcd [ 177.303477][ T4737] usb 6-1: Product: syz [ 177.312288][ T4737] usb 6-1: Manufacturer: syz [ 177.328649][ T4737] usb 6-1: SerialNumber: syz [ 177.354852][ T4737] usb 6-1: config 0 descriptor?? [ 177.386084][ T4737] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 177.410151][ T4737] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 177.445938][ T6092] overlayfs: failed to clone upperpath [ 177.606793][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888055a00000: abort rx timeout. Force session deactivation [ 177.782408][ T6081] vhci_hcd: connection closed [ 177.789634][ T46] vhci_hcd: stop threads [ 177.800245][ T6074] vhci_hcd: connection reset by peer [ 177.806213][ T46] vhci_hcd: release socket [ 177.812390][ T46] vhci_hcd: disconnect device [ 177.831090][ T46] vhci_hcd: stop threads [ 177.835500][ T46] vhci_hcd: release socket [ 177.840120][ T46] vhci_hcd: disconnect device [ 177.981241][ T4737] em28xx 6-1:0.0: chip ID is em2765 [ 178.272385][ T6109] overlayfs: failed to clone upperpath [ 178.348574][ T6111] fuse: Bad value for 'fd' [ 178.590630][ T4737] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 178.625207][ T4737] em28xx 6-1:0.0: board has no eeprom [ 178.632378][ T6119] fuse: Bad value for 'fd' [ 179.093481][ T4737] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 179.129767][ T4737] em28xx 6-1:0.0: dvb set to bulk mode. [ 179.151530][ T4737] usb 6-1: USB disconnect, device number 7 [ 179.166662][ T4737] em28xx 6-1:0.0: Disconnecting em28xx [ 179.182889][ T4333] em28xx 6-1:0.0: Binding DVB extension [ 179.340838][ T4333] em28xx 6-1:0.0: Registering input extension [ 179.348226][ T4737] em28xx 6-1:0.0: Closing input extension [ 179.380481][ T4737] em28xx 6-1:0.0: Freeing device [ 179.389074][ T4338] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 179.588107][ T4338] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 179.600743][ T4338] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.620262][ T4338] usb 9-1: Product: syz [ 179.629046][ T4338] usb 9-1: Manufacturer: syz [ 179.641337][ T4338] usb 9-1: SerialNumber: syz [ 179.661333][ T4338] usb 9-1: config 0 descriptor?? [ 179.883692][ T4338] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 180.172042][ T6159] binder: 6158:6159 ioctl c0306201 2000000001c0 returned -14 [ 180.449853][ T6167] fuse: Bad value for 'fd' [ 180.999558][ T6185] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 181.019119][ T6187] netlink: 60 bytes leftover after parsing attributes in process `syz.3.518'. [ 181.300630][ T6196] netlink: 'syz.7.523': attribute type 10 has an invalid length. [ 181.334075][ T4338] dvb_usb_rtl28xxu: probe of 9-1:0.0 failed with error -71 [ 181.353105][ T4338] usb 9-1: USB disconnect, device number 6 [ 181.444821][ T6198] af_packet: tpacket_rcv: packet too big, clamped from 240 to 4294967272. macoff=96 [ 181.847298][ T6212] syz.3.530 uses obsolete (PF_INET,SOCK_PACKET) [ 182.463635][ T5917] vhci_hcd: vhci_device speed not set [ 183.223511][ T26] audit: type=1800 audit(1760719924.119:64): pid=6224 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.532" name="/" dev="fuse" ino=0 res=0 errno=0 [ 185.116397][ T6285] Zero length message leads to an empty skb [ 185.293968][ T6293] overlayfs: failed to clone upperpath [ 186.459936][ T6331] netlink: 104 bytes leftover after parsing attributes in process `syz.3.576'. [ 187.399428][ T6341] netlink: 24 bytes leftover after parsing attributes in process `syz.3.579'. [ 187.932231][ T6365] netlink: 60 bytes leftover after parsing attributes in process `syz.3.585'. [ 187.954121][ T6365] netlink: 24 bytes leftover after parsing attributes in process `syz.3.585'. [ 189.273885][ T6398] binder: 6396:6398 ioctl c0306201 200000000b80 returned -14 [ 189.572246][ T6406] loop8: detected capacity change from 0 to 512 [ 189.650914][ T6406] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 189.701944][ T6406] ext4 filesystem being mounted at /35/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 189.827570][ T6406] EXT4-fs error (device loop8): ext4_do_update_inode:5254: inode #2: comm syz.8.611: corrupted inode contents [ 189.862192][ T6406] EXT4-fs error (device loop8): ext4_dirty_inode:6119: inode #2: comm syz.8.611: mark_inode_dirty error [ 189.917068][ T6406] EXT4-fs error (device loop8): ext4_do_update_inode:5254: inode #2: comm syz.8.611: corrupted inode contents [ 189.942124][ T6406] EXT4-fs error (device loop8): __ext4_ext_dirty:202: inode #2: comm syz.8.611: mark_inode_dirty error [ 190.079125][ T5396] EXT4-fs (loop8): unmounting filesystem. [ 190.221244][ T6426] binder: 6425:6426 unknown command 0 [ 190.252376][ T6426] binder: 6425:6426 ioctl c0306201 200000004a40 returned -22 [ 190.785169][ T6443] No source specified [ 191.101106][ T6456] netlink: 60 bytes leftover after parsing attributes in process `syz.7.615'. [ 191.815858][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88802eb38000: rx timeout, send abort [ 192.324283][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88802eb38000: abort rx timeout. Force session deactivation [ 192.350382][ T6481] mmap: syz.8.625 (6481) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 192.599440][ T6490] loop8: detected capacity change from 0 to 512 [ 192.671274][ T6490] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 192.692512][ T6490] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.018730][ T6518] netlink: 60 bytes leftover after parsing attributes in process `syz.5.635'. [ 193.047388][ T5396] EXT4-fs (loop8): unmounting filesystem. [ 193.209405][ T6523] loop8: detected capacity change from 0 to 16 [ 193.232559][ T6523] erofs: (device loop8): mounted with root inode @ nid 36. [ 193.627957][ T6542] netlink: 4 bytes leftover after parsing attributes in process `syz.9.645'. [ 193.657497][ T6542] netlink: 4 bytes leftover after parsing attributes in process `syz.9.645'. [ 193.677634][ T6542] netlink: 4 bytes leftover after parsing attributes in process `syz.9.645'. [ 193.689030][ T6542] netlink: 4 bytes leftover after parsing attributes in process `syz.9.645'. [ 193.699216][ T6542] netlink: 4 bytes leftover after parsing attributes in process `syz.9.645'. [ 193.709718][ T6542] netlink: 4 bytes leftover after parsing attributes in process `syz.9.645'. [ 193.719244][ T6542] netlink: 4 bytes leftover after parsing attributes in process `syz.9.645'. [ 193.738342][ T6542] netlink: 4 bytes leftover after parsing attributes in process `syz.9.645'. [ 193.754316][ T6542] netlink: 4 bytes leftover after parsing attributes in process `syz.9.645'. [ 194.233095][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.239564][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.089706][ T6560] loop8: detected capacity change from 0 to 65536 [ 195.213072][ T6560] XFS (loop8): Mounting V5 Filesystem [ 195.246601][ T6560] XFS (loop8): Ending clean mount [ 195.257021][ T6560] XFS (loop8): Quotacheck needed: Please wait. [ 195.316531][ T6560] XFS (loop8): Quotacheck: Done. [ 195.417680][ T5396] XFS (loop8): Unmounting Filesystem [ 195.509548][ T6576] overlayfs: failed to clone upperpath [ 196.474921][ T4284] Bluetooth: hci4: command 0x0406 tx timeout [ 198.215773][ T6594] __nla_validate_parse: 43 callbacks suppressed [ 198.215791][ T6594] netlink: 60 bytes leftover after parsing attributes in process `syz.8.653'. [ 198.511964][ T6608] device syz_tun entered promiscuous mode [ 198.589228][ T6608] team0: Port device macvlan2 added [ 198.620874][ T6610] Driver unsupported XDP return value 0 on prog (id 69) dev N/A, expect packet loss! [ 199.934635][ T6632] netlink: 'syz.8.675': attribute type 4 has an invalid length. [ 199.974283][ T6632] netlink: 'syz.8.675': attribute type 4 has an invalid length. [ 200.251127][ T6643] netlink: 4 bytes leftover after parsing attributes in process `syz.7.678'. [ 200.450278][ T6648] sock: sock_set_timeout: `syz.8.680' (pid 6648) tries to set negative timeout [ 201.302831][ T6651] loop8: detected capacity change from 0 to 512 [ 201.320688][ T6651] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 201.383636][ T6651] EXT4-fs (loop8): 1 truncate cleaned up [ 201.391615][ T6651] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 201.424064][ T6663] netlink: 60 bytes leftover after parsing attributes in process `syz.9.681'. [ 201.531475][ T6651] EXT4-fs error (device loop8): ext4_free_blocks:6205: comm syz.8.691: Freeing blocks not in datazone - block = 36, count = 1 [ 201.579628][ T6651] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5915: Corrupt filesystem [ 201.623527][ T6651] EXT4-fs error (device loop8): __ext4_ext_dirty:202: inode #15: comm syz.8.691: mark_inode_dirty error [ 201.669600][ T6651] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5915: Corrupt filesystem [ 201.697273][ T6651] EXT4-fs error (device loop8): ext4_punch_hole:4152: inode #15: comm syz.8.691: mark_inode_dirty error [ 201.822356][ T5396] EXT4-fs error (device loop8): ext4_map_blocks:635: inode #2: block 13: comm syz-executor: lblock 0 mapped to illegal pblock 13 (length 1) [ 201.852551][ T6675] netlink: 'syz.7.687': attribute type 10 has an invalid length. [ 202.003982][ T6675] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 202.057413][ T5580] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5915: Corrupt filesystem [ 202.080278][ T5580] EXT4-fs error (device loop8): ext4_dirty_inode:6119: inode #15: comm syz.8.300: mark_inode_dirty error [ 202.102345][ T5580] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5915: Corrupt filesystem [ 202.127190][ T6684] overlayfs: failed to clone upperpath [ 202.136526][ T5580] EXT4-fs error (device loop8): ext4_dirty_inode:6119: inode #2: comm syz.8.300: mark_inode_dirty error [ 202.435010][ T6682] netlink: 'syz.5.692': attribute type 13 has an invalid length. [ 202.443729][ T6682] netlink: 28 bytes leftover after parsing attributes in process `syz.5.692'. [ 202.447189][ T5580] EXT4-fs (loop8): unmounting filesystem. [ 203.072038][ T4924] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.215785][ T4924] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.314004][ T4924] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.394295][ T6707] overlayfs: failed to clone upperpath [ 203.506886][ T4924] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.196100][ T4284] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 204.208655][ T4284] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 204.224535][ T4284] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 204.235622][ T4284] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 204.263629][ T4284] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 204.271101][ T4284] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 205.566284][ T6729] chnl_net:caif_netlink_parms(): no params data found [ 205.804923][ T6765] team0: No ports can be present during mode change [ 206.263913][ T6729] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.308562][ T6729] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.315910][ T4284] Bluetooth: hci1: command 0x0409 tx timeout [ 206.393723][ T6729] device bridge_slave_0 entered promiscuous mode [ 206.584166][ T6729] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.594002][ T6729] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.616241][ T6729] device bridge_slave_1 entered promiscuous mode [ 207.066950][ T4924] device hsr_slave_0 left promiscuous mode [ 207.090395][ T4924] device hsr_slave_1 left promiscuous mode [ 207.110458][ T4924] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.123638][ T4924] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 207.131671][ T26] audit: type=1326 audit(1760719948.049:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6795 comm="syz.7.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f394098efc9 code=0x7ffc0000 [ 207.164127][ T4924] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.171613][ T4924] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 207.193965][ T26] audit: type=1326 audit(1760719948.049:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6795 comm="syz.7.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f394098efc9 code=0x7ffc0000 [ 207.217546][ T4924] device bridge_slave_1 left promiscuous mode [ 207.233577][ T4924] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.244906][ T4924] device bridge_slave_0 left promiscuous mode [ 207.251178][ T4924] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.273495][ T26] audit: type=1326 audit(1760719948.049:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6795 comm="syz.7.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f394098efc9 code=0x7ffc0000 [ 207.351690][ T26] audit: type=1326 audit(1760719948.049:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6795 comm="syz.7.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f394098efc9 code=0x7ffc0000 [ 207.390134][ T4924] device veth1_macvtap left promiscuous mode [ 207.409966][ T4924] device veth0_macvtap left promiscuous mode [ 207.423798][ T4924] device veth1_vlan left promiscuous mode [ 207.429718][ T26] audit: type=1326 audit(1760719948.049:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6795 comm="syz.7.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f394098efc9 code=0x7ffc0000 [ 207.463590][ T4924] device veth0_vlan left promiscuous mode [ 207.497047][ T26] audit: type=1326 audit(1760719948.049:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6795 comm="syz.7.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f394098efc9 code=0x7ffc0000 [ 207.529090][ T26] audit: type=1326 audit(1760719948.049:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6795 comm="syz.7.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f394098efc9 code=0x7ffc0000 [ 207.559709][ T26] audit: type=1326 audit(1760719948.049:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6795 comm="syz.7.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f394098efc9 code=0x7ffc0000 [ 207.661302][ T26] audit: type=1326 audit(1760719948.049:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6795 comm="syz.7.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f394098efc9 code=0x7ffc0000 [ 207.684347][ T26] audit: type=1326 audit(1760719948.049:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6795 comm="syz.7.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f394098efc9 code=0x7ffc0000 [ 208.383797][ T4284] Bluetooth: hci1: command 0x041b tx timeout [ 208.886050][ T4924] team0 (unregistering): Port device team_slave_1 removed [ 209.015142][ T4924] team0 (unregistering): Port device team_slave_0 removed [ 209.101117][ T4924] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 209.197011][ T4924] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 209.616259][ T6837] netlink: 16 bytes leftover after parsing attributes in process `syz.3.746'. [ 210.091443][ T4924] bond0 (unregistering): Released all slaves [ 210.315464][ T6729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.364858][ T6815] netlink: 12 bytes leftover after parsing attributes in process `syz.9.738'. [ 210.434897][ T6729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.472189][ T4282] Bluetooth: hci1: command 0x040f tx timeout [ 210.532998][ T6729] team0: Port device team_slave_0 added [ 210.559864][ T6729] team0: Port device team_slave_1 added [ 210.676125][ T6729] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.683132][ T6729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.740439][ T6729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.773518][ T6729] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.780522][ T6729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.836329][ T6853] syz.9.752[6853] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 210.836526][ T6853] syz.9.752[6853] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 210.892535][ T6729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.058157][ T6729] device hsr_slave_0 entered promiscuous mode [ 211.085517][ T6729] device hsr_slave_1 entered promiscuous mode [ 211.663588][ T4282] Bluetooth: hci3: command 0x0406 tx timeout [ 211.781163][ T6876] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 212.540720][ T6729] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 212.551541][ T6729] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 212.583205][ T6729] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 212.591046][ T4284] Bluetooth: hci1: command 0x0419 tx timeout [ 212.594283][ T6729] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 212.710603][ T6916] netlink: 156 bytes leftover after parsing attributes in process `syz.7.769'. [ 212.740646][ T6916] netlink: 156 bytes leftover after parsing attributes in process `syz.7.769'. [ 212.849774][ T6729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.900967][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 212.927994][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 212.962463][ T6729] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.979950][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 212.990220][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 213.002354][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.009589][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.038305][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 213.047342][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 213.062117][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 213.073201][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.080433][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.120269][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 213.162648][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 213.181298][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 213.210004][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 213.225582][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 213.239480][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 213.274498][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 213.301987][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 213.311981][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 213.331869][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 213.353850][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 213.395019][ T6729] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 214.032727][ T4821] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 214.046540][ T4821] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 214.079697][ T6729] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.130631][ T4823] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 214.140162][ T4823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 214.171990][ T4823] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 214.182511][ T4823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 214.192524][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 214.201388][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 214.214791][ T6729] device veth0_vlan entered promiscuous mode [ 214.234521][ T6729] device veth1_vlan entered promiscuous mode [ 214.269735][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 214.286710][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 214.300722][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 214.312336][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 214.336484][ T6729] device veth0_macvtap entered promiscuous mode [ 214.371646][ T6729] device veth1_macvtap entered promiscuous mode [ 214.412534][ T6729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.434401][ T6729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.457005][ T6729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.477220][ T6729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.490858][ T6729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.509329][ T6729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.519780][ T6729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.546537][ T6729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.566958][ T6729] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 214.590275][ T4924] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 214.610017][ T4924] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 214.622807][ T4924] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 214.644377][ T4924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 214.747750][ T6729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.758906][ T6729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.770625][ T6729] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 214.787693][ T6729] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.801490][ T6729] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.810727][ T6729] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.820331][ T6729] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.839792][ T4821] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 214.856414][ T4821] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 214.957923][ T6972] netlink: 16 bytes leftover after parsing attributes in process `syz.7.786'. [ 215.005279][ T4823] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.020548][ T4823] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.053040][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 215.212327][ T4823] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.222677][ T4823] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.235836][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 217.977644][ T6997] loop1: detected capacity change from 0 to 256 [ 218.028311][ T6997] exfat: Deprecated parameter 'utf8' [ 218.041497][ T7000] xt_CT: You must specify a L4 protocol and not use inversions on it [ 218.075469][ T6997] exfat: Deprecated parameter 'namecase' [ 218.159411][ T6997] exfat: Deprecated parameter 'namecase' [ 218.175737][ T6997] exfat: Deprecated parameter 'utf8' [ 218.240393][ T6997] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 219.332186][ T7015] tipc: Started in network mode [ 219.350809][ T7016] 9pnet_virtio: no channels available for device syz [ 219.362977][ T7015] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 219.379799][ T7015] tipc: Enabled bearer , priority 26 [ 219.765939][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 219.766084][ T26] audit: type=1326 audit(1760719960.669:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7027 comm="syz.1.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d6c78efc9 code=0x7ffc0000 [ 220.119640][ T26] audit: type=1326 audit(1760719960.669:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7027 comm="syz.1.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1d6c78d810 code=0x7ffc0000 [ 220.488394][ T26] audit: type=1326 audit(1760719960.669:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7027 comm="syz.1.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f1d6c7907f7 code=0x7ffc0000 [ 220.510289][ T4338] tipc: Node number set to 10005162 [ 220.581187][ T26] audit: type=1326 audit(1760719960.669:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7027 comm="syz.1.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1d6c78efc9 code=0x7ffc0000 [ 220.628986][ T26] audit: type=1326 audit(1760719960.669:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7027 comm="syz.1.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f1d6c7907f7 code=0x7ffc0000 [ 220.673641][ T26] audit: type=1326 audit(1760719960.669:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7027 comm="syz.1.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f1d6c78dc2a code=0x7ffc0000 [ 220.698243][ T26] audit: type=1326 audit(1760719960.679:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7027 comm="syz.1.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d6c78efc9 code=0x7ffc0000 [ 220.753601][ T26] audit: type=1326 audit(1760719960.679:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7027 comm="syz.1.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f1d6c78efc9 code=0x7ffc0000 [ 220.787849][ T26] audit: type=1326 audit(1760719960.679:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7027 comm="syz.1.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d6c78efc9 code=0x7ffc0000 [ 220.826359][ T26] audit: type=1326 audit(1760719960.689:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7027 comm="syz.1.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d6c78efc9 code=0x7ffc0000 [ 222.258535][ T7069] xt_CT: You must specify a L4 protocol and not use inversions on it [ 223.237071][ T7074] netlink: 60 bytes leftover after parsing attributes in process `syz.7.819'. [ 223.632843][ T7083] overlayfs: failed to clone upperpath [ 224.084308][ T7092] loop1: detected capacity change from 0 to 2048 [ 224.179934][ T7092] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 225.198892][ T6729] EXT4-fs (loop1): unmounting filesystem. [ 225.945382][ T7134] netlink: 24 bytes leftover after parsing attributes in process `syz.5.840'. [ 227.197714][ T4284] Bluetooth: hci0: command 0x0406 tx timeout [ 227.277377][ T7161] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 227.294090][ T26] audit: type=1804 audit(1760719968.209:93): pid=7155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.849" name="/newroot/8/file1" dev="fuse" ino=1 res=1 errno=0 [ 227.665128][ T26] audit: type=1800 audit(1760719968.279:94): pid=7155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.849" name="/" dev="fuse" ino=1 res=0 errno=0 [ 228.013824][ T26] audit: type=1804 audit(1760719968.309:95): pid=7155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.849" name="/newroot/8/file1" dev="fuse" ino=1 res=1 errno=0 [ 228.110855][ T26] audit: type=1800 audit(1760719968.309:96): pid=7155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.849" name="/" dev="fuse" ino=1 res=0 errno=0 [ 230.728487][ T7208] Bluetooth: MGMT ver 1.22 [ 231.734336][ T7217] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 231.807847][ T7220] vcan0: tx drop: invalid da for name 0x0000000200000004 [ 231.917417][ T26] audit: type=1326 audit(1760719972.829:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7218 comm="syz.5.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bfef8efc9 code=0x7ffc0000 [ 232.050722][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056c04800: rx timeout, send abort [ 232.550815][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056c04c00: rx timeout, send abort [ 232.635089][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056c04800: abort rx timeout. Force session deactivation [ 232.653548][ T26] audit: type=1326 audit(1760719972.829:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7218 comm="syz.5.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2bfef8d810 code=0x7ffc0000 [ 232.676209][ T26] audit: type=1326 audit(1760719972.839:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7218 comm="syz.5.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bfef8efc9 code=0x7ffc0000 [ 232.876462][ T26] audit: type=1326 audit(1760719972.839:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7218 comm="syz.5.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f2bfef8efc9 code=0x7ffc0000 [ 233.059130][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056c04c00: abort rx timeout. Force session deactivation [ 233.176952][ T26] audit: type=1326 audit(1760719972.839:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7218 comm="syz.5.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bfef8efc9 code=0x7ffc0000 [ 233.443855][ T7287] binder_alloc: 7286: binder_alloc_buf, no vma [ 233.654670][ T26] audit: type=1326 audit(1760719972.839:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7218 comm="syz.5.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bfef8efc9 code=0x7ffc0000 [ 236.239812][ T7319] netlink: 4 bytes leftover after parsing attributes in process `syz.3.891'. [ 238.836937][ T7355] fuse: Bad value for 'fd' [ 240.159064][ T7369] xt_NFQUEUE: number of total queues is 0 [ 243.885829][ T7399] netlink: 4 bytes leftover after parsing attributes in process `syz.9.907'. [ 248.196871][ T7469] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 249.455120][ T7492] netlink: 40 bytes leftover after parsing attributes in process `syz.9.940'. [ 249.523489][ T4739] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 251.275020][ T4739] usb 2-1: config index 0 descriptor too short (expected 39, got 27) [ 251.283238][ T4739] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 251.343689][ T4739] usb 2-1: config 0 interface 0 has no altsetting 0 [ 251.352534][ T4739] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 251.388710][ T4739] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 251.411925][ T4739] usb 2-1: Product: syz [ 251.422063][ T4739] usb 2-1: Manufacturer: syz [ 251.433785][ T4739] usb 2-1: SerialNumber: syz [ 251.448896][ T4739] usb 2-1: config 0 descriptor?? [ 251.461166][ T4739] hub 2-1:0.0: bad descriptor, ignoring hub [ 251.482910][ T4739] hub: probe of 2-1:0.0 failed with error -5 [ 251.523996][ T7518] netlink: 4 bytes leftover after parsing attributes in process `syz.3.948'. [ 251.532623][ T4739] usb 2-1: selecting invalid altsetting 0 [ 251.684919][ T4739] usb 2-1: USB disconnect, device number 2 [ 254.268702][ T7565] overlayfs: failed to clone upperpath [ 254.453585][ T5921] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 254.663631][ T5921] usb 2-1: Using ep0 maxpacket: 16 [ 254.671390][ T5921] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 254.794201][ T7578] netlink: 'syz.7.967': attribute type 12 has an invalid length. [ 255.268037][ T5921] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 255.294565][ T5921] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 255.379250][ T5921] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.394108][ T5921] usb 2-1: Product: syz [ 255.398891][ T5921] usb 2-1: Manufacturer: syz [ 255.409059][ T5921] usb 2-1: SerialNumber: syz [ 255.667188][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.673798][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.732751][ T5921] usb 2-1: 0:2 : does not exist [ 255.749318][ T5921] usb 2-1: USB disconnect, device number 3 [ 257.133087][ T7615] input: syz0 as /devices/virtual/input/input8 [ 259.248933][ T7632] 8021q: adding VLAN 0 to HW filter on device bond1 [ 259.298889][ T7632] bond0: (slave bond1): Enslaving as an active interface with an up link [ 259.360642][ T7636] netlink: 14 bytes leftover after parsing attributes in process `syz.1.987'. [ 261.642510][ T7636] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 261.669555][ T7636] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 261.716981][ T7636] bond0 (unregistering): (slave bond1): Releasing backup interface [ 261.774757][ T7636] bond0 (unregistering): Released all slaves [ 262.217898][ T4284] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 262.231085][ T4284] CPU: 1 PID: 4284 Comm: kworker/u5:7 Not tainted syzkaller #0 [ 262.238704][ T4284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 262.248803][ T4284] Workqueue: hci2 hci_rx_work [ 262.253564][ T4284] Call Trace: [ 262.256883][ T4284] [ 262.259848][ T4284] dump_stack_lvl+0x168/0x22e [ 262.264581][ T4284] ? show_regs_print_info+0x12/0x12 [ 262.269823][ T4284] ? load_image+0x3b0/0x3b0 [ 262.274394][ T4284] sysfs_create_dir_ns+0x252/0x280 [ 262.279550][ T4284] ? hci_rx_work+0x3eb/0xd40 [ 262.284237][ T4284] ? sysfs_warn_dup+0xa0/0xa0 [ 262.288961][ T4284] ? do_raw_spin_unlock+0x11d/0x230 [ 262.294317][ T4284] kobject_add_internal+0x6b8/0xc80 [ 262.299585][ T4284] kobject_add+0x152/0x210 [ 262.304076][ T4284] ? kobject_init+0x1d0/0x1d0 [ 262.308916][ T4284] ? klist_children_get+0x50/0x50 [ 262.313991][ T4284] ? get_device_parent+0x121/0x3f0 [ 262.319160][ T4284] device_add+0x483/0xfb0 [ 262.323545][ T4284] ? kmem_cache_free+0xf7/0x290 [ 262.328461][ T4284] hci_conn_add_sysfs+0xd1/0x1e0 [ 262.333456][ T4284] le_conn_complete_evt+0xfec/0x15d0 [ 262.338787][ T4284] ? hci_le_big_info_adv_report_evt+0x310/0x310 [ 262.345061][ T4284] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 262.351169][ T4284] ? skb_pull_data+0xf7/0x200 [ 262.355883][ T4284] hci_le_conn_complete_evt+0x183/0x440 [ 262.361448][ T4284] ? hci_remote_host_features_evt+0x270/0x270 [ 262.367629][ T4284] hci_event_packet+0x791/0x1210 [ 262.372599][ T4284] ? bis_list+0x280/0x280 [ 262.376942][ T4284] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 262.382970][ T4284] ? kcov_remote_start+0x4c7/0x7e0 [ 262.388098][ T4284] ? sync_thread_backup+0x1530/0x1e90 [ 262.393487][ T4284] ? hci_send_to_monitor+0x9c/0x4a0 [ 262.398698][ T4284] hci_rx_work+0x3eb/0xd40 [ 262.403172][ T4284] ? _raw_spin_unlock+0x40/0x40 [ 262.408051][ T4284] ? process_one_work+0x7a1/0x1160 [ 262.413183][ T4284] process_one_work+0x898/0x1160 [ 262.418150][ T4284] ? worker_detach_from_pool+0x240/0x240 [ 262.423819][ T4284] ? _raw_spin_lock_irq+0xab/0xe0 [ 262.428873][ T4284] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 262.434279][ T4284] ? kthread_data+0x4b/0xc0 [ 262.438853][ T4284] worker_thread+0xaa2/0x1250 [ 262.443605][ T4284] ? __kthread_parkme+0x162/0x1c0 [ 262.448664][ T4284] kthread+0x29d/0x330 [ 262.452768][ T4284] ? worker_clr_flags+0x1a0/0x1a0 [ 262.457810][ T4284] ? kthread_blkcg+0xd0/0xd0 [ 262.462423][ T4284] ret_from_fork+0x1f/0x30 [ 262.466873][ T4284] [ 262.471966][ T4284] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 262.487096][ T4284] Bluetooth: hci2: failed to register connection device [ 262.798970][ T7679] IPv6: sit1: Disabled Multicast RS [ 262.863442][ T4284] Bluetooth: hci2: command 0x0406 tx timeout [ 264.232494][ T7709] autofs4:pid:7709:autofs_fill_super: called with bogus options [ 264.326457][ T26] audit: type=1326 audit(1760720005.249:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7710 comm="syz.3.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa154d8efc9 code=0x7ffc0000 [ 264.406321][ T26] audit: type=1326 audit(1760720005.269:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7710 comm="syz.3.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa154d8efc9 code=0x7ffc0000 [ 264.520164][ T26] audit: type=1326 audit(1760720005.279:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7710 comm="syz.3.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa154d8efc9 code=0x7ffc0000 [ 264.618236][ T26] audit: type=1326 audit(1760720005.279:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7710 comm="syz.3.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa154d8efc9 code=0x7ffc0000 [ 264.732176][ T26] audit: type=1326 audit(1760720005.279:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7710 comm="syz.3.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa154d8efc9 code=0x7ffc0000 [ 264.852656][ T26] audit: type=1326 audit(1760720005.279:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7710 comm="syz.3.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa154d8efc9 code=0x7ffc0000 [ 264.940631][ T26] audit: type=1326 audit(1760720005.279:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7710 comm="syz.3.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa154d8efc9 code=0x7ffc0000 [ 264.968734][ T26] audit: type=1326 audit(1760720005.279:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7710 comm="syz.3.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa154d8efc9 code=0x7ffc0000 [ 265.043158][ T26] audit: type=1326 audit(1760720005.289:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7710 comm="syz.3.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa154d8efc9 code=0x7ffc0000 [ 265.111716][ T26] audit: type=1326 audit(1760720005.289:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7710 comm="syz.3.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa154d8efc9 code=0x7ffc0000 [ 266.552513][ T7759] netlink: 'syz.7.1030': attribute type 1 has an invalid length. [ 267.016174][ T7759] 8021q: adding VLAN 0 to HW filter on device bond1 [ 267.296862][ T7761] 8021q: adding VLAN 0 to HW filter on device bond1 [ 267.372660][ T7765] 8021q: adding VLAN 0 to HW filter on device bond1 [ 267.429448][ T7765] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address [ 267.455221][ T7765] bond1: (slave vxcan1): Error -95 calling set_mac_address [ 267.622236][ T7767] device bond_slave_0 entered promiscuous mode [ 267.629119][ T7767] device bond_slave_1 entered promiscuous mode [ 267.646305][ T7767] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 267.663111][ T7767] bond1: (slave macvlan3): Enslaving as a backup interface with an up link [ 267.699509][ T7770] device gretap1 entered promiscuous mode [ 267.733279][ T7770] bond1: (slave gretap1): making interface the new active one [ 267.762690][ T7770] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 269.076901][ T4628] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 269.106999][ T7780] netlink: 'syz.1.1036': attribute type 4 has an invalid length. [ 269.123863][ T7780] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1036'. [ 269.980149][ T7798] device bond_slave_0 entered promiscuous mode [ 269.986456][ T7798] device bond_slave_1 entered promiscuous mode [ 269.992678][ T7798] device wlan1 entered promiscuous mode [ 270.021779][ T7798] device vlan2 entered promiscuous mode [ 270.031421][ T7798] device bond0 entered promiscuous mode [ 272.126204][ T7805] xt_HMARK: proto mask must be zero with L3 mode [ 272.356404][ T26] kauditd_printk_skb: 59 callbacks suppressed [ 272.356420][ T26] audit: type=1326 audit(1760720013.279:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7807 comm="syz.7.1049" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f394098efc9 code=0x0 [ 272.489055][ T26] audit: type=1326 audit(1760720013.379:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7807 comm="syz.7.1049" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f394098efc9 code=0x0 [ 272.722819][ T7821] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1050'. [ 272.753992][ T7820] loop1: detected capacity change from 0 to 2048 [ 274.707487][ T7846] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 275.136882][ T7852] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 275.144882][ T7852] IPv6: NLM_F_CREATE should be set when creating new route [ 275.152141][ T7852] IPv6: NLM_F_CREATE should be set when creating new route [ 275.159438][ T7852] IPv6: NLM_F_CREATE should be set when creating new route [ 275.699876][ T7860] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1062'. [ 276.787928][ T7869] 8021q: adding VLAN 0 to HW filter on device bond1 [ 276.798272][ T7869] bond0: (slave bond1): Enslaving as an active interface with an up link [ 276.811559][ T7872] netlink: 14 bytes leftover after parsing attributes in process `syz.9.1068'. [ 278.117303][ T7872] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 278.156689][ T7872] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 278.192849][ T7872] bond0 (unregistering): (slave bond1): Releasing backup interface [ 278.220029][ T7872] bond0 (unregistering): Released all slaves [ 278.239351][ T7873] tipc: Started in network mode [ 278.244660][ T7873] tipc: Node identity 080211000001, cluster identity 4711 [ 278.252332][ T7873] tipc: Enabled bearer , priority 0 [ 278.879322][ T7910] syz.1.1085[7910] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 278.879436][ T7910] syz.1.1085[7910] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 279.255654][ T4338] tipc: Node number set to 134418688 [ 279.872649][ T7924] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 279.985878][ T7927] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1082'. [ 280.875380][ T7931] netlink: 'syz.3.1084': attribute type 10 has an invalid length. [ 280.901349][ T7931] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 284.237283][ T7951] 8021q: adding VLAN 0 to HW filter on device bond2 [ 284.250753][ T7951] device bond2 entered promiscuous mode [ 284.258061][ T7951] bond0: (slave bond2): Enslaving as an active interface with an up link [ 284.269163][ T7956] netlink: 14 bytes leftover after parsing attributes in process `syz.7.1092'. [ 285.305041][ T7956] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 285.314250][ T7956] device bond_slave_0 left promiscuous mode [ 285.338761][ T7956] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 285.348504][ T7956] device bond_slave_1 left promiscuous mode [ 285.392078][ T7956] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 285.404221][ T7956] device wlan1 left promiscuous mode [ 285.429733][ T7956] bond0 (unregistering): (slave bond2): Releasing backup interface [ 285.444978][ T7956] device bond2 left promiscuous mode [ 285.471122][ T7956] bond0 (unregistering): Released all slaves [ 285.526131][ T7959] tipc: Enabling of bearer rejected, failed to enable media [ 291.551266][ T8036] 8021q: adding VLAN 0 to HW filter on device bond2 [ 291.561701][ T8036] bond0: (slave bond2): Enslaving as an active interface with an up link [ 291.680377][ T8038] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1114'. [ 291.724789][ T8038] device bond_slave_0 left promiscuous mode [ 291.753554][ T8038] device bond_slave_1 left promiscuous mode [ 292.602407][ T8038] bond1: (slave macvlan3): Removing an active aggregator [ 292.622676][ T8038] bond1: (slave macvlan3): Releasing backup interface [ 292.647412][ T8038] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 292.681248][ T8038] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 292.731194][ T8038] bond0 (unregistering): (slave bond2): Releasing backup interface [ 292.761546][ T8038] bond0 (unregistering): Released all slaves [ 292.780692][ T8044] tipc: Enabling of bearer rejected, failed to enable media [ 292.990815][ T8054] device batadv_slave_1 entered promiscuous mode [ 293.028653][ T8054] device veth1_virt_wifi entered promiscuous mode [ 293.049193][ T8053] device veth1_virt_wifi left promiscuous mode [ 293.063885][ T8053] device batadv_slave_1 left promiscuous mode [ 293.081619][ T8060] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1122'. [ 293.199081][ T8063] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1125'. [ 293.218314][ T8064] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1123'. [ 293.256892][ T8064] netlink: 52 bytes leftover after parsing attributes in process `syz.7.1123'. [ 293.306885][ T8064] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1123'. [ 293.328210][ T8066] loop1: detected capacity change from 0 to 8192 [ 293.414536][ T26] audit: type=1804 audit(1760720034.329:174): pid=8066 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1124" name="/newroot/51/file0/bus" dev="loop1" ino=1048620 res=1 errno=0 [ 298.479971][ T8132] netlink: 168 bytes leftover after parsing attributes in process `syz.7.1142'. [ 299.031721][ T8148] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 300.096956][ T8156] tipc: Failed to remove unknown binding: 66,1,1/10005162:723330589/723330591 [ 300.104753][ T8156] tipc: Failed to remove unknown binding: 66,1,1/10005162:723330589/723330591 [ 300.104871][ T8156] tipc: Failed to remove unknown binding: 66,1,1/10005162:723330589/723330591 [ 301.581482][ T8174] netlink: 'syz.9.1156': attribute type 1 has an invalid length. [ 302.383037][ T8179] bond0: (slave bridge2): making interface the new active one [ 302.433293][ T8179] bond0: (slave bridge2): Enslaving as an active interface with an up link [ 302.604889][ T8174] device macvlan2 entered promiscuous mode [ 302.612513][ T8174] device bond0 entered promiscuous mode [ 302.619006][ T8174] device bridge2 entered promiscuous mode [ 302.626304][ T8174] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 302.636517][ T8174] bond0: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 302.875201][ T8174] device bond0 left promiscuous mode [ 302.927345][ T8174] device bridge2 left promiscuous mode [ 303.832567][ T8213] rdma_op ffff88805616b9f0 conn xmit_rdma 0000000000000000 [ 304.766889][ T8215] delete_channel: no stack [ 306.107653][ T8242] loop1: detected capacity change from 0 to 512 [ 306.154663][ T8242] EXT4-fs: Ignoring removed i_version option [ 306.189317][ T8242] EXT4-fs error (device loop1): ext4_get_journal_inode:5737: comm syz.1.1178: inode #196608: comm syz.1.1178: iget: illegal inode # [ 306.257009][ T8242] EXT4-fs (loop1): no journal found [ 306.262300][ T8242] EXT4-fs (loop1): can't get journal size [ 306.301132][ T8242] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 306.315022][ T8246] netlink: 'syz.5.1180': attribute type 1 has an invalid length. [ 306.364599][ T8242] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 306.372279][ T8242] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 306.448891][ T8246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.618555][ T8252] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.625780][ T8252] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 306.637623][ T8252] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 306.666151][ T8253] device gretap1 entered promiscuous mode [ 306.685541][ T8253] bond0: (slave gretap1): making interface the new active one [ 306.760367][ T8253] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 307.454403][ T6729] EXT4-fs (loop1): unmounting filesystem. [ 307.615731][ T8262] tipc: Failed to remove unknown binding: 66,1,1/0:1876514337/1876514339 [ 307.904632][ T8264] loop1: detected capacity change from 0 to 32768 [ 307.910998][ T8262] tipc: Failed to remove unknown binding: 66,1,1/0:1876514337/1876514339 [ 307.922865][ T8262] tipc: Failed to remove unknown binding: 66,1,1/0:1876514337/1876514339 [ 308.168683][ T8264] XFS (loop1): Mounting V5 Filesystem [ 308.476921][ T8264] XFS (loop1): Ending clean mount [ 308.493447][ T8264] XFS (loop1): Quotacheck needed: Please wait. [ 308.610520][ T8264] XFS (loop1): Quotacheck: Done. [ 309.859940][ T6729] XFS (loop1): Unmounting Filesystem [ 310.767273][ T8290] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 310.774598][ T8290] IPv6: NLM_F_CREATE should be set when creating new route [ 310.781925][ T8290] IPv6: NLM_F_CREATE should be set when creating new route [ 310.789230][ T8290] IPv6: NLM_F_CREATE should be set when creating new route [ 313.559012][ T8329] netlink: 'syz.9.1197': attribute type 1 has an invalid length. [ 313.819653][ T8329] 8021q: adding VLAN 0 to HW filter on device bond2 [ 313.854618][ T8338] comedi comedi1: board detection failed [ 314.642425][ T8335] 8021q: adding VLAN 0 to HW filter on device bond2 [ 314.651349][ T8335] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 314.663877][ T8335] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 314.692329][ T8329] device gretap1 entered promiscuous mode [ 314.797936][ T8329] bond2: (slave gretap1): making interface the new active one [ 314.868767][ T8329] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 316.150902][ T8365] --map-set only usable from mangle table [ 317.106811][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.114396][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 326.089575][ T8443] netlink: 'syz.1.1227': attribute type 1 has an invalid length. [ 326.134060][ T8443] 8021q: adding VLAN 0 to HW filter on device bond0 [ 326.180709][ T8448] 8021q: adding VLAN 0 to HW filter on device bond0 [ 326.188180][ T8448] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 326.202056][ T8448] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 326.251578][ T8443] device gretap1 entered promiscuous mode [ 326.261334][ T8443] bond0: (slave gretap1): making interface the new active one [ 326.270213][ T8443] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 326.389908][ T7259] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.403606][ T8453] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1241'. [ 326.426592][ T8453] device syz_tun entered promiscuous mode [ 326.440999][ T8453] device macvtap1 entered promiscuous mode [ 326.470590][ T8458] device syz_tun left promiscuous mode [ 327.616964][ T52] block nbd1: Attempted send on invalid socket [ 327.623807][ T52] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 327.652835][ T8476] hpfs: hpfs_map_sector(): read error [ 329.844095][ T8503] 8021q: VLANs not supported on vcan0 [ 329.997497][ T8513] netlink: 'syz.3.1258': attribute type 1 has an invalid length. [ 330.125868][ T8513] 8021q: adding VLAN 0 to HW filter on device bond1 [ 330.274840][ T8518] 8021q: adding VLAN 0 to HW filter on device bond1 [ 330.304155][ T8518] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 330.322576][ T8518] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 330.504707][ T8513] device gretap1 entered promiscuous mode [ 330.516693][ T8513] bond1: (slave gretap1): making interface the new active one [ 330.525400][ T8513] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 332.311518][ T8548] overlayfs: failed to resolve './file1': -2 [ 332.422680][ T8552] loop1: detected capacity change from 0 to 512 [ 332.447139][ T8552] EXT4-fs: Ignoring removed bh option [ 332.477029][ T8552] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 332.555022][ T8552] EXT4-fs (loop1): 1 truncate cleaned up [ 332.560786][ T8552] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 333.625978][ T6729] EXT4-fs (loop1): unmounting filesystem. [ 337.288200][ T8600] netlink: 'syz.3.1282': attribute type 1 has an invalid length. [ 338.161912][ T8600] 8021q: adding VLAN 0 to HW filter on device bond2 [ 338.235476][ T8602] netlink: 'syz.1.1283': attribute type 1 has an invalid length. [ 338.423093][ T8605] 8021q: adding VLAN 0 to HW filter on device bond2 [ 338.435265][ T8605] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 338.475347][ T8605] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 339.782169][ T8606] bond2: (slave bridge1): making interface the new active one [ 339.791630][ T8606] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 345.274891][ T4282] Bluetooth: hci1: command 0x0406 tx timeout [ 345.613946][ T8698] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 345.626660][ T8698] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 346.419353][ T8698] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 346.504217][ T8698] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 346.564587][ T8698] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 346.672281][ T8698] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 346.704802][ T8698] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 346.719336][ T8705] netlink: 'syz.1.1305': attribute type 1 has an invalid length. [ 347.070135][ T8705] 8021q: adding VLAN 0 to HW filter on device bond3 [ 347.399402][ T8709] 8021q: adding VLAN 0 to HW filter on device bond3 [ 347.406848][ T8709] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 347.418891][ T8709] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 347.460602][ T8713] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1307'. [ 347.576474][ T8719] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 354.560696][ T8814] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 354.755000][ T8819] overlayfs: failed to clone upperpath [ 355.738224][ T5921] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 355.857354][ T8833] netlink: 'syz.7.1342': attribute type 27 has an invalid length. [ 355.945516][ T5921] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 356.880561][ T5921] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 356.921472][ T5921] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 356.961731][ T5921] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.017013][ T8828] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 357.244694][ T8852] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 357.272459][ T8852] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 357.673438][ T34] usb 2-1: USB disconnect, device number 4 [ 365.795215][ T26] audit: type=1804 audit(1760720106.719:175): pid=8950 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1375" name="/newroot/84/file1" dev="fuse" ino=1 res=1 errno=0 [ 369.073580][ T4322] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 370.083535][ T4322] usb 2-1: Using ep0 maxpacket: 32 [ 370.090693][ T4322] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 370.123244][ T4322] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 370.143416][ T4322] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 370.151777][ T4322] usb 2-1: Product: syz [ 370.156463][ T4322] usb 2-1: Manufacturer: syz [ 370.161118][ T4322] usb 2-1: SerialNumber: syz [ 370.176416][ T4322] usb 2-1: config 0 descriptor?? [ 370.184700][ T8990] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 371.435578][ T5921] usb 2-1: USB disconnect, device number 5 [ 373.837632][ T9029] netlink: zone id is out of range [ 373.842961][ T9029] netlink: get zone limit has 4 unknown bytes [ 374.351104][ T9034] tipc: Enabling of bearer rejected, already enabled [ 374.443169][ T9038] netlink: 'syz.3.1404': attribute type 10 has an invalid length. [ 374.680761][ T9046] overlayfs: failed to clone upperpath [ 374.847686][ T9043] syz.5.1398 (9043) used greatest stack depth: 18176 bytes left [ 376.433689][ T9070] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 376.483823][ T9070] device batadv_slave_0 entered promiscuous mode [ 378.564372][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.574150][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.774389][ T9101] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1425'. [ 380.140338][ T9114] loop1: detected capacity change from 0 to 2048 [ 380.321090][ T9114] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 129: 0x32 != 0x7d [ 381.656262][ T9114] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 383.417788][ T9143] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1437'. [ 383.565696][ T9144] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1431'. [ 383.592469][ T9144] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1431'. [ 387.748761][ T9174] autofs4:pid:9174:autofs_fill_super: called with bogus options [ 389.623382][ T4282] Bluetooth: hci1: command 0x0405 tx timeout [ 391.152208][ T4403] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.267154][ T9215] netlink: 'syz.9.1457': attribute type 28 has an invalid length. [ 391.360493][ T9221] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1459'. [ 395.238137][ T9255] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1467'. [ 397.067369][ T9270] loop1: detected capacity change from 0 to 1024 [ 397.089015][ T9270] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 397.098451][ T9270] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 399.111983][ T9277] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 303: padding at end of block bitmap is not set [ 400.415714][ T26] audit: type=1800 audit(1760720141.339:176): pid=9270 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1473" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 400.757361][ T6729] EXT4-fs (loop1): unmounting filesystem. [ 402.270006][ T9311] tipc: Enabling of bearer rejected, failed to enable media [ 407.865330][ T9354] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 410.072097][ T9358] syz.1.1499 (9358): drop_caches: 2 [ 413.198273][ T9408] CIFS mount error: No usable UNC path provided in device string! [ 413.198273][ T9408] [ 413.208699][ T9408] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 415.019349][ T9415] kAFS: unable to lookup cell 'syz0.r™iXýÕßðÒ<̧®© +âÔR!K+K™áû4ÚÍö[Ÿ“EšýÖîê¯dî<¾æ6ócº7Ë( nÅÙÓÅ@À×8A¯5W®/7|{ÒÚü?îÇhÇT•³8#&3ræ?3ÚUü<·ÚG`-իǾóQ8õ%¹$­lH•YïL5еžYÏ^÷!!–\p"È3¹Ä!£ò· [ 415.019349][ T9415] ÛñÙÔh1„#-¹ï*·º„EºÍ=î)ú½¥"À6<Ú—H#.‚ýLÝÊ(˜Ü[Ý1„hã¯uC8yÞê½Ða½HÚ'(ùè‘lÚ“—+#-€nоYMËÆî²Àÿð«%' [ 417.610866][ T9445] tipc: Enabling of bearer rejected, failed to enable media [ 420.413358][ T4338] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 420.740112][ T4338] usb 2-1: config 0 has no interfaces? [ 420.751615][ T4338] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 420.850464][ T4338] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.915227][ T4338] usb 2-1: Product: syz [ 421.545423][ T4338] usb 2-1: Manufacturer: syz [ 421.550087][ T4338] usb 2-1: SerialNumber: syz [ 421.605593][ T4338] usb 2-1: config 0 descriptor?? [ 421.856326][ T5921] usb 2-1: USB disconnect, device number 6 [ 423.739495][ T9522] tipc: Started in network mode [ 423.778606][ T9522] tipc: Node identity 124d99e79c8, cluster identity 4711 [ 423.830410][ T9522] tipc: Enabled bearer , priority 0 [ 423.856888][ T9525] device syzkaller0 entered promiscuous mode [ 424.891840][ T9525] tipc: Resetting bearer [ 424.928492][ T9520] tipc: Resetting bearer [ 425.023643][ T9520] tipc: Disabling bearer [ 425.113828][ T5921] tipc: Node number set to 2395838951 [ 426.802859][ T9552] IPVS: length: 73 != 24 [ 430.141282][ T9586] tipc: Enabling of bearer rejected, already enabled [ 433.254770][ T9620] syz.7.1574 sent an empty control message without MSG_MORE. [ 434.630507][ T9626] tipc: Enabled bearer , priority 0 [ 434.641232][ T9626] device syzkaller0 entered promiscuous mode [ 435.595512][ T9626] tipc: Resetting bearer [ 435.604636][ T9625] tipc: Resetting bearer [ 435.787501][ T9625] tipc: Disabling bearer [ 440.255720][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.262204][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 451.107497][ T9748] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1611'. [ 452.265870][ T9761] netlink: 'syz.7.1614': attribute type 4 has an invalid length. [ 452.273840][ T9761] netlink: 3657 bytes leftover after parsing attributes in process `syz.7.1614'. [ 453.403390][ T26] audit: type=1326 audit(1760720194.319:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9774 comm="syz.7.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f394098efc9 code=0x7ffc0000 [ 453.609309][ T26] audit: type=1326 audit(1760720194.319:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9774 comm="syz.7.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f394098efc9 code=0x7ffc0000 [ 453.649904][ T26] audit: type=1326 audit(1760720194.319:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9774 comm="syz.7.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f394098efc9 code=0x7ffc0000 [ 453.672459][ T26] audit: type=1326 audit(1760720194.319:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9774 comm="syz.7.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f394098efc9 code=0x7ffc0000 [ 453.695493][ T9784] netlink: 'syz.3.1619': attribute type 10 has an invalid length. [ 453.703680][ T9784] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1619'. [ 453.713802][ T9784] batman_adv: batadv0: Adding interface: vlan1 [ 453.720002][ T9784] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 453.748062][ T9784] batman_adv: batadv0: Interface activated: vlan1 [ 453.755413][ T26] audit: type=1326 audit(1760720194.329:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9774 comm="syz.7.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f394098efc9 code=0x7ffc0000 [ 453.780420][ T26] audit: type=1326 audit(1760720194.329:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9774 comm="syz.7.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f394098efc9 code=0x7ffc0000 [ 453.955073][ T26] audit: type=1326 audit(1760720194.329:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9774 comm="syz.7.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f394098efc9 code=0x7ffc0000 [ 454.872291][ T26] audit: type=1326 audit(1760720194.329:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9774 comm="syz.7.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f394098efc9 code=0x7ffc0000 [ 454.904203][ T9790] device syzkaller0 entered promiscuous mode [ 454.914343][ T26] audit: type=1326 audit(1760720194.329:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9774 comm="syz.7.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f394098efc9 code=0x7ffc0000 [ 455.185354][ T9798] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1634'. [ 457.279440][ T9821] tipc: Enabled bearer , priority 0 [ 457.287696][ T9821] device syzkaller0 entered promiscuous mode [ 457.810930][ T9825] x_tables: ip_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 457.869500][ T9826] tipc: Resetting bearer [ 457.891325][ T9820] tipc: Resetting bearer [ 457.953551][ T9820] tipc: Disabling bearer [ 459.092220][ T9838] tipc: Started in network mode [ 459.105995][ T9838] tipc: Node identity 080211, cluster identity 4711 [ 459.112903][ T9838] tipc: Enabled bearer , priority 0 [ 460.531679][ T4338] tipc: Node number set to 134353152 [ 460.572629][ T9855] tipc: Enabling of bearer rejected, failed to enable media [ 460.908671][ T9862] tipc: Enabling of bearer rejected, already enabled [ 463.451691][ T9892] tipc: Enabling of bearer rejected, already enabled [ 468.146291][ T9944] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1672'. [ 469.297646][ T9949] loop1: detected capacity change from 0 to 4096 [ 469.346666][ T9949] ntfs3: Unknown parameter 'À' [ 472.210181][ T9966] loop1: detected capacity change from 0 to 32768 [ 473.257303][ T9969] netlink: 'syz.9.1678': attribute type 1 has an invalid length. [ 473.269323][ T9966] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 473.306275][ T9966] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 474.778691][ T9969] 8021q: adding VLAN 0 to HW filter on device bond3 [ 474.932461][ T6729] ocfs2: Unmounting device (7,1) on (node local) [ 475.087116][ T9982] bond3: (slave veth3): Enslaving as an active interface with a down link [ 475.176352][ T9990] bond3: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 475.419215][ T9991] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 476.188916][ T9969] device veth1 entered promiscuous mode [ 476.221296][ T9969] device veth1 left promiscuous mode [ 476.230437][ T9969] bond3: (slave vlan2): making interface the new active one [ 476.386981][ T9969] device veth1 entered promiscuous mode [ 476.400250][ T9969] device vlan2 entered promiscuous mode [ 476.411716][ T9969] bond3: (slave vlan2): Enslaving as an active interface with an up link [ 476.429172][ T4924] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 477.215457][ T26] audit: type=1326 audit(1760720218.139:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10005 comm="syz.1.1688" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1d6c78efc9 code=0x0 [ 477.603554][ T26] audit: type=1326 audit(1760720218.479:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10014 comm="syz.3.1690" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa154d8efc9 code=0x0 [ 480.419862][ T26] audit: type=1326 audit(1760720221.339:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10046 comm="syz.9.1702" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5abf38efc9 code=0x0 [ 482.214194][T10060] loop1: detected capacity change from 0 to 512 [ 482.272844][T10060] EXT4-fs error (device loop1): ext4_get_branch:178: inode #13: block 2: comm syz.1.1706: invalid block [ 482.431969][T10060] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1706: invalid indirect mapped block 10 (level 1) [ 482.555726][T10060] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1706: invalid indirect mapped block 8 (level 1) [ 482.576655][T10060] EXT4-fs (loop1): 1 truncate cleaned up [ 482.582733][T10060] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 483.662178][ T6729] EXT4-fs error (device loop1): ext4_lookup:1850: inode #2: comm syz-executor: bad inode number: 11 [ 483.742984][ T6729] EXT4-fs error (device loop1): ext4_lookup:1850: inode #2: comm syz-executor: bad inode number: 11 [ 485.564456][T10064] EXT4-fs error (device loop1): ext4_validate_block_bitmap:420: comm ext4lazyinit: bg 0: bad block bitmap checksum [ 485.731697][T10092] tipc: Enabling of bearer rejected, failed to enable media [ 485.735178][ T6729] EXT4-fs (loop1): unmounting filesystem. [ 487.981718][T10105] tipc: Enabling of bearer rejected, failed to enable media [ 489.884161][ T4284] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 489.897840][ T4284] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 489.908636][ T4285] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 489.918179][ T4285] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 489.927642][ T4285] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 489.935125][ T4285] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 490.070226][T10128] tipc: Enabling of bearer rejected, failed to enable media [ 490.637994][T10137] xt_CONNSECMARK: invalid mode: 0 [ 491.472153][T10123] chnl_net:caif_netlink_parms(): no params data found [ 491.690342][T10150] sch_tbf: burst 1023 is lower than device lo mtu (1550) ! [ 492.205274][ T4285] Bluetooth: hci1: command 0x0409 tx timeout [ 493.109383][T10123] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.123023][T10123] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.132456][T10123] device bridge_slave_0 entered promiscuous mode [ 494.116949][T10174] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 494.126775][T10174] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 494.136632][T10174] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 494.152503][T10123] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.253324][ T4282] Bluetooth: hci1: command 0x041b tx timeout [ 494.395621][T10123] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.419552][T10123] device bridge_slave_1 entered promiscuous mode [ 494.455082][T10177] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 494.673055][T10123] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 494.702004][T10123] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 494.867129][T10123] team0: Port device team_slave_0 added [ 495.484724][T10123] team0: Port device team_slave_1 added [ 495.986748][T10194] autofs4:pid:10194:autofs_fill_super: called with bogus options [ 496.513445][ T4282] Bluetooth: hci1: command 0x040f tx timeout [ 497.828937][T10123] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 497.863769][T10123] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 497.943453][T10123] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 497.980002][T10123] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 498.009573][T10123] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 498.103523][T10123] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 498.288390][T10123] device hsr_slave_0 entered promiscuous mode [ 498.356000][T10123] device hsr_slave_1 entered promiscuous mode [ 498.374227][T10123] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 498.382358][T10123] Cannot create hsr debugfs directory [ 498.626514][ T4285] Bluetooth: hci1: command 0x0419 tx timeout [ 499.536468][ T4924] device vlan2 left promiscuous mode [ 501.506722][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.513101][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.929744][T10123] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 501.947103][T10123] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 501.958094][T10123] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 501.969017][T10123] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 503.082851][T10123] 8021q: adding VLAN 0 to HW filter on device bond0 [ 503.120779][ T7277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 503.346420][ T7277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 503.380519][T10123] 8021q: adding VLAN 0 to HW filter on device team0 [ 504.343432][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 504.801631][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 504.810729][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.817924][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 504.852817][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 506.018190][ T7277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 506.056478][ T7277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 506.099559][ T7277] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.106822][ T7277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 506.157622][ T7277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 506.318414][T10279] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 506.826011][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 507.150655][T10279] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 507.173458][T10279] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 507.194375][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 507.218465][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 507.258546][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 507.453543][T10293] tipc: Enabling of bearer rejected, already enabled [ 507.461889][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 507.480941][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 507.522734][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 507.541519][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 507.552627][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 507.578807][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 507.614936][T10123] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 511.711618][T10337] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 511.775844][T10337] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 511.884627][T10337] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 511.926700][T10337] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 511.947746][T10337] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 511.987811][T10337] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 512.868243][T10337] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 512.946157][T10344] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 512.952921][ T4924] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 512.971914][T10344] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 513.013543][T10344] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 513.057398][ T4924] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 513.089622][T10123] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 513.180452][ T4824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 513.200661][ T4824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 513.280538][ T4824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 513.302115][ T4824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 513.335790][T10123] device veth0_vlan entered promiscuous mode [ 513.344825][ T4824] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 513.354150][ T4824] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 513.367352][T10123] device veth1_vlan entered promiscuous mode [ 513.437396][ T4824] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 513.446679][ T4824] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 513.464727][ T4824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 513.495197][ T4824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 513.527149][T10123] device veth0_macvtap entered promiscuous mode [ 513.551285][T10123] device veth1_macvtap entered promiscuous mode [ 513.822307][T10123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 514.190974][T10123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.722794][T10123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 514.753353][T10123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.784378][T10123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 514.823448][T10123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.100927][T10123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 515.990949][T10123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.043571][T10123] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 516.092377][ T7255] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 516.221538][ T7255] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 516.480026][ T7255] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 517.331685][ T7255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 517.366026][T10123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 517.391368][T10123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.489751][T10123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 517.537893][T10123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.775839][T10123] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 518.882092][T10123] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.950297][T10123] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.990029][T10123] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.012103][T10123] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.162435][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 519.659918][T10398] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 520.789684][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 523.297728][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 523.341600][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 523.401006][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 524.304325][T10432] wireguard: wg1: Could not create IPv4 socket [ 524.416705][T10427] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 524.454476][ T7259] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 524.462997][ T7259] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 524.543973][ T4824] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 524.725270][T10444] tipc: Enabling of bearer rejected, already enabled [ 524.768206][T10445] rdma_op ffff888055d459f0 conn xmit_rdma 0000000000000000 [ 526.894723][T10463] tipc: Started in network mode [ 526.899687][T10463] tipc: Node identity f2d2840c2933, cluster identity 4711 [ 526.915447][T10463] tipc: Enabled bearer , priority 0 [ 528.006172][T10465] device syzkaller0 entered promiscuous mode [ 528.104597][ T4319] tipc: Node number set to 3688989708 [ 529.214924][T10463] tipc: Resetting bearer [ 529.777246][T10462] tipc: Resetting bearer [ 529.839868][T10462] tipc: Disabling bearer [ 531.003000][ T26] audit: type=1326 audit(1760720271.919:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10498 comm="syz.7.1819" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f394098efc9 code=0x0 [ 537.582190][T10538] netlink: 'syz.5.1829': attribute type 1 has an invalid length. [ 538.468870][T10545] ubi31: attaching mtd0 [ 538.535912][T10545] ubi31: scanning is finished [ 538.541224][T10545] ubi31 error: ubi_read_volume_table: the layout volume was not found [ 538.801284][T10547] xt_l2tp: v2 doesn't support IP mode [ 539.135346][T10545] ubi31 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 541.308451][T10580] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1840'. [ 543.245176][T10576] xt_socket: unknown flags 0x4 [ 546.634296][T10609] tipc: Enabling of bearer rejected, failed to enable media [ 551.385958][T10648] netlink: 'syz.0.1858': attribute type 1 has an invalid length. [ 551.576620][T10652] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1858'. [ 554.758181][T10684] Cannot find add_set index 65532 as target [ 560.149396][T10718] tipc: Enabling of bearer rejected, already enabled [ 561.582991][ T26] audit: type=1326 audit(1760720302.499:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10733 comm="syz.9.1879" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5abf38efc9 code=0x0 [ 563.162306][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.169311][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.634284][ T4823] ------------[ cut here ]------------ [ 565.640696][ T4823] WARNING: CPU: 0 PID: 4823 at io_uring/io_uring.c:2890 io_ring_exit_work+0x314/0x704 [ 565.650418][ T4823] Modules linked in: [ 565.654385][ T4823] CPU: 0 PID: 4823 Comm: kworker/u4:15 Not tainted syzkaller #0 [ 565.662353][ T4823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 565.672707][ T4823] Workqueue: events_unbound io_ring_exit_work [ 565.678928][ T4823] RIP: 0010:io_ring_exit_work+0x314/0x704 [ 565.684733][ T4823] Code: 71 f7 48 8b 7c 24 38 48 8b 74 24 18 e8 e9 11 11 00 48 85 c0 4c 8b 7c 24 10 75 3f e8 6a 78 71 f7 e9 09 fe ff ff e8 60 78 71 f7 <0f> 0b b8 70 17 00 00 48 89 44 24 18 eb ca 48 8b 4c 24 08 80 e1 07 [ 565.704522][ T4823] RSP: 0018:ffffc90003377ac0 EFLAGS: 00010293 [ 565.710638][ T4823] RAX: ffffffff8a0f5680 RBX: 00000001000066ef RCX: ffff888027438000 [ 565.718765][ T4823] RDX: 0000000000000000 RSI: ffffffffffffffda RDI: 0000000000000000 [ 565.726816][ T4823] RBP: ffffc90003377c30 R08: dffffc0000000000 R09: fffff5200066ef49 [ 565.734834][ T4823] R10: fffff5200066ef49 R11: 1ffff9200066ef48 R12: dffffc0000000000 [ 565.742888][ T4823] R13: 1ffff11009fcba4c R14: ffff88804fe5d260 R15: 0000000100006715 [ 565.750910][ T4823] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 565.759909][ T4823] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 565.766539][ T4823] CR2: 00007f64bc13504f CR3: 0000000063cc2000 CR4: 00000000003506f0 [ 565.774572][ T4823] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 565.782555][ T4823] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 565.790613][ T4823] Call Trace: [ 565.793949][ T4823] [ 565.796919][ T4823] ? io_ring_ctx_wait_and_kill+0x2da/0x2da [ 565.802767][ T4823] ? _raw_spin_unlock+0x40/0x40 [ 565.807704][ T4823] ? _raw_spin_unlock_irq+0x1f/0x40 [ 565.812945][ T4823] ? process_one_work+0x7a1/0x1160 [ 565.818123][ T4823] process_one_work+0x898/0x1160 [ 565.823107][ T4823] ? worker_detach_from_pool+0x240/0x240 [ 565.828816][ T4823] ? _raw_spin_lock_irq+0xab/0xe0 [ 565.833941][ T4823] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 565.839347][ T4823] ? kthread_data+0x4b/0xc0 [ 565.843953][ T4823] worker_thread+0xaa2/0x1250 [ 565.848680][ T4823] ? _raw_spin_unlock_irqrestore+0xa5/0x100 [ 565.854766][ T4823] ? __kthread_parkme+0x162/0x1c0 [ 565.859830][ T4823] kthread+0x29d/0x330 [ 565.863977][ T4823] ? worker_clr_flags+0x1a0/0x1a0 [ 565.869031][ T4823] ? kthread_blkcg+0xd0/0xd0 [ 565.873709][ T4823] ret_from_fork+0x1f/0x30 [ 565.878166][ T4823] [ 565.881221][ T4823] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 565.888598][ T4823] CPU: 0 PID: 4823 Comm: kworker/u4:15 Not tainted syzkaller #0 [ 565.896235][ T4823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 565.906322][ T4823] Workqueue: events_unbound io_ring_exit_work [ 565.912410][ T4823] Call Trace: [ 565.915698][ T4823] [ 565.918722][ T4823] dump_stack_lvl+0x168/0x22e [ 565.923407][ T4823] ? memcpy+0x3c/0x60 [ 565.927409][ T4823] ? show_regs_print_info+0x12/0x12 [ 565.932611][ T4823] ? load_image+0x3b0/0x3b0 [ 565.937138][ T4823] panic+0x2c9/0x710 [ 565.941051][ T4823] ? bpf_jit_dump+0xd0/0xd0 [ 565.945586][ T4823] ? ret_from_fork+0x1f/0x30 [ 565.950305][ T4823] __warn+0x2f8/0x4f0 [ 565.954299][ T4823] ? io_ring_exit_work+0x314/0x704 [ 565.959442][ T4823] ? io_ring_exit_work+0x314/0x704 [ 565.964568][ T4823] report_bug+0x2ba/0x4f0 [ 565.968911][ T4823] ? io_ring_exit_work+0x314/0x704 [ 565.974040][ T4823] handle_bug+0x3a/0x70 [ 565.978207][ T4823] exc_invalid_op+0x16/0x40 [ 565.982714][ T4823] asm_exc_invalid_op+0x16/0x20 [ 565.987572][ T4823] RIP: 0010:io_ring_exit_work+0x314/0x704 [ 565.993309][ T4823] Code: 71 f7 48 8b 7c 24 38 48 8b 74 24 18 e8 e9 11 11 00 48 85 c0 4c 8b 7c 24 10 75 3f e8 6a 78 71 f7 e9 09 fe ff ff e8 60 78 71 f7 <0f> 0b b8 70 17 00 00 48 89 44 24 18 eb ca 48 8b 4c 24 08 80 e1 07 [ 566.012926][ T4823] RSP: 0018:ffffc90003377ac0 EFLAGS: 00010293 [ 566.019026][ T4823] RAX: ffffffff8a0f5680 RBX: 00000001000066ef RCX: ffff888027438000 [ 566.027004][ T4823] RDX: 0000000000000000 RSI: ffffffffffffffda RDI: 0000000000000000 [ 566.034986][ T4823] RBP: ffffc90003377c30 R08: dffffc0000000000 R09: fffff5200066ef49 [ 566.042967][ T4823] R10: fffff5200066ef49 R11: 1ffff9200066ef48 R12: dffffc0000000000 [ 566.050949][ T4823] R13: 1ffff11009fcba4c R14: ffff88804fe5d260 R15: 0000000100006715 [ 566.058958][ T4823] ? io_ring_exit_work+0x314/0x704 [ 566.064102][ T4823] ? io_ring_ctx_wait_and_kill+0x2da/0x2da [ 566.069962][ T4823] ? _raw_spin_unlock+0x40/0x40 [ 566.074837][ T4823] ? _raw_spin_unlock_irq+0x1f/0x40 [ 566.080063][ T4823] ? process_one_work+0x7a1/0x1160 [ 566.085636][ T4823] process_one_work+0x898/0x1160 [ 566.090656][ T4823] ? worker_detach_from_pool+0x240/0x240 [ 566.096317][ T4823] ? _raw_spin_lock_irq+0xab/0xe0 [ 566.101373][ T4823] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 566.106761][ T4823] ? kthread_data+0x4b/0xc0 [ 566.111291][ T4823] worker_thread+0xaa2/0x1250 [ 566.115985][ T4823] ? _raw_spin_unlock_irqrestore+0xa5/0x100 [ 566.121986][ T4823] ? __kthread_parkme+0x162/0x1c0 [ 566.127048][ T4823] kthread+0x29d/0x330 [ 566.131174][ T4823] ? worker_clr_flags+0x1a0/0x1a0 [ 566.136229][ T4823] ? kthread_blkcg+0xd0/0xd0 [ 566.140850][ T4823] ret_from_fork+0x1f/0x30 [ 566.145396][ T4823] [ 566.148783][ T4823] Kernel Offset: disabled [ 566.153231][ T4823] Rebooting in 86400 seconds..