last executing test programs: 12m41.84776166s ago: executing program 3 (id=29): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)={0x0, 0x0, 0x0, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000180)={0x0, 0x0, 0x0, r2, 0x14}) 12m41.365906779s ago: executing program 3 (id=32): openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ptrace(0x10, r0) ptrace$poke(0x4, r0, &(0x7f0000000380), 0x10000) 12m41.10510588s ago: executing program 3 (id=33): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000000c0)={@hyper}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000000)={{@local, 0x3}, 0x1, 0x0, 0x7}) 12m40.97559608s ago: executing program 3 (id=35): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000001cc0)='ext2\x00', &(0x7f0000001d00)='./file0\x00', 0x0, &(0x7f0000000980)={[{@mblk_io_submit}]}, 0x64, 0x50b, &(0x7f0000000200)="$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") r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x40100, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 12m40.638905037s ago: executing program 3 (id=37): socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3c}}, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x3, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r1, &(0x7f00000002c0), 0x220, 0x100, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 12m40.204233812s ago: executing program 3 (id=39): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r1) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x1}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r1) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x14, r3, 0x1, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) 12m39.770701837s ago: executing program 32 (id=39): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r1) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x1}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r1) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x14, r3, 0x1, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) 12m24.040917997s ago: executing program 0 (id=110): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) futex(&(0x7f000000cffc)=0x1, 0x6, 0xffffffff, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0xf0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 12m22.948071755s ago: executing program 0 (id=115): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1, 0x3, 0x0, 0x1000, &(0x7f0000fe6000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000040)="ff5654da4949f28346250066baa00066ed67f77b370fc7190fc75926640f0866ba430066b800000f08b80500000066b82a018ee00f01d8", 0x37}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12m22.478488712s ago: executing program 0 (id=117): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000001900)=[{{0x0, 0x0, &(0x7f0000002900)=[{&(0x7f0000000400)="0c76d22d48e57f42d2f12a09585ba95962d9e7210822031d184c04123c4e78ed628eb7232d9d38c1dd229b269403d3ac796a4f9edb61a43033427f44d6a16d6c05ab90c6c8", 0x45}, {&(0x7f0000000740)="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", 0xfbb}], 0x2}}, {{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f00000001c0)="eb1e246e", 0x4}], 0x1}}], 0x2, 0xc8040) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x6) 12m21.788773127s ago: executing program 0 (id=124): syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='debugfs\x00', 0x1000016, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x20000, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 12m21.527581918s ago: executing program 0 (id=129): r0 = syz_open_dev$cec(&(0x7f0000000400), 0x0, 0x80200) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000001c0)={"f2efe21e", 0x0, 0x5, 0x4a, 0x0, 0x1ff, "2179d46fd08e3c0ced34c7d0c7e6d7", "7ca24a13", "2e8aab9d", "5ce7cf31", ["1af0b58700", "bef6fd43cdafcbdc3b827f04", "33af343c60abc64f2fdc9ddf", "9f3842fc63849f62b6eb1c3c"]}) r1 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$CEC_TRANSMIT(r1, 0xc0386105, &(0x7f0000000d40)={0x2, 0x3, 0x3, 0xfffffffc, 0x0, 0x4063, "57c1169b6664ea61326ac71ae7213059", 0x0, 0x0, 0x0, 0xfd, 0x5, 0x1}) ioctl$CEC_TRANSMIT(r1, 0xc0386105, &(0x7f0000000040)={0x2, 0xbe, 0x3, 0x9, 0x7fff, 0x3, "28398fb2dc13f8d8cbf3feb0854beb6e", 0xa, 0x8, 0x4, 0x2, 0x8, 0x2, 0x8}) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000340)={"8171f879", 0x7, 0xb0, 0x0, 0x9, 0x5, "00800000000000f51000", "00598b00", "0200", "01000800", ["dc001000", "0000000000ffe700005a00", "4a218302000000215c384d00", "790000a5a16706008c00edbf"]}) 12m21.148800199s ago: executing program 0 (id=132): socket$inet_mptcp(0x2, 0x1, 0x106) unshare(0x20000400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0xa02) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x2, &(0x7f0000000180)=0x7}) 12m20.921730147s ago: executing program 33 (id=132): socket$inet_mptcp(0x2, 0x1, 0x106) unshare(0x20000400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0xa02) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x2, &(0x7f0000000180)=0x7}) 11m44.434055091s ago: executing program 5 (id=341): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0xc851) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000080)={r1, 0x8}, &(0x7f00000000c0)=0x8) sendmmsg$inet_sctp(r0, &(0x7f0000003640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@sndinfo={0x20, 0x84, 0x2, {0x6, 0x208, 0xff, 0x8, r2}}], 0x20, 0x4c004}], 0x1, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f000000a300)={0x0, 0x0, 0x1, 0x5e, r2}, 0x10) 11m44.32429705s ago: executing program 5 (id=343): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000600)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 11m44.208797229s ago: executing program 5 (id=344): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 11m44.129300716s ago: executing program 5 (id=345): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xe, &(0x7f0000000200)=0x9, 0x4) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x2, 0x7fffffff, 0x6, 0x14}) r1 = syz_open_pts(r0, 0x101000) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) 11m43.174597072s ago: executing program 5 (id=358): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) syz_emit_ethernet(0x0, 0x0, 0x0) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x5599, &(0x7f0000005680)="$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") ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 11m41.849348908s ago: executing program 5 (id=365): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101842, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) r1 = syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0x0, 0x2e9}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1}) io_uring_enter(r1, 0x567, 0x0, 0x0, 0x0, 0x0) 11m26.626049639s ago: executing program 34 (id=365): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101842, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) r1 = syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0x0, 0x2e9}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1}) io_uring_enter(r1, 0x567, 0x0, 0x0, 0x0, 0x0) 10m19.952934981s ago: executing program 6 (id=958): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x82, &(0x7f0000002100)=""/4127, &(0x7f0000000380)=0x101f) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000a1800000000000000000000b7080000000000007baa00fe000000"], 0x0, 0x3}, 0x94) mount$tmpfs(0x0, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000f80), 0x400, &(0x7f0000000000)=ANY=[@ANYBLOB='mpol=binr:N,']) futex(0x0, 0x6, 0x2, 0x0, 0x0, 0x1) 10m19.622369728s ago: executing program 6 (id=964): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) bind$vsock_stream(r1, &(0x7f0000000940), 0x10) close(0x3) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) shutdown(r2, 0x1) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) 10m19.299961854s ago: executing program 6 (id=969): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000140)='./file1\x00', 0x4d06, &(0x7f0000000180)=ANY=[], 0x1, 0x688, &(0x7f0000001340)="$eJzs3c9vHGf9B/D3rDfrbNpvvm6atAFVqtVIgIhI7FgpmAsBIeRDhapy4GwlTmNlkxbbRW6FqMPPaw/9A8rBF8QJiXukghBCgltvyMdKSFx6wZwW7eysvV6v3XXc2E55vaLZ53nmmXnm83xmZ/aHFW2A/1lzl1N/mCJzl19Z7bQ31mdaG+sz93r1JONJ1pJ6klqS4t/tdvvD5EZSbA1T1hr9awa8vzj72kefbHzcbdWrpdy+ln32G1Bttzaweq23bjLJWFUewo7xbh56vGIr8htJLlUlHLtTSdo7/OgvT2/19GkO2/v0kcQIPF5F93Vzl4nkTHWhd94H9F55a0cb3ejGR9xu8B0EAAAAPGlG+Qz8/5vZzGpx9gjCAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgM+Fte3f/y+qpdarT6bo/f5/o1qXqn6yvHiwzR8+rjgAAAAAAAAA4Ai9uJnNrOZsr90uyr/5v1Q2zpePT+WtLGchS7mS1cxnJStZynSSib6BGqvzKytL0yPseW3ontc+JdDxqmx+NvMGAAAAAAAAgM+Zn2Vu++//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwEhTJWLdI8aBv9URq9SSnkzQ6K9aSv/fqT7KHxx0AAAAAHFJthG3Gk82s5myv3S5yPslz5XcAp/NW7mcli1lJKwu5VX4v0P3UX9tYn2ltrM/c6yy7x/32vw4UaqMKd6xsDTvyxXKLZm5nsVxzJTfzRlq5ldrWRC9W8fRG7YvrdJIHnZiKb1VGjOxWVXZm/l6KKgMD3j3QZPdywC9TJsqMnNrKyFQVWycbz/TOzPAzdMCzM3ik6dTyVNV3fuBIjZ2TeaScn6nKznx+VZUnw2AmrvU9+57bP+fJl//wux9OVfWTM6XRjFVlu3xs7s7ETF8mnh8lE3da9+/eub18+UnLxC5TZSYubLXn8r38IJczmVezlMX8OPNZyUIm892yNl+d/KLvkt8jUzd2tF79tEga1TO0e7IOFtNL5b5ns5jv543cykJeLv9dy3S+nuu5ntm+M3xh/zNcXvW1Pa769v8NDf7SV6pKM8mvq/Jk6OT1mb689t9zJ8q+/jXbWTo3QpYOeG+sf7GqdI7x8xFf5I/GYCam+zLx7P6Z+E15W1lu3b+7dGf+zdEOd+69qtK5jn6ZTA69kfz1z4eY0UE0BurnOierbO18dnT6nh3aN132nd/qq+3qu7DV171S1/a8UhvVe7jdI10r+54f2jdT9l3s6xv2fguAE+/MV880mv9s/q35QfMXzTvNV05/Z/wb4y80cuqPp75Znxr7Uu2F4vf5ID/d/vwPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8uuW337k732otLHUrjSRlpd1uv7uz66CVenWER9z9EJVM/qP8lbohXb2fMzvCeL7wdHJ0cz+plf+02+1qTbHHNr/900iJKtaqp+hjjLldORGpO6bK8d2TgKNxdeXem1eX337na4v35l9feH3h/uz167NTs9dfnrl6e7G1MNV9PO4ogcdh+0X/uCMBAAAAAAAAAAAARnUU/53guOcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPNnmLqf+MEWmp65Mddob6zOtztKrb29ZT1JLUvwkKT5MbqS7ZKJvuGKv47y/OPvaR59sfLw9Vr23fW2//UazVi2ZTDLWLR98VuPdrMp9FftNodiaYSdhl3qJg+P23wAAAP//ujwFRw==") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) io_setup(0x202, 0x0) ftruncate(r0, 0x81fd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) 10m19.10482144s ago: executing program 6 (id=970): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x4002, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x8, 0x0) setpgid(0x0, r0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 10m19.049385684s ago: executing program 6 (id=971): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x1001a, &(0x7f0000000280)={[{@quota}, {@resuid={'resuid', 0x3d, 0xee01}}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x1, 0x42e, &(0x7f0000000940)="$eJzs20tvG0UcAPD/rpOUvkgo5dEHECiIiEfSpAV64AICiQsSEhzKMSRpFeI2qAkSrSIICHFFlbgjjkh8Ak5wQcAJiSsfAFWqUC4tnIzW3k1sx3k4deKCfz9pk5ndcWb+3hl7dicbQM8azn4kEYci4o+IGKxlGwsM137dXlma+ntlaSqJSuXtv5JquVsrS1NF0eJ1B/PMSBqRfp7EiRb1Lly9NjdZLs9cyfNji5c+GFu4eu352UuTF2cuzlyeOHfu7Jnxl16ceKEjcWZtunX84/mTx9549/qbU+evv/fLd0kRf1McHTK82cGnKpUOV9ddh+vSSV8XG0JbShGRna7+6vgfjFKsnbzBeP2zrjYO2FWVSqVycOPDyxXgfyyJbrcA6I7iiz67/i22PZp63BVuvlK7AMrivp1vtSN9keZl+puubztpOCLOL//zdbbF7tyHAABo8EM2/3mu1fwvjQfryt2brw0NRcR9EXEkIu6PiKMR8UBEtexDEfFwm/U3L5Ksn/+kN3YU2DZl87+X87WtxvlfMfuLoVKeO1yNvz+5MFueOZ2/JyPRvy/Lj29Sx4+v/f7lRsfq53/ZltVfzAXzdtzo29f4munJxck7ibnezU8jjve1ij9ZXQlIIuJYRBzfYR2zz3x7cqNjW8e/iQ6sM1W+iXi6dv6Xoyn+QrL5+uTYPVGeOT1W9Ir1fv3ti7c2qv+O4u+A7PwfaNn/V+MfSurXaxfa+/v7tji+0/4/kLxTTQ/k+z6aXFy8Mh4xMNfYKar7J9bni/JZ/COnWo//I7H2TpyIiKwTPxIRj0bEY3nbH4+IJyLi1CYx/vzqk+/vPP7dlcU/3db5X0sMRPOe1onS3E/fN1Q61E782fk/W02N5Hu28/m3nXa135sBAADgvymNiEORpKOr6TQdHa39v/zROJCW5xcWn70w/+Hl6dozAkPRnxZ3ugbr7oeO55f1RX6iKX8mv2/8VWl/NT86NV+e7nbw0OMObjD+M3+Wut06YNd5Xgt6l/EPvcv4h95l/EPvajH+93ejHcDea/X9/0kX2gHsvabxb9kPeojrf+hdxj/0LuMfetLC/tj6IXkJiXWJSO+KZkjsUqLbn0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACd8W8AAAD//9Oa5Js=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ftruncate(r1, 0x2000009) write$cgroup_int(r0, &(0x7f00000000c0), 0x12) write$binfmt_script(r1, &(0x7f0000000140), 0xfcb8) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000000)={0x17c04, 0xffffffffffffffff, 0x0, 0x100000001}) read$FUSE(r0, &(0x7f0000000d80)={0x2020}, 0x2020) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0x40305839, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000080)={0x17c04, r0, 0xfffffffffffffdfd, 0x100000000, 0x3}) 10m18.700775792s ago: executing program 6 (id=976): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0x8, 0x8}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) umount2(&(0x7f0000000100)='./file0\x00', 0x9) 10m18.368691299s ago: executing program 35 (id=976): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0x8, 0x8}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) umount2(&(0x7f0000000100)='./file0\x00', 0x9) 10m8.383236109s ago: executing program 7 (id=978): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002d80)=""/4104, 0x1008}], 0x12}, 0x4}], 0x1, 0x123, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r4, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='p'], 0x70}}], 0x1, 0x2000c044) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x7151, 0x0) 10m7.50281072s ago: executing program 7 (id=1019): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22}, 0x21) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0xaf5, 0x3) openat$uinput(0xffffffffffffff9c, 0x0, 0x801, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000500)=@gcm_256={{0x304}, "1f891d5b00", "11682d84dd05bb63ae661f051e1e79ceafeaa60a5bd1dc83db142ade2bd907fd", "dd6ed25e", "0000000400"}, 0x38) readv(r0, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/161, 0xa1}], 0x1) 10m6.535406847s ago: executing program 7 (id=1031): mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000440)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29, r3}, './file0\x00'}) 10m6.233275651s ago: executing program 7 (id=1035): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f0000000300)=""/87, &(0x7f0000000480)=""/74, 0xf000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000c40)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) getrandom(&(0x7f0000000040)=""/133, 0xfffffffffffffdde, 0x2) mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 9m50.970531215s ago: executing program 36 (id=1035): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f0000000300)=""/87, &(0x7f0000000480)=""/74, 0xf000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000c40)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) getrandom(&(0x7f0000000040)=""/133, 0xfffffffffffffdde, 0x2) mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 16.237222209s ago: executing program 8 (id=2231): r0 = memfd_create(0x0, 0x5) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0x78) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-512-generic\x00'}, 0x58) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x74) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000540)=0x9) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000180)=0x3) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000300)) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000040)=0x9) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x7e) close_range(r3, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x13, &(0x7f00000003c0)=ANY=[@ANYRES8=r1, @ANYRES64, @ANYRES32=r1, @ANYRESDEC=r4], &(0x7f0000000240)='GPL\x00', 0x85, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x1000000, 0x3}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) 15.272737126s ago: executing program 2 (id=2232): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) bind$netlink(0xffffffffffffffff, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(0xffffffffffffffff, &(0x7f0000000140), 0x0) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x50}, 0x94) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x8031, 0xffffffffffffffff, 0x4dd4a000) fanotify_init(0x0, 0x8000) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$tcp_congestion(r4, &(0x7f0000000100)='reno\x00', 0x5) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@cgroup, 0xffffffffffffffff, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20) r5 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000004c40), 0x2, 0x0) write$apparmor_current(r5, &(0x7f0000004c80)=@hat={'permhat ', 0x3}, 0x1b) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) readv(r6, &(0x7f0000000000)=[{&(0x7f00000028c0)=""/4098, 0x1002}], 0x1) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000cf6000/0x4000)=nil, 0x4000, 0x16) syz_clone3(&(0x7f0000000580)={0x3780, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket(0x11, 0x80a, 0x0) 13.892801934s ago: executing program 2 (id=2236): r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001100)=@nat={'nat\x00', 0x62, 0x5, 0x1510, 0x0, 0x0, 0xffffffff, 0x10c8, 0x1288, 0x1478, 0x1478, 0xffffffff, 0x1478, 0x1478, 0x5, 0x0, {[{{@ip={@multicast2, @dev={0xac, 0x14, 0x14, 0x29}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00', {0xff}}, 0x0, 0x10a0, 0x10c8, 0x0, {0x22e}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.net/syz0\x00', 0x9, {0x100000001}}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x3, 0x6}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x3dc, {0x0, @rand_addr=0x64010102, @remote, @port=0x4e21, @gre_key}}}}, {{@ip={@broadcast, @rand_addr=0x64010100, 0x0, 0x0, 'veth1_to_team\x00', 'syzkaller1\x00'}, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key, @icmp_id}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'pimreg1\x00', 'netdevsim0\x00'}, 0x0, 0x1b8, 0x1f0, 0x0, {}, [@common=@unspec=@comment={{0x120}}, @common=@icmp={{0x28}, {0x0, "6e82"}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x1570) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r4, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) syz_init_net_socket$netrom(0x6, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00004ad80bfdc09d9979000000000000c77600"/28], 0x48) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x2000002, 0xe, 0x0, &(0x7f0000000080)="4b97a4c480f2595209562d48ef71", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) times(&(0x7f0000000040)) sched_setscheduler(r1, 0x2, &(0x7f0000000400)=0x7) prlimit64(r1, 0x5, &(0x7f00000000c0)={0x0, 0x8}, &(0x7f0000000100)) ioctl$sock_SIOCSPGRP(r2, 0x8902, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$sysctl(r6, &(0x7f0000000000)='1\x00', 0x2) bind$bt_hci(r7, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r7, &(0x7f0000000000), 0xd) 12.944842712s ago: executing program 2 (id=2238): syz_open_dev$vim2m(&(0x7f0000000a40), 0x9, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=ANY=[@ANYBLOB="8c00000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="97020000000000005c00128009000100626f6e64000000004c00028008000a00000000001800088000000000e00000017f000001640101020000000005000100000000000800070001"], 0x8c}}, 0x0) r4 = dup(r2) pread64(r4, 0x0, 0xffffffffffffff87, 0x4) sendto$inet(r4, &(0x7f0000000400), 0x0, 0x8884, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, &(0x7f0000000400)=0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000440)={r5, 0x9, 0x5}, 0x8) syz_usb_connect(0x6, 0x5f, &(0x7f0000000000)=ANY=[], 0x0) r6 = socket(0x2, 0x3, 0xff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b7000000000000004e000000000000005fa00000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195}, 0x5e) bind$inet(r6, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r7 = openat$mixer(0xffffffffffffff9c, &(0x7f0000003fc0), 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000f80)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004500002800000000000690780a010100ac1e000100000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000000000012"], 0x0) r9 = syz_open_dev$video(&(0x7f0000000040), 0x1000000001, 0x400100) sendmsg$AUDIT_GET(r6, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x48011}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x10, 0x3e8, 0x100, 0x70bd29, 0x25ffdbfc, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x200008d0}, 0x10) ioctl$VIDIOC_S_FMT(r9, 0xc0d05605, &(0x7f0000000180)={0x1, @vbi={0x10001, 0x8, 0x8, 0x32314752, [0x4], [0x7, 0x6], 0x2}}) socket$rxrpc(0x21, 0x2, 0xa) ioctl$BTRFS_IOC_START_SYNC(r7, 0x80089418, &(0x7f00000001c0)) socket$alg(0x26, 0x5, 0x0) 12.11679851s ago: executing program 8 (id=2240): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCVHANGUP(r4, 0x5437, 0x2) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x77, 0x0, &(0x7f0000000280)) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000c5b45200110300000000000000000200"], 0x14}, 0x1, 0xf00000000000000}, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x30000000}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x50, 0x6000000}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000bc0)={0x28, r10, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}, 0x1, 0x1f00, 0x0, 0x24000021}, 0x8000) 10.955753404s ago: executing program 8 (id=2243): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b000003ffffffffffffe8000000040000430000195cdfc19558098f7e29ccf8e7c90ce594b929c90c438aa7402798751413e7df1eb03f4b4aeb8811dfdfc53836055bbadc4575ec5559fc41dbcd", @ANYRES32, @ANYBLOB="0000008000"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/20], 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GCALLUSERDATA(r2, 0x89e4, &(0x7f0000000bc0)={0x7d, "9984a69e26edfdb7000300000000000000ff03ba91f6a27a0603c6de995ae34b81fb4dec3d44ad144088e68b88dbaea386f1283b716c35f680777326309719e45e5b36835640fdd1dd6c7876adcaa1a9beb8d03de6dfcfdaecb9d67597e890bc9dd646e82aa45e00"}) preadv(r1, &(0x7f00000000c0)=[{0x0}, {0x0}], 0x2, 0x0, 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r3, 0x0, 0x0, 0xe7b, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @mcast2}}, 0x0, 0x0, 0x51, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x20000000, @remote}}, 0x0, 0x0, 0x0, 0x0, "ddfd3b7ed7c6a1c172a987ae5c08cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891f648bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) connect$inet6(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) r5 = socket$inet6(0xa, 0x80002, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) sendto$inet6(r5, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0x0, @mcast2}, 0x1c) sendto$inet6(r5, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_mtu(r5, 0x29, 0x17, &(0x7f0000000640)=0x3, 0x4) setsockopt$inet6_udp_int(r5, 0x88, 0x1, &(0x7f0000000080), 0x4) 9.685384117s ago: executing program 1 (id=2246): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file0\x00', 0xa00004, &(0x7f0000000280)=ANY=[@ANYBLOB="6769643d69676e6f72652c696f636861727365743d6370313235352c757466382c7569643d73ba062bc731561e90fdf52644d7121d7bac3ff0f7eba7019681e0ebe2d33c60d456769c0c6dd05eba0ff2e4d282638aba8198a6d46df619d36118027c6c62a12b5cf4df5e97de13410105fe486d7b25368ca96ba5b67965611bf13d094ea608e211997cdbc6b4bb5fc9ceda506f65a8c550c9dd49522adc3882e1cd8539dea7dc1e55211ba3b389886ba89479db43f8dd45f30012e396271201268507fcb8a48f2d1111943457c2eb1a8bcd1c5e5eb9e9217eaff0fba16184a5cbb81ab254fe3b4504c0165b35c2d1e50813fa2d3507264ab64fe798ffee8cea722fee7a2e70d36bd5b8130df8149a68684ab1b4f6de7d6aa2e80b658e30c0e4747acebf7880ce352302bd9749e707f8991233", @ANYRESDEC=0x0, @ANYBLOB=',novrs,iocharset=cp737,mode=00000000000000000000010,dmode=00000000000000000000004,adinicb,uid=forget,lastblock=00000000000000000007,gid=forget,iocharset=iso8859-3,\x00'], 0x1, 0xc67, &(0x7f0000001dc0)="$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") r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = fsopen(&(0x7f0000000040)='debugfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000001c0)='/dev/video#\x00', &(0x7f0000001480)='\xff\xff\xff\xff\xff\xff', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r5 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f0000000340)={0x2000, r6}, 0x0) landlock_restrict_self(r5, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', r6, 0x0, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, 0x0, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000004c0)={'dummy0\x00', &(0x7f0000000480)=@ethtool_link_settings={0x4d, 0xfbb, 0xff, 0x8, 0x0, 0x1, 0x0, 0x8, 0xff, 0x1, [0xf, 0x5, 0x4, 0xffffffea, 0x4, 0x0, 0x0, 0x9]}}) syz_mount_image$fuse(0x0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x48880, 0x0, 0x0, 0x0, 0x0) 9.007815692s ago: executing program 8 (id=2247): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0xb173, 0x2) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000100)=ANY=[], 0x1, 0x2f4, &(0x7f0000000500)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000080)={0x43, 0x1, 0x3, "b49e1b62251dd37bb50730df4749af087c17e6e724ae01b9424f5ab23870ecd4"}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x8000002, 0xfffffffd}, 0x1c) sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x44, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040080}, 0x4005) r7 = add_key(&(0x7f0000000140)='cifs.spnego\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_WATCH_KEY(0x20, r7, 0xffffffffffffffff, 0x71) keyctl$KEYCTL_WATCH_KEY(0x20, r7, 0xffffffffffffffff, 0xffffffff) keyctl$setperm(0x5, r7, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 8.120792354s ago: executing program 1 (id=2248): r0 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) socket$inet(0x2, 0x1, 0x0) syz_clone3(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r4}, 0x18) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) inotify_add_watch(r0, &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000004) open_by_handle_at(r4, 0x0, 0x60380) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r6 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r6, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x7, {0x8000, 0x1000, 0x4, 0x86c}}) r7 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r7, 0xc0184800, &(0x7f0000000040)={0x4, r5, 0x1}) ioctl$DMA_BUF_IOCTL_SYNC(r8, 0x40086200, &(0x7f0000000080)=0x7) r9 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000002c0)=ANY=[@ANYRES64, @ANYRES32=r4, @ANYRES16=r2, @ANYBLOB="0c961d1669620e5405205fc87900eb2b92a5139e68ebd398c4a2585f"], 0x9, 0x6da, &(0x7f0000000bc0)="$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") landlock_restrict_self(r9, 0x0) 8.120472514s ago: executing program 4 (id=2249): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a0000000400000004000000"], 0x50) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TTL={0x5, 0x4, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040001}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df85000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sg(0x0, 0x80000000, 0x103001) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x2cc}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x40004) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004"], 0x34}}, 0x84) r3 = socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r4 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r4, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, 0x0) sendmsg$kcm(r3, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) close(r3) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x141a02, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) 7.258679704s ago: executing program 2 (id=2250): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r1) ioctl$FITRIM(r0, 0xc0185879, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6d", 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010, 0x1, 0x39d}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r4, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 7.05641446s ago: executing program 1 (id=2251): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='sit0\x00', 0x10) socket(0x2, 0x2, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48810}, 0x4048040) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000300)=ANY=[], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000140)={0x18, 0x0, 0x0, {0x4}}, 0x18) write$FUSE_GETXATTR(r6, &(0x7f0000000480)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x80, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_fscache}]}}) 6.976591236s ago: executing program 8 (id=2252): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000280)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x44d, &(0x7f0000000900)="$eJzs3MtvG8UfAPDvrp30/Ut+UB4tLQQKouKRNOnzwKUIJA4gIcGhiFNI0qrUbaAJEq0qKBzKEVXijjgi8RdwggsCTkhc4Y4qVaiXFiQko13vpsa107hx6rb+fKRNZrzjzHx3d+zZGTsBDKyx7EcSsTkifouIkUb2vwXGGr+uXTk389eVczNJ1Otv/Jnk5a5eOTdTFi2ft6mRqdeL/Lo29V54O2K6Vps7XeQnFk++N7Fw5uzzx09OH5s7Nndq6tChfXt3Dh+Y2t+TOLO4rm7/aH7HtlfeuvjazJGL7/z0TdbezcX+5jh6ZaxxdNt6qteV9dmWpnRS7WND6EolIrLTNZT3/5GoxIalfSPx8qd9bRywpur1er3d+3PhfB24hyXR7xYA/VG+0Wf3v+V2m4Yed4TLhyPeP9iI/1qxNfZUIy3KDLXc3/bSWEQcOf/3l9kWazQPAQDQ7LvDEfFcu/FfGg82lftfsYYyGhH/j4j7IuL+iNgaEQ9E5GUfioiHu6y/dYXkxvFPeumWAluhbPz3QrG2tTT++6eex18YrRS5LXn8Q8nR47W5PcUx2R1D67L85DJ1fP/Sr5932tc8/su2rP5yLNiQXqq2TNDNTi9OrzLsJZc/idhebYk/l0S5jJNExLaI2N7VX75+h3H8ma93dCp18/iX0YN1pvpXEU83zv/5aIm/lHRcn5w8eGBq/8T6qM3tmSivihv9/MuF1zvVv6r4eyA7/xtbr//cUvyjyfqIhTNnT+TrtQvd13Hh98863tPc6vU/nLyZp4eLxz6cXlw8PRkxnLx64+NT159b5svyWfy7d7WLP81f48oj8UhEZBfxzoh4NCIeK9r+eEQ8ERG7lon/xxeffLf7+JeZle+hLP7Zm53/aD7/3ScqJ374tvv4S9n535endhePrOT1b6UNXM2xAwAAgLtFmn8GPknHl9JpOj7e+Az/1tiY1uYXFp89Ov/BqdnGZ+VHYygtZ7pGmuZDJ4u54TI/1ZLfW8wbf1HZkOfHZ+Zrs/0OHgbcpg79P/NHpd+tA9ac72vB4NL/YXDp/zC49H8YXPo/DK52/f/jPrQDuP28/8Pg0v9hcOn/MLj0fxhIHb8bn67qK/8S93wi0u6fVY07pPF3U6K64n9mcYuJdW139fuVCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDf+DQAA//9X4u4v") prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6(0xa, 0x2, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x1) r1 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) finit_module(r1, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000440)) clock_adjtime(0x7, &(0x7f0000000340)={0x2, 0x8001, 0x0, 0x9, 0x8, 0x5, 0x3, 0x1, 0x1, 0x4, 0x1008, 0x2000000000, 0x27, 0x4, 0x0, 0x40, 0x8, 0x800, 0x1d3, 0x7, 0x7, 0x20e57, 0x100000000, 0xfe, 0x40, 0xb}) r2 = syz_open_dev$dri(0x0, 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f0000000280)={0x1, r4, 0x1, 0x1, 0xa, 0x1ff, 0x1}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0xb9cbbe05c791f09e) r6 = syz_open_dev$swradio(&(0x7f0000000180), 0x0, 0x2) ioctl$VIDIOC_S_TUNER(r6, 0x4054561e, &(0x7f00000001c0)={0x0, "be3ff4f2d3b71ad35cbc5ad31906b40f70ea0177f7f3f12a503b7e8e589e845a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}) statfs(&(0x7f0000000000)='./file1\x00', &(0x7f0000000180)=""/118) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) sendfile(r5, r7, 0x0, 0xff7e82) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882) 6.118386605s ago: executing program 2 (id=2253): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) fsetxattr(r0, 0x0, &(0x7f0000000280)='\x00', 0x1, 0x3) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, 0x0) r6 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x8a73, 0x100, 0x22, 0x74}, 0x0, &(0x7f00000001c0)=0x0) r8 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) fcntl$setstatus(r8, 0x4, 0x2000) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="6c0000001000010400"/20, @ANYRES32=0x0], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) syz_io_uring_submit(0x0, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r6, 0x163f, 0x9b86, 0x24, &(0x7f0000000440)={[0x1]}, 0x8) 6.047385571s ago: executing program 1 (id=2254): mkdirat(0xffffffffffffff9c, 0x0, 0x100) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x40047451, 0x0) r5 = socket$nl_audit(0x10, 0x3, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e0000008500"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$AUDIT_USER_AVC(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./bus\x00', &(0x7f0000000080), 0x800, &(0x7f00000005c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r6 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x680, 0x0) preadv(r7, &(0x7f0000000400)=[{&(0x7f0000000340)=""/154, 0x9a}], 0x1, 0xf4, 0x0) io_setup(0x1ff, &(0x7f0000001540)=0x0) io_submit(r8, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r6, &(0x7f0000000000), 0x4000}]) 5.952808608s ago: executing program 4 (id=2255): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r4 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000200), 0x3}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000040)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r6, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) ppoll(&(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) close(r6) close_range(r5, 0xffffffffffffffff, 0x0) 3.240588118s ago: executing program 4 (id=2256): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x800) recvmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x10000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x200}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004080000000000000003000000000000000000000002000000000000000000000000000002000000000000000000000004"], 0x0, 0x56}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0200000004000000080000000162000080000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="0000000001"], 0x48) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$IPSET_CMD_ADD(r0, 0x0, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 2.8373666s ago: executing program 2 (id=2257): syz_usb_connect(0x0, 0x6b, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x60200, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) mknod$loop(0x0, 0x2480, 0x1) mount(&(0x7f0000000280)=@filename='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='ubifs\x00', 0x410000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x22) syz_genetlink_get_family_id$nl80211(0x0, r2) close(r2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) rseq(&(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) write$vga_arbiter(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) setitimer(0x2, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000440), 0x0) accept4(r3, 0x0, 0x0, 0x0) 2.576779131s ago: executing program 1 (id=2258): msgget$private(0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file2\x00', 0xc0ed4040, &(0x7f00000000c0)={[{@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100000}}, {@journal_dev={'journal_dev', 0x3d, 0x714}}, {@grpid}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nolazytime}, {@jqfmt_vfsv1}]}, 0xf5, 0x47a, &(0x7f0000000ac0)="$eJzs3M9vFFUcAPDvTLel5YdFxB8gaBWMxB8tLT/kYGI0mnjQaKIHjKd1WwhSwEBNhBBFDxjjwZB4Nx5N/As86cWoJxOveDckxHABPa2ZnRnaLrulpQu7uJ9PMux7M7O89903b/fNe7sNoG+NZf8kEesj4mJEjEZEpfmEsfzh2pWztX+unK0lUa+/9XeSPS2uXjlbK/6LxpZZl++o14v8mhblnn83ojo7O3OyyE/MHftg4tTpM88eOVY9PHN45vjUgQN792wf2j+1ryNxZnFd3frxiW1bXn3nwuu1gxfe+/X7rL7ri+NlHJ00lr+6LT3R6cK6bMOCdFLpYkVYkazdBovtYozGQIxcPzYar3zW1coBt1ul1edz4Vwd+B/LBupAPyo/6LP733K7Q+OOnnD5xXzCI4v7WrHlRyqRFucMNt3fdtJwRBw89+832Ra3aR4CAGChH7PxzzOtxn9pPLDgvHuKNZSNEXFvRGyKiPsiYnNE3B/ROPfBiHhoheU3r5DcOP5JLy3K1gdWWMLSsvHf88Xa1uLxXzn6i40DRW5DI/7B5NCR2ZndxWuyKwbXZPnJRU9Z7KeX//iqed+XxTT72ILxX7Zl5S+OML3UPEE3XZ2rrj7y3OVPI7ZWWsWfXF8HTCJiS0RsvcUyjjz13bZ2x1rFX46Fb6oD60z1byOezNv/XDTFX0rark9OPrd/at/EcMzO7J4or4ob/fb7+Tfblb+q+Dsga/+1La//PP7sHjEZjjh1+szRxnrtqVso5M/Pa0mbQ5tvGv+N139tZ8RQ8nYjPVSeVTwOJa9lDyPl/o+qc3Mnp+afW+Ybj5N5/Lt2zMdfjfn+vym/PWu8Eg9HRHYRb4+IRyLi0aLtHouIxyNixxLh//LSzvfbHWvf/kvMyndQFv/0Eu2fveVlqfn2X3li4OjPP7Qrv76s9t/bSO0q9izn/W+5FVzNawcAAAB3i7TxHfgkHb+eTtPx8fw7/JtjbVqJiKcPnfjw+HT+XfmNMZiWM12jC+ZDJ4u54TI/1ZTfU8wbfz0w0siP107MTnc7eOhz69r0/8xfnV1qAXqR32tB/9L/oX/p/9C/9H/oXy90uwJAdwy13v3Jna4H0BUrH/8P35Z6AHee+3/oX/o/9C/9H/pS29/Gp6v6yf/dmqj0RjVaJkZ6oxplItKeqEbnEm98kXeJXqlPmags+49Z3GJiTctD3X5nAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6Iz/AgAA///NIdoS") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa8f94000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a32000000001400048008000240326565a708000140000000000900010073797a300000000048000000060a010400000000000000000100000008000b40000000000900010073797a3000000000200004801c0001800b00010072656a65637400000c000280080001400000000114000000110001"], 0xd0}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendfile(r8, r7, 0x0, 0x4) 1.818877173s ago: executing program 4 (id=2259): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4000, 0x2, &(0x7f00002a0000/0x4000)=nil) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) r4 = msgget$private(0x0, 0x20) msgsnd(r4, &(0x7f00000000c0)=ANY=[], 0x8, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='squashfs\x00', 0x0, 0x0) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200040c1}, 0x800) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket(0x10, 0x4, 0x6) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000006300)={0x6, 0x5, &(0x7f0000000380)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r7, @xdp=0x25, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r8, r7, 0x25, 0x0, @val=@netfilter={0xa, 0x1, 0x1}}, 0x20) syz_emit_ethernet(0x119a, 0x0, 0x0) 1.565244173s ago: executing program 8 (id=2260): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0xb173, 0x2) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000100)=ANY=[], 0x1, 0x2f4, &(0x7f0000000500)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000080)={0x43, 0x1, 0x3, "b49e1b62251dd37bb50730df4749af087c17e6e724ae01b9424f5ab23870ecd4"}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x8000002, 0xfffffffd}, 0x1c) sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x44, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040080}, 0x4005) r7 = add_key(&(0x7f0000000140)='cifs.spnego\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_WATCH_KEY(0x20, r7, 0xffffffffffffffff, 0x71) keyctl$KEYCTL_WATCH_KEY(0x20, r7, 0xffffffffffffffff, 0xffffffff) keyctl$setperm(0x5, r7, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 805.141065ms ago: executing program 4 (id=2261): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r1) ioctl$FITRIM(r0, 0xc0185879, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6d", 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010, 0x1, 0x39d}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r4, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 28.781057ms ago: executing program 1 (id=2262): io_uring_setup(0xab1, &(0x7f0000000300)={0x0, 0xd674, 0x10000, 0x1, 0x380}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x5) socket$nl_rdma(0x10, 0x3, 0x14) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r3, 0x5411, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r4, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r4, &(0x7f0000000180), 0x400008a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) getsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000f80), &(0x7f0000000fc0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) r5 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x100005, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r6, 0xffffffffffffffff, 0x0, 0x2}, 0x50) 0s ago: executing program 4 (id=2263): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='sit0\x00', 0x10) socket(0x2, 0x2, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48810}, 0x4048040) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000300)=ANY=[], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000140)={0x18, 0x0, 0x0, {0x4}}, 0x18) write$FUSE_GETXATTR(r6, &(0x7f0000000480)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x80, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_fscache}]}}) kernel console output (not intermixed with test programs): 8389][T10525] bond1: (slave ipip0): The slave device specified does not support setting the MAC address [ 295.177363][T10525] bond1: (slave ipip0): Error -95 calling set_mac_address [ 295.666499][T10529] bond1: (slave ip6erspan0): making interface the new active one [ 295.677745][T10529] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 295.698971][T10426] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 295.705973][T10426] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.760798][T10426] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 295.774517][T10426] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 295.781643][T10426] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.809394][T10426] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 295.962893][T10426] hsr_slave_0: entered promiscuous mode [ 296.040728][T10426] hsr_slave_1: entered promiscuous mode [ 296.217484][T10426] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 296.225656][T10426] Cannot create hsr debugfs directory [ 296.325981][T10548] loop1: detected capacity change from 0 to 32768 [ 296.347378][T10548] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1214 (10548) [ 296.997983][T10548] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 297.008848][T10548] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 297.017671][T10548] BTRFS info (device loop1): force clearing of disk cache [ 297.024992][T10548] BTRFS info (device loop1): turning on sync discard [ 297.031826][T10548] BTRFS info (device loop1): enabling auto defrag [ 297.038729][T10548] BTRFS info (device loop1): max_inline at 0 [ 297.044756][T10548] BTRFS info (device loop1): enabling disk space caching [ 297.052005][T10548] BTRFS info (device loop1): disk space caching is enabled [ 297.251324][T10548] BTRFS info (device loop1): enabling ssd optimizations [ 297.264774][T10548] BTRFS info (device loop1): rebuilding free space tree [ 297.492114][T10548] BTRFS info (device loop1): disabling free space tree [ 297.499710][T10548] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 297.509614][T10548] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 297.554421][T10577] netlink: 'syz.2.1216': attribute type 3 has an invalid length. [ 300.133509][T10426] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.491714][ T5785] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 300.979319][T10426] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.883399][T10426] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.132138][T10426] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.525218][T10426] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 304.581977][T10426] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 304.609421][T10426] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 304.892775][T10426] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 305.036822][T10666] lo: left promiscuous mode [ 305.142203][T10666] tunl0: left promiscuous mode [ 305.274126][T10666] tunl0: entered allmulticast mode [ 305.348811][T10666] gre0: left promiscuous mode [ 305.412201][T10666] gre0: entered allmulticast mode [ 305.432278][T10666] gretap0: left promiscuous mode [ 305.476987][T10666] gretap0: entered allmulticast mode [ 305.494597][T10666] erspan0: left promiscuous mode [ 305.499853][T10666] erspan0: entered allmulticast mode [ 305.515783][T10666] ip_vti0: left promiscuous mode [ 305.521011][T10666] ip_vti0: entered allmulticast mode [ 305.539598][T10666] ip6_vti0: left promiscuous mode [ 305.544690][T10666] ip6_vti0: entered allmulticast mode [ 305.574882][T10666] sit0: left promiscuous mode [ 305.583515][T10666] sit0: entered allmulticast mode [ 305.613388][T10666] ip6tnl0: left promiscuous mode [ 305.618669][T10666] ip6tnl0: entered allmulticast mode [ 305.624426][T10666] ip6gre0: left promiscuous mode [ 305.630172][T10666] ip6gre0: entered allmulticast mode [ 305.635703][T10666] ip6gretap0: left promiscuous mode [ 305.642912][T10666] ip6gretap0: entered allmulticast mode [ 305.736323][T10666] bridge0: left promiscuous mode [ 305.768247][T10666] bridge0: entered allmulticast mode [ 305.805053][T10666] bond0: left promiscuous mode [ 305.865175][T10666] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 305.913653][T10666] bond0: entered allmulticast mode [ 306.025623][T10666] bond_slave_0: entered allmulticast mode [ 306.203794][T10666] bond_slave_1: entered allmulticast mode [ 306.351214][T10666] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 306.359220][T10666] team0: left promiscuous mode [ 306.373653][T10666] team0: entered allmulticast mode [ 306.382600][T10666] team_slave_0: entered allmulticast mode [ 306.391986][T10666] team_slave_1: entered allmulticast mode [ 306.398024][T10666] dummy0: left promiscuous mode [ 306.459560][T10666] dummy0: entered allmulticast mode [ 306.465003][T10666] nlmon0: left promiscuous mode [ 306.483108][T10666] nlmon0: entered allmulticast mode [ 306.495578][T10666] caif0: left promiscuous mode [ 306.500807][T10666] caif0: entered allmulticast mode [ 306.506118][T10666] vxcan0: left promiscuous mode [ 306.523651][T10666] vxcan0: entered allmulticast mode [ 306.541613][T10666] vxcan1: left promiscuous mode [ 306.552794][T10666] vxcan1: entered allmulticast mode [ 306.570030][T10666] veth0: left promiscuous mode [ 306.574870][T10666] veth0: entered allmulticast mode [ 306.580955][T10666] veth1: left promiscuous mode [ 306.586527][T10666] wg0: left promiscuous mode [ 306.591242][T10666] wg0: entered allmulticast mode [ 306.596359][T10666] wg1: left promiscuous mode [ 306.603935][T10666] wg1: entered allmulticast mode [ 306.609788][T10666] wg2: left promiscuous mode [ 306.614422][T10666] wg2: entered allmulticast mode [ 306.733034][T10666] veth0_to_bridge: left promiscuous mode [ 306.782955][T10666] veth0_to_bridge: entered allmulticast mode [ 306.859567][T10666] veth1_to_bridge: left promiscuous mode [ 306.909470][T10666] veth1_to_bridge: entered allmulticast mode [ 306.987311][T10666] veth0_to_bond: left promiscuous mode [ 307.042229][T10666] veth0_to_bond: entered allmulticast mode [ 307.105688][T10666] bond_slave_0: left promiscuous mode [ 307.163493][T10666] veth1_to_bond: left promiscuous mode [ 307.207691][T10666] veth1_to_bond: entered allmulticast mode [ 307.259091][T10666] bond_slave_1: left promiscuous mode [ 307.268539][T10666] veth0_to_team: left promiscuous mode [ 307.274091][T10666] veth0_to_team: entered allmulticast mode [ 307.301649][T10666] team_slave_0: left promiscuous mode [ 307.313240][T10666] veth1_to_team: left promiscuous mode [ 307.345345][T10666] veth1_to_team: entered allmulticast mode [ 307.358547][T10666] team_slave_1: left promiscuous mode [ 307.364257][T10666] veth0_to_batadv: left promiscuous mode [ 307.370478][T10666] veth0_to_batadv: entered allmulticast mode [ 307.376703][T10666] batadv_slave_0: left promiscuous mode [ 307.383085][T10666] batadv_slave_0: entered allmulticast mode [ 307.390563][T10666] veth1_to_batadv: left promiscuous mode [ 307.396225][T10666] veth1_to_batadv: entered allmulticast mode [ 307.402442][T10666] batadv_slave_1: left promiscuous mode [ 307.408671][T10666] batadv_slave_1: entered allmulticast mode [ 307.415726][T10666] xfrm0: left promiscuous mode [ 307.424989][T10666] xfrm0: entered allmulticast mode [ 307.445004][T10666] veth0_to_hsr: left promiscuous mode [ 307.450837][T10666] veth0_to_hsr: entered allmulticast mode [ 307.457160][T10666] hsr_slave_0: entered allmulticast mode [ 307.468350][T10666] veth1_to_hsr: left promiscuous mode [ 307.473894][T10666] veth1_to_hsr: entered allmulticast mode [ 307.480402][T10666] hsr_slave_1: entered allmulticast mode [ 307.486344][T10666] hsr0: left promiscuous mode [ 307.491469][T10666] hsr0: entered allmulticast mode [ 307.496770][T10666] veth1_virt_wifi: left promiscuous mode [ 307.502936][T10666] veth1_virt_wifi: entered allmulticast mode [ 307.518594][T10666] veth0_virt_wifi: left promiscuous mode [ 307.524402][T10666] veth0_virt_wifi: entered allmulticast mode [ 307.531099][T10666] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 307.538957][T10666] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 307.546384][T10666] veth1_vlan: entered allmulticast mode [ 307.553335][T10666] veth0_vlan: entered allmulticast mode [ 307.559554][T10666] vlan0: left promiscuous mode [ 307.564424][T10666] vlan0: entered allmulticast mode [ 307.570134][T10666] vlan1: left promiscuous mode [ 307.575013][T10666] vlan1: entered allmulticast mode [ 307.580626][T10666] macvlan0: left promiscuous mode [ 307.585702][T10666] macvlan0: entered allmulticast mode [ 307.591819][T10666] macvlan1: left promiscuous mode [ 307.596990][T10666] macvlan1: entered allmulticast mode [ 307.602886][T10666] ipvlan0: left promiscuous mode [ 307.607846][T10666] ipvlan0: entered allmulticast mode [ 307.614228][T10666] veth1_macvtap: entered allmulticast mode [ 307.620299][T10666] veth0_macvtap: entered allmulticast mode [ 307.626311][T10666] macsec0: left promiscuous mode [ 307.631515][T10666] macsec0: entered allmulticast mode [ 307.637056][T10666] geneve0: left promiscuous mode [ 307.642321][T10666] geneve0: entered allmulticast mode [ 307.647839][T10666] geneve1: left promiscuous mode [ 307.652982][T10666] geneve1: entered allmulticast mode [ 307.660206][T10666] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 307.667256][T10666] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 307.675154][T10666] netdevsim netdevsim2 netdevsim1: left promiscuous mode [ 307.682326][T10666] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 307.691735][T10666] netdevsim netdevsim2 netdevsim2: left promiscuous mode [ 307.699615][T10666] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 307.707172][T10666] netdevsim netdevsim2 netdevsim3: left promiscuous mode [ 307.717594][T10666] netdevsim netdevsim2 netdevsim3: entered allmulticast mode [ 307.726001][T10666] mac80211_hwsim hwsim5 : left promiscuous mode [ 307.733261][T10666] mac80211_hwsim hwsim5 : entered allmulticast mode [ 307.745434][T10666] batadv1: left promiscuous mode [ 307.750954][T10666] batadv1: entered allmulticast mode [ 307.756448][T10666] bond1: entered allmulticast mode [ 307.761879][T10666] gretap1: entered allmulticast mode [ 307.774510][T10666] bond2: entered allmulticast mode [ 307.783636][T10666] sit1: entered allmulticast mode [ 307.790242][T10666] erspan1: entered allmulticast mode [ 307.804474][T10666] gre1: entered allmulticast mode [ 307.816516][T10666] bond3: entered allmulticast mode [ 307.826494][T10666] bridge1: entered allmulticast mode [ 307.835092][T10666] gtp0: left promiscuous mode [ 307.841148][T10666] gtp0: entered allmulticast mode [ 308.057047][T10426] 8021q: adding VLAN 0 to HW filter on device bond0 [ 308.155463][T10426] 8021q: adding VLAN 0 to HW filter on device team0 [ 308.204985][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.212277][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.394162][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.401487][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.453527][T10707] overlayfs: failed to clone upperpath [ 308.789388][T10717] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1244'. [ 308.872421][T10718] program syz.1.1244 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 311.293967][T10426] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 312.001748][T10426] veth0_vlan: entered promiscuous mode [ 312.015465][T10426] veth1_vlan: entered promiscuous mode [ 312.093667][T10426] veth0_macvtap: entered promiscuous mode [ 312.135330][T10426] veth1_macvtap: entered promiscuous mode [ 312.301357][T10426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 312.312211][T10426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.333399][T10426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 312.358180][T10426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.389955][T10426] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 312.421149][T10426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 312.446094][T10426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.456407][T10426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 312.466925][T10426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.480294][T10426] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 312.511974][T10426] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.532663][T10426] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.549602][T10426] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.569580][T10426] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.910764][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.937914][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.074309][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.103563][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.571602][ T9] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 316.594725][T10819] netlink: 'syz.4.1263': attribute type 21 has an invalid length. [ 316.627311][T10819] netlink: 'syz.4.1263': attribute type 6 has an invalid length. [ 316.660540][T10819] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1263'. [ 316.779756][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 316.853893][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 316.878195][ T9] usb 2-1: no configurations [ 316.882861][ T9] usb 2-1: can't read configurations, error -22 [ 317.596954][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.603603][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.263591][T10855] tipc: Started in network mode [ 318.301185][T10855] tipc: Node identity aa6b1e7f52c9, cluster identity 4711 [ 318.325367][T10855] tipc: Enabled bearer , priority 0 [ 318.525347][T10859] syzkaller0: entered promiscuous mode [ 319.152109][T10859] syzkaller0: entered allmulticast mode [ 319.737730][ T27] tipc: Node number set to 4171374207 [ 319.943952][T10854] tipc: Resetting bearer [ 320.082590][T10854] tipc: Disabling bearer [ 321.744993][T10890] loop1: detected capacity change from 0 to 32768 [ 321.775274][T10890] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1275 (10890) [ 321.815926][T10890] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 321.826305][T10890] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 321.835110][T10890] BTRFS info (device loop1): turning on sync discard [ 321.841981][T10890] BTRFS info (device loop1): setting nodatacow, compression disabled [ 321.850441][T10890] BTRFS info (device loop1): turning off barriers [ 321.856873][T10890] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 321.867595][T10890] BTRFS info (device loop1): trying to use backup root at mount time [ 321.875900][T10890] BTRFS info (device loop1): metadata ratio 3 [ 321.882185][T10890] BTRFS info (device loop1): enabling auto defrag [ 321.888685][T10890] BTRFS info (device loop1): max_inline at 0 [ 321.894655][T10890] BTRFS info (device loop1): using free space tree [ 322.067393][ T3456] BTRFS warning (device loop1): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 322.182644][T10890] BTRFS error (device loop1): failed to load root extent [ 322.189954][T10890] BTRFS warning (device loop1): try to load backup roots slot 1 [ 322.198401][ T3456] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 322.272740][T10890] BTRFS warning (device loop1): couldn't read tree root [ 322.281866][T10890] BTRFS warning (device loop1): try to load backup roots slot 2 [ 322.290193][ T79] BTRFS error (device loop1): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 322.343828][T10890] BTRFS warning (device loop1): couldn't read tree root [ 322.351038][T10890] BTRFS warning (device loop1): try to load backup roots slot 3 [ 322.418579][T10890] BTRFS info (device loop1): enabling ssd optimizations [ 322.456563][T10890] BTRFS info (device loop1): rebuilding free space tree [ 322.520447][T10890] BTRFS info (device loop1): checking UUID tree [ 322.841541][ T5785] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 324.105042][T10933] lo: entered allmulticast mode [ 324.130048][T10933] tunl0: entered allmulticast mode [ 324.156607][T10933] gre0: entered allmulticast mode [ 324.183841][T10933] gretap0: entered allmulticast mode [ 324.209845][T10933] erspan0: entered allmulticast mode [ 324.228419][T10933] ip_vti0: entered allmulticast mode [ 324.256677][T10933] ip6_vti0: entered allmulticast mode [ 324.277363][T10933] sit0: entered allmulticast mode [ 324.297295][T10933] ip6tnl0: entered allmulticast mode [ 324.327773][T10933] ip6gre0: entered allmulticast mode [ 324.350193][T10933] ip6gretap0: entered allmulticast mode [ 324.387708][T10933] bridge0: entered allmulticast mode [ 324.405148][T10933] bond0: entered allmulticast mode [ 324.455310][T10933] team0: entered allmulticast mode [ 324.505192][T10933] dummy0: entered allmulticast mode [ 324.539135][T10933] nlmon0: entered allmulticast mode [ 324.595300][T10933] caif0: entered allmulticast mode [ 324.686741][T10933] batadv0: entered allmulticast mode [ 324.834325][T10933] vxcan0: entered allmulticast mode [ 325.168789][T10933] vxcan1: entered allmulticast mode [ 325.174187][T10933] veth0: entered allmulticast mode [ 325.251491][T10933] veth1: entered allmulticast mode [ 325.300447][T10933] wg0: entered allmulticast mode [ 325.331809][T10933] wg1: entered allmulticast mode [ 325.364705][T10933] wg2: entered allmulticast mode [ 325.658311][T10933] veth0_to_bridge: entered allmulticast mode [ 325.676515][T10933] bridge_slave_0: entered allmulticast mode [ 325.685278][T10933] veth1_to_bridge: entered allmulticast mode [ 325.692229][T10933] bridge_slave_1: entered allmulticast mode [ 326.111277][T10933] veth0_to_bond: entered allmulticast mode [ 326.122492][T10933] bond_slave_0: entered allmulticast mode [ 326.151692][T10933] veth1_to_bond: entered allmulticast mode [ 326.161928][T10933] bond_slave_1: entered allmulticast mode [ 326.170779][T10933] veth0_to_team: entered allmulticast mode [ 326.176954][T10933] team_slave_0: entered allmulticast mode [ 326.187198][T10933] veth1_to_team: entered allmulticast mode [ 326.202593][T10933] team_slave_1: entered allmulticast mode [ 326.217712][T10933] veth1_to_batadv: entered allmulticast mode [ 326.227851][T10933] batadv_slave_1: entered allmulticast mode [ 326.236832][T10933] xfrm0: entered allmulticast mode [ 326.368318][T10933] veth0_to_hsr: entered allmulticast mode [ 326.374262][T10933] hsr_slave_0: entered allmulticast mode [ 326.388466][T10933] veth1_to_hsr: entered allmulticast mode [ 326.428055][T10933] hsr_slave_1: entered allmulticast mode [ 326.434337][T10933] hsr0: entered allmulticast mode [ 326.449972][T10933] veth1_virt_wifi: entered allmulticast mode [ 326.456840][T10933] veth0_virt_wifi: entered allmulticast mode [ 326.477141][T10933] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 326.493879][T10933] veth1_vlan: entered allmulticast mode [ 326.499781][T10933] veth0_vlan: entered allmulticast mode [ 326.505539][T10933] vlan0: entered allmulticast mode [ 326.521753][T10933] vlan1: entered allmulticast mode [ 326.527202][T10933] macvlan0: entered allmulticast mode [ 326.575356][T10933] macvlan1: entered allmulticast mode [ 326.592792][T10933] ipvlan0: entered allmulticast mode [ 326.600714][T10933] ipvlan1: entered allmulticast mode [ 326.606421][T10933] veth1_macvtap: entered allmulticast mode [ 326.619034][T10933] veth0_macvtap: entered allmulticast mode [ 326.625209][T10933] macvtap0: entered allmulticast mode [ 326.636000][T10933] macsec0: entered allmulticast mode [ 326.643092][T10933] geneve0: entered allmulticast mode [ 326.654321][T10933] geneve1: entered allmulticast mode [ 326.662671][T10933] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 326.675673][T10933] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 326.688636][T10933] netdevsim netdevsim4 netdevsim2: entered allmulticast mode [ 326.696431][T10933] netdevsim netdevsim4 netdevsim3: entered allmulticast mode [ 326.713627][T10933] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 326.721536][T10933] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 326.732955][T10933] bridge1: entered allmulticast mode [ 326.738730][T10933] vlan2: entered allmulticast mode [ 326.744301][T10933] bridge2: entered allmulticast mode [ 326.751183][T10933] ip6gre1: entered allmulticast mode [ 326.769571][T10933] bridge3: entered allmulticast mode [ 326.779976][T10933] batadv0.5: entered allmulticast mode [ 326.786618][T10933] syz_tun: left promiscuous mode [ 326.792108][T10933] macsec1: left promiscuous mode [ 326.804413][T10933] syztnl0: entered allmulticast mode [ 326.809949][T10933] bond1: entered allmulticast mode [ 326.815255][T10933] ip6erspan0: entered allmulticast mode [ 326.849481][T10965] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1286'. [ 327.514930][T10965] vlan2: entered promiscuous mode [ 327.580476][T10965] team0: entered promiscuous mode [ 327.607840][T10965] team_slave_0: entered promiscuous mode [ 327.614091][T10965] team_slave_1: entered promiscuous mode [ 329.667791][T10991] tipc: Enabling of bearer rejected, failed to enable media [ 334.163787][T11023] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 334.171802][T11023] IPv6: NLM_F_CREATE should be set when creating new route [ 334.850993][T11023] lo: entered allmulticast mode [ 334.969025][T11023] tunl0: entered allmulticast mode [ 335.007860][T11023] gre0: entered allmulticast mode [ 335.138695][T11023] gretap0: entered allmulticast mode [ 335.299261][T11023] erspan0: entered allmulticast mode [ 335.323120][T11023] ip_vti0: entered allmulticast mode [ 335.343842][T11023] ip6_vti0: entered allmulticast mode [ 335.749038][T11023] sit0: entered allmulticast mode [ 335.844983][T11023] ip6tnl0: entered allmulticast mode [ 335.931126][T11023] ip6gre0: entered allmulticast mode [ 336.154370][T11023] syz_tun: entered allmulticast mode [ 336.608958][T11046] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1309'. [ 336.933333][T11023] ip6gretap0: entered allmulticast mode [ 337.041786][T11023] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.049699][T11023] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.076997][T11023] bridge0: entered allmulticast mode [ 337.168829][T11023] vcan0: entered allmulticast mode [ 337.201125][T11023] bond0: entered allmulticast mode [ 337.223078][T11023] bond_slave_0: entered allmulticast mode [ 337.231438][T11023] bond_slave_1: entered allmulticast mode [ 337.273201][T11023] team0: entered allmulticast mode [ 337.278895][T11023] team_slave_0: entered allmulticast mode [ 337.284814][T11023] team_slave_1: entered allmulticast mode [ 337.314666][T11023] dummy0: entered allmulticast mode [ 337.364830][T11023] nlmon0: entered allmulticast mode [ 337.376838][T11023] caif0: entered allmulticast mode [ 337.394596][T11023] batadv0: entered allmulticast mode [ 337.425555][T11023] vxcan0: entered allmulticast mode [ 337.437391][T11023] vxcan1: entered allmulticast mode [ 337.455333][T11023] veth0: entered allmulticast mode [ 337.479819][T11023] veth1: entered allmulticast mode [ 337.508686][T11023] wg0: entered allmulticast mode [ 337.529564][T11023] wg1: entered allmulticast mode [ 337.547344][T11023] wg2: entered allmulticast mode [ 337.574886][T11023] veth0_to_bridge: entered allmulticast mode [ 337.631676][T11023] veth1_to_bridge: entered allmulticast mode [ 337.674465][T11023] veth0_to_bond: entered allmulticast mode [ 337.726247][T11023] veth1_to_bond: entered allmulticast mode [ 337.774405][T11023] veth0_to_team: entered allmulticast mode [ 337.841032][T11023] veth1_to_team: entered allmulticast mode [ 337.871438][T11023] veth0_to_batadv: entered allmulticast mode [ 337.884352][T11023] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 338.064735][T11023] batadv_slave_0: entered allmulticast mode [ 338.293114][T11023] veth1_to_batadv: entered allmulticast mode [ 338.416605][T11023] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 338.501775][T11023] batadv_slave_1: entered allmulticast mode [ 338.544021][T11023] xfrm0: entered allmulticast mode [ 338.573098][T11023] veth0_to_hsr: entered allmulticast mode [ 338.618857][T11023] hsr_slave_0: entered allmulticast mode [ 338.645838][T11023] veth1_to_hsr: entered allmulticast mode [ 338.671379][T11023] hsr_slave_1: entered allmulticast mode [ 338.709099][T11023] hsr0: entered allmulticast mode [ 338.752392][T11023] veth1_virt_wifi: entered allmulticast mode [ 338.771500][T11023] veth0_virt_wifi: entered allmulticast mode [ 338.783105][T11023] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 338.795255][T11023] veth1_vlan: entered allmulticast mode [ 338.817035][T11023] veth0_vlan: entered allmulticast mode [ 338.842988][T11023] vlan0: entered allmulticast mode [ 338.858453][T11023] vlan1: entered allmulticast mode [ 338.874321][T11023] macvlan0: entered allmulticast mode [ 338.894382][T11023] macvlan1: entered allmulticast mode [ 338.908699][T11023] ipvlan0: entered allmulticast mode [ 338.914195][T11023] ipvlan1: entered allmulticast mode [ 338.923693][T11023] veth1_macvtap: entered allmulticast mode [ 338.943954][T11023] veth0_macvtap: entered allmulticast mode [ 338.964595][T11023] macvtap0: entered allmulticast mode [ 338.984059][T11023] macsec0: entered allmulticast mode [ 339.003425][T11023] geneve0: entered allmulticast mode [ 339.025508][T11023] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.034783][T11023] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.046425][T11023] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.056092][T11023] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.065551][T11023] geneve1: entered allmulticast mode [ 339.085185][T11023] netdevsim netdevsim8 netdevsim0: entered allmulticast mode [ 339.102278][T11023] netdevsim netdevsim8 netdevsim1: entered allmulticast mode [ 339.118271][T11023] netdevsim netdevsim8 netdevsim2: entered allmulticast mode [ 339.136091][T11023] netdevsim netdevsim8 netdevsim3: entered allmulticast mode [ 339.157418][T11023] mac80211_hwsim hwsim20 wlan0: entered allmulticast mode [ 339.177511][T11023] mac80211_hwsim hwsim21 wlan1: entered allmulticast mode [ 339.195255][T11031] 8021q: VLANs not supported on nlmon0 [ 339.465989][ T3456] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.519306][ T3456] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.927322][T11071] tipc: Started in network mode [ 340.226676][T11071] tipc: Node identity 4, cluster identity 4711 [ 340.264625][T11071] tipc: Node number set to 4 [ 340.554986][T11087] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 340.769745][T11087] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 340.900963][T11096] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 344.951176][T11109] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 344.958491][T11109] IPv6: NLM_F_CREATE should be set when creating new route [ 345.607099][ T28] audit: type=1326 audit(1754110469.727:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11116 comm="syz.8.1324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f429358eb69 code=0x7ffc0000 [ 345.686239][ T28] audit: type=1326 audit(1754110469.727:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11116 comm="syz.8.1324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f429358eb69 code=0x7ffc0000 [ 345.786253][T11118] tipc: Enabling of bearer rejected, failed to enable media [ 345.845239][ T28] audit: type=1326 audit(1754110469.777:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11116 comm="syz.8.1324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f429358eb69 code=0x7ffc0000 [ 345.888434][ T28] audit: type=1326 audit(1754110469.777:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11116 comm="syz.8.1324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f429358eb69 code=0x7ffc0000 [ 345.963739][ T28] audit: type=1326 audit(1754110469.777:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11116 comm="syz.8.1324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f429358eb69 code=0x7ffc0000 [ 346.017685][ T28] audit: type=1326 audit(1754110469.777:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11116 comm="syz.8.1324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f429358eb69 code=0x7ffc0000 [ 346.098239][ T28] audit: type=1326 audit(1754110469.777:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11116 comm="syz.8.1324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f429358eb69 code=0x7ffc0000 [ 346.153720][ T28] audit: type=1326 audit(1754110469.787:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11116 comm="syz.8.1324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f429358eb69 code=0x7ffc0000 [ 346.255672][ T28] audit: type=1326 audit(1754110469.787:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11116 comm="syz.8.1324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f429358eb69 code=0x7ffc0000 [ 346.439466][T11141] tipc: Enabling of bearer rejected, failed to enable media [ 346.449334][ T28] audit: type=1326 audit(1754110469.787:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11116 comm="syz.8.1324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f429358eb69 code=0x7ffc0000 [ 346.552689][T11143] rdma_op ffff888073b691f0 conn xmit_rdma 0000000000000000 [ 347.343432][T11148] loop1: detected capacity change from 0 to 1024 [ 347.474400][T11148] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 348.439872][T11157] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 348.553959][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.983530][T11171] 9pnet_fd: Insufficient options for proto=fd [ 349.239276][T11176] tipc: Enabling of bearer rejected, failed to enable media [ 349.455659][T11183] loop8: detected capacity change from 0 to 64 [ 349.592617][T11183] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 349.820633][T11189] tipc: Enabling of bearer rejected, failed to enable media [ 350.506637][T11199] netlink: 'syz.4.1332': attribute type 3 has an invalid length. [ 351.262080][T11209] loop8: detected capacity change from 0 to 2048 [ 352.508721][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 352.508743][ T28] audit: type=1800 audit(1754110476.367:82): pid=11218 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1333" name="file1" dev="loop8" ino=1048623 res=0 errno=0 [ 353.478631][T11225] xt_NFQUEUE: number of total queues is 0 [ 354.406627][T11229] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 354.430042][T11236] overlayfs: failed to clone upperpath [ 354.494181][T11229] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 354.515836][T11229] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 354.648228][ T1187] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 355.110261][ T1187] usb 2-1: Using ep0 maxpacket: 8 [ 355.488984][ T1187] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 355.544076][ T1187] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.573077][ T1187] usb 2-1: Product: syz [ 355.577295][ T1187] usb 2-1: Manufacturer: syz [ 355.616266][ T1187] usb 2-1: SerialNumber: syz [ 355.637688][ T1187] usb 2-1: config 0 descriptor?? [ 355.654168][ T1187] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 356.320467][T11262] netlink: 'syz.2.1343': attribute type 3 has an invalid length. [ 357.792549][ T1187] gspca_sonixj: reg_w1 err -110 [ 357.798244][ T1187] sonixj: probe of 2-1:0.0 failed with error -110 [ 358.952056][ T27] usb 2-1: USB disconnect, device number 19 [ 360.060194][T11307] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 361.660946][T11323] loop1: detected capacity change from 0 to 256 [ 365.606815][T11364] netlink: 'syz.8.1366': attribute type 1 has an invalid length. [ 366.618879][T11364] 8021q: adding VLAN 0 to HW filter on device bond1 [ 366.746196][T11375] bond1: (slave ip6erspan0): making interface the new active one [ 366.813311][T11375] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 366.864907][T11379] gretap1: entered promiscuous mode [ 366.880671][T11379] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 366.913902][T11385] macvlan2: entered promiscuous mode [ 366.958293][T11385] macvlan2: entered allmulticast mode [ 366.964560][T11385] bond1: entered promiscuous mode [ 367.083917][T11385] ip6erspan0: entered promiscuous mode [ 367.096863][T11385] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 367.106238][T11385] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 367.869814][T11385] bond1: left promiscuous mode [ 367.874654][T11385] ip6erspan0: left promiscuous mode [ 367.996289][T11404] tipc: Enabled bearer , priority 0 [ 368.414490][T11409] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 368.477306][T11409] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 368.642935][T11409] tipc: Resetting bearer [ 369.495038][T11427] fuse: Bad value for 'fd' [ 369.556629][T11427] loop8: detected capacity change from 0 to 1764 [ 370.477464][T11449] loop1: detected capacity change from 0 to 8 [ 370.516388][T11449] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 370.586656][T11237] udevd[11237]: incorrect cramfs checksum on /dev/loop1 [ 370.735944][T11453] cramfs: Error -5 while decompressing! [ 370.742233][T11453] cramfs: ffffffff96fd8308(26)->ffff88806e222000(4096) [ 370.749432][T11453] cramfs: Error -3 while decompressing! [ 370.755045][T11453] cramfs: ffffffff96fd8322(26)->ffff88807aa28000(4096) [ 370.762192][T11453] cramfs: Error -3 while decompressing! [ 370.767841][T11453] cramfs: ffffffff96fd833c(16)->ffff888058509000(4096) [ 370.775127][T11453] cramfs: Error -5 while decompressing! [ 370.780842][T11453] cramfs: ffffffff96fd8308(26)->ffff88806e222000(4096) [ 371.614311][T11456] tipc: Enabling of bearer rejected, failed to enable media [ 374.365371][T11478] overlayfs: failed to clone upperpath [ 379.294542][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.301051][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.717772][ T28] audit: type=1326 audit(1754110503.837:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11497 comm="syz.2.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa28158eb69 code=0x7ffc0000 [ 381.322860][ T28] audit: type=1326 audit(1754110503.837:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11497 comm="syz.2.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa28158eb69 code=0x7ffc0000 [ 381.346478][ T28] audit: type=1326 audit(1754110503.837:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11497 comm="syz.2.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa28158eb69 code=0x7ffc0000 [ 381.369278][ T28] audit: type=1326 audit(1754110503.837:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11497 comm="syz.2.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa28158eb69 code=0x7ffc0000 [ 381.381742][T11509] tipc: Enabling of bearer rejected, failed to enable media [ 381.392228][ T28] audit: type=1326 audit(1754110503.837:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11497 comm="syz.2.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa28158eb69 code=0x7ffc0000 [ 382.563639][T11524] kvm: kvm [11523]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x100000000 [ 382.596281][T11524] kvm: kvm [11523]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 382.772253][T11542] CIFS: iocharset name too long [ 386.953636][T11566] loop1: detected capacity change from 0 to 8 [ 387.274044][T11566] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 387.423436][T11563] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 387.495696][T11558] udevd[11558]: incorrect cramfs checksum on /dev/loop1 [ 387.672035][T11558] udevd[11558]: incorrect cramfs checksum on /dev/loop1 [ 387.788665][T11578] tipc: Enabling of bearer rejected, already enabled [ 391.393033][T11618] loop1: detected capacity change from 0 to 512 [ 393.270908][T11618] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 393.290619][T11618] EXT4-fs (loop1): orphan cleanup on readonly fs [ 393.314694][T11618] Quota error (device loop1): do_check_range: Getting block 196613 out of range 1-5 [ 393.325250][T11618] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 393.335215][T11618] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.1415: Failed to acquire dquot type 1 [ 393.358833][T11618] EXT4-fs (loop1): 1 truncate cleaned up [ 393.369894][T11618] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 394.359706][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.082507][T11667] loop8: detected capacity change from 0 to 128 [ 397.099618][T11667] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 397.186404][T11667] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 398.955671][ T42] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 399.336657][T11691] loop8: detected capacity change from 0 to 32768 [ 399.343782][T11691] XFS: ikeep mount option is deprecated. [ 399.528498][T11691] XFS (loop8): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 399.774649][T11691] XFS (loop8): Ending clean mount [ 399.785463][T11691] XFS (loop8): Quotacheck needed: Please wait. [ 399.848658][T11691] XFS (loop8): Quotacheck: Done. [ 400.186566][ T28] audit: type=1326 audit(1754110524.287:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11690 comm="syz.8.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f429358eb69 code=0x7ffc0000 [ 401.718942][ T28] audit: type=1326 audit(1754110524.287:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11690 comm="syz.8.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f429358eb69 code=0x7ffc0000 [ 401.742428][ T28] audit: type=1326 audit(1754110524.287:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11690 comm="syz.8.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f429358eb69 code=0x7ffc0000 [ 401.765493][ T28] audit: type=1326 audit(1754110524.287:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11690 comm="syz.8.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f429358eb69 code=0x7ffc0000 [ 401.788000][ T28] audit: type=1326 audit(1754110524.287:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11690 comm="syz.8.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f429358eb69 code=0x7ffc0000 [ 401.854451][ T28] audit: type=1326 audit(1754110524.287:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11690 comm="syz.8.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f429358eb69 code=0x7ffc0000 [ 401.948638][ T28] audit: type=1326 audit(1754110524.287:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11690 comm="syz.8.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f429358eb69 code=0x7ffc0000 [ 402.077501][ T28] audit: type=1326 audit(1754110524.307:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11690 comm="syz.8.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f429358eb69 code=0x7ffc0000 [ 402.188176][ T28] audit: type=1326 audit(1754110524.307:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11690 comm="syz.8.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f429358eb69 code=0x7ffc0000 [ 402.310502][ T28] audit: type=1326 audit(1754110524.307:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11690 comm="syz.8.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f429358eb69 code=0x7ffc0000 [ 402.461739][T10426] XFS (loop8): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 402.670818][T11727] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1430'. [ 402.736837][T11727] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1430'. [ 402.794240][T11727] batadv0: entered promiscuous mode [ 402.881186][T11727] dummy0: entered promiscuous mode [ 402.976333][T11737] overlayfs: failed to clone upperpath [ 404.490360][T11759] loop1: detected capacity change from 0 to 32768 [ 404.497721][T11759] XFS: ikeep mount option is deprecated. [ 404.561523][T11759] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 404.762542][T11759] XFS (loop1): Ending clean mount [ 404.780467][T11759] XFS (loop1): Quotacheck needed: Please wait. [ 404.894735][T11759] XFS (loop1): Quotacheck: Done. [ 406.162923][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 406.163026][ T28] audit: type=1326 audit(1754110529.227:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11758 comm="syz.1.1437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe02098eb69 code=0x7ffc0000 [ 406.440777][ T28] audit: type=1326 audit(1754110529.227:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11758 comm="syz.1.1437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe02098eb69 code=0x7ffc0000 [ 406.608551][ T28] audit: type=1326 audit(1754110529.227:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11758 comm="syz.1.1437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe02098eb69 code=0x7ffc0000 [ 406.657189][ T28] audit: type=1326 audit(1754110529.227:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11758 comm="syz.1.1437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe02098eb69 code=0x7ffc0000 [ 406.752855][ T28] audit: type=1326 audit(1754110529.227:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11758 comm="syz.1.1437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe02098eb69 code=0x7ffc0000 [ 406.798223][ T28] audit: type=1326 audit(1754110529.227:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11758 comm="syz.1.1437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fe02098eb69 code=0x7ffc0000 [ 406.882310][ T28] audit: type=1326 audit(1754110529.247:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11758 comm="syz.1.1437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe02098eb69 code=0x7ffc0000 [ 406.938447][ T28] audit: type=1326 audit(1754110529.267:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11758 comm="syz.1.1437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fe02098eb69 code=0x7ffc0000 [ 406.962131][ T28] audit: type=1326 audit(1754110529.267:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11758 comm="syz.1.1437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe02098eb69 code=0x7ffc0000 [ 407.078199][ T28] audit: type=1326 audit(1754110529.267:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11758 comm="syz.1.1437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe02098eb69 code=0x7ffc0000 [ 407.102985][ T5785] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 407.835838][T11804] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(8) [ 407.843129][T11804] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 407.852926][T11804] vhci_hcd vhci_hcd.0: Device attached [ 408.003451][T11806] vhci_hcd: connection closed [ 409.564735][ T59] vhci_hcd: stop threads [ 409.575962][ T59] vhci_hcd: release socket [ 409.678256][ T5827] usb 49-1: new high-speed USB device number 2 using vhci_hcd [ 409.716717][ T59] vhci_hcd: disconnect device [ 411.726734][T11825] tipc: Started in network mode [ 411.731733][T11825] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 411.739278][T11825] tipc: Enabled bearer , priority 0 [ 414.278435][ T27] tipc: Node number set to 11578026 [ 414.431227][T11846] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 414.488385][T11846] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 415.358326][ T5827] vhci_hcd: vhci_device speed not set [ 419.734243][T11930] loop8: detected capacity change from 0 to 128 [ 419.822643][T11930] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 419.856120][T11930] ext4 filesystem being mounted at /42/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 420.570295][T11940] xt_NFQUEUE: number of total queues is 0 [ 420.932724][T10426] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 422.041399][T11952] loop8: detected capacity change from 0 to 128 [ 422.822160][T11952] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 422.970141][T11952] ext4 filesystem being mounted at /43/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 423.610477][T10426] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 423.925558][ T6453] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 424.209226][ T6453] usb 2-1: Using ep0 maxpacket: 16 [ 424.595623][ T6453] usb 2-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 424.627878][ T6453] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 424.708360][ T6453] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 424.758186][ T6453] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.780641][ T6453] usb 2-1: Product: syz [ 424.865154][ T5834] libceph: connect (1)[c::]:6789 error -101 [ 424.884233][ T6453] usb 2-1: Manufacturer: syz [ 424.888812][ T5834] libceph: mon0 (1)[c::]:6789 connect error [ 424.915395][ T6453] usb 2-1: SerialNumber: syz [ 425.001931][T11982] ceph: No mds server is up or the cluster is laggy [ 425.605367][ T5834] libceph: connect (1)[c::]:6789 error -101 [ 425.611925][ T5834] libceph: mon0 (1)[c::]:6789 connect error [ 425.818448][ T6453] usb 2-1: 0:2 : does not exist [ 425.973524][ T6453] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 426.562296][ T6453] usb 2-1: USB disconnect, device number 20 [ 426.947201][T11970] udevd[11970]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 430.425678][T12036] tipc: Enabling of bearer rejected, already enabled [ 430.508294][T12040] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 430.515739][T12040] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 430.600945][T12043] loop8: detected capacity change from 0 to 256 [ 430.684349][T12043] FAT-fs (loop8): Directory bread(block 64) failed [ 430.712318][T12043] FAT-fs (loop8): Directory bread(block 65) failed [ 430.731004][T12043] FAT-fs (loop8): Directory bread(block 66) failed [ 430.744829][T12043] FAT-fs (loop8): Directory bread(block 67) failed [ 430.759609][T12043] FAT-fs (loop8): Directory bread(block 68) failed [ 430.771771][T12043] FAT-fs (loop8): Directory bread(block 69) failed [ 430.797672][T12043] FAT-fs (loop8): Directory bread(block 70) failed [ 430.809008][T12043] FAT-fs (loop8): Directory bread(block 71) failed [ 430.815821][T12043] FAT-fs (loop8): Directory bread(block 72) failed [ 430.822813][T12043] FAT-fs (loop8): Directory bread(block 73) failed [ 432.033129][T12066] loop8: detected capacity change from 0 to 128 [ 432.049947][T12066] ext4: Unknown parameter 'context' [ 432.290035][T12068] tipc: Enabled bearer , priority 0 [ 432.333682][T12071] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 433.654510][T12085] loop1: detected capacity change from 0 to 16 [ 433.739912][T12089] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1498'. [ 434.366092][T12085] erofs: (device loop1): mounted with root inode @ nid 36. [ 434.754694][T12096] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1586 @ lcn 46 of nid 36 [ 434.766156][T12096] erofs: (device loop1): z_erofs_readahead: readahead error at folio 47 @ nid 36 [ 434.775591][T12096] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1586 @ lcn 46 of nid 36 [ 434.786372][T12096] erofs: (device loop1): z_erofs_readahead: readahead error at folio 46 @ nid 36 [ 434.796054][T12096] erofs: (device loop1): z_erofs_readahead: readahead error at folio 45 @ nid 36 [ 434.808892][T12096] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 434.819873][T12096] erofs: (device loop1): z_erofs_readahead: readahead error at folio 43 @ nid 36 [ 434.829394][T12096] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 434.840316][T12096] erofs: (device loop1): z_erofs_readahead: readahead error at folio 42 @ nid 36 [ 434.849885][T12096] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 774 @ lcn 40 of nid 36 [ 434.860815][T12096] erofs: (device loop1): z_erofs_readahead: readahead error at folio 41 @ nid 36 [ 434.870270][T12096] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 774 @ lcn 40 of nid 36 [ 434.881012][T12096] erofs: (device loop1): z_erofs_readahead: readahead error at folio 40 @ nid 36 [ 434.890635][T12096] erofs: (device loop1): z_erofs_readahead: readahead error at folio 39 @ nid 36 [ 435.060700][T12096] erofs: (device loop1): z_erofs_readahead: readahead error at folio 38 @ nid 36 [ 435.070543][T12096] erofs: (device loop1): z_erofs_readahead: readahead error at folio 36 @ nid 36 [ 435.080421][T12096] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1468 @ lcn 31 of nid 36 [ 435.091202][T12096] erofs: (device loop1): z_erofs_readahead: readahead error at folio 31 @ nid 36 [ 435.101226][T12096] erofs: (device loop1): z_erofs_readahead: readahead error at folio 25 @ nid 36 [ 435.110614][T12096] erofs: (device loop1): z_erofs_readahead: readahead error at folio 24 @ nid 36 [ 435.122125][T12096] erofs: (device loop1): z_erofs_readahead: readahead error at folio 19 @ nid 36 [ 435.133859][T12096] syz.1.1500: attempt to access beyond end of device [ 435.133859][T12096] loop1: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 435.150952][T12096] syz.1.1500: attempt to access beyond end of device [ 435.150952][T12096] loop1: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 435.165898][T12096] syz.1.1500: attempt to access beyond end of device [ 435.165898][T12096] loop1: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 435.180925][T12096] syz.1.1500: attempt to access beyond end of device [ 435.180925][T12096] loop1: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 436.781853][T12110] vlan2: entered promiscuous mode [ 436.914079][T12119] loop8: detected capacity change from 0 to 256 [ 437.717388][T12117] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1503'. [ 437.798647][T12117] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1503'. [ 438.125766][T12138] sp0: Synchronizing with TNC [ 438.166780][T12138] sp0: Found TNC [ 438.877666][T12131] [U] ` [ 440.118280][T12135] batman_adv: batadv0: Adding interface: vxlan0 [ 440.148266][T12135] batman_adv: batadv0: The MTU of interface vxlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 440.180477][T12135] batman_adv: batadv0: Not using interface vxlan0 (retrying later): interface not active [ 440.520184][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.526683][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.790233][T12156] tipc: Enabling of bearer rejected, already enabled [ 443.231666][T12175] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 443.319375][T12175] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 443.375932][T12175] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 443.423843][T12175] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 444.032392][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 444.032712][ T28] audit: type=1326 audit(1754110568.147:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12194 comm="syz.2.1522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa28158eb69 code=0x7ffc0000 [ 444.356121][ T28] audit: type=1326 audit(1754110568.187:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12194 comm="syz.2.1522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa28158eb69 code=0x7ffc0000 [ 444.398257][ T28] audit: type=1326 audit(1754110568.297:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12194 comm="syz.2.1522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa28158eb69 code=0x7ffc0000 [ 444.481409][ T28] audit: type=1326 audit(1754110568.307:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12194 comm="syz.2.1522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa28158eb69 code=0x7ffc0000 [ 444.511537][ T28] audit: type=1326 audit(1754110568.307:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12194 comm="syz.2.1522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa28158eb69 code=0x7ffc0000 [ 444.534092][ T28] audit: type=1326 audit(1754110568.377:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12194 comm="syz.2.1522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa28158eb69 code=0x7ffc0000 [ 444.578165][ T28] audit: type=1326 audit(1754110568.567:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12194 comm="syz.2.1522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa28158eb69 code=0x7ffc0000 [ 444.610705][ T28] audit: type=1326 audit(1754110568.567:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12194 comm="syz.2.1522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa28158eb69 code=0x7ffc0000 [ 447.201897][T12239] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 454.109910][T12303] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1544'. [ 454.160240][T12306] 9pnet_fd: Insufficient options for proto=fd [ 454.681527][T12325] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(4) [ 454.688089][T12325] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 454.740615][T12325] vhci_hcd vhci_hcd.0: Device attached [ 454.770809][T12328] vhci_hcd vhci_hcd.0: pdev(8) rhport(1) sockfd(7) [ 454.777350][T12328] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 454.794952][T12328] vhci_hcd vhci_hcd.0: Device attached [ 454.813421][T12325] vhci_hcd vhci_hcd.0: pdev(8) rhport(2) sockfd(6) [ 454.819993][T12325] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 454.832468][T12325] vhci_hcd vhci_hcd.0: Device attached [ 454.841836][T12325] vhci_hcd vhci_hcd.0: pdev(8) rhport(3) sockfd(11) [ 454.848461][T12325] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 454.866174][T12325] vhci_hcd vhci_hcd.0: Device attached [ 454.906540][T12325] vhci_hcd vhci_hcd.0: pdev(8) rhport(4) sockfd(13) [ 454.913188][T12325] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 454.928222][ T6453] vhci_hcd: vhci_device speed not set [ 455.008206][ T6453] usb 49-1: new full-speed USB device number 3 using vhci_hcd [ 455.020786][T12328] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 455.056138][T12325] vhci_hcd vhci_hcd.0: Device attached [ 455.128954][T12325] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 455.228750][T12325] vhci_hcd vhci_hcd.0: pdev(8) rhport(7) sockfd(18) [ 455.235399][T12325] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 455.370339][T12325] vhci_hcd vhci_hcd.0: Device attached [ 456.357299][T12325] vhci_hcd vhci_hcd.0: port 0 already used [ 456.490771][T12343] vhci_hcd: connection closed [ 456.497979][ T12] vhci_hcd: stop threads [ 456.507585][T12332] vhci_hcd: connection closed [ 456.507866][T12329] vhci_hcd: connection closed [ 456.514376][T12326] vhci_hcd: connection reset by peer [ 456.524687][T12336] vhci_hcd: connection closed [ 456.525718][T12334] vhci_hcd: connection closed [ 456.554601][ T12] vhci_hcd: release socket [ 456.614999][ T12] vhci_hcd: disconnect device [ 456.636194][ T12] vhci_hcd: stop threads [ 456.662787][ T12] vhci_hcd: release socket [ 456.688622][ T12] vhci_hcd: disconnect device [ 456.707996][ T12] vhci_hcd: stop threads [ 456.724547][ T12] vhci_hcd: release socket [ 456.758248][ T12] vhci_hcd: disconnect device [ 456.785782][ T12] vhci_hcd: stop threads [ 456.797459][ T12] vhci_hcd: release socket [ 456.813481][ T12] vhci_hcd: disconnect device [ 456.851879][ T12] vhci_hcd: stop threads [ 456.856241][ T12] vhci_hcd: release socket [ 456.881286][ T12] vhci_hcd: disconnect device [ 456.907036][ T12] vhci_hcd: stop threads [ 456.927160][ T12] vhci_hcd: release socket [ 456.960367][ T12] vhci_hcd: disconnect device [ 458.902674][T12378] loop1: detected capacity change from 0 to 1024 [ 459.300510][T12378] EXT4-fs (loop1): filesystem is read-only [ 459.318475][T12378] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 459.329748][T12378] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (11891!=20869) [ 459.340637][T12378] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 459.351571][T12378] EXT4-fs error (device loop1): ext4_get_journal_inode:5805: comm syz.1.1557: inode #1: comm syz.1.1557: iget: illegal inode # [ 459.384288][T12378] EXT4-fs (loop1): no journal found [ 459.389935][T12378] EXT4-fs (loop1): can't get journal size [ 460.188244][ T6453] vhci_hcd: vhci_device speed not set [ 460.708406][T12378] EXT4-fs error (device loop1): __ext4_fill_super:5502: inode #2: comm syz.1.1557: iget: special inode unallocated [ 460.728850][T12378] EXT4-fs (loop1): get root inode failed [ 460.734572][T12378] EXT4-fs (loop1): mount failed [ 461.048426][T12389] vlan2: entered promiscuous mode [ 461.053544][T12389] dummy0: entered promiscuous mode [ 461.159470][T12391] tipc: Enabling of bearer rejected, failed to enable media [ 461.417293][T12404] xt_socket: unknown flags 0x8 [ 462.350659][T12408] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 462.357247][T12408] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 462.398480][T12408] vhci_hcd vhci_hcd.0: Device attached [ 462.451366][T12412] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(6) [ 462.457961][T12412] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 462.638285][T12412] vhci_hcd vhci_hcd.0: Device attached [ 462.688237][ T27] vhci_hcd: vhci_device speed not set [ 465.848177][ T27] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 465.955466][T12412] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(8) [ 465.962192][T12412] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 465.970935][T12412] vhci_hcd vhci_hcd.0: Device attached [ 466.144208][T12408] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(11) [ 466.150887][T12408] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 466.170302][T12430] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 466.262517][T12408] vhci_hcd vhci_hcd.0: Device attached [ 466.287964][T12412] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 466.416706][T12429] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(14) [ 466.423856][T12429] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 466.479012][T12429] vhci_hcd vhci_hcd.0: Device attached [ 466.727105][T12412] vhci_hcd vhci_hcd.0: port 0 already used [ 466.820101][T12408] vhci_hcd vhci_hcd.0: pdev(1) rhport(7) sockfd(16) [ 466.826780][T12408] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 466.894398][T12408] vhci_hcd vhci_hcd.0: Device attached [ 466.900198][T12449] vhci_hcd: connection closed [ 466.901637][T12426] vhci_hcd: connection closed [ 466.907015][T12425] vhci_hcd: connection closed [ 466.912438][T12409] vhci_hcd: connection reset by peer [ 466.918596][T12413] vhci_hcd: connection closed [ 466.926703][T12431] vhci_hcd: connection closed [ 466.957245][ T42] vhci_hcd: stop threads [ 466.968265][ T42] vhci_hcd: release socket [ 466.973119][ T42] vhci_hcd: disconnect device [ 466.981069][ T42] vhci_hcd: stop threads [ 466.985461][ T42] vhci_hcd: release socket [ 466.990617][ T42] vhci_hcd: disconnect device [ 466.995590][ T42] vhci_hcd: stop threads [ 467.000074][ T42] vhci_hcd: release socket [ 467.005982][ T42] vhci_hcd: disconnect device [ 467.012397][ T42] vhci_hcd: stop threads [ 467.017012][ T42] vhci_hcd: release socket [ 467.022272][ T42] vhci_hcd: disconnect device [ 467.027457][ T42] vhci_hcd: stop threads [ 467.031921][ T42] vhci_hcd: release socket [ 467.036613][ T42] vhci_hcd: disconnect device [ 467.043098][ T42] vhci_hcd: stop threads [ 467.047566][ T42] vhci_hcd: release socket [ 467.052605][ T42] vhci_hcd: disconnect device [ 469.146625][T12472] comedi comedi2: dt2817: I/O port conflict (0x9,5) [ 470.595563][T12481] loop8: detected capacity change from 0 to 64 [ 471.158605][ T27] vhci_hcd: vhci_device speed not set [ 472.338616][T12489] vlan3: entered allmulticast mode [ 476.157449][T12513] loop8: detected capacity change from 0 to 262144 [ 476.175253][T12513] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop8 scanned by syz.8.1584 (12513) [ 476.198026][T12513] BTRFS info (device loop8): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 476.208494][T12513] BTRFS info (device loop8): using xxhash64 (xxhash64-generic) checksum algorithm [ 476.217798][T12513] BTRFS info (device loop8): using free space tree [ 477.278870][T12513] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 477.281762][T12513] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 477.291437][T12513] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 477.301035][T12513] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 477.311166][T12513] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 477.320690][T12513] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 477.330926][T12513] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 477.341557][T12513] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 477.352098][T12513] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 477.437046][T12513] BTRFS error (device loop8): open_ctree failed: -12 [ 477.571210][T12435] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop8 scanned by udevd (12435) [ 480.962903][T12582] loop8: detected capacity change from 0 to 2048 [ 481.469865][T12582] NILFS (loop8): broken superblock, retrying with spare superblock (blocksize = 1024) [ 481.588222][T12584] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 484.584953][T12602] loop1: detected capacity change from 0 to 64 [ 487.443563][T12618] loop1: detected capacity change from 0 to 8192 [ 491.550186][T12655] loop8: detected capacity change from 0 to 4096 [ 499.019820][T12717] loop1: detected capacity change from 0 to 2048 [ 499.064287][T12717] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 499.409030][T12718] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 501.544698][T12726] ceph: No mds server is up or the cluster is laggy [ 501.557486][ T27] libceph: connect (1)[c::]:6789 error -101 [ 501.568326][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 501.886657][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.898412][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.934677][T12738] x_tables: duplicate underflow at hook 1 [ 502.114596][T12741] loop1: detected capacity change from 0 to 128 [ 502.530500][T12741] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 502.609467][T12741] ext4 filesystem being mounted at /340/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 503.914372][ T5785] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 504.325372][T12760] loop1: detected capacity change from 0 to 4096 [ 505.537134][T12767] tipc: Enabling of bearer rejected, failed to enable media [ 507.552501][T12786] hfsplus: unable to find HFS+ superblock [ 512.483387][T12843] [U] `: [ 512.487137][T12843] [U] [ 512.489847][T12843] [U] [ 512.492535][T12843] [U] [ 512.495780][T12843] [U] [ 512.498509][T12843] [U] [ 512.501212][T12843] [U] [ 512.503912][T12843] [U] [ 512.578672][T12843] [U] [ 512.581447][T12843] [U] [ 512.584167][T12843] [U] [ 512.586869][T12843] [U] [ 512.590424][T12843] [U] [ 512.593139][T12843] [U] [ 512.595839][T12843] [U] [ 512.598540][T12843] [U] [ 512.603950][T12843] [U] [ 512.606690][T12843] [U] [ 512.609409][T12843] [U] [ 512.612099][T12843] [U] [ 512.615398][T12843] [U] [ 512.618101][T12843] [U] [ 512.620780][T12843] [U] [ 512.623450][T12843] [U] [ 512.626755][T12843] [U] [ 512.629442][T12843] [U] [ 512.632127][T12843] [U] [ 512.634807][T12843] [U] [ 512.638011][T12843] [U] [ 512.640702][T12843] [U] [ 512.643379][T12843] [U] [ 512.646055][T12843] [U] [ 512.649436][T12843] [U] [ 512.652126][T12843] [U] [ 512.654796][T12843] [U] [ 512.657468][T12843] [U] [ 512.660738][T12843] [U] [ 512.663505][T12843] [U] [ 512.666222][T12843] [U] [ 512.668935][T12843] [U] [ 512.672306][T12843] [U] [ 512.675029][T12843] [U] [ 512.677813][T12843] [U] [ 512.680524][T12843] [U] [ 512.683833][T12843] [U] [ 512.686531][T12843] [U] [ 512.689205][T12843] [U] [ 512.691880][T12843] [U] [ 512.695235][T12843] [U] [ 512.697964][T12843] [U] [ 512.700642][T12843] [U] [ 512.703328][T12843] [U] [ 512.706585][T12843] [U] [ 512.709288][T12843] [U] [ 512.711984][T12843] [U] [ 512.714660][T12843] [U] [ 512.717843][T12843] [U] [ 512.720540][T12843] [U] [ 512.723227][T12843] [U] [ 512.725915][T12843] [U] [ 512.729176][T12843] [U] [ 512.731874][T12843] [U] [ 512.734547][T12843] [U] [ 512.737232][T12843] [U] [ 512.740585][T12843] [U] [ 512.743313][T12843] [U] [ 512.746027][T12843] [U] [ 512.748743][T12843] [U] [ 512.751936][T12843] [U] [ 512.754639][T12843] [U] [ 512.757336][T12843] [U] [ 512.760034][T12843] [U] [ 512.763291][T12843] [U] [ 512.766005][T12843] [U] [ 512.768694][T12843] [U] [ 512.771366][T12843] [U] [ 512.774535][T12843] [U] [ 512.777228][T12843] [U] [ 512.779898][T12843] [U] [ 512.782567][T12843] [U] [ 512.785816][T12843] [U] [ 512.788510][T12843] [U] [ 512.791180][T12843] [U] [ 512.793847][T12843] [U] [ 512.797154][T12843] [U] [ 512.799875][T12843] [U] [ 512.802583][T12843] [U] [ 512.805282][T12843] [U] [ 512.808647][T12843] [U] [ 512.811367][T12843] [U] [ 512.814074][T12843] [U] [ 512.816779][T12843] [U] [ 512.981228][T12843] [U] [ 515.667394][T12860] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1660'. [ 515.978389][T12872] loop1: detected capacity change from 0 to 64 [ 517.328985][T12860] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 517.357260][T12860] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 517.515899][T12860] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 517.531711][T12860] bond0 (unregistering): Released all slaves [ 517.601883][T12881] syz.1.1666 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 517.627731][T12881] binder: 12878:12881 ioctl c0306201 0 returned -14 [ 518.722416][T12885] loop1: detected capacity change from 0 to 128 [ 518.734264][T12885] EXT4-fs: Ignoring removed nobh option [ 519.457301][T12885] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 519.473552][T12885] ext4 filesystem being mounted at /350/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 521.025434][ T5785] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 521.990588][T12898] loop8: detected capacity change from 0 to 32768 [ 521.998014][T12898] XFS: ikeep mount option is deprecated. [ 522.791369][T12898] XFS (loop8): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 523.934051][T12898] XFS (loop8): Ending clean mount [ 523.943365][T12898] XFS (loop8): Quotacheck needed: Please wait. [ 524.004456][T12898] XFS (loop8): Quotacheck: Done. [ 524.114991][ T28] audit: type=1326 audit(1754110648.237:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12895 comm="syz.8.1671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f429358eb69 code=0x7ffc0000 [ 525.419130][ T28] audit: type=1326 audit(1754110648.267:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12895 comm="syz.8.1671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f429358eb69 code=0x7ffc0000 [ 526.532867][ T28] audit: type=1326 audit(1754110648.267:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12895 comm="syz.8.1671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7f429358eb69 code=0x7ffc0000 [ 526.956422][ T28] audit: type=1326 audit(1754110648.267:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12895 comm="syz.8.1671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f429358eb69 code=0x7ffc0000 [ 527.297236][ T28] audit: type=1326 audit(1754110648.277:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12895 comm="syz.8.1671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7f429358eb69 code=0x7ffc0000 [ 527.618752][ T27] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 527.743744][ T28] audit: type=1326 audit(1754110648.277:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12895 comm="syz.8.1671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f429358eb69 code=0x7ffc0000 [ 527.967720][ T27] usb 2-1: device descriptor read/64, error -71 [ 527.973914][ T28] audit: type=1326 audit(1754110648.287:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12895 comm="syz.8.1671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f429358eb69 code=0x7ffc0000 [ 528.014856][ T28] audit: type=1326 audit(1754110648.287:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12895 comm="syz.8.1671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f429358eb69 code=0x7ffc0000 [ 528.188313][ T28] audit: type=1326 audit(1754110648.287:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12895 comm="syz.8.1671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f429358eb69 code=0x7ffc0000 [ 528.228341][ T28] audit: type=1326 audit(1754110648.287:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12895 comm="syz.8.1671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f429358eb69 code=0x7ffc0000 [ 528.269185][T12937] overlayfs: failed to resolve './file0': -2 [ 529.744866][T12946] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 529.967652][T10426] XFS (loop8): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 530.936837][T12961] No such timeout policy "syz1" [ 530.962222][T12963] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1684'. [ 532.216667][T12978] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 532.224112][T12978] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1687'. [ 533.644762][T12988] tipc: Enabling of bearer rejected, already enabled [ 537.150163][T13009] x_tables: duplicate underflow at hook 1 [ 541.772023][T13042] 8021q: adding VLAN 0 to HW filter on device bond0 [ 549.347138][T13100] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1714'. [ 549.584756][T13102] netlink: 'syz.2.1718': attribute type 10 has an invalid length. [ 549.592701][T13102] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1718'. [ 549.602190][T13102] dummy0: entered promiscuous mode [ 549.607337][T13102] dummy0: left allmulticast mode [ 549.613214][T13102] bridge0: port 3(dummy0) entered blocking state [ 549.619666][T13102] bridge0: port 3(dummy0) entered disabled state [ 549.626108][T13102] dummy0: entered allmulticast mode [ 550.903123][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 550.903141][ T28] audit: type=1326 audit(1754110674.147:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13105 comm="syz.8.1720" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f429358eb69 code=0x0 [ 552.457293][T13123] syz.2.1724 (13123) used greatest stack depth: 17960 bytes left [ 552.581660][T13126] loop8: detected capacity change from 0 to 1024 [ 552.589170][T13126] EXT4-fs: Ignoring removed i_version option [ 553.401650][T13128] overlayfs: failed to resolve './file1': -2 [ 553.672872][T13126] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 554.739458][T13126] EXT4-fs: error -4 creating inode table initialization thread [ 554.747633][T13126] EXT4-fs (loop8): mount failed [ 561.276684][T13189] input input17: cannot allocate more than FF_MAX_EFFECTS effects [ 563.320058][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.326818][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 569.178456][T13239] syz.8.1750: attempt to access beyond end of device [ 569.178456][T13239] nbd8: rw=0, sector=16, nr_sectors = 1 limit=0 [ 569.192127][T13239] qnx6: unable to read the first superblock [ 569.198404][T13239] syz.8.1750: attempt to access beyond end of device [ 569.198404][T13239] nbd8: rw=0, sector=0, nr_sectors = 1 limit=0 [ 569.211188][T13239] qnx6: unable to read the first superblock [ 569.217095][T13239] qnx6: unable to read the first superblock [ 569.553243][T13246] loop1: detected capacity change from 0 to 256 [ 569.826651][T13250] loop8: detected capacity change from 0 to 512 [ 569.881333][T13246] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 569.937928][T13250] EXT4-fs error (device loop8): ext4_orphan_get:1399: inode #15: comm syz.8.1754: casefold flag without casefold feature [ 570.019518][T13246] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 571.009522][T13246] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 571.042621][T13250] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.1754: couldn't read orphan inode 15 (err -117) [ 571.140308][T13250] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 573.115795][T10426] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 573.764810][T13286] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 573.773962][T13286] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 573.783026][T13286] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 573.792272][T13286] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 573.801967][T13286] geneve2: entered promiscuous mode [ 573.807345][T13286] geneve2: entered allmulticast mode [ 580.355922][T13328] netlink: 'syz.4.1770': attribute type 10 has an invalid length. [ 580.365061][T13328] team0: left allmulticast mode [ 580.561026][T13328] batman_adv: batadv0: Adding interface: team0 [ 580.567238][T13328] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 582.173091][T13328] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 582.272113][T13338] netlink: 'syz.4.1770': attribute type 10 has an invalid length. [ 582.281891][T13338] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1770'. [ 582.291280][T13338] team0: entered promiscuous mode [ 582.297750][T13338] 8021q: adding VLAN 0 to HW filter on device team0 [ 582.308584][T13338] batman_adv: batadv0: Interface activated: team0 [ 582.315214][T13338] batman_adv: batadv0: Interface deactivated: team0 [ 582.322259][T13338] batman_adv: batadv0: Removing interface: team0 [ 582.369730][T13338] bridge0: port 1(team0) entered blocking state [ 582.378595][T13338] bridge0: port 1(team0) entered disabled state [ 582.387405][T13338] team0: entered allmulticast mode [ 582.450579][T13344] loop8: detected capacity change from 0 to 512 [ 582.461556][T13344] ext4: Unknown parameter 'fsuuid' [ 582.505054][T13232] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 582.593576][T13346] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.1777'. [ 586.736542][T13372] loop8: detected capacity change from 0 to 22 [ 586.751166][T13372] MTD: Attempt to mount non-MTD device "/dev/loop8" [ 586.801822][T13372] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 586.896647][T13374] netlink: 'syz.2.1783': attribute type 11 has an invalid length. [ 588.095908][T13383] ALSA: mixer_oss: invalid OSS volume '' [ 588.752652][T13386] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1785'. [ 591.449269][T13407] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 593.526469][T13430] loop8: detected capacity change from 0 to 512 [ 593.605839][T13430] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 593.616477][T13430] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 593.777774][T13430] EXT4-fs (loop8): warning: mounting unchecked fs, running e2fsck is recommended [ 593.953108][T13430] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 594.482063][T13430] System zones: 0-2, 18-18, 34-35 [ 594.526417][T13430] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 595.576030][T13430] EXT4-fs error (device loop8): ext4_validate_block_bitmap:439: comm syz.8.1798: bg 0: block 353: padding at end of block bitmap is not set [ 597.913064][T13459] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 599.567599][T10426] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 600.965063][T13490] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 601.099680][T13491] IPVS: stopping backup sync thread 13490 ... [ 601.927320][T13495] sctp: [Deprecated]: syz.2.1813 (pid 13495) Use of int in max_burst socket option. [ 601.927320][T13495] Use struct sctp_assoc_value instead [ 604.262657][T13517] loop1: detected capacity change from 0 to 256 [ 604.296243][T13517] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 604.595156][T13517] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 604.949728][T13517] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 607.831350][T13541] sctp: [Deprecated]: syz.8.1824 (pid 13541) Use of int in max_burst socket option. [ 607.831350][T13541] Use struct sctp_assoc_value instead [ 609.827873][ T79] hsr_slave_0: left promiscuous mode [ 609.837311][ T79] hsr_slave_1: left promiscuous mode [ 609.849091][ T79] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 609.960475][T13560] loop8: detected capacity change from 0 to 65 [ 610.054688][ T79] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 610.350774][T13560] BFS-fs: bfs_iget(): Bad inode number loop8:00000002 [ 610.401849][T13414] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 610.421925][ T79] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 610.474727][ T79] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 610.513201][ T79] bridge_slave_1: left allmulticast mode [ 610.547113][ T79] bridge_slave_1: left promiscuous mode [ 610.576092][ T79] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.591474][ T79] bridge_slave_0: left allmulticast mode [ 610.597287][ T79] bridge_slave_0: left promiscuous mode [ 610.607505][ T79] bridge0: port 1(bridge_slave_0) entered disabled state [ 610.686467][ T79] veth1_macvtap: left promiscuous mode [ 610.696359][ T79] veth0_macvtap: left promiscuous mode [ 610.706561][ T79] veth1_vlan: left promiscuous mode [ 610.712171][ T79] veth0_vlan: left promiscuous mode [ 612.095228][T13571] dns_resolver: Unsupported content type (216) [ 612.951472][ T79] team0 (unregistering): Port device team_slave_1 removed [ 613.093108][ T79] team0 (unregistering): Port device team_slave_0 removed [ 613.189953][ T79] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 613.310860][ T79] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 614.787444][ T79] bond0 (unregistering): Released all slaves [ 615.341903][T13587] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 616.486338][ T79] IPVS: stop unused estimator thread 0... [ 618.516532][T13615] loop1: detected capacity change from 0 to 16 [ 618.759121][T13615] erofs: (device loop1): mounted with root inode @ nid 36. [ 621.426625][ T8] IPVS: starting estimator thread 0... [ 621.558469][T13632] IPVS: using max 16 ests per chain, 38400 per kthread [ 622.754464][T13647] netlink: 'syz.1.1846': attribute type 1 has an invalid length. [ 623.043186][T13652] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 623.043812][T13651] IPVS: stopping backup sync thread 13652 ... [ 625.374159][T13675] ALSA: mixer_oss: invalid OSS volume '' [ 625.391384][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.399330][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.471905][T13679] syz.4.1856: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 625.487917][T13679] CPU: 1 PID: 13679 Comm: syz.4.1856 Not tainted 6.6.101-syzkaller #0 [ 625.496086][T13679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 625.506169][T13679] Call Trace: [ 625.509440][T13679] [ 625.512359][T13679] dump_stack_lvl+0x16c/0x230 [ 625.517028][T13679] ? show_regs_print_info+0x20/0x20 [ 625.522214][T13679] ? load_image+0x3b0/0x3b0 [ 625.526723][T13679] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 625.533134][T13679] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 625.539627][T13679] warn_alloc+0x210/0x300 [ 625.543952][T13679] ? stack_trace_save+0x9c/0xe0 [ 625.548816][T13679] ? zone_watermark_ok_safe+0x230/0x230 [ 625.554359][T13679] ? kasan_set_track+0x5f/0x70 [ 625.559111][T13679] ? kasan_set_track+0x4e/0x70 [ 625.563856][T13679] ? __kasan_kmalloc+0x8f/0xa0 [ 625.568606][T13679] ? xsk_init_queue+0xb0/0x110 [ 625.573353][T13679] ? xsk_setsockopt+0x43c/0x6f0 [ 625.578206][T13679] ? do_sock_setsockopt+0x175/0x1a0 [ 625.583402][T13679] ? __x64_sys_setsockopt+0x184/0x200 [ 625.588766][T13679] __vmalloc_node_range+0x126/0x1320 [ 625.594054][T13679] ? free_vm_area+0x50/0x50 [ 625.598551][T13679] vmalloc_user+0x74/0x80 [ 625.602867][T13679] ? xskq_create+0xbf/0x170 [ 625.607372][T13679] xskq_create+0xbf/0x170 [ 625.611711][T13679] xsk_init_queue+0xb0/0x110 [ 625.616292][T13679] xsk_setsockopt+0x43c/0x6f0 [ 625.621014][T13679] ? xsk_poll+0x670/0x670 [ 625.625339][T13679] ? __fget_files+0x28/0x4d0 [ 625.629942][T13679] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 625.635508][T13679] ? security_socket_setsockopt+0x7e/0xa0 [ 625.641218][T13679] ? xsk_poll+0x670/0x670 [ 625.645565][T13679] do_sock_setsockopt+0x175/0x1a0 [ 625.650579][T13679] ? __fdget+0x180/0x210 [ 625.654809][T13679] __x64_sys_setsockopt+0x184/0x200 [ 625.659998][T13679] do_syscall_64+0x55/0xb0 [ 625.664400][T13679] ? clear_bhb_loop+0x40/0x90 [ 625.669081][T13679] ? clear_bhb_loop+0x40/0x90 [ 625.673747][T13679] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 625.679651][T13679] RIP: 0033:0x7f659a18eb69 [ 625.684052][T13679] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 625.703656][T13679] RSP: 002b:00007f659afcb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 625.712069][T13679] RAX: ffffffffffffffda RBX: 00007f659a3b5fa0 RCX: 00007f659a18eb69 [ 625.720066][T13679] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 625.728034][T13679] RBP: 00007f659a211df1 R08: 0000000000000004 R09: 0000000000000000 [ 625.735999][T13679] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 625.743964][T13679] R13: 0000000000000000 R14: 00007f659a3b5fa0 R15: 00007ffd9d4e7db8 [ 625.751940][T13679] [ 625.755164][T13679] Mem-Info: [ 625.758761][T13679] active_anon:14821 inactive_anon:0 isolated_anon:0 [ 625.758761][T13679] active_file:16162 inactive_file:40091 isolated_file:0 [ 625.758761][T13679] unevictable:4 dirty:262 writeback:0 [ 625.758761][T13679] slab_reclaimable:11025 slab_unreclaimable:101196 [ 625.758761][T13679] mapped:30234 shmem:6280 pagetables:903 [ 625.758761][T13679] sec_pagetables:0 bounce:0 [ 625.758761][T13679] kernel_misc_reclaimable:0 [ 625.758761][T13679] free:1320652 free_pcp:11017 free_cma:0 [ 625.804112][T13679] Node 0 active_anon:57748kB inactive_anon:0kB active_file:64604kB inactive_file:160160kB unevictable:16kB isolated(anon):0kB isolated(file):0kB mapped:120928kB dirty:1048kB writeback:0kB shmem:23584kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12892kB pagetables:3612kB sec_pagetables:0kB all_unreclaimable? no [ 625.836419][T13679] Node 1 active_anon:1536kB inactive_anon:0kB active_file:44kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 625.867418][T13679] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 625.894600][T13679] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 625.900408][T13679] Node 0 DMA32 free:1372112kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:57696kB inactive_anon:0kB active_file:64604kB inactive_file:158848kB unevictable:16kB writepending:1048kB present:3129332kB managed:2589600kB mlocked:0kB bounce:0kB free_pcp:22008kB local_pcp:11308kB free_cma:0kB [ 625.930884][T13679] lowmem_reserve[]: 0 0 1 1 1 [ 625.935581][T13679] Node 0 Normal free:20kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1312kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 625.962878][T13679] lowmem_reserve[]: 0 0 0 0 0 [ 625.967581][T13679] Node 1 Normal free:3895116kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:1536kB inactive_anon:0kB active_file:44kB inactive_file:204kB unevictable:0kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:22048kB local_pcp:14112kB free_cma:0kB [ 625.997173][T13679] lowmem_reserve[]: 0 0 0 0 0 [ 626.001899][T13679] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 626.014704][T13679] Node 0 DMA32: 8*4kB (UE) 82*8kB (UE) 364*16kB (UME) 723*32kB (UME) 270*64kB (UME) 123*128kB (UME) 41*256kB (UM) 35*512kB (UME) 21*1024kB (UME) 11*2048kB (ME) 302*4096kB (UM) = 1372112kB [ 626.033365][T13679] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 626.045710][T13679] Node 1 Normal: 261*4kB (U) 69*8kB (UE) 49*16kB (UME) 188*32kB (UME) 56*64kB (UME) 9*128kB (UE) 2*256kB (U) 3*512kB (UME) 1*1024kB (E) 2*2048kB (UE) 946*4096kB (M) = 3895116kB [ 626.063434][T13679] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 626.073007][T13679] Node 0 hugepages_total=3 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 626.082327][T13679] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 626.091911][T13679] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 626.101242][T13679] 62525 total pagecache pages [ 626.105942][T13679] 0 pages in swap cache [ 626.110117][T13679] Free swap = 124404kB [ 626.114260][T13679] Total swap = 124996kB [ 626.118451][T13679] 2097051 pages RAM [ 626.122245][T13679] 0 pages HighMem/MovableOnly [ 626.126906][T13679] 416137 pages reserved [ 626.131428][T13679] 0 pages cma reserved [ 626.582775][T13685] loop8: detected capacity change from 0 to 40427 [ 626.651641][T13685] F2FS-fs (loop8): invalid crc value [ 626.673230][T13685] F2FS-fs (loop8): Found nat_bits in checkpoint [ 626.722536][T13685] F2FS-fs (loop8): Start checkpoint disabled! [ 626.864053][T13685] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 627.034684][T13696] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 627.046523][T13696] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 628.266929][ T28] audit: type=1326 audit(1754110752.387:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13698 comm="syz.4.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f659a18eb69 code=0x7ffc0000 [ 628.415514][ T28] audit: type=1326 audit(1754110752.387:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13698 comm="syz.4.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f659a18eb69 code=0x7ffc0000 [ 628.769753][ T28] audit: type=1326 audit(1754110752.387:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13698 comm="syz.4.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=241 compat=0 ip=0x7f659a18eb69 code=0x7ffc0000 [ 629.113546][ T28] audit: type=1326 audit(1754110752.387:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13698 comm="syz.4.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f659a18eb69 code=0x7ffc0000 [ 629.173750][ T28] audit: type=1326 audit(1754110752.387:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13698 comm="syz.4.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f659a18eb69 code=0x7ffc0000 [ 629.196252][ T28] audit: type=1326 audit(1754110752.387:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13698 comm="syz.4.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=75 compat=0 ip=0x7f659a18eb69 code=0x7ffc0000 [ 629.212112][ T1129] kworker/u4:6: attempt to access beyond end of device [ 629.212112][ T1129] loop8: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 629.219923][ T28] audit: type=1326 audit(1754110752.387:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13698 comm="syz.4.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f659a18eb69 code=0x7ffc0000 [ 629.256474][ T28] audit: type=1326 audit(1754110752.387:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13698 comm="syz.4.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f659a18eb69 code=0x7ffc0000 [ 629.289698][ T48] kworker/u4:3: attempt to access beyond end of device [ 629.289698][ T48] loop8: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 629.328494][ T48] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 629.336635][ T48] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 629.348262][ T48] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 629.362446][ T48] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 630.555336][T13728] No such timeout policy "syz1" [ 631.187313][T13739] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1861'. [ 633.623810][T13750] 8021q: adding VLAN 0 to HW filter on device bond2 [ 633.720685][T13756] ubi31: attaching mtd0 [ 633.751067][T13756] ubi31: scanning is finished [ 633.755874][T13756] ubi31: empty MTD device detected [ 634.264001][T13756] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 634.271741][T13756] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 634.279101][T13756] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 634.286116][T13756] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 634.293625][T13756] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 634.300520][T13756] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 634.308660][T13756] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3748519413 [ 634.318774][T13756] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 634.381397][T13757] ubi31: background thread "ubi_bgt31d" started, PID 13757 [ 634.536697][T13759] sctp: [Deprecated]: syz.4.1873 (pid 13759) Use of int in max_burst socket option deprecated. [ 634.536697][T13759] Use struct sctp_assoc_value instead [ 635.960133][ T6453] IPVS: starting estimator thread 0... [ 637.084912][T13781] IPVS: using max 26 ests per chain, 62400 per kthread [ 637.092190][T13776] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1877'. [ 637.101123][T13776] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1877'. [ 638.926563][T13813] loop8: detected capacity change from 0 to 512 [ 639.008372][T13813] EXT4-fs error (device loop8): ext4_orphan_get:1399: inode #15: comm syz.8.1881: casefold flag without casefold feature [ 639.064157][T13813] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.1881: couldn't read orphan inode 15 (err -117) [ 639.090586][T13813] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 639.860813][T10426] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 640.623287][T13836] netlink: 'syz.8.1885': attribute type 9 has an invalid length. [ 640.631153][T13836] netlink: 209836 bytes leftover after parsing attributes in process `syz.8.1885'. [ 641.442802][T13847] lo speed is unknown, defaulting to 1000 [ 641.449354][T13847] lo speed is unknown, defaulting to 1000 [ 641.458652][T13847] lo speed is unknown, defaulting to 1000 [ 641.474475][T13847] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 641.519870][T13847] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 641.678232][T13847] lo speed is unknown, defaulting to 1000 [ 641.705537][T13847] lo speed is unknown, defaulting to 1000 [ 641.719848][T13847] lo speed is unknown, defaulting to 1000 [ 641.735716][T13847] lo speed is unknown, defaulting to 1000 [ 642.824676][T13858] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1890'. [ 644.578221][ T8] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 651.787941][T13922] tipc: Enabling of bearer rejected, already enabled [ 651.815654][T13927] loop8: detected capacity change from 0 to 128 [ 652.074229][T13927] EXT4-fs (loop8): Test dummy encryption mode enabled [ 652.629007][T13927] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 652.641707][T13927] ext4 filesystem being mounted at /135/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 653.927215][T13949] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1913'. [ 654.718803][T13927] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 654.959645][T13958] sctp: [Deprecated]: syz.1.1914 (pid 13958) Use of int in max_burst socket option deprecated. [ 654.959645][T13958] Use struct sctp_assoc_value instead [ 655.340845][T10426] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 656.466517][T13971] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 657.341038][T13977] overlayfs: failed to resolve './file1': -2 [ 660.228538][T14018] sctp: [Deprecated]: syz.2.1927 (pid 14018) Use of int in max_burst socket option deprecated. [ 660.228538][T14018] Use struct sctp_assoc_value instead [ 660.705451][T14023] syz.2.1928: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 660.720656][T14023] CPU: 0 PID: 14023 Comm: syz.2.1928 Not tainted 6.6.101-syzkaller #0 [ 660.728808][T14023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 660.738850][T14023] Call Trace: [ 660.742116][T14023] [ 660.745036][T14023] dump_stack_lvl+0x16c/0x230 [ 660.749709][T14023] ? show_regs_print_info+0x20/0x20 [ 660.754908][T14023] ? load_image+0x3b0/0x3b0 [ 660.759415][T14023] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 660.765829][T14023] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 660.772601][T14023] warn_alloc+0x210/0x300 [ 660.776927][T14023] ? stack_trace_save+0x9c/0xe0 [ 660.781790][T14023] ? zone_watermark_ok_safe+0x230/0x230 [ 660.787330][T14023] ? kasan_set_track+0x5f/0x70 [ 660.792082][T14023] ? kasan_set_track+0x4e/0x70 [ 660.796833][T14023] ? __kasan_kmalloc+0x8f/0xa0 [ 660.801584][T14023] ? xsk_init_queue+0xb0/0x110 [ 660.806335][T14023] ? xsk_setsockopt+0x43c/0x6f0 [ 660.811280][T14023] ? do_sock_setsockopt+0x175/0x1a0 [ 660.816506][T14023] ? __x64_sys_setsockopt+0x184/0x200 [ 660.821902][T14023] __vmalloc_node_range+0x126/0x1320 [ 660.827215][T14023] ? free_vm_area+0x50/0x50 [ 660.831722][T14023] vmalloc_user+0x74/0x80 [ 660.836069][T14023] ? xskq_create+0xbf/0x170 [ 660.840571][T14023] xskq_create+0xbf/0x170 [ 660.844897][T14023] xsk_init_queue+0xb0/0x110 [ 660.849494][T14023] xsk_setsockopt+0x43c/0x6f0 [ 660.854174][T14023] ? xsk_poll+0x670/0x670 [ 660.858509][T14023] ? __fget_files+0x28/0x4d0 [ 660.863101][T14023] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 660.868645][T14023] ? security_socket_setsockopt+0x7e/0xa0 [ 660.874351][T14023] ? xsk_poll+0x670/0x670 [ 660.878685][T14023] do_sock_setsockopt+0x175/0x1a0 [ 660.883708][T14023] ? __fdget+0x180/0x210 [ 660.887943][T14023] __x64_sys_setsockopt+0x184/0x200 [ 660.893141][T14023] do_syscall_64+0x55/0xb0 [ 660.897552][T14023] ? clear_bhb_loop+0x40/0x90 [ 660.902223][T14023] ? clear_bhb_loop+0x40/0x90 [ 660.906901][T14023] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 660.912793][T14023] RIP: 0033:0x7fa28158eb69 [ 660.917222][T14023] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 660.936823][T14023] RSP: 002b:00007fa28246a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 660.945231][T14023] RAX: ffffffffffffffda RBX: 00007fa2817b5fa0 RCX: 00007fa28158eb69 [ 660.953195][T14023] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 660.961178][T14023] RBP: 00007fa281611df1 R08: 0000000000000004 R09: 0000000000000000 [ 660.969140][T14023] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 660.977101][T14023] R13: 0000000000000000 R14: 00007fa2817b5fa0 R15: 00007ffe79ee91b8 [ 660.985075][T14023] [ 660.988881][T14023] Mem-Info: [ 660.992039][T14023] active_anon:12704 inactive_anon:0 isolated_anon:0 [ 660.992039][T14023] active_file:16162 inactive_file:40106 isolated_file:0 [ 660.992039][T14023] unevictable:4 dirty:310 writeback:0 [ 660.992039][T14023] slab_reclaimable:11017 slab_unreclaimable:103268 [ 660.992039][T14023] mapped:26998 shmem:4088 pagetables:901 [ 660.992039][T14023] sec_pagetables:0 bounce:0 [ 660.992039][T14023] kernel_misc_reclaimable:0 [ 660.992039][T14023] free:1318935 free_pcp:13747 free_cma:0 [ 661.037233][T14023] Node 0 active_anon:49280kB inactive_anon:0kB active_file:64604kB inactive_file:160220kB unevictable:16kB isolated(anon):0kB isolated(file):0kB mapped:107968kB dirty:1236kB writeback:0kB shmem:14816kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12912kB pagetables:3604kB sec_pagetables:0kB all_unreclaimable? no [ 661.069519][T14023] Node 1 active_anon:1536kB inactive_anon:0kB active_file:44kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:24kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 661.099895][T14023] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 661.126973][T14023] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 661.132829][T14023] Node 0 DMA32 free:1364728kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:49228kB inactive_anon:0kB active_file:64604kB inactive_file:158908kB unevictable:16kB writepending:1236kB present:3129332kB managed:2589600kB mlocked:0kB bounce:0kB free_pcp:33448kB local_pcp:15176kB free_cma:0kB [ 661.163297][T14023] lowmem_reserve[]: 0 0 1 1 1 [ 661.167988][T14023] Node 0 Normal free:20kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1312kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 661.195247][T14023] lowmem_reserve[]: 0 0 0 0 0 [ 661.199998][T14023] Node 1 Normal free:3895632kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:1536kB inactive_anon:0kB active_file:44kB inactive_file:204kB unevictable:0kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:21536kB local_pcp:7424kB free_cma:0kB [ 661.229765][T14023] lowmem_reserve[]: 0 0 0 0 0 [ 661.234512][T14023] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 661.247217][T14023] Node 0 DMA32: 260*4kB (UE) 601*8kB (UME) 286*16kB (UME) 550*32kB (UME) 282*64kB (UME) 120*128kB (UME) 45*256kB (UM) 37*512kB (UME) 21*1024kB (UME) 9*2048kB (UME) 301*4096kB (UM) = 1364728kB [ 661.266145][T14023] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 661.278428][T14023] Node 1 Normal: 262*4kB (U) 69*8kB (UE) 49*16kB (UME) 198*32kB (UME) 59*64kB (UME) 9*128kB (UE) 2*256kB (U) 3*512kB (UME) 1*1024kB (E) 2*2048kB (UE) 946*4096kB (M) = 3895632kB [ 661.296134][T14023] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 661.305704][T14023] Node 0 hugepages_total=3 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 661.315073][T14023] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 661.324649][T14023] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 661.333997][T14023] 60348 total pagecache pages [ 661.338678][T14023] 0 pages in swap cache [ 661.342815][T14023] Free swap = 124380kB [ 661.346961][T14023] Total swap = 124996kB [ 661.351123][T14023] 2097051 pages RAM [ 661.354912][T14023] 0 pages HighMem/MovableOnly [ 661.359602][T14023] 416137 pages reserved [ 661.363749][T14023] 0 pages cma reserved [ 662.494611][T14038] overlayfs: failed to clone upperpath [ 662.522964][T14038] overlayfs: missing 'lowerdir' [ 663.829115][T14048] overlayfs: failed to clone lowerpath [ 664.139023][T14047] overlayfs: failed to clone upperpath [ 664.705130][T14040] ubi: mtd0 is already attached to ubi31 [ 667.006015][T14071] netlink: zone id is out of range [ 668.374773][T14074] No such timeout policy "syz1" [ 668.996323][ T28] audit: type=1326 audit(1754110793.117:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14078 comm="syz.8.1942" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f429358eb69 code=0x0 [ 669.985957][T14092] loop1: detected capacity change from 0 to 256 [ 670.107579][T14086] nvme_fabrics: missing parameter 'transport=%s' [ 670.132254][T14086] nvme_fabrics: missing parameter 'nqn=%s' [ 671.724734][T14106] loop1: detected capacity change from 0 to 64 [ 676.634423][T14147] capability: warning: `syz.2.1960' uses 32-bit capabilities (legacy support in use) [ 677.141262][T14158] netlink: 'syz.2.1962': attribute type 9 has an invalid length. [ 677.150056][T14158] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1962'. [ 677.922791][T14164] mkiss: ax0: crc mode is auto. [ 679.355742][T14184] SET target dimension over the limit! [ 680.298230][ T6453] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 681.168521][ T6453] usb 2-1: Using ep0 maxpacket: 8 [ 681.205853][ T6453] usb 2-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 681.215102][ T6453] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 681.297137][ T6453] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 681.348760][ T6453] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 681.380580][ T6453] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 681.698404][ T6453] usb 2-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 682.010680][ T6453] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 682.044601][ T6453] usb 2-1: config 0 descriptor?? [ 682.109030][ T6453] hso 2-1:0.0: Can't find BULK IN endpoint [ 682.667077][T14216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 682.676198][T14216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 682.955208][T14210] loop8: detected capacity change from 0 to 1764 [ 683.693560][T14215] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1969'. [ 683.703769][T14218] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1972'. [ 684.893025][ T5849] usb 2-1: USB disconnect, device number 23 [ 686.199615][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.206063][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.331582][T14254] syz1: rxe_set_mtu: Set mtu to 256 [ 688.524430][T14272] pim6reg: entered allmulticast mode [ 688.538038][T14272] pim6reg: left allmulticast mode [ 690.209104][T14283] netlink: 'syz.4.1986': attribute type 9 has an invalid length. [ 690.216958][T14283] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1986'. [ 693.275477][T14313] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1996'. [ 693.286451][T14313] team0: No ports can be present during mode change [ 693.294927][T14313] netlink: 'syz.2.1996': attribute type 10 has an invalid length. [ 693.560828][T14317] syz.1.1997: attempt to access beyond end of device [ 693.560828][T14317] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0 [ 693.577221][T14317] syz.1.1997: attempt to access beyond end of device [ 693.577221][T14317] nbd1: rw=0, sector=120, nr_sectors = 8 limit=0 [ 693.590429][T14317] Mount JFS Failure: -5 [ 696.145911][T14338] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2004'. [ 698.094087][T14356] ksmbd: Unknown IPC event: 6, ignore. [ 698.300803][T14356] loop8: detected capacity change from 0 to 2048 [ 700.099290][T14356] hpfs: filesystem error: invalid size in superblock: ffffffff; already mounted read-only [ 701.625313][T14379] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2010'. [ 703.355222][ T8] libceph: connect (1)[c::]:6789 error -101 [ 703.367653][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 703.390066][T14390] ceph: No mds server is up or the cluster is laggy [ 705.567463][T14416] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 706.105588][ T27] libceph: connect (1)[c::]:6789 error -101 [ 706.128452][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 706.139702][T14410] ceph: No mds server is up or the cluster is laggy [ 706.715455][T14431] netlink: 'syz.1.2020': attribute type 9 has an invalid length. [ 706.723307][T14431] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2020'. [ 708.119674][T14445] Bluetooth: (null): Invalid header checksum [ 709.633943][T14453] loop8: detected capacity change from 0 to 1024 [ 709.671645][T14453] hfsplus: bad catalog folder entry [ 710.138689][T14461] ax25_connect(): syz.8.2029 uses autobind, please contact jreuter@yaina.de [ 710.157019][T14461] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 713.108155][T14495] overlayfs: missing 'lowerdir' [ 719.762231][T14516] ceph: No mds server is up or the cluster is laggy [ 721.025430][T14547] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 721.037431][T14547] overlayfs: missing 'lowerdir' [ 721.929080][ C0] vkms_vblank_simulate: vblank timer overrun [ 722.322454][ T28] audit: type=1400 audit(1754110846.397:164): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3AF4F9904E7FDB3635A70D23C73EEAF23A3F503280080CA26230668AD9DCF8B061228F8599D34E45087D21AA56759E1651B3DD467BDEF390C76D pid=14545 comm="syz.8.2048" [ 722.356962][T14552] overlayfs: missing 'lowerdir' [ 722.507764][T14560] dummy0 speed is unknown, defaulting to 1000 [ 722.528237][T14560] dummy0 speed is unknown, defaulting to 1000 [ 722.543857][T14560] dummy0 speed is unknown, defaulting to 1000 [ 722.593619][T14560] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 722.779048][T14560] dummy0 speed is unknown, defaulting to 1000 [ 722.787080][T14560] dummy0 speed is unknown, defaulting to 1000 [ 722.794781][T14560] dummy0 speed is unknown, defaulting to 1000 [ 722.802504][T14560] dummy0 speed is unknown, defaulting to 1000 [ 723.143379][T14572] tmpfs: Unknown parameter 'smackfsroot' [ 726.566476][T14613] Lens B: ================= START STATUS ================= [ 726.574546][T14613] Lens B: Focus, Absolute: 0 [ 726.582003][T14613] Lens B: ================== END STATUS ================== [ 726.595970][T14617] loop8: detected capacity change from 0 to 8192 [ 731.609124][T14650] loop8: detected capacity change from 0 to 1024 [ 732.089469][T14650] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 732.195317][ T28] audit: type=1800 audit(1754110856.287:165): pid=14646 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2065" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 734.393564][T14664] ceph: No mds server is up or the cluster is laggy [ 734.811095][T14669] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 734.971713][T10426] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 738.493457][T14702] pim6reg: entered allmulticast mode [ 739.364629][T14710] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nbd1": -EINTR [ 739.385675][T14702] pim6reg: left allmulticast mode [ 740.028244][T14716] nvme_fabrics: unknown parameter or missing value '(' in ctrl creation request [ 741.994946][T14727] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 742.634009][T14735] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2082'. [ 743.890341][T14748] loop8: detected capacity change from 0 to 32768 [ 744.074957][T14751] bridge_slave_1: left promiscuous mode [ 744.080997][T14751] bridge0: port 2(bridge_slave_1) entered disabled state [ 744.091178][T14751] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 746.749632][T14783] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 747.635526][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.645271][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.869684][T14801] afs: Bad value for 'source' [ 752.099772][T14825] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2103'. [ 753.201616][T14836] siw: device registration error -23 [ 753.573545][T14838] loop1: detected capacity change from 0 to 128 [ 754.477175][ T1129] kworker/u4:6: attempt to access beyond end of device [ 754.477175][ T1129] loop1: rw=1, sector=145, nr_sectors = 896 limit=128 [ 757.444791][T14861] afs: Unknown parameter 'dy' [ 758.006149][T14872] overlayfs: failed to clone upperpath [ 758.628663][T14877] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 759.831376][T14889] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2119'. [ 759.936250][T14889] usb usb1: check_ctrlrecip: process 14889 (syz.1.2119) requesting ep 01 but needs 81 [ 759.956565][T14889] usb usb1: usbfs: process 14889 (syz.1.2119) did not claim interface 0 before use [ 763.900065][T14925] loop1: detected capacity change from 0 to 16 [ 764.253350][T14925] erofs: (device loop1): mounted with root inode @ nid 36. [ 764.616034][T14934] loop8: detected capacity change from 0 to 128 [ 764.630339][T14928] siw: device registration error -23 [ 764.652483][T14934] EXT4-fs: Ignoring removed nobh option [ 766.076110][T14934] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 766.321835][T14934] ext4 filesystem being mounted at /172/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 766.417950][T14952] netlink: 'syz.1.2130': attribute type 1 has an invalid length. [ 766.426017][T14952] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2130'. [ 766.502427][T14953] 9pnet_fd: Insufficient options for proto=fd [ 769.479586][T10426] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 769.513491][T14964] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2131'. [ 772.748501][T14976] lo: left allmulticast mode [ 772.765722][T14976] tunl0: left allmulticast mode [ 772.778458][T14976] gre0: left allmulticast mode [ 772.812129][T14976] erspan0: left allmulticast mode [ 772.825980][T14976] ip_vti0: left allmulticast mode [ 772.837457][T14976] ip6_vti0: left allmulticast mode [ 772.851637][T14976] sit0: left allmulticast mode [ 772.882772][T14976] ip6tnl0: left allmulticast mode [ 772.896227][T14976] ip6gre0: left allmulticast mode [ 772.915471][T14976] ip6gretap0: left allmulticast mode [ 772.933239][T14976] bridge0: left allmulticast mode [ 772.952234][T14976] 8021q: adding VLAN 0 to HW filter on device bond0 [ 772.964073][T14976] team0: left promiscuous mode [ 772.975205][T14976] dummy0: left allmulticast mode [ 772.983219][T14976] nlmon0: left allmulticast mode [ 773.288688][T14976] caif0: left allmulticast mode [ 773.293640][T14976] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 773.316840][ T5871] lo speed is unknown, defaulting to 1000 [ 773.337955][ T27] dummy0 speed is unknown, defaulting to 1000 [ 774.961119][T14985] lo speed is unknown, defaulting to 1000 [ 774.969080][T14985] dummy0 speed is unknown, defaulting to 1000 [ 776.939008][T15008] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 777.050677][T15008] overlayfs: missing 'lowerdir' [ 778.160115][T15017] loop8: detected capacity change from 0 to 1024 [ 778.201240][T15017] EXT4-fs (loop8): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 778.662918][T15017] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 780.539211][T15031] sp0: Synchronizing with TNC [ 781.081758][T10426] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 787.921415][T15090] loop8: detected capacity change from 0 to 16 [ 787.931834][T15090] erofs: (device loop8): mounted with root inode @ nid 36. [ 790.028292][T15110] loop1: detected capacity change from 0 to 32768 [ 795.698693][T15148] netlink: 420 bytes leftover after parsing attributes in process `syz.8.2173'. [ 797.934810][T15160] netdevsim netdevsim4: Direct firmware load for JngkNq>*x(O@ēƙaWfV! _)ADIwC7;gB|hV`f?:VmUWX:SZ;˩6h?Aeim/S6_C?F failed with error -2 [ 797.955175][T15160] netdevsim netdevsim4: Falling back to sysfs fallback for: JngkNq>*x(O@ēƙaWfV! _)ADIwC7;gB|hV`f?:VmUWX:SZ;˩6h?Aeim/S6_C?F [ 797.981018][ T5834] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 798.198502][ T5834] usb 9-1: Using ep0 maxpacket: 16 [ 798.235840][ T5834] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 798.337453][T15169] Can't find a SQUASHFS superblock on nullb0 [ 799.117670][ T5834] usb 9-1: string descriptor 0 read error: -71 [ 799.138321][ T5834] usb 9-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 799.173531][ T5834] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 799.299398][ T5834] usb 9-1: config 0 descriptor?? [ 799.318502][ T5834] usb 9-1: can't set config #0, error -71 [ 799.329492][ T5834] usb 9-1: USB disconnect, device number 3 [ 800.402818][T15178] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (48424) [ 800.558821][T15178] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 805.456435][T15217] netlink: 3 bytes leftover after parsing attributes in process `syz.8.2190'. [ 808.350924][T15252] overlayfs: failed to clone upperpath [ 809.397445][T15251] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 809.422445][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.429316][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 811.929073][T15282] loop8: detected capacity change from 0 to 1024 [ 815.502246][T15309] netdevsim netdevsim2: Direct firmware load for JngkNq>*x(O@ēƙaWfV! _)ADIwC7;gB|hV`f?:VmUWX:SZ;˩6h?Aeim/S6_C?F failed with error -2 [ 815.522244][T15309] netdevsim netdevsim2: Falling back to sysfs fallback for: JngkNq>*x(O@ēƙaWfV! _)ADIwC7;gB|hV`f?:VmUWX:SZ;˩6h?Aeim/S6_C?F [ 816.889399][T15316] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2217'. [ 817.687278][T15326] loop8: detected capacity change from 0 to 128 [ 818.603605][ T48] kworker/u4:3: attempt to access beyond end of device [ 818.603605][ T48] loop8: rw=1, sector=145, nr_sectors = 896 limit=128 [ 819.618509][T15344] fuse: Bad value for 'fd' [ 820.806025][T15348] loop8: detected capacity change from 0 to 128 [ 821.520585][ T79] kworker/u4:5: attempt to access beyond end of device [ 821.520585][ T79] loop8: rw=1, sector=145, nr_sectors = 896 limit=128 [ 821.907005][ T28] audit: type=1800 audit(1754110946.027:166): pid=15350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2225" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 822.225317][T15364] overlayfs: failed to clone upperpath [ 822.694654][T15368] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 823.141542][T15371] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2229'. [ 823.249271][T15376] loop1: detected capacity change from 0 to 128 [ 824.321030][ T7242] kworker/u4:8: attempt to access beyond end of device [ 824.321030][ T7242] loop1: rw=1, sector=145, nr_sectors = 896 limit=128 [ 825.562878][T15394] loop1: detected capacity change from 0 to 8 [ 825.587508][T14930] udevd[14930]: incorrect cramfs checksum on /dev/loop1 [ 825.816298][T15397] xt_nat: multiple ranges no longer supported [ 826.983272][T15405] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2238'. [ 827.000421][T15405] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2238'. [ 827.031761][T15405] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 827.226371][T15405] bond5: entered allmulticast mode [ 827.235917][T15405] 8021q: adding VLAN 0 to HW filter on device bond5 [ 827.679979][T15417] loop1: detected capacity change from 0 to 1024 [ 827.721759][T15417] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 828.493299][T15417] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 828.849758][T15435] overlayfs: failed to clone upperpath [ 829.773363][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 830.043507][T15449] loop1: detected capacity change from 0 to 2048 [ 830.063955][T15449] UDF-fs: bad mount option "uid=s+1V&D{?<`Vv m^҂cma|lb+\^AHm{%6kyea= N|ƴ_PoePIR*8ͅ9ާU!kyCE" or missing value [ 830.443503][T14930] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 831.290715][T15455] loop8: detected capacity change from 0 to 128 [ 831.574059][T15463] loop1: detected capacity change from 0 to 1024 [ 831.589808][T15463] hfsplus: unable to parse mount options [ 832.580857][ T7242] kworker/u4:8: attempt to access beyond end of device [ 832.580857][ T7242] loop8: rw=1, sector=145, nr_sectors = 896 limit=128 [ 832.603841][T15469] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2249'. [ 833.680699][T15481] loop8: detected capacity change from 0 to 512 [ 833.689272][T15481] EXT4-fs: Ignoring removed bh option [ 835.008767][T15484] overlayfs: failed to resolve './file0': -2 [ 836.140424][T15493] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2253'. [ 836.352814][T15481] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 836.661391][T15481] EXT4-fs (loop8): 1 truncate cleaned up [ 836.675868][T15481] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 837.537491][T15504] loop1: detected capacity change from 0 to 512 [ 837.617425][T15504] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 837.630452][T15504] syz.1.2258: attempt to access beyond end of device [ 837.630452][T15504] loop20: rw=0, sector=2, nr_sectors = 2 limit=0 [ 837.643616][T15504] EXT4-fs (loop1): couldn't read superblock of external journal [ 838.753307][T10426] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 839.739493][T15523] loop8: detected capacity change from 0 to 128 [ 839.788595][ C0] ================================================================== [ 839.796717][ C0] BUG: KASAN: slab-use-after-free in rose_timer_expiry+0x46a/0x4b0 [ 839.804631][ C0] Read of size 2 at addr ffff88801b3f302a by task swapper/0/0 [ 839.812092][ C0] [ 839.814419][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 6.6.101-syzkaller #0 [ 839.822142][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 839.832209][ C0] Call Trace: [ 839.835490][ C0] [ 839.838340][ C0] dump_stack_lvl+0x16c/0x230 [ 839.843033][ C0] ? __lock_acquire+0x7c80/0x7c80 [ 839.848065][ C0] ? show_regs_print_info+0x20/0x20 [ 839.853279][ C0] ? load_image+0x3b0/0x3b0 [ 839.857798][ C0] ? _raw_spin_lock_irqsave+0xb4/0xf0 [ 839.863189][ C0] ? __virt_addr_valid+0x18c/0x540 [ 839.868311][ C0] ? __virt_addr_valid+0x469/0x540 [ 839.873432][ C0] print_report+0xac/0x220 [ 839.877853][ C0] ? rose_timer_expiry+0x46a/0x4b0 [ 839.882982][ C0] kasan_report+0x117/0x150 [ 839.887583][ C0] ? rose_timer_expiry+0x46a/0x4b0 [ 839.892722][ C0] rose_timer_expiry+0x46a/0x4b0 [ 839.897672][ C0] call_timer_fn+0x16e/0x530 [ 839.902275][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 839.907303][ C0] ? call_timer_fn+0xbf/0x530 [ 839.911964][ C0] ? __run_timers+0x7d0/0x7d0 [ 839.916620][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 839.921803][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 839.926981][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 839.931984][ C0] __run_timers+0x52d/0x7d0 [ 839.936467][ C0] ? detach_timer+0x2b0/0x2b0 [ 839.941122][ C0] ? lock_chain_count+0x20/0x20 [ 839.945967][ C0] run_timer_softirq+0x67/0xf0 [ 839.950728][ C0] handle_softirqs+0x280/0x820 [ 839.955557][ C0] ? __irq_exit_rcu+0xc7/0x190 [ 839.960306][ C0] ? do_softirq+0x180/0x180 [ 839.965052][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 839.970230][ C0] __irq_exit_rcu+0xc7/0x190 [ 839.974800][ C0] ? irq_exit_rcu+0x20/0x20 [ 839.979283][ C0] irq_exit_rcu+0x9/0x20 [ 839.983501][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 839.989118][ C0] [ 839.992031][ C0] [ 839.994939][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 840.000904][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 840.006609][ C0] Code: cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d 83 16 3b 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 66 0f 1f 00 55 41 57 41 56 [ 840.026216][ C0] RSP: 0018:ffffffff8ca07d80 EFLAGS: 000002c2 [ 840.032353][ C0] RAX: 9f7307ef3e035200 RBX: ffffffff81619a6b RCX: 9f7307ef3e035200 [ 840.040309][ C0] RDX: 0000000000000001 RSI: ffffffff8aaaba40 RDI: ffffffff8afc6780 [ 840.048279][ C0] RBP: ffffffff8ca07eb8 R08: ffff8880b8e36d4b R09: 1ffff110171c6da9 [ 840.056252][ C0] R10: dffffc0000000000 R11: ffffed10171c6daa R12: ffffffff8e4a84e8 [ 840.064202][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1952670 [ 840.072156][ C0] ? do_idle+0x1eb/0x510 [ 840.076388][ C0] default_idle+0x13/0x20 [ 840.080704][ C0] default_idle_call+0x6c/0xa0 [ 840.085484][ C0] do_idle+0x1eb/0x510 [ 840.089550][ C0] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 840.095169][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 840.100349][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 840.105528][ C0] ? do_idle+0x4ef/0x510 [ 840.109749][ C0] cpu_startup_entry+0x43/0x60 [ 840.114490][ C0] rest_init+0x2e2/0x300 [ 840.118707][ C0] ? time_init+0x40/0x40 [ 840.122930][ C0] arch_call_rest_init+0xe/0x10 [ 840.127764][ C0] start_kernel+0x459/0x4e0 [ 840.132250][ C0] x86_64_start_reservations+0x2a/0x30 [ 840.137689][ C0] x86_64_start_kernel+0x60/0x60 [ 840.142627][ C0] secondary_startup_64_no_verify+0x179/0x17b [ 840.148683][ C0] [ 840.151683][ C0] [ 840.154002][ C0] Allocated by task 13983: [ 840.158417][ C0] kasan_set_track+0x4e/0x70 [ 840.162985][ C0] __kasan_kmalloc+0x8f/0xa0 [ 840.167566][ C0] rose_add_node+0x23a/0xdd0 [ 840.172146][ C0] rose_rt_ioctl+0xa42/0xfb0 [ 840.176732][ C0] rose_ioctl+0x3cf/0x8b0 [ 840.181064][ C0] sock_do_ioctl+0xd7/0x2f0 [ 840.185563][ C0] sock_ioctl+0x623/0x7a0 [ 840.189977][ C0] __se_sys_ioctl+0xfd/0x170 [ 840.194544][ C0] do_syscall_64+0x55/0xb0 [ 840.198944][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 840.204825][ C0] [ 840.207138][ C0] Last potentially related work creation: [ 840.212827][ C0] kasan_save_stack+0x3e/0x60 [ 840.217482][ C0] __kasan_record_aux_stack+0xaf/0xc0 [ 840.222846][ C0] insert_work+0x3d/0x310 [ 840.227182][ C0] __queue_work+0xd2c/0x1020 [ 840.231759][ C0] call_timer_fn+0x16e/0x530 [ 840.236331][ C0] __run_timers+0x558/0x7d0 [ 840.240813][ C0] run_timer_softirq+0x67/0xf0 [ 840.245554][ C0] handle_softirqs+0x280/0x820 [ 840.250296][ C0] __irq_exit_rcu+0xc7/0x190 [ 840.254863][ C0] irq_exit_rcu+0x9/0x20 [ 840.259101][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 840.264713][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 840.270678][ C0] [ 840.273008][ C0] Second to last potentially related work creation: [ 840.279569][ C0] kasan_save_stack+0x3e/0x60 [ 840.284224][ C0] __kasan_record_aux_stack+0xaf/0xc0 [ 840.289593][ C0] insert_work+0x3d/0x310 [ 840.293904][ C0] __queue_work+0xd2c/0x1020 [ 840.298473][ C0] call_timer_fn+0x16e/0x530 [ 840.303057][ C0] __run_timers+0x558/0x7d0 [ 840.307540][ C0] run_timer_softirq+0x67/0xf0 [ 840.312320][ C0] handle_softirqs+0x280/0x820 [ 840.317077][ C0] __irq_exit_rcu+0xc7/0x190 [ 840.321644][ C0] irq_exit_rcu+0x9/0x20 [ 840.325859][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 840.331485][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 840.337446][ C0] [ 840.339760][ C0] The buggy address belongs to the object at ffff88801b3f3000 [ 840.339760][ C0] which belongs to the cache kmalloc-512 of size 512 [ 840.353803][ C0] The buggy address is located 42 bytes inside of [ 840.353803][ C0] freed 512-byte region [ffff88801b3f3000, ffff88801b3f3200) [ 840.367505][ C0] [ 840.369834][ C0] The buggy address belongs to the physical page: [ 840.376235][ C0] page:ffffea00006cfc00 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88801b3f0800 pfn:0x1b3f0 [ 840.387669][ C0] head:ffffea00006cfc00 order:2 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 840.396579][ C0] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 840.404535][ C0] page_type: 0xffffffff() [ 840.408847][ C0] raw: 00fff00000000840 ffff888017841c80 ffffea0001d60110 ffffea00008e7c10 [ 840.417508][ C0] raw: ffff88801b3f0800 000000000010000d 00000001ffffffff 0000000000000000 [ 840.426209][ C0] page dumped because: kasan: bad access detected [ 840.432620][ C0] page_owner tracks the page as allocated [ 840.438319][ C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 5667918241, free_ts 0 [ 840.457939][ C0] post_alloc_hook+0x1cd/0x210 [ 840.462693][ C0] get_page_from_freelist+0x195c/0x19f0 [ 840.468222][ C0] __alloc_pages+0x1e3/0x460 [ 840.472790][ C0] alloc_page_interleave+0x24/0x1e0 [ 840.477968][ C0] alloc_slab_page+0x5d/0x170 [ 840.482652][ C0] new_slab+0x87/0x2e0 [ 840.486700][ C0] ___slab_alloc+0xc6d/0x12f0 [ 840.491357][ C0] __kmem_cache_alloc_node+0x1a2/0x260 [ 840.496795][ C0] kmalloc_trace+0x2a/0xe0 [ 840.501190][ C0] device_add+0xbe/0xc20 [ 840.505412][ C0] tty_register_device_attr+0x401/0x8f0 [ 840.510945][ C0] tty_register_driver+0x5a9/0xb20 [ 840.516036][ C0] legacy_pty_init+0x3a6/0x600 [ 840.520807][ C0] pty_init+0xe/0x20 [ 840.524681][ C0] do_one_initcall+0x1fd/0x750 [ 840.529426][ C0] do_initcall_level+0x137/0x1f0 [ 840.534345][ C0] page_owner free stack trace missing [ 840.539686][ C0] [ 840.541990][ C0] Memory state around the buggy address: [ 840.547593][ C0] ffff88801b3f2f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 840.555752][ C0] ffff88801b3f2f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 840.564141][ C0] >ffff88801b3f3000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 840.572190][ C0] ^ [ 840.577541][ C0] ffff88801b3f3080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 840.585581][ C0] ffff88801b3f3100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 840.593648][ C0] ================================================================== [ 840.601877][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 840.609053][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 6.6.101-syzkaller #0 [ 840.616756][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 840.626808][ C0] Call Trace: [ 840.630076][ C0] [ 840.632901][ C0] dump_stack_lvl+0x16c/0x230 [ 840.637560][ C0] ? show_regs_print_info+0x20/0x20 [ 840.642740][ C0] ? load_image+0x3b0/0x3b0 [ 840.647228][ C0] panic+0x2c0/0x710 [ 840.651120][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 840.655611][ C0] ? _raw_spin_unlock_irqrestore+0xa9/0x110 [ 840.661489][ C0] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 840.667362][ C0] ? _raw_spin_unlock+0x40/0x40 [ 840.672194][ C0] ? print_memory_metadata+0x314/0x400 [ 840.677649][ C0] ? rose_timer_expiry+0x46a/0x4b0 [ 840.682740][ C0] check_panic_on_warn+0x84/0xa0 [ 840.687656][ C0] ? rose_timer_expiry+0x46a/0x4b0 [ 840.692745][ C0] end_report+0x6f/0x140 [ 840.696968][ C0] kasan_report+0x128/0x150 [ 840.701449][ C0] ? rose_timer_expiry+0x46a/0x4b0 [ 840.706541][ C0] rose_timer_expiry+0x46a/0x4b0 [ 840.711816][ C0] call_timer_fn+0x16e/0x530 [ 840.716921][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 840.721941][ C0] ? call_timer_fn+0xbf/0x530 [ 840.726604][ C0] ? __run_timers+0x7d0/0x7d0 [ 840.731261][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 840.736441][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 840.741617][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 840.746621][ C0] __run_timers+0x52d/0x7d0 [ 840.751105][ C0] ? detach_timer+0x2b0/0x2b0 [ 840.755761][ C0] ? lock_chain_count+0x20/0x20 [ 840.760593][ C0] run_timer_softirq+0x67/0xf0 [ 840.765333][ C0] handle_softirqs+0x280/0x820 [ 840.770074][ C0] ? __irq_exit_rcu+0xc7/0x190 [ 840.774812][ C0] ? do_softirq+0x180/0x180 [ 840.779310][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 840.784489][ C0] __irq_exit_rcu+0xc7/0x190 [ 840.789074][ C0] ? irq_exit_rcu+0x20/0x20 [ 840.793555][ C0] irq_exit_rcu+0x9/0x20 [ 840.797786][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 840.803402][ C0] [ 840.806313][ C0] [ 840.809222][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 840.815206][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 840.820908][ C0] Code: cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d 83 16 3b 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 66 0f 1f 00 55 41 57 41 56 [ 840.840493][ C0] RSP: 0018:ffffffff8ca07d80 EFLAGS: 000002c2 [ 840.846537][ C0] RAX: 9f7307ef3e035200 RBX: ffffffff81619a6b RCX: 9f7307ef3e035200 [ 840.854486][ C0] RDX: 0000000000000001 RSI: ffffffff8aaaba40 RDI: ffffffff8afc6780 [ 840.862436][ C0] RBP: ffffffff8ca07eb8 R08: ffff8880b8e36d4b R09: 1ffff110171c6da9 [ 840.870385][ C0] R10: dffffc0000000000 R11: ffffed10171c6daa R12: ffffffff8e4a84e8 [ 840.878335][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1952670 [ 840.886285][ C0] ? do_idle+0x1eb/0x510 [ 840.890535][ C0] default_idle+0x13/0x20 [ 840.894856][ C0] default_idle_call+0x6c/0xa0 [ 840.899613][ C0] do_idle+0x1eb/0x510 [ 840.903750][ C0] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 840.909370][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 840.914579][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 840.919762][ C0] ? do_idle+0x4ef/0x510 [ 840.923984][ C0] cpu_startup_entry+0x43/0x60 [ 840.928726][ C0] rest_init+0x2e2/0x300 [ 840.932946][ C0] ? time_init+0x40/0x40 [ 840.937165][ C0] arch_call_rest_init+0xe/0x10 [ 840.942001][ C0] start_kernel+0x459/0x4e0 [ 840.946486][ C0] x86_64_start_reservations+0x2a/0x30 [ 840.951928][ C0] x86_64_start_kernel+0x60/0x60 [ 840.956857][ C0] secondary_startup_64_no_verify+0x179/0x17b [ 840.962907][ C0] [ 840.966199][ C0] Kernel Offset: disabled [ 840.970521][ C0] Rebooting in 86400 seconds..