last executing test programs: 12m54.064621582s ago: executing program 32 (id=1727): pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) vmsplice(r1, &(0x7f0000000280), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0xd, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x64) r2 = socket$inet(0x2, 0xa, 0xa5d1) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000003a80)={{0x2, 0x4e23, @broadcast}, {0x306, @broadcast}, 0x2c, {0x2, 0x4e20, @empty}, 'lo\x00'}) close_range(r1, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000185000/0x3000)=nil, 0x3000, 0x15) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000130001031000"], 0x14}}, 0x20000000) readv(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x44080) sendmsg$nl_route_sched(r3, 0x0, 0x4000) socket(0x10, 0x80002, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000001640)={0x1e, 0x0, {0x2, @usage=0x7, 0x0, 0xc, 0x7a, 0x1ff, 0x4c1, 0x0, 0x1, @struct={0x3f3b, 0xe2}, 0x8, 0x5, [0x1, 0xf72, 0x725aaa4d, 0x2, 0x7, 0x1]}, {0x8, @struct={0x1, 0x80}, 0x0, 0xffffffffffffff00, 0x80, 0x6, 0x7f, 0x10001, 0x83, @struct={0x1bd, 0x8}, 0xff, 0x0, [0x5, 0x1000, 0x5, 0x0, 0x6, 0x6]}, {0x40b6, @struct={0x80000000, 0x7fffffff}, 0x0, 0x1, 0x6, 0x9, 0x1, 0x0, 0x9, @usage=0x6, 0x5, 0x5, [0xb98, 0x1, 0xa0d, 0x5, 0x6, 0xe]}, {0x3, 0x8, 0x7}}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000001a40)={{r3}, 0x0, 0x1c, @unused=[0x401, 0x8, 0x1, 0xfff], @devid=r4}) 7m36.046768209s ago: executing program 33 (id=5072): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) unshare(0x2a020400) r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x2000) ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000180)=0x1) 6m35.069380036s ago: executing program 34 (id=5672): mknodat(0xffffffffffffff9c, &(0x7f0000001cc0)='./file0\x00', 0x2, 0x80e2e8) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x100a5078, 0x9, 0xffff, 0x3, 0xfffc, 0x0, 0x0, 0x8, 0xa4001f7f}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000041c0)="412e450a2a7b9586d1e6e9de257afc4fd60c8de430c0d6348b2cf1db8d070a539de9c1e91a178f9240dbcfe303566018f6c20c55d643a2ed46aaacf49ca491ee2f06184bdb548778a2c56e56f6b40b994419428bbbb9dfa5f9593511ca8ae1c088fb0ee5da72f505000000000000002c04754204f194ae6ceff4570d44496eeffe619998eafc7167d22e1c6aa73e89ad19224e35130a37cf68d5c41ccafe59b4b753a26e06c4306d31d78de6cede97c06e3ca2cc4af66b7548268efa91621ffca2655d2c8f1a9bb019b88fa729cb3d32f72c098c44898d42c42f39feb4faead93980726c236129acdf31c01f1cabb5ca3ec4e45eb5e6e59912792b4976e3f2b560c861d49b539d8e1870040a8cf190a8a767ec067a8048aac53336b44669d3d425843ae80681a7c02a5d5a3d90f355fd4a6ac277e75230d558f0df20cb323cc65e9b5a258cdd669c8a9534e4aff09a8fe89b124748c9e756c28789c2152a5142bc0bb205e339d43bb980b3f04a3c1a424a2a093966b20600a5410e0528fb35937c998eea19f01eaf2f39e16d85563a6737ddab3213ca1832f0afdf891e34a582f6a4ac81fda70ebc3fedac2fb3a492fdb40b91021e5d371d990064cd1f7c2c1a6472dec7505f9a4940057a3e57fd53aa3cd2eb914e073a19b6e925f8553e6875c093c7d19de25861fd9640f0eca4cda0467f12126daa2e0c6df7d4e4babe5a6e59e8391be7700790315b6b8a8aa74cd6d3f054aceaeda79430676b67fe25c9029e0894b413377fc4d8300d9f9338fadd07e4c80cac08113df8971a868458c47c06fff0c1c4bfd48ea583e9e76ef103d42c233b6de10b30612cdbeb6b60a6a4dbbe2da63cc2dd4fb93cac65af3c1279274f4af0e2c5b96e6068aa5b41f7548fb72b0c142351f64446db7425115b89132b5589ee642ebbde655adb2d7d1117456a6e4f2886879b42baf85e05d53e2aceea9c3830673bdc4d081675fe76b994651af9c3f16b7513834fce4654f84558a8308fa677d05bffcc893d9813bf87c5ec520cd66ad58dc06f0c47d253cd36dfec82980fc8dbdcd4b1c037c2b30bef455984f3e8ed19d69e185fe4fbdda2c2517ec9abfbb4841252e650b6bf56fdeca9a4ee3c311de3c6859ec14cc00e95323c57c02fa894d83ea17944f3112fc19a7e11335d7951ec6dd5b4f06fb9b637313a230341ea5da6a7a959e707d0cd5fca60a6649c8df8d6c17e9a49d230e5775df14e4b43aa3420bd0b8814ec7360ab1910e69fab8932f7646d7998bdc2e8ec354c52da21ed83fb7582cb9d37bb95f144974f72c7b0ae7b42945768fa8ec0dd6daba72d05809670506ef1054282201b00906c8af64e3e13a10f180688c96549b2d3d6b04403fd571e7b132891dd4b7cf37aec25ca1e9190c17aaefbc31e059915c12c232fb7097e9fa6f35fbb265c7102db62e2264590c583ea90f1aee3f166af81430d9084eb0c760ebbb16049c9fd1fee6ce33c8ac205e3ac9c275531feadfa4054e0c027c26beb009f54aa72b864d39bb11753f77931bb960276db33021c65671e57b3708bbf979be222e8439d71f58ca87cec7a054517af398a42735b580717377a54f139e2c46813cbb03d98e49c26f4ed54d75e48573cd06145f913f4e313eeee837496dfff75aa722fd8486c45f9c959da12ae48ba4a10712120a203e2476c7b96031d8f8773f68344e6fa21831287655aabbd594e9f272eb1a7315d2d79b8bcd5e63004cd106f80b1e40a5d9e428a01bc58264f4d63c2ee9db6efa70607a642aeb883bf4b9fe009d7f09c16b05a2c9b73573e9019e161ebbdc1fc9b9cd0c5fe1b57adcba2d0f3a767ad59aafa159b3dd181f0601ff95e8af8b5410e56c81ffb8ab35b1e04af35dabf69f08572e69260b72bfd502c5a0de627fd3fee44bf1d4a261bd356056c5739398e3ff161beec1240a089625daffbc61dc5e660c274565477a0ff1797fefff04a98704802ab0674ab72d400686229608cbfd2ca20f4e62495e8b09de9d180c47375bbad72f4474b67d56104b4b466192be60f7aa668fd0a4338b856f114311842ee806d6488ab09098ed9de0e21bcc8b42a5d5713d15eca108fcc7a65d6b414a112524a6e1418644508dd957147a92d4399d13faaf01cacef40549cd11900f9aa32a8333f55796ef25d33c554a308da9797cd0ac25888311b0ac88eff0be7a36ddedcfc2b095abb4d5a6a4edbbad67b70cdf60c7ed0c5e040ced90edb3322ef684332358942ede9191b431c99b3abf8f9c50206479f0ac118c0a99df61fb9c90d846f41caa6a2448fb7e15640965e051c2af4ee72a5cc7c962bacff7019615c10e6c3054e2e5792df3aa6e2c33425552148466a88568cc79b6edebf0107b7d3d24423a665d20c3a1c0f1a6b34eb475bf875912115914cfabcf394f8a096d64e5dc95705074fe5e985497dcf052b9f748b9d4688859c0200fa43719e4722ed6c064c0efa7e07beb2a26fd724b63537fa0eb506365d5c029cd8dce7dd0a1cb9d9058c061739734af6be9e880fe7e28a211a4c368a7babd1107110ecbb384b274cc092b9511c4abde2ddd863162e2739984a9f3c0a76e3c530a27d5e385f4a3b87607b2a944e09d28239661d27719e22c0a657ea383c30859ca29cdb8fbc79bc83e995dcb361743a7e195650c37e570b768a0a1f0b118fa5be9b3c838326343ec5b376d5ee040ee29dfd868cccf9cfa4591151f519cd6e2ae1453a58aa92f90ee5be11ceb8511ab743f399be0a190eeddfd112336866831c3255ef6520d88b2581ea3767f3df01a38d9b4656f2a89c5df41443291a795da45c8a846015cd041bea0dfbe648348b10ae73ce43d9017182792cd9172eee642c549a530cc1f537f9aa70ca63792ba4a86a713ae09b917136e5bf1506ad7f367d8d2f77f47a2318facd109bba9b1327b5db9e4aeffbdcf414db761eeacc227a15cd72aa52c8ede33bdbab9de9aa1e8f470a388013d07f08777e2131bbd4856ab5c1c38d03ef407197ccf24e8b2a8db69e78f9d6623033c453541bb79f9e0be9a55588e2e54fce65fb785467064a146c4bf218068b5e3efdafaf93a98253becaef226cd79468ff1bbe0c9d43877f5cbb5844fd8957f15d3ef208aac11816585cdccf039c36b429d3d7fb634054fd0f09c8abea3746a6b7379142abde26d998ac7e39b94746c60c09f86ddbd7497849d1ef839730672449f35a3c3253666e9fc053ac1c518e44e0b84555be507f7c00fa9e4864b4bf40ac3d93f12001eb780a779e655d0633803268c094ae161a0efd652003d6ac47f9a6c28d866b56233f371627b01e0fe9361dca611a28841968d4e12cb73d49ce08fe25de4a90b2d34607202b20e71f5e1eed38e17d0a2748f548cf61735f4c9cead1cb93b11929d906d65fc60f88e6919b7b5a1014e6d408bce9c8cc832eecf9147708fe451891717d2ed99dee70773feaa97985102abd3dd05c904c28898afe060621db6564887bc4afe158fbe1d819136a1ac1dc9d8674798a93daf5255460b50c34496205834c668db4c764e76ebb6cdaf5fc44b881cc2ae87b4a7cc045143f96b1620abfd0f116e673b335beefdafa1e58d9194e010cb78956044646da5ba853ce981667f2b8e5001c2df437c9d597ccd2be7d2887f5cb7aad0539abb3f9db1c8f5cd4d7d831946ba1c1aa8737c114fec1ac9a82519f57cb48c49b7f62e9eaa89f448df33fb307cd0036c70b490ac340f7d04e14f32bfeebb08a9d5bc7bbef8f231ea09311d4c82cc55c90eb53c6c003cc98a34dd3c4ec2d8b3a655a78e16e908f368733d0a02b36fe963e2d80b5e6f7b2e3aae3013c900c76e4d56e8348bef221f8a642e692c23b12520fb68c793e789eeeceb4efb2097a4d5952d144094cd7be6edc933d257f6230e962d70ba42e1b07ad9eca0ccd60d3d9a6e06b73ccf96a8aa490ed3bd58bf4d79db65355ae145b54be004e464f4dd23fb8b1bf15e13838116083da67186513652608e37c8f847b2bcafb57bcefc7efc8c8182c7d708cce5d14695b4e618e77f8e7be81f27a05e415fd37ac21507a665b2558daee5c0b0859fedfede8c03f181ef5e0ec0da6caa3edf402dd73bcb4026c489a7cca8ab700d3e9f050006c36768a16e8a48e48ed5750b8cdb7ad1fd12d4cc8333d324d6c83905303fa7013fc02553b587544affe38f1a95e0c4c39740d63b6d387fc89b30bd5fd745cb64844b13897ccf5cca135f7d39e03ce8adcda919d86b25b52764b0a0c4f07f88df68868415de13863df84a7e8d355b09cf90e482eb4174fd01f1b371a4dc52f3c89fc3a70c71657aa5d7573ef9acf4d2b0b321c41ff2640515bb43637ba2288ca0bff2e2a3a998ad8294c52f9edfe0a4ee0a3f8ed5b4b5c43319bb9c58dd07ea3237d7bb62cb086e7ea4a81cba2cdeb28794a09c275a704963110b64720bd089e3737ee1a91e348b5e97b63e1724de1fa9f49961d653bbb47b6fa993b035cf59659bcd0306180645162568abf51127845cbe6e37cc3c19b9d69657db4258fa5e8428a73eff6506bff474c2e302ad5559ac8de44c6f0baba5e2e579e7d7f9d9ebf540674432ac11d92bfc9abdc24126888b533f43bd6f293b0bc315915743114a35308a0ee2e710522137918a2b09ddbbc7a2313a2a6b85a1ad26f14dd70072651c8300ddf6de29704b716ce1bc431c66ccc96731f46359a9f6850976c96dcb5e0ee47446f50b6b3ba90d45224066e123ad3854d877c0cdd9325000ac0d6813c30cd43d3e150335601724ca3666458dc4c04f6562296982353e155d5255c9008c0b46d21a678c8fcb3aa8d6574476e0458eb0a76a6cb50f929ed218cc4654cb4f95fb3afbc2548b74acc312563375a19e55d488599488dfed4dd31b39f29ad61dad343dfca3b45b316a34e7a7bebd2b0f562a9e69848d13fc80a4fa52d0f17bd15d9e1fd39a7dcc86128d14493805d105a745673bddea68ca74ac09d95cc7412d5be2cbd0a247a81dc9e148111e22cdf3375805469226ca3538f960a6ba6aa0eeeb87c784ffb1bfc09180a61be3c7c535fc6d593c3b3f4de21b8c3eccc9021e80fb07dce0aeb3b023bd55f24356f646791ba80e5ca21ac092a069ae0a22cfefc08c23cc7aa69b570bd17cce9de15871d363f167288f99f04761caa67f12c949466493f661d39ee4280c955446ff5a9bb14f2d1ae21cdb91a5868e0c52097cf380f571935b140562922763f1b79c3709b949c57a00b08828ce9e685f6b234b5fe3c62d9feb249ce75e81f5efd556c14d5da24dc0554723fdbe52659969a39f470e82c50c4777c908628436e31177af1125d5f70ff627462247e5bc20c47ef75f369174586d43d42f7eefdd47fefa745badebca2a881ccc018ea411cc8a7a0881422bee8704bb98e6bea9fbec63441fb45d7ccfd436909b57a2b60b788e15bda3ca7663b19bd84d0879deb639f10def9a99d42a4b9a4fd7fecbf6d2e7598678307ba9a5b6f143c27cf1ca41e3c904007bb762cd5df6e63c4cf422c2ba959e53bd8e5664cf5df6a91a4bc8cebc52b22f30060fcbc5ead53d38eabd160c1da4cab8aa95c3640ffd78074aa2cbb05cb8ea90a0c95a4a1b2be1ee94f238000f1faffa069d87039f13f5f84ff368aec5a0b10020232b9fc954a6c22573ef48459e574d48a4845837e1d6ef386738ccedd093d4d5bf3a3f790c875ba7449d03397642feb71100f2c25ab2cadf0b0802544a2095a51b19cdece623b17d420b173a99c081f8e229b6de3c680d6bb39bb98b479517d77cca581b81cf856753a44ebd64cff111fb8ca37ea45d217a3fca44a083e6c35b0fed9f8f7631178d15e88f86c85f1ce68c900afdd1f7e5b8bd4ef3f58c447b77d3befc49180df7a5eb2ae8ae33b4ef573f3a425da8a60cde84d8eeae6d6399b9fbbfa0fa8d448b25c7f79b7554d0b02b0decbc74ae8560f630af596313fb33d442a410061ace0aa7a440d5e31ca8bb2cc495c4f0b672edb011b0c5f16781836df7f4af8329143d5a1a99d7b18ef9f774c4199d635848cedebac82637a03a189c65be667503737c75b6639ac65ad424ca475285437e6f19830b36549f607ffc387c8b11a34a838159376a6335afaa045bd2bb04e279dd72436331d07dfbd72e2436b27f0df23a266fd15cf56d1a9e93aaac8901cfe49a3219ae36c5c65c75e5c708fb82cac4d6a50726509ec3a7d32d54cf584ae353a5bff75a6de77a0b240cf8a0a72817c9d37699ca89c96e0e0d96a7665ac3a7d1febca1a1d79e2cbde8025c271360e2f90048b2d9fd56f45c013e001dad4b7785be69dc01f8a954ef7a84455986fc5c9d5167d91808efdb4476ed79f99563d887cfd4e99809d9e388501dea228cbb3cf3770082dc566455251fd9c2c742963c33500618c6ec99e0bef007408a0462a081237be4c6e5db0258d4be5fc9cf63fd1ace1f4166c053b0fb84fe24917da1255cf40bbb1b45644f6a7699cf802a35a932c374b1d62013e6afca3787627469994c02f622ab877ed5491fc2a89eea60e4e1628da89e3ad600ff6442e4ebf20e47304176b6a1703c094b3cf6d7fbbddd8d8fa5a00f28b4d8f43d88487e9d4531071512f2027198714a8d1cef126775547fc74f2a35840510f325e50361be76557767560055e084f2ecaefa0dd8ca8215301a7a887d2eaddaeb1f5c3dfdbd2cc1ba5f02d4426b98c0f861c5f724405758f442560ea6cd1d953456cc4aac6642ad61c03dbaffc2364d8ec2ef9f483c70355139d1fbd9617ab3c7eedf0b8963c1cfdab769180db43c416a90d9fdf3fd0eb2f81187642b4e2a09d6462d27527fdfda31f7b262501749dcfc6c184983f9923424131d05cc811cacf5c2c87e8e6f135349e68cde0e8997bf1dde248e5124d5dca2681abdbe58d327a8edd585821f03fdd4515728f1336495ba25c9bba56a3f706d60c35cbd0b40d0ac0583a981f9af08510ed8ed0a726e5472f8995af3837fbf1e89587633d2ef944868a153919165778e963710872af12faf96c0919c638e5affa97104471ba6e178d27602f96b9546ebe52190d91be245be08742b96389080676a566d3229e593e4f56a76ae4c58113c6adc1088703b1b92dafe32a5600e14ac1e71df829dfef425911f16a2b91f693599ecabf93065c6c4f5fefca8d4ed095599113529f65d9120d5252f577af95b404979508c343df54e4d239720e7d3a861f1dcabfa69e12d655c8a026c10a4df279b139fd222e561d205ac9b45c1054f8699eca594fb23886e0de565186597766dd5e40f74a423d5708dac254f4172f1089270988fb18715813f13ee4d131b64dd517c7e77f27f804b229f5339ac2f483b14739ac33a9645044d3010bd77ed18fb117f7b11bb51c4ed683b59e28bf25a58f123dfbeb1f0f21f03d9b57d8e61d59b311037a5b757b03ca5c95e0eb73922c6918530c99de4d6733640f2b8d13bebce31d4f5e27aab201101e48cde23a0d7e87b9511949d812e3187ee5ff11bc5858c022ed7b00790eba32f9ef7e134ce5f73a01269ca971b40e62133eca9d596a768686d6390b2c74602f6dc597faec3ed9d9658102d99c9624c1a97d00d63853578afaccc7e30a77fe054ebc23eec45f608f996fd015cd6bd50a111360f0790eff6ffb1ea59d13c8e29480bd96217188f97e53a1f5d9eae0a2badb4fea52f2bb4f8cb04d0afd99e7371a978a7d7ef473f77ea6738ff84af655313a12db24cff692ec7e282245ae9a42338db814593448f7115df3dc3f4e2faa2c2fdbd68f679d6aba01a15031347bb17d8bf8f1fad0ecf365e9dcd32e69803c5c05f4b47adbf8a21af7e9fb327f267df1c914486389a9820edf0a03bde6ef388c255761e439b2f7e1f9c1c3c95bd30c502197ab37f76b52f0d0675f366e919be19329853767bba34a540fb75bcdcc9596a4cda254a660e11bed5af9d8646ac4b7d6d7aa5d7c0005879b6d08058a56c3d3a4d3d401b883153fa7f2f6a6d34dd010f6b9e7b4e457b9ff5a5802d7723abb35f9dca0afc10f6791824dbe0a7725d534e7753445b7268d90145b6438b93fc475f44d5d678d79da6c5770f3a9106f3cffbabe4b88cbe7eda9b8a495be4f6717b0fbee6fec78c86031b6d878d47e357b2089de3e6dd19a265552553d1f7da53884ef84d0eebe782791c48a9c68a28d8ea3bb70c922b01dc20b2cd05cfb276e326651398f766f5faaea54a41da597cf6b50f3d5ebc634185b99069126b8d935c6bc42c47f2109de42091ef4ade3d87cc44aeb78709255501e64f34ac2d4b2725cf7777315f8ca9424bc9d61a896a93500faa6cf5a5aee1fb888e17b47a38a667be2ffa3bae46afa88bfd8b5b6e1186d6e41b9a4e490591043372c23f36fb48d80caff74cc349adc92bb25f701738c809ccf74c47afa193795ee67bc58ea7fd85542fa7e70218490fff212163401cfde016df2f42496bae403d5391e53fe200f758bbcdead0fe72c77861889b9632a257229c35bdfe8fa78375b4f5c768b9c60cafbde1f00aff6ca1879f6472f28001f5f13d4d9d6c3a90e04d8df09873550daa8262d39efbe96a79c697fbcc9a7f27c9f6d782d5d5f6d024b291376e9cc40d902f809072e1f0f2c2ab88ce3d074e88461f5971853e7be749943ab6e25e25e8afa5042dd73407f49b50841c7782c54eece62ec2beef1f16caf1ca5989427bd2726ca0fee33e303702e9892e4382e92c3f3a03a6188f39762db81819c7e12b424be8fd964dcdbfbac00139e8c5a6200506f13f484ac34ef3d26e7cadd53cf402117419c1618205bfa5382486094bd55448f2b1aa4dbec2289189b601b1bbf5792b2a641c6f5dd19cf24abc72fc5264cf11f6b44a4929267a02cd1de1b602b9de65a6c06640aa0f76109baa90d66eeb17295b1711365b7d6835a2dd55b7fe868c59453613240643c847a5b48d27897a58dda63e579c1bba58350550e147b190f0a2c9a5ce719d627ce3302028b4b6801bbfa8cd74874ffba35817c0eca034d19210950796807125fe6065dcd47d7c870ed2db5c00cff235e4154e2d89ec2a09a87551f9b7ca25d519b5603c0c33d2cf72878199ffab567fc5e093529b89d1163587f3564ba8291d2d96cf9762e7f568e786ea90849f6312c1a10f45d61600cd45c48e6870a7d76c913f9c4497374fc04401cbd11f7710740148234fe8f041f24d0278fcfd48846e6aa49f05016fc332dc5d46b4a26574fed5c0751cebb9f7ab4cdbc1ee011d82d6ef95c52c9df8eedac3ab5cf30805f23d88d4f707601f8e6c606b58f2fe234e948d6756d430a5c4ec76a33874886c8fb484059b47a9bd198a61a1896419288a9e81d0969dec778a53e8233f0f63bd0134e5f29825e7817e7c8ccb7d9acd8f86ac9d3af78c43df3036d7934dd294f2bb12063bee52c547d27a218145befb0ca96cbfaabd39fa245b51c39f4cd4cf8db105f9dc46a7aaa8f7d06fa208120ce1ac49326179618fa2c8596c44e174eb7a141056b1d17689c10dee089c8b0867b8a757ae12251bbd68db5fba2be341275fb6ee379309f5cde9b31242b0b2bac44da74776fac141936bd96e3177161f057c820a8c22cca8cce29b158eb55aed0260253fbee70a6dd281d9fca23e0b0a38d46c76a95e1262f1cafcf0fc37b52e649a1ba1e2c0f97d10bbf4d2b5632cf340bce56736071d5885ec9b4e17910744d3e63e2ca6deb21e43fc21e89c6865d3ad424ef4a14efe8843ff3168c99ee395400dcc8755719d290c567c95a5e7d28ec1190ceee240084d444265cc801cd960f69b368359bbf06b8a4ec23b47c7bf9d4b16c701a1c4fb9e81abb55bf49d450b566ce03de939fc6f5c51291380086f8c995cdd4fa15a325601c4846a69f15c77f55c900270bc9ea5f406480cb0e3e89bc869fe8b7cec4fbef7e76283d50c25ab1b4d34d093a7df062990a925a9c44aa2661abd7d381a4d6cdb64821ef624dd51b72e99af914bca2f80c25b82ac6945df7c7582e6d0ce2cd073e35f1fc120a68ba210410db64592a9aa319b30f2b818c495750e1cea0610e27d52be31e52e501a3bd51b501bc51c2ec8592f679b6e55b9aa58d513fd2bebadc83ba76eb45e5676f130193e9a666b8c8132c9f5141681fbab324b555c5c890d488ac2dd00feead0a20fbd8a46391438e3193edc6fb89161cd864fca98f4f39a2893c933dcd13bc8c5d5a548d24862e8161c0fad7f33aca8c86791d620815fe3f0daddb5defd933d0c10097a7a98e67625420b6c0db7c3e17ab07ea64e6f0f53fdc670799e06a2e3a871d6be363a2639e35339361311e0f528cc433eacea4f79bf217108c7b1d657840253ffdea18bdd1f93cdee63e7a9b8dbcb4ee06162b253e09ea0641f2771bd9823dd210905e9ea495f43194bb471cdeb690e8890b03b50835d53dde1b572dd123ccc8507bb57a45e46c0efb8fb3d5596bddf9782d86dd911636eae2cf64b5829cf8893faf789be3fa22859accf688f5b5da6c29cacc96d477e23b63cc934f685b6e42e1655c9a9b94d6d78402de22b8d9776e3915391aa258e57467d770d65480ba2f6a94b0337965a8c659c42b4e90b14da4697d0c0a6d74774c94c52d8ecb694eee747bdaa6c3a6d60739db18c6446090eebba72e62ab88b0e8b88e728ba8cb133d8524eda89a2bff1c8414da3edfa6f83788331c8a7e5a8af2dd3682d4752190a3c689949abdad8350111373e7fb46151f54a10f79d91940e37efb05f9f157bddcfacf018b65a38ab614807c34a2786af4a1d48c4d1c1abd31815715f9d1b103992207fc664f12c82fd923c57d8e7cfb9f4af55182318d055c704865cf484206d60e34cf7fe9b6ce60b1772c5c7cdacb6695227d80da18ec1f98a434b1aaf9c6b6d082f5663aed2bf267e559dca6b93d3ce34273846fc677f529690482df0a8f782b8ad7269f344f5f2b4d320a7ce2d2fa02284f8db634dc930c3e2b9a629245364acf35d41e9a14c88efde4e742ef1ea4b43d0caf2e70d4a617278823e6403934524debbd933e7676e441a48f630dc8bcccd55d9032d6bf3dea97d1669c39fb865b0e619eeb3f5461e517000f5aee3ef2abdb87d3a76b88e140eb4644a9fbddbdc9e20972cdfacf00bffa3a1ca5f84122c2ebc54067cdaa23967eaeb7bbbfe44e5843382b834fae1f62a066688595e4ee67c7ff9858672355abf7893ebeb4bcf88a62b2237c6e6cec9aebe3f28bfc310ced3a590e88d4bd0f53289206deb9addbf6f3c02115ce4980dadfc112683ae250c2d438fd9c0f2a090dbf122a0072828db798bdb868dcd47384dd3f5eeebc0307a5b268683cd51f312e8f02b5a7746b11a97ac43287d9b9765f03c720503cfe6e0117660a4c00d67895224c4d42b032000a10d7a743054758a8f54941fd5eaf72498b678d1579b3de4e5518f90f1e3d32517d09d7f5da9d180215e66218e9dd64036819cf12638ce82712a6cc79a9ddb36e86814b797d72c2bc58b18ba439e99965f745b4fb7de2878e3186e3e7b835c746b0935f6c67e92e3770bd8d5eb4f66d8175ceb7850e418c55e574db891639aa77fc62bc45dcb734681ede8484d4d4109a9adb8c3d00", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x8) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000000)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x1, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r2, &(0x7f0000000100)="21812a818bb993", 0x7, 0x3000000000000000}]) 6m33.871793135s ago: executing program 35 (id=5678): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="01000000010000001c0012"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x6c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x7, 0x7, 0x4, 0xfffffff2}}]}]}}}]}, 0x6c}}, 0x0) sendto$packet(r0, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0", 0xb, 0x830, &(0x7f0000000440)={0x11, 0x9900, r3, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) 6m30.921904186s ago: executing program 3 (id=5691): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12d7498, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(r1, &(0x7f0000000640)='\x00', 0x89901) 6m30.806345043s ago: executing program 3 (id=5692): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0x2c, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x49df, 0x407723, 0x16, 0x0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4604070001040000000000040002000600030000000903000038000104ce0000000e"], 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0x1c, 0x0, 0x5, 0x1], 0x0, 0x41981}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6m29.311651279s ago: executing program 3 (id=5693): r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x300, 0x0, 0x12, 0x60d, 0xd0, 0x202, 0x230, 0x2e8, 0x2e8, 0x230, 0x2c0, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x7fff, 0x200, 0x3}}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xd}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x2, 0x400, 0x9, 0xfce, '\x00', 'syz1\x00', {0x3}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360) close(0x3) r2 = socket(0x2, 0x80805, 0x0) shutdown(0xffffffffffffffff, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) shutdown(r2, 0x1) 6m28.964418329s ago: executing program 36 (id=5693): r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x300, 0x0, 0x12, 0x60d, 0xd0, 0x202, 0x230, 0x2e8, 0x2e8, 0x230, 0x2c0, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x7fff, 0x200, 0x3}}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xd}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x2, 0x400, 0x9, 0xfce, '\x00', 'syz1\x00', {0x3}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360) close(0x3) r2 = socket(0x2, 0x80805, 0x0) shutdown(0xffffffffffffffff, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) shutdown(r2, 0x1) 6m26.466771834s ago: executing program 37 (id=5700): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x10, 0x8, 0x8, 0x8, 0x81}, 0x101, 0x0, 0x7, 0x7, 0x7, 0xa, 0x12, 0x7, 0x7, 0x3, {0x3, 0x2, 0x3, 0x35db, 0x2, 0x6}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x4, 0xf}, {}, {0x7, 0xc}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006100)=@delchain={0x24, 0x65, 0x1, 0x70bd2e, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0xffff, 0xc}, {}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004004) 6m13.658136515s ago: executing program 38 (id=5709): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmmsg$inet(r0, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa", 0xa8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="bf", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000800)="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", 0x13c}, {&(0x7f0000001b00)="1791613d45501cb6a8d8eaeb96ee68b2d8daad34b8c528b97ead9f051e427e309b714d3d12d8d401ee42a68183b0e95a5b22ea526737b16783f6d819d82b492bf64f5475d1e1f435a4fd5de8795db130dc9a9e82dae807b69f5720", 0x5b}, {&(0x7f0000000140)="8418ed4842f5f8b34b578d0d108851b3aed87622d6174f230bfde4a110c15f875606b85b5309ad26babede7c2920ef3f8a73ea45d5a48662152f64bdfcd2b256eca1ae5a0f938a33db7cf70171ad482d35295e80eb0212c26f3ba3cd5f64accba9792f5f6d369f0ad62bf83dc1fe651312622298f71938ea90fa25cf3b97d409618c62d303e363f209a3aa4028bdadb7829337fc626794", 0x97}], 0x3}}], 0x3, 0x2090) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) shutdown(r0, 0x1) 6m12.148474242s ago: executing program 39 (id=5716): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004380)="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", 0x2000, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x1, 0x200000100, 0x20000000, 0x80000000000004, 0xfffffff9, 0x0, {0x40000000005, 0x1003d, 0x552, 0xc, 0x2, 0x2, 0x9, 0x2, 0x0, 0xa000, 0xfffdfffc, r2, 0x0, 0x8, 0x57}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r1, {0x7, 0x26, 0x6caff549, 0xffffffffb323ca46, 0x0, 0xfffc, 0x1, 0x80, 0x0, 0x0, 0x1, 0x10001}}, 0x50) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x1000)=nil, &(0x7f0000fea000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff4000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0xfffffffffffffc64) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc8df, 0xc000, 0xa, 0x266}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x57, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x2, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x6}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) creat(&(0x7f0000000080)='./file0/file0\x00', 0x1) 6m11.071211004s ago: executing program 8 (id=5723): syz_mount_image$fuse(0x0, &(0x7f0000000240)='./file0\x00', 0x16008, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x12424d0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r0, 0x400, 0x1) write$FUSE_ENTRY(r0, &(0x7f0000000800)={0x90, 0xffffffffffffffda, 0x0, {0x2, 0x3, 0x0, 0x9, 0x53f6, 0xc3b8, {0x2, 0x28, 0xffffffffffffff4f, 0xfffffffffffffff7, 0x7, 0x7, 0x0, 0x5d0c, 0x3, 0x2000, 0x7fff, 0x0, 0x0, 0x6}}}, 0x90) 6m11.002629098s ago: executing program 8 (id=5724): openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1e, 0x3, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x48) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) unshare(0x28000600) syz_pidfd_open(0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) pselect6(0x40, &(0x7f0000002780)={0x8, 0x0, 0x0, 0x0, 0x80000001, 0x10000000, 0x1, 0x8}, 0x0, 0x0, 0x0, 0x0) 6m10.862338916s ago: executing program 8 (id=5725): r0 = userfaultfd(0x1) close(0x3) r1 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r1, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r1, 0x1) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r2, 0x1, &(0x7f0000000800)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 6m10.553481234s ago: executing program 40 (id=5726): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x109002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close(r1) syz_clone(0x1144280, 0x0, 0x0, 0x0, 0x0, 0x0) 6m10.542034445s ago: executing program 8 (id=5728): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000780)='devpts\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12d7498, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(r1, &(0x7f0000000640)='\x00', 0x89901) 6m10.391563414s ago: executing program 8 (id=5729): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) fcntl$setstatus(r0, 0x4, 0x42000) read$FUSE(r0, &(0x7f00000040c0)={0x2020}, 0x2020) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc8df, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000cc0)}], 0x1) 6m9.895603362s ago: executing program 8 (id=5730): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000740)='team_slave_1\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000014c0)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x2, 0xfffc, 0xe652, 0x2, 0x85, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000600)={0x0, @in6={{0xa, 0x4e23, 0x5, @empty, 0x2000b055}}, 0xff80, 0x1, 0xf06, 0x2, 0xac, 0x7d, 0x5}, 0x9c) 6m9.601343689s ago: executing program 41 (id=5730): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000740)='team_slave_1\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000014c0)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x2, 0xfffc, 0xe652, 0x2, 0x85, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000600)={0x0, @in6={{0xa, 0x4e23, 0x5, @empty, 0x2000b055}}, 0xff80, 0x1, 0xf06, 0x2, 0xac, 0x7d, 0x5}, 0x9c) 5m24.563627815s ago: executing program 0 (id=5966): syz_io_uring_setup(0x456b, &(0x7f0000000240)={0x0, 0xdfee, 0x110, 0x1, 0x144}, &(0x7f0000000000), 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x9) ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0x4040ae46, &(0x7f0000000000)={0x2900000000000000, 0x3}) 5m24.095457642s ago: executing program 0 (id=5970): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r7, {}, {0xb, 0xb}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x808, 0x205, 0x1, 0x5}, 0xb, 0x1, 0x32, 0x5, 0x9, 0x2, 0x9, 0xd, 0x6, 0x1, {0xffff1c72, 0x23, 0x2, 0x8, 0xfffffffe, 0x7583}}}}]}, 0x78}}, 0x8000) sendto$packet(r4, &(0x7f0000000440)="bad330752181510000316f3a277f", 0xe, 0x2000041, &(0x7f0000000080)={0x11, 0x88a8, r3, 0x1, 0xd8, 0x6, @remote}, 0x14) 5m23.726664993s ago: executing program 0 (id=5974): r0 = inotify_init1(0x800) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) inotify_add_watch(r0, &(0x7f0000005780)='./file0\x00', 0x44000001) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1a42028, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1\x00', 0x42, 0x5) write$P9_RREADDIR(r1, &(0x7f00000001c0)={0xb, 0x29, 0x2, {0xbf9}}, 0xb) 5m23.519393555s ago: executing program 0 (id=5975): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000780)='devpts\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12d7498, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(r1, 0x0, 0x89901) 5m23.325553616s ago: executing program 0 (id=5978): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="740000001000010418ffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="03150000000000004c0012800c0001006d6163766c616e003c000280280005800a000400aaaaaaaaaaaa00000a000400aaaaaaaaaaaa00000a000400aaaaaaaaaaaa00000800030003000000080001001000000008000500", @ANYRES32], 0x74}, 0x1, 0x0, 0x0, 0x4c010}, 0x0) 5m22.795358687s ago: executing program 0 (id=5985): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0x2c, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x49df, 0x407723, 0x16, 0x0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4604070001040000000000040002000600030000000903000038000104ce0000000e"], 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0x1c, 0x0, 0x5, 0x1], 0x0, 0x41981}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5m22.141464025s ago: executing program 42 (id=5985): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0x2c, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x49df, 0x407723, 0x16, 0x0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4604070001040000000000040002000600030000000903000038000104ce0000000e"], 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0x1c, 0x0, 0x5, 0x1], 0x0, 0x41981}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5m9.08704802s ago: executing program 3 (id=5986): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000780)='devpts\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12d7498, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(r1, 0x0, 0x89901) 5m8.943666598s ago: executing program 3 (id=6084): syz_emit_ethernet(0x2a, &(0x7f0000000180)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000008004500001c0000000000119078ac1414aae000000100004e200008907839c171b453b681bc9ead78d509d46586a871c8353655e944f1"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2802, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000000)="0f20e06635400000000f22e00f237e3e660f124bfab853058ec80f01ca0f20d86635080000000f22d80f01cad838ddeff20f58f3", 0xfffffffffffffe3c}], 0x1, 0x2, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5m8.807392656s ago: executing program 4 (id=6085): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x167) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800"/12, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000070200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$fuse(0x0, &(0x7f0000000700)='./file2\x00', 0x102a, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x14a0, &(0x7f00000002c0)=ANY=[], 0x1, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5f, 0x3}) 5m8.613423588s ago: executing program 4 (id=6086): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000000)="e4836d513bcab6b90efd3ebcdfc597b9a7e727a3ece8daadf4b04a69b21dfd745934e8870086d4dcd9", 0x29}], 0x1, 0x0, 0x0, 0x20048844}, 0x4040884) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000240)="8f0978d21b640fc79ca50000c0fe470f06430f01c2440f20c0ac0a0000e39d9d0f22c066460f38809bf77f00000f214a0fc73d0d0000003e653666400fc7775f400f01c4", 0x44}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5m8.208586341s ago: executing program 4 (id=6089): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x4, 0x7ffc0001}]}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mkdir(&(0x7f0000000040)='./file0\x00', 0x10) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x178) rt_sigprocmask(0x5, &(0x7f00000002c0)={[0x5]}, 0x0, 0x8) mkdir(&(0x7f0000000340)='./file\x00', 0x0) getdents64(r2, &(0x7f0000000100)=""/62, 0x3e) socket$inet_udp(0x2, 0x2, 0x0) lseek(r2, 0x7, 0x1) 5m7.927813487s ago: executing program 4 (id=6092): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000780)='devpts\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12d7498, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(r1, 0x0, 0x89901) 5m7.69756999s ago: executing program 4 (id=6095): r0 = userfaultfd(0x1) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000000c0)={0x6, 0x44, 0x3, 0x2, 0xfc, 0x9, 0x6, 0x1e, 0x81, 0x5, 0xc1, 0x4c, 0x2, 0x5f}, 0xe) close_range(r0, r1, 0x0) 5m6.883723467s ago: executing program 3 (id=6102): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) memfd_create(&(0x7f0000000540)='\x02A\xbb\xcc\xeb\x14\x16\xe8m\x14oSaW', 0x0) splice(r1, 0x0, r2, 0x0, 0x7, 0x9) write$P9_RWRITE(r2, &(0x7f0000000040)={0xb}, 0x11000) 5m6.378364327s ago: executing program 43 (id=6102): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) memfd_create(&(0x7f0000000540)='\x02A\xbb\xcc\xeb\x14\x16\xe8m\x14oSaW', 0x0) splice(r1, 0x0, r2, 0x0, 0x7, 0x9) write$P9_RWRITE(r2, &(0x7f0000000040)={0xb}, 0x11000) 5m5.995049859s ago: executing program 4 (id=6108): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001c00070c2bbd70000000000002000000", @ANYRES32, @ANYBLOB="4000100a140001"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x20024090) 5m5.378095924s ago: executing program 44 (id=6108): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001c00070c2bbd70000000000002000000", @ANYRES32, @ANYBLOB="4000100a140001"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x20024090) 4m40.651942885s ago: executing program 1 (id=6311): socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000980)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r2, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES64=r0], 0x3c}}, 0x8010) 4m40.437799197s ago: executing program 1 (id=6313): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="2400000001040102000001800000000000"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000040)={0x20, 0x1, 0x4, 0x5, 0x0, 0x0, {}, [@NFULA_CFG_MODE={0xa, 0x2, {0x10001}}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x20000808) 4m40.242574439s ago: executing program 1 (id=6317): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x14, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 4m39.895474029s ago: executing program 1 (id=6321): socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000980)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r2, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES64=r0], 0x3c}}, 0x8010) 4m39.726934408s ago: executing program 1 (id=6323): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x439, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21801, 0x6536d5ef40a93735}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x81}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e21}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e22}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x410c0}, 0x4000020) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) fstat(r0, &(0x7f0000000340)) 4m39.518512991s ago: executing program 1 (id=6326): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x86, 0x4) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x4583c57b, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x40000, &(0x7f0000000180)={0xa, 0x4e20, 0x8001, @loopback, 0x627bcafb}, 0x1c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd6000000000140600fe8000000000000000000000000000bbfe800002"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4m24.338808509s ago: executing program 45 (id=6326): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x86, 0x4) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x4583c57b, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x40000, &(0x7f0000000180)={0xa, 0x4e20, 0x8001, @loopback, 0x627bcafb}, 0x1c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd6000000000140600fe8000000000000000000000000000bbfe800002"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4m17.681662764s ago: executing program 5 (id=6503): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, 0x0) 4m17.24489094s ago: executing program 5 (id=6508): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000380)={'wlan1\x00'}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x6, 0x0, 0x4000081, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x5, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x5, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0xfffffffffffffffe, 0x2000000, 0x0, 0x1c, 0xffffffffffffffff, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4m16.817505844s ago: executing program 5 (id=6512): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000640)={0x0, 0x23ad697ddad057f0}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4m16.275202296s ago: executing program 5 (id=6519): mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) lsetxattr$security_capability(&(0x7f0000000180)='./file2\x00', &(0x7f0000000080), &(0x7f0000000380)=@v2={0x2000000, [{0x8e2, 0x6851}, {0x3, 0x5}]}, 0x14, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000040)='./file2\x00', &(0x7f00000001c0), 0x0, 0x0, 0x1) mount$overlay(0x0, 0x0, &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000000)='./file0\x00') truncate(&(0x7f0000000140)='./file2\x00', 0xff) 4m16.047622529s ago: executing program 5 (id=6523): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x439, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21801, 0x6536d5ef40a93735}}, 0x20}, 0x1, 0x0, 0x0, 0x410c0}, 0x4000020) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) fstat(r0, &(0x7f0000000340)) 4m15.921220866s ago: executing program 5 (id=6524): socket$alg(0x26, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1c6c, &(0x7f0000000040)={0x0, 0xaebb, 0xd000, 0x20000a, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000300), 0x121400, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4m0.828515431s ago: executing program 46 (id=6524): socket$alg(0x26, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1c6c, &(0x7f0000000040)={0x0, 0xaebb, 0xd000, 0x20000a, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000300), 0x121400, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 6.149946764s ago: executing program 6 (id=9066): socket$inet_sctp(0x2, 0x1, 0x84) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0) 5.87771309s ago: executing program 6 (id=9068): socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000980)=@newtfilter={0x60, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r2, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x30, 0x2, [@TCA_CGROUP_EMATCHES={0x2c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x93, 0x3, 0xd}, {0x552, 0x1, 0x9, 0x6}}}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 5.413341307s ago: executing program 6 (id=9074): ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x20000085, 0x1, 0x0, 0x717e387b, 0x40, "1a794233a5bd00000000000000000000002000", 0x4, 0x2}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000540), 0x440c0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) setregid(0x0, 0x0) socket$inet(0x2, 0x2, 0x1) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0xf9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0xd) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0xb3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x8) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000240)=0x6) 3.995471079s ago: executing program 6 (id=9084): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0x5, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xa, 0x4}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xb474, 0x8001, 0x4, 0x0, 0x3}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) 3.859359897s ago: executing program 2 (id=9087): mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000240)={0xaa, 0x50}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x3}) creat(&(0x7f0000000180)='./file0\x00', 0x10) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) 3.298218459s ago: executing program 6 (id=9091): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x6}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) ioctl$TUNSETIFF(r2, 0x40480923, 0x0) 2.831301517s ago: executing program 2 (id=9097): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001040)='/proc/partitions\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x4000000, '\x00', 0x0, 0x0}, 0x50) pselect6(0x40, &(0x7f00000002c0)={0x0, 0x0, 0x3, 0x3, 0x0, 0x80, 0x4, 0x4}, 0x0, &(0x7f00000000c0)={0x3ff, 0x0, 0x7fff, 0x9, 0x0, 0x204, 0x7fffffff}, 0x0, 0x0) 2.447590648s ago: executing program 2 (id=9101): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x0) 2.370212863s ago: executing program 7 (id=9102): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x10f, 0x4}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 2.227224922s ago: executing program 6 (id=9104): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa00090509"], 0x0) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x3, 0x101000) syz_usb_disconnect(r0) socket$inet6_udp(0xa, 0x2, 0x0) 2.07895753s ago: executing program 7 (id=9106): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000fed000/0x13000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 1.792557216s ago: executing program 9 (id=9107): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x53, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x3000, 0xf000, {}, 0x0, 0x80000000000}, {'\x00', "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a5f2000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe00"}}) add_key$user(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.488010934s ago: executing program 2 (id=9108): socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0) 1.483304305s ago: executing program 9 (id=9109): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001040)='/proc/partitions\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x4000000, '\x00', 0x0, 0x0}, 0x50) pselect6(0x40, &(0x7f00000002c0)={0x0, 0x0, 0x3, 0x3, 0x0, 0x80, 0x4, 0x4}, 0x0, &(0x7f00000000c0)={0x3ff, 0x0, 0x7fff, 0x9, 0x0, 0x204, 0x7fffffff}, 0x0, 0x0) 1.177559262s ago: executing program 7 (id=9110): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r2, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) 1.137544515s ago: executing program 2 (id=9111): openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x24004804}, 0x200080c0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) semop(0x0, &(0x7f0000000040)=[{0x0, 0x85fd, 0x1000}], 0x1) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000040)=""/106, &(0x7f0000000380)=0x6a) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040040}, 0x20000010) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x100, 0x5, 0x6, 0x4002, 0x5, 0x37, 0xefffffffffffffff, 0x0, 0x0, 0x2000001, 0xfffffffface6e3cd, 0x40000000001c, 0x1, 0xffffffffffffffff, 0xfd]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.05161738s ago: executing program 9 (id=9112): r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r0, 0x5b03, 0x0) 911.035348ms ago: executing program 9 (id=9113): mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) mkdir(&(0x7f0000000040)='./file1\x00', 0x7) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000440)='./bus\x00') setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r0, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40040}], 0x1, 0x8040) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x3, 0x7, 0x8000000000007, 0x282b, 0x20103, 0x80001, {0x200004, 0x10005c62, 0x203, 0x0, 0x83, 0xd611, 0x10000006, 0x9, 0x0, 0x8000, 0x0, 0xee00, 0xee00, 0x3ff, 0x1}}, {0x0, 0x4}}}, 0xa0) sendfile(r1, r1, &(0x7f0000000080), 0x7f03) 807.667713ms ago: executing program 7 (id=9114): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r2, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d0004"], 0x4c}}, 0x0) sendto$packet(r0, &(0x7f0000000480)="7eeb99b6f78c67515ea2f0d01d76", 0xac, 0x94, &(0x7f0000000140)={0x11, 0x86dd, r2, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 663.173652ms ago: executing program 9 (id=9115): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4048aecb, &(0x7f0000000080)) 575.438827ms ago: executing program 7 (id=9116): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x88840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000002c0)=[@text16={0x10, &(0x7f0000000080)="360f7883b81e2626660fc7350ff4650666b95c0300000f32f4656df30f09650f01cfc6f8000f0d35", 0x28}], 0x1, 0x2, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='oom_score_adj\x00') ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000000)=@mmap={0x7, 0x2, 0x4, 0x87b422, 0x3, {0x0, 0xea60}, {0x5, 0x0, 0x6, 0x3, 0x6, 0x8, "7a644de1"}, 0x55, 0x1, {}, 0x2, 0x0, r3}) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)=@vmx={0x3, 0x0, 0x2080, {0x0, 0x3000}, {'\x00', "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008bc584c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f6f38740000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a4900"}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 223.268568ms ago: executing program 9 (id=9117): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x0) 128.137693ms ago: executing program 7 (id=9118): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$unix(0x1, 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x50, r3, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000440)="f3c4a4e50f0fd2ee89cc26d754d082f56ab994235f1fa68ec9a7256bc772a8fdbf941fddda607a1752862fe02418c5d6ee8387851c3f86e8f5005e4a039425a4b4b53fb704c7595510eb80bba548ce1b206965f41b66ebd36fbd2a081cc6ce00a7f1be1abddcea4e022800bd073dd5c6c80689370087496c63e00c2126e59a144d92e9b161aef4315667f3380cc7fcb39c6187319d1b3d2e3483df2b16eb830c72655b4248bf292ff38e0953a511357b4289f92778521a51393baa05459b60629d5db62cdd070b453bfed7ccf9a6d50ce0005137de", 0xd5, 0x80, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) close(r6) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r9, &(0x7f0000000600)="d0d43d954be91fe9b0d243c69fb8", 0xe, 0x80810, &(0x7f00000000c0)={0x11, 0x86dd, r8, 0x1, 0x3, 0x6, @remote}, 0x14) 0s ago: executing program 2 (id=9119): mknodat(0xffffffffffffff9c, &(0x7f0000001cc0)='./file0\x00', 0x2, 0x80e2e8) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x34808521, 0x401, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xa4001f7e}}, 0x50) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x8) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r2, 0x1, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r1, &(0x7f0000000100)="21812a81", 0x4, 0x3000000000000000}]) dup3(r1, r0, 0x0) kernel console output (not intermixed with test programs): cuous mode [ 782.506500][T23638] syzkaller0: entered allmulticast mode [ 782.687762][T23647] program syz.2.6219 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 783.518983][T23682] loop5: detected capacity change from 0 to 128 [ 783.626418][T23686] syzkaller0: entered promiscuous mode [ 783.679213][T23686] syzkaller0: entered allmulticast mode [ 784.366689][T23713] loop2: detected capacity change from 0 to 128 [ 784.482173][T23720] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6246'. [ 784.513755][T23720] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6246'. [ 785.055309][T23743] loop5: detected capacity change from 0 to 16 [ 785.560502][T23766] devtmpfs: Unknown parameter '#GHgnr_inodes' [ 786.171398][T23791] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 786.425471][T23808] loop2: detected capacity change from 0 to 128 [ 786.490937][ T28] kauditd_printk_skb: 51 callbacks suppressed [ 786.490953][ T28] audit: type=1800 audit(1770983952.920:654): pid=23808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6272" name="file1" dev="loop2" ino=1048729 res=0 errno=0 [ 786.500041][T23808] FAT-fs (loop2): error, invalid FAT chain (i_pos 548, last_block 8) [ 786.567987][ T28] audit: type=1800 audit(1770983952.920:655): pid=23808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6272" name="file1" dev="loop2" ino=1048729 res=0 errno=0 [ 786.570472][T23808] FAT-fs (loop2): Filesystem has been set read-only [ 786.628484][T23808] FAT-fs (loop2): error, corrupted file size (i_pos 548, 522) [ 786.926003][T23823] netlink: 'syz.2.6276': attribute type 3 has an invalid length. [ 787.618487][T23850] overlayfs: upper fs does not support file handles, falling back to index=off. [ 787.803157][T23856] netlink: 'syz.5.6286': attribute type 3 has an invalid length. [ 788.175503][T23874] loop1: detected capacity change from 0 to 256 [ 788.637552][T23894] netlink: 'syz.6.6298': attribute type 4 has an invalid length. [ 789.358552][T23926] program syz.2.6306 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 789.737178][T23941] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6310'. [ 789.769348][T23941] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6310'. [ 789.954942][T23948] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6313'. [ 790.214113][T23958] program syz.5.6315 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 790.270537][T23962] loop6: detected capacity change from 0 to 128 [ 790.442286][T23962] syz.6.6316: attempt to access beyond end of device [ 790.442286][T23962] loop6: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 790.484331][T23970] syz.6.6316: attempt to access beyond end of device [ 790.484331][T23970] loop6: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 790.589306][T23976] loop2: detected capacity change from 0 to 256 [ 790.644875][T23976] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 790.697713][T23976] FAT-fs (loop2): Filesystem has been set read-only [ 790.727318][T23976] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 790.763718][T23976] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 790.836813][ T28] audit: type=1800 audit(1770983957.250:656): pid=23976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.6322" name="file1" dev="loop2" ino=1048732 res=0 errno=0 [ 791.502001][T24004] loop6: detected capacity change from 0 to 128 [ 791.622405][T24004] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 791.683722][T24004] FAT-fs (loop6): Filesystem has been set read-only [ 791.731716][T24004] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 791.757197][T24004] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 791.783301][T24004] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 791.808069][T24004] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 791.857487][T24004] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 791.886738][T24004] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 791.909859][T24004] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 791.926538][T24004] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 791.964645][T24004] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 791.987325][T24004] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 792.014750][T24004] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 792.052514][T24004] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 792.076295][T24004] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 792.093307][T24004] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 792.102950][T24004] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 792.126813][T24004] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 792.136108][T24004] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 792.151327][T24004] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 792.163573][T24004] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 792.183072][T24004] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 792.194338][T24004] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 792.204478][T24004] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 792.213911][T24004] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 792.225432][T24004] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 792.255415][T24004] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 792.279819][T24004] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 792.313328][T24004] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 792.330716][T24004] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 792.349406][T24004] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 792.367878][T24004] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 792.386064][T24004] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 792.447151][T24004] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 792.473129][T24004] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 792.516723][T24004] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 792.542731][T24004] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 792.553711][T24004] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 792.587981][T24004] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 792.629708][T24004] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 792.648388][T24004] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 792.660235][T24004] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 792.682253][T24004] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 792.706811][ T28] audit: type=1800 audit(1770983959.130:657): pid=24004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.6332" name="file1" dev="loop6" ino=1048733 res=0 errno=0 [ 793.719503][T24065] program syz.5.6349 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 793.789660][T24070] loop2: detected capacity change from 0 to 128 [ 793.846258][T24070] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 793.887085][T24070] FAT-fs (loop2): Filesystem has been set read-only [ 793.893973][T24070] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 793.962768][T24070] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 793.999576][T24070] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 794.037130][T24070] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 794.058067][T24070] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 794.093733][T24070] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 794.117894][T24070] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 794.135654][T24070] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 794.154924][T24070] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 794.227283][T24070] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 794.267106][T24070] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 794.275590][T24070] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 794.322227][T24070] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 794.353920][T24070] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 794.392512][T24070] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 794.411690][T24070] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 794.457912][T24070] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 794.487669][T24070] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 794.496178][T24070] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 794.525328][T24070] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 794.554322][T24070] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 794.593377][T24070] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 794.615624][T24070] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 794.675852][T24070] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 794.716687][T24070] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 794.745793][T24070] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 794.766567][T24070] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 794.821667][T24070] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 794.841799][T24070] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 794.890661][T24070] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 794.907058][T24070] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 794.937171][T24070] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 794.945671][T24070] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 794.976331][T24070] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 795.006404][ T28] audit: type=1800 audit(1770983961.430:658): pid=24070 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.6350" name="file1" dev="loop2" ino=1048734 res=0 errno=0 [ 795.416545][T24112] program syz.6.6361 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 795.676301][T24117] netlink: 'syz.6.6362': attribute type 4 has an invalid length. [ 796.747649][T24141] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6370'. [ 796.756561][T24141] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6370'. [ 797.351878][T24161] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 797.379161][T24161] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 799.597041][T24220] kvm: pic: non byte write [ 799.759592][T24230] overlayfs: missing 'lowerdir' [ 799.847287][ T28] audit: type=1326 audit(1770983966.270:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24232 comm="syz.6.6396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c64f9bf79 code=0x7ffc0000 [ 799.943989][ T28] audit: type=1326 audit(1770983966.270:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24232 comm="syz.6.6396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c64f9bf79 code=0x7ffc0000 [ 800.022859][ T28] audit: type=1326 audit(1770983966.300:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24232 comm="syz.6.6396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c64f9bf79 code=0x7ffc0000 [ 800.048994][ T28] audit: type=1326 audit(1770983966.300:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24232 comm="syz.6.6396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c64f9bf79 code=0x7ffc0000 [ 800.090973][ T28] audit: type=1326 audit(1770983966.310:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24232 comm="syz.6.6396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7f9c64f9bf79 code=0x7ffc0000 [ 800.121601][ T28] audit: type=1326 audit(1770983966.310:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24232 comm="syz.6.6396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c64f9bf79 code=0x7ffc0000 [ 800.151828][ T28] audit: type=1326 audit(1770983966.310:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24232 comm="syz.6.6396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c64f9bf79 code=0x7ffc0000 [ 800.191454][ T28] audit: type=1326 audit(1770983966.310:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24232 comm="syz.6.6396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c64f9bf79 code=0x7ffc0000 [ 800.220181][ T28] audit: type=1326 audit(1770983966.310:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24232 comm="syz.6.6396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=123 compat=0 ip=0x7f9c64f9bf79 code=0x7ffc0000 [ 800.282294][ T28] audit: type=1326 audit(1770983966.310:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24232 comm="syz.6.6396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c64f9bf79 code=0x7ffc0000 [ 801.038458][T24266] program syz.5.6402 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 802.232735][T24302] program syz.2.6413 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 802.581044][T24313] loop6: detected capacity change from 0 to 128 [ 802.664450][T24317] loop5: detected capacity change from 0 to 7 [ 802.682835][T24317] Dev loop5: unable to read RDB block 7 [ 802.693423][T24317] loop5: unable to read partition table [ 802.701292][T24317] loop5: partition table beyond EOD, truncated [ 802.723201][T24317] loop_reread_partitions: partition scan of loop5 (úùƒWå¡™‰ü¾Ã½¸*‹ºÐ œëÜ%õ«µ4FLQkÝŠ5) failed (rc=-5) [ 802.761202][ T3449] loop: Write error at byte offset 4, length 3584. [ 802.789897][ C1] I/O error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 802.799443][ C1] buffer_io_error: 43 callbacks suppressed [ 802.799456][ C1] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 803.223447][T24331] overlayfs: failed to resolve './bus': -2 [ 804.310156][T24360] overlayfs: missing 'workdir' [ 804.663176][T24374] overlayfs: failed to resolve './bus': -2 [ 804.769686][T24371] kvm: pic: non byte write [ 805.245723][T24393] overlayfs: missing 'workdir' [ 805.252920][T24395] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 805.277959][T24395] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 806.259238][T24427] overlayfs: missing 'workdir' [ 806.327569][T24430] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 806.357287][T24430] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 806.749276][T24440] netlink: 'syz.2.6451': attribute type 4 has an invalid length. [ 806.968523][T17925] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 806.982154][T17925] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 806.997242][T17925] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 807.012891][T17925] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 807.020800][T17925] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 807.038910][T17925] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 807.400408][T24462] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 807.437664][T24462] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 807.728447][T24477] overlayfs: failed to clone upperpath [ 807.758073][T24445] chnl_net:caif_netlink_parms(): no params data found [ 807.896196][T24445] bridge0: port 1(bridge_slave_0) entered blocking state [ 807.904163][T24445] bridge0: port 1(bridge_slave_0) entered disabled state [ 807.911894][T24445] bridge_slave_0: entered allmulticast mode [ 807.921320][T24445] bridge_slave_0: entered promiscuous mode [ 807.930625][T24445] bridge0: port 2(bridge_slave_1) entered blocking state [ 807.938299][T24445] bridge0: port 2(bridge_slave_1) entered disabled state [ 807.945786][T24445] bridge_slave_1: entered allmulticast mode [ 807.953786][T24445] bridge_slave_1: entered promiscuous mode [ 807.998703][T24445] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 808.034992][T24445] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 808.149720][T24445] team0: Port device team_slave_0 added [ 808.185205][T24445] team0: Port device team_slave_1 added [ 808.251999][T24445] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 808.277089][T24445] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 808.321761][T24445] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 808.370830][T24502] overlayfs: missing 'lowerdir' [ 808.387817][T24445] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 808.407090][T24445] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 808.459923][T24445] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 808.526290][T24508] loop2: detected capacity change from 0 to 128 [ 808.613583][T24445] hsr_slave_0: entered promiscuous mode [ 808.637667][T24445] hsr_slave_1: entered promiscuous mode [ 808.655724][T24445] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 808.687493][T24445] Cannot create hsr debugfs directory [ 808.836860][T24518] netlink: 'syz.2.6472': attribute type 4 has an invalid length. [ 809.133429][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.142109][ T5781] Bluetooth: hci0: command tx timeout [ 809.149830][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.397734][T24541] overlayfs: missing 'lowerdir' [ 809.626937][T24547] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6478'. [ 809.686502][T24547] gretap0: entered promiscuous mode [ 809.692825][T24547] macvtap1: entered promiscuous mode [ 809.700930][T24547] macvtap1: entered allmulticast mode [ 809.706451][T24547] gretap0: entered allmulticast mode [ 809.969179][T24445] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 809.984796][T24445] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 809.998848][T24445] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 810.018996][T24445] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 810.235177][T24445] 8021q: adding VLAN 0 to HW filter on device bond0 [ 810.271033][T24445] 8021q: adding VLAN 0 to HW filter on device team0 [ 810.291033][ T1120] bridge0: port 1(bridge_slave_0) entered blocking state [ 810.298235][ T1120] bridge0: port 1(bridge_slave_0) entered forwarding state [ 810.350637][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 810.357889][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 810.439571][T24581] overlayfs: missing 'lowerdir' [ 811.038640][T24605] overlayfs: failed to clone upperpath [ 811.077805][T24445] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 811.209359][ T5781] Bluetooth: hci0: command tx timeout [ 811.250082][T24616] overlayfs: missing 'workdir' [ 811.580940][T24631] overlayfs: failed to clone upperpath [ 811.892273][T24445] veth0_vlan: entered promiscuous mode [ 811.962966][T24445] veth1_vlan: entered promiscuous mode [ 812.067574][T24445] veth0_macvtap: entered promiscuous mode [ 812.092115][T24445] veth1_macvtap: entered promiscuous mode [ 812.139434][T24445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 812.187179][T24445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 812.206828][T24445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 812.223320][T24445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 812.236356][T24445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 812.255352][T24445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 812.266684][T24445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 812.295399][T24445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 812.326030][T24650] overlayfs: failed to clone upperpath [ 812.326766][T24445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 812.358589][T24445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 812.385112][T24445] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 812.413813][T24445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 812.450169][T24445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 812.494318][T24445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 812.525430][T24445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 812.539335][T24445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 812.550343][T24445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 812.560719][T24445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 812.603806][T24445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 812.618977][T24445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 812.629871][T24445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 812.642281][T24445] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 812.665623][T24445] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 812.707331][T24445] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 812.724621][T24445] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 812.750663][T24445] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.000903][ T1120] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 813.043131][ T1120] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 813.126148][ T3449] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 813.155880][ T3449] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 813.288101][ T5781] Bluetooth: hci0: command tx timeout [ 813.409373][T24686] overlayfs: failed to clone upperpath [ 813.766907][T24704] fuse: Bad value for 'fd' [ 814.403316][T24729] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 815.368899][ T5781] Bluetooth: hci0: command tx timeout [ 815.404723][T24759] tmpfs: Unknown parameter 'mp' [ 815.831123][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 815.831138][ T28] audit: type=1326 audit(1770983982.250:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24770 comm="syz.6.6537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c64f9bf79 code=0x7ffc0000 [ 815.954518][ T28] audit: type=1326 audit(1770983982.250:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24770 comm="syz.6.6537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c64f9bf79 code=0x7ffc0000 [ 816.060124][ T28] audit: type=1326 audit(1770983982.260:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24770 comm="syz.6.6537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c64f9bf79 code=0x7ffc0000 [ 816.137082][ T28] audit: type=1326 audit(1770983982.260:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24770 comm="syz.6.6537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7f9c64f9bf79 code=0x7ffc0000 [ 816.233574][ T28] audit: type=1326 audit(1770983982.260:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24770 comm="syz.6.6537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c64f9bf79 code=0x7ffc0000 [ 816.305584][ T28] audit: type=1326 audit(1770983982.260:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24770 comm="syz.6.6537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c64f9bf79 code=0x7ffc0000 [ 816.381926][ T28] audit: type=1326 audit(1770983982.270:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24770 comm="syz.6.6537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c64f9bf79 code=0x7ffc0000 [ 816.499512][ T28] audit: type=1326 audit(1770983982.270:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24770 comm="syz.6.6537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f9c64f9bf79 code=0x7ffc0000 [ 816.546204][ T28] audit: type=1326 audit(1770983982.270:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24770 comm="syz.6.6537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f9c64f9bf79 code=0x7ffc0000 [ 816.810822][T24809] netlink: 'syz.7.6548': attribute type 4 has an invalid length. [ 817.022829][T24817] overlayfs: failed to resolve './file2': -2 [ 817.664878][T24839] fuse: Bad value for 'fd' [ 817.813810][ T28] audit: type=1326 audit(1770983984.240:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24842 comm="syz.6.6558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c64f9bf79 code=0x7ffc0000 [ 821.378687][T24957] loop7: detected capacity change from 0 to 1764 [ 821.450816][T17925] Bluetooth: hci1: command 0x0406 tx timeout [ 821.758177][T24972] loop7: detected capacity change from 0 to 128 [ 822.409633][T24992] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6599'. [ 822.522158][T24992] macvtap2: entered promiscuous mode [ 822.544760][T24992] macvtap2: entered allmulticast mode [ 825.379557][T25089] netlink: 84 bytes leftover after parsing attributes in process `syz.7.6626'. [ 826.072043][T25113] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 826.270458][T25120] netlink: 84 bytes leftover after parsing attributes in process `syz.2.6637'. [ 826.337345][T25122] tmpfs: Bad value for 'mpol' [ 826.567141][T17925] Bluetooth: hci3: command 0x0406 tx timeout [ 826.976538][T25147] af_packet: tpacket_rcv: packet too big, clamped from 42 to 4294967286. macoff=82 [ 827.796020][T25161] netlink: 84 bytes leftover after parsing attributes in process `syz.6.6648'. [ 828.059516][T25168] overlayfs: missing 'lowerdir' [ 828.656663][T25189] loop6: detected capacity change from 0 to 7 [ 828.676841][T25189] Dev loop6: unable to read RDB block 7 [ 828.688651][T25189] loop6: unable to read partition table [ 828.704909][T25189] loop6: partition table beyond EOD, truncated [ 828.727448][T25189] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 828.976228][T25196] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 829.001993][T25196] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 829.207814][T25203] netlink: 84 bytes leftover after parsing attributes in process `syz.2.6658'. [ 829.925002][T25216] kvm: pic: non byte write [ 829.968470][T25226] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 829.998083][T25226] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 830.342916][T25238] loop2: detected capacity change from 0 to 128 [ 830.411519][T17925] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 830.434691][T17925] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 830.444634][T17925] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 830.458978][T17925] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 830.466858][T17925] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 830.476080][T17925] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 830.521669][T25238] syz.2.6669: attempt to access beyond end of device [ 830.521669][T25238] loop2: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 830.564449][T25238] syz.2.6669: attempt to access beyond end of device [ 830.564449][T25238] loop2: rw=2049, sector=162, nr_sectors = 8 limit=128 [ 831.124069][T25241] chnl_net:caif_netlink_parms(): no params data found [ 831.391730][T25280] overlayfs: failed to clone upperpath [ 831.500577][T25241] bridge0: port 1(bridge_slave_0) entered blocking state [ 831.579014][T25241] bridge0: port 1(bridge_slave_0) entered disabled state [ 831.586444][T25241] bridge_slave_0: entered allmulticast mode [ 831.645087][T25241] bridge_slave_0: entered promiscuous mode [ 831.716688][T25241] bridge0: port 2(bridge_slave_1) entered blocking state [ 831.757333][T25241] bridge0: port 2(bridge_slave_1) entered disabled state [ 831.770446][T25241] bridge_slave_1: entered allmulticast mode [ 831.788426][T25241] bridge_slave_1: entered promiscuous mode [ 831.904864][T25241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 831.946458][T25241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 832.070637][T25241] team0: Port device team_slave_0 added [ 832.120466][T25241] team0: Port device team_slave_1 added [ 832.223435][T25241] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 832.263101][T25241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 832.323505][T25241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 832.364045][T25241] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 832.382334][T25241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 832.457016][T25241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 832.577104][T17925] Bluetooth: hci3: command tx timeout [ 832.723879][T25241] hsr_slave_0: entered promiscuous mode [ 832.757557][T25241] hsr_slave_1: entered promiscuous mode [ 832.778306][T25241] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 832.785925][T25241] Cannot create hsr debugfs directory [ 832.896296][T25320] netlink: 84 bytes leftover after parsing attributes in process `syz.2.6686'. [ 834.102421][T25241] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 834.147926][T25241] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 834.193448][T25241] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 834.287793][T25241] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 834.379318][T25375] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6698'. [ 834.644033][T25241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 834.658424][T17925] Bluetooth: hci3: command tx timeout [ 834.735030][T25241] 8021q: adding VLAN 0 to HW filter on device team0 [ 834.764829][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 834.772061][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 834.841161][ T1120] bridge0: port 2(bridge_slave_1) entered blocking state [ 834.848389][ T1120] bridge0: port 2(bridge_slave_1) entered forwarding state [ 835.335314][T25416] overlayfs: missing 'workdir' [ 835.693155][T25241] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 836.258499][T25453] overlayfs: missing 'workdir' [ 836.656386][T25241] veth0_vlan: entered promiscuous mode [ 836.727793][T17925] Bluetooth: hci3: command tx timeout [ 836.753620][T25241] veth1_vlan: entered promiscuous mode [ 836.803449][T25241] veth0_macvtap: entered promiscuous mode [ 836.814794][T25241] veth1_macvtap: entered promiscuous mode [ 836.843615][T25241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 836.871605][T25241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 836.885032][T25241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 836.917282][T25241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 836.947091][T25241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 837.001027][T25241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 837.017859][ T28] kauditd_printk_skb: 158 callbacks suppressed [ 837.017874][ T28] audit: type=1326 audit(1770984003.450:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25481 comm="syz.6.6721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c64f9bf79 code=0x7ffc0000 [ 837.057071][T25241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 837.067956][T25241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 837.085278][T25241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 837.085894][ T28] audit: type=1326 audit(1770984003.450:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25481 comm="syz.6.6721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c64f9bf79 code=0x7ffc0000 [ 837.096415][T25241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 837.129934][T25241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 837.140537][T25241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 837.153668][T25241] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 837.179600][T25241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 837.237221][ T28] audit: type=1326 audit(1770984003.480:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25481 comm="syz.6.6721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c64f9bf79 code=0x7ffc0000 [ 837.247019][T25241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 837.307079][ T28] audit: type=1326 audit(1770984003.480:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25481 comm="syz.6.6721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c64f9bf79 code=0x7ffc0000 [ 837.337349][ T28] audit: type=1326 audit(1770984003.480:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25481 comm="syz.6.6721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c64f9bf79 code=0x7ffc0000 [ 837.354071][T25241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 837.408335][T25241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 837.410215][ T28] audit: type=1326 audit(1770984003.480:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25481 comm="syz.6.6721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7f9c64f9bf79 code=0x7ffc0000 [ 837.427492][T25241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 837.472029][ T28] audit: type=1326 audit(1770984003.560:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25481 comm="syz.6.6721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9c64f5c84e code=0x7ffc0000 [ 837.516203][T25241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 837.525647][ T28] audit: type=1326 audit(1770984003.560:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25481 comm="syz.6.6721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c64f9bf79 code=0x7ffc0000 [ 837.548401][T25241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 837.548423][T25241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 837.548438][T25241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 837.548449][T25241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 837.548466][T25241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 837.548475][T25241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 837.550115][T25241] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 837.601368][ T28] audit: type=1326 audit(1770984003.560:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25481 comm="syz.6.6721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c64f9bf79 code=0x7ffc0000 [ 837.664110][ T28] audit: type=1326 audit(1770984003.560:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25481 comm="syz.6.6721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f9c64f9bf79 code=0x7ffc0000 [ 837.742436][T25241] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 837.766556][T25241] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 837.800107][T25241] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 837.827058][T25241] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 837.846530][T25496] overlayfs: missing 'workdir' [ 838.145697][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 838.188449][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 838.299600][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 838.329807][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 838.808031][T17925] Bluetooth: hci3: command tx timeout [ 840.099296][T25575] overlayfs: failed to clone upperpath [ 845.757512][T25666] netlink: 'syz.9.6775': attribute type 4 has an invalid length. [ 845.784258][T25669] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 845.834637][T25669] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 846.975800][T25704] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 847.006529][T25704] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 847.614668][T25738] loop9: detected capacity change from 0 to 128 [ 847.743684][T25738] syz.9.6796: attempt to access beyond end of device [ 847.743684][T25738] loop9: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 848.251266][T25759] fuse: Bad value for 'group_id' [ 848.267333][T25757] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6803'. [ 849.155002][T25796] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6816'. [ 849.320983][T25794] loop7: detected capacity change from 0 to 8192 [ 850.041870][T25821] netlink: 'syz.6.6823': attribute type 4 has an invalid length. [ 853.052471][T25924] netlink: 'syz.6.6852': attribute type 4 has an invalid length. [ 854.478161][T25965] overlayfs: failed to clone upperpath [ 854.746522][T25971] netlink: 'syz.2.6863': attribute type 4 has an invalid length. [ 856.193513][T26012] overlayfs: failed to clone upperpath [ 857.160324][T26042] netlink: 'syz.6.6881': attribute type 4 has an invalid length. [ 857.384940][T26050] overlayfs: failed to clone upperpath [ 857.558355][T26055] loop7: detected capacity change from 0 to 16 [ 857.587175][T26055] erofs: (device loop7): mounted with root inode @ nid 36. [ 857.673590][T26060] erofs: (device loop7): erofs_find_target_block: corrupted dir block 0 @ nid 46 [ 857.990362][T26068] loop7: detected capacity change from 0 to 128 [ 858.078868][T26068] syz.7.6888: attempt to access beyond end of device [ 858.078868][T26068] loop7: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 859.051231][T26095] CUSE: DEVNAME unspecified [ 859.982579][T26126] netlink: 'syz.2.6904': attribute type 4 has an invalid length. [ 863.284498][T26226] kernel read not supported for file /eth0 (pid: 26226 comm: syz.9.6930) [ 863.321646][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 863.321658][ T28] audit: type=1800 audit(1770984029.750:851): pid=26226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.6930" name="eth0" dev="mqueue" ino=118583 res=0 errno=0 [ 863.430698][T14683] kernel read not supported for file /eth0 (pid: 14683 comm: kworker/0:7) [ 864.890999][T26287] syzkaller0: entered promiscuous mode [ 864.921676][T26287] syzkaller0: entered allmulticast mode [ 866.280036][T26330] syzkaller0: entered promiscuous mode [ 866.285582][T26330] syzkaller0: entered allmulticast mode [ 867.100845][T26369] netlink: 'syz.7.6969': attribute type 4 has an invalid length. [ 868.445653][T26411] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6981'. [ 868.506275][T26411] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6981'. [ 869.650444][T26466] netlink: 'syz.6.6997': attribute type 4 has an invalid length. [ 870.220572][T26487] kernel read not supported for file /eth0 (pid: 26487 comm: syz.9.7004) [ 870.264963][ T28] audit: type=1800 audit(1770984036.690:852): pid=26487 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.7004" name="eth0" dev="mqueue" ino=118583 res=0 errno=0 [ 870.348660][ T27] kernel read not supported for file /eth0 (pid: 27 comm: kworker/1:1) [ 870.556005][T26501] netlink: 'syz.9.7008': attribute type 4 has an invalid length. [ 870.582110][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.589095][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.067514][T26516] fuse: Unknown parameter 'group_i00000000000000000000' [ 871.149992][T26522] kernel read not supported for file /eth0 (pid: 26522 comm: syz.7.7016) [ 871.180595][ T28] audit: type=1800 audit(1770984037.600:853): pid=26522 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.7016" name="eth0" dev="mqueue" ino=120230 res=0 errno=0 [ 871.349032][T26531] netlink: 'syz.2.7019': attribute type 4 has an invalid length. [ 871.625747][T26542] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 872.103910][T26562] fuse: Unknown parameter 'group_id00000000000000000000' [ 872.339332][T26570] kernel read not supported for file /eth0 (pid: 26570 comm: syz.7.7029) [ 872.376977][ T28] audit: type=1800 audit(1770984038.800:854): pid=26570 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.7029" name="eth0" dev="mqueue" ino=120230 res=0 errno=0 [ 873.097856][T26600] fuse: Unknown parameter 'group_id00000000000000000000' [ 873.362146][T26611] netlink: 'syz.7.7041': attribute type 4 has an invalid length. [ 874.193418][T26643] fuse: Unknown parameter 'group_id00000000000000000000' [ 874.737538][T26662] fuse: Unknown parameter 'grou00000000000000000000' [ 874.922138][T26667] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7058'. [ 875.604437][T26692] xt_TCPMSS: Only works on TCP SYN packets [ 875.805187][T26700] fuse: Unknown parameter 'grou00000000000000000000' [ 876.688654][T26725] netlink: 'syz.6.7076': attribute type 4 has an invalid length. [ 877.058186][T26738] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7078'. [ 877.100908][T26740] fuse: Unknown parameter 'grou00000000000000000000' [ 877.397901][T26748] 9pnet_fd: Insufficient options for proto=fd [ 877.640669][T26755] loop9: detected capacity change from 0 to 128 [ 877.706185][T26755] syz.9.7083: attempt to access beyond end of device [ 877.706185][T26755] loop9: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 878.195317][T26768] netlink: 'syz.7.7087': attribute type 4 has an invalid length. [ 878.356118][T26775] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7090'. [ 878.873643][T26800] loop7: detected capacity change from 0 to 256 [ 878.983289][T26804] loop2: detected capacity change from 0 to 128 [ 879.119588][T26807] overlayfs: failed to clone upperpath [ 879.409266][T26817] kernel read not supported for file /eth0 (pid: 26817 comm: syz.7.7101) [ 879.438578][T26817] 9pnet_fd: Insufficient options for proto=fd [ 879.446674][ T28] audit: type=1800 audit(1770984045.870:855): pid=26817 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.7101" name="eth0" dev="mqueue" ino=120230 res=0 errno=0 [ 879.568627][T26813] loop9: detected capacity change from 0 to 8192 [ 881.253463][T26854] loop2: detected capacity change from 0 to 128 [ 882.610740][T26887] fuse: Unknown parameter 'grou00000000000000000000' [ 882.687787][T26893] fuse: Bad value for 'fd' [ 882.998281][T26905] overlayfs: failed to clone upperpath [ 883.042657][T26908] loop9: detected capacity change from 0 to 128 [ 883.578727][T26924] fuse: Bad value for 'fd' [ 883.780235][T26931] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7132'. [ 884.199289][T26949] loop9: detected capacity change from 0 to 256 [ 884.444836][T26957] fuse: Bad value for 'fd' [ 884.563435][T26962] loop2: detected capacity change from 0 to 128 [ 884.617754][T26964] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7145'. [ 884.867181][T21669] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fff0000) [ 884.875118][T21669] FAT-fs (loop2): Filesystem has been set read-only [ 884.929141][ T28] audit: type=1326 audit(1770984051.360:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26973 comm="syz.7.7151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f5619bf79 code=0x7ffc0000 [ 885.017100][ T28] audit: type=1326 audit(1770984051.360:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26973 comm="syz.7.7151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f5619bf79 code=0x7ffc0000 [ 885.102359][ T28] audit: type=1326 audit(1770984051.360:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26973 comm="syz.7.7151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f5619bf79 code=0x7ffc0000 [ 885.162901][T26985] fuse: Bad value for 'fd' [ 885.201931][ T28] audit: type=1326 audit(1770984051.360:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26973 comm="syz.7.7151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f5619bf79 code=0x7ffc0000 [ 885.297039][ T28] audit: type=1326 audit(1770984051.360:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26973 comm="syz.7.7151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f5619bf79 code=0x7ffc0000 [ 885.345078][ T28] audit: type=1326 audit(1770984051.380:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26973 comm="syz.7.7151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f9f5619bf79 code=0x7ffc0000 [ 885.363752][T26992] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7156'. [ 885.385921][ T28] audit: type=1326 audit(1770984051.380:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26973 comm="syz.7.7151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f5619bf79 code=0x7ffc0000 [ 885.435069][ T28] audit: type=1326 audit(1770984051.380:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26973 comm="syz.7.7151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f5619bf79 code=0x7ffc0000 [ 885.577799][ T28] audit: type=1326 audit(1770984051.380:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26973 comm="syz.7.7151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f5619bf79 code=0x7ffc0000 [ 885.655929][ T28] audit: type=1326 audit(1770984051.380:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26973 comm="syz.7.7151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7f9f5619bf79 code=0x7ffc0000 [ 885.722946][T27008] fuse: Unknown parameter 'group_i00000000000000000000' [ 886.036009][T27021] fuse: Bad value for 'fd' [ 886.591014][T27043] syzkaller0: entered promiscuous mode [ 886.607558][T27043] syzkaller0: entered allmulticast mode [ 887.078583][T27056] fuse: Bad value for 'fd' [ 887.696293][T27084] fuse: Unknown parameter 'group_id00000000000000000000' [ 887.873092][T27095] fuse: Invalid rootmode [ 888.017452][ T5781] Bluetooth: hci2: command 0x0406 tx timeout [ 888.098852][T27102] overlayfs: failed to clone upperpath [ 888.530777][T27116] fuse: Invalid rootmode [ 889.167992][T27149] netlink: 'syz.7.7208': attribute type 4 has an invalid length. [ 889.240994][T27152] fuse: Invalid rootmode [ 889.948252][T27180] loop9: detected capacity change from 0 to 128 [ 890.030571][T27182] fuse: Bad value for 'rootmode' [ 890.668293][T27213] fuse: Bad value for 'rootmode' [ 891.639711][T27248] fuse: Bad value for 'rootmode' [ 892.609521][T27283] netlink: 'syz.7.7250': attribute type 4 has an invalid length. [ 892.634720][T27284] fuse: Unknown parameter 'use00000000000000000000' [ 893.084195][T27299] fuse: Bad value for 'user_id' [ 893.241992][T27305] 9pnet_fd: Insufficient options for proto=fd [ 893.317598][T27310] fuse: Unknown parameter 'use00000000000000000000' [ 893.472781][T27315] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7263'. [ 893.810093][T27328] overlayfs: failed to clone upperpath [ 893.849556][T27332] fuse: Bad value for 'fd' [ 894.069771][T27342] fuse: Unknown parameter 'use00000000000000000000' [ 894.303076][T27353] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7275'. [ 894.615083][T27365] syzkaller0: entered promiscuous mode [ 894.628395][T27365] syzkaller0: entered allmulticast mode [ 894.801645][T27376] fuse: Unknown parameter 'user_i00000000000000000000' [ 895.319945][T27399] loop7: detected capacity change from 0 to 128 [ 895.586621][T27408] fuse: Unknown parameter 'user_i00000000000000000000' [ 895.991256][T27424] syzkaller0: entered promiscuous mode [ 895.996807][T27424] syzkaller0: entered allmulticast mode [ 896.645705][T27450] kernel read not supported for file /eth0 (pid: 27450 comm: syz.7.7308) [ 896.693673][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 896.693688][ T28] audit: type=1800 audit(1770984063.120:870): pid=27450 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.7308" name="eth0" dev="mqueue" ino=120230 res=0 errno=0 [ 896.724036][T27454] 9pnet_fd: Insufficient options for proto=fd [ 897.767251][T27496] 9pnet_fd: Insufficient options for proto=fd [ 898.576117][T27531] kernel read not supported for file /eth0 (pid: 27531 comm: syz.9.7331) [ 898.625420][ T28] audit: type=1800 audit(1770984065.050:871): pid=27531 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.7331" name="eth0" dev="mqueue" ino=118583 res=0 errno=0 [ 898.647998][T27531] 9pnet_fd: Insufficient options for proto=fd [ 898.835284][T27544] fuse: Bad value for 'group_id' [ 899.471764][T27569] 9pnet_fd: Insufficient options for proto=fd [ 899.631863][T27575] fuse: Bad value for 'group_id' [ 900.375162][T27602] 9pnet_fd: Insufficient options for proto=fd [ 900.536319][T27608] fuse: Bad value for 'group_id' [ 900.701402][T27613] fuse: Bad value for 'fd' [ 900.841000][T27617] overlayfs: overlapping lowerdir path [ 901.284427][T27636] 9pnet_fd: Insufficient options for proto=fd [ 901.830780][T27656] fuse: Invalid rootmode [ 902.117544][T27663] overlayfs: overlapping lowerdir path [ 902.915247][T27689] syzkaller0: entered promiscuous mode [ 902.937694][T27689] syzkaller0: entered allmulticast mode [ 903.771176][T27711] fuse: Unknown parameter '00000000000000000000003' [ 904.048868][T27716] kernel read not supported for file /eth0 (pid: 27716 comm: syz.2.7386) [ 904.089490][ T28] audit: type=1800 audit(1770984070.520:872): pid=27716 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.7386" name="eth0" dev="mqueue" ino=97829 res=0 errno=0 [ 904.419292][T27723] syz.2.7388 (27723): /proc/27720/oom_adj is deprecated, please use /proc/27720/oom_score_adj instead. [ 904.885965][T27748] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7394'. [ 905.073980][T27756] kernel read not supported for file /eth0 (pid: 27756 comm: syz.7.7396) [ 905.098656][ T28] audit: type=1800 audit(1770984071.530:873): pid=27756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.7396" name="eth0" dev="mqueue" ino=120230 res=0 errno=0 [ 906.243993][T27810] fuse: Unknown parameter '00000000000000000000' [ 907.862401][T27883] loop2: detected capacity change from 0 to 128 [ 908.078805][T27895] kernel read not supported for file /eth0 (pid: 27895 comm: syz.7.7441) [ 908.112352][ T28] audit: type=1800 audit(1770984074.540:874): pid=27895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.7441" name="eth0" dev="mqueue" ino=120230 res=0 errno=0 [ 908.124176][T27883] syz.2.7438: attempt to access beyond end of device [ 908.124176][T27883] loop2: rw=2049, sector=138, nr_sectors = 80 limit=128 [ 908.220538][T27883] syz.2.7438: attempt to access beyond end of device [ 908.220538][T27883] loop2: rw=2049, sector=234, nr_sectors = 16 limit=128 [ 908.268187][T27883] syz.2.7438: attempt to access beyond end of device [ 908.268187][T27883] loop2: rw=2049, sector=218, nr_sectors = 16 limit=128 [ 908.446433][T27891] syz.2.7438: attempt to access beyond end of device [ 908.446433][T27891] loop2: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 909.490144][T27938] overlayfs: failed to resolve './file1': -2 [ 909.705051][T27945] fuse: Unknown parameter 'fd00000000000000000000003' [ 910.126775][T27960] fuse: Unknown parameter 'user00000000000000000000' [ 910.598126][T27981] fuse: Unknown parameter 'fd00000000000000000000003' [ 910.818189][T27988] overlayfs: failed to resolve './file0': -2 [ 911.377531][T28007] fuse: Unknown parameter 'user_i00000000000000000000' [ 912.076558][T28032] overlayfs: failed to resolve './file0': -2 [ 912.734872][T28050] overlayfs: overlapping lowerdir path [ 912.998000][T28059] fuse: Unknown parameter 'group_i00000000000000000000' [ 913.025965][T28061] overlayfs: failed to resolve './file0': -2 [ 913.632713][T28092] fuse: Unknown parameter 'group_i00000000000000000000' [ 914.804967][T28148] fuse: Unknown parameter 'user_id00000000000000000000' [ 916.395563][ T28] audit: type=1326 audit(1770984082.820:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28187 comm="syz.7.7531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f5619bf79 code=0x7ffc0000 [ 916.467541][ T28] audit: type=1326 audit(1770984082.850:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28187 comm="syz.7.7531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f5619bf79 code=0x7ffc0000 [ 916.533445][ T28] audit: type=1326 audit(1770984082.850:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28187 comm="syz.7.7531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f5619bf79 code=0x7ffc0000 [ 916.575468][ T28] audit: type=1326 audit(1770984082.860:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28187 comm="syz.7.7531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9f5619bf79 code=0x7ffc0000 [ 916.624057][ T28] audit: type=1326 audit(1770984082.860:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28187 comm="syz.7.7531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f5619bf79 code=0x7ffc0000 [ 916.703976][ T28] audit: type=1326 audit(1770984082.860:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28187 comm="syz.7.7531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f5619bf79 code=0x7ffc0000 [ 916.782230][ T28] audit: type=1326 audit(1770984082.860:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28187 comm="syz.7.7531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f5619bf79 code=0x7ffc0000 [ 916.889762][ T28] audit: type=1326 audit(1770984082.860:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28187 comm="syz.7.7531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f5619bf79 code=0x7ffc0000 [ 916.945849][ T28] audit: type=1326 audit(1770984082.860:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28187 comm="syz.7.7531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f5619bf79 code=0x7ffc0000 [ 917.002160][ T28] audit: type=1326 audit(1770984082.860:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28187 comm="syz.7.7531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f9f5619bf79 code=0x7ffc0000 [ 917.068200][T28222] fuse: Bad value for 'fd' [ 917.142588][T28224] overlayfs: failed to resolve './file1': -2 [ 917.310806][T28232] fuse: Unknown parameter 'user_id00000000000000000000' [ 917.835780][T28254] fuse: Bad value for 'fd' [ 918.850695][T28302] fuse: Bad value for 'fd' [ 919.563306][T28334] fuse: Unknown parameter '0x0000000000000003' [ 920.223820][T28365] fuse: Bad value for 'fd' [ 920.398529][T28375] fuse: Unknown parameter '0x0000000000000003' [ 920.858187][T28394] loop2: detected capacity change from 0 to 128 [ 921.203729][T28407] fuse: Unknown parameter '0x0000000000000003' [ 921.962155][T28440] fuse: Unknown parameter '0x0000000000000003' [ 922.242046][T28451] fuse: Bad value for 'fd' [ 922.613694][T28472] fuse: Unknown parameter '0x0000000000000004' [ 923.027526][T28496] fuse: Bad value for 'fd' [ 923.482086][T28512] fuse: Unknown parameter '0x0000000000000003' [ 923.848471][T28526] overlayfs: missing 'lowerdir' [ 924.259436][T28545] fuse: Unknown parameter 'fd0x0000000000000004' [ 924.336688][T28546] fuse: Unknown parameter '0x0000000000000003' [ 924.628073][T28565] overlayfs: missing 'lowerdir' [ 925.037157][T28582] fuse: Unknown parameter 'fd0x0000000000000003' [ 925.450800][T28603] overlayfs: missing 'lowerdir' [ 925.917438][T28625] fuse: Unknown parameter 'fd0x0000000000000003' [ 926.239529][T28630] loop9: detected capacity change from 0 to 1764 [ 926.306567][T28632] erspan0: entered promiscuous mode [ 926.318035][T28632] vlan2: entered promiscuous mode [ 926.409129][T28636] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 926.486434][T28638] overlayfs: missing 'lowerdir' [ 926.678664][T28644] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7675'. [ 927.042671][ T28] kauditd_printk_skb: 36 callbacks suppressed [ 927.042684][ T28] audit: type=1326 audit(1770984093.470:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28660 comm="syz.6.7678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c64f9bf79 code=0x7ffc0000 [ 927.083503][ T28] audit: type=1326 audit(1770984093.470:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28660 comm="syz.6.7678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c64f9bf79 code=0x7ffc0000 [ 927.121639][ T28] audit: type=1326 audit(1770984093.470:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28660 comm="syz.6.7678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c64f9bf79 code=0x7ffc0000 [ 927.172167][ T28] audit: type=1326 audit(1770984093.470:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28660 comm="syz.6.7678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7f9c64f9bf79 code=0x7ffc0000 [ 927.202401][ T28] audit: type=1326 audit(1770984093.470:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28660 comm="syz.6.7678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c64f9bf79 code=0x7ffc0000 [ 927.233887][ T28] audit: type=1326 audit(1770984093.470:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28660 comm="syz.6.7678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c64f9bf79 code=0x7ffc0000 [ 927.279138][ T28] audit: type=1326 audit(1770984093.470:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28660 comm="syz.6.7678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c64f9bf79 code=0x7ffc0000 [ 927.332871][ T28] audit: type=1326 audit(1770984093.470:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28660 comm="syz.6.7678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f9c64f9bf79 code=0x7ffc0000 [ 927.435822][ T28] audit: type=1326 audit(1770984093.470:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28660 comm="syz.6.7678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f9c64f9bf79 code=0x7ffc0000 [ 929.071672][T28745] fuse: Unknown parameter 'fd0x0000000000000003' [ 932.028363][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.035547][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.443650][T28902] overlayfs: failed to clone upperpath [ 934.097540][T17925] Bluetooth: hci0: command 0x0406 tx timeout [ 935.936803][T29046] fuse: Bad value for 'fd' [ 936.821803][T29067] loop9: detected capacity change from 0 to 8192 [ 937.146686][T29089] fuse: Bad value for 'fd' [ 939.946336][T29189] loop9: detected capacity change from 0 to 128 [ 940.513933][T29215] loop9: detected capacity change from 0 to 512 [ 940.571974][T29215] FAT-fs (loop9): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000001) [ 942.748232][T29280] overlayfs: failed to clone upperpath [ 944.238440][T29332] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 944.276773][T29332] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 944.818577][T29346] kvm: pic: single mode not supported [ 944.818817][T29346] kvm: pic: non byte read [ 944.854079][T29346] kvm: pic: single mode not supported [ 944.854367][T29346] kvm: pic: level sensitive irq not supported [ 944.887215][T29346] kvm: pic: non byte read [ 944.913486][T29346] kvm: pic: non byte read [ 944.934524][T29346] kvm: pic: non byte read [ 944.944408][T29357] fuse: Bad value for 'fd' [ 944.952245][T29346] kvm: pic: single mode not supported [ 944.952478][T29346] kvm: pic: non byte read [ 944.987520][T29346] kvm: pic: level sensitive irq not supported [ 944.987588][T29346] kvm: pic: non byte read [ 945.013673][T29346] kvm: pic: level sensitive irq not supported [ 945.013738][T29346] kvm: pic: non byte read [ 945.041356][T29346] kvm: pic: single mode not supported [ 945.041419][T29346] kvm: pic: non byte read [ 945.077480][T29346] kvm: pic: single mode not supported [ 945.077506][T29346] kvm: pic: level sensitive irq not supported [ 945.087933][T29346] kvm: pic: non byte read [ 945.469017][T29373] loop9: detected capacity change from 0 to 256 [ 945.636753][T29373] FAT-fs (loop9): Directory bread(block 64) failed [ 945.658916][T29373] FAT-fs (loop9): Directory bread(block 65) failed [ 945.665608][T29373] FAT-fs (loop9): Directory bread(block 66) failed [ 945.727021][T29373] FAT-fs (loop9): Directory bread(block 67) failed [ 945.733699][T29373] FAT-fs (loop9): Directory bread(block 68) failed [ 945.764708][T29373] FAT-fs (loop9): Directory bread(block 69) failed [ 945.802600][T29373] FAT-fs (loop9): Directory bread(block 70) failed [ 945.824698][T29373] FAT-fs (loop9): Directory bread(block 71) failed [ 945.842065][T29373] FAT-fs (loop9): Directory bread(block 72) failed [ 945.872509][T29373] FAT-fs (loop9): Directory bread(block 73) failed [ 945.978247][ T28] audit: type=1800 audit(1770984112.410:930): pid=29373 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.7897" name="file0" dev="loop9" ino=1048765 res=0 errno=0 [ 946.038802][T29391] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 946.048756][T29390] fuse: Bad value for 'fd' [ 946.065432][T29391] FAT-fs (loop9): Filesystem has been set read-only [ 946.086173][T29391] syz.9.7897: attempt to access beyond end of device [ 946.086173][T29391] loop9: rw=34817, sector=1736, nr_sectors = 32 limit=256 [ 946.116174][T29393] netlink: 40 bytes leftover after parsing attributes in process `syz.6.7903'. [ 946.612966][ T28] audit: type=1326 audit(1770984113.030:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29406 comm="syz.9.7906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36d039bf79 code=0x7ffc0000 [ 946.683176][ T28] audit: type=1326 audit(1770984113.030:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29406 comm="syz.9.7906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36d039bf79 code=0x7ffc0000 [ 946.766880][ T28] audit: type=1326 audit(1770984113.040:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29406 comm="syz.9.7906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36d039bf79 code=0x7ffc0000 [ 946.841422][ T28] audit: type=1326 audit(1770984113.040:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29406 comm="syz.9.7906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36d039bf79 code=0x7ffc0000 [ 946.947088][ T28] audit: type=1326 audit(1770984113.040:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29406 comm="syz.9.7906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f36d039bf79 code=0x7ffc0000 [ 947.022555][ T28] audit: type=1326 audit(1770984113.040:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29406 comm="syz.9.7906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36d039bf79 code=0x7ffc0000 [ 947.078661][ T28] audit: type=1326 audit(1770984113.040:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29406 comm="syz.9.7906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36d039bf79 code=0x7ffc0000 [ 947.125231][ T28] audit: type=1326 audit(1770984113.070:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29406 comm="syz.9.7906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36d039bf79 code=0x7ffc0000 [ 947.155948][ T28] audit: type=1326 audit(1770984113.070:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29406 comm="syz.9.7906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36d039bf79 code=0x7ffc0000 [ 947.205789][T29421] fuse: Bad value for 'fd' [ 947.217810][T29422] fuse: Bad value for 'fd' [ 947.987463][T29461] fuse: Unknown parameter '0x0000000000000003' [ 948.685333][T29485] fuse: Unknown parameter '0x0000000000000003' [ 949.109822][T29501] mmap: syz.6.7937 (29501): VmData 45850624 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 949.545393][T29517] fuse: Unknown parameter '0x0000000000000003' [ 950.844937][T29550] fuse: Unknown parameter '0x0000000000000003' [ 951.577412][T29582] fuse: Unknown parameter '0x0000000000000003' [ 952.878761][T29621] loop9: detected capacity change from 0 to 128 [ 954.567990][T17925] Bluetooth: hci3: command 0x0406 tx timeout [ 955.472419][T29736] overlayfs: failed to clone upperpath [ 956.257458][T29769] overlayfs: failed to clone upperpath [ 956.736177][T29791] loop2: detected capacity change from 0 to 128 [ 957.354161][T29814] 9pnet_fd: Insufficient options for proto=fd [ 957.556554][T29827] loop2: detected capacity change from 0 to 128 [ 960.762905][T29935] overlayfs: failed to clone upperpath [ 962.192749][T17925] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 962.205871][T17925] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 962.216288][T17925] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 962.238100][T17925] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 962.249149][T17925] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 962.256681][T17925] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 962.569503][T29980] overlayfs: failed to clone upperpath [ 962.682257][T29964] chnl_net:caif_netlink_parms(): no params data found [ 962.956357][T29964] bridge0: port 1(bridge_slave_0) entered blocking state [ 962.972263][T29964] bridge0: port 1(bridge_slave_0) entered disabled state [ 962.983304][T29964] bridge_slave_0: entered allmulticast mode [ 963.028404][T29964] bridge_slave_0: entered promiscuous mode [ 963.056611][T29964] bridge0: port 2(bridge_slave_1) entered blocking state [ 963.064062][T29964] bridge0: port 2(bridge_slave_1) entered disabled state [ 963.071630][T29964] bridge_slave_1: entered allmulticast mode [ 963.088537][T29964] bridge_slave_1: entered promiscuous mode [ 963.182505][T29964] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 963.238443][T29964] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 963.369854][T29964] team0: Port device team_slave_0 added [ 963.380670][T29964] team0: Port device team_slave_1 added [ 963.471200][T30014] overlayfs: failed to resolve './bus': -2 [ 963.477624][T29964] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 963.485097][T29964] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 963.513944][T29964] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 963.614437][T29964] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 963.638029][T29964] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 963.704703][T29964] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 963.803064][T29964] hsr_slave_0: entered promiscuous mode [ 963.809524][T29964] hsr_slave_1: entered promiscuous mode [ 963.816707][T29964] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 963.831750][T29964] Cannot create hsr debugfs directory [ 964.311367][T29964] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 964.337990][ T5781] Bluetooth: hci4: command tx timeout [ 964.487908][T30040] overlayfs: failed to resolve './bus': -2 [ 964.521137][T29964] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 964.830868][T29964] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 965.086334][T29964] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 965.165100][T30068] overlayfs: failed to resolve './bus': -2 [ 965.528330][T29964] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 965.575366][T29964] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 965.602828][T29964] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 965.674047][T29964] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 965.992290][T29964] 8021q: adding VLAN 0 to HW filter on device bond0 [ 966.082313][T29964] 8021q: adding VLAN 0 to HW filter on device team0 [ 966.119371][T30101] overlayfs: failed to clone upperpath [ 966.195343][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 966.202670][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 966.250437][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 966.257727][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 966.417575][ T5781] Bluetooth: hci4: command tx timeout [ 967.018636][T30137] overlayfs: failed to clone upperpath [ 967.055297][T29964] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 967.895442][T29964] veth0_vlan: entered promiscuous mode [ 967.970466][T29964] veth1_vlan: entered promiscuous mode [ 968.083104][T29964] veth0_macvtap: entered promiscuous mode [ 968.130362][T29964] veth1_macvtap: entered promiscuous mode [ 968.208343][T29964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 968.238890][T29964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 968.260262][T29964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 968.280751][T29964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 968.297337][T29964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 968.317900][T29964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 968.339870][T29964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 968.350894][T29964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 968.367601][T29964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 968.385878][T29964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 968.395916][T29964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 968.406736][T29964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 968.417455][T29964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 968.429963][T29964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 968.446113][T29964] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 968.470835][T29964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 968.487242][ T5781] Bluetooth: hci4: command tx timeout [ 968.514689][T29964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 968.541534][T29964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 968.554376][T29964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 968.565874][T29964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 968.578031][T29964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 968.588056][T29964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 968.598682][T29964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 968.608589][T29964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 968.619313][T29964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 968.630895][T29964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 968.641566][T29964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 968.652375][T29964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 968.662994][T29964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 968.678633][T29964] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 968.710286][T29964] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 968.740436][T29964] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 968.780508][T29964] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 968.817044][T29964] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 969.080084][ T3449] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 969.098440][ T3449] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 969.204731][T14510] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 969.246186][T14510] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 970.556840][T17925] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 970.587920][T17925] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 970.598926][T17925] Bluetooth: hci4: command tx timeout [ 970.600703][ T5777] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 970.622921][ T5777] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 970.638915][ T5777] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 970.650155][ T5777] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 971.014677][ T3457] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 971.201664][ T3457] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 971.342395][ T3457] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 971.481872][ T3457] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 971.969908][T30242] chnl_net:caif_netlink_parms(): no params data found [ 972.587544][T30242] bridge0: port 1(bridge_slave_0) entered blocking state [ 972.594798][T30242] bridge0: port 1(bridge_slave_0) entered disabled state [ 972.614821][T30242] bridge_slave_0: entered allmulticast mode [ 972.668362][T30242] bridge_slave_0: entered promiscuous mode [ 972.697628][T30242] bridge0: port 2(bridge_slave_1) entered blocking state [ 972.704818][T30242] bridge0: port 2(bridge_slave_1) entered disabled state [ 972.728621][ T5777] Bluetooth: hci1: command tx timeout [ 972.749042][T30242] bridge_slave_1: entered allmulticast mode [ 972.788875][T30242] bridge_slave_1: entered promiscuous mode [ 972.805995][T30315] fuse: Unknown parameter 'grou00000000000000000000' [ 973.105156][T30242] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 973.159006][T30242] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 973.658211][T30242] team0: Port device team_slave_0 added [ 973.724953][T30242] team0: Port device team_slave_1 added [ 973.861564][T30242] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 973.876036][T30242] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 973.904866][T30242] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 973.933565][T30242] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 973.941186][T30242] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 973.973902][T30242] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 974.498649][T30242] hsr_slave_0: entered promiscuous mode [ 974.514463][T30242] hsr_slave_1: entered promiscuous mode [ 974.557270][T30242] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 974.577018][T30242] Cannot create hsr debugfs directory [ 974.815112][ T5777] Bluetooth: hci1: command tx timeout [ 975.054924][ T3457] hsr_slave_0: left promiscuous mode [ 975.090040][ T3457] hsr_slave_1: left promiscuous mode [ 975.110466][ T3457] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 975.128872][ T3457] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 975.167986][ T3457] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 975.203058][ T3457] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 975.226036][ T3457] bridge_slave_1: left allmulticast mode [ 975.238025][ T3457] bridge_slave_1: left promiscuous mode [ 975.258796][ T3457] bridge0: port 2(bridge_slave_1) entered disabled state [ 975.289014][ T3457] bridge_slave_0: left allmulticast mode [ 975.294763][ T3457] bridge_slave_0: left promiscuous mode [ 975.315501][ T3457] bridge0: port 1(bridge_slave_0) entered disabled state [ 975.425533][ T3457] veth1_macvtap: left promiscuous mode [ 975.461656][ T3457] veth0_macvtap: left promiscuous mode [ 975.492017][ T3457] veth1_vlan: left promiscuous mode [ 975.504281][ T3457] veth0_vlan: left promiscuous mode [ 976.899597][ T5777] Bluetooth: hci1: command tx timeout [ 978.086261][ T3457] team0 (unregistering): Port device team_slave_1 removed [ 978.254283][ T3457] team0 (unregistering): Port device team_slave_0 removed [ 978.400091][ T3457] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 978.530974][ T3457] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 978.969983][ T5777] Bluetooth: hci1: command tx timeout [ 979.483022][T30493] overlayfs: missing 'lowerdir' [ 979.626834][ T3457] bond0 (unregistering): Released all slaves [ 980.428571][T30518] overlayfs: missing 'lowerdir' [ 980.588062][T30523] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8256'. [ 980.840375][T30533] loop9: detected capacity change from 0 to 128 [ 980.872286][T30533] syz.9.8260: attempt to access beyond end of device [ 980.872286][T30533] loop9: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 980.927491][T30532] syz.9.8260: attempt to access beyond end of device [ 980.927491][T30532] loop9: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 981.329597][T30550] overlayfs: missing 'lowerdir' [ 981.900196][T30242] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 981.996156][T30242] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 982.117551][T30242] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 982.157441][T30242] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 982.535876][T30597] overlayfs: missing 'lowerdir' [ 982.574409][T30242] 8021q: adding VLAN 0 to HW filter on device bond0 [ 982.651486][T30242] 8021q: adding VLAN 0 to HW filter on device team0 [ 982.696411][ T1120] bridge0: port 1(bridge_slave_0) entered blocking state [ 982.703612][ T1120] bridge0: port 1(bridge_slave_0) entered forwarding state [ 982.794675][ T1120] bridge0: port 2(bridge_slave_1) entered blocking state [ 982.801953][ T1120] bridge0: port 2(bridge_slave_1) entered forwarding state [ 982.975736][T30242] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 983.387800][T30625] overlayfs: missing 'lowerdir' [ 983.508274][T30242] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 983.691929][T30242] veth0_vlan: entered promiscuous mode [ 983.725626][T30242] veth1_vlan: entered promiscuous mode [ 983.869499][T30242] veth0_macvtap: entered promiscuous mode [ 983.922363][T30242] veth1_macvtap: entered promiscuous mode [ 984.029658][T30242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 984.098253][T30242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 984.121550][T30242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 984.145845][T30242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 984.176735][T30242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 984.178981][T30657] overlayfs: missing 'lowerdir' [ 984.210678][T30242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 984.232122][T30242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 984.256276][T30242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 984.277867][T30242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 984.299918][T30242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 984.322888][T30242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 984.342903][T30242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 984.363797][T30242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 984.391884][T30242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 984.421150][T30242] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 984.471786][T30242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 984.492901][T30242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 984.521159][T30242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 984.532721][T30242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 984.543112][T30242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 984.558715][T30242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 984.627171][T30242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 984.638852][T30242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 984.661734][T30242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 984.673132][T30242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 984.683647][T30242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 984.706426][T30242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 984.721234][T30242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 984.742872][T30242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 984.769242][T30242] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 984.820816][T30242] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.859473][T30242] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.927246][T30242] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.967552][T30242] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 985.146148][T30680] fuse: Bad value for 'fd' [ 985.309455][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 985.347016][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 985.392449][T30688] overlayfs: missing 'workdir' [ 985.457500][T14510] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 985.465380][T14510] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 986.005524][T30712] fuse: Bad value for 'fd' [ 986.198905][T30717] overlayfs: missing 'workdir' [ 986.758735][T30746] fuse: Bad value for 'fd' [ 986.996543][T30755] overlayfs: missing 'workdir' [ 987.434109][T30773] sctp: [Deprecated]: syz.7.8330 (pid 30773) Use of int in max_burst socket option deprecated. [ 987.434109][T30773] Use struct sctp_assoc_value instead [ 987.858306][T30788] overlayfs: missing 'lowerdir' [ 988.543021][T30814] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 988.655133][T30814] bond1: (slave lo): Enslaving as an active interface with an up link [ 988.715504][T30814] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 989.189187][T30830] overlayfs: missing 'lowerdir' [ 990.183497][T30865] 9pnet_fd: Insufficient options for proto=fd [ 990.644390][T30877] overlayfs: missing 'lowerdir' [ 991.627464][T30908] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 991.715898][T30912] loop6: detected capacity change from 0 to 164 [ 991.948370][T30914] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 992.057060][T30914] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 992.905575][T30948] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 992.961994][T30948] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 993.460893][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.467833][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.420828][T31001] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 994.492396][T31001] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 996.324302][T31066] gretap0: entered promiscuous mode [ 996.356132][T31066] vlan2: entered promiscuous mode [ 996.799897][T31086] overlayfs: failed to clone upperpath [ 1000.620134][T31182] syzkaller0: entered promiscuous mode [ 1000.645357][T31182] syzkaller0: entered allmulticast mode [ 1001.190089][T31200] netlink: 'syz.6.8453': attribute type 4 has an invalid length. [ 1001.207253][T31200] netlink: 'syz.6.8453': attribute type 4 has an invalid length. [ 1001.215160][T31200] netlink: 'syz.6.8453': attribute type 2 has an invalid length. [ 1001.259631][T31200] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8453'. [ 1006.119722][T31378] vlan1: entered allmulticast mode [ 1006.125047][T31378] veth0_vlan: entered allmulticast mode [ 1007.265268][T31421] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8515'. [ 1008.142166][T31455] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8528'. [ 1008.838241][T31479] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8539'. [ 1011.830542][T31583] fuse: Bad value for 'fd' [ 1012.364396][T31605] fuse: Unknown parameter '0x0000000000000003' [ 1012.958846][T31623] kvm: kvm [31622]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0xbab4 [ 1013.837523][T31663] fuse: Unknown parameter 'grou00000000000000000000' [ 1013.875211][T31667] fuse: Unknown parameter '0x0000000000000003' [ 1014.514995][T31690] fuse: Unknown parameter '0x0000000000000003' [ 1014.931479][T31706] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8633'. [ 1017.013211][T31783] fuse: Unknown parameter 'fd0x0000000000000003' [ 1017.780122][ T5781] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1017.792612][ T5781] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1017.803575][ T5781] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1017.815248][ T5781] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1017.830349][ T5781] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1017.839645][ T5781] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1018.047874][T31808] fuse: Unknown parameter 'fd0x0000000000000003' [ 1018.785170][T31801] chnl_net:caif_netlink_parms(): no params data found [ 1018.891328][T31831] fuse: Unknown parameter 'fd0x0000000000000003' [ 1019.103212][ T42] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1019.309229][ T42] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1019.742151][ T42] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1019.782823][T31801] bridge0: port 1(bridge_slave_0) entered blocking state [ 1019.818388][T31801] bridge0: port 1(bridge_slave_0) entered disabled state [ 1019.844827][T31801] bridge_slave_0: entered allmulticast mode [ 1019.877832][T31801] bridge_slave_0: entered promiscuous mode [ 1019.937066][ T5777] Bluetooth: hci2: command tx timeout [ 1019.981875][ T42] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1020.048947][T31801] bridge0: port 2(bridge_slave_1) entered blocking state [ 1020.056269][T31801] bridge0: port 2(bridge_slave_1) entered disabled state [ 1020.082772][T31801] bridge_slave_1: entered allmulticast mode [ 1020.122974][T31801] bridge_slave_1: entered promiscuous mode [ 1020.214551][T31801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1020.250988][T31801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1020.405785][T31801] team0: Port device team_slave_0 added [ 1020.462680][T31801] team0: Port device team_slave_1 added [ 1020.557277][T31801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1020.564287][T31801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1020.629876][T31801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1020.787709][T31801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1020.794729][T31801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1020.900442][T31801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1021.153506][T31801] hsr_slave_0: entered promiscuous mode [ 1021.194870][T31801] hsr_slave_1: entered promiscuous mode [ 1021.277625][T31801] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1021.285258][T31801] Cannot create hsr debugfs directory [ 1022.007133][ T5777] Bluetooth: hci2: command tx timeout [ 1023.560002][T31949] bridge0: port 2(bridge_slave_1) entered disabled state [ 1023.568194][T31949] bridge0: port 1(bridge_slave_0) entered disabled state [ 1024.020399][T31949] bridge_slave_0: left allmulticast mode [ 1024.031431][T31949] bridge_slave_0: left promiscuous mode [ 1024.037849][T31949] bridge0: port 1(bridge_slave_0) entered disabled state [ 1024.074352][T31949] bridge_slave_1: left allmulticast mode [ 1024.084315][T31949] bridge_slave_1: left promiscuous mode [ 1024.090742][T31949] bridge0: port 2(bridge_slave_1) entered disabled state [ 1024.097344][ T5777] Bluetooth: hci2: command tx timeout [ 1024.134018][T31949] bond0: (slave bond_slave_0): Releasing backup interface [ 1024.183367][T31949] bond0: (slave bond_slave_1): Releasing backup interface [ 1024.282100][T31949] team0: Port device team_slave_0 removed [ 1024.343467][T31949] team0: Port device team_slave_1 removed [ 1024.366643][T31949] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1024.402998][T31949] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1024.424322][T31949] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1024.448904][T31949] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1024.789736][T31949] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.798786][T31949] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.809147][T31949] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.818816][T31949] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1025.732235][T31801] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1025.768636][ T42] hsr_slave_0: left promiscuous mode [ 1025.774870][ T42] hsr_slave_1: left promiscuous mode [ 1025.785180][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1025.797072][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1025.816644][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1025.824751][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1025.839943][ T42] bridge_slave_1: left allmulticast mode [ 1025.858133][ T42] bridge_slave_1: left promiscuous mode [ 1025.865898][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 1025.890360][ T42] bridge_slave_0: left allmulticast mode [ 1025.896696][ T42] bridge_slave_0: left promiscuous mode [ 1025.906570][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 1025.982449][ T42] veth1_macvtap: left promiscuous mode [ 1025.996533][ T42] veth0_macvtap: left promiscuous mode [ 1026.012608][ T42] veth1_vlan: left promiscuous mode [ 1026.027446][ T42] veth0_vlan: left promiscuous mode [ 1026.167235][ T5777] Bluetooth: hci2: command tx timeout [ 1026.244408][T32028] fuse: Bad value for 'user_id' [ 1026.789762][T32043] syz.6.8758: attempt to access beyond end of device [ 1026.789762][T32043] nbd6: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 1027.067941][T32052] fuse: Bad value for 'user_id' [ 1027.293683][ T42] team0 (unregistering): Port device team_slave_1 removed [ 1027.379625][ T42] team0 (unregistering): Port device team_slave_0 removed [ 1027.462829][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1027.560932][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1028.336193][T32072] fuse: Bad value for 'user_id' [ 1028.348058][ T42] bond0 (unregistering): Released all slaves [ 1028.458990][T31801] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1028.484057][T31801] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1028.517632][T31801] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1028.559253][T32030] tun0: tun_chr_ioctl cmd 1074025675 [ 1028.564626][T32030] tun0: persist disabled [ 1028.582218][T32031] tun0: tun_chr_ioctl cmd 1074025675 [ 1028.587760][T32031] tun0: persist disabled [ 1029.075930][T31801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1029.119482][T31801] 8021q: adding VLAN 0 to HW filter on device team0 [ 1029.146244][ T1118] bridge0: port 1(bridge_slave_0) entered blocking state [ 1029.153459][ T1118] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1029.215110][T32098] fuse: Bad value for 'fd' [ 1029.234608][T14510] bridge0: port 2(bridge_slave_1) entered blocking state [ 1029.241949][T14510] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1029.879068][ T5777] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 1029.898711][T31801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1030.071875][T32125] fuse: Bad value for 'fd' [ 1030.317518][ T8] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1030.501149][T31801] veth0_vlan: entered promiscuous mode [ 1030.527327][ T8] usb 7-1: Using ep0 maxpacket: 8 [ 1030.538220][T31801] veth1_vlan: entered promiscuous mode [ 1030.550154][ T8] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1030.569114][ T8] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1030.585524][T32141] 9pnet_virtio: no channels available for device syz [ 1030.592397][ T8] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1030.608702][ T8] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1030.625632][T31801] veth0_macvtap: entered promiscuous mode [ 1030.637356][ T8] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1030.665185][T31801] veth1_macvtap: entered promiscuous mode [ 1030.672103][ T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1030.722304][T31801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1030.734054][T31801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1030.775298][T31801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1030.801051][T31801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1030.825656][T31801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1030.837736][T31801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1030.849128][T31801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1030.878550][T31801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1030.902654][T31801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1030.914862][T31801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1030.926225][T31801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1030.945800][ T8] usb 7-1: GET_CAPABILITIES returned 0 [ 1030.951481][T32152] fuse: Bad value for 'fd' [ 1030.952138][T31801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1030.956211][ T8] usbtmc 7-1:16.0: can't read capabilities [ 1031.001985][T31801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1031.038080][T31801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1031.074236][T31801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1031.107813][T31801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1031.142909][T31801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1031.172375][T14683] usb 7-1: USB disconnect, device number 2 [ 1031.184948][T31801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1031.210870][T31801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1031.250292][T31801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1031.270889][T31801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1031.293645][T31801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1031.334695][T31801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1031.345605][T31801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1031.357013][T31801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1031.387475][T31801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1031.409918][T31801] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1031.419821][T31801] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1031.440695][T31801] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1031.457244][T31801] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1031.695168][T32167] syzkaller0: entered promiscuous mode [ 1031.709239][T32167] syzkaller0: entered allmulticast mode [ 1031.722343][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1031.734913][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1031.769234][T32171] fuse: Bad value for 'fd' [ 1031.824114][ T1120] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1031.832142][ T1120] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1032.072335][T32177] warning: `syz.6.8808' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1032.519309][T32198] syzkaller0: entered promiscuous mode [ 1032.527107][T32198] syzkaller0: entered allmulticast mode [ 1033.162856][T32220] Invalid argument reading file caps for ./file0 [ 1033.168075][T32222] syzkaller0: entered promiscuous mode [ 1033.175821][T32222] syzkaller0: entered allmulticast mode [ 1033.988390][T32252] 9pnet_virtio: no channels available for device syz [ 1035.362019][T32303] fuse: Invalid rootmode [ 1035.415213][T32307] netlink: 'syz.6.8860': attribute type 4 has an invalid length. [ 1035.428845][T32307] netlink: 'syz.6.8860': attribute type 4 has an invalid length. [ 1035.436781][T32307] netlink: 'syz.6.8860': attribute type 2 has an invalid length. [ 1035.446562][T32307] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8860'. [ 1035.480771][T32309] block device autoloading is deprecated and will be removed. [ 1035.952249][T32327] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1036.321608][T32339] fuse: Invalid rootmode [ 1037.557038][ T27] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1037.769257][ T27] usb 10-1: config index 0 descriptor too short (expected 39, got 27) [ 1037.785621][ T5777] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 1037.785895][ T27] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1037.823785][ T27] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1037.839442][ T27] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1037.857256][T14684] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1037.868087][ T27] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1037.876395][ T27] usb 10-1: Product: syz [ 1037.896973][ T27] usb 10-1: Manufacturer: syz [ 1037.912345][ T27] usb 10-1: SerialNumber: syz [ 1037.935990][ T27] usb 10-1: config 0 descriptor?? [ 1037.961065][ T27] hub 10-1:0.0: bad descriptor, ignoring hub [ 1037.984539][ T27] hub: probe of 10-1:0.0 failed with error -5 [ 1038.024871][ T27] usb 10-1: selecting invalid altsetting 0 [ 1038.114042][T14684] usb 8-1: config index 0 descriptor too short (expected 39, got 27) [ 1038.142983][T14684] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1038.186931][T14684] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1038.212613][T14684] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1038.237807][T14684] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1038.246158][T14684] usb 8-1: Product: syz [ 1038.257102][T32371] syz.9.8882: attempt to access beyond end of device [ 1038.257102][T32371] loop9: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 1038.273712][T32371] XFS (loop9): SB validate failed with error -5. [ 1038.310903][ T27] usb 10-1: USB disconnect, device number 2 [ 1038.333535][T14684] usb 8-1: Manufacturer: syz [ 1038.370510][T14684] usb 8-1: SerialNumber: syz [ 1038.451324][T14684] usb 8-1: config 0 descriptor?? [ 1038.498403][T14684] hub 8-1:0.0: bad descriptor, ignoring hub [ 1038.504385][T14684] hub: probe of 8-1:0.0 failed with error -5 [ 1038.618909][T14684] usb 8-1: selecting invalid altsetting 0 [ 1038.877328][T32165] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1039.077148][T32165] usb 7-1: Using ep0 maxpacket: 32 [ 1039.085143][T32165] usb 7-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1039.098777][T32165] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1039.119246][T32165] usb 7-1: config 0 descriptor?? [ 1039.155567][T32165] as10x_usb: device has been detected [ 1039.169178][T32165] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1039.238218][T32165] usb 7-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 1039.368010][T32376] usb 8-1: reset high-speed USB device number 2 using dummy_hcd [ 1039.384739][T32165] as10x_usb: error during firmware upload part1 [ 1039.402328][T32165] Registered device nBox DVB-T Dongle [ 1039.423004][T32165] usb 7-1: USB disconnect, device number 3 [ 1039.436826][T32376] usb 8-1: device reset changed ep0 maxpacket size! [ 1039.488727][ T27] usb 8-1: USB disconnect, device number 2 [ 1039.529574][T32165] Unregistered device nBox DVB-T Dongle [ 1039.534083][T32165] as10x_usb: device has been disconnected [ 1039.796125][ T27] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1040.007270][ T27] usb 8-1: Using ep0 maxpacket: 16 [ 1040.050439][ T27] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1040.109273][ T27] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 1040.128123][ T27] usb 8-1: can't read configurations, error -71 [ 1040.174385][T32423] Bluetooth: MGMT ver 1.22 [ 1043.725864][T32516] fuse: Unknown parameter 'use00000000000000000000' [ 1044.029260][T32530] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8940'. [ 1045.285578][T32557] bridge0: port 2(bridge_slave_1) entered disabled state [ 1045.293356][T32557] bridge0: port 1(bridge_slave_0) entered disabled state [ 1045.358307][ T5863] IPVS: starting estimator thread 0... [ 1045.477474][T32575] IPVS: using max 22 ests per chain, 52800 per kthread [ 1045.737218][T32557] bridge_slave_0: left allmulticast mode [ 1045.743099][T32557] bridge_slave_0: left promiscuous mode [ 1045.749139][T32557] bridge0: port 1(bridge_slave_0) entered disabled state [ 1045.808559][T32557] bridge_slave_1: left allmulticast mode [ 1045.814783][T32557] bridge_slave_1: left promiscuous mode [ 1045.821169][T32557] bridge0: port 2(bridge_slave_1) entered disabled state [ 1045.854129][T32582] kvm: kvm [32581]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x86e [ 1045.869868][T32582] kvm: kvm [32581]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x821 [ 1045.880052][T32557] bond0: (slave bond_slave_0): Releasing backup interface [ 1045.886120][T32582] kvm: kvm [32581]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80c [ 1045.907587][T32582] kvm: kvm [32581]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x8b6 [ 1045.942222][T32557] bond0: (slave bond_slave_1): Releasing backup interface [ 1045.953460][T32582] kvm: kvm [32581]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x1d [ 1045.964893][T32582] kvm: kvm [32581]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x8db [ 1045.978863][T32582] kvm: kvm [32581]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x97 [ 1045.991390][T32582] kvm: kvm [32581]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x896 [ 1046.008295][T32582] kvm: kvm [32581]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x8b7 [ 1046.026126][T32582] kvm: kvm [32581]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x83 [ 1046.026514][T32557] team0: Port device team_slave_0 removed [ 1046.085217][T32557] team0: Port device team_slave_1 removed [ 1046.129709][T32557] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1046.156632][T32557] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1046.193033][T32557] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1046.232204][T32557] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1046.748331][T32557] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1046.759677][T32557] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1046.769450][T32557] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1046.796832][T32557] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1046.922843][T32559] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8953'. [ 1046.947696][T32574] tipc: Started in network mode [ 1046.967109][T32574] tipc: Node identity ac1414aa, cluster identity 4711 [ 1046.975051][T32574] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1046.983482][T32574] tipc: Enabled bearer , priority 10 [ 1047.097187][T32165] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1047.107391][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1047.247061][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1047.298813][T32165] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 1047.317019][T32165] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1047.347434][T32165] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1047.372501][T32165] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1047.387240][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1047.400223][T32165] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1047.434018][T32165] usb 3-1: Product: syz [ 1047.447340][T32165] usb 3-1: Manufacturer: syz [ 1047.462739][T32165] usb 3-1: SerialNumber: syz [ 1047.493698][T32165] usb 3-1: config 0 descriptor?? [ 1047.519008][T32165] hub 3-1:0.0: bad descriptor, ignoring hub [ 1047.525637][T32165] hub: probe of 3-1:0.0 failed with error -5 [ 1047.527281][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1047.554990][T32165] usb 3-1: selecting invalid altsetting 0 [ 1047.667069][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1047.807876][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1047.843514][T32615] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8975'. [ 1047.869475][T32616] syz.2.8965: attempt to access beyond end of device [ 1047.869475][T32616] loop2: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 1047.915146][T32616] XFS (loop2): SB validate failed with error -5. [ 1047.947166][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1048.048845][T32624] 9pnet_virtio: no channels available for device syz [ 1048.087036][ T5612] tipc: Node number set to 2886997162 [ 1048.090677][T14684] usb 3-1: USB disconnect, device number 6 [ 1048.238239][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1048.507072][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1048.916313][T32650] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8986'. [ 1049.264206][T32650] syzkaller0: entered promiscuous mode [ 1049.283955][T32650] syzkaller0: entered allmulticast mode [ 1049.308455][T32660] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 1049.335369][T32660] overlayfs: fs on './file1' does not support file handles, falling back to index=off,nfs_export=off. [ 1050.117012][ T786] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1050.318814][ T786] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 1050.337161][ T786] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1050.366941][ T786] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1050.390105][ T786] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1050.400462][ T786] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1050.417378][ T786] usb 3-1: Product: syz [ 1050.429264][ T786] usb 3-1: Manufacturer: syz [ 1050.438041][ T786] usb 3-1: SerialNumber: syz [ 1050.472842][ T786] usb 3-1: config 0 descriptor?? [ 1050.508402][ T786] hub 3-1:0.0: bad descriptor, ignoring hub [ 1050.527457][ T786] hub: probe of 3-1:0.0 failed with error -5 [ 1050.535376][ T786] usb 3-1: selecting invalid altsetting 0 [ 1050.918479][T32681] syz.2.8992: attempt to access beyond end of device [ 1050.918479][T32681] loop2: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 1050.947070][T32681] XFS (loop2): SB validate failed with error -5. [ 1051.057808][ T786] usb 3-1: USB disconnect, device number 7 [ 1052.027351][T21576] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1052.176270][ C1] net_ratelimit: 3 callbacks suppressed [ 1052.176291][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1052.216979][T21576] usb 3-1: Using ep0 maxpacket: 8 [ 1052.223858][T21576] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1052.236636][T21576] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1052.267017][T21576] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1052.281306][T21576] usb 3-1: config 0 descriptor?? [ 1052.752161][T21576] mcp2221 0003:04D8:00DD.0002: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 1052.994274][T21576] usb 3-1: USB disconnect, device number 8 [ 1053.207036][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1053.290237][T32715] overlayfs: missing 'workdir' [ 1053.857086][T21576] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1054.092252][T21576] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 1054.100657][T21576] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1054.110708][T21576] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1054.157386][T21576] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1054.166466][T21576] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1054.187157][T21576] usb 3-1: Product: syz [ 1054.191368][T21576] usb 3-1: Manufacturer: syz [ 1054.195948][T21576] usb 3-1: SerialNumber: syz [ 1054.217927][T21576] usb 3-1: config 0 descriptor?? [ 1054.227408][T21576] hub 3-1:0.0: bad descriptor, ignoring hub [ 1054.237156][T21576] hub: probe of 3-1:0.0 failed with error -5 [ 1054.250274][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1054.284139][T21576] usb 3-1: selecting invalid altsetting 0 [ 1054.310821][T14684] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1054.555886][T14684] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1054.568497][T14684] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1054.581564][T14684] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1054.596067][T14684] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1054.605523][T14684] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1054.610995][T32724] syz.2.9006: attempt to access beyond end of device [ 1054.610995][T32724] loop2: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 1054.627151][T32724] XFS (loop2): SB validate failed with error -5. [ 1054.657572][T14684] usb 8-1: config 0 descriptor?? [ 1054.750013][ T27] usb 3-1: USB disconnect, device number 9 [ 1054.900826][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.907526][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.090883][T14684] plantronics 0003:047F:FFFF.0003: unknown main item tag 0xd [ 1055.104133][T14684] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 1055.147011][T14684] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 1055.190596][ T11] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1055.287081][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1055.464008][ T11] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1055.511738][ T786] usb 8-1: USB disconnect, device number 5 [ 1055.641631][ T11] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1055.761009][ T11] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1056.327140][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1056.691043][ T303] netlink: 'syz.7.9021': attribute type 4 has an invalid length. [ 1056.719181][ T303] netlink: 'syz.7.9021': attribute type 4 has an invalid length. [ 1056.747569][ T303] netlink: 44 bytes leftover after parsing attributes in process `syz.7.9021'. [ 1057.367061][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1057.436302][ T336] [ 1058.407016][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1058.459932][ T11] hsr_slave_0: left promiscuous mode [ 1058.491248][ T11] hsr_slave_1: left promiscuous mode [ 1058.500986][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1058.510915][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1058.568632][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1058.576182][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1058.636640][ T11] bridge_slave_1: left allmulticast mode [ 1058.666039][ T11] bridge_slave_1: left promiscuous mode [ 1058.688019][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1058.718522][ T11] bridge_slave_0: left allmulticast mode [ 1058.724240][ T11] bridge_slave_0: left promiscuous mode [ 1058.766021][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1058.938857][ T11] veth1_macvtap: left promiscuous mode [ 1058.963785][ T11] veth0_macvtap: left promiscuous mode [ 1058.984589][ T11] veth1_vlan: left promiscuous mode [ 1059.017406][ T11] veth0_vlan: left promiscuous mode [ 1059.454515][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1060.487112][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1060.778829][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1060.916498][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1061.021199][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1061.104058][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1061.537017][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1061.840032][ T11] bond0 (unregistering): Released all slaves [ 1062.567896][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1062.704875][ T435] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9054'. [ 1062.984003][ T444] 9pnet_virtio: no channels available for device syz [ 1063.607014][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1063.624153][ T459] overlayfs: failed to resolve './file0': -2 [ 1064.258326][ T485] tipc: Started in network mode [ 1064.263289][ T485] tipc: Node identity ac1414aa, cluster identity 4711 [ 1064.297730][ T485] tipc: Enabled bearer , priority 10 [ 1064.341168][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 1064.341185][ T28] audit: type=1800 audit(1770984486.774:954): pid=488 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.9067" name="bus" dev="overlay" ino=3144 res=0 errno=0 [ 1064.647003][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1064.779588][ T506] overlayfs: failed to resolve './file1': -2 [ 1065.529704][T14681] tipc: Node number set to 2886997162 [ 1065.687201][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1065.802818][ T532] netlink: 'syz.7.9079': attribute type 4 has an invalid length. [ 1065.843130][ T532] netlink: 'syz.7.9079': attribute type 4 has an invalid length. [ 1065.875323][ T532] netlink: 'syz.7.9079': attribute type 2 has an invalid length. [ 1065.889152][ T532] netlink: 24 bytes leftover after parsing attributes in process `syz.7.9079'. [ 1066.412365][ T557] tipc: Enabling of bearer rejected, already enabled [ 1066.542334][ T558] syzkaller0: entered promiscuous mode [ 1066.563362][ T558] syzkaller0: entered allmulticast mode [ 1066.727009][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1066.940301][ T575] comedi comedi3: fl512: I/O port conflict (0x404fa7,16) [ 1067.577952][ T598] tipc: Enabling of bearer rejected, already enabled [ 1067.767054][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1068.112608][ T618] binder: 616:618 ioctl c0306201 2000000003c0 returned -14 [ 1068.145349][ T618] binder_alloc: 616: binder_alloc_buf, no vma [ 1068.427588][T32588] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1068.619397][T32588] usb 7-1: config index 0 descriptor too short (expected 39, got 27) [ 1068.638464][T32588] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1068.663262][T32588] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1068.684883][T32588] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1068.695219][T32588] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1068.707765][T32588] usb 7-1: Product: syz [ 1068.712073][T32588] usb 7-1: Manufacturer: syz [ 1068.721507][T32588] usb 7-1: SerialNumber: syz [ 1068.749287][T32588] usb 7-1: config 0 descriptor?? [ 1068.772343][T32588] hub 7-1:0.0: bad descriptor, ignoring hub [ 1068.789249][T32588] hub: probe of 7-1:0.0 failed with error -5 [ 1068.807017][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1068.830474][T32588] usb 7-1: selecting invalid altsetting 0 [ 1069.023197][ T645] tipc: Started in network mode [ 1069.028577][ T645] tipc: Node identity ac1414aa, cluster identity 4711 [ 1069.036398][ T645] tipc: Enabled bearer , priority 10 [ 1069.606094][ T669] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9114'. [ 1069.847006][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1069.934506][ T5777] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1069.941303][ T8] usb 7-1: USB disconnect, device number 4 [ 1069.945633][ T5777] Bluetooth: hci1: Injecting HCI hardware error event [ 1069.963375][ T5777] Bluetooth: hci1: hardware error 0x00 [ 1070.147208][T32588] tipc: Node number set to 2886997162 [ 1070.431550][ T689] [ 1070.433916][ T689] ============================= [ 1070.439191][ T689] WARNING: suspicious RCU usage [ 1070.444117][ T689] syzkaller #0 Not tainted [ 1070.448733][ T689] ----------------------------- [ 1070.453601][ T689] net/mac80211/iface.c:378 suspicious rcu_dereference_protected() usage! [ 1070.462216][ T689] [ 1070.462216][ T689] other info that might help us debug this: [ 1070.462216][ T689] [ 1070.472600][ T689] [ 1070.472600][ T689] rcu_scheduler_active = 2, debug_locks = 1 [ 1070.480915][ T689] 1 lock held by syz.7.9118/689: [ 1070.486083][ T689] #0: ffffffff8e3c0208 (rtnl_mutex){+.+.}-{3:3}, at: devinet_ioctl+0x30c/0x1c40 [ 1070.495455][ T689] [ 1070.495455][ T689] stack backtrace: [ 1070.501482][ T689] CPU: 1 PID: 689 Comm: syz.7.9118 Not tainted syzkaller #0 [ 1070.508796][ T689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1070.518901][ T689] Call Trace: [ 1070.522215][ T689] [ 1070.525171][ T689] dump_stack_lvl+0x18c/0x250 [ 1070.529892][ T689] ? show_regs_print_info+0x20/0x20 [ 1070.535130][ T689] ? load_image+0x400/0x400 [ 1070.539687][ T689] lockdep_rcu_suspicious+0x1e1/0x300 [ 1070.545111][ T689] ieee80211_check_concurrent_iface+0x475/0x950 [ 1070.551405][ T689] ieee80211_open+0xc1/0x200 [ 1070.556033][ T689] __dev_open+0x2cb/0x430 [ 1070.560390][ T689] ? dev_open+0x190/0x190 [ 1070.564730][ T689] __dev_change_flags+0x211/0x6a0 [ 1070.569763][ T689] ? dev_get_flags+0x1c0/0x1c0 [ 1070.574530][ T689] ? mutex_lock_nested+0x20/0x20 [ 1070.579476][ T689] ? apparmor_capable+0x137/0x1a0 [ 1070.584507][ T689] dev_change_flags+0x88/0x1a0 [ 1070.589284][ T689] devinet_ioctl+0x95c/0x1c40 [ 1070.593972][ T689] ? inet_ifa_byprefix+0x2a0/0x2a0 [ 1070.599086][ T689] ? _copy_from_user+0xa5/0xe0 [ 1070.603859][ T689] ? get_user_ifreq+0x12b/0x180 [ 1070.608710][ T689] inet_ioctl+0x42b/0x560 [ 1070.613042][ T689] ? tomoyo_path_number_perm+0x217/0x620 [ 1070.618711][ T689] ? inet_shutdown+0x370/0x370 [ 1070.623480][ T689] ? slab_free_freelist_hook+0x130/0x1a0 [ 1070.629114][ T689] ? tomoyo_path_number_perm+0x500/0x620 [ 1070.634751][ T689] ? __kmem_cache_free+0xba/0x1e0 [ 1070.639790][ T689] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1070.645260][ T689] sock_do_ioctl+0xfc/0x310 [ 1070.649780][ T689] ? sock_show_fdinfo+0xb0/0xb0 [ 1070.654640][ T689] sock_ioctl+0x5ba/0x7e0 [ 1070.658976][ T689] ? sock_poll+0x3e0/0x3e0 [ 1070.663399][ T689] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1070.668338][ T689] ? security_file_ioctl+0x80/0xa0 [ 1070.673453][ T689] ? sock_poll+0x3e0/0x3e0 [ 1070.677869][ T689] __se_sys_ioctl+0xfd/0x170 [ 1070.682466][ T689] do_syscall_64+0x55/0xa0 [ 1070.686903][ T689] ? clear_bhb_loop+0x40/0x90 [ 1070.691713][ T689] ? clear_bhb_loop+0x40/0x90 [ 1070.696443][ T689] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1070.702440][ T689] RIP: 0033:0x7f17ab59bf79 [ 1070.706905][ T689] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1070.726545][ T689] RSP: 002b:00007f17ac3cc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1070.734972][ T689] RAX: ffffffffffffffda RBX: 00007f17ab815fa0 RCX: 00007f17ab59bf79 [ 1070.742946][ T689] RDX: 0000200000002280 RSI: 0000000000008914 RDI: 0000000000000007 [ 1070.750933][ T689] RBP: 00007f17ab6327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1070.758934][ T689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1070.766930][ T689] R13: 00007f17ab816038 R14: 00007f17ab815fa0 R15: 00007ffceaa7fdf8 [ 1070.774942][ T689] [ 1070.887021][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1071.927321][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1072.017355][ T5777] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1072.967179][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1074.007072][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1075.047127][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1076.087072][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1077.127105][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1078.167033][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1079.207148][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1080.247172][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available