last executing test programs: 10m12.968470542s ago: executing program 3 (id=6): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x300}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000100)='./file0\x00', 0x624a9, &(0x7f00000019c0)=ANY=[@ANYRESOCT, @ANYRES16, @ANYRES64, @ANYRES16, @ANYRESDEC, @ANYRES64, @ANYRES8, @ANYRES32, @ANYRES64=0x0], 0x1, 0x38d, &(0x7f0000001600)="$eJzs3c9rI2UYwPEn6TSddGmTgygK0ge96GVoq2clyC6IBZe6EXcFYXY71ZAxKTOhkkW29eRVvPkPCC57XPCwoN682Iu39eLFk70Igi4ijsyPN5tkp02aZkl39/uBNs/M+z6Zd5JJeN7QvD1874uPm9uhs+12pGirFERE7olUpSgZq5DeliTHvrx87s+7z5cuX3mrtrFxflP1Qu3SK+uqurzy3Seflq20250FOah+cCj2bwdPHzx7+N+ljxqhNkJttTvq6tX2rx33qu/pViNsOqoXfc8NPW20Qi9I29tp+7bf3tnpqtvaWlrcCbwwVLfV1abX1U5bO0FX3Q/dRksdx9GlxbzhPsbs/o3l8XLqNzc33dqEB7w2YR6m7Z8oio5pDoKaOyfilB9oqd98qOMCAABn0lD9/5WpEapS7BWUhWwuUEriwWlAXP+buNdyv/6/9cIPnXPv3l7O6v87paz+n5OGVE39/+ovadpA/R8ffer1/zdD2w9WRI+8vZN0PlX9j7NhZfAV+XvyKu0X1//xq6E3o//s/VurSUD9DwAAAAAAAAAAAAAAAAAAAADAo+BeFFWiKKqYW/Nz/ysE2bbZyr5ovDCb4WLKjnj+e9/96l0PeCy9c/mK2MnCHdayiP/5bn23nt5m7abjqlTk3+R6yKQLTuwnjRqryvf+3m59PkuYS37XRFR88WRNKlIdyE/iC29unF/TVJqfHH9vt16wFuP8bWkk+etSkafy89dz80vy0ot9+Y5U5Odr0hZftrL3MZN/Y031jbc3hvLLSb88rz/cpwQAAAAAgKlzVO1s+lwdnP+m83fHUc1rl5+yOzDz6/TzgR8lZ36+qsWc+blVec6a6akDAAAAAPDECEvXm67ve0HYPTIoy6g+5q+BhposGXHPcWCN0WcguJsE88f1mes7w8E9R2eVsv+gMe4wgrArY4/ZBH8tSO6DaZZwjfeYRYl9e+SYjwvM+Y/R2T7pUxCExZOfuxeEK/F4dKLT6QuSj40KlvQ33VjKrufu9aZcjPeYh/R0x0oDs3LuqM7PfPn135MdopCt2tvf9NptcwUcm14Y2rM/4qL9I4pGjmc+/93iW/tUbzYAAAAAZsoU/eVw1iMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODJNY3V0UYFsz5HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Kz4PwAA//933OWl") r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001c40)={0x2, 0x0, [{0xeeee8000, 0x6d, &(0x7f0000001b40)=""/109}, {0x66000, 0x6b, &(0x7f0000001bc0)=""/107}]}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4092}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000080)=0x1, 0x4) 10m11.996447819s ago: executing program 3 (id=7): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x25) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r0}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r1, r3, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000240)=ANY=[], 0x0) 10m11.651349527s ago: executing program 3 (id=9): r0 = epoll_create1(0x0) epoll_pwait(r0, 0x0, 0x0, 0xfffeffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCGIFCONF(r4, 0x8912, &(0x7f0000000240)=@req={0x28, &(0x7f00000001c0)={'batadv_slave_0\x00', @ifru_names='virt_wifi0\x00'}}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001940)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0xd, 0x1000, &(0x7f0000000640)=""/4096, 0x41000, 0x19, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x4, 0x7, 0xa6, 0x36}, 0x10, 0x1a9c9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r5 = memfd_create(&(0x7f0000000040)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x00e\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\x7f\xffT\xeb8F\xcba=\xd6\x9a\x16\x0e\xc9\x8f\xa4\x9f\xf4\xb8\xb9\xc8T\xde\a\x95\n\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8e\x00\x00\x00\x00\f\xe5\x89^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\xa9\xec\x9b\xad\x8e\xea\xe4)#\x87k\xb3\xdf\x1e\xb6o\xee&AH\xa9!\xdc\xd6\\\x05\xf4]F\x83\xc8\xd0\xc6\xf2n\x8a\x10\xd2\xe2\xc4\x1d\x17\xf21\x03\xb6\x13w\xe8\x1d]b\xdf\xcb\x10C\x17\x9c,-\xe5\a\x95\x15]\xfa\xb7\xb0\x97\xfaf#j\x82\xca\xfc\x05a\xca\xd4\xd2\xfa\xe7\xa7m\xa1\xa2Z(0\x8f\xc1N\x10\xf2\xb3\x8c\xaa5\xd9\xc8 \xb7t\x190\x1f\xae\xc9\x1c\xc5\xa9pO\xc4\x1a\xed\xca\xbc\x11\a!\x1ew\x96B\xdd\x933d\x97\n\x00'/266, 0x3) write$binfmt_script(r5, &(0x7f0000000b80), 0x4) execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 10m10.385508399s ago: executing program 3 (id=11): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8000) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, 0x0, 0x24008800) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008014}, 0x4) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000140)=0x200000000) preadv2(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=""/72, 0x48}, {0x0}], 0x2, 0x0, 0x0, 0x3) 10m5.391715386s ago: executing program 3 (id=29): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0x3) r2 = socket(0x10, 0x803, 0x0) write(r2, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7bb0000b00000000000", 0x26) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0xfff3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) 10m3.817626294s ago: executing program 3 (id=34): r0 = socket(0x10, 0x803, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000000)={[{@jqfmt_vfsv0}, {@errors_remount}]}, 0x1, 0x78b, &(0x7f0000000f40)="$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") write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080)=0xffffffffffffffff, 0x12) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r2, 0x6, 0xa, 0x0, &(0x7f00000057c0)) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xd1, 0x0, 0x0, @loopback, @multicast1}}}}) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r5 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x10, &(0x7f00000000c0)={[{@nogrpid}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x1}}, {@orlov}, {@usrquota}, {@data_err_ignore}, {@sb={'sb', 0x3d, 0x3}}, {@noauto_da_alloc}]}, 0x4, 0x501, &(0x7f0000000f40)="$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") ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {}, {}, {0xa, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}, @filter_kind_options=@f_bpf={{0x8}, {0x1c, 0x2, [@TCA_BPF_FD={0x8, 0x6, r5}, @TCA_BPF_POLICE={0x10, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x6}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20044815}, 0x40850) 9m48.699263581s ago: executing program 32 (id=34): r0 = socket(0x10, 0x803, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000000)={[{@jqfmt_vfsv0}, {@errors_remount}]}, 0x1, 0x78b, &(0x7f0000000f40)="$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") write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080)=0xffffffffffffffff, 0x12) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r2, 0x6, 0xa, 0x0, &(0x7f00000057c0)) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xd1, 0x0, 0x0, @loopback, @multicast1}}}}) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r5 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x10, &(0x7f00000000c0)={[{@nogrpid}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x1}}, {@orlov}, {@usrquota}, {@data_err_ignore}, {@sb={'sb', 0x3d, 0x3}}, {@noauto_da_alloc}]}, 0x4, 0x501, &(0x7f0000000f40)="$eJzs3b9vHFkdAPDvjL22z7c55+AKQMCF4yCgKOsfubNOR0GuAaEoEiKiokiMvbEs72Ytrx1ik8Ip6ZGIRAV/Ah0FUioKOjroaEKBFCACxUgUi2Z2Yi+21+sQ24u9n480nnnvbfx9bzfvvZkXOy+AgXUpIrYiYiQi7kTERJGfFEdcbx/Z6148fzi//fzhfBKt1q2/JXl5lhcdfybzZvE9xyLie9+O+GGyP25zY3N5rlarrhbpybX6ymRzY/PqUlrkzMxOz059dO3DmWNr67v1Xz371tKN7//m1194+vutr/84q1b5Jxfyss52HKd200tR7sgbjogbJxGsT4aLvz+cPVlv+1REvJf3/4kYyj9NAOA8a7UmojXRmQYAzrvs+b8cSVop1gLKkaaVofa9wDsxntYazbUrE431ewuRr2FdjFJ6d6lWnSrWCi9GKcnS0/n1bnpmT/paRLwdET8dfSNPV+YbtYW+3fUAwGB7c8/8/8/RNK1U+l0rAODEjb3i6/2IAACcfa86/wMAZ5/5HwAGzyvM/5b+AeCc8PwPAIPH/A8Ag6fn/P/odOoBAJyK7968mR2t7eL/v164v7H+jfL9qwvV5nKlvj5fmW+srlQWG43FWrUy32r1+n61RmNl+oOdZHNj83a9sX5v7fZSfW6xertaOuH2AAC9vf3ukz8mEbH18Rv5ER17OZir4XxL+10BoG+G+l0BoG/8Pg8MriM841sGgHOu2KK36zauXX9E6LHNX+GsuvxZ6/8wqKz/w+D639b/v3ns9QBOn/V/GFytVmLPfwAYMNb4gaRH+aH//g8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADqpwfSVrJ9wLfyr6mlUrEhYi4GKXk7lKtOhURb0XEH0ZLo1l6ut+VBgBeU/qXpNj/6/LE++W9pSPJv0bzc0T86Oe3fvZgbm1tdTrL//tO/trjIn9mpB8NAAA6Xd+f1Z6ni3PHg/yL5w/nXx6nWcVnn7Q3F83ibhdHu2Q4hvPzWJQiYvwfSZFuy+5Xho4h/tajiPjMbvsfdEQo52sg7Z1P98bPYl84gfi77//e+Ol/xU/zsuxcyt+LTx9DXWDQPPmkPU4WfS/rYkX/S+NSfj64/4/lI9Trezn+be8b/9Kd8W9oX/wk7/OXdtKH1+TZB7/9zr7M1kS77FHE54YPip/sxE+6jL/vH7GNf/r8F9/rVtb6RcTlODh+Wz0fZifX6iuTzY3Nq0v1ucXqYvXezMzs9OzUR9c+nJnM16jbX393UIy/fnzlrW7xs/aPd4k/1qP9Xzli+3/57zs/+NIh8b/25YM//3cOiZ/NiV89Yvy58etdt+/O4i90aX+vz//KEeM//fPmwhFfCgCcgubG5vJcrVZd7XGR3Wv2eo2Ls3kRWxH7il7efp96fUbi/+RtGfCLPg9MwInb7fT9rgkAAAAAAAAAAAAAANBNc2NzeTRO9teJ+t1GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzq//BAAA//+gpspm") ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {}, {}, {0xa, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}, @filter_kind_options=@f_bpf={{0x8}, {0x1c, 0x2, [@TCA_BPF_FD={0x8, 0x6, r5}, @TCA_BPF_POLICE={0x10, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x6}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20044815}, 0x40850) 7m32.355417996s ago: executing program 5 (id=913): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x240}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2000000, 0x64833, r0, 0x0) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, 0x0) 7m32.121066948s ago: executing program 5 (id=915): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x205f) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x9, 0x1100, 0x40, 0x0, 0x6, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x0, 0x1, {0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x22801, 0x10) dup3(r2, r0, 0x80000) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000001ac0)=0x100) 7m31.935824077s ago: executing program 5 (id=917): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x4d, 0x5, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000020000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x56, &(0x7f00000000c0)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20000c}], 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) 7m31.45712654s ago: executing program 5 (id=919): r0 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r0, 0x1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) 7m30.365043955s ago: executing program 5 (id=931): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}}, 0x2e) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x4) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000019080)=0x30) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r3, 0x0, 0x200048c4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x5}, 0x50) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f00000005c0)={[{@nodioread_nolock}, {@noblock_validity}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x4}}, {@noauto_da_alloc}]}, 0x6, 0x61f, &(0x7f0000000b00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xd296895ede2f911a) socket$nl_route(0x10, 0x3, 0x0) 7m29.946043685s ago: executing program 5 (id=937): move_pages(0x0, 0x20000000000000fe, &(0x7f0000000080)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') io_setup(0x2, &(0x7f0000000000)) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000180)=0x2, 0x9, 0x1) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) munlockall() madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) preadv(r0, &(0x7f00000002c0), 0x0, 0x5fae, 0x5) r1 = socket(0x11, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x0, 0x24044015) recvmmsg(r1, 0x0, 0x0, 0x2002, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) io_setup(0xea, &(0x7f0000000040)) 7m14.786005834s ago: executing program 33 (id=937): move_pages(0x0, 0x20000000000000fe, &(0x7f0000000080)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') io_setup(0x2, &(0x7f0000000000)) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000180)=0x2, 0x9, 0x1) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) munlockall() madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) preadv(r0, &(0x7f00000002c0), 0x0, 0x5fae, 0x5) r1 = socket(0x11, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x0, 0x24044015) recvmmsg(r1, 0x0, 0x0, 0x2002, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) io_setup(0xea, &(0x7f0000000040)) 24.682905831s ago: executing program 0 (id=3123): creat(&(0x7f0000000000)='./file0\x00', 0x108) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, r1, {0x7, 0x1f, 0x1, 0x8888b1, 0x0, 0x1, 0x2, 0xa, 0x0, 0x0, 0x2, 0x8}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0xa4901, 0x28) write$tcp_congestion(r2, &(0x7f0000000080)='reno\x00', 0x5) 24.417043854s ago: executing program 0 (id=3125): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000003, 0x204031, 0xffffffffffffffff, 0xec776000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 24.082805331s ago: executing program 0 (id=3128): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000440)={r2, r0, 0x16, 0x0, @val=@iter={0x0}}, 0x20) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0x200000000000a, &(0x7f0000000000)="ea00005c", 0x4) 23.647800132s ago: executing program 0 (id=3130): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r4 = inotify_init1(0x80000) inotify_add_watch(r4, &(0x7f0000000240)='.\x00', 0x60000726) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x10000, 0x1) syz_clone3(&(0x7f0000000300)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r5 = add_key$user(&(0x7f0000000140), 0x0, &(0x7f0000000280)="674afde9affdbd80bb188d05006277fdb01b4c07bec5175321fd0677c53218a125a0b8e4", 0x24, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r5, 0x3) r6 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x0, @host}, 0x10) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000008c0)={0x30, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4001019}, 0x20040004) 22.427820642s ago: executing program 0 (id=3135): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x40080000, 0x0, 0x0, 0x7, 0xa15, 0x0, 0x0, 0x1, 0x6}}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x63) syz_fuse_handle_req(r0, &(0x7f0000006200)="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", 0x2000, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x90, 0x0, 0x2, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x80, 0x0, 0x4, 0x0, 0x1, 0x0, 0x4, 0x3, 0x4000, 0x0, r2, 0x0, 0x8, 0x2000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 21.759375296s ago: executing program 0 (id=3139): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x5031, 0xffffffffffffffff, 0xc2dcc000) syz_read_part_table(0x5e5, &(0x7f0000000c40)="$eJzs081LpHUcAPDvM7Pjs5tu42FvdQhWgmB7XaKFHGhZhmEv7bK9sIdOHRYM6iB08DCM6JzNbp0SUyG8+A8IXUwFMdCTdIy5dEsJYgh54pl5fAMvkVTK5wP6/Ob3fN+G32+CS60U1aH+Kksj4vDGOTHDEZEef/phsFikg/HRcj2Nlx7ff/JhvJ3EJxFRf3Eo4pu8bl6yXzXp55d6TSr95Ic3Ymd+68HB8vD27d2NkYVSUXS1FJEP9Pkvi9Uzs3waxRQDA/25IWKltl6dbo83ZiZqaTSanbvPkog/eq9Gk4jJp8VFye9VXO8tr19s//xO9vqP7TWanZGde0uD8Wj/25uvlWOn+9ZmL+r53m+Aq+e9ckS0T85/7tbUz1Pd91/+/svX71yLtdZscfC/F89383+fTUblvxwaAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4klZq691ojzdmJmpje41m5+6zV+svfFX/4ut3vhttfZyOPi3lUUlkf56bXrmA/tXp9lGZZqcS95Z+yh7tx83xfOO5o7g7yemsa5GV/2ln/g9eqURMn7p/c7feeHOq+1vxdq01W5x7FtE6k/jr5r8/LAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwKdRjMsvuPylFJPFjcrKfpf1nUvxFLB2WTuU9TD9I5rceHCwPb9/e3RhZeFzErw4NFBGL1XMbHu+WL/y78Pf9FQAA///C63NG") 11.122530671s ago: executing program 1 (id=3211): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r2, r0, 0x16, 0x0, @val=@netkit={@void, @value=r2}}, 0x1c) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) socket(0x10, 0x3, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) 7.950576828s ago: executing program 1 (id=3221): creat(&(0x7f0000000000)='./file0\x00', 0x108) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, r1, {0x7, 0x1f, 0x1, 0x8888b1, 0x0, 0x1, 0x2, 0xa, 0x0, 0x0, 0x2, 0x8}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0xa4901, 0x28) write$tcp_congestion(r2, &(0x7f0000000080)='reno\x00', 0x5) 7.582664186s ago: executing program 1 (id=3225): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x4, @void}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{r1}, &(0x7f00000004c0), &(0x7f00000006c0)='%pB \x00'}, 0x20) syz_emit_ethernet(0x22, &(0x7f0000000540)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x3, 0xc, 0x14, 0x65, 0x0, 0x5, 0x5c, 0x0, @local, @private=0xa010102}}}}}, 0x0) 7.28612266s ago: executing program 1 (id=3227): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000c80)="7cffa9061b2f8b082b6f69ae50430c8a8b6aa3162ba083c4a52e1ab0ac50ed4a19b1a69988000d5bed4433daaa4932dbb1cb3550dee8b23579d76ce37d574b43fca1eed8ebd38d1303240ed0d84517692128dd5aef5c4d60a6659952a1437c6f0ac3ed75806011ccbaa504f41a7e0abcf8823bc4a71ef8c52c2b297b539eaf752c56ebfe9b0542543069257dafcbf76c958d4cbf4eaaa67c5c2bd9e6518be34b56add7613ab83d389724b664e62c154e1a5aac073a53a0e8cadcf51ef495ebbcc77d5e36ff24c3f282289cc077374b714e08fbfecbdc8f14ef3fd409af4caf6fcb7d663beab335f239a1e93b399c93d7c036e1b39a7c477945f82b6dde53b1c21b590a58ba688ac4fb530d2c5b1195a127d2eaec840ab59f090d7047c278611e080cebe7b28588c11a44be99fe6f88c73441bf625b70565669997f4c3cda5afe1d6429908a69a459d35ba8c2f28076d8711f2667de749a783fac94ebd02680f20fb723c35c287a1f45064846385750665ffa74579083fbb1b1d6b7c90168252b1c5313544569203e7adb8e271a94f7413e5cfd6aa3157c4fc29bddba3683fcd032aecb513b2f27530fbefa0000000000000003c058e812d8db87de5e3eceae268b91f7d59daf77646fa4df99877dd5a9540934c7af91b96486eea62897be6acbe1bae8e46b112f1385e7cea9e4daccc6f1b98ce3b4322af8299a45ddcb5be8d3e469fdde9896ca324a2f3c88c616a7dccde331698ce2d39f96220251011b4dfbec953b5c30e94adb5586cec0af234859805bb7df1101ae80318ff127e913178d79cfa918d54585b6184255e872e2dc33a5c7c30a756bbd63c32a3e6a22863781747d185acb64583976c4289394d642b07d18e2932d0a78bd2ccf92b3e94e82f1e9239fa272402f4c9efcf068709a44d6f652a4f23df89f9a15e6bf0c7e65d8f3e32c35e83d30298074d16cb5ff4ded1df81009bbae888fceb9a8109ba319605e1776e52d2069b5cd7de07cf8dc488ba6a9c7559ff49674a490991f323736f302004007d0ccf2e5eaceac6b56f48f2b00592d7a378f118d8b3e5ecd2035c8252374c91bc79cf26ac11ddffe2c09e1aa032da0713732387f950e3f4e301eb1d26e5a2b19318e50d555c832e279894d8c9b03e8940738c0fe391b29907d0d5f9214d6e697a19247f4e8221aca2ac47debd7c45b8344941cbecbaf44af343b24a4f88caf207d72002fb8b7d156997cb7275f535e6a9d6480046246e60bea0cf6f54abc69ff9418b6cb9301eb6890227215b633a886fb13c89698e51e482c42ca99613b20e22e5ce15272f5bda8b18cf53d49130a94135dd8a9692c", 0x34000, 0xbcff, 0x0, 0x0) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, 0x0) writev(r0, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0xfdef}], 0x1) 6.379234575s ago: executing program 1 (id=3233): syz_usb_connect$cdc_ncm(0x4, 0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="1201500202000902710002010420040904000001020d0000052406000105240006000d240f0106000000020006000606241a05ed0d1524120004a317a88b045e4f01a607c0ffcb7e392a09058103000258057f0904010000020d00000904010102020d"], 0x0) socket$tipc(0x1e, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2$9p(0x0, 0x800) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r3, &(0x7f00000001c0), 0x10) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r4, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @random="a538ae464632", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x12, 0x78, 0x0, @multicast1=0xe0000300}}}}}, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x2, &(0x7f0000000080), 0x4) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @empty}}) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8) 6.296566589s ago: executing program 2 (id=3235): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4417d290ddada01ca48b8a9884315c2c245040f23c00f21f835000002000f23f8c4a2e0f3db0f07d2c74424001e09000000442402e4000000654c0fc72ef3410fc777d365420fc7700066b8502466ef", 0x6e}], 0x1, 0x11, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000200)='./file0\x00', 0x810414, &(0x7f0000000040)=ANY=[@ANYRES8=0x0], 0xff, 0x218, &(0x7f0000000480)="$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") lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=@random={'trusted.', '--'}, 0x0, 0x0) 5.853892981s ago: executing program 2 (id=3238): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x11f3, &(0x7f0000000c00)=ANY=[], 0x0) 5.567999085s ago: executing program 2 (id=3241): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') socket$inet6(0xa, 0x6, 0xfffffff3) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x90) r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x41, 0x1ff) fcntl$setlease(r2, 0x400, 0x1) r3 = syz_create_resource$binfmt(&(0x7f0000000440)='./file0\x00') execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0) syz_clone(0x101200, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) 4.356993005s ago: executing program 6 (id=3246): creat(&(0x7f0000000000)='./file0\x00', 0x108) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, r1, {0x7, 0x1f, 0x1, 0x8888b1, 0x0, 0x1, 0x2, 0xa, 0x0, 0x0, 0x2, 0x8}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0xa4901, 0x28) write$tcp_congestion(r2, &(0x7f0000000080)='reno\x00', 0x5) 4.214747442s ago: executing program 2 (id=3247): sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x200000d0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x8020) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x3}, 0x8) 4.041045481s ago: executing program 6 (id=3248): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0xff9d, 0xfffe, 0xa, @mcast2}, {0xa, 0xfffd, 0xb, @loopback={0x9d}}}}, 0x48) 3.757069475s ago: executing program 6 (id=3249): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') getdents64(r1, &(0x7f0000000240)=""/102, 0x66) 2.931944205s ago: executing program 4 (id=3250): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c30000"], 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x11f3, &(0x7f0000000c00)=ANY=[], 0x0) 2.661549879s ago: executing program 4 (id=3251): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x4, @void}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{r1}, &(0x7f00000004c0), &(0x7f00000006c0)='%pB \x00'}, 0x20) syz_emit_ethernet(0x22, &(0x7f0000000540)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x3, 0xc, 0x14, 0x65, 0x0, 0x5, 0x5c, 0x0, @local, @private=0xa010102}}}}}, 0x0) 2.414386831s ago: executing program 4 (id=3252): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f0000000000)=0x5, 0x4) sendto$inet6(r0, &(0x7f0000000100)="a00064bced2a4a68", 0x8, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x6, @mcast2, 0x4}, 0x1c) 2.197031172s ago: executing program 4 (id=3253): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) fanotify_init(0x81, 0x40000) 1.234048989s ago: executing program 4 (id=3254): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000c80)="7cffa9061b2f8b082b6f69ae50430c8a8b6aa3162ba083c4a52e1ab0ac50ed4a19b1a69988000d5bed4433daaa4932dbb1cb3550dee8b23579d76ce37d574b43fca1eed8ebd38d1303240ed0d84517692128dd5aef5c4d60a6659952a1437c6f0ac3ed75806011ccbaa504f41a7e0abcf8823bc4a71ef8c52c2b297b539eaf752c56ebfe9b0542543069257dafcbf76c958d4cbf4eaaa67c5c2bd9e6518be34b56add7613ab83d389724b664e62c154e1a5aac073a53a0e8cadcf51ef495ebbcc77d5e36ff24c3f282289cc077374b714e08fbfecbdc8f14ef3fd409af4caf6fcb7d663beab335f239a1e93b399c93d7c036e1b39a7c477945f82b6dde53b1c21b590a58ba688ac4fb530d2c5b1195a127d2eaec840ab59f090d7047c278611e080cebe7b28588c11a44be99fe6f88c73441bf625b70565669997f4c3cda5afe1d6429908a69a459d35ba8c2f28076d8711f2667de749a783fac94ebd02680f20fb723c35c287a1f45064846385750665ffa74579083fbb1b1d6b7c90168252b1c5313544569203e7adb8e271a94f7413e5cfd6aa3157c4fc29bddba3683fcd032aecb513b2f27530fbefa0000000000000003c058e812d8db87de5e3eceae268b91f7d59daf77646fa4df99877dd5a9540934c7af91b96486eea62897be6acbe1bae8e46b112f1385e7cea9e4daccc6f1b98ce3b4322af8299a45ddcb5be8d3e469fdde9896ca324a2f3c88c616a7dccde331698ce2d39f96220251011b4dfbec953b5c30e94adb5586cec0af234859805bb7df1101ae80318ff127e913178d79cfa918d54585b6184255e872e2dc33a5c7c30a756bbd63c32a3e6a22863781747d185acb64583976c4289394d642b07d18e2932d0a78bd2ccf92b3e94e82f1e9239fa272402f4c9efcf068709a44d6f652a4f23df89f9a15e6bf0c7e65d8f3e32c35e83d30298074d16cb5ff4ded1df81009bbae888fceb9a8109ba319605e1776e52d2069b5cd7de07cf8dc488ba6a9c7559ff49674a490991f323736f302004007d0ccf2e5eaceac6b56f48f2b00592d7a378f118d8b3e5ecd2035c8252374c91bc79cf26ac11ddffe2c09e1aa032da0713732387f950e3f4e301eb1d26e5a2b19318e50d555c832e279894d8c9b03e8940738c0fe391b29907d0d5f9214d6e697a19247f4e8221aca2ac47debd7c45b8344941cbecbaf44af343b24a4f88caf207d72002fb8b7d156997cb7275f535e6a9d6480046246e60bea0cf6f54abc69ff9418b6cb9301eb6890227215b633a886fb13c89698e51e482c42ca99613b20e22e5ce15272f5bda8b18cf53d49130a94135dd8a9692c", 0x34000, 0xbcff, 0x0, 0x0) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, 0x0) writev(r0, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0xfdef}], 0x1) 1.102286596s ago: executing program 6 (id=3255): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x4c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x1ff, 0x24, 0x0, 0x0, 0xfffffffd, 0x8}}}}]}, 0x4c}}, 0x8c814) sendto$packet(r0, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c29900", 0xe, 0x830, &(0x7f0000000440)={0x11, 0x0, r3, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x14) 905.619446ms ago: executing program 4 (id=3256): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') socket$inet6(0xa, 0x6, 0xfffffff3) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x90) r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x41, 0x1ff) fcntl$setlease(r2, 0x400, 0x1) r3 = syz_create_resource$binfmt(&(0x7f0000000440)='./file0\x00') execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0) syz_clone(0x101200, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) 520.642925ms ago: executing program 2 (id=3257): creat(&(0x7f0000000000)='./file0\x00', 0x108) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, r1, {0x7, 0x1f, 0x1, 0x8888b1, 0x0, 0x1, 0x2, 0xa, 0x0, 0x0, 0x2, 0x8}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0xa4901, 0x28) write$tcp_congestion(r2, &(0x7f0000000080)='reno\x00', 0x5) 399.745441ms ago: executing program 1 (id=3258): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={r1, 0x0, 0x0, 0x4000}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000007, 0x11, r2, 0x0) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x7, 0x9, 0xfffffffffffffffd, 0x8, 0x10000, 0x0, 0x98, 0x2000000000fff, 0x1400000000000000, 0x0, 0x3fd, 0x1080, 0x3, 0x20000000000, 0x8, 0x4000000000008d], 0x100000, 0x80}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 341.173023ms ago: executing program 6 (id=3259): syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x0) pipe2$9p(&(0x7f0000000240), 0x80800) r0 = socket(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x13, @local, 0x2}, 0x1c) listen(r0, 0x7f) syz_emit_ethernet(0x56, &(0x7f0000000200)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0xff6f, {[@generic={0x8, 0xa, "cadab7e7a9ac5f4d"}]}}}}}}}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000540)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000200", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc0, 0x0, 0x0, 0x0, {[@generic={0x8, 0xa, "f2aa28549931d7f8"}]}}}}}}}}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) 193.190191ms ago: executing program 2 (id=3260): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0xf1, @empty, 0x19f49a9}], 0x1c) listen(r0, 0x100) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000240)="d0a698b74987602d60f91c32ac715f0bad865ee5765e1bc6e3844c7a1a269d748247b82e1945f57785f8a1800da8f15c71e30ffa7def9e1c9b6ca31620784179", 0x40}], 0x1}, 0x8050) 0s ago: executing program 6 (id=3261): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c30000"], 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x11f3, &(0x7f0000000c00)=ANY=[], 0x0) kernel console output (not intermixed with test programs): syz.2.490'. [ 183.022786][ T6021] netlink: 40 bytes leftover after parsing attributes in process `syz.2.503'. [ 183.595527][ T6040] loop0: detected capacity change from 0 to 256 [ 183.701623][ T6040] syz.0.509: attempt to access beyond end of device [ 183.701623][ T6040] loop0: rw=524288, sector=256, nr_sectors = 20 limit=256 [ 183.791213][ T6040] syz.0.509: attempt to access beyond end of device [ 183.791213][ T6040] loop0: rw=0, sector=256, nr_sectors = 8 limit=256 [ 183.891884][ T26] audit: type=1800 audit(1774596881.500:4): pid=6040 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.509" name="file2" dev="loop0" ino=1048603 res=0 errno=0 [ 184.184300][ T6058] overlayfs: failed to clone upperpath [ 184.876620][ T6090] loop4: detected capacity change from 0 to 16 [ 184.904641][ T6090] erofs: (device loop4): mounted with root inode @ nid 36. [ 184.938274][ T6090] erofs: (device loop4): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 184.989223][ T6090] syz.4.525: attempt to access beyond end of device [ 184.989223][ T6090] loop4: rw=0, sector=296, nr_sectors = 8 limit=16 [ 185.090707][ T6090] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117] [ 185.166194][ T6090] erofs: (device loop4): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 185.216329][ T6094] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 185.245600][ T6094] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -29 in[58, 4038] out[1851] [ 185.266355][ T6094] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117] [ 185.602699][ T6118] netlink: 40 bytes leftover after parsing attributes in process `syz.2.536'. [ 188.552196][ T6181] overlayfs: failed to clone upperpath [ 189.233599][ T6205] loop0: detected capacity change from 0 to 128 [ 189.425847][ T6207] syz.0.566: attempt to access beyond end of device [ 189.425847][ T6207] loop0: rw=2049, sector=617, nr_sectors = 1 limit=128 [ 189.959616][ T6223] overlayfs: failed to clone upperpath [ 190.651549][ T6258] overlayfs: failed to clone upperpath [ 190.854439][ T6266] overlayfs: failed to clone upperpath [ 192.541120][ T6300] fuse: Unknown parameter 'euid<00000000000000000000' [ 196.878713][ T6335] loop5: detected capacity change from 0 to 16 [ 196.925544][ T6335] erofs: (device loop5): mounted with root inode @ nid 36. [ 196.973089][ T6335] erofs: (device loop5): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 197.041255][ T6335] syz.5.618: attempt to access beyond end of device [ 197.041255][ T6335] loop5: rw=0, sector=296, nr_sectors = 8 limit=16 [ 197.141196][ T6335] erofs: (device loop5): z_erofs_read_folio: failed to read, err [-117] [ 197.180038][ T6335] erofs: (device loop5): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 197.220154][ T6340] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 197.260260][ T6340] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -29 in[58, 4038] out[1851] [ 197.286503][ T6340] erofs: (device loop5): z_erofs_read_folio: failed to read, err [-117] [ 198.215488][ T4283] Bluetooth: hci4: command 0x0406 tx timeout [ 198.221565][ T4283] Bluetooth: hci0: command 0x0406 tx timeout [ 198.228643][ T4275] Bluetooth: hci2: command 0x0406 tx timeout [ 198.234762][ T4275] Bluetooth: hci1: command 0x0406 tx timeout [ 199.580242][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.586627][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.053937][ T6401] loop0: detected capacity change from 0 to 128 [ 201.115493][ T6401] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 201.135319][ T6401] FAT-fs (loop0): Filesystem has been set read-only [ 201.156330][ T6401] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 201.612300][ T6401] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 202.139103][ T6401] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 202.147706][ T6401] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 202.156289][ T6401] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 202.164738][ T6401] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 202.173249][ T6401] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 202.181806][ T6401] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 202.191560][ T6401] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 202.200162][ T6401] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 202.267982][ T6401] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 202.295556][ T6401] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 202.318630][ T6401] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 202.348188][ T6401] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 202.388580][ T6401] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 202.417605][ T6401] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 202.444995][ T6401] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 202.499729][ T6401] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 202.509781][ T6401] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 202.523356][ T6401] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 202.561538][ T6401] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 202.572917][ T6401] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 202.592922][ T6401] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 202.605121][ T6401] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 202.620268][ T6401] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 202.638493][ T6401] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 202.660865][ T6401] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 202.673627][ T6401] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 202.710203][ T6401] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 202.734521][ T6401] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 202.751229][ T6401] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 202.767881][ T6401] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 202.780344][ T6401] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 202.792402][ T6401] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 202.819743][ T6401] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 202.840729][ T6401] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 202.878888][ T6401] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 202.895303][ T6401] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 202.916806][ T6401] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 202.938300][ T6401] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 202.970319][ T6401] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 203.005596][ T26] audit: type=1800 audit(1774596900.620:5): pid=6401 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.642" name="file1" dev="loop0" ino=1048605 res=0 errno=0 [ 208.023529][ T6495] netlink: 48 bytes leftover after parsing attributes in process `syz.2.669'. [ 211.873096][ T6579] netlink: 48 bytes leftover after parsing attributes in process `syz.1.702'. [ 213.868046][ T6617] netlink: 48 bytes leftover after parsing attributes in process `syz.2.718'. [ 214.764918][ T6651] netlink: 48 bytes leftover after parsing attributes in process `syz.5.731'. [ 214.775377][ T6652] fuse: Unknown parameter 'use00000000000000000000' [ 216.921121][ T6692] fuse: Unknown parameter 'user_i00000000000000000000' [ 217.604498][ T6706] overlayfs: failed to clone upperpath [ 217.673093][ T6708] overlayfs: failed to clone upperpath [ 220.297474][ T6727] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1f [ 223.605313][ T6802] overlayfs: unrecognized mount option "verity=on" or missing value [ 225.875488][ T6824] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1f [ 226.490419][ T6849] netlink: 12 bytes leftover after parsing attributes in process `syz.1.802'. [ 226.558676][ T6849] 8021q: adding VLAN 0 to HW filter on device bond1 [ 226.583718][ T6851] bond1: option ad_select: unable to set because the bond device is up [ 226.604441][ T6853] input: syz0 as /devices/virtual/input/input11 [ 226.867128][ T6863] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1f [ 227.245399][ T4275] Bluetooth: hci5: command 0x0406 tx timeout [ 228.499930][ T6890] netlink: 12 bytes leftover after parsing attributes in process `syz.4.817'. [ 228.524041][ T6890] 8021q: adding VLAN 0 to HW filter on device bond1 [ 228.556591][ T6898] bond1: option ad_select: unable to set because the bond device is up [ 229.287733][ T6920] netlink: 16 bytes leftover after parsing attributes in process `syz.1.829'. [ 231.021778][ T6946] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1f [ 231.213850][ T6950] fuse: Bad value for 'fd' [ 232.595321][ T6970] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 232.645356][ T6970] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 232.710457][ T6976] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 232.744378][ T6976] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 233.138050][ T6989] fuse: Bad value for 'fd' [ 233.276294][ T6993] loop0: detected capacity change from 0 to 164 [ 233.801212][ T7007] Illegal XDP return value 4291600384 on prog (id 79) dev N/A, expect packet loss! [ 234.021765][ T7020] fuse: Bad value for 'fd' [ 234.589226][ T7036] loop0: detected capacity change from 0 to 1024 [ 234.602273][ T5155] Bluetooth: hci3: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 234.634596][ T5155] Bluetooth: hci3: Frame reassembly failed (-84) [ 234.649279][ T7036] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #3: block 2: comm syz.0.875: lblock 2 mapped to illegal pblock 2 (length 1) [ 234.664602][ T7036] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 234.672922][ T7036] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #3: block 48: comm syz.0.875: lblock 0 mapped to illegal pblock 48 (length 1) [ 234.687660][ T7036] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 234.696578][ T7036] EXT4-fs error (device loop0): ext4_acquire_dquot:6835: comm syz.0.875: Failed to acquire dquot type 0 [ 234.711812][ T7036] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5929: Corrupt filesystem [ 234.721703][ T7036] EXT4-fs error (device loop0): ext4_evict_inode:279: inode #11: comm syz.0.875: mark_inode_dirty error [ 234.734145][ T7036] EXT4-fs warning (device loop0): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 234.744475][ T7036] EXT4-fs (loop0): 1 orphan inode deleted [ 234.750302][ T7036] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 234.762559][ T11] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 234.828042][ T11] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 234.846738][ T11] EXT4-fs error (device loop0): ext4_release_dquot:6871: comm kworker/u4:1: Failed to release dquot type 0 [ 234.933102][ T7047] overlayfs: failed to clone upperpath [ 236.605327][ T4275] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 236.612938][ T4283] Bluetooth: hci3: command 0x1003 tx timeout [ 236.732171][ T4268] EXT4-fs (loop0): unmounting filesystem. [ 236.743055][ T4268] EXT4-fs error (device loop0): __ext4_get_inode_loc:4509: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 236.757072][ T4268] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5929: Corrupt filesystem [ 236.875239][ T4268] EXT4-fs error (device loop0): ext4_quota_off:7141: inode #3: comm syz-executor: mark_inode_dirty error [ 237.084799][ T7101] fuse: Unknown parameter '00000000000000000000004' [ 238.542791][ T7140] fuse: Unknown parameter '00000000000000000000004' [ 239.965090][ T7173] fuse: Unknown parameter '00000000000000000000004' [ 240.090072][ T7178] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 240.879291][ T7209] fuse: Unknown parameter '00000000000000000000004' [ 242.573268][ T26] audit: type=1326 audit(1774596940.180:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7244 comm="syz.2.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b4d79c799 code=0x7ffc0000 [ 242.635275][ T26] audit: type=1326 audit(1774596940.180:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7244 comm="syz.2.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b4d79c799 code=0x7ffc0000 [ 242.715361][ T26] audit: type=1326 audit(1774596940.180:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7244 comm="syz.2.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b4d79c799 code=0x7ffc0000 [ 242.842505][ T26] audit: type=1326 audit(1774596940.180:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7244 comm="syz.2.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f7b4d79c799 code=0x7ffc0000 [ 242.895266][ T26] audit: type=1326 audit(1774596940.180:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7244 comm="syz.2.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b4d79c799 code=0x7ffc0000 [ 242.975387][ T26] audit: type=1326 audit(1774596940.180:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7244 comm="syz.2.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b4d79c799 code=0x7ffc0000 [ 243.085553][ T26] audit: type=1326 audit(1774596940.180:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7244 comm="syz.2.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b4d79c799 code=0x7ffc0000 [ 243.161351][ T26] audit: type=1326 audit(1774596940.180:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7244 comm="syz.2.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b4d79c799 code=0x7ffc0000 [ 243.222085][ T26] audit: type=1326 audit(1774596940.180:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7244 comm="syz.2.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f7b4d79c799 code=0x7ffc0000 [ 243.300279][ T26] audit: type=1326 audit(1774596940.180:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7244 comm="syz.2.954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b4d79c799 code=0x7ffc0000 [ 247.983190][ T7316] trusted_key: encrypted_key: key user:syz not found [ 250.163762][ T7361] trusted_key: encrypted_key: key user:syz not found [ 255.683584][ T7436] user requested TSC rate below hardware speed [ 255.729949][ T7436] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 256.243739][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 256.243757][ T26] audit: type=1326 audit(1774596953.850:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7448 comm="syz.4.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d15b9c799 code=0x7ffc0000 [ 256.353905][ T26] audit: type=1326 audit(1774596953.850:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7448 comm="syz.4.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d15b9c799 code=0x7ffc0000 [ 256.456018][ T26] audit: type=1326 audit(1774596953.850:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7448 comm="syz.4.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d15b9c799 code=0x7ffc0000 [ 256.570151][ T26] audit: type=1326 audit(1774596953.850:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7448 comm="syz.4.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d15b9c799 code=0x7ffc0000 [ 256.671264][ T26] audit: type=1326 audit(1774596953.850:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7448 comm="syz.4.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7f2d15b9c799 code=0x7ffc0000 [ 256.799552][ T7459] loop0: detected capacity change from 0 to 1024 [ 256.805217][ T57] Bluetooth: hci3: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 256.868685][ T7459] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #3: block 2: comm syz.0.1031: lblock 2 mapped to illegal pblock 2 (length 1) [ 256.883695][ T7459] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 256.890177][ T57] Bluetooth: hci3: Frame reassembly failed (-84) [ 256.891931][ T7459] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #3: block 48: comm syz.0.1031: lblock 0 mapped to illegal pblock 48 (length 1) [ 256.913640][ T7459] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 256.922557][ T7459] EXT4-fs error (device loop0): ext4_acquire_dquot:6835: comm syz.0.1031: Failed to acquire dquot type 0 [ 256.925225][ T26] audit: type=1326 audit(1774596953.850:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7448 comm="syz.4.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d15b9c799 code=0x7ffc0000 [ 256.978093][ T4283] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 256.995841][ T7459] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5929: Corrupt filesystem [ 257.005771][ T4283] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 257.013951][ T7459] EXT4-fs error (device loop0): ext4_evict_inode:279: inode #11: comm syz.0.1031: mark_inode_dirty error [ 257.025538][ T4283] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 257.032755][ T26] audit: type=1326 audit(1774596953.850:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7448 comm="syz.4.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d15b9c799 code=0x7ffc0000 [ 257.055433][ T7459] EXT4-fs warning (device loop0): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 257.065868][ T7459] EXT4-fs (loop0): 1 orphan inode deleted [ 257.071722][ T7459] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 257.071984][ T4283] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 257.080619][ T26] audit: type=1326 audit(1774596953.860:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7448 comm="syz.4.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f2d15b9c799 code=0x7ffc0000 [ 257.114973][ T4283] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 257.122864][ T4283] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 257.152229][ T57] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 257.278665][ T57] EXT4-fs error (device loop0): ext4_release_dquot:6871: comm kworker/u4:4: Failed to release dquot type 0 [ 257.615923][ T7464] chnl_net:caif_netlink_parms(): no params data found [ 257.782511][ T7464] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.838983][ T7464] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.848302][ T7464] device bridge_slave_0 entered promiscuous mode [ 257.857825][ T7464] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.878973][ T7464] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.910124][ T7464] device bridge_slave_1 entered promiscuous mode [ 258.014707][ T7464] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 258.051049][ T7464] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 258.134945][ T7464] team0: Port device team_slave_0 added [ 258.161477][ T7464] team0: Port device team_slave_1 added [ 258.294224][ T7464] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 258.312088][ T7464] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.379943][ T7464] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 258.407911][ T7464] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 258.424545][ T7464] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.486151][ T7464] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 258.584797][ T40] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.724865][ T40] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.794389][ T7504] trusted_key: encrypted_key: insufficient parameters specified [ 258.816606][ T7464] device hsr_slave_0 entered promiscuous mode [ 258.845575][ T4275] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 258.901527][ T7464] device hsr_slave_1 entered promiscuous mode [ 258.961425][ T4268] EXT4-fs (loop0): unmounting filesystem. [ 258.968778][ T4268] EXT4-fs error (device loop0): __ext4_get_inode_loc:4509: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 259.011151][ T40] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.028175][ T4268] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5929: Corrupt filesystem [ 259.043414][ T4268] EXT4-fs error (device loop0): ext4_quota_off:7141: inode #3: comm syz-executor: mark_inode_dirty error [ 259.157891][ T40] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.175354][ T4275] Bluetooth: hci6: command 0x0409 tx timeout [ 259.802482][ T7464] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 259.951801][ T7464] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 260.029399][ T7464] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 260.046529][ T7464] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 260.613043][ T7464] 8021q: adding VLAN 0 to HW filter on device bond0 [ 260.732209][ T7464] 8021q: adding VLAN 0 to HW filter on device team0 [ 260.825689][ T5690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 260.834063][ T5690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 260.947332][ T5690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 260.977879][ T5690] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 261.009683][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.016421][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.075842][ T5690] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.083311][ T5690] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.245371][ T4275] Bluetooth: hci6: command 0x041b tx timeout [ 261.252397][ T5690] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 261.266169][ T5690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 261.292817][ T5690] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 261.303000][ T5690] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.310319][ T5690] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.336019][ T5690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 261.366940][ T5690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 261.633426][ T5690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 261.664153][ T5690] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 261.714995][ T5690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 261.747032][ T5690] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 261.766990][ T5690] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 261.819099][ T5690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 261.832451][ T5690] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 261.868763][ T7464] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 261.913462][ T7464] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 262.114328][ T5690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 262.143419][ T5690] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 262.347397][ T40] device hsr_slave_0 left promiscuous mode [ 262.369477][ T40] device hsr_slave_1 left promiscuous mode [ 262.396730][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 262.419279][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 262.437283][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 262.636279][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 262.848723][ T40] device bridge_slave_1 left promiscuous mode [ 262.983766][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.281732][ T40] device bridge_slave_0 left promiscuous mode [ 263.315392][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.325699][ T4275] Bluetooth: hci6: command 0x040f tx timeout [ 263.423912][ T40] device veth1_macvtap left promiscuous mode [ 263.434690][ T40] device veth0_macvtap left promiscuous mode [ 263.475420][ T40] device veth1_vlan left promiscuous mode [ 263.482378][ T40] device veth0_vlan left promiscuous mode [ 264.961396][ T7604] trusted_key: encrypted_key: insufficient parameters specified [ 265.405589][ T4275] Bluetooth: hci6: command 0x0419 tx timeout [ 265.522102][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 265.522118][ T26] audit: type=1326 audit(1774596963.140:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7614 comm="syz.1.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb4a59c799 code=0x7ffc0000 [ 265.605465][ T26] audit: type=1326 audit(1774596963.140:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7614 comm="syz.1.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb4a59c799 code=0x7ffc0000 [ 265.646017][ T26] audit: type=1326 audit(1774596963.140:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7614 comm="syz.1.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb4a59c799 code=0x7ffc0000 [ 265.710802][ T26] audit: type=1326 audit(1774596963.140:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7614 comm="syz.1.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb4a59c799 code=0x7ffc0000 [ 265.755189][ T26] audit: type=1326 audit(1774596963.170:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7614 comm="syz.1.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7feb4a59c799 code=0x7ffc0000 [ 265.825385][ T26] audit: type=1326 audit(1774596963.170:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7614 comm="syz.1.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb4a59c799 code=0x7ffc0000 [ 265.885209][ T26] audit: type=1326 audit(1774596963.170:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7614 comm="syz.1.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb4a59c799 code=0x7ffc0000 [ 265.949769][ T26] audit: type=1326 audit(1774596963.170:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7614 comm="syz.1.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb4a59c799 code=0x7ffc0000 [ 265.980496][ T26] audit: type=1326 audit(1774596963.170:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7614 comm="syz.1.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb4a59c799 code=0x7ffc0000 [ 266.028261][ T26] audit: type=1326 audit(1774596963.180:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7614 comm="syz.1.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7feb4a59c799 code=0x7ffc0000 [ 266.291847][ T40] team0 (unregistering): Port device team_slave_1 removed [ 266.436989][ T40] team0 (unregistering): Port device team_slave_0 removed [ 266.633655][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 267.760802][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 267.912382][ T7636] trusted_key: encrypted_key: insufficient parameters specified [ 268.819435][ T40] bond0 (unregistering): Released all slaves [ 269.883617][ T7669] trusted_key: encrypted_key: insufficient parameters specified [ 270.201069][ T5155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 270.269409][ T5155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 270.581867][ T7464] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 271.895687][ T7714] trusted_key: encrypted_key: insufficient parameters specified [ 272.063118][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 272.096037][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 272.168930][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 272.206368][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 272.247284][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 272.295049][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 272.327751][ T7464] device veth0_vlan entered promiscuous mode [ 272.389596][ T7464] device veth1_vlan entered promiscuous mode [ 272.463933][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 272.486620][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 272.506067][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 272.536147][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 272.569471][ T7464] device veth0_macvtap entered promiscuous mode [ 272.594727][ T7464] device veth1_macvtap entered promiscuous mode [ 272.667498][ T7464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.705218][ T7464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.745170][ T7464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.775169][ T7464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.807576][ T7464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.835168][ T7464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.875308][ T7464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.906561][ T7464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.937452][ T7464] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 272.969948][ T7464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.027139][ T7464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.047209][ T7464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.085631][ T7750] trusted_key: encrypted_key: insufficient parameters specified [ 273.101286][ T7464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.128430][ T7464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.159968][ T7464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.184384][ T7464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.199571][ T7464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.240226][ T7464] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 273.281428][ T5155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 273.322840][ T5155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 273.346384][ T5155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 273.365683][ T5155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 273.387967][ T5155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 273.416112][ T5155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 273.483135][ T7464] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.502366][ T7464] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.512541][ T7464] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.527648][ T7464] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.779467][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.806396][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.827862][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 273.859832][ T5155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.884591][ T5155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.914142][ T5155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 274.942324][ T7788] trusted_key: encrypted_key: insufficient parameters specified [ 276.456879][ T7830] trusted_key: encrypted_key: insufficient parameters specified [ 277.633986][ T7865] trusted_key: encrypted_key: insufficient parameters specified [ 279.078605][ T7907] trusted_key: encrypted_key: insufficient parameters specified [ 280.531887][ T7948] trusted_key: encrypted_key: insufficient parameters specified [ 282.312677][ T7994] trusted_key: encrypted_key: master key parameter 'us' is invalid [ 283.773396][ T8041] trusted_key: encrypted_key: master key parameter 'us' is invalid [ 285.134578][ T8083] trusted_key: encrypted_key: master key parameter 'us' is invalid [ 290.565436][ T125] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 290.838546][ T125] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.854001][ T125] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 290.864725][ T125] usb 7-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 290.874121][ T125] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.899810][ T125] usb 7-1: config 0 descriptor?? [ 291.219862][ T125] usbhid 7-1:0.0: can't add hid device: -71 [ 291.229578][ T125] usbhid: probe of 7-1:0.0 failed with error -71 [ 291.277766][ T125] usb 7-1: USB disconnect, device number 2 [ 292.153918][ T8250] loop6: detected capacity change from 0 to 164 [ 298.415411][ T14] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 298.608360][ T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.646063][ T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 298.688490][ T14] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 298.716109][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.774984][ T14] usb 1-1: config 0 descriptor?? [ 299.182569][ T14] usbhid 1-1:0.0: can't add hid device: -71 [ 299.199989][ T14] usbhid: probe of 1-1:0.0 failed with error -71 [ 299.243917][ T14] usb 1-1: USB disconnect, device number 2 [ 302.855335][ T22] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 303.061712][ T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.105407][ T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.154206][ T22] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 303.199314][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.244689][ T22] usb 1-1: config 0 descriptor?? [ 303.620560][ T22] usbhid 1-1:0.0: can't add hid device: -71 [ 303.659864][ T22] usbhid: probe of 1-1:0.0 failed with error -71 [ 303.691947][ T22] usb 1-1: USB disconnect, device number 3 [ 315.435516][ T4310] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 315.677077][ T4310] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 315.709973][ T4310] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 315.761530][ T4310] usb 7-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 315.799975][ T4310] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.851202][ T4310] usb 7-1: config 0 descriptor?? [ 316.183870][ T4310] usbhid 7-1:0.0: can't add hid device: -71 [ 316.195226][ T4310] usbhid: probe of 7-1:0.0 failed with error -71 [ 316.232823][ T4310] usb 7-1: USB disconnect, device number 3 [ 317.211525][ T8718] loop6: detected capacity change from 0 to 164 [ 319.916040][ T8759] loop0: detected capacity change from 0 to 164 [ 320.828630][ T4725] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 321.027099][ T4725] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 321.060507][ T4725] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 321.087788][ T4725] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 321.119861][ T4725] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.154673][ T4725] usb 1-1: config 0 descriptor?? [ 321.499491][ T4725] usbhid 1-1:0.0: can't add hid device: -71 [ 321.507924][ T4725] usbhid: probe of 1-1:0.0 failed with error -71 [ 321.556975][ T4725] usb 1-1: USB disconnect, device number 4 [ 322.465521][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.471971][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.807867][ T8809] loop6: detected capacity change from 0 to 164 [ 327.901371][ T22] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 328.101778][ T22] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 328.121615][ T22] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 328.141024][ T22] usb 7-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 328.158218][ T22] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.190613][ T22] usb 7-1: config 0 descriptor?? [ 328.552100][ T22] usbhid 7-1:0.0: can't add hid device: -71 [ 328.561307][ T22] usbhid: probe of 7-1:0.0 failed with error -71 [ 328.596449][ T22] usb 7-1: USB disconnect, device number 4 [ 332.705193][ T125] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 332.897243][ T125] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 332.915158][ T125] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 332.941034][ T125] usb 7-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 332.962892][ T125] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.989565][ T125] usb 7-1: config 0 descriptor?? [ 333.295046][ T125] usbhid 7-1:0.0: can't add hid device: -71 [ 333.314319][ T125] usbhid: probe of 7-1:0.0 failed with error -71 [ 333.348538][ T125] usb 7-1: USB disconnect, device number 5 [ 341.604916][ T9060] netlink: 'syz.4.1515': attribute type 6 has an invalid length. [ 341.639726][ T9060] netlink: 'syz.4.1515': attribute type 7 has an invalid length. [ 341.667755][ T9060] netlink: 'syz.4.1515': attribute type 8 has an invalid length. [ 349.748618][ T9192] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1561'. [ 349.785449][ T9192] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1561'. [ 349.794651][ T9192] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1561'. [ 350.975234][ T4310] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 351.181219][ T4310] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 351.222910][ T4310] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 351.266839][ T4310] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 351.323726][ T4310] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.401034][ T4310] usb 1-1: config 0 descriptor?? [ 351.731005][ T4310] usbhid 1-1:0.0: can't add hid device: -71 [ 351.741803][ T4310] usbhid: probe of 1-1:0.0 failed with error -71 [ 351.776225][ T4310] usb 1-1: USB disconnect, device number 5 [ 355.105431][ T4725] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 355.317995][ T4725] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 355.342085][ T4725] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 355.384912][ T4725] usb 7-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 355.425238][ T4725] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.512516][ T4725] usb 7-1: config 0 descriptor?? [ 355.908697][ T4725] usbhid 7-1:0.0: can't add hid device: -71 [ 355.914811][ T4725] usbhid: probe of 7-1:0.0 failed with error -71 [ 355.957823][ T4725] usb 7-1: USB disconnect, device number 6 [ 358.145281][ T125] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 358.202567][ T9340] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1608'. [ 358.348201][ T125] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 358.382407][ T125] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 358.411528][ T125] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 358.436912][ T125] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.479126][ T125] usb 1-1: config 0 descriptor?? [ 358.960027][ T125] usbhid 1-1:0.0: can't add hid device: -71 [ 358.979044][ T125] usbhid: probe of 1-1:0.0 failed with error -71 [ 359.046209][ T125] usb 1-1: USB disconnect, device number 6 [ 365.555241][ T125] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 365.782433][ T125] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 365.889780][ T125] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 366.284889][ T125] usb 7-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 366.364884][ T125] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.490046][ T125] usb 7-1: config 0 descriptor?? [ 366.793438][ T125] usbhid 7-1:0.0: can't add hid device: -71 [ 366.801655][ T125] usbhid: probe of 7-1:0.0 failed with error -71 [ 366.837427][ T125] usb 7-1: USB disconnect, device number 7 [ 370.485261][ T22] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 370.911785][ T22] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 372.538784][ T22] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 372.772110][ T22] usb 7-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 372.950233][ T22] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.137790][ T22] usb 7-1: config 0 descriptor?? [ 373.317312][ T22] usb 7-1: can't set config #0, error -71 [ 373.339836][ T22] usb 7-1: USB disconnect, device number 8 [ 379.408827][ T4344] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 379.620063][ T4344] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 379.725160][ T4344] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 379.734987][ T4344] usb 7-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 379.757288][ T4344] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.796528][ T4344] usb 7-1: config 0 descriptor?? [ 380.112361][ T4344] usbhid 7-1:0.0: can't add hid device: -71 [ 380.119653][ T4344] usbhid: probe of 7-1:0.0 failed with error -71 [ 380.162435][ T4344] usb 7-1: USB disconnect, device number 9 [ 380.845494][ T4283] Bluetooth: hci6: command 0x0406 tx timeout [ 383.286359][ T4313] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 383.507152][ T4313] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 383.539786][ T4313] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 383.580809][ T4313] usb 7-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 383.614422][ T4313] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.668828][ T4313] usb 7-1: config 0 descriptor?? [ 383.895485][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.901843][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.993523][ T4313] usbhid 7-1:0.0: can't add hid device: -71 [ 384.005201][ T4313] usbhid: probe of 7-1:0.0 failed with error -71 [ 384.018538][ T4313] usb 7-1: USB disconnect, device number 10 [ 390.965226][ T14] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 391.101831][ T9807] overlayfs: failed to clone upperpath [ 391.167445][ T14] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 391.194464][ T14] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 391.235118][ T14] usb 7-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 391.264927][ T14] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.284462][ T14] usb 7-1: config 0 descriptor?? [ 391.757953][ T14] usbhid 7-1:0.0: can't add hid device: -71 [ 391.774988][ T14] usbhid: probe of 7-1:0.0 failed with error -71 [ 391.813474][ T14] usb 7-1: USB disconnect, device number 11 [ 392.647206][ T9828] loop0: detected capacity change from 0 to 512 [ 392.684694][ T9828] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 393.198843][ T9837] x_tables: ip_tables: osf match: only valid for protocol 6 [ 393.341743][ T9843] loop0: detected capacity change from 0 to 128 [ 395.745224][ T4313] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 395.938061][ T4313] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 395.975494][ T4313] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 396.005949][ T4313] usb 7-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 396.055565][ T4313] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.100628][ T4313] usb 7-1: config 0 descriptor?? [ 398.870677][ T4313] usbhid 7-1:0.0: can't add hid device: -71 [ 398.894981][ T4313] usbhid: probe of 7-1:0.0 failed with error -71 [ 398.942907][ T4313] usb 7-1: USB disconnect, device number 12 [ 404.942635][ T9993] overlayfs: failed to clone upperpath [ 405.343257][T10004] netlink: 'syz.6.1821': attribute type 23 has an invalid length. [ 405.372356][T10004] IPv6: NLM_F_CREATE should be specified when creating new route [ 405.415332][T10004] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 405.423228][T10004] IPv6: NLM_F_CREATE should be set when creating new route [ 409.475330][ T14] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 409.968460][ T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 410.181895][ T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 410.484593][ T14] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 410.534846][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.587118][ T14] usb 1-1: config 0 descriptor?? [ 410.684814][T10069] overlayfs: failed to clone upperpath [ 411.860970][T10091] overlayfs: failed to clone upperpath [ 412.263971][ T14] usbhid 1-1:0.0: can't add hid device: -71 [ 412.272020][ T14] usbhid: probe of 1-1:0.0 failed with error -71 [ 414.376103][ T14] usb 1-1: USB disconnect, device number 7 [ 414.868673][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 414.868691][ T26] audit: type=1326 audit(1774597112.480:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10124 comm="syz.2.1860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b4d79c799 code=0x7ffc0000 [ 414.940377][ T26] audit: type=1326 audit(1774597112.500:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10124 comm="syz.2.1860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b4d79c799 code=0x7ffc0000 [ 414.979822][ T26] audit: type=1326 audit(1774597112.520:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10124 comm="syz.2.1860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b4d79c799 code=0x7ffc0000 [ 415.010985][ T26] audit: type=1326 audit(1774597112.520:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10124 comm="syz.2.1860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b4d79c799 code=0x7ffc0000 [ 415.050881][ T26] audit: type=1326 audit(1774597112.520:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10124 comm="syz.2.1860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f7b4d79c799 code=0x7ffc0000 [ 415.111682][ T26] audit: type=1326 audit(1774597112.520:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10124 comm="syz.2.1860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7b4d79c502 code=0x7ffc0000 [ 415.144355][ T26] audit: type=1326 audit(1774597112.520:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10124 comm="syz.2.1860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7b4d75cfce code=0x7ffc0000 [ 415.204182][ T26] audit: type=1326 audit(1774597112.520:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10124 comm="syz.2.1860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f7b4d79c5c7 code=0x7ffc0000 [ 415.236760][ T26] audit: type=1326 audit(1774597112.530:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10124 comm="syz.2.1860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7b4d75cfce code=0x7ffc0000 [ 415.332554][ T26] audit: type=1326 audit(1774597112.530:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10124 comm="syz.2.1860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7b4d79c42b code=0x7ffc0000 [ 417.247833][T10169] af_packet: tpacket_rcv: packet too big, clamped from 122 to 4294967286. macoff=82 [ 420.124655][T10220] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 420.562293][T10228] netlink: 'syz.2.1893': attribute type 4 has an invalid length. [ 421.815197][ T4313] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 422.006779][ T4313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 422.027164][ T4313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 422.051628][ T4313] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 422.073612][ T4313] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.118672][ T4313] usb 1-1: config 0 descriptor?? [ 422.366558][ T4313] usbhid 1-1:0.0: can't add hid device: -71 [ 422.372670][ T4313] usbhid: probe of 1-1:0.0 failed with error -71 [ 422.409271][ T4313] usb 1-1: USB disconnect, device number 8 [ 422.494516][T10258] overlayfs: failed to clone upperpath [ 426.053663][T10308] loop6: detected capacity change from 0 to 8192 [ 427.194532][T10324] loop0: detected capacity change from 0 to 128 [ 429.745383][ T22] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 429.970750][ T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 430.039020][ T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 430.083677][ T22] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 430.127747][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.203381][ T22] usb 1-1: config 0 descriptor?? [ 430.452656][ T22] usbhid 1-1:0.0: can't add hid device: -71 [ 430.478198][ T22] usbhid: probe of 1-1:0.0 failed with error -71 [ 430.507704][ T22] usb 1-1: USB disconnect, device number 9 [ 435.114144][T10474] overlayfs: failed to clone upperpath [ 436.405297][ T14] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 436.745001][ T14] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 436.776726][ T14] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 436.810790][ T14] usb 7-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 436.834729][ T14] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.891346][ T14] usb 7-1: config 0 descriptor?? [ 437.131136][ T14] usbhid 7-1:0.0: can't add hid device: -71 [ 437.149947][ T14] usbhid: probe of 7-1:0.0 failed with error -71 [ 437.171725][ T14] usb 7-1: USB disconnect, device number 13 [ 439.881219][T10563] loop0: detected capacity change from 0 to 128 [ 439.931356][T10563] FAT-fs (loop0): bogus number of reserved sectors [ 439.965602][T10563] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 440.015614][T10563] FAT-fs (loop0): Can't find a valid FAT filesystem [ 440.101816][ T125] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 440.126716][T10571] overlayfs: failed to clone upperpath [ 440.319556][ T125] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 440.342901][ T125] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 440.374637][ T125] usb 7-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 440.425800][ T125] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.454080][ T125] usb 7-1: config 0 descriptor?? [ 441.524431][T10590] capability: warning: `syz.0.2012' uses deprecated v2 capabilities in a way that may be insecure [ 441.684390][ T125] usbhid 7-1:0.0: can't add hid device: -71 [ 441.690824][ T125] usbhid: probe of 7-1:0.0 failed with error -71 [ 441.699899][ T125] usb 7-1: USB disconnect, device number 14 [ 445.045390][ T4313] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 445.266953][ T4313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 445.294681][ T4313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 445.329436][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.335789][ T4313] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 445.349875][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.361973][ T4313] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.450496][ T4313] usb 1-1: config 0 descriptor?? [ 445.700003][ T4313] usbhid 1-1:0.0: can't add hid device: -71 [ 445.725951][ T4313] usbhid: probe of 1-1:0.0 failed with error -71 [ 445.774126][ T4313] usb 1-1: USB disconnect, device number 10 [ 447.320882][T10678] loop6: detected capacity change from 0 to 1756 [ 447.535514][T10678] device gre1 entered promiscuous mode [ 451.291124][T10729] loop0: detected capacity change from 0 to 256 [ 451.399807][T10730] loop6: detected capacity change from 0 to 256 [ 451.531240][T10730] FAT-fs (loop6): Directory bread(block 64) failed [ 451.557734][T10730] FAT-fs (loop6): Directory bread(block 65) failed [ 451.583029][T10730] FAT-fs (loop6): Directory bread(block 66) failed [ 451.622132][T10730] FAT-fs (loop6): Directory bread(block 67) failed [ 451.633141][T10730] FAT-fs (loop6): Directory bread(block 68) failed [ 451.675280][T10730] FAT-fs (loop6): Directory bread(block 69) failed [ 451.681965][T10730] FAT-fs (loop6): Directory bread(block 70) failed [ 451.718516][T10730] FAT-fs (loop6): Directory bread(block 71) failed [ 451.779993][T10730] FAT-fs (loop6): Directory bread(block 72) failed [ 451.800180][T10730] FAT-fs (loop6): Directory bread(block 73) failed [ 452.058983][T10730] syz.6.2052: attempt to access beyond end of device [ 452.058983][T10730] loop6: rw=524288, sector=1192, nr_sectors = 4 limit=256 [ 452.076991][T10730] syz.6.2052: attempt to access beyond end of device [ 452.076991][T10730] loop6: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 452.099193][ T26] kauditd_printk_skb: 79 callbacks suppressed [ 452.099211][ T26] audit: type=1800 audit(1774597149.710:136): pid=10730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2052" name="file1" dev="loop6" ino=1048616 res=0 errno=0 [ 452.247898][ T26] audit: type=1804 audit(1774597149.780:137): pid=10730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.2052" name="/newroot/185/file0/file1" dev="loop6" ino=1048616 res=1 errno=0 [ 452.335975][ T26] audit: type=1800 audit(1774597149.780:138): pid=10730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2052" name="file1" dev="loop6" ino=1048616 res=0 errno=0 [ 454.757491][T10778] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2066'. [ 455.059673][T10784] loop7: detected capacity change from 0 to 7 [ 455.105164][ T9539] Dev loop7: unable to read RDB block 7 [ 455.114437][ T9539] loop7: unable to read partition table [ 455.134478][ T9539] loop7: partition table beyond EOD, truncated [ 455.455726][ T4347] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 455.596448][T10791] loop6: detected capacity change from 0 to 512 [ 455.657228][ T4347] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 455.690825][ T4347] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 455.745158][ T4347] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 455.784898][ T4347] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.819926][ T4347] usb 1-1: config 0 descriptor?? [ 457.035154][ T4347] usbhid 1-1:0.0: can't add hid device: -71 [ 457.063099][ T4347] usbhid: probe of 1-1:0.0 failed with error -71 [ 457.106459][ T4347] usb 1-1: USB disconnect, device number 11 [ 458.334530][T10817] loop0: detected capacity change from 0 to 736 [ 465.142770][T10923] x_tables: ip_tables: ah match: only valid for protocol 51 [ 465.205155][ T4725] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 465.397907][ T4725] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 465.423244][ T4725] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 465.453682][ T4725] usb 7-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 465.483134][ T4725] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.536641][ T4725] usb 7-1: config 0 descriptor?? [ 466.146807][ T4725] usbhid 7-1:0.0: can't add hid device: -71 [ 466.228472][ T4725] usbhid: probe of 7-1:0.0 failed with error -71 [ 467.007059][ T4725] usb 7-1: USB disconnect, device number 15 [ 468.306374][T10972] loop6: detected capacity change from 0 to 2048 [ 470.121374][T11001] raw_sendmsg: syz.2.2142 forgot to set AF_INET. Fix it! [ 470.162410][T10998] ipt_CLUSTERIP: Please specify destination IP [ 470.241658][T11006] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 470.241658][T11006] The task syz.6.2141 (11006) triggered the difference, watch for misbehavior. [ 470.710647][T11012] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 485.200434][T11148] overlayfs: missing 'workdir' [ 489.785248][T11186] 9pnet: p9_errstr2errno: server reported unknown error ü.ÀÅ ~€nxñô [ 489.785248][T11186] U¸Â;<‰¢òú2Q8œAzPM#Ä–X93Úº)˜âš.g˜öáÔ߈úNEÓdŽÔöbM [ 492.607126][T11229] program syz.0.2215 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 495.269133][T11265] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2227'. [ 496.867629][T11284] loop6: detected capacity change from 0 to 128 [ 498.803502][T11320] futex_wake_op: syz.2.2247 tries to shift op by -1; fix this program [ 501.234905][T11348] overlayfs: failed to clone upperpath [ 506.395553][T11379] loop0: detected capacity change from 0 to 1756 [ 506.720586][T11396] loop6: detected capacity change from 0 to 256 [ 506.801898][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.808287][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.124638][T11404] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2275'. [ 507.360018][T11410] device syzkaller0 entered promiscuous mode [ 509.381035][T11448] tmpfs: Bad value for 'nr_blocks' [ 517.793903][T11471] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2297'. [ 518.040255][T11573] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2334'. [ 519.191428][T11585] loop6: detected capacity change from 0 to 256 [ 520.238134][T11604] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2345'. [ 520.667457][T11609] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2347'. [ 524.834923][T11635] loop0: detected capacity change from 0 to 2048 [ 526.454550][T11665] futex_wake_op: syz.2.2367 tries to shift op by -1; fix this program [ 530.949452][T11713] futex_wake_op: syz.1.2381 tries to shift op by -1; fix this program [ 530.999922][T11716] overlayfs: failed to clone upperpath [ 532.803731][T11751] loop6: detected capacity change from 0 to 256 [ 532.826339][T11751] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 532.845971][T11751] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 532.871396][T11755] futex_wake_op: syz.1.2397 tries to shift op by -1; fix this program [ 534.561485][T11784] loop0: detected capacity change from 0 to 256 [ 534.774137][T11788] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2409'. [ 535.182940][T11800] loop0: detected capacity change from 0 to 2048 [ 535.524774][T11814] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 538.199853][T11823] sctp: [Deprecated]: syz.0.2421 (pid 11823) Use of int in maxseg socket option. [ 538.199853][T11823] Use struct sctp_assoc_value instead [ 538.407338][T11830] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2423'. [ 538.701402][T11840] loop6: detected capacity change from 0 to 128 [ 538.771125][ T26] audit: type=1800 audit(1774597236.380:139): pid=11840 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2429" name="file2" dev="loop6" ino=1048622 res=0 errno=0 [ 540.039443][T11863] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2438'. [ 541.617170][T11904] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2452'. [ 544.506251][T11931] loop0: detected capacity change from 0 to 2048 [ 546.339746][ T4312] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 546.567423][ T4312] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 546.585429][ T4312] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 546.596990][T11967] futex_wake_op: syz.0.2475 tries to shift op by -1; fix this program [ 546.625392][ T4312] usb 7-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 546.656885][ T4312] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.692116][ T4312] usb 7-1: config 0 descriptor?? [ 546.918808][ T4312] usbhid 7-1:0.0: can't add hid device: -71 [ 546.926031][ T4312] usbhid: probe of 7-1:0.0 failed with error -71 [ 546.965838][ T4312] usb 7-1: USB disconnect, device number 16 [ 547.468653][T12001] futex_wake_op: syz.2.2488 tries to shift op by -1; fix this program [ 548.363065][T12029] QAT: failed to copy from user cfg_data. [ 548.603395][T12041] futex_wake_op: syz.0.2503 tries to shift op by -1; fix this program [ 548.726286][T12045] overlayfs: failed to clone upperpath [ 549.134563][T12063] loop0: detected capacity change from 0 to 128 [ 549.480575][T12076] futex_wake_op: syz.1.2519 tries to shift op by -1; fix this program [ 549.734008][T12080] team0 (unregistering): Port device team_slave_0 removed [ 549.793032][T12080] team0 (unregistering): Port device team_slave_1 removed [ 550.392125][T12108] loop0: detected capacity change from 0 to 128 [ 550.414338][ T26] audit: type=1326 audit(1774597248.020:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12077 comm="syz.4.2520" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2d15b9c799 code=0x0 [ 550.492251][T12108] FAT-fs (loop0): Directory bread(block 32) failed [ 550.519815][T12108] FAT-fs (loop0): Directory bread(block 33) failed [ 550.547315][T12108] FAT-fs (loop0): Directory bread(block 34) failed [ 550.580455][T12108] FAT-fs (loop0): Directory bread(block 35) failed [ 550.613724][T12108] FAT-fs (loop0): Directory bread(block 36) failed [ 550.624152][T12108] FAT-fs (loop0): Directory bread(block 37) failed [ 550.640606][T12108] FAT-fs (loop0): Directory bread(block 38) failed [ 550.658690][T12108] FAT-fs (loop0): Directory bread(block 39) failed [ 550.675763][T12108] FAT-fs (loop0): Directory bread(block 40) failed [ 550.692060][T12108] FAT-fs (loop0): Directory bread(block 41) failed [ 550.843333][T12115] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2534'. [ 550.865493][T12117] futex_wake_op: syz.2.2535 tries to shift op by -1; fix this program [ 551.555998][T12133] loop0: detected capacity change from 0 to 128 [ 551.649941][T12133] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 52) [ 551.699487][T12133] FAT-fs (loop0): Filesystem has been set read-only [ 551.755138][T12133] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 52) [ 552.245568][T12153] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2549'. [ 552.459515][T12159] loop6: detected capacity change from 0 to 128 [ 552.544227][T12159] FAT-fs (loop6): bogus number of reserved sectors [ 552.582629][T12159] FAT-fs (loop6): This looks like a DOS 1.x volume, but isn't a recognized floppy size (128 sectors) [ 552.636010][T12159] FAT-fs (loop6): Can't find a valid FAT filesystem [ 561.816317][T12280] futex_wake_op: syz.6.2594 tries to shift op by -1; fix this program [ 561.959752][T12283] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2597'. [ 565.069040][T12320] futex_wake_op: syz.2.2611 tries to shift op by -1; fix this program [ 565.092555][T12323] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2612'. [ 565.231759][T12326] ipt_CLUSTERIP: Please specify destination IP [ 565.638740][T12339] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2619'. [ 568.211023][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.219674][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 569.995261][T12385] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2634'. [ 570.724272][T12402] futex_wake_op: syz.0.2642 tries to shift op by -1; fix this program [ 573.167278][T12431] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2650'. [ 573.574053][T12446] futex_wake_op: syz.4.2656 tries to shift op by -1; fix this program [ 576.576142][T12477] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2665'. [ 576.962263][T12486] futex_wake_op: syz.2.2670 tries to shift op by -1; fix this program [ 579.946891][ T14] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 580.365360][ T14] usb 7-1: device not accepting address 17, error -71 [ 580.441978][T12514] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2679'. [ 580.792124][T12526] futex_wake_op: syz.4.2685 tries to shift op by -1; fix this program [ 583.247019][T12556] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2695'. [ 583.374121][T12560] fuse: Bad value for 'fd' [ 583.623626][T12569] futex_wake_op: syz.1.2699 tries to shift op by -1; fix this program [ 585.056241][T12588] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2707'. [ 585.267425][T12592] fuse: Bad value for 'fd' [ 585.563100][ T4275] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 585.573909][T12598] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 585.584773][T12598] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 585.593715][T12598] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 585.602438][T12598] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 585.612968][T12598] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 585.691232][T12601] futex_wake_op: syz.6.2713 tries to shift op by -1; fix this program [ 586.177617][ T4382] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.025884][ T4382] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.264835][ T4382] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.395430][ T4382] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.603053][T12596] chnl_net:caif_netlink_parms(): no params data found [ 587.645294][ T4283] Bluetooth: hci3: command 0x0409 tx timeout [ 588.262178][T12596] bridge0: port 1(bridge_slave_0) entered blocking state [ 588.275728][T12596] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.322247][T12596] device bridge_slave_0 entered promiscuous mode [ 588.384083][T12637] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2721'. [ 588.409608][T12596] bridge0: port 2(bridge_slave_1) entered blocking state [ 588.420671][T12596] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.446462][T12596] device bridge_slave_1 entered promiscuous mode [ 588.617361][T12644] fuse: Bad value for 'fd' [ 588.661885][T12596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 588.777979][T12596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 588.944574][T12596] team0: Port device team_slave_0 added [ 589.007680][T12655] futex_wake_op: syz.0.2727 tries to shift op by -1; fix this program [ 589.071906][T12596] team0: Port device team_slave_1 added [ 589.275814][T12596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 589.290034][T12596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 590.045169][T12596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 590.071049][ T4283] Bluetooth: hci3: command 0x041b tx timeout [ 590.165945][T12596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 590.172967][T12596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 590.238027][T12596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 590.441508][T12679] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2734'. [ 590.680099][T12686] loop6: detected capacity change from 0 to 2048 [ 590.861320][ T4382] device hsr_slave_0 left promiscuous mode [ 590.927229][T12693] futex_wake_op: syz.4.2739 tries to shift op by -1; fix this program [ 590.939058][ T4382] device hsr_slave_1 left promiscuous mode [ 590.956293][ T4382] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 590.964097][ T4382] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 591.000352][ T4382] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 591.041085][ T4382] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 591.076052][ T4382] device bridge_slave_1 left promiscuous mode [ 591.082324][ T4382] bridge0: port 2(bridge_slave_1) entered disabled state [ 591.124214][ T4382] device bridge_slave_0 left promiscuous mode [ 591.171308][ T4382] bridge0: port 1(bridge_slave_0) entered disabled state [ 591.263308][ T4382] device veth1_macvtap left promiscuous mode [ 591.270305][ T4382] device veth0_macvtap left promiscuous mode [ 591.277394][ T4382] device veth1_vlan left promiscuous mode [ 591.283327][ T4382] device veth0_vlan left promiscuous mode [ 591.654266][T12713] loop6: detected capacity change from 0 to 256 [ 592.130750][ T4283] Bluetooth: hci3: command 0x040f tx timeout [ 593.624110][ T4382] team0 (unregistering): Port device team_slave_1 removed [ 593.686663][T12736] futex_wake_op: syz.1.2754 tries to shift op by -1; fix this program [ 593.764167][ T4382] team0 (unregistering): Port device team_slave_0 removed [ 593.840606][ T4382] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 593.896206][ T4382] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 594.205414][T12598] Bluetooth: hci3: command 0x0419 tx timeout [ 594.359894][ T4382] bond0 (unregistering): Released all slaves [ 594.528218][T12596] device hsr_slave_0 entered promiscuous mode [ 594.538714][T12596] device hsr_slave_1 entered promiscuous mode [ 594.545778][T12596] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 594.553469][T12596] Cannot create hsr debugfs directory [ 594.646404][T12726] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2749'. [ 595.094870][T12767] futex_wake_op: syz.6.2764 tries to shift op by -1; fix this program [ 596.853255][T12596] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 596.899802][T12801] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2773'. [ 596.932555][T12596] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 596.948935][T12596] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 596.977765][T12596] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 597.265285][T12596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 597.364824][T12596] 8021q: adding VLAN 0 to HW filter on device team0 [ 597.435596][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 597.443894][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 597.522121][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 597.547819][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 597.548862][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 597.548988][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 597.551370][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 597.553388][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 597.555994][T12823] futex_wake_op: syz.1.2780 tries to shift op by -1; fix this program [ 597.559541][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 597.612555][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 597.736734][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 597.798276][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 597.810150][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 597.852170][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 597.902593][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 597.948377][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 598.001888][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 598.022246][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 598.041217][T12596] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 598.059742][T12596] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 598.225111][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 598.254491][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 598.413668][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 598.528347][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 598.700368][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 599.682462][T12865] futex_wake_op: syz.1.2792 tries to shift op by -1; fix this program [ 600.132610][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 600.162411][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 600.191419][T12596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 600.280668][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 600.297166][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 600.370240][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 600.385823][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 600.404294][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 600.422429][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 600.450212][T12596] device veth0_vlan entered promiscuous mode [ 600.512557][T12596] device veth1_vlan entered promiscuous mode [ 600.904901][T12596] device veth0_macvtap entered promiscuous mode [ 601.219374][T12596] device veth1_macvtap entered promiscuous mode [ 601.497597][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 601.553679][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 601.566215][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 601.589648][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 601.605858][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 601.636404][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 601.698520][T12596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 601.735384][T12596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 601.778460][T12596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 601.805202][T12596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 601.835058][T12596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 601.866010][T12596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 601.905107][T12596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 601.921512][T12907] fuse: Bad value for 'fd' [ 601.935050][T12596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 601.967948][T12596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 601.997202][T12596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 602.044136][T12596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.088545][T12596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 602.128987][T12596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.161450][T12596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 602.187375][T12596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.191312][T12914] futex_wake_op: syz.0.2805 tries to shift op by -1; fix this program [ 602.220856][T12596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 602.250706][T12596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.269752][T12596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 602.284937][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 602.307768][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 602.317710][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 602.329709][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 602.362792][T12596] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.382044][T12596] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.398404][T12596] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.408465][T12596] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.695699][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 602.708201][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 602.776382][ T5400] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 602.801358][ T5400] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 602.810350][ T5400] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 602.819912][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 603.068007][T12942] fuse: Bad value for 'fd' [ 604.280000][T12956] futex_wake_op: syz.2.2817 tries to shift op by -1; fix this program [ 605.533546][T12969] loop2: detected capacity change from 0 to 2048 [ 605.994269][T12982] fuse: Bad value for 'fd' [ 606.116833][ T4283] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 606.131192][ T4283] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 606.140636][ T4283] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 606.151708][ T4283] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 606.160678][ T4283] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 606.168264][ T4283] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 607.605531][T13002] futex_wake_op: syz.6.2830 tries to shift op by -1; fix this program [ 608.256491][ T4283] Bluetooth: hci4: command 0x0409 tx timeout [ 608.671938][T13012] loop2: detected capacity change from 0 to 2048 [ 608.742936][T12984] chnl_net:caif_netlink_parms(): no params data found [ 608.788427][T13017] loop6: detected capacity change from 0 to 256 [ 609.009434][ T4382] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.295308][ T4283] Bluetooth: hci4: command 0x041b tx timeout [ 610.330728][ T4382] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.342661][T12984] bridge0: port 1(bridge_slave_0) entered blocking state [ 610.342734][T12984] bridge0: port 1(bridge_slave_0) entered disabled state [ 610.343991][T12984] device bridge_slave_0 entered promiscuous mode [ 610.401298][T13052] futex_wake_op: syz.0.2844 tries to shift op by -1; fix this program [ 610.434510][ T4382] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.464210][T12984] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.514889][T12984] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.536557][T12984] device bridge_slave_1 entered promiscuous mode [ 610.628305][ T4382] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.646340][T12984] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 611.676558][T12984] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 611.686724][T13066] loop6: detected capacity change from 0 to 2048 [ 611.834532][T12984] team0: Port device team_slave_0 added [ 611.926745][T12984] team0: Port device team_slave_1 added [ 612.039069][T12984] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 612.055866][T12984] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 612.097480][T12984] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 612.158381][T12984] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 612.177744][T12984] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 612.252002][T12984] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 612.366379][ T4283] Bluetooth: hci4: command 0x040f tx timeout [ 612.457701][T12984] device hsr_slave_0 entered promiscuous mode [ 612.461078][T13086] loop2: detected capacity change from 0 to 256 [ 612.515683][T12984] device hsr_slave_1 entered promiscuous mode [ 612.532721][T12984] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 612.559922][T12984] Cannot create hsr debugfs directory [ 612.739309][T13091] futex_wake_op: syz.4.2855 tries to shift op by -1; fix this program [ 614.445219][ T4283] Bluetooth: hci4: command 0x0419 tx timeout [ 615.826964][T13138] loop6: detected capacity change from 0 to 256 [ 615.888087][T13142] futex_wake_op: syz.0.2868 tries to shift op by -1; fix this program [ 616.966519][T13153] loop2: detected capacity change from 0 to 2048 [ 616.967376][T12984] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 617.332432][T12984] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 617.449861][ T4382] device hsr_slave_0 left promiscuous mode [ 617.481648][ T4382] device hsr_slave_1 left promiscuous mode [ 617.510485][ T4382] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 617.537508][ T4382] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 617.600641][ T4382] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 617.619980][ T4382] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 617.646121][ T4382] bridge0: port 2(bridge_slave_1) entered disabled state [ 617.668112][ T4382] device bridge_slave_0 left promiscuous mode [ 618.153218][ T4382] bridge0: port 1(bridge_slave_0) entered disabled state [ 618.997219][ T4382] device veth1_macvtap left promiscuous mode [ 619.003320][ T4382] device veth0_macvtap left promiscuous mode [ 619.076853][ T4382] device veth1_vlan left promiscuous mode [ 619.111809][ T4382] device veth0_vlan left promiscuous mode [ 619.466275][ T4382] bond1 (unregistering): Released all slaves [ 619.940073][ T4382] team0 (unregistering): Port device team_slave_1 removed [ 620.004180][ T4382] team0 (unregistering): Port device team_slave_0 removed [ 620.076907][T13198] futex_wake_op: syz.6.2882 tries to shift op by -1; fix this program [ 620.097141][ T4382] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 620.249484][ T4382] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 621.527870][ T4382] bond0 (unregistering): Released all slaves [ 621.536521][T13214] loop6: detected capacity change from 0 to 2048 [ 621.633937][T12984] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 621.649947][T12984] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 622.973271][T12984] 8021q: adding VLAN 0 to HW filter on device bond0 [ 623.062041][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 623.085438][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 623.128063][T12984] 8021q: adding VLAN 0 to HW filter on device team0 [ 623.218699][ T5446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 623.256590][ T5446] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 623.280433][ T5446] bridge0: port 1(bridge_slave_0) entered blocking state [ 623.287700][ T5446] bridge0: port 1(bridge_slave_0) entered forwarding state [ 623.299082][ T5446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 623.334097][ T5446] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 623.349308][ T5446] bridge0: port 2(bridge_slave_1) entered blocking state [ 623.356714][ T5446] bridge0: port 2(bridge_slave_1) entered forwarding state [ 623.402664][ T5446] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 623.413960][ T5446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 623.505446][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 623.526792][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 623.567559][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 623.601617][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 623.635929][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 623.645660][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 623.669296][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 623.847820][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 623.914566][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 623.942042][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 623.957901][T12984] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 626.122757][ T5690] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 626.177234][ T5690] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 626.252208][T12984] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 626.317791][ T5446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 626.340459][ T5446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 626.410255][ T5690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 626.431944][ T5690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 626.476806][T12984] device veth0_vlan entered promiscuous mode [ 626.485765][ T5690] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 626.516771][ T5690] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 626.540299][T12984] device veth1_vlan entered promiscuous mode [ 626.598317][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 626.637211][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 626.664459][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 626.690543][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 626.715418][T12984] device veth0_macvtap entered promiscuous mode [ 626.761796][T12984] device veth1_macvtap entered promiscuous mode [ 626.874278][T12984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 626.915477][T12984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.958803][T12984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 627.002484][T12984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.032415][T12984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 627.058891][T12984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.089604][T12984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 627.118162][T13309] loop6: detected capacity change from 0 to 2048 [ 627.121123][T12984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.144529][T12984] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 627.189060][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 627.207405][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 627.257148][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 627.288308][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 627.322825][T12984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 627.351503][T12984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.385441][T12984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 627.417028][T12984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.439357][T12984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 627.450365][T12984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.460807][T12984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 627.471926][T12984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.489907][T12984] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 627.497559][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 627.508240][ T4772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 628.464017][T12984] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.535070][T12984] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.565202][T12984] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.597958][T12984] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.768463][ T5446] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 628.797231][ T5446] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 628.828730][ T5445] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 628.854049][ T5445] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 628.869179][ T5445] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 628.881822][ T9536] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 633.186307][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 633.192823][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 636.022210][T13418] loop6: detected capacity change from 0 to 512 [ 636.054066][T13418] FAT-fs (loop6): Unrecognized mount option "" or missing value [ 636.982445][T13449] loop1: detected capacity change from 0 to 2048 [ 638.600721][T13489] futex_wake_op: syz.4.2966 tries to shift op by -1; fix this program [ 640.502056][T13522] futex_wake_op: syz.2.2979 tries to shift op by -1; fix this program [ 640.580600][T13520] loop6: detected capacity change from 0 to 2048 [ 642.114486][T13550] fuse: Bad value for 'group_id' [ 642.412755][T13560] futex_wake_op: syz.1.2992 tries to shift op by -1; fix this program [ 642.440340][T13562] fuse: Bad value for 'fd' [ 642.744789][T13566] loop1: detected capacity change from 0 to 2048 [ 644.399301][T13597] fuse: Bad value for 'group_id' [ 644.452216][T13599] futex_wake_op: syz.1.3005 tries to shift op by -1; fix this program [ 644.609168][T13605] fuse: Bad value for 'fd' [ 644.611176][T13603] loop2: detected capacity change from 0 to 2048 [ 646.418838][T13632] futex_wake_op: syz.1.3019 tries to shift op by -1; fix this program [ 646.484673][T13635] fuse: Bad value for 'group_id' [ 646.813996][T12598] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 646.835358][T12598] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 646.865659][T12598] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 646.912597][T12598] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 646.920603][T12598] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 646.928170][T12598] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 647.282054][T13659] fuse: Bad value for 'fd' [ 647.718702][T13671] futex_wake_op: syz.1.3030 tries to shift op by -1; fix this program [ 648.677187][T13647] chnl_net:caif_netlink_parms(): no params data found [ 648.888745][ T5690] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.942967][T13647] bridge0: port 1(bridge_slave_0) entered blocking state [ 648.950435][T13647] bridge0: port 1(bridge_slave_0) entered disabled state [ 648.963710][T13647] device bridge_slave_0 entered promiscuous mode [ 648.992364][ T5690] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.005228][ T4283] Bluetooth: hci0: command 0x0409 tx timeout [ 649.024189][T13647] bridge0: port 2(bridge_slave_1) entered blocking state [ 649.032413][T13647] bridge0: port 2(bridge_slave_1) entered disabled state [ 649.042673][T13647] device bridge_slave_1 entered promiscuous mode [ 649.079812][T13647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 649.111054][ T5690] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.130747][T13647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 649.166542][T13647] team0: Port device team_slave_0 added [ 649.179113][T13647] team0: Port device team_slave_1 added [ 649.211301][ T5690] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.307177][T13647] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 649.324924][T13647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 649.373816][T13647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 649.403235][T13647] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 649.423663][T13647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 649.470692][T13647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 649.613673][T13647] device hsr_slave_0 entered promiscuous mode [ 649.623030][T13647] device hsr_slave_1 entered promiscuous mode [ 649.629961][T13647] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 649.638631][T13647] Cannot create hsr debugfs directory [ 651.026800][T13712] futex_wake_op: syz.2.3042 tries to shift op by -1; fix this program [ 651.085277][ T4283] Bluetooth: hci0: command 0x041b tx timeout [ 653.194784][ T4283] Bluetooth: hci0: command 0x040f tx timeout [ 653.602377][T13767] futex_wake_op: syz.2.3056 tries to shift op by -1; fix this program [ 653.735162][T13647] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 653.972374][T13647] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 654.009142][T13647] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 654.113018][ T5690] device hsr_slave_0 left promiscuous mode [ 654.135619][ T5690] device hsr_slave_1 left promiscuous mode [ 654.146088][ T5690] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 654.173968][ T5690] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 654.227581][ T5690] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 654.245793][ T5690] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 654.268649][ T5690] device bridge_slave_1 left promiscuous mode [ 654.285427][ T5690] bridge0: port 2(bridge_slave_1) entered disabled state [ 654.310922][ T5690] device bridge_slave_0 left promiscuous mode [ 654.332486][ T5690] bridge0: port 1(bridge_slave_0) entered disabled state [ 654.487446][ T5690] device veth1_macvtap left promiscuous mode [ 654.493575][ T5690] device veth0_macvtap left promiscuous mode [ 654.534154][ T5690] device veth1_vlan left promiscuous mode [ 654.546016][ T5690] device veth0_vlan left promiscuous mode [ 655.255167][ T4283] Bluetooth: hci0: command 0x0419 tx timeout [ 656.136214][T13811] futex_wake_op: syz.6.3068 tries to shift op by -1; fix this program [ 656.562064][ T5690] bond1 (unregistering): Released all slaves [ 658.501311][ T5690] team0 (unregistering): Port device team_slave_1 removed [ 658.633039][ T5690] team0 (unregistering): Port device team_slave_0 removed [ 658.672832][T13851] md2: error: bitmap file must open for write [ 658.739101][ T5690] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 658.849424][ T5690] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 659.310618][T13864] loop6: detected capacity change from 0 to 164 [ 659.366602][T13864] Unsupported NM flag settings (240) [ 659.372539][T13864] Unsupported NM flag settings (240) [ 659.406377][T13864] Unsupported NM flag settings (240) [ 659.419938][T13864] Unsupported NM flag settings (240) [ 659.891697][ T5690] bond0 (unregistering): Released all slaves [ 660.731574][T13647] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 661.166169][T13647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 661.226031][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 661.235759][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 661.283874][T13647] 8021q: adding VLAN 0 to HW filter on device team0 [ 661.365573][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 661.391967][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 661.425891][ T4382] bridge0: port 1(bridge_slave_0) entered blocking state [ 661.433038][ T4382] bridge0: port 1(bridge_slave_0) entered forwarding state [ 661.505669][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 661.546592][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 661.574766][T13904] fuse: Unknown parameter 'grou00000000000000000000' [ 661.593890][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 661.616212][ T4382] bridge0: port 2(bridge_slave_1) entered blocking state [ 661.623577][ T4382] bridge0: port 2(bridge_slave_1) entered forwarding state [ 661.670704][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 661.708882][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 661.750984][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 661.807768][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 661.847661][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 661.882544][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 661.922774][T13647] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 661.966029][T13647] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 662.350303][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 662.409066][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 662.679339][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 662.929987][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 662.967203][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 662.988611][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 663.325615][T13930] fuse: Bad value for 'fd' [ 663.966083][T13647] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 663.973649][ T5446] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 663.999532][ T5446] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 664.030405][T13949] fuse: Unknown parameter 'grou00000000000000000000' [ 665.780747][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 665.798918][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 665.847891][T13647] device veth0_vlan entered promiscuous mode [ 665.880757][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 665.893949][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 665.920255][T13977] fuse: Bad value for 'fd' [ 665.926077][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 665.954590][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 665.977750][T13647] device veth1_vlan entered promiscuous mode [ 665.992786][T13979] fuse: Unknown parameter 'grou00000000000000000000' [ 666.050651][T13647] device veth0_macvtap entered promiscuous mode [ 666.096826][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 666.115441][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 666.155830][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 666.189548][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 666.235921][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 666.260842][T13647] device veth1_macvtap entered promiscuous mode [ 666.331760][T13647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 666.352615][T13647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.365038][ T26] audit: type=1326 audit(1774597363.970:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13987 comm="syz.1.3126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc4199c799 code=0x7ffc0000 [ 666.397954][T13647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 666.415012][ T26] audit: type=1326 audit(1774597363.970:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13987 comm="syz.1.3126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc4199c799 code=0x7ffc0000 [ 666.445228][T13647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.464159][T13647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 666.479874][ T26] audit: type=1326 audit(1774597363.980:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13987 comm="syz.1.3126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc4199c799 code=0x7ffc0000 [ 666.521841][T13647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.540776][T13647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 666.564860][T13647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.575224][ T26] audit: type=1326 audit(1774597363.980:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13987 comm="syz.1.3126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc4199c799 code=0x7ffc0000 [ 666.608875][T13647] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 666.631770][T11619] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 666.639537][ T26] audit: type=1326 audit(1774597364.000:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13987 comm="syz.1.3126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7fdc4199c799 code=0x7ffc0000 [ 666.639582][ T26] audit: type=1326 audit(1774597364.000:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13987 comm="syz.1.3126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc4199c799 code=0x7ffc0000 [ 666.639618][ T26] audit: type=1326 audit(1774597364.000:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13987 comm="syz.1.3126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc4199c799 code=0x7ffc0000 [ 666.659016][T11619] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 666.684738][ T26] audit: type=1326 audit(1774597364.000:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13987 comm="syz.1.3126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc4199c799 code=0x7ffc0000 [ 666.707480][ T26] audit: type=1326 audit(1774597364.000:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13987 comm="syz.1.3126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc4199c799 code=0x7ffc0000 [ 666.707523][ T26] audit: type=1326 audit(1774597364.000:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13987 comm="syz.1.3126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fdc4199c799 code=0x7ffc0000 [ 666.800407][T11619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 666.813228][T13647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 666.885036][T13647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.914597][T13647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 666.983235][T13647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 667.012311][T13647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 667.023059][T13647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 667.058150][T13647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 667.078795][T14001] loop6: detected capacity change from 0 to 256 [ 667.091853][T14001] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 667.102840][T14001] FAT-fs (loop6): Filesystem has been set read-only [ 667.106913][T13647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 667.589937][T13647] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 667.884558][T13647] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.081640][T13647] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.099050][T13647] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.134194][T13647] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.176404][T14009] fuse: Unknown parameter 'group_i00000000000000000000' [ 668.205641][T11619] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 668.216335][T11619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 668.391562][ T5690] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 668.412133][ T5690] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 668.415222][T14014] fuse: Bad value for 'fd' [ 668.427755][ T5690] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 668.760303][ T9458] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 668.779905][ T9458] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 668.795478][ T9458] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 669.237505][T14035] syz.4.3141 uses obsolete (PF_INET,SOCK_PACKET) [ 670.668611][T14052] fuse: Unknown parameter 'group_i00000000000000000000' [ 672.022260][T14089] fuse: Unknown parameter 'group_i00000000000000000000' [ 672.335747][T14096] loop2: detected capacity change from 0 to 128 [ 672.485086][T14101] syz.2.3166: attempt to access beyond end of device [ 672.485086][T14101] loop2: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 672.739955][T14106] netlink: 'syz.6.3168': attribute type 12 has an invalid length. [ 672.744885][ T4382] kworker/u4:8: attempt to access beyond end of device [ 672.744885][ T4382] loop2: rw=1, sector=146, nr_sectors = 104 limit=128 [ 672.773735][T14106] netlink: 'syz.6.3168': attribute type 29 has an invalid length. [ 672.832776][T14106] netlink: 148 bytes leftover after parsing attributes in process `syz.6.3168'. [ 674.128870][T12598] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 674.140193][T12598] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 674.148458][T12598] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 674.161624][T12598] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 674.169408][T12598] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 674.186108][T12598] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 674.234401][T14123] fuse: Unknown parameter 'group_id00000000000000000000' [ 674.364705][ T57] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.527267][ T57] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.654654][ T57] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.834710][ T57] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.149910][T14118] chnl_net:caif_netlink_parms(): no params data found [ 676.056771][T14118] bridge0: port 1(bridge_slave_0) entered blocking state [ 676.067554][T14168] fuse: Unknown parameter 'group_id00000000000000000000' [ 676.093666][T14118] bridge0: port 1(bridge_slave_0) entered disabled state [ 676.156135][T14118] device bridge_slave_0 entered promiscuous mode [ 676.205430][ T4283] Bluetooth: hci1: command 0x0409 tx timeout [ 676.315987][T14118] bridge0: port 2(bridge_slave_1) entered blocking state [ 676.323245][T14118] bridge0: port 2(bridge_slave_1) entered disabled state [ 676.405143][T14118] device bridge_slave_1 entered promiscuous mode [ 676.594010][T14118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 676.626413][T14118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 676.791398][T14118] team0: Port device team_slave_0 added [ 676.917120][T14118] team0: Port device team_slave_1 added [ 677.126109][T14118] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 677.170557][T14118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 677.283690][T14203] program syz.1.3197 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 677.292004][T14118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 677.456368][T14118] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 677.464027][T14118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 677.552502][T14206] fuse: Unknown parameter 'group_id00000000000000000000' [ 677.609124][T14118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 678.144084][T14118] device hsr_slave_0 entered promiscuous mode [ 678.163329][T14118] device hsr_slave_1 entered promiscuous mode [ 678.211824][T14118] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 678.233717][T14118] Cannot create hsr debugfs directory [ 678.285919][ T4283] Bluetooth: hci1: command 0x041b tx timeout [ 678.782254][ T57] device hsr_slave_0 left promiscuous mode [ 678.804084][ T57] device hsr_slave_1 left promiscuous mode [ 678.832913][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 678.871515][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 678.913051][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 678.942682][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 678.969684][ T57] device bridge_slave_1 left promiscuous mode [ 678.998663][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 679.048048][ T57] device bridge_slave_0 left promiscuous mode [ 679.054362][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 679.194281][ T57] device veth1_macvtap left promiscuous mode [ 679.223229][ T57] device veth0_macvtap left promiscuous mode [ 679.247825][ T57] device veth1_vlan left promiscuous mode [ 679.260241][ T57] device veth0_vlan left promiscuous mode [ 679.314126][T14249] fuse: Bad value for 'user_id' [ 680.365168][ T4283] Bluetooth: hci1: command 0x040f tx timeout [ 681.773586][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 681.851042][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 682.329447][ T57] bond0 (unregistering): Released all slaves [ 682.455399][ T4283] Bluetooth: hci1: command 0x0419 tx timeout [ 682.827995][T14291] fuse: Bad value for 'user_id' [ 682.882452][T14295] program syz.2.3222 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 682.927444][T14297] loop5: detected capacity change from 0 to 7 [ 682.947843][T12466] Dev loop5: unable to read RDB block 7 [ 682.967713][T12466] loop5: AHDI p1 p2 p3 [ 682.978137][T12466] loop5: partition table partially beyond EOD, truncated [ 683.042408][T12466] loop5: p1 start 1818582900 is beyond EOD, truncated [ 683.064291][T12466] loop5: p3 start 335544320 is beyond EOD, truncated [ 683.109214][T14297] Dev loop5: unable to read RDB block 7 [ 683.125089][T14297] loop5: AHDI p1 p2 p3 [ 683.129425][T14297] loop5: partition table partially beyond EOD, truncated [ 683.203301][T14297] loop5: p1 start 1818582900 is beyond EOD, truncated [ 683.240647][T14297] loop5: p3 start 335544320 is beyond EOD, truncated [ 683.856289][T14118] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 683.894582][T14118] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 683.909504][T14118] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 683.972815][T14118] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 684.220519][T14118] 8021q: adding VLAN 0 to HW filter on device bond0 [ 684.274505][ T9458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 684.295596][ T9458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 684.340662][T14118] 8021q: adding VLAN 0 to HW filter on device team0 [ 684.360383][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 684.391225][T14336] fuse: Bad value for 'user_id' [ 684.395878][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 684.406371][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 684.413508][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 684.416853][T14337] loop2: detected capacity change from 0 to 16 [ 684.463415][T14337] erofs: (device loop2): mounted with root inode @ nid 36. [ 684.616353][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 684.647821][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 684.706284][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 684.776031][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 684.783220][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 684.845489][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 684.889132][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 684.918583][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 684.974312][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 685.003663][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 685.042166][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 685.082627][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 685.131443][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 685.161491][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 685.204155][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 685.246321][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 685.280009][T14357] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3240'. [ 685.408677][T14118] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 686.363494][T14385] fuse: Bad value for 'fd' [ 687.505532][T14388] bridge0: port 2(bridge_slave_1) entered disabled state [ 687.514650][T14388] bridge0: port 1(bridge_slave_0) entered disabled state [ 688.628025][T14388] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 688.731014][T14388] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 689.710557][T14388] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.719733][T14388] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.729888][T14388] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.739521][T14388] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.946821][T14420] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3255'. [ 690.104021][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 690.136576][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 690.157619][T14118] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 690.225963][T14431] fuse: Bad value for 'fd' [ 690.276744][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 690.301837][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 690.381798][T14118] device veth0_vlan entered promiscuous mode [ 690.429088][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 690.457973][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 690.496882][T14118] device veth1_vlan entered promiscuous mode [ 690.530990][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 690.546151][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 690.575287][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 690.592708][T14433] page:ffffea00011fc740 refcount:4 mapcount:1 mapping:ffff888026d91008 index:0x0 pfn:0x47f1d [ 690.604251][T14433] memcg:ffff888053950000 [ 690.608533][T14433] aops:shmem_aops ino:15a [ 690.612997][T14433] flags: 0xfff68000080057(locked|referenced|uptodate|lru|workingset|swapbacked|node=0|zone=1|lastcpupid=0x7ff) [ 690.624766][T14433] raw: 00fff68000080057 ffff888053952248 ffffea00014bff48 ffff888026d91008 [ 690.627320][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 690.633380][T14433] raw: 0000000000000000 0000000000000000 0000000400000000 ffff888053950000 [ 690.645913][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 690.649432][T14433] page dumped because: VM_BUG_ON_FOLIO(folio_mapped(folio)) [ 690.649447][T14433] page_owner tracks the page as allocated [ 690.671093][T14433] page last allocated via order 0, migratetype Movable, gfp_mask 0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), pid 14434, tgid 14433 (syz.1.3258), ts 690346077018, free_ts 690342776433 [ 690.676199][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 690.688998][T14433] post_alloc_hook+0x173/0x1a0 [ 690.689034][T14433] get_page_from_freelist+0x1a1e/0x1ab0 [ 690.689062][T14433] __alloc_pages+0x1ec/0x4f0 [ 690.689095][T14433] __folio_alloc+0xe/0x30 [ 690.689120][T14433] vma_alloc_folio+0x4a3/0x900 [ 690.689144][T14433] shmem_alloc_and_acct_folio+0x463/0xbc0 [ 690.717352][T14118] device veth0_macvtap entered promiscuous mode [ 690.721153][T14433] shmem_get_folio_gfp+0x1361/0x3400 [ 690.721186][T14433] shmem_read_mapping_page_gfp+0x99/0x2b0 [ 690.721211][T14433] udmabuf_create+0x99b/0xfc0 [ 690.721232][T14433] udmabuf_ioctl+0x1f3/0x300 [ 690.753912][T14433] __se_sys_ioctl+0xfa/0x170 [ 690.758560][T14433] do_syscall_64+0x4c/0xa0 [ 690.763021][T14433] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 690.768954][T14433] page last free stack trace: [ 690.773688][T14433] free_unref_page_prepare+0x8b4/0x9a0 [ 690.778341][T14118] device veth1_macvtap entered promiscuous mode [ 690.779176][T14433] free_unref_page_list+0xbb/0x8e0 [ 690.779211][T14433] release_pages+0x1fa6/0x2220 [ 690.795393][T14433] tlb_flush_mmu+0x105/0x220 [ 690.800041][T14433] tlb_finish_mmu+0xf5/0x220 [ 690.804673][T14433] exit_mmap+0x384/0x960 [ 690.808953][T14433] __mmput+0x118/0x3c0 [ 690.813065][T14433] exit_mm+0x1fe/0x2d0 [ 690.817180][T14433] do_exit+0x905/0x2480 [ 690.821373][T14433] do_group_exit+0x217/0x2d0 [ 690.826015][T14433] get_signal+0x1272/0x1350 [ 690.830562][T14433] arch_do_signal_or_restart+0xc4/0x1350 [ 690.836256][T14433] exit_to_user_mode_loop+0x70/0x110 [ 690.839811][T14118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 690.841566][T14433] exit_to_user_mode_prepare+0xee/0x180 [ 690.841598][T14433] syscall_exit_to_user_mode+0x16/0x40 [ 690.841619][T14433] do_syscall_64+0x58/0xa0 [ 690.867937][T14433] ------------[ cut here ]------------ [ 690.873430][T14433] kernel BUG at mm/filemap.c:153! [ 690.878498][T14433] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 690.884594][T14433] CPU: 0 PID: 14433 Comm: syz.1.3258 Not tainted syzkaller #0 [ 690.885698][T14118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 690.892146][T14433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 690.912030][T14433] RIP: 0010:filemap_unaccount_folio+0x5cf/0xa80 [ 690.918319][T14433] Code: 07 38 c1 0f 8c 19 fe ff ff 4c 89 e7 e8 ca f9 27 00 e9 0c fe ff ff e8 d0 ee d6 ff 48 89 df 48 c7 c6 20 f6 94 8a e8 11 0d 12 00 <0f> 0b e8 ba ee d6 ff 48 89 df 48 c7 c6 80 fb 94 8a e8 fb 0c 12 00 [ 690.938143][T14433] RSP: 0018:ffffc900037d7618 EFLAGS: 00010046 [ 690.944247][T14433] RAX: d60ee74d7cb91300 RBX: ffffea00011fc740 RCX: d60ee74d7cb91300 [ 690.946814][T14118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 690.952230][T14433] RDX: 0000000000000002 RSI: ffffffff8a8c2220 RDI: ffffffff8adf0d20 [ 690.952249][T14433] RBP: ffffc900037d7778 R08: ffffffff8e1fdeef R09: 1ffffffff1c3fbdd [ 690.952264][T14433] R10: dffffc0000000000 R11: fffffbfff1c3fbde R12: dffffc0000000000 [ 690.986850][T14433] R13: dffffc0000000000 R14: ffff888026d91008 R15: 1ffff920006faed4 [ 690.994860][T14433] FS: 000055557bfc8500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 691.003831][T14433] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 691.010507][T14433] CR2: 0000555564a42a28 CR3: 0000000057327000 CR4: 00000000003506f0 [ 691.018574][T14433] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 691.026551][T14433] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 691.034613][T14433] Call Trace: [ 691.037982][T14433] [ 691.040921][T14433] __filemap_remove_folio+0xbc/0x8a0 [ 691.046221][T14433] ? __rwlock_init+0x140/0x140 [ 691.050990][T14433] ? __bpf_trace_file_check_and_advance_wb_err+0x30/0x30 [ 691.058027][T14433] ? _raw_spin_lock_irq+0xb7/0xf0 [ 691.063055][T14433] ? _raw_spin_lock_irqsave+0x100/0x100 [ 691.068606][T14433] ? __folio_cancel_dirty+0xc0/0x580 [ 691.073905][T14433] filemap_remove_folio+0xed/0x2c0 [ 691.079022][T14433] truncate_inode_folio+0x59/0x70 [ 691.084147][T14433] shmem_undo_range+0x533/0x20c0 [ 691.089186][T14433] ? shmem_truncate_range+0xb0/0xb0 [ 691.094394][T14433] ? do_raw_spin_lock+0x128/0x2f0 [ 691.099420][T14433] ? __rwlock_init+0x140/0x140 [ 691.104193][T14433] shmem_evict_inode+0x25b/0xa80 [ 691.109148][T14433] ? inode_wait_for_writeback+0x1df/0x220 [ 691.114985][T14433] ? shmem_free_in_core_inode+0xb0/0xb0 [ 691.120539][T14433] ? do_raw_spin_lock+0x128/0x2f0 [ 691.125570][T14433] ? bit_waitqueue+0x30/0x30 [ 691.130171][T14433] ? do_raw_spin_unlock+0x11d/0x230 [ 691.135374][T14433] ? shmem_free_in_core_inode+0xb0/0xb0 [ 691.140934][T14433] evict+0x4c9/0x8d0 [ 691.144843][T14433] ? proc_nr_inodes+0x2f0/0x2f0 [ 691.149809][T14433] ? do_raw_spin_unlock+0x11d/0x230 [ 691.155019][T14433] ? _raw_spin_unlock+0x24/0x40 [ 691.159872][T14433] ? iput+0x768/0x980 [ 691.163872][T14433] __dentry_kill+0x431/0x650 [ 691.168481][T14433] dentry_kill+0xb8/0x290 [ 691.172826][T14433] ? dput+0x37/0x1d0 [ 691.176733][T14433] dput+0xfa/0x1d0 [ 691.180551][T14433] __fput+0x5e0/0x920 [ 691.184625][T14433] task_work_run+0x1d0/0x260 [ 691.189223][T14433] ? task_work_cancel+0x220/0x220 [ 691.194263][T14433] ? exit_to_user_mode_loop+0x3b/0x110 [ 691.199913][T14433] exit_to_user_mode_loop+0xe6/0x110 [ 691.205206][T14433] exit_to_user_mode_prepare+0xee/0x180 [ 691.210766][T14433] syscall_exit_to_user_mode+0x16/0x40 [ 691.216250][T14433] do_syscall_64+0x58/0xa0 [ 691.220714][T14433] ? clear_bhb_loop+0x60/0xb0 [ 691.225433][T14433] ? clear_bhb_loop+0x60/0xb0 [ 691.230221][T14433] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 691.236127][T14433] RIP: 0033:0x7fdc4199c799 [ 691.240550][T14433] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 691.260259][T14433] RSP: 002b:00007fffe6ef0388 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 691.268685][T14433] RAX: 0000000000000000 RBX: 00007fffe6ef0470 RCX: 00007fdc4199c799 [ 691.276663][T14433] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 691.284675][T14433] RBP: 00000000000a8856 R08: 0000000000000001 R09: 0000000000000000 [ 691.292661][T14433] R10: 0000001b2d520000 R11: 0000000000000246 R12: 00007fffe6ef04b0 [ 691.300647][T14433] R13: 00007fdc41c15fac R14: 00000000000a8909 R15: 00007fdc41c15fa0 [ 691.308649][T14433] [ 691.311672][T14433] Modules linked in: [ 691.315576][T14433] ---[ end trace 0000000000000000 ]--- [ 691.321378][T14433] RIP: 0010:filemap_unaccount_folio+0x5cf/0xa80 [ 691.327726][T14433] Code: 07 38 c1 0f 8c 19 fe ff ff 4c 89 e7 e8 ca f9 27 00 e9 0c fe ff ff e8 d0 ee d6 ff 48 89 df 48 c7 c6 20 f6 94 8a e8 11 0d 12 00 <0f> 0b e8 ba ee d6 ff 48 89 df 48 c7 c6 80 fb 94 8a e8 fb 0c 12 00 [ 691.347947][T14433] RSP: 0018:ffffc900037d7618 EFLAGS: 00010046 [ 691.354111][T14433] RAX: d60ee74d7cb91300 RBX: ffffea00011fc740 RCX: d60ee74d7cb91300 [ 691.362396][T14433] RDX: 0000000000000002 RSI: ffffffff8a8c2220 RDI: ffffffff8adf0d20 [ 691.370372][T14433] RBP: ffffc900037d7778 R08: ffffffff8e1fdeef R09: 1ffffffff1c3fbdd [ 691.378370][T14433] R10: dffffc0000000000 R11: fffffbfff1c3fbde R12: dffffc0000000000 [ 691.386348][T14433] R13: dffffc0000000000 R14: ffff888026d91008 R15: 1ffff920006faed4 [ 691.394326][T14433] FS: 000055557bfc8500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 691.403391][T14433] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 691.410241][T14433] CR2: 0000555564a42a28 CR3: 0000000057327000 CR4: 00000000003506f0 [ 691.418222][T14433] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 691.426199][T14433] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 691.434262][T14433] Kernel panic - not syncing: Fatal exception [ 691.440962][T14433] Kernel Offset: disabled [ 691.445374][T14433] Rebooting in 86400 seconds..