last executing test programs: 8m14.239986256s ago: executing program 3 (id=580): r0 = socket$inet6(0xa, 0xa, 0x400000) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0xfd9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) sendmmsg$inet6(r0, 0x0, 0x0, 0xc8000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000280)={'erspan0\x00', &(0x7f0000000300)={'ip_vti0\x00', 0x0, 0x40, 0x1, 0x759, 0x8, {{0xd, 0x4, 0x2, 0x1c, 0x34, 0x64, 0x0, 0xc0, 0x29, 0x0, @multicast1, @broadcast, {[@ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @cipso={0x86, 0x16, 0x3, [{0x7, 0xa, "8c3385583ee74934"}, {0x1, 0x6, "96c0eb6c"}]}]}}}}}) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) io_uring_register$IORING_REGISTER_FILES2(0xffffffffffffffff, 0xd, &(0x7f0000000800)={0x1, 0x0, 0x0, &(0x7f0000000700)=[{0x0}], &(0x7f0000000680)}, 0x20) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x2e}, 0x1, 0x0, 0x0, 0x20000000}, 0x24004080) syz_open_procfs(0x0, &(0x7f0000000180)='wchan\x00') ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open(&(0x7f0000000040)='./file0\x00', 0x80242, 0x1df2a23c5997fa7b) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000500)={0xa0, 0x0, 0x0, {{0x80000000, 0x3, 0x9, 0xfffffffffeffff83, 0x3, 0x1, {0xffffffffffffffff, 0x3ff, 0x20ff, 0x7ff, 0xf7c, 0x800000000000d615, 0x3fb, 0x7ffffffb, 0x6, 0x1000, 0x8, 0x0, 0x0, 0x3ff, 0x8ea2}}, {0x0, 0x12}}}, 0xa0) syz_open_dev$tty1(0xc, 0x4, 0x4) futex(&(0x7f0000000080), 0x88, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) futex(&(0x7f0000000080), 0x88, 0x0, 0x0, 0x0, 0x0) 8m14.054798099s ago: executing program 3 (id=582): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8000) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f00000004c0)={{0x80}, 'port0\x00', 0x8, 0x100075, 0xffefffff, 0x4, 0x1ff, 0x0, 0x0, 0x0, 0x6}) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r3 = fanotify_init(0x8, 0x80000) fanotify_mark(r3, 0x105, 0x4800003a, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r4 = open(&(0x7f0000000580)='./file1\x00', 0x80342, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x8, 0x3, 0x5, 0x8, 0x3, 0x1, {0x1, 0x17f, 0x20ff, 0x5, 0x89, 0xd615, 0xb, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) chown(0x0, 0x0, 0x0) sendfile(r4, r4, &(0x7f0000000080), 0x7f03) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x1, 0x4000000) 8m13.95617571s ago: executing program 3 (id=583): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8000) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f00000004c0)={{0x80}, 'port0\x00', 0x8, 0x100075, 0xffefffff, 0x4, 0x1ff, 0x0, 0x0, 0x0, 0x6}) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = fanotify_init(0x8, 0x80000) fanotify_mark(r4, 0x105, 0x4800003a, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') fcntl$setown(r2, 0x8, 0x0) r5 = open(&(0x7f0000000580)='./file1\x00', 0x80342, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x8, 0x3, 0x5, 0x8, 0x3, 0x1, {0x1, 0x17f, 0x20ff, 0x5, 0x89, 0xd615, 0xb, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) chown(0x0, 0x0, 0x0) sendfile(r5, r5, &(0x7f0000000080), 0x7f03) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x1, 0x4000000) 8m13.30810354s ago: executing program 3 (id=584): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fcdbdf250a00000008000300", @ANYRES32=r3, @ANYBLOB="04000a0010005080040006000500020004"], 0x30}, 0x1, 0x0, 0x0, 0x2040011}, 0x24000000) prlimit64(0x0, 0xe, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, &(0x7f0000000240)) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000013c0)}, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_mount_image$minix(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', 0x42, &(0x7f0000000540)=ANY=[], 0xd, 0x1a4, &(0x7f0000000640)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000380)={0x18, 0x0, {0x7, @broadcast, 'macvlan1\x00'}}, 0x1e) sendmmsg(r5, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000500)="ab", 0x5ea}], 0x1}}], 0x484, 0x24048084) creat(&(0x7f0000000100)='./file0\x00', 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r6, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14040040}, 0x4800) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0xa04001, &(0x7f0000000580)=ANY=[@ANYBLOB='mode=fragment:segment,background_gc=sync,alloc_mode=default,background_gc=sync,gc_merge,background_gc=off,age_extent_cache,noacl,disable_roll_forward,fsync_mode=posix,fsync_mode=posix,resuid=', @ANYRESHEX=0x0, @ANYBLOB="00000000000026316dff84978dac9a6ce141807299e76ab52abbc8490c7b87d6da5376e760365bcaaf3364149e0584970f30c8b46356cf9e06ba66540a49eb3f79d58c1de344be4acf2eed0beb0b237b85dd9a882a3708b57fb18882235e4d32b8561002da5a96ba423298a59b219352c4358cc5752cdf64c55bd210d0274d5c197eae7655aeed67efc926850716e47d9ad066d10335985849f780cb8bfaf44bcb313d9313415e80d85c7f12fb2a3edbea7ac00eb81de59e69790273007d5b6e062d0af7237125a60000"], 0x1, 0x554c, &(0x7f000000ad00)="$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") r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', r8}, 0x94) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x88000}, 0x0) 8m9.36480172s ago: executing program 3 (id=590): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0xffff, @local}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) removexattr(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f0000000300)=@known='security.selinux\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = io_uring_setup(0x5e69, &(0x7f0000000100)={0x0, 0x1084, 0x40, 0x10000003, 0x2c3}) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000280), 0x0) io_uring_register$IORING_UNREGISTER_FILES(r4, 0x3, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) mincore(&(0x7f0000f0c000/0x3000)=nil, 0x0, &(0x7f0000afaf0a)=""/246) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) ioctl$AUTOFS_IOC_FAIL(r5, 0x4c80, 0x7000000) sendmmsg(r0, 0x0, 0x0, 0x0) 8m7.99825156s ago: executing program 3 (id=593): socket$inet6(0xa, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000006c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d2800128014000180090001006c617374000000000400028010000180060001006c6173740000000008000340000001"], 0xb4}}, 0x20050800) unshare(0x40020000) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x9, 0x5}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x8401) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x7ff, 0x5, 0xc, 0xfffffffffffffffd, 0x59c, 0xffffffffffffffff}) ioctl$SG_BLKTRACETEARDOWN(r3, 0x1276, 0x0) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x360}, 0x8, 0x7, 0x80, 0x0, 0x1, 0x101, 0x0}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r5) bind$unix(r5, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073f97a310000000008000440080000000900010073797a3000000000080003400000000114000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x814}, 0x0) sendmsg$NFT_MSG_GETOBJ(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03f50000000000000000020000000900"], 0x34}}, 0x0) 7m52.049033423s ago: executing program 32 (id=593): socket$inet6(0xa, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000006c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d2800128014000180090001006c617374000000000400028010000180060001006c6173740000000008000340000001"], 0xb4}}, 0x20050800) unshare(0x40020000) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x9, 0x5}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x8401) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x7ff, 0x5, 0xc, 0xfffffffffffffffd, 0x59c, 0xffffffffffffffff}) ioctl$SG_BLKTRACETEARDOWN(r3, 0x1276, 0x0) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x360}, 0x8, 0x7, 0x80, 0x0, 0x1, 0x101, 0x0}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r5) bind$unix(r5, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073f97a310000000008000440080000000900010073797a3000000000080003400000000114000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x814}, 0x0) sendmsg$NFT_MSG_GETOBJ(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03f50000000000000000020000000900"], 0x34}}, 0x0) 5m9.851686389s ago: executing program 0 (id=866): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7ff, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x9}, r6, 0xb}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {0x0, r6}}, 0x18) sendmsg$nl_route(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001500190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x6800) socket$nl_route(0x10, 0x3, 0x0) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000003c0)=0x1) shmdt(r7) 5m7.883827119s ago: executing program 0 (id=869): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8000) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f00000004c0)={{0x80}, 'port0\x00', 0x8, 0x100075, 0xffefffff, 0x4, 0x1ff, 0x0, 0x0, 0x0, 0x6}) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r3 = fanotify_init(0x8, 0x80000) fanotify_mark(r3, 0x105, 0x4800003a, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') fcntl$setown(0xffffffffffffffff, 0x8, 0x0) r4 = open(&(0x7f0000000580)='./file1\x00', 0x80342, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x8, 0x3, 0x5, 0x8, 0x3, 0x1, {0x1, 0x17f, 0x20ff, 0x5, 0x89, 0xd615, 0xb, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) chown(0x0, 0x0, 0x0) sendfile(r4, r4, &(0x7f0000000080), 0x7f03) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x1, 0x4000000) 5m5.285108129s ago: executing program 0 (id=871): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7ff, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x9}, r6, 0xb}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {0x0, r6}}, 0x18) sendmsg$nl_route(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x58}}, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001500190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x6800) socket$nl_route(0x10, 0x3, 0x0) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000003c0)=0x1) shmdt(r7) 5m2.701217818s ago: executing program 0 (id=873): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = io_uring_setup(0x62d0, &(0x7f0000000140)={0x0, 0x49fd, 0x10003, 0x20002, 0x185}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000400)='./file0\x00', 0x20404a, &(0x7f00000003c0)=ANY=[], 0xfd, 0x1e0, &(0x7f0000000500)="$eJzslj3PEkEQx/+7dznAaEwsbSwkUQuPu0ONDYk0VhYmvhALE4mcBDklAQohMegnsLezsPcLmGjrhzBoow1W2tis2du9YyV3vIoUz/yKef53z+zs3MxmFhAEcWT5+uXXVPysfSsCOI4yCvr9d2vuww3/z8Ufzz/euN54df/tp8LULWXFFGL9/W0AH+oWhunav1eX9d/b4Km+A44LWjfA4Gr9ABx3tQ7BcE/rx4buSX/XfdSJQvdhL2pJ4UnjSxNIU13Mb/aSoWXkx4z/D0bjbjOKwv4exar6zeocNSM/s18uVLaeUT8fHL7WVTDc0voqCkltVEmM7z9tz+NbS7/fwb4rIlPZYNWpE7mtcgBslwbAduu9nb7BC31k93mGcoSFWCQd/UeRrU2c+fZ7yYO+wgf2f68q262Y2/Ti/TW1JnkjJuo59jmZE1BM1tzCwSofIKPy6XwSbxjOGfNJjZLX8VUjW1gZjMYXO0+a7bAdPg2C6hXvkuddDirxIFJ2yfwrxfPp2Dx+5p0kcZiDZ83hsO8rmz4HymZNXB7PP47zZ9WzbK6zELdoaAaIiYgBU7O3+w4sN3+CIIhDcQbst9DYidC3CYzfujcPmCNBEARBEARBEARBELvxJwAA//8Pa0t8") socket$inet6(0xa, 0x805, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$USBDEVFS_ALLOW_SUSPEND(r4, 0x5522) close_range(r3, 0xffffffffffffffff, 0x0) getsockopt$bt_hci(r2, 0x84, 0x7d, &(0x7f0000000840)=""/4127, &(0x7f0000000000)=0x101f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='kfree\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000009c0)='kfree\x00'}, 0x10) r9 = userfaultfd(0x1) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f0000000040)) 5m0.800059007s ago: executing program 0 (id=876): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="660a000000000000611166000000000085000000d1000000"], &(0x7f0000000100)='GPL\x00'}, 0x94) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x645e}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x25, 0x1, @void}, 0x10) socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_io_uring_setup(0x110, &(0x7f0000000200)={0x0, 0xfec9, 0x8, 0x5, 0x3d4}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0xdb4, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) io_submit(0x0, 0x0, &(0x7f0000000280)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, r0}]) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29, 0xffffffffffffffff}, './file0\x00'}) exit(0x7) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r2, 0x18, &(0x7f0000000000)={0x8, 0xffffffffffffffff, 0x4, {0x1000000000004, 0xfffffffffffffffd}, 0x8}, 0x1) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1e00000000000000010000000000000000400000", @ANYRES32=r6, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="000000000380000004000000010000000000000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x52, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000500)='hrtimer_start\x00', r8, 0x0, 0x5}, 0x18) 4m59.585939015s ago: executing program 0 (id=879): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) sendto$inet(r1, &(0x7f0000000140)='^', 0x1, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @empty}, 0x10) listen(r1, 0xda90) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) accept4(r1, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)={0x14, 0x34, 0x701, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4044840}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') socket$inet6(0xa, 0x3, 0x3ff) unshare(0x6a040000) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="00080300000000000000330000000e0001006e657464657673696d0000000f0002006e657064657673696d30000008008e0000000000"], 0x3c}}, 0x20000040) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r4, 0x0, 0x20048010) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x9}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) socketpair(0x1a, 0x1, 0x11, &(0x7f0000000040)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000580), r5) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x24, r6, 0x773cba0c76b3a6fd, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0xc}]}, 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x4008000) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffc}}}, 0x32) 4m43.184517174s ago: executing program 33 (id=879): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) sendto$inet(r1, &(0x7f0000000140)='^', 0x1, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @empty}, 0x10) listen(r1, 0xda90) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) accept4(r1, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)={0x14, 0x34, 0x701, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4044840}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') socket$inet6(0xa, 0x3, 0x3ff) unshare(0x6a040000) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="00080300000000000000330000000e0001006e657464657673696d0000000f0002006e657064657673696d30000008008e0000000000"], 0x3c}}, 0x20000040) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r4, 0x0, 0x20048010) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x9}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) socketpair(0x1a, 0x1, 0x11, &(0x7f0000000040)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000580), r5) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x24, r6, 0x773cba0c76b3a6fd, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0xc}]}, 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x4008000) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffc}}}, 0x32) 5.590659175s ago: executing program 1 (id=1454): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x1408c, &(0x7f0000000780)={[{@jqfmt_vfsold}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@lazytime}, {@dioread_lock}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@usrjquota_path={'usrjquota', 0x3d, './file1'}}]}, 0x3, 0x450, &(0x7f0000000bc0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = syz_open_dev$media(&(0x7f0000000380), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000340)={0x80000000, 0x0, &(0x7f0000000200)=[{}, {{0x80000000, 0x0}, {0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r3, 0xc0347c03, &(0x7f00000001c0)={{r5, r4, 0x1, [0x0, 0xf7df]}, {0x80000000, r6, 0x7, [0x6]}, 0x1, [0x8, 0x3df]}) syz_open_dev$MSR(0x0, 0x0, 0x0) gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x80000021, 0x800000000004, @thr={&(0x7f0000003380)="8d3c4ff03946f8ddf432f7de90142382bfd8f6d348f1f399f6bcfd19048683bcc2c1cb6150397cf3009e6da5bd20b029c7e664dee62ad1f1a429f1b13512ef08494639248f69595ca646c98076782fd4d26753f45f40aab3d23349260a4f1aaf89266ad1118d3c0f6dd67206f7", &(0x7f0000003500)="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"}}, &(0x7f0000bbdffc)=0x0) timer_settime(r7, 0x1, &(0x7f0000000280), 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) r8 = syz_io_uring_setup(0x61bb, &(0x7f0000000080)={0x0, 0x9c03, 0x0, 0x0, 0x100002cc}, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r9, r10, 0x0) io_uring_enter(r8, 0x7a97, 0x0, 0x65, 0x0, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r11, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r11, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r11, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r11, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "cfc85eb51b0ace6a", "4617a9f6040839230fb7fead776dd8dc", "3f4051c4", "a44a889722b66244"}, 0x28) recvmmsg(r1, &(0x7f0000003280)=[{{0x0, 0x0, &(0x7f0000000100)}}, {{&(0x7f0000000400)=@pppoe={0x18, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000480)=""/177, 0xb1}, {&(0x7f0000000540)=""/104, 0x68}, {&(0x7f0000001040)=""/4096, 0x1000}, {&(0x7f0000000100)=""/32, 0x20}], 0x4}, 0x8}, {{&(0x7f00000005c0)=@isdn, 0x80, &(0x7f0000000900)=[{&(0x7f0000002040)=""/4096, 0x1000}, {&(0x7f0000000640)=""/162, 0xa2}, {&(0x7f0000000700)=""/5, 0x5}, {&(0x7f0000000a00)=""/60, 0x3c}, {&(0x7f0000000840)=""/184, 0xb8}], 0x5}, 0x2}], 0x3, 0x4000, 0x0) ioperm(0x3, 0x4, 0x6) 5.432310407s ago: executing program 5 (id=1456): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8000) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f00000000c0)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f00000004c0)={{0x80}, 'port0\x00', 0x8, 0x100075, 0xffefffff, 0x4, 0x1ff, 0x0, 0x0, 0x0, 0x6}) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = fanotify_init(0x8, 0x80000) fanotify_mark(r4, 0x105, 0x4800003a, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') fcntl$setown(r2, 0x8, 0x0) r5 = open(&(0x7f0000000580)='./file1\x00', 0x80342, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x8, 0x3, 0x5, 0x8, 0x3, 0x1, {0x1, 0x17f, 0x20ff, 0x5, 0x89, 0xd615, 0xb, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) chown(0x0, 0x0, 0x0) sendfile(r5, r5, &(0x7f0000000080), 0x7f03) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x1, 0x4000000) 5.430273298s ago: executing program 2 (id=1457): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7ff, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x9}, r6, 0xb}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {0x0, r6}}, 0x18) sendmsg$nl_route(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x58}}, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001500190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x6800) socket$nl_route(0x10, 0x3, 0x0) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000003c0)=0x1) shmdt(r7) 5.27224741s ago: executing program 5 (id=1458): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0xd, 0x200200090}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20040084}, 0x51) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r8 = openat(r7, &(0x7f0000000280)='./file1\x00', 0x169142, 0x0) open(&(0x7f0000000140)='./file1\x00', 0x141242, 0x40) fcntl$setlease(r8, 0x400, 0x1) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='sys_enter\x00', r9}, 0x10) io_cancel(0x0, 0x0, 0x0) rename(&(0x7f0000000800)='.\x02\x00', 0x0) r10 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r3, 0x4c80, 0xffffffffffffffb6) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x4c, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x58}, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7ff, 0x42}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}]}, 0x4c}}, 0x24044884) 5.25155829s ago: executing program 4 (id=1459): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7ff, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x9}, r6, 0xb}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {0x0, r6}}, 0x18) sendmsg$nl_route(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0800010064010102080009000300000008000900020000000800080000040000080009001d09000008000100e000000108000100000000000800010000000000"], 0x58}}, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000140)}], 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x6800) socket$nl_route(0x10, 0x3, 0x0) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000003c0)=0x1) shmdt(r7) 4.161268587s ago: executing program 4 (id=1460): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8000) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r3 = fanotify_init(0x8, 0x80000) fanotify_mark(r3, 0x105, 0x4800003a, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') fcntl$setown(r1, 0x8, 0x0) r4 = open(&(0x7f0000000580)='./file1\x00', 0x80342, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x8, 0x3, 0x5, 0x8, 0x3, 0x1, {0x1, 0x17f, 0x20ff, 0x5, 0x89, 0xd615, 0xb, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) chown(0x0, 0x0, 0x0) sendfile(r4, r4, &(0x7f0000000080), 0x7f03) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x1, 0x4000000) 4.139688177s ago: executing program 2 (id=1461): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7ff, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x9}, r6, 0xb}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {0x0, r6}}, 0x18) sendmsg$nl_route(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0800010064010102080009000300000008000900020000000800080000040000080009001d09000008000100e000000108000100000000000800010000000000"], 0x58}}, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001500190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5", 0x3f}], 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x6800) socket$nl_route(0x10, 0x3, 0x0) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000003c0)=0x1) shmdt(r7) 3.296007279s ago: executing program 5 (id=1462): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7ff, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x9}, r6, 0xb}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {0x0, r6}}, 0x18) sendmsg$nl_route(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0800010064010102080009000300000008000900020000000800080000040000080009001d09000008000100e000000108000100000000000800010000000000"], 0x58}}, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000140)}], 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000003c0)=0x1) shmdt(r7) 3.2952915s ago: executing program 1 (id=1463): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8000) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f00000004c0)={{0x80}, 'port0\x00', 0x8, 0x100075, 0xffefffff, 0x4, 0x1ff, 0x0, 0x0, 0x0, 0x6}) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = fanotify_init(0x8, 0x80000) fanotify_mark(r4, 0x105, 0x4800003a, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') fcntl$setown(r2, 0x8, 0x0) r5 = open(&(0x7f0000000580)='./file1\x00', 0x80342, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x8, 0x3, 0x5, 0x8, 0x3, 0x1, {0x1, 0x17f, 0x20ff, 0x5, 0x89, 0xd615, 0xb, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) chown(0x0, 0x0, 0x0) sendfile(r5, r5, &(0x7f0000000080), 0x7f03) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x1, 0x4000000) 3.23727434s ago: executing program 4 (id=1464): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000001000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x47, &(0x7f0000000440)=ANY=[], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={0x20, r2, 0x1, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TX_RATES={0x4}]}, 0x20}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) r4 = socket(0x10, 0x3, 0x0) r5 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r5, &(0x7f00000000c0)={0x2, 0xfffe, @multicast2}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a000400010008001700", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x2000082e}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00'}) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) r8 = open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0) ftruncate(r8, 0x2007ffc) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r9 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r9, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendfile(r8, r8, 0x0, 0x800000009) 3.045943493s ago: executing program 2 (id=1465): r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0xfffe, @multicast2}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x2000082e}, 0x0) 2.257459625s ago: executing program 5 (id=1466): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8000) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000004c0)=ANY=[], &(0x7f00000000c0)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f00000004c0)={{0x80}, 'port0\x00', 0x8, 0x100075, 0xffefffff, 0x4, 0x1ff, 0x0, 0x0, 0x0, 0x6}) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = fanotify_init(0x8, 0x80000) fanotify_mark(r4, 0x105, 0x4800003a, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') fcntl$setown(r2, 0x8, 0x0) r5 = open(&(0x7f0000000580)='./file1\x00', 0x80342, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x8, 0x3, 0x5, 0x8, 0x3, 0x1, {0x1, 0x17f, 0x20ff, 0x5, 0x89, 0xd615, 0xb, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) chown(0x0, 0x0, 0x0) sendfile(r5, r5, &(0x7f0000000080), 0x7f03) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x1, 0x4000000) 2.241669116s ago: executing program 1 (id=1467): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8000) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f00000000c0)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f00000004c0)={{0x80}, 'port0\x00', 0x8, 0x100075, 0xffefffff, 0x4, 0x1ff, 0x0, 0x0, 0x0, 0x6}) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = fanotify_init(0x8, 0x80000) fanotify_mark(r4, 0x105, 0x4800003a, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') fcntl$setown(r2, 0x8, 0x0) r5 = open(&(0x7f0000000580)='./file1\x00', 0x80342, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x8, 0x3, 0x5, 0x8, 0x3, 0x1, {0x1, 0x17f, 0x20ff, 0x5, 0x89, 0xd615, 0xb, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) chown(0x0, 0x0, 0x0) sendfile(r5, r5, &(0x7f0000000080), 0x7f03) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x1, 0x4000000) 2.240687525s ago: executing program 2 (id=1468): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7ff, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x9}, r6, 0xb}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {0x0, r6}}, 0x18) sendmsg$nl_route(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0800010064010102080009000300000008000900020000000800080000040000080009001d09000008000100e000000108000100000000000800010000000000"], 0x58}}, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000140)}], 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x6800) socket$nl_route(0x10, 0x3, 0x0) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000003c0)=0x1) shmdt(r7) 2.208776986s ago: executing program 4 (id=1469): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7ff, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x9}, r6, 0xb}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {0x0, r6}}, 0x18) sendmsg$nl_route(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[], 0x58}}, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001500190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x6800) socket$nl_route(0x10, 0x3, 0x0) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000003c0)=0x1) shmdt(r7) 2.083500578s ago: executing program 5 (id=1470): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c000000260001000000", @ANYRES32, @ANYBLOB="00000000000000000c001a80080005"], 0x2c}, 0x1, 0x0, 0x0, 0x48011}, 0x20000000) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x4000000) r5 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_int(r5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000280)={'syz_tun\x00'}) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r7 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x8, &(0x7f0000000000)={0x0, 0x1, 0x7}) mq_timedreceive(r7, &(0x7f0000000640)=""/4096, 0x1000, 0x0, 0x0) mq_timedsend(r7, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) ptrace$ARCH_MAP_VDSO_X32(0x1e, r0, 0x400, 0x2001) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 2.082794158s ago: executing program 1 (id=1471): r0 = socket$kcm(0x2d, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000013924aed5e019b0cde00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400030076657468305f766c616e000000000000"], 0x34}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="2d100000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0x480, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000080)) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000001000000080001003f0000000c000200700f00000000ffff0c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, 0x0, 0xc000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8001c00180081064e81f782db44b9b545c7910006007c09", 0x18}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e3, &(0x7f0000000180)={r0, r4}) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x12, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000010000000000000000000000711206000000000095"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x67, '\x00', 0x0, @cgroup_sock_addr=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r8 = socket(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0700000004000000080000000b00000000000000", @ANYRES32, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100"/27], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000010000000000000000181200007add4dfe3f6fc7b5a371fd2d0591ae6dc487665d7b97bb08be0cbfaf73ee51dd6d932b87bc74da2d824db5f8ce657387eb73549713c4a8c4fcccc47397cc1c87d2ba80afd9db68f54c3c4839e555c314af98bbc7fbce289c51b53d5c54b98324247ba9416666c717866e6cf8960fbcc2469bfc8819eb2499d0c6ada3360414a6d2532db9e897b74c54165a0071fb6924346e9d50e45c114d6ad8ef48321a1154920e0a30b955b9d1d18be125951b", @ANYRES32=r10, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x25}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000000)) r11 = socket(0x1d, 0x2, 0x6) r12 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r12, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x80) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000001700)={'ip6tnl0\x00'}) sendmsg$nl_route_sched(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x20015810}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) 1.160235212s ago: executing program 2 (id=1472): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8000) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r3 = fanotify_init(0x8, 0x80000) fanotify_mark(r3, 0x105, 0x4800003a, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') fcntl$setown(r1, 0x8, 0x0) r4 = open(&(0x7f0000000580)='./file1\x00', 0x80342, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x8, 0x3, 0x5, 0x8, 0x3, 0x1, {0x1, 0x17f, 0x20ff, 0x5, 0x89, 0xd615, 0xb, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) chown(0x0, 0x0, 0x0) sendfile(r4, r4, &(0x7f0000000080), 0x7f03) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x1, 0x4000000) 1.102419533s ago: executing program 1 (id=1473): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7ff, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x9}, r6, 0xb}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {0x0, r6}}, 0x18) sendmsg$nl_route(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0800010064010102080009000300000008000900020000000800080000040000080009001d09000008000100e000000108000100000000000800010000000000"], 0x58}}, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001500190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e000000", 0x44}], 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x6800) socket$nl_route(0x10, 0x3, 0x0) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000003c0)=0x1) shmdt(r7) 808.386347ms ago: executing program 2 (id=1474): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7ff, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x9}, r6, 0xb}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {0x0, r6}}, 0x18) sendmsg$nl_route(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0800010064010102080009000300000008000900020000000800080000040000080009001d09000008000100e000000108000100000000000800010000000000"], 0x58}}, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000140)}], 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000003c0)=0x1) shmdt(r7) 395.835584ms ago: executing program 5 (id=1475): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="f1a3a72df609fd6ae0f8490f5b413ade1b13c52c1e64d7fb72b7201c9edbef9539aef4d58321f41d54ed66eb3c0bc625f45494171cc4682229b16854b25bab54065d3575ad4ec077160efe3beb70d18767adf4faaa1138c319a7391a1f1e176fe3af358b26c5afc726a3e6e40dc513c2cbaff3f0fcaf312a204718f09e30354e0d3acd81761d30153b22c08cd188738d0d5da1fea4ff93750fb221c82e302fbd3eb9068d0cbb9f68f6ca9df6f308f26a8fae3882b2dc456fe6e8fe", @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x4e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x35}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[], 0x180}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020}, 0x2020) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0xb0) r5 = dup(0xffffffffffffffff) write$6lowpan_enable(r5, 0x0, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) ioctl$sock_ifreq(r7, 0x8922, &(0x7f00000000c0)={'batadv_slave_0\x00', @ifru_flags=0x1}) setsockopt$SO_BINDTODEVICE_wg(r6, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sendto$inet(r6, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) 196.128427ms ago: executing program 4 (id=1476): r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0xfffe, @multicast2}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x2000082e}, 0x0) 142.031668ms ago: executing program 4 (id=1477): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8000) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f00000004c0)={{0x80}, 'port0\x00', 0x8, 0x100075, 0xffefffff, 0x4, 0x1ff, 0x0, 0x0, 0x0, 0x6}) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = fanotify_init(0x8, 0x80000) fanotify_mark(r4, 0x105, 0x4800003a, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') fcntl$setown(r2, 0x8, 0x0) r5 = open(&(0x7f0000000580)='./file1\x00', 0x80342, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x8, 0x3, 0x5, 0x8, 0x3, 0x1, {0x1, 0x17f, 0x20ff, 0x5, 0x89, 0xd615, 0xb, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) chown(0x0, 0x0, 0x0) sendfile(r5, r5, &(0x7f0000000080), 0x7f03) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x1, 0x4000000) 0s ago: executing program 1 (id=1478): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8000) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000004c0)=ANY=[], &(0x7f00000000c0)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f00000004c0)={{0x80}, 'port0\x00', 0x8, 0x100075, 0xffefffff, 0x4, 0x1ff, 0x0, 0x0, 0x0, 0x6}) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = fanotify_init(0x8, 0x80000) fanotify_mark(r4, 0x105, 0x4800003a, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') fcntl$setown(r2, 0x8, 0x0) r5 = open(&(0x7f0000000580)='./file1\x00', 0x80342, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x8, 0x3, 0x5, 0x8, 0x3, 0x1, {0x1, 0x17f, 0x20ff, 0x5, 0x89, 0xd615, 0xb, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) chown(0x0, 0x0, 0x0) sendfile(r5, r5, &(0x7f0000000080), 0x7f03) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x1, 0x4000000) kernel console output (not intermixed with test programs): 02 compat=0 ip=0x7f997c98e929 code=0x7ffc0000 [ 406.898214][ T28] audit: type=1326 audit(1750961981.750:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8780 comm="syz.2.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7f997c98e929 code=0x7ffc0000 [ 407.026234][ T28] audit: type=1326 audit(1750961982.180:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8780 comm="syz.2.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f997c98e929 code=0x7ffc0000 [ 407.160623][ T28] audit: type=1326 audit(1750961982.190:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8780 comm="syz.2.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f997c98e929 code=0x7ffc0000 [ 407.830691][ T8795] 9pnet_virtio: no channels available for device syz [ 408.317715][ T8797] overlayfs: failed to clone upperpath [ 412.210311][ T8813] process 'syz.3.511' launched '/dev/fd/3' with NULL argv: empty string added [ 412.426271][ T8803] loop2: detected capacity change from 0 to 32768 [ 413.308437][ T8803] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 413.319128][ T8803] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 413.328311][ T8803] BTRFS info (device loop2): setting nodatacow, compression disabled [ 413.337257][ T8803] BTRFS info (device loop2): max_inline at 0 [ 413.406567][ T8803] BTRFS info (device loop2): enabling disk space caching [ 413.413786][ T8803] BTRFS info (device loop2): turning off barriers [ 413.420300][ T8803] BTRFS info (device loop2): turning on flush-on-commit [ 413.428807][ T8803] BTRFS info (device loop2): doing ref verification [ 413.435852][ T8803] BTRFS info (device loop2): force clearing of disk cache [ 413.445559][ T8803] BTRFS info (device loop2): enabling ssd optimizations [ 413.453874][ T8803] BTRFS info (device loop2): max_inline at 4096 [ 413.460756][ T8803] BTRFS info (device loop2): disk space caching is enabled [ 413.468893][ T8803] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 413.497509][ T8803] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 413.509395][ T8826] netlink: 4 bytes leftover after parsing attributes in process `syz.1.514'. [ 413.542546][ T8803] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 413.542901][ T8803] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 413.557524][ T8803] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 413.568929][ T8803] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 413.582335][ T8803] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 413.600871][ T8803] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 413.612874][ T8803] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 413.668788][ T8803] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 413.868060][ T8803] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 413.925119][ T8826] netlink: 4 bytes leftover after parsing attributes in process `syz.1.514'. [ 414.030045][ T8803] BTRFS error (device loop2): open_ctree failed: -12 [ 414.051576][ T8846] netlink: 20 bytes leftover after parsing attributes in process `syz.1.514'. [ 414.065260][ T8835] netlink: 4 bytes leftover after parsing attributes in process `syz.1.514'. [ 417.520985][ T8866] syz.2.520 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 417.583289][ T8868] overlayfs: failed to clone upperpath [ 417.643483][ T8870] loop0: detected capacity change from 0 to 512 [ 417.793518][ T8870] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.522: casefold flag without casefold feature [ 417.837506][ T8874] loop1: detected capacity change from 0 to 2048 [ 417.853162][ T8875] overlayfs: failed to clone upperpath [ 417.893564][ T8870] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.522: couldn't read orphan inode 15 (err -117) [ 417.928730][ T8874] UDF-fs: bad mount option "uid=sº+Ç1Výõ&D×{¬?ð÷맖àëâÓ<`ÔVvœ mÐ^ºòäÒ‚cŠº˜¦ÔmöÓa|lb¡+\ôß^—ÞAþHm{%6Œ©k¥¶yeañ= N¦â™|ÛÆ´»_ÉÎÚPoe¨ÅPÉÝIR*Ü8‚áÍ…9Þ§ÜU!£³‰ˆk¨”yÛCøÝEó" or missing value [ 417.959184][ T8878] netlink: 4 bytes leftover after parsing attributes in process `syz.3.525'. [ 417.996964][ T8870] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 418.034923][ T8878] netlink: 4 bytes leftover after parsing attributes in process `syz.3.525'. [ 418.201246][ T8882] netlink: 4 bytes leftover after parsing attributes in process `syz.3.525'. [ 418.218761][ T8882] netlink: 20 bytes leftover after parsing attributes in process `syz.3.525'. [ 418.651941][ T8878] netlink: 4 bytes leftover after parsing attributes in process `syz.3.525'. [ 418.792497][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.586174][ T8893] xt_connbytes: Forcing CT accounting to be enabled [ 419.593674][ T8893] xt_bpf: check failed: parse error [ 420.873339][ T8896] loop1: detected capacity change from 0 to 2048 [ 420.880657][ T8896] EXT4-fs: inline encryption not supported [ 420.901821][ T8896] EXT4-fs: Ignoring removed mblk_io_submit option [ 420.920537][ T8896] ext4: Unknown parameter 'audit' [ 422.102716][ T8904] kthread_run failed with err -4 [ 422.835602][ T8917] loop0: detected capacity change from 0 to 2048 [ 423.710172][ T8917] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 423.761510][ T8919] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 425.279482][ T8931] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 427.521977][ T8951] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 428.558893][ T8962] dvmrp8: entered allmulticast mode [ 429.187934][ T8966] netlink: 4 bytes leftover after parsing attributes in process `syz.1.549'. [ 429.249978][ T8966] netlink: 4 bytes leftover after parsing attributes in process `syz.1.549'. [ 429.348513][ T8973] netlink: 4 bytes leftover after parsing attributes in process `syz.1.549'. [ 429.370266][ T8973] netlink: 20 bytes leftover after parsing attributes in process `syz.1.549'. [ 429.410703][ T8966] netlink: 4 bytes leftover after parsing attributes in process `syz.1.549'. [ 429.692590][ T8987] netlink: 4 bytes leftover after parsing attributes in process `syz.0.551'. [ 431.079056][ T8998] loop1: detected capacity change from 0 to 2048 [ 431.452582][ T8998] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 431.616924][ T9002] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 431.725974][ T8995] netlink: 4 bytes leftover after parsing attributes in process `syz.0.551'. [ 431.737298][ T8996] netlink: 20 bytes leftover after parsing attributes in process `syz.0.551'. [ 433.538778][ T9027] overlayfs: failed to clone upperpath [ 433.641937][ T9029] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 434.474965][ T9030] loop1: detected capacity change from 0 to 32768 [ 434.548639][ T9030] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.548 (9030) [ 434.575626][ T9030] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 434.585843][ T9030] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 434.594582][ T9030] BTRFS info (device loop1): setting nodatacow, compression disabled [ 434.602694][ T9030] BTRFS info (device loop1): max_inline at 0 [ 434.608742][ T9030] BTRFS info (device loop1): enabling disk space caching [ 434.615806][ T9030] BTRFS info (device loop1): turning off barriers [ 434.622215][ T9030] BTRFS info (device loop1): turning on flush-on-commit [ 434.629205][ T9030] BTRFS info (device loop1): doing ref verification [ 434.635848][ T9030] BTRFS info (device loop1): force clearing of disk cache [ 434.642954][ T9030] BTRFS info (device loop1): enabling ssd optimizations [ 434.650002][ T9030] BTRFS info (device loop1): max_inline at 4096 [ 434.656300][ T9030] BTRFS info (device loop1): disk space caching is enabled [ 434.857343][ T9030] BTRFS info (device loop1): auto enabling async discard [ 434.920581][ T9030] BTRFS info (device loop1): rebuilding free space tree [ 434.940701][ T9030] BTRFS info (device loop1): disabling free space tree [ 434.947890][ T9030] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 434.957675][ T9030] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 436.150716][ T28] audit: type=1800 audit(1750962011.800:307): pid=9060 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.548" name="bus" dev="overlay" ino=270 res=0 errno=0 [ 436.945043][ T9065] netlink: 4 bytes leftover after parsing attributes in process `syz.2.556'. [ 436.986518][ T9065] netlink: 20 bytes leftover after parsing attributes in process `syz.2.556'. [ 437.381952][ T5766] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 437.470022][ T9071] loop0: detected capacity change from 0 to 16 [ 437.530802][ T9071] erofs: (device loop0): mounted with root inode @ nid 36. [ 437.876755][ T9080] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.884109][ T9080] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.897357][ T9080] bridge0: entered allmulticast mode [ 437.925629][ T9083] bridge_slave_1: left allmulticast mode [ 437.931477][ T9083] bridge_slave_1: left promiscuous mode [ 437.947592][ T9084] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 437.979457][ T9084] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -23 in[64, 4032] out[1851] [ 437.991090][ T9084] erofs: (device loop0): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 438.141475][ T9085] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 438.160140][ T9085] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 438.171113][ T9085] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -23 in[64, 4032] out[1851] [ 438.182473][ T9085] erofs: (device loop0): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 438.606123][ T9083] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.900955][ T9083] bridge_slave_0: left allmulticast mode [ 438.994670][ T9083] bridge_slave_0: left promiscuous mode [ 439.077937][ T9083] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.423193][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.430117][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.202163][ T9096] loop1: detected capacity change from 0 to 32768 [ 441.476735][ T9096] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 441.939550][ T28] audit: type=1800 audit(1750962017.530:308): pid=9111 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.563" name="file1" dev="loop1" ino=17058 res=0 errno=0 [ 443.565145][ T5766] ocfs2: Unmounting device (7,1) on (node local) [ 443.632097][ T9124] netlink: 24 bytes leftover after parsing attributes in process `syz.2.566'. [ 444.470085][ T9124] loop2: detected capacity change from 0 to 32768 [ 444.477686][ T9124] XFS: noikeep mount option is deprecated. [ 444.483594][ T9124] xfs: Unknown parameter 'smackfshat' [ 445.226396][ T7890] I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 446.547616][ T9139] 9pnet_virtio: no channels available for device syz [ 446.976286][ T9144] futex_wake_op: syz.1.565 tries to shift op by -1; fix this program [ 448.714640][ T9160] loop1: detected capacity change from 0 to 2048 [ 448.729196][ T28] audit: type=1326 audit(1750962024.340:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9140 comm="syz.1.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e91f8e929 code=0x7ffc0000 [ 448.814622][ T28] audit: type=1326 audit(1750962024.340:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9140 comm="syz.1.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e91f8e929 code=0x7ffc0000 [ 448.866927][ T28] audit: type=1326 audit(1750962024.340:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9140 comm="syz.1.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2e91f8d290 code=0x7ffc0000 [ 448.900025][ T9160] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 448.912250][ T9160] ext4 filesystem being mounted at /135/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 448.988995][ T28] audit: type=1326 audit(1750962024.340:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9140 comm="syz.1.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e91f8e929 code=0x7ffc0000 [ 449.018511][ T9168] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 449.046532][ T28] audit: type=1326 audit(1750962024.340:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9140 comm="syz.1.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e91f8e929 code=0x7ffc0000 [ 449.116714][ T28] audit: type=1326 audit(1750962024.340:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9140 comm="syz.1.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f2e91f8e929 code=0x7ffc0000 [ 449.141833][ T28] audit: type=1326 audit(1750962024.340:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9140 comm="syz.1.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e91f8e929 code=0x7ffc0000 [ 449.165328][ T28] audit: type=1326 audit(1750962024.340:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9140 comm="syz.1.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e91f8e929 code=0x7ffc0000 [ 449.188777][ T28] audit: type=1326 audit(1750962024.340:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9140 comm="syz.1.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2e91f8e929 code=0x7ffc0000 [ 449.211573][ T28] audit: type=1326 audit(1750962024.340:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9140 comm="syz.1.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e91f8e929 code=0x7ffc0000 [ 449.508587][ T5766] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.884299][ T9176] netlink: 4 bytes leftover after parsing attributes in process `syz.1.574'. [ 450.018825][ T9180] netlink: 4 bytes leftover after parsing attributes in process `syz.1.574'. [ 450.192803][ T9176] netlink: 4 bytes leftover after parsing attributes in process `syz.1.574'. [ 450.244090][ T9182] netlink: 20 bytes leftover after parsing attributes in process `syz.1.574'. [ 450.516789][ T9189] loop0: detected capacity change from 0 to 1024 [ 450.773709][ T9189] hfsplus: extend alloc file! (8192,8,110) [ 451.144607][ T7309] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 451.954822][ T9196] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 451.967651][ T9196] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 453.202920][ T9204] 9pnet_virtio: no channels available for device syz [ 453.284220][ T9206] overlayfs: failed to clone upperpath [ 455.518255][ T9220] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.525856][ T9220] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.538498][ T9220] bridge0: entered allmulticast mode [ 456.276529][ T9224] bridge_slave_1: left allmulticast mode [ 456.284574][ T9224] bridge_slave_1: left promiscuous mode [ 456.313190][ T9224] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.364303][ T9224] bridge_slave_0: left allmulticast mode [ 457.374589][ T9224] bridge_slave_0: left promiscuous mode [ 457.391795][ T9224] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.713073][ T9225] netlink: 4 bytes leftover after parsing attributes in process `syz.1.586'. [ 457.722114][ T9225] netlink: 4 bytes leftover after parsing attributes in process `syz.1.586'. [ 457.731063][ T9225] netlink: 4 bytes leftover after parsing attributes in process `syz.1.586'. [ 457.739950][ T9225] netlink: 4 bytes leftover after parsing attributes in process `syz.1.586'. [ 457.748768][ T9225] netlink: 4 bytes leftover after parsing attributes in process `syz.1.586'. [ 457.757603][ T9225] netlink: 4 bytes leftover after parsing attributes in process `syz.1.586'. [ 457.766436][ T9225] netlink: 4 bytes leftover after parsing attributes in process `syz.1.586'. [ 457.775335][ T9225] netlink: 4 bytes leftover after parsing attributes in process `syz.1.586'. [ 457.784137][ T9225] netlink: 4 bytes leftover after parsing attributes in process `syz.1.586'. [ 457.792995][ T9225] netlink: 4 bytes leftover after parsing attributes in process `syz.1.586'. [ 458.526271][ T9249] IPVS: sync thread started: state = BACKUP, mcast_ifn = wlan0, syncid = 1, id = 0 [ 462.061955][ T9274] random: crng reseeded on system resumption [ 465.008770][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 465.008788][ T28] audit: type=1326 audit(1750962039.980:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9283 comm="syz.1.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e91f8e929 code=0x7ffc0000 [ 465.095985][ T28] audit: type=1326 audit(1750962039.980:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9283 comm="syz.1.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2e91f8d290 code=0x7ffc0000 [ 465.121498][ T28] audit: type=1326 audit(1750962039.990:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9283 comm="syz.1.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2e91f8e52b code=0x7ffc0000 [ 465.147630][ T28] audit: type=1326 audit(1750962039.990:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9283 comm="syz.1.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e91f8e929 code=0x7ffc0000 [ 465.241244][ T28] audit: type=1326 audit(1750962040.000:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9283 comm="syz.1.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2e91f8d290 code=0x7ffc0000 [ 465.376322][ T28] audit: type=1326 audit(1750962040.000:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9283 comm="syz.1.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e91f8e929 code=0x7ffc0000 [ 466.094101][ T28] audit: type=1326 audit(1750962040.000:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9283 comm="syz.1.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7f2e91f8e929 code=0x7ffc0000 [ 466.118071][ T28] audit: type=1326 audit(1750962040.150:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9283 comm="syz.1.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e91f8e929 code=0x7ffc0000 [ 466.141152][ T28] audit: type=1326 audit(1750962040.160:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9283 comm="syz.1.598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e91f8e929 code=0x7ffc0000 [ 468.475959][ T9315] futex_wake_op: syz.2.602 tries to shift op by -1; fix this program [ 468.835444][ T28] audit: type=1326 audit(1750962044.440:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9313 comm="syz.2.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f997c98e929 code=0x7ffc0000 [ 468.986528][ T9324] loop2: detected capacity change from 0 to 2048 [ 469.779377][ T9324] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 469.793486][ T9324] ext4 filesystem being mounted at /150/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 470.153490][ T5765] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.226757][ T9337] xt_connbytes: Forcing CT accounting to be enabled [ 470.233763][ T9337] xt_bpf: check failed: parse error [ 474.169469][ T9365] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 [ 475.076500][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 475.076513][ T28] audit: type=1326 audit(1750962049.320:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9356 comm="syz.0.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f381d78e929 code=0x7ffc0000 [ 475.138719][ T9367] loop2: detected capacity change from 0 to 32768 [ 475.157820][ T9367] (syz.2.611,9367,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 475.178215][ T9367] (syz.2.611,9367,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 475.226617][ T9367] (syz.2.611,9367,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC. [ 475.251079][ T28] audit: type=1326 audit(1750962049.330:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9356 comm="syz.0.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f381d78d290 code=0x7ffc0000 [ 475.254228][ T9367] JBD2: Ignoring recovery information on journal [ 475.306651][ T28] audit: type=1326 audit(1750962049.340:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9356 comm="syz.0.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f381d78e52b code=0x7ffc0000 [ 475.334247][ T28] audit: type=1326 audit(1750962049.340:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9356 comm="syz.0.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f381d78e929 code=0x7ffc0000 [ 475.356986][ T28] audit: type=1326 audit(1750962049.350:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9356 comm="syz.0.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f381d78d290 code=0x7ffc0000 [ 475.380183][ T28] audit: type=1326 audit(1750962049.820:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9356 comm="syz.0.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f381d78e929 code=0x7ffc0000 [ 475.403201][ T28] audit: type=1326 audit(1750962049.820:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9356 comm="syz.0.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f381d78e929 code=0x7ffc0000 [ 475.497374][ T9367] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 476.974279][ T5765] ocfs2: Unmounting device (7,2) on (node local) [ 480.840177][ T5774] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 480.853608][ T5774] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 480.862692][ T5774] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 481.094445][ T5774] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 481.103511][ T5774] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 481.116094][ T5774] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 481.140074][ T5778] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 482.608658][ T5778] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 482.621025][ T5778] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 482.718301][ T5778] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 482.737246][ T5778] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 482.746340][ T5778] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 483.160557][ T8228] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.788635][ T9418] loop0: detected capacity change from 0 to 2048 [ 484.541928][ T9418] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 484.553593][ T9418] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 484.563884][ T9418] UDF-fs: Scanning with blocksize 512 failed [ 484.581257][ T9418] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 484.592795][ T9418] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 484.600612][ T9418] UDF-fs: Scanning with blocksize 1024 failed [ 484.607614][ T9418] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 484.618756][ T9418] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 484.654284][ T9418] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 484.662627][ T9418] UDF-fs: Scanning with blocksize 2048 failed [ 484.669569][ T9418] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 484.682413][ T9418] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 484.699460][ T9418] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 484.709219][ T9418] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 484.716970][ T9418] UDF-fs: Scanning with blocksize 4096 failed [ 484.723067][ T9418] UDF-fs: warning (device loop0): udf_fill_super: No partition found (1) [ 484.777078][ T8228] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.814554][ T5774] Bluetooth: hci2: command tx timeout [ 485.766801][ T8228] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.894569][ T5774] Bluetooth: hci2: command tx timeout [ 486.907061][ T8228] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.241851][ T9424] loop0: detected capacity change from 0 to 512 [ 487.278350][ T9424] ext2: Unknown parameter 'smackfsfloor' [ 487.855682][ T5856] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 488.218373][ T5856] usb 3-1: Using ep0 maxpacket: 32 [ 488.255065][ T5856] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 488.289091][ T5856] usb 3-1: config 0 interface 0 has no altsetting 0 [ 488.310143][ T5856] usb 3-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 488.319699][ T5856] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.336598][ T5856] usb 3-1: config 0 descriptor?? [ 488.457826][ T12] Bluetooth: hci4: Frame reassembly failed (-84) [ 488.574040][ T9428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 488.583534][ T9428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 488.600106][ T9428] loop2: detected capacity change from 0 to 512 [ 488.607265][ T9428] EXT4-fs: inline encryption not supported [ 488.702709][ T9428] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 488.733452][ T9428] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 488.743690][ T9428] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 489.018315][ T9396] chnl_net:caif_netlink_parms(): no params data found [ 489.045086][ T5778] Bluetooth: hci2: command tx timeout [ 489.461389][ C0] hrtimer: interrupt took 35776 ns [ 490.311719][ T5856] usbhid 3-1:0.0: can't add hid device: -71 [ 490.325478][ T5856] usbhid: probe of 3-1:0.0 failed with error -71 [ 490.364921][ T5856] usb 3-1: USB disconnect, device number 17 [ 490.455893][ T9446] trusted_key: encrypted_key: insufficient parameters specified [ 490.498183][ T5778] Bluetooth: hci4: command 0x1003 tx timeout [ 490.504540][ T5774] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 490.737952][ T9396] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.764787][ T9396] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.774955][ T9396] bridge_slave_0: entered allmulticast mode [ 490.799883][ T9396] bridge_slave_0: entered promiscuous mode [ 490.828438][ T9396] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.847154][ T9396] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.863463][ T9396] bridge_slave_1: entered allmulticast mode [ 490.871335][ T9396] bridge_slave_1: entered promiscuous mode [ 490.976867][ T9396] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 490.989650][ T9396] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 491.055159][ T5774] Bluetooth: hci2: command tx timeout [ 491.162976][ T9396] team0: Port device team_slave_0 added [ 491.210442][ T9396] team0: Port device team_slave_1 added [ 491.672118][ T9479] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 492.811031][ T9483] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 492.819064][ T9483] IPv6: NLM_F_CREATE should be set when creating new route [ 493.046802][ T28] audit: type=1326 audit(1750962068.690:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9488 comm="syz.0.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f381d78e929 code=0x7ffc0000 [ 493.069084][ C0] vkms_vblank_simulate: vblank timer overrun [ 493.110702][ T28] audit: type=1326 audit(1750962068.690:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9488 comm="syz.0.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f381d78e929 code=0x7ffc0000 [ 493.149442][ T28] audit: type=1326 audit(1750962068.800:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9488 comm="syz.0.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f381d78e929 code=0x7ffc0000 [ 493.171652][ C0] vkms_vblank_simulate: vblank timer overrun [ 493.182267][ T28] audit: type=1326 audit(1750962068.800:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9488 comm="syz.0.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f381d78e929 code=0x7ffc0000 [ 493.204933][ C0] vkms_vblank_simulate: vblank timer overrun [ 493.215896][ T9396] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 493.239146][ T9396] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 493.273001][ T28] audit: type=1326 audit(1750962068.800:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9488 comm="syz.0.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f381d78e929 code=0x7ffc0000 [ 493.295450][ T9396] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 493.465511][ T28] audit: type=1326 audit(1750962068.840:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9488 comm="syz.0.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f381d78e929 code=0x7ffc0000 [ 493.491903][ T28] audit: type=1326 audit(1750962068.840:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9488 comm="syz.0.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f381d78e929 code=0x7ffc0000 [ 493.524906][ T28] audit: type=1326 audit(1750962068.840:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9488 comm="syz.0.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f381d78e929 code=0x7ffc0000 [ 493.554829][ T9396] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 493.581981][ T9396] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 493.584442][ T28] audit: type=1326 audit(1750962068.880:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9488 comm="syz.0.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f381d78e929 code=0x7ffc0000 [ 493.608015][ C0] vkms_vblank_simulate: vblank timer overrun [ 493.636960][ C0] vkms_vblank_simulate: vblank timer overrun [ 493.645740][ T9396] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 493.664406][ T28] audit: type=1326 audit(1750962068.880:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9488 comm="syz.0.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f381d78e929 code=0x7ffc0000 [ 493.679291][ C0] vkms_vblank_simulate: vblank timer overrun [ 494.826427][ T9396] hsr_slave_0: entered promiscuous mode [ 494.842820][ T9396] hsr_slave_1: entered promiscuous mode [ 494.857224][ T9396] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 494.875847][ T9396] Cannot create hsr debugfs directory [ 495.602393][ T9510] netlink: 'syz.2.641': attribute type 10 has an invalid length. [ 497.650858][ T8228] hsr_slave_0: left promiscuous mode [ 497.679732][ T9533] loop1: detected capacity change from 0 to 1024 [ 497.699239][ T9533] EXT4-fs: Ignoring removed nomblk_io_submit option [ 497.912709][ T8228] hsr_slave_1: left promiscuous mode [ 497.925094][ T8228] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 497.932805][ T8228] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 498.344552][ T9546] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 498.452052][ T23] IPVS: starting estimator thread 0... [ 498.481654][ T9533] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 498.596594][ T8228] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 498.644637][ T9547] IPVS: using max 22 ests per chain, 52800 per kthread [ 498.660028][ T8228] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 498.760066][ T8228] veth1_macvtap: left promiscuous mode [ 498.794586][ T8228] veth0_macvtap: left promiscuous mode [ 498.813297][ T9556] loop2: detected capacity change from 0 to 16 [ 498.820623][ T9556] erofs: Unknown parameter '0xffffffffffffffff' [ 498.839767][ T8228] veth1_vlan: left promiscuous mode [ 498.855137][ T8228] veth0_vlan: left promiscuous mode [ 499.064740][ T5770] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 499.354571][ T5770] usb 2-1: Using ep0 maxpacket: 32 [ 499.465634][ T5770] usb 2-1: unable to get BOS descriptor or descriptor too short [ 499.570934][ T5770] usb 2-1: config 7 has an invalid interface number: 128 but max is 0 [ 499.588083][ T5770] usb 2-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 499.612167][ T5770] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 499.624907][ T5770] usb 2-1: config 7 has no interface number 0 [ 499.633516][ T5770] usb 2-1: config 7 interface 128 altsetting 2 has an invalid endpoint with address 0x17, skipping [ 499.644948][ T5770] usb 2-1: config 7 interface 128 altsetting 2 endpoint 0x87 has an invalid bInterval 209, changing to 11 [ 499.656968][ T5770] usb 2-1: config 7 interface 128 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 499.685748][ T5770] usb 2-1: config 7 interface 128 has no altsetting 0 [ 499.694847][ T23] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 499.727451][ T5770] usb 2-1: New USB device found, idVendor=6033, idProduct=4108, bcdDevice=cc.13 [ 499.745292][ T5770] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.759615][ T5770] usb 2-1: Product: syz [ 499.764001][ T5770] usb 2-1: Manufacturer: syz [ 499.770652][ T5770] usb 2-1: SerialNumber: syz [ 499.797978][ T9533] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 500.651243][ T8228] team0 (unregistering): Port device team_slave_1 removed [ 500.723013][ T8228] team0 (unregistering): Port device team_slave_0 removed [ 500.801351][ T8228] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 500.870420][ T8228] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 501.757473][ T8228] bond0 (unregistering): Released all slaves [ 501.977951][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.984847][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.128532][ T9578] CIFS mount error: No usable UNC path provided in device string! [ 502.128532][ T9578] [ 502.138860][ T9578] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 502.542571][ T5770] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 502.550927][ T5770] usb 2-1: MIDIStreaming interface descriptor not found [ 502.552061][ T5766] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 502.679877][ T5770] usb 2-1: USB disconnect, device number 16 [ 503.523378][ T9589] loop2: detected capacity change from 0 to 8 [ 503.571718][ T9588] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 503.642979][ T9396] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 503.675588][ T9589] SQUASHFS error: Unable to read inode 0x127 [ 503.969981][ T7888] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 503.996705][ T9396] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 505.195128][ T9396] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 505.371020][ T9396] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 506.248250][ T9618] overlayfs: failed to resolve './file1': -2 [ 507.310334][ T8228] IPVS: stop unused estimator thread 0... [ 507.547929][ T9396] 8021q: adding VLAN 0 to HW filter on device bond0 [ 508.275967][ T9396] 8021q: adding VLAN 0 to HW filter on device team0 [ 508.417356][ T8240] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.426050][ T8240] bridge0: port 1(bridge_slave_0) entered forwarding state [ 509.394193][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.401681][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 510.173787][ T9651] overlayfs: failed to resolve './file1': -2 [ 513.038643][ T9673] overlayfs: failed to resolve './file1': -2 [ 513.047080][ T28] kauditd_printk_skb: 62 callbacks suppressed [ 513.047095][ T28] audit: type=1326 audit(1750962088.210:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9663 comm="syz.0.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f381d78e929 code=0x7ffc0000 [ 513.311051][ T28] audit: type=1326 audit(1750962088.210:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9663 comm="syz.0.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f381d78e929 code=0x7ffc0000 [ 513.334033][ T28] audit: type=1326 audit(1750962088.210:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9663 comm="syz.0.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f381d78e929 code=0x7ffc0000 [ 513.357425][ T28] audit: type=1326 audit(1750962088.210:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9663 comm="syz.0.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f381d78e929 code=0x7ffc0000 [ 513.385040][ T28] audit: type=1326 audit(1750962088.210:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9663 comm="syz.0.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f381d78e929 code=0x7ffc0000 [ 513.408308][ T28] audit: type=1326 audit(1750962088.220:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9663 comm="syz.0.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f381d78e929 code=0x7ffc0000 [ 513.431104][ T28] audit: type=1326 audit(1750962088.240:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9663 comm="syz.0.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f381d78e929 code=0x7ffc0000 [ 513.453889][ T28] audit: type=1326 audit(1750962088.240:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9663 comm="syz.0.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f381d78e929 code=0x7ffc0000 [ 513.483961][ T28] audit: type=1326 audit(1750962088.250:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9663 comm="syz.0.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f381d78e929 code=0x7ffc0000 [ 513.603626][ T28] audit: type=1326 audit(1750962088.250:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9663 comm="syz.0.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f381d78e929 code=0x7ffc0000 [ 514.789921][ T9396] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 514.974243][ T9687] overlayfs: failed to clone upperpath [ 516.137862][ T9703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 516.148782][ T9703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.159230][ T9703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 516.170084][ T9703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.428553][ T9717] veth1_macvtap: left promiscuous mode [ 517.434194][ T9717] macsec0: entered allmulticast mode [ 517.444291][ T9718] veth1_macvtap: entered promiscuous mode [ 517.450889][ T9718] veth1_macvtap: entered allmulticast mode [ 517.456945][ T9718] macsec0: left allmulticast mode [ 517.462116][ T9718] veth1_macvtap: left allmulticast mode [ 517.478110][ T5865] libceph: connect (1)[c::]:6789 error -101 [ 517.511113][ T9711] ceph: No mds server is up or the cluster is laggy [ 517.525086][ T5865] libceph: mon0 (1)[c::]:6789 connect error [ 517.683601][ T9729] overlayfs: failed to resolve './file1': -2 [ 517.884832][ T5856] libceph: connect (1)[c::]:6789 error -101 [ 517.891043][ T5856] libceph: mon0 (1)[c::]:6789 connect error [ 518.761271][ T9739] overlayfs: failed to clone upperpath [ 518.810869][ T9740] loop0: detected capacity change from 0 to 256 [ 518.851342][ T9740] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d) [ 519.114843][ T9396] veth0_vlan: entered promiscuous mode [ 519.161735][ T9396] veth1_vlan: entered promiscuous mode [ 519.192200][ T9396] veth0_macvtap: entered promiscuous mode [ 519.208764][ T9396] veth1_macvtap: entered promiscuous mode [ 519.231474][ T9396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 519.245281][ T9396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.315304][ T9396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 519.330515][ T9396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.340473][ T9396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 519.351421][ T9396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.486227][ T9746] xt_TCPMSS: Only works on TCP SYN packets [ 519.992837][ T9396] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 520.155175][ T9396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 520.166732][ T9396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.178653][ T9396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 520.189683][ T9396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.200309][ T9396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 520.215260][ T9396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.228477][ T9396] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 520.251630][ T9396] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.274428][ T9396] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.283348][ T9396] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.301936][ T9396] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.455574][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 520.463442][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 520.513514][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 520.537678][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 521.613637][ T9759] input: syz0 as /devices/virtual/input/input9 [ 525.315831][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 525.315845][ T28] audit: type=1326 audit(1750962100.970:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9827 comm="syz.4.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4d6d8e929 code=0x7ffc0000 [ 525.506859][ T28] audit: type=1326 audit(1750962100.970:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9827 comm="syz.4.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4d6d8e929 code=0x7ffc0000 [ 525.530501][ T28] audit: type=1326 audit(1750962100.970:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9827 comm="syz.4.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff4d6d8d290 code=0x7ffc0000 [ 525.575066][ T28] audit: type=1326 audit(1750962100.970:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9827 comm="syz.4.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff4d6d8e52b code=0x7ffc0000 [ 525.614687][ T28] audit: type=1326 audit(1750962100.970:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9827 comm="syz.4.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4d6d8e929 code=0x7ffc0000 [ 526.551169][ T28] audit: type=1326 audit(1750962100.970:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9827 comm="syz.4.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4d6d8e929 code=0x7ffc0000 [ 526.763875][ T28] audit: type=1326 audit(1750962100.970:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9827 comm="syz.4.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff4d6d8d290 code=0x7ffc0000 [ 527.023769][ T28] audit: type=1326 audit(1750962100.970:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9827 comm="syz.4.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4d6d8e929 code=0x7ffc0000 [ 527.121079][ T9858] xt_limit: Overflow, try lower: 687865856/40 [ 527.202269][ T9858] tty tty21: ldisc open failed (-12), clearing slot 20 [ 527.448031][ T28] audit: type=1326 audit(1750962100.970:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9827 comm="syz.4.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4d6d8e929 code=0x7ffc0000 [ 527.487272][ T28] audit: type=1326 audit(1750962100.970:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9827 comm="syz.4.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7ff4d6d8e929 code=0x7ffc0000 [ 527.904953][ T9862] loop0: detected capacity change from 0 to 32768 [ 527.912388][ T9862] XFS: ikeep mount option is deprecated. [ 527.928111][ T9862] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 528.173129][ T9862] XFS (loop0): Ending clean mount [ 528.206204][ T9862] XFS (loop0): Quotacheck needed: Please wait. [ 528.338863][ T9862] XFS (loop0): Quotacheck: Done. [ 529.540581][ T9885] overlayfs: missing 'lowerdir' [ 531.581594][ T9890] block device autoloading is deprecated and will be removed. [ 531.625852][ T5768] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 538.425494][ T9940] loop4: detected capacity change from 0 to 512 [ 538.792665][ T9944] loop1: detected capacity change from 0 to 32768 [ 538.839651][ T9940] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2802e028, mo2=0002] [ 538.855382][ T9940] System zones: 1-12 [ 538.995618][ T9944] OCFS2: ERROR (device loop1): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 75 has invalid tree depth 2304 in extent list [ 539.015670][ T9944] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 539.025848][ T9944] OCFS2: Returning error to the calling process. [ 539.032419][ T9944] (syz.1.701,9944,0):ocfs2_find_leaf:1941 ERROR: status = -30 [ 539.040125][ T9944] (syz.1.701,9944,0):ocfs2_get_clusters_nocache:421 ERROR: status = -30 [ 539.048882][ T9944] (syz.1.701,9944,0):ocfs2_get_clusters:624 ERROR: status = -30 [ 539.057099][ T9944] (syz.1.701,9944,0):ocfs2_extent_map_get_blocks:671 ERROR: status = -30 [ 539.065833][ T9944] (syz.1.701,9944,0):ocfs2_bmap:487 ERROR: get_blocks() failed, block = 0 [ 539.074722][ T9944] (syz.1.701,9944,0):ocfs2_bmap:488 ERROR: status = -30 [ 539.081851][ T9944] jbd2_journal_init_inode: Cannot locate journal superblock [ 539.089445][ T9944] (syz.1.701,9944,0):ocfs2_journal_init:973 ERROR: Linux journal layer error [ 539.098514][ T9944] (syz.1.701,9944,0):ocfs2_check_volume:2405 ERROR: Could not initialize journal! [ 539.108708][ T9944] (syz.1.701,9944,0):ocfs2_check_volume:2490 ERROR: status = -22 [ 539.116892][ T9944] (syz.1.701,9944,0):ocfs2_mount_volume:1822 ERROR: status = -22 [ 539.155790][ T9944] (syz.1.701,9944,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 539.389308][ T9940] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.700: invalid indirect mapped block 8 (level 2) [ 539.499571][ T9942] Bluetooth: MGMT ver 1.22 [ 539.574762][ T7890] I/O error, dev loop1, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 539.612086][ T9940] EXT4-fs (loop4): Remounting filesystem read-only [ 539.634633][ T9940] EXT4-fs (loop4): 1 truncate cleaned up [ 539.692734][ T9940] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 540.784591][ T5865] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 541.374527][ T5865] usb 2-1: device descriptor read/64, error -71 [ 541.671310][ T9396] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 541.814483][ T5865] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 541.974684][ T5865] usb 2-1: device descriptor read/64, error -71 [ 542.012615][ T9982] loop4: detected capacity change from 0 to 2048 [ 542.079415][ T9982] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 542.124722][ T5865] usb usb2-port1: attempt power cycle [ 542.166645][ T9987] __nla_validate_parse: 47 callbacks suppressed [ 542.166663][ T9987] netlink: 4 bytes leftover after parsing attributes in process `syz.0.709'. [ 542.594624][ T5865] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 542.597164][ T9987] netlink: 4 bytes leftover after parsing attributes in process `syz.0.709'. [ 542.666219][ T5865] usb 2-1: device descriptor read/8, error -71 [ 542.905982][ T9999] netlink: 4 bytes leftover after parsing attributes in process `syz.0.709'. [ 542.958791][ T9993] netlink: 20 bytes leftover after parsing attributes in process `syz.0.709'. [ 547.367655][T10037] loop4: detected capacity change from 0 to 1024 [ 547.580542][ T8228] hfsplus: b-tree write err: -5, ino 4 [ 551.011149][T10064] overlayfs: failed to clone upperpath [ 554.143215][T10087] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 556.744535][ T59] wlan1: Trigger new scan to find an IBSS to join [ 557.406300][T10117] netlink: 16 bytes leftover after parsing attributes in process `syz.1.729'. [ 557.466094][T10129] overlayfs: failed to resolve './file0': -2 [ 558.232218][T10126] overlayfs: failed to clone upperpath [ 558.356562][T10119] netlink: 16 bytes leftover after parsing attributes in process `syz.1.729'. [ 558.749719][T10144] overlayfs: failed to clone upperpath [ 558.810981][T10135] loop0: detected capacity change from 0 to 4096 [ 559.859303][T10146] loop1: detected capacity change from 0 to 32768 [ 559.866715][T10146] XFS: ikeep mount option is deprecated. [ 559.896117][T10146] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 560.123630][T10146] XFS (loop1): Ending clean mount [ 560.161650][T10146] XFS (loop1): Quotacheck needed: Please wait. [ 560.965933][T10179] netlink: 'syz.4.739': attribute type 10 has an invalid length. [ 561.002090][T10146] XFS (loop1): Quotacheck: Done. [ 561.038442][T10179] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 561.265927][T10179] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 562.093152][ T788] libceph: connect (1)[c::]:6789 error -101 [ 562.099337][ T788] libceph: mon0 (1)[c::]:6789 connect error [ 562.130203][T10177] ceph: No mds server is up or the cluster is laggy [ 562.182147][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 562.182165][ T28] audit: type=1800 audit(1750962137.820:462): pid=10147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.736" name="file1" dev="loop1" ino=9286 res=0 errno=0 [ 562.257217][ T8247] wlan1: Trigger new scan to find an IBSS to join [ 562.435035][T10193] loop4: detected capacity change from 0 to 128 [ 562.549998][ T5766] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 564.267751][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 564.274236][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.332880][ T8228] wlan1: Creating new IBSS network, BSSID 06:ab:af:a4:c9:66 [ 565.480686][T10225] loop0: detected capacity change from 0 to 256 [ 565.601235][T10225] FAT-fs (loop0): Directory bread(block 64) failed [ 565.608702][T10225] FAT-fs (loop0): Directory bread(block 65) failed [ 565.616258][T10225] FAT-fs (loop0): Directory bread(block 66) failed [ 565.623458][T10225] FAT-fs (loop0): Directory bread(block 67) failed [ 565.630974][T10225] FAT-fs (loop0): Directory bread(block 68) failed [ 565.638125][T10225] FAT-fs (loop0): Directory bread(block 69) failed [ 565.647159][T10225] FAT-fs (loop0): Directory bread(block 70) failed [ 565.654058][T10225] FAT-fs (loop0): Directory bread(block 71) failed [ 565.662470][T10225] FAT-fs (loop0): Directory bread(block 72) failed [ 565.669417][T10225] FAT-fs (loop0): Directory bread(block 73) failed [ 566.365772][T10233] netlink: 12 bytes leftover after parsing attributes in process `syz.4.746'. [ 567.491972][T10229] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 567.501110][T10229] batadv_slave_0: entered promiscuous mode [ 569.050752][T10249] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 569.395235][T10257] loop1: detected capacity change from 0 to 1024 [ 570.585640][T10260] overlayfs: failed to clone upperpath [ 573.965709][T10296] overlayfs: failed to clone upperpath [ 574.216622][T10303] input: syz0 as /devices/virtual/input/input11 [ 577.159407][T10322] loop1: detected capacity change from 0 to 1024 [ 577.497342][T10324] lo speed is unknown, defaulting to 1000 [ 577.503426][T10324] lo speed is unknown, defaulting to 1000 [ 577.511065][T10324] lo speed is unknown, defaulting to 1000 [ 577.522928][T10324] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 577.540871][T10324] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 580.215236][T10324] lo speed is unknown, defaulting to 1000 [ 580.235373][T10324] lo speed is unknown, defaulting to 1000 [ 580.256444][T10324] lo speed is unknown, defaulting to 1000 [ 580.271769][T10324] lo speed is unknown, defaulting to 1000 [ 581.489598][T10342] siw: device registration error -23 [ 582.683095][T10346] 8021q: adding VLAN 0 to HW filter on device bond0 [ 582.699512][T10346] bond0: (slave rose0): Enslaving as an active interface with an up link [ 583.489100][T10359] loop1: detected capacity change from 0 to 512 [ 583.567190][T10359] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 585.972872][T10388] trusted_key: encrypted_key: insufficient parameters specified [ 586.577634][T10397] block device autoloading is deprecated and will be removed. [ 586.903355][T10399] overlayfs: failed to resolve './file0': -2 [ 587.239036][ T59] wlan1: Trigger new scan to find an IBSS to join [ 587.408069][T10392] loop4: detected capacity change from 0 to 4096 [ 588.038998][T10409] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 589.079440][T10418] netlink: 28 bytes leftover after parsing attributes in process `syz.2.779'. [ 592.247252][T10451] netlink: 216 bytes leftover after parsing attributes in process `syz.2.785'. [ 593.181824][T10457] overlayfs: failed to resolve './file0': -2 [ 593.216656][T10458] loop4: detected capacity change from 0 to 64 [ 593.806327][ T8247] wlan1: Trigger new scan to find an IBSS to join [ 593.974401][T10458] hfs: bad catalog entry type 0 [ 595.632388][ T8224] wlan1: Creating new IBSS network, BSSID 1e:93:6e:d1:51:c6 [ 597.724496][T10493] loop1: detected capacity change from 0 to 16 [ 597.736863][T10493] erofs: Unknown parameter '0xffffffffffffffff' [ 597.918912][T10493] loop1: detected capacity change from 0 to 4096 [ 597.926157][T10493] ntfs3: Unknown parameter '' [ 599.036956][T10509] overlayfs: failed to resolve './file0': -2 [ 603.425800][T10559] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 603.438384][T10559] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 608.802355][T10613] overlayfs: missing 'lowerdir' [ 614.273131][T10664] netlink: 8 bytes leftover after parsing attributes in process `syz.0.826'. [ 615.776356][T10676] fuse: Unknown parameter '0x0000000000000008' [ 615.791889][T10676] 9pnet_fd: Insufficient options for proto=fd [ 617.098782][T10687] overlayfs: failed to clone upperpath [ 617.116789][T10692] loop0: detected capacity change from 0 to 8 [ 619.515572][T10711] netlink: 8 bytes leftover after parsing attributes in process `syz.1.835'. [ 620.546832][T10711] misc userio: The device must be registered before sending interrupts [ 620.733361][T10720] netlink: 8 bytes leftover after parsing attributes in process `syz.4.836'. [ 620.743694][T10720] netlink: 'syz.4.836': attribute type 5 has an invalid length. [ 620.751975][T10720] netlink: 20 bytes leftover after parsing attributes in process `syz.4.836'. [ 622.083094][T10720] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 622.096909][T10720] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 622.106705][T10720] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 622.116032][T10720] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 622.125370][T10720] geneve2: entered promiscuous mode [ 622.154796][T10720] geneve2: entered allmulticast mode [ 623.351170][T10745] kAFS: unable to lookup cell 'sy[N6/rÆ>ßãmNíÜb’z1' [ 624.244231][T10749] loop1: detected capacity change from 0 to 40427 [ 624.269327][T10749] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 624.278101][T10749] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 624.324521][T10749] F2FS-fs (loop1): invalid crc value [ 624.342155][T10749] F2FS-fs (loop1): Found nat_bits in checkpoint [ 624.417642][T10749] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 624.425206][T10749] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 624.779298][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.786439][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.648949][ T59] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 626.646188][T10767] overlayfs: failed to clone upperpath [ 627.394433][ T23] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 627.500760][T10776] overlayfs: failed to clone upperpath [ 627.615758][ T23] usb 5-1: Using ep0 maxpacket: 8 [ 627.639276][ T23] usb 5-1: config 2 has an invalid interface number: 226 but max is 0 [ 627.666783][ T23] usb 5-1: config 2 has no interface number 0 [ 627.680614][ T23] usb 5-1: config 2 interface 226 altsetting 91 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 627.711221][ T23] usb 5-1: config 2 interface 226 altsetting 91 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 627.756497][ T23] usb 5-1: config 2 interface 226 altsetting 91 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 627.787722][ T23] usb 5-1: config 2 interface 226 has no altsetting 0 [ 627.824529][ T23] usb 5-1: New USB device found, idVendor=05c8, idProduct=0403, bcdDevice=d4.d4 [ 628.002014][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.141266][T10783] UBIFS error (pid: 10783): cannot open "./file0", error -22 [ 628.185094][T10783] netlink: 4 bytes leftover after parsing attributes in process `syz.2.850'. [ 628.682270][T10785] xt_limit: Overflow, try lower: 687865856/40 [ 628.725074][ T23] usb 5-1: Product: syz [ 628.730430][ T23] usb 5-1: Manufacturer: syz [ 628.750390][ T23] usb 5-1: SerialNumber: syz [ 628.999310][T10766] vxcan0: tx drop: invalid sa for name 0x0000001000000000 [ 629.296150][T10783] team0: Port device team_slave_1 removed [ 630.122914][ T23] usb 5-1: Found UVC 0.00 device syz (05c8:0403) [ 630.134811][ T23] usb 5-1: No valid video chain found. [ 630.150649][ T23] usb 5-1: USB disconnect, device number 2 [ 630.646797][T10802] loop1: detected capacity change from 0 to 2048 [ 631.219652][T10802] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 631.355910][T10805] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 636.340100][ T28] audit: type=1326 audit(1750962211.990:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10841 comm="syz.2.862" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f997c98e929 code=0x0 [ 639.446643][T10868] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 639.554663][ T5814] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 641.866420][T10872] loop1: detected capacity change from 0 to 512 [ 641.974602][T10872] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2244: inode #15: comm syz.1.868: corrupted in-inode xattr: invalid ea_ino [ 642.038681][T10872] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.868: couldn't read orphan inode 15 (err -117) [ 642.296311][T10872] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 642.582862][T10887] veth0_to_team: entered promiscuous mode [ 642.588782][T10887] veth0_to_team: entered allmulticast mode [ 644.346146][T10872] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 644.824841][ T5814] usb 5-1: device descriptor read/64, error -110 [ 645.765885][T10902] loop0: detected capacity change from 0 to 16 [ 645.773022][T10902] erofs: Unknown parameter 'GPL' [ 646.005446][ T5814] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 646.035558][T10909] overlayfs: failed to clone upperpath [ 646.494638][ T5814] usb 5-1: device descriptor read/64, error -32 [ 646.628075][ T5814] usb usb5-port1: attempt power cycle [ 647.326899][ T5814] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 647.595119][ T5814] usb 5-1: device descriptor read/8, error -32 [ 648.076732][T10936] loop4: detected capacity change from 0 to 512 [ 649.138015][T10936] EXT4-fs: Ignoring removed oldalloc option [ 649.289470][T10936] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 649.630206][T10936] EXT4-fs (loop4): orphan cleanup on readonly fs [ 649.736560][T10936] Quota error (device loop4): do_check_range: Getting block 196613 out of range 1-5 [ 649.747509][T10936] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 649.757437][T10936] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.880: Failed to acquire dquot type 1 [ 649.792039][T10936] EXT4-fs (loop4): 1 truncate cleaned up [ 649.834158][T10936] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 651.932401][ T9396] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 651.975911][T10953] hugetlbfs: syz.2.883 (10953): Using mlock ulimits for SHM_HUGETLB is obsolete [ 652.008989][T10931] lo speed is unknown, defaulting to 1000 [ 652.959866][T10958] netlink: 4 bytes leftover after parsing attributes in process `syz.1.884'. [ 653.877147][T10974] input: syz0 as /devices/virtual/input/input12 [ 654.505817][T10973] 9pnet_virtio: no channels available for device syz [ 654.894983][T10980] netlink: 88 bytes leftover after parsing attributes in process `syz.2.888'. [ 656.639614][T10992] ax25_connect(): syz.4.891 uses autobind, please contact jreuter@yaina.de [ 658.171672][ T8224] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 665.753366][T11036] sp0: Synchronizing with TNC [ 666.209978][ T5772] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 666.223613][ T5772] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 666.236192][ T5772] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 666.247396][ T5772] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 666.257761][ T5772] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 666.266980][ T5772] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 666.272459][T11040] rtc_cmos 00:00: Alarms can be up to one day in the future [ 666.358378][T11046] netlink: 24 bytes leftover after parsing attributes in process `syz.2.902'. [ 666.599492][T11042] lo speed is unknown, defaulting to 1000 [ 667.228200][ T27] rtc_cmos 00:00: Alarms can be up to one day in the future [ 668.287738][ T27] rtc_cmos 00:00: Alarms can be up to one day in the future [ 668.334483][ T5774] Bluetooth: hci4: command tx timeout [ 668.711236][ T27] rtc_cmos 00:00: Alarms can be up to one day in the future [ 668.720383][ T27] rtc_cmos 00:00: Alarms can be up to one day in the future [ 668.744421][ T27] rtc rtc0: __rtc_set_alarm: err=-22 [ 670.414375][ T5774] Bluetooth: hci4: command tx timeout [ 670.486895][T11042] chnl_net:caif_netlink_parms(): no params data found [ 672.012793][T11042] bridge0: port 1(bridge_slave_0) entered blocking state [ 672.021055][T11042] bridge0: port 1(bridge_slave_0) entered disabled state [ 672.029148][T11042] bridge_slave_0: entered allmulticast mode [ 672.037699][T11042] bridge_slave_0: entered promiscuous mode [ 672.187269][T11042] bridge0: port 2(bridge_slave_1) entered blocking state [ 672.225377][T11085] loop4: detected capacity change from 0 to 32768 [ 672.232822][T11085] XFS: ikeep mount option is deprecated. [ 672.239850][T11042] bridge0: port 2(bridge_slave_1) entered disabled state [ 672.250848][T11042] bridge_slave_1: entered allmulticast mode [ 672.259373][T11042] bridge_slave_1: entered promiscuous mode [ 672.275412][T11085] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 672.495690][ T5774] Bluetooth: hci4: command tx timeout [ 672.497801][T11042] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 672.553431][T11085] XFS (loop4): Ending clean mount [ 672.560289][T11042] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 672.585162][T11085] XFS (loop4): Quotacheck needed: Please wait. [ 672.710779][T11042] team0: Port device team_slave_0 added [ 672.769413][T11042] team0: Port device team_slave_1 added [ 672.811989][T11085] XFS (loop4): Quotacheck: Done. [ 673.353218][T11042] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 674.010201][T11042] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 674.068961][T11042] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 674.169158][T11042] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 674.180991][ T9396] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 674.294445][T11042] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 674.373288][T11042] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 674.445972][T11042] hsr_slave_0: entered promiscuous mode [ 674.457112][T11042] hsr_slave_1: entered promiscuous mode [ 674.480029][T11042] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 674.488477][T11042] Cannot create hsr debugfs directory [ 674.574418][ T5774] Bluetooth: hci4: command tx timeout [ 674.991753][T11042] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 675.130538][T11042] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 675.291549][T11042] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 675.474600][T11042] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 675.557094][T11115] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 675.800059][T11115] loop1: detected capacity change from 0 to 4096 [ 675.854672][T11115] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 675.866760][T11115] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 675.882233][T11115] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 675.894066][T11115] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 675.907700][T11115] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 675.924842][T11115] ntfs: volume version 3.1. [ 675.958032][T11115] ntfs: (device loop1): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 675.970601][T11115] ntfs: (device loop1): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 675.987296][T11115] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 675.998630][T11115] ntfs: (device loop1): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 676.010811][T11115] ntfs: (device loop1): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 676.453162][T11124] loop4: detected capacity change from 0 to 2048 [ 676.506557][T11124] Alternate GPT is invalid, using primary GPT. [ 676.513765][T11124] loop4: p1 p2 p3 [ 677.629453][T11042] 8021q: adding VLAN 0 to HW filter on device bond0 [ 677.696746][T11042] 8021q: adding VLAN 0 to HW filter on device team0 [ 677.786815][ T8224] bridge0: port 1(bridge_slave_0) entered blocking state [ 677.794168][ T8224] bridge0: port 1(bridge_slave_0) entered forwarding state [ 677.895015][ T8224] bridge0: port 2(bridge_slave_1) entered blocking state [ 677.902203][ T8224] bridge0: port 2(bridge_slave_1) entered forwarding state [ 677.999175][T11042] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 678.009973][T11042] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 678.101539][T11131] random: crng reseeded on system resumption [ 679.269355][T11072] udevd[11072]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 679.285193][T11082] udevd[11082]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 679.313073][T11083] udevd[11083]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 679.543275][T11082] udevd[11082]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 679.929868][T11126] udevd[11126]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 680.231904][T11042] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 680.245919][T11142] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 680.255217][T11142] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 680.266112][T11083] udevd[11083]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 680.493455][T11153] loop4: detected capacity change from 0 to 1024 [ 680.555718][T11153] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 681.897848][ T9396] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 683.094929][T11042] veth0_vlan: entered promiscuous mode [ 683.234968][T11042] veth1_vlan: entered promiscuous mode [ 683.408362][T11042] veth0_macvtap: entered promiscuous mode [ 684.358518][T11042] veth1_macvtap: entered promiscuous mode [ 684.449184][T11042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 684.460328][T11042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.479728][T11042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 684.492407][T11042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.515730][T11042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 684.528377][T11042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.552224][T11042] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 684.632194][T11042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 684.750920][T11042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.763973][T11042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 684.824765][T11042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.908942][T11042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 684.942661][T11042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.961313][T11042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 685.067058][T11042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 685.079106][T11042] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 685.111784][T11042] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.144397][T11042] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.843635][T11042] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.941455][T11042] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.215085][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.221502][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.532034][ T8247] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 687.545365][ T8247] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 688.999407][ T8240] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 689.009258][ T8240] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 689.600975][T11217] loop5: detected capacity change from 0 to 32768 [ 689.977926][T11217] XFS (loop5): DAX unsupported by block device. Turning off DAX. [ 690.051497][T11217] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 690.086661][T11232] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 690.097296][T11232] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 691.417235][T11217] XFS (loop5): Ending clean mount [ 691.429356][T11217] XFS (loop5): Quotacheck needed: Please wait. [ 691.446144][T11238] overlayfs: failed to clone upperpath [ 691.568348][T11217] XFS (loop5): Quotacheck: Done. [ 692.514821][T11250] netlink: 4 bytes leftover after parsing attributes in process `syz.2.937'. [ 692.524082][T11250] netlink: 4 bytes leftover after parsing attributes in process `syz.2.937'. [ 692.533422][T11250] netlink: 4 bytes leftover after parsing attributes in process `syz.2.937'. [ 692.542627][T11250] netlink: 4 bytes leftover after parsing attributes in process `syz.2.937'. [ 692.551873][T11250] netlink: 4 bytes leftover after parsing attributes in process `syz.2.937'. [ 692.561005][T11250] netlink: 4 bytes leftover after parsing attributes in process `syz.2.937'. [ 692.594128][T11250] netlink: 4 bytes leftover after parsing attributes in process `syz.2.937'. [ 692.605834][T11250] netlink: 4 bytes leftover after parsing attributes in process `syz.2.937'. [ 692.615084][T11250] netlink: 4 bytes leftover after parsing attributes in process `syz.2.937'. [ 692.624361][T11250] netlink: 4 bytes leftover after parsing attributes in process `syz.2.937'. [ 693.793479][T11256] loop1: detected capacity change from 0 to 2048 [ 693.929519][T11256] Alternate GPT is invalid, using primary GPT. [ 693.935914][T11256] loop1: p1 p2 p3 [ 693.942256][T11042] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 694.726435][T11082] udevd[11082]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 694.737470][T11083] udevd[11083]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 694.782920][T11148] udevd[11148]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 695.101985][ T8228] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 696.807010][T11274] loop4: detected capacity change from 0 to 32768 [ 696.814676][T11274] XFS: noikeep mount option is deprecated. [ 696.820647][T11274] xfs: Unknown parameter 'smackfshat' [ 698.698320][T11295] __nla_validate_parse: 41 callbacks suppressed [ 698.698340][T11295] netlink: 4 bytes leftover after parsing attributes in process `syz.2.949'. [ 699.448334][T11299] netlink: 44 bytes leftover after parsing attributes in process `syz.5.948'. [ 701.131398][T11309] loop4: detected capacity change from 0 to 32768 [ 701.258507][T11309] (syz.4.952,11309,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 701.278034][T11309] (syz.4.952,11309,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 701.414903][T11309] (syz.4.952,11309,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC. [ 701.497193][T11309] JBD2: Ignoring recovery information on journal [ 701.602191][T11309] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 702.366828][T11320] loop1: detected capacity change from 0 to 256 [ 702.454364][T11320] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 702.500058][T11320] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 702.558712][T11320] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 702.672184][T11312] loop5: detected capacity change from 0 to 32768 [ 702.939592][ T9396] ocfs2: Unmounting device (7,4) on (node local) [ 703.371640][T11312] ocfs2: Mounting device (7,5) on (node local, slot 0) with writeback data mode. [ 703.510734][T11331] overlayfs: failed to clone upperpath [ 704.595197][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 704.595212][ T28] audit: type=1800 audit(2000000001.200:464): pid=11337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.954" name="file1" dev="loop5" ino=17058 res=0 errno=0 [ 706.710409][T11042] ocfs2: Unmounting device (7,5) on (node local) [ 711.098502][T11374] netlink: 8 bytes leftover after parsing attributes in process `syz.4.967'. [ 718.654943][T11405] dummy0: entered promiscuous mode [ 718.933629][ T5814] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 719.164368][ T5814] usb 2-1: Using ep0 maxpacket: 32 [ 719.173857][ T5814] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 719.884377][ T5814] usb 2-1: config 0 interface 0 has no altsetting 0 [ 719.891624][ T5814] usb 2-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 719.901568][ T5814] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 719.946025][ T5814] usb 2-1: config 0 descriptor?? [ 720.184927][T11411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 720.193933][T11411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 720.211544][T11411] loop1: detected capacity change from 0 to 512 [ 720.218922][T11411] EXT4-fs: inline encryption not supported [ 720.251027][T11429] xt_CT: You must specify a L4 protocol and not use inversions on it [ 720.598329][T11411] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 720.610465][T11411] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 720.620325][T11411] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 720.683980][T11083] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 721.792541][ T5814] usbhid 2-1:0.0: can't add hid device: -71 [ 721.850025][ T5814] usbhid: probe of 2-1:0.0 failed with error -71 [ 721.910328][ T5814] usb 2-1: USB disconnect, device number 21 [ 722.181575][T11450] infiniband syz!: set active [ 723.987712][T11471] batman_adv: batadv0: Adding interface: ip6gretap1 [ 724.010788][T11471] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 724.037352][T11471] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 724.131810][T11473] xt_CT: No such helper "snmp" [ 724.281449][T11467] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 724.289456][T11467] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 724.297717][T11467] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 724.305296][T11467] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 724.313046][T11467] batman_adv: batadv0: Removing interface: ip6gretap1 [ 724.738661][T11488] netlink: 24 bytes leftover after parsing attributes in process `syz.1.986'. [ 725.368499][T11488] loop1: detected capacity change from 0 to 32768 [ 725.375982][T11488] XFS: noikeep mount option is deprecated. [ 725.381865][T11488] xfs: Unknown parameter 'smackfshat' [ 726.492957][T11498] block device autoloading is deprecated and will be removed. [ 726.513085][T11498] syz.1.988: attempt to access beyond end of device [ 726.513085][T11498] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 727.084563][T11506] netlink: 16 bytes leftover after parsing attributes in process `syz.5.990'. [ 727.268418][ T8228] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 727.271723][T11509] overlayfs: failed to clone upperpath [ 728.702753][T11527] batadv_slave_1: entered promiscuous mode [ 729.164823][T11519] batadv_slave_1: left promiscuous mode [ 729.682478][T11528] loop5: detected capacity change from 0 to 2048 [ 729.768869][T11528] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 729.782104][T11528] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 729.792465][T11528] UDF-fs: Scanning with blocksize 512 failed [ 729.813121][T11528] UDF-fs: error (device loop5): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 729.830022][T11528] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 729.838074][T11528] UDF-fs: Scanning with blocksize 1024 failed [ 729.851166][T11528] UDF-fs: error (device loop5): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 729.863619][T11528] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 729.873768][T11528] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 729.881741][T11528] UDF-fs: Scanning with blocksize 2048 failed [ 729.890294][T11528] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 729.902006][T11528] UDF-fs: error (device loop5): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 729.913421][T11528] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 729.923161][T11528] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 729.931024][T11528] UDF-fs: Scanning with blocksize 4096 failed [ 729.937372][T11528] UDF-fs: warning (device loop5): udf_fill_super: No partition found (1) [ 730.249050][T11532] loop4: detected capacity change from 0 to 1024 [ 730.265115][T11532] EXT4-fs: Ignoring removed nomblk_io_submit option [ 730.515861][T11532] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 731.206331][T11540] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 731.482243][T11540] overlayfs: invalid origin (00000079007a6b616c6c6572310000000000000180c2000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 731.534691][ T5814] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 731.814634][ T5814] usb 5-1: Using ep0 maxpacket: 32 [ 731.841658][ T5814] usb 5-1: unable to get BOS descriptor or descriptor too short [ 731.898698][ T5814] usb 5-1: config 7 has an invalid interface number: 128 but max is 0 [ 732.021579][ T5814] usb 5-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 732.031474][ T5814] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 732.042455][ T5814] usb 5-1: config 7 has no interface number 0 [ 732.162888][ T5814] usb 5-1: config 7 interface 128 altsetting 2 has an invalid endpoint with address 0x17, skipping [ 732.174574][ T5814] usb 5-1: config 7 interface 128 altsetting 2 endpoint 0x87 has an invalid bInterval 209, changing to 11 [ 732.187464][ T5814] usb 5-1: config 7 interface 128 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 732.201458][ T5814] usb 5-1: config 7 interface 128 has no altsetting 0 [ 732.220467][ T5814] usb 5-1: New USB device found, idVendor=6033, idProduct=4108, bcdDevice=cc.13 [ 732.245846][ T5814] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.253993][ T5814] usb 5-1: Product: syz [ 732.260373][ T5814] usb 5-1: Manufacturer: syz [ 732.273224][ T5814] usb 5-1: SerialNumber: syz [ 732.309097][T11532] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 733.002472][ T5814] usb 5-1: Quirk or no altest; falling back to MIDI 1.0 [ 733.014078][ T5814] usb 5-1: MIDIStreaming interface descriptor not found [ 733.075009][ T5814] usb 5-1: USB disconnect, device number 7 [ 733.475065][ T28] audit: type=1326 audit(2000000030.090:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11571 comm="syz.1.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e91f8e929 code=0x7ffc0000 [ 733.533248][ T28] audit: type=1326 audit(2000000030.110:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11571 comm="syz.1.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e91f8e929 code=0x7ffc0000 [ 733.714745][ T28] audit: type=1326 audit(2000000030.120:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11571 comm="syz.1.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2e91f8e929 code=0x7ffc0000 [ 733.753025][ T28] audit: type=1326 audit(2000000030.120:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11571 comm="syz.1.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e91f8e929 code=0x7ffc0000 [ 733.778219][ T28] audit: type=1326 audit(2000000030.120:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11571 comm="syz.1.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e91f8e929 code=0x7ffc0000 [ 733.801655][ T28] audit: type=1326 audit(2000000030.120:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11571 comm="syz.1.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2e91f8e929 code=0x7ffc0000 [ 733.830131][ T9396] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 733.854978][ T28] audit: type=1326 audit(2000000030.120:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11571 comm="syz.1.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e91f8e929 code=0x7ffc0000 [ 734.224383][ T5814] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 734.474522][ T5814] usb 6-1: Using ep0 maxpacket: 32 [ 734.539942][ T5814] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 734.554854][ T28] audit: type=1326 audit(2000000030.120:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11571 comm="syz.1.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e91f8e929 code=0x7ffc0000 [ 734.558851][ T5814] usb 6-1: config 0 interface 0 has no altsetting 0 [ 734.586857][ T5814] usb 6-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 734.597026][ T5814] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 734.608399][ T5814] usb 6-1: config 0 descriptor?? [ 734.625719][ T28] audit: type=1326 audit(2000000030.120:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11571 comm="syz.1.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2e91f8e929 code=0x7ffc0000 [ 734.652742][ T28] audit: type=1326 audit(2000000030.120:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11571 comm="syz.1.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e91f8e929 code=0x7ffc0000 [ 734.862039][T11577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 734.870976][T11577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 734.888524][T11577] loop5: detected capacity change from 0 to 512 [ 734.895949][T11577] EXT4-fs: inline encryption not supported [ 735.342390][T11577] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 735.352824][T11577] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 735.362725][T11577] EXT4-fs (loop5): can't mount with data=, fs mounted w/o journal [ 735.408401][T11083] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 735.748374][T11589] loop1: detected capacity change from 0 to 2048 [ 735.920802][T11589] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 735.968287][T11589] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 735.978613][T11589] UDF-fs: Scanning with blocksize 512 failed [ 736.007622][T11589] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 736.021335][T11589] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 736.029250][T11589] UDF-fs: Scanning with blocksize 1024 failed [ 736.052947][T11589] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 736.066528][T11589] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 736.076341][T11589] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 736.084076][T11589] UDF-fs: Scanning with blocksize 2048 failed [ 736.092819][T11589] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 736.106874][T11589] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 736.120193][T11589] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 736.130010][T11589] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 736.137863][T11589] UDF-fs: Scanning with blocksize 4096 failed [ 736.144074][T11589] UDF-fs: warning (device loop1): udf_fill_super: No partition found (1) [ 736.689537][ T5814] usbhid 6-1:0.0: can't add hid device: -71 [ 736.726663][ T5814] usbhid: probe of 6-1:0.0 failed with error -71 [ 736.813704][ T5814] usb 6-1: USB disconnect, device number 2 [ 736.929199][T11595] CIFS mount error: No usable UNC path provided in device string! [ 736.929199][T11595] [ 736.939580][T11595] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 737.838272][T11601] ax25_connect(): syz.5.1010 uses autobind, please contact jreuter@yaina.de [ 739.193097][T11597] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 739.223529][T11597] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 739.240808][T11597] bond0 (unregistering): Released all slaves [ 739.583459][ T8224] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.627162][T11633] rtc_cmos 00:00: Alarms can be up to one day in the future [ 740.531230][ T8224] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 741.343796][T11650] loop1: detected capacity change from 0 to 512 [ 742.009070][T11650] EXT4-fs (loop1): 1 orphan inode deleted [ 742.015883][T11650] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 742.028840][T11650] ext4 filesystem being mounted at /245/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 742.090227][ T28] kauditd_printk_skb: 58 callbacks suppressed [ 742.090242][ T28] audit: type=1800 audit(2000000038.700:533): pid=11646 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1014" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 742.854457][ T5766] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 742.869937][ T48] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 743.690426][ T48] EXT4-fs error (device loop1): ext4_release_dquot:6974: comm kworker/u4:3: Failed to release dquot type 1 [ 743.854867][ T8224] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 744.072504][T11673] overlayfs: failed to clone upperpath [ 744.745550][T11678] loop4: detected capacity change from 0 to 2048 [ 745.399061][T11678] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 745.412214][T11678] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 745.422538][T11678] UDF-fs: Scanning with blocksize 512 failed [ 745.479395][ T8224] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.509114][T11678] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 745.525693][T11678] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 745.533436][T11678] UDF-fs: Scanning with blocksize 1024 failed [ 745.562738][T11678] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 745.574512][T11678] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 745.584126][T11678] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 745.591958][T11678] UDF-fs: Scanning with blocksize 2048 failed [ 745.598631][T11678] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 745.616778][T11678] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 745.628613][T11678] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 745.638566][T11678] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 745.646675][T11678] UDF-fs: Scanning with blocksize 4096 failed [ 745.652780][T11678] UDF-fs: warning (device loop4): udf_fill_super: No partition found (1) [ 746.687338][T11686] overlayfs: failed to clone upperpath [ 747.777665][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.784127][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.038977][T11697] syzkaller1: entered promiscuous mode [ 748.044400][ T5814] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 748.044786][T11697] syzkaller1: entered allmulticast mode [ 748.360284][ T5814] usb 5-1: Using ep0 maxpacket: 32 [ 748.372943][ T5814] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 748.387559][ T5814] usb 5-1: config 0 interface 0 has no altsetting 0 [ 748.394657][ T5814] usb 5-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 748.404000][ T5814] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.416859][ T5814] usb 5-1: config 0 descriptor?? [ 748.661960][T11694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 748.671126][T11694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 748.689785][T11694] loop4: detected capacity change from 0 to 512 [ 748.697389][T11694] EXT4-fs: inline encryption not supported [ 748.704480][T11694] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 748.715777][T11694] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 748.725919][T11694] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 748.767534][T11083] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 749.555431][ T8224] hsr_slave_0: left promiscuous mode [ 749.563347][ T8224] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 749.579066][ T8224] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 749.593929][ T8224] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 749.603687][ T8224] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 749.614722][ T8224] bridge_slave_1: left allmulticast mode [ 749.620753][ T8224] bridge_slave_1: left promiscuous mode [ 749.634438][ T8224] bridge0: port 2(bridge_slave_1) entered disabled state [ 749.648873][ T8224] bridge_slave_0: left allmulticast mode [ 749.655158][ T8224] bridge_slave_0: left promiscuous mode [ 749.661221][ T8224] bridge0: port 1(bridge_slave_0) entered disabled state [ 749.727019][ T8224] veth1_macvtap: left promiscuous mode [ 749.738231][ T8224] veth0_macvtap: left promiscuous mode [ 749.747723][ T8224] veth1_vlan: left promiscuous mode [ 749.753302][ T8224] veth0_vlan: left promiscuous mode [ 749.822519][ T5814] usbhid 5-1:0.0: can't add hid device: -71 [ 749.840232][ T5814] usbhid: probe of 5-1:0.0 failed with error -71 [ 749.871164][ T5814] usb 5-1: USB disconnect, device number 8 [ 750.711717][T11756] loop5: detected capacity change from 0 to 2048 [ 751.602012][T11756] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 751.613512][T11756] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 751.623842][T11756] UDF-fs: Scanning with blocksize 512 failed [ 751.631511][T11756] UDF-fs: error (device loop5): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 751.720548][T11756] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 751.729289][T11756] UDF-fs: Scanning with blocksize 1024 failed [ 751.754715][T11756] UDF-fs: error (device loop5): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 751.765836][T11756] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 751.776371][T11756] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 751.784323][T11756] UDF-fs: Scanning with blocksize 2048 failed [ 751.790756][T11756] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 751.801623][T11756] UDF-fs: error (device loop5): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 751.812886][T11756] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 751.822921][T11756] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 751.830796][T11756] UDF-fs: Scanning with blocksize 4096 failed [ 751.836951][T11756] UDF-fs: warning (device loop5): udf_fill_super: No partition found (1) [ 752.357950][T11764] ax25_connect(): syz.4.1022 uses autobind, please contact jreuter@yaina.de [ 757.107964][ T8224] team0 (unregistering): Port device team_slave_1 removed [ 757.180799][ T8224] team0 (unregistering): Port device team_slave_0 removed [ 757.261991][ T8224] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 757.353740][ T8224] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 758.153342][ T8224] bond0 (unregistering): Released all slaves [ 758.345242][ T9] lo speed is unknown, defaulting to 1000 [ 758.635494][T11794] netlink: 'syz.1.1037': attribute type 10 has an invalid length. [ 761.007865][ T8224] IPVS: stop unused estimator thread 0... [ 761.164506][T11827] CIFS mount error: No usable UNC path provided in device string! [ 761.164506][T11827] [ 761.174828][T11827] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 764.863659][T11862] xt_TCPMSS: Only works on TCP SYN packets [ 768.595919][T11873] overlayfs: failed to clone upperpath [ 769.622742][T11889] overlayfs: failed to clone upperpath [ 771.870289][T11919] overlayfs: failed to resolve './file0': -2 [ 773.110505][T11915] veth1_macvtap: left promiscuous mode [ 773.116127][T11915] macsec0: entered allmulticast mode [ 773.123529][T11916] veth1_macvtap: entered promiscuous mode [ 773.130680][T11916] veth1_macvtap: entered allmulticast mode [ 773.137010][T11916] macsec0: left allmulticast mode [ 773.143429][T11916] veth1_macvtap: left allmulticast mode [ 775.189232][T11934] loop5: detected capacity change from 0 to 8 [ 775.214690][T11934] SQUASHFS error: Unable to read inode 0x127 [ 777.155025][T11954] overlayfs: failed to clone upperpath [ 777.378403][T11959] loop4: detected capacity change from 0 to 2048 [ 777.387734][T11959] UDF-fs: bad mount option "uid=sº+Ç1Výõ&D×{¬?ð÷맖àëâÓ<`ÔVvœ mÐ^ºòäÒ‚cŠº˜¦ÔmöÓa|lb¡+\ôß^—ÞAþHm{%6Œ©k¥¶yeañ= N¦â™|ÛÆ´»_ÉÎÚPoe¨ÅPÉÝIR*Ü8‚áÍ…9Þ§ÜU!£³‰ˆk¨”yÛCøÝEó" or missing value [ 779.819715][T11983] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 781.567939][T11989] input: syz0 as /devices/virtual/input/input14 [ 784.579114][ T28] audit: type=1326 audit(2000000081.110:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12015 comm="syz.4.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4d6d8e929 code=0x7ffc0000 [ 785.684442][ T28] audit: type=1326 audit(2000000081.110:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12015 comm="syz.4.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4d6d8e929 code=0x7ffc0000 [ 785.819023][ T28] audit: type=1326 audit(2000000081.130:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12015 comm="syz.4.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7ff4d6d8e929 code=0x7ffc0000 [ 786.254484][ T28] audit: type=1326 audit(2000000081.130:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12015 comm="syz.4.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4d6d8e929 code=0x7ffc0000 [ 786.281254][ T28] audit: type=1326 audit(2000000081.130:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12015 comm="syz.4.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4d6d8e929 code=0x7ffc0000 [ 786.320700][ T28] audit: type=1326 audit(2000000081.140:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12015 comm="syz.4.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7ff4d6d8e929 code=0x7ffc0000 [ 786.344843][ T28] audit: type=1326 audit(2000000081.150:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12015 comm="syz.4.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4d6d8e929 code=0x7ffc0000 [ 786.449097][ T28] audit: type=1326 audit(2000000081.150:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12015 comm="syz.4.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4d6d8e929 code=0x7ffc0000 [ 786.886834][ T28] audit: type=1326 audit(2000000081.170:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12015 comm="syz.4.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff4d6d8e929 code=0x7ffc0000 [ 786.912347][ T28] audit: type=1326 audit(2000000081.170:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12015 comm="syz.4.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4d6d8e929 code=0x7ffc0000 [ 789.941243][T12066] fuse: Unknown parameter 'ÌÀB8#yÂäìâkÕ]Ù"ºÌòÅ;w' [ 789.962930][T12063] overlayfs: failed to clone upperpath [ 790.525057][T11580] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 791.014391][T11580] usb 5-1: Using ep0 maxpacket: 16 [ 791.046327][T12077] overlayfs: failed to clone upperpath [ 791.079622][T11580] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 791.095301][T11580] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 791.117465][T11580] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 791.166562][T11580] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 791.200853][T11580] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 791.228503][T11580] usb 5-1: config 0 descriptor?? [ 791.323873][T12089] fuse: Bad value for 'fd' [ 791.455866][T12094] veth1_macvtap: left promiscuous mode [ 791.461436][T12094] macsec0: entered allmulticast mode [ 791.478228][T12094] veth1_macvtap: entered promiscuous mode [ 791.484507][T12094] veth1_macvtap: entered allmulticast mode [ 791.490936][T12094] macsec0: left allmulticast mode [ 791.496228][T12094] veth1_macvtap: left allmulticast mode [ 792.344430][T11580] usbhid 5-1:0.0: can't add hid device: -71 [ 792.350498][T11580] usbhid: probe of 5-1:0.0 failed with error -71 [ 792.366799][T11580] usb 5-1: USB disconnect, device number 9 [ 792.413442][T12099] overlayfs: failed to clone upperpath [ 795.782833][T12132] overlayfs: failed to clone upperpath [ 798.057765][T12155] xt_limit: Overflow, try lower: 687865856/40 [ 798.510840][T12159] overlayfs: failed to clone upperpath [ 798.570568][T12160] overlayfs: failed to clone upperpath [ 798.577464][ T5772] Bluetooth: hci4: command tx timeout [ 798.644503][ T5865] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 798.685143][T12166] netlink: 'syz.5.1106': attribute type 10 has an invalid length. [ 798.857172][ T5865] usb 5-1: device descriptor read/64, error -71 [ 798.927341][T12166] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 799.191610][T12166] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 799.370737][ T5865] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 799.704747][ T5865] usb 5-1: device descriptor read/64, error -71 [ 800.704756][ T5865] usb usb5-port1: attempt power cycle [ 804.115695][T12206] loop1: detected capacity change from 0 to 8 [ 804.221516][T12206] SQUASHFS error: Unable to read inode 0x127 [ 805.231975][T12215] overlayfs: failed to clone upperpath [ 806.596658][T12230] xt_limit: Overflow, try lower: 687865856/40 [ 807.151005][T12248] overlayfs: failed to clone upperpath [ 808.356642][T12257] overlayfs: failed to clone upperpath [ 809.519491][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.525994][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.888391][T12287] loop4: detected capacity change from 0 to 8 [ 809.905738][T12283] overlayfs: failed to clone upperpath [ 809.960057][T12287] SQUASHFS error: Unable to read inode 0x127 [ 811.171341][T12303] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 811.597783][T12311] overlayfs: failed to clone upperpath [ 813.838814][T12329] netlink: 'syz.1.1142': attribute type 10 has an invalid length. [ 814.218079][T12345] overlayfs: failed to clone upperpath [ 815.186681][T12357] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 815.338640][T12362] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1147'. [ 818.497564][T12383] netlink: 'syz.2.1155': attribute type 10 has an invalid length. [ 818.554345][T12386] overlayfs: failed to clone upperpath [ 822.407679][T12420] overlayfs: failed to clone upperpath [ 824.848225][T12425] overlayfs: failed to resolve './file1': -2 [ 825.931917][T12443] overlayfs: failed to resolve './file1': -2 [ 826.055102][T12449] overlayfs: failed to clone upperpath [ 826.062435][T12453] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1167'. [ 827.208754][T12470] overlayfs: failed to clone upperpath [ 828.607894][T12476] overlayfs: failed to clone upperpath [ 829.168205][T12483] overlayfs: failed to clone upperpath [ 830.033980][T12499] overlayfs: failed to clone upperpath [ 832.425091][T12523] netlink: 216 bytes leftover after parsing attributes in process `syz.4.1187'. [ 832.821903][T12528] overlayfs: failed to clone upperpath [ 832.870525][T12529] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1185'. [ 832.972316][T12525] batadv_slave_0: entered promiscuous mode [ 832.993206][T12533] overlayfs: failed to clone upperpath [ 834.059231][T12541] overlayfs: failed to resolve './file0': -2 [ 834.124095][T12544] overlayfs: failed to clone upperpath [ 835.086348][T12551] overlayfs: failed to clone upperpath [ 835.601403][T12559] overlayfs: failed to clone upperpath [ 835.667993][T12557] overlayfs: failed to resolve './file1': -2 [ 835.781765][T12562] overlayfs: failed to clone upperpath [ 836.831869][T12567] veth1_macvtap: left promiscuous mode [ 836.837845][T12567] macsec0: entered allmulticast mode [ 836.846920][T12569] veth1_macvtap: entered promiscuous mode [ 836.852823][T12569] veth1_macvtap: entered allmulticast mode [ 836.858925][T12569] macsec0: left allmulticast mode [ 836.864087][T12569] veth1_macvtap: left allmulticast mode [ 838.845834][T12591] overlayfs: failed to resolve './file0': -2 [ 838.867291][T12595] overlayfs: failed to clone upperpath [ 839.722083][T12610] overlayfs: failed to clone upperpath [ 839.748427][T12609] overlayfs: failed to clone upperpath [ 839.945193][T12614] overlayfs: failed to clone upperpath [ 842.652604][T12641] overlayfs: failed to resolve './file0': -2 [ 845.433705][T12668] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1228'. [ 845.443047][T12668] netlink: 'syz.5.1228': attribute type 5 has an invalid length. [ 845.451623][T12668] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1228'. [ 845.787847][T12668] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 845.826050][T12671] overlayfs: failed to clone upperpath [ 845.841056][T12668] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 845.851753][T12668] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 845.861318][T12668] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 845.870950][T12668] geneve2: entered promiscuous mode [ 845.878598][T12668] geneve2: entered allmulticast mode [ 850.152158][T12701] syz.5.1230 (12701) used greatest stack depth: 20296 bytes left [ 850.344936][T12707] overlayfs: failed to clone upperpath [ 852.277727][T12725] UBIFS error (pid: 12725): cannot open "./file0", error -22 [ 852.280504][T12725] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1233'. [ 853.091206][T12725] team0: Port device team_slave_1 removed [ 855.339167][T12751] overlayfs: failed to clone upperpath [ 855.748831][T12761] veth1_macvtap: left promiscuous mode [ 855.754821][T12761] macsec0: entered allmulticast mode [ 855.767585][T12762] veth1_macvtap: entered promiscuous mode [ 855.773494][T12762] veth1_macvtap: entered allmulticast mode [ 855.779924][T12762] macsec0: left allmulticast mode [ 855.785191][T12762] veth1_macvtap: left allmulticast mode [ 856.203458][T12758] overlayfs: failed to clone upperpath [ 856.501044][T12772] overlayfs: failed to clone upperpath [ 858.494982][T12784] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1249'. [ 858.561936][T12787] overlayfs: failed to clone upperpath [ 858.868876][T12798] overlayfs: failed to clone upperpath [ 859.785875][T12805] overlayfs: failed to clone upperpath [ 860.646099][T12809] veth1_macvtap: left promiscuous mode [ 860.651634][T12809] macsec0: entered allmulticast mode [ 860.659681][T12810] veth1_macvtap: entered promiscuous mode [ 860.665613][T12810] veth1_macvtap: entered allmulticast mode [ 860.671591][T12810] macsec0: left allmulticast mode [ 860.677360][T12810] veth1_macvtap: left allmulticast mode [ 862.367391][T12829] lo speed is unknown, defaulting to 1000 [ 862.373687][T12829] lo speed is unknown, defaulting to 1000 [ 862.381331][T12829] lo speed is unknown, defaulting to 1000 [ 862.413218][T12829] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 863.097140][T12829] lo speed is unknown, defaulting to 1000 [ 863.104769][T12829] lo speed is unknown, defaulting to 1000 [ 863.112207][T12829] lo speed is unknown, defaulting to 1000 [ 863.119709][T12829] lo speed is unknown, defaulting to 1000 [ 863.282519][T12832] overlayfs: failed to clone upperpath [ 865.390076][T12861] overlayfs: failed to clone upperpath [ 869.255984][T12895] overlayfs: failed to clone upperpath [ 869.411318][T12902] overlayfs: failed to clone upperpath [ 869.748804][T12915] overlayfs: failed to clone upperpath [ 870.509224][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.515703][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 873.770966][T12939] overlayfs: failed to clone upperpath [ 875.495156][T12961] overlayfs: failed to clone upperpath [ 875.891080][T12966] overlayfs: failed to clone upperpath [ 877.027542][T12978] overlayfs: failed to clone upperpath [ 877.095495][T12980] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1303'. [ 877.177603][T12983] overlayfs: failed to clone upperpath [ 877.471996][T12980] vlan2: entered allmulticast mode [ 877.480110][T12980] bond0: entered allmulticast mode [ 877.698927][T12575] Bluetooth: hci4: command 0x0406 tx timeout [ 879.509394][T13000] overlayfs: failed to resolve './file0': -2 [ 881.389666][T13019] netlink: 'syz.2.1313': attribute type 4 has an invalid length. [ 881.481318][T13019] netlink: set zone limit has 8 unknown bytes [ 881.510746][T13022] overlayfs: failed to clone upperpath [ 883.010587][T13026] overlayfs: failed to resolve './file0': -2 [ 883.569251][T13033] overlayfs: failed to clone upperpath [ 883.747493][T13038] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 886.283813][T13058] overlayfs: failed to clone upperpath [ 888.906967][T13074] overlayfs: failed to clone upperpath [ 890.644515][T13093] overlayfs: failed to clone upperpath [ 890.974106][T13100] batman_adv: batadv0: Adding interface: ip6gretap1 [ 890.985240][T13100] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 891.014859][T13100] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 891.477211][T13095] xt_CT: No such helper "snmp" [ 891.496102][T13095] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 891.504742][T13095] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 891.512396][T13095] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 891.520947][T13095] batman_adv: batadv0: Removing interface: ip6gretap1 [ 891.560700][T13095] bond0: (slave batadv0): Releasing backup interface [ 893.618166][T13108] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 893.687463][T13119] overlayfs: failed to clone upperpath [ 895.462024][T13131] overlayfs: failed to clone upperpath [ 896.367476][T13128] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1343'. [ 896.376540][T13128] bridge_slave_1: left allmulticast mode [ 896.382250][T13128] bridge_slave_1: left promiscuous mode [ 896.388110][T13128] bridge0: port 2(bridge_slave_1) entered disabled state [ 896.409251][T13128] bridge_slave_0: left allmulticast mode [ 896.415308][T13128] bridge_slave_0: left promiscuous mode [ 896.421058][T13128] bridge0: port 1(bridge_slave_0) entered disabled state [ 901.144505][T13164] overlayfs: failed to clone upperpath [ 901.176544][T13170] overlayfs: failed to clone upperpath [ 904.170813][T13175] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1357'. [ 905.063898][T13193] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1360'. [ 906.956892][T13206] overlayfs: failed to clone upperpath [ 908.470282][T13216] overlayfs: failed to clone upperpath [ 910.555270][T13243] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1371'. [ 911.060306][T13246] overlayfs: failed to clone upperpath [ 912.005823][T13251] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 916.532571][T13304] overlayfs: failed to clone upperpath [ 916.878573][T13311] xt_CT: You must specify a L4 protocol and not use inversions on it [ 917.504800][T13315] overlayfs: failed to clone upperpath [ 917.566714][T13312] overlayfs: failed to clone upperpath [ 917.648805][T13309] lo: entered promiscuous mode [ 917.666517][T13318] overlayfs: failed to clone upperpath [ 918.130987][T13309] tunl0: entered promiscuous mode [ 918.147834][T13309] gre0: entered promiscuous mode [ 918.207949][T13309] gretap0: entered promiscuous mode [ 918.233852][T13309] erspan0: entered promiscuous mode [ 918.258599][T13309] ip_vti0: entered promiscuous mode [ 918.278685][T13309] ip6_vti0: entered promiscuous mode [ 918.299948][T13309] sit0: entered promiscuous mode [ 918.333938][T13309] ip6tnl0: entered promiscuous mode [ 918.356990][T13309] ip6gre0: entered promiscuous mode [ 918.383031][T13309] ip6gretap0: entered promiscuous mode [ 918.407930][T13309] vcan0: entered promiscuous mode [ 918.425064][T13309] bond0: entered promiscuous mode [ 918.430304][T13309] bond_slave_0: entered promiscuous mode [ 918.438809][T13309] bond_slave_1: entered promiscuous mode [ 918.716316][T13309] team0: entered promiscuous mode [ 918.721637][T13309] team_slave_0: entered promiscuous mode [ 918.742570][T13309] dummy0: entered promiscuous mode [ 918.756885][T13309] nlmon0: entered promiscuous mode [ 918.763787][T13309] caif0: entered promiscuous mode [ 918.772905][T13309] vxcan0: entered promiscuous mode [ 918.783804][T13309] vxcan1: entered promiscuous mode [ 918.790991][T13309] veth0: entered promiscuous mode [ 918.820773][T13309] veth1: entered promiscuous mode [ 918.849799][T13309] wg0: entered promiscuous mode [ 918.868516][T13309] wg1: entered promiscuous mode [ 918.883042][T13309] wg2: entered promiscuous mode [ 918.898777][T13309] veth0_to_bridge: entered promiscuous mode [ 918.916845][T13309] bridge_slave_0: entered promiscuous mode [ 918.926592][T13309] veth1_to_bridge: entered promiscuous mode [ 918.956669][T13309] bridge_slave_1: entered promiscuous mode [ 918.969979][T13309] veth0_to_bond: entered promiscuous mode [ 918.999922][T13309] veth1_to_bond: entered promiscuous mode [ 919.020525][T13309] veth0_to_team: entered promiscuous mode [ 919.032394][T13309] veth0_to_batadv: entered promiscuous mode [ 919.047794][T13309] veth1_to_batadv: entered promiscuous mode [ 919.064542][T13309] batadv_slave_1: entered promiscuous mode [ 919.098846][T13309] xfrm0: entered promiscuous mode [ 919.118879][T13309] veth0_to_hsr: entered promiscuous mode [ 919.145427][T13309] veth1_to_hsr: entered promiscuous mode [ 919.172064][T13309] hsr0: entered promiscuous mode [ 919.191027][T13309] veth1_virt_wifi: entered promiscuous mode [ 919.207568][T13309] veth0_virt_wifi: entered promiscuous mode [ 919.218733][T13309] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 919.264814][T13309] vlan0: entered promiscuous mode [ 919.270353][T13309] vlan1: entered promiscuous mode [ 919.276947][T13309] macvlan0: entered promiscuous mode [ 919.327716][T13309] macvlan1: entered promiscuous mode [ 919.347888][T13309] ipvlan0: entered promiscuous mode [ 919.355708][T13309] ipvlan1: entered promiscuous mode [ 919.411002][T13309] macvtap0: entered promiscuous mode [ 919.427908][T13309] macsec0: entered promiscuous mode [ 919.448166][T13309] geneve0: entered promiscuous mode [ 919.467188][T13309] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 919.476416][T13309] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 919.486009][T13309] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 919.496327][T13309] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 919.506495][T13309] geneve1: entered promiscuous mode [ 919.521575][T13309] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 919.538969][T13309] netdevsim netdevsim4 netdevsim1: entered promiscuous mode [ 919.557406][T13309] netdevsim netdevsim4 netdevsim2: entered promiscuous mode [ 919.583255][T13309] netdevsim netdevsim4 netdevsim3: entered promiscuous mode [ 919.600005][T13309] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 919.607529][T13309] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 919.618505][T13309] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 919.631680][T13309] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 919.641119][T13309] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 919.653521][T13309] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 919.674802][T13309] ip6gretap1: entered promiscuous mode [ 919.681111][T13321] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1393'. [ 921.510625][T13345] overlayfs: failed to clone upperpath [ 921.564381][T13347] overlayfs: failed to clone upperpath [ 923.012238][T13365] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1403'. [ 923.125929][T13365] netlink: 'syz.2.1403': attribute type 5 has an invalid length. [ 923.198110][T13365] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1403'. [ 923.342533][T13365] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 923.418773][T13365] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 923.451995][T13365] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 923.462514][T13365] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 923.490960][T13365] geneve2: entered promiscuous mode [ 923.496532][T13365] geneve2: entered allmulticast mode [ 924.162958][T13374] overlayfs: failed to clone upperpath [ 926.944121][T13395] overlayfs: failed to clone upperpath [ 927.725010][T13408] overlayfs: failed to clone upperpath [ 928.224901][T13416] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1413'. [ 932.046600][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.053359][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.287090][T13444] overlayfs: failed to clone upperpath [ 932.830677][T13446] overlayfs: failed to clone upperpath [ 933.005544][T13453] overlayfs: failed to clone upperpath [ 935.666840][T13477] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1432'. [ 935.778765][T13482] overlayfs: failed to clone upperpath [ 935.789753][T13477] vlan2: entered allmulticast mode [ 935.802682][T13477] bond2: entered allmulticast mode [ 937.043603][T13492] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 937.606272][T13498] overlayfs: failed to clone upperpath [ 937.779338][T13499] overlayfs: failed to clone upperpath [ 938.832206][T13509] netlink: 'syz.5.1439': attribute type 4 has an invalid length. [ 938.899627][T13509] netlink: set zone limit has 8 unknown bytes [ 939.051948][T13515] overlayfs: failed to clone upperpath [ 939.260091][T13519] overlayfs: failed to clone upperpath [ 940.168774][T13527] overlayfs: failed to clone upperpath [ 941.708966][T13538] overlayfs: failed to clone upperpath [ 941.737459][T13525] overlayfs: failed to clone upperpath [ 941.877722][T13544] overlayfs: failed to clone upperpath [ 943.946341][T13559] overlayfs: failed to clone upperpath [ 944.787035][T13569] overlayfs: failed to clone upperpath [ 945.081472][T13582] overlayfs: failed to clone upperpath [ 946.072294][T13591] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1470'. [ 946.128928][T13593] overlayfs: failed to clone upperpath [ 947.338267][T13611] lo speed is unknown, defaulting to 1000 [ 947.344307][T13611] lo speed is unknown, defaulting to 1000 [ 947.350852][T13611] lo speed is unknown, defaulting to 1000 [ 947.368562][T13611] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 947.393545][T13611] lo speed is unknown, defaulting to 1000 [ 947.400950][T13611] lo speed is unknown, defaulting to 1000 [ 947.408458][T13611] lo speed is unknown, defaulting to 1000 [ 947.416005][T13611] lo speed is unknown, defaulting to 1000 [ 947.431501][T13611] smc: removing ib device syz! [ 947.576553][T13614] batadv_slave_0: mtu less than device minimum [ 947.912495][T13611] ------------[ cut here ]------------ [ 947.918672][T13611] WARNING: CPU: 0 PID: 13611 at drivers/infiniband/sw/rxe/rxe_pool.c:116 rxe_pool_cleanup+0x42/0x50 [ 947.931456][T13611] Modules linked in: [ 947.935496][T13611] CPU: 0 PID: 13611 Comm: syz.5.1475 Not tainted 6.6.94-syzkaller #0 [ 947.944328][T13611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 947.954859][T13611] RIP: 0010:rxe_pool_cleanup+0x42/0x50 [ 947.960393][T13611] Code: 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 90 f5 1b fa 48 83 3b 00 75 07 e8 65 4e c3 f9 5b c3 e8 5e 4e c3 f9 <0f> 0b 5b c3 66 2e 0f 1f 84 00 00 00 00 00 66 0f 1f 00 55 41 57 41 [ 947.980795][T13611] RSP: 0018:ffffc9000c2b7168 EFLAGS: 00010246 [ 947.986966][T13611] RAX: ffffffff87c24772 RBX: ffff88807c2a9298 RCX: 0000000000080000 [ 947.995128][T13611] RDX: ffffc9000d40d000 RSI: 000000000007ffff RDI: 0000000000080000 [ 948.003170][T13611] RBP: 0000000000000002 R08: ffff88807c2a8743 R09: 1ffff1100f8550e8 [ 948.011340][T13611] R10: dffffc0000000000 R11: ffffed100f8550e9 R12: dffffc0000000000 [ 948.019443][T13611] R13: 1ffff92001856e48 R14: ffffffff87c08e10 R15: dffffc0000000000 [ 948.027628][T13611] FS: 00007f7f32c5f6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 948.037036][T13611] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 948.043797][T13611] CR2: 000000110c351543 CR3: 0000000078b38000 CR4: 00000000003506f0 [ 948.052503][T13611] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 948.060856][T13611] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 948.069121][T13611] Call Trace: [ 948.072640][T13611] [ 948.076414][T13611] rxe_dealloc+0x33/0x100 [ 948.080831][T13611] ? trace_raw_output_rtrs_clt_conn_class+0x240/0x240 [ 948.087756][T13611] ib_dealloc_device+0x4e/0x1f0 [ 948.093654][T13611] __ib_unregister_device+0x120/0x170 [ 948.099172][T13611] ib_unregister_device_and_put+0xb8/0xf0 [ 948.105014][T13611] nldev_dellink+0x2af/0x300 [ 948.110141][T13611] ? nldev_newlink+0x560/0x560 [ 948.114998][T13611] ? __lock_acquire+0x1334/0x7c80 [ 948.120109][T13611] ? apparmor_capable+0x137/0x1a0 [ 948.125247][T13611] ? bpf_lsm_capable+0x9/0x10 [ 948.130099][T13611] ? security_capable+0x89/0xb0 [ 948.135212][T13611] ? nldev_newlink+0x560/0x560 [ 948.140051][T13611] rdma_nl_rcv+0x6b9/0x9a0 [ 948.144725][T13611] ? rdma_nl_net_init+0x170/0x170 [ 948.150122][T13611] ? __lock_acquire+0x7c80/0x7c80 [ 948.155268][T13611] ? net_generic+0x1e/0x240 [ 948.159901][T13611] ? netlink_deliver_tap+0x2e/0x1b0 [ 948.165438][T13611] netlink_unicast+0x750/0x8c0 [ 948.170302][T13611] netlink_sendmsg+0x8c1/0xbe0 [ 948.175286][T13611] ? netlink_getsockopt+0x580/0x580 [ 948.180638][T13611] ? aa_sock_msg_perm+0x94/0x150 [ 948.185666][T13611] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 948.190995][T13611] ? security_socket_sendmsg+0x80/0xa0 [ 948.196592][T13611] ? netlink_getsockopt+0x580/0x580 [ 948.202024][T13611] ____sys_sendmsg+0x5bf/0x950 [ 948.207736][T13611] ? __asan_memset+0x22/0x40 [ 948.213405][T13611] ? __sys_sendmsg_sock+0x30/0x30 [ 948.220127][T13611] ? __import_iovec+0x5f2/0x860 [ 948.226964][T13611] ? import_iovec+0x73/0xa0 [ 948.231903][T13611] ___sys_sendmsg+0x220/0x290 [ 948.237938][T13611] ? __sys_sendmsg+0x270/0x270 [ 948.242926][T13611] __se_sys_sendmsg+0x1a5/0x270 [ 948.248268][T13611] ? __x64_sys_sendmsg+0x80/0x80 [ 948.254359][T13611] ? lockdep_hardirqs_on+0x98/0x150 [ 948.260217][T13611] do_syscall_64+0x55/0xb0 [ 948.265014][T13611] ? clear_bhb_loop+0x40/0x90 [ 948.270289][T13611] ? clear_bhb_loop+0x40/0x90 [ 948.276150][T13611] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 948.283463][T13611] RIP: 0033:0x7f7f31d8e929 [ 948.288235][T13611] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 948.312052][T13611] RSP: 002b:00007f7f32c5f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 948.321127][T13611] RAX: ffffffffffffffda RBX: 00007f7f31fb6080 RCX: 00007f7f31d8e929 [ 948.330042][T13611] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 000000000000000a [ 948.338714][T13611] RBP: 00007f7f31e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 948.346802][T13611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 948.355069][T13611] R13: 0000000000000000 R14: 00007f7f31fb6080 R15: 00007ffd17053888 [ 948.363363][T13611] [ 948.366573][T13611] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 948.374306][T13611] CPU: 0 PID: 13611 Comm: syz.5.1475 Not tainted 6.6.94-syzkaller #0 [ 948.382586][T13611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 948.392854][T13611] Call Trace: [ 948.396333][T13611] [ 948.399610][T13611] dump_stack_lvl+0x16c/0x230 [ 948.404541][T13611] ? show_regs_print_info+0x20/0x20 [ 948.409735][T13611] ? load_image+0x3b0/0x3b0 [ 948.414237][T13611] panic+0x2c0/0x710 [ 948.418299][T13611] ? bpf_jit_dump+0xd0/0xd0 [ 948.422918][T13611] __warn+0x2e0/0x470 [ 948.426908][T13611] ? rxe_pool_cleanup+0x42/0x50 [ 948.432395][T13611] ? rxe_pool_cleanup+0x42/0x50 [ 948.437278][T13611] report_bug+0x2be/0x4f0 [ 948.441682][T13611] ? rxe_pool_cleanup+0x42/0x50 [ 948.446806][T13611] ? rxe_pool_cleanup+0x42/0x50 [ 948.452375][T13611] ? rxe_pool_cleanup+0x44/0x50 [ 948.457242][T13611] handle_bug+0xcf/0x120 [ 948.461697][T13611] exc_invalid_op+0x1a/0x50 [ 948.466422][T13611] asm_exc_invalid_op+0x1a/0x20 [ 948.471304][T13611] RIP: 0010:rxe_pool_cleanup+0x42/0x50 [ 948.476917][T13611] Code: 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 90 f5 1b fa 48 83 3b 00 75 07 e8 65 4e c3 f9 5b c3 e8 5e 4e c3 f9 <0f> 0b 5b c3 66 2e 0f 1f 84 00 00 00 00 00 66 0f 1f 00 55 41 57 41 [ 948.496797][T13611] RSP: 0018:ffffc9000c2b7168 EFLAGS: 00010246 [ 948.502876][T13611] RAX: ffffffff87c24772 RBX: ffff88807c2a9298 RCX: 0000000000080000 [ 948.511378][T13611] RDX: ffffc9000d40d000 RSI: 000000000007ffff RDI: 0000000000080000 [ 948.519724][T13611] RBP: 0000000000000002 R08: ffff88807c2a8743 R09: 1ffff1100f8550e8 [ 948.527734][T13611] R10: dffffc0000000000 R11: ffffed100f8550e9 R12: dffffc0000000000 [ 948.536008][T13611] R13: 1ffff92001856e48 R14: ffffffff87c08e10 R15: dffffc0000000000 [ 948.544270][T13611] ? trace_raw_output_rtrs_clt_conn_class+0x240/0x240 [ 948.551044][T13611] ? rxe_pool_cleanup+0x42/0x50 [ 948.555897][T13611] ? rxe_pool_cleanup+0x42/0x50 [ 948.561048][T13611] rxe_dealloc+0x33/0x100 [ 948.565586][T13611] ? trace_raw_output_rtrs_clt_conn_class+0x240/0x240 [ 948.573155][T13611] ib_dealloc_device+0x4e/0x1f0 [ 948.578650][T13611] __ib_unregister_device+0x120/0x170 [ 948.584298][T13611] ib_unregister_device_and_put+0xb8/0xf0 [ 948.591366][T13611] nldev_dellink+0x2af/0x300 [ 948.596209][T13611] ? nldev_newlink+0x560/0x560 [ 948.601070][T13611] ? __lock_acquire+0x1334/0x7c80 [ 948.606571][T13611] ? apparmor_capable+0x137/0x1a0 [ 948.611785][T13611] ? bpf_lsm_capable+0x9/0x10 [ 948.616473][T13611] ? security_capable+0x89/0xb0 [ 948.621349][T13611] ? nldev_newlink+0x560/0x560 [ 948.626228][T13611] rdma_nl_rcv+0x6b9/0x9a0 [ 948.630667][T13611] ? rdma_nl_net_init+0x170/0x170 [ 948.635812][T13611] ? __lock_acquire+0x7c80/0x7c80 [ 948.641589][T13611] ? net_generic+0x1e/0x240 [ 948.646820][T13611] ? netlink_deliver_tap+0x2e/0x1b0 [ 948.652342][T13611] netlink_unicast+0x750/0x8c0 [ 948.657149][T13611] netlink_sendmsg+0x8c1/0xbe0 [ 948.661927][T13611] ? netlink_getsockopt+0x580/0x580 [ 948.667269][T13611] ? aa_sock_msg_perm+0x94/0x150 [ 948.672445][T13611] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 948.677757][T13611] ? security_socket_sendmsg+0x80/0xa0 [ 948.683247][T13611] ? netlink_getsockopt+0x580/0x580 [ 948.688650][T13611] ____sys_sendmsg+0x5bf/0x950 [ 948.693605][T13611] ? __asan_memset+0x22/0x40 [ 948.698349][T13611] ? __sys_sendmsg_sock+0x30/0x30 [ 948.703362][T13611] ? __import_iovec+0x5f2/0x860 [ 948.708233][T13611] ? import_iovec+0x73/0xa0 [ 948.712859][T13611] ___sys_sendmsg+0x220/0x290 [ 948.717619][T13611] ? __sys_sendmsg+0x270/0x270 [ 948.722501][T13611] __se_sys_sendmsg+0x1a5/0x270 [ 948.727388][T13611] ? __x64_sys_sendmsg+0x80/0x80 [ 948.732353][T13611] ? lockdep_hardirqs_on+0x98/0x150 [ 948.737658][T13611] do_syscall_64+0x55/0xb0 [ 948.742085][T13611] ? clear_bhb_loop+0x40/0x90 [ 948.746878][T13611] ? clear_bhb_loop+0x40/0x90 [ 948.751677][T13611] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 948.757582][T13611] RIP: 0033:0x7f7f31d8e929 [ 948.762465][T13611] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 948.782539][T13611] RSP: 002b:00007f7f32c5f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 948.791274][T13611] RAX: ffffffffffffffda RBX: 00007f7f31fb6080 RCX: 00007f7f31d8e929 [ 948.799341][T13611] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 000000000000000a [ 948.807673][T13611] RBP: 00007f7f31e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 948.816010][T13611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 948.824054][T13611] R13: 0000000000000000 R14: 00007f7f31fb6080 R15: 00007ffd17053888 [ 948.832650][T13611] [ 948.835965][T13611] Kernel Offset: disabled [ 948.841395][T13611] Rebooting in 86400 seconds..