last executing test programs: 13m37.533101611s ago: executing program 1 (id=116): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000440)={{0x0, 0x5, 0x0, 0x25}, 'syz0\x00', 0x53}) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x1) ioctl$UI_DEV_CREATE(r2, 0x5501) write$uinput_user_dev(r1, &(0x7f00000004c0)={'syz0\x00', {0x7, 0x3, 0x1, 0x9}, 0x7, [0x4, 0x6, 0x802, 0xe9a2, 0x1, 0x0, 0xa9ba, 0xc1f, 0x1, 0x7f5d, 0x3, 0x6, 0x5, 0x10000, 0x2, 0x3, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x3, 0x3, 0x9, 0xfff, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x0, 0xf, 0xcc, 0x5, 0x80, 0x401, 0x5, 0x5, 0xfffffffd, 0x8, 0xb, 0x3, 0xffff8001, 0x6, 0x4, 0x80000000, 0x1, 0x9, 0x7, 0x0, 0x5, 0xfff, 0x1, 0x7fe, 0x7fff, 0x5, 0x1000002, 0x8], [0x2, 0x1, 0x10000, 0x7, 0x9, 0x2, 0x5, 0x4, 0x9, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x7, 0x8, 0x5, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0x5, 0x80000001, 0x0, 0x0, 0x4, 0x4, 0x7, 0x9, 0x4, 0x1, 0x5, 0x5, 0xfffffb66, 0xfb5, 0x2, 0x4, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x8, 0x6f, 0x80b, 0x1, 0x6, 0x525ba681, 0x4f74, 0x7, 0x1, 0x1, 0x8, 0x100, 0x6, 0x10000, 0x1306, 0x8b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x40, 0x4, 0xfffffff9, 0x7aa, 0x10, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x7fffffff, 0x1, 0x1, 0x4, 0x8, 0xfffffffa, 0x7, 0x9, 0x6, 0x4, 0xfffffff7, 0xa3, 0x3, 0x0, 0x0, 0x3, 0x4c, 0x3, 0x5, 0x2, 0x0, 0x9, 0x13, 0x0, 0x2, 0xfff, 0x6, 0x100, 0x7c83, 0xd, 0x1, 0x4, 0xf, 0x6, 0x47, 0xfa1, 0x0, 0x11, 0x3, 0x1, 0x7, 0x7, 0x8000, 0x7ff, 0x10, 0x2, 0x10001, 0x1, 0x0, 0x6, 0x71c], [0x81, 0x3, 0x10, 0x4e26, 0x3, 0x40, 0xfffffff3, 0x497, 0x4, 0x1, 0x3, 0x5, 0x56, 0xc28, 0x9, 0x5, 0x5, 0xa, 0x79a, 0x40, 0x9, 0x6, 0xc41f, 0x80000001, 0x6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x0, 0x0, 0x1000, 0x10, 0xd, 0x6, 0x8000, 0x53, 0x78d, 0x4, 0x1, 0xffffb027, 0xfffffff8, 0x9, 0x7, 0x6, 0x101, 0x7, 0x7, 0x4, 0x0, 0xb, 0x400, 0x8, 0x0, 0x8, 0x7, 0x9a33247, 0x8, 0x0, 0x1, 0x8001, 0xfffffff7, 0x5]}, 0x45c) 13m37.179182779s ago: executing program 1 (id=121): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x381081a, &(0x7f00000010c0)=ANY=[], 0xfc, 0x2c7, &(0x7f0000000740)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x800c4, 0xf7) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write$FUSE_IOCTL(r1, &(0x7f00000000c0)={0x20, 0xffffffffffffffda, 0x0, {0x0, 0x0, 0x401, 0xe2}}, 0x20) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, 0x0, 0x8000) 13m36.01112011s ago: executing program 1 (id=129): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 13m35.761393193s ago: executing program 1 (id=132): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) syz_clone(0x48020000, 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89101) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) 13m34.000108964s ago: executing program 1 (id=140): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x3) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) 13m33.130487909s ago: executing program 1 (id=142): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="20000000160007c3999dbf00fedbdf251f7c00000c00018008000100", @ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0x20000800}, 0x8010) 13m32.648084364s ago: executing program 32 (id=142): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="20000000160007c3999dbf00fedbdf251f7c00000c00018008000100", @ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0x20000800}, 0x8010) 11m54.682919772s ago: executing program 0 (id=415): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) openat$vcsu(0xffffffffffffff9c, 0x0, 0x690140, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) r3 = socket(0x2, 0x3, 0xff) sendto$inet(r3, 0x0, 0x14, 0xc0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x8}}, 0x10) sendmsg$AUDIT_USER(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xa8, 0x3ed, 0x8, 0x70bd2c, 0x25dfdbfd, "3308dc2cdd788c6b7a2119da36c3ae74e65d08bfd9b4f565c23a9872f3dc6bda9f9e751061729e73d6c2be4958c808d1a896dce4f983d816c9a9cad8b7b751bca12f4853f041cb603ef969050b3c706a77aabe4491e71861b6b28869e7f4cb5d7a245320ac9800232051c528582c5b47bd72c73a484bb0e446e867bab029e2cd655934a02ba5581c9b4894aa9abf0f35e156f1b07a36"}, 0xa8}, 0x1, 0x0, 0x0, 0x4048}, 0x200000d0) 11m50.026523714s ago: executing program 0 (id=427): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x20004014) 11m49.51216057s ago: executing program 0 (id=428): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setgroups(0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000b40)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[{}, {}, {}], &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000980), 0x3, 0x9, 0x5}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r3) sendmsg$NFC_CMD_LLC_SET_PARAMS(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x24, r4, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0xcb}]}, 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x10) 11m48.379787379s ago: executing program 0 (id=430): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f0000000640)=ANY=[], 0x1, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000080)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x3e, 0x0, 0x0) syz_fuse_handle_req(r2, &(0x7f00000020c0)="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", 0x2000, &(0x7f0000000700)={&(0x7f0000000280)={0x50, 0x0, 0xd, {0x7, 0x2b, 0x0, 0x800000, 0x0, 0x6, 0xe9f, 0xffffffff, 0x0, 0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f00000060c0)="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", 0x2000, &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f000000c0c0)="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", 0x2000, &(0x7f0000000d00)={&(0x7f00000080c0)={0x50, 0x0, 0x2000000000020000, {0x7, 0x2b, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000008140)="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", 0x2000, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x90, 0x0, 0xffffffffffffffff, {0x3, 0x0, 0xfffffffffffffffd, 0x0, 0x4227, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1fffffffffffff, 0x3, 0x0, 0x73d, 0x0, 0x4000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x200) umount2(&(0x7f0000000100)='./file0\x00', 0x0) 11m46.958511533s ago: executing program 0 (id=432): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ptrace$peeksig(0x4209, 0x0, &(0x7f0000000080)={0x4, 0x1, 0x2}, &(0x7f00000005c0)=[{}, {}]) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x48) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, r3, 0x0) mremap(&(0x7f0000fa4000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000fa2000/0x1000)=nil) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 11m41.391086031s ago: executing program 0 (id=443): syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', 0x1210080, &(0x7f0000000340)=ANY=[@ANYBLOB="747970653d54a10fb22c63726561746f723daa34aaf62c696f636861727365743d63703836342c63726561746f723d0de07c342c636f6465706167653d63703934392c6469725f756d61736b3d30303030303030303030303030303030303030303030302c6469725f756d61736b3d30303030303030303030303030303030303030303030302c6469725f756d61736b3d30303030303030303030303030303030303030313030302c71756965742c756d61736b3d3030303030303030303030303032362c000000000000000000"], 0x7, 0x318, &(0x7f00000004c0)="$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") r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4) sendmmsg$inet(r0, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)}], 0x1}}], 0x1, 0x4000800) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x3}, 0x50) syz_mount_image$exfat(0x0, &(0x7f0000000240)='./bus\x00', 0x10, 0x0, 0x5, 0x0, &(0x7f0000000280)) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./bus/file0\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xc, 0xc, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xaa99}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x15}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 11m40.789304013s ago: executing program 33 (id=443): syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', 0x1210080, &(0x7f0000000340)=ANY=[@ANYBLOB="747970653d54a10fb22c63726561746f723daa34aaf62c696f636861727365743d63703836342c63726561746f723d0de07c342c636f6465706167653d63703934392c6469725f756d61736b3d30303030303030303030303030303030303030303030302c6469725f756d61736b3d30303030303030303030303030303030303030303030302c6469725f756d61736b3d30303030303030303030303030303030303030313030302c71756965742c756d61736b3d3030303030303030303030303032362c000000000000000000"], 0x7, 0x318, &(0x7f00000004c0)="$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") r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4) sendmmsg$inet(r0, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)}], 0x1}}], 0x1, 0x4000800) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x3}, 0x50) syz_mount_image$exfat(0x0, &(0x7f0000000240)='./bus\x00', 0x10, 0x0, 0x5, 0x0, &(0x7f0000000280)) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./bus/file0\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xc, 0xc, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xaa99}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x15}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4m20.180188524s ago: executing program 5 (id=1726): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$rds(0x15, 0x5, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000340), &(0x7f0000000380)=r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xb90, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 4m19.988703484s ago: executing program 5 (id=1727): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0xffffc000) r0 = userfaultfd(0x80001) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r1, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r1, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x715}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000100)={{&(0x7f00004a3000/0x1000)=nil, 0x1000}}) 4m19.88234217s ago: executing program 5 (id=1728): syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000002c0)=ANY=[@ANYRES16=r1, @ANYRES32=r0]) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, 0x0, 0x0, 0x4010045, &(0x7f0000000140)={0x11, 0xf6, r3, 0x1, 0x80, 0x6, @multicast}, 0x14) 4m19.654310512s ago: executing program 5 (id=1732): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x804800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844ac00e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e"], 0xf9, 0x1213, &(0x7f0000000600)="$eJzs3E9rXFUYB+A3Y2rS1PxRa7Vd6AtuxMWlycKVIEFSkAwotRFaQbg1Ex0yzpTcITAiVldu/Ryu3Ql+g2z8DO6y6bIL8UrvNG1SU4vQZMQ+z2Luyz3nxzkHhoEz3HP33/3xq+2tqtgqh9GamorWrYi8m5HRigOvr4+v12+sr7bba1czr6xeW34nMxfe+PXTb2Yi4twnPy/8MhN7S5/t31n5fe/C3sX9P6992a2yW2V/MMwybw4Gw/JmbyE3u9V2kflRr1NWnez2q87OofZObr0dEaMs+5vzc7d2OlWVZX+U251RDgc53Bll+UXZ7WdRFDk/FzzWmSd32fjpbl3XEXV9Jp6Puq7rszEX5+KFmI+F+C4iXoyX4uU4H6/EhXg1XouLTa/TmD4AAAAAAAAAAAAAAAAAAAA8O/7p/P9iLDn/DwAAAAAAAAAAAAAAAAAAAKfg4+s31lfb7bWrmbMRvR92N3Y3xtdx+9K9j1504nIsxh/RnP4fG9dXPmivXc7GUnzfu30/f3t347kmv3qQX25eJ3A/P920HeSXx/k8mp+JuXv5reg2+ZVYjPPHj79ybH423nrzUL6Ixfjt8xhELzabsR/mv13OfP/D9iP5S00/AAAA+D8o8oFj9+9F8bj2cf7B/vrJ/w88sr+ejkvTk107EdXo6+2y1evsNEXvoJj9252TK+IUx3q6RcSduilmjja1TmjQVkx8yYeKqf/GNBRPpzgbR+9M+peJ0/DwazDpmQAAAAAAAAAAAPBvnPBzhdNxzJNl701mqQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPzFDhwLAAAAAAjzt06jYwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGCoAAP//qH3FUA==") openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) dup(0xffffffffffffffff) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, 0x0, 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) syz_clone(0x22180, 0x0, 0xa42f, 0x0, 0x0, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x84000, 0x0) mount$bpf(0x200000000000, 0x0, 0x0, 0x2042, 0x0) mount$bind(0x0, 0x0, 0x0, 0x101091, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) 4m18.351434319s ago: executing program 5 (id=1736): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) shutdown(r1, 0x1) 4m16.450548288s ago: executing program 5 (id=1748): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84d, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x2, 0xb}, 0x5, 0x34, 0x91f}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_RATE64={0xc, 0x4, 0xdd31e353c9fd1eb}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000002c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r6, 0x3c}, 0x80, &(0x7f0000000080)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1}, 0x4) 4m16.02093004s ago: executing program 34 (id=1748): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84d, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x2, 0xb}, 0x5, 0x34, 0x91f}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_RATE64={0xc, 0x4, 0xdd31e353c9fd1eb}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000002c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r6, 0x3c}, 0x80, &(0x7f0000000080)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1}, 0x4) 16.965586218s ago: executing program 6 (id=2211): socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r4, 0x2219, 0x40007721, 0x14, 0x0, 0x0) 15.309419844s ago: executing program 6 (id=2213): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x0, @local}, 0x2}}, 0x26) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r5, 0x1, 0x60bd27, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20) 14.906824805s ago: executing program 3 (id=2216): mprotect(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x123a02, 0x0) pwritev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="b2", 0xfdef}], 0x10000000000000bb, 0x7, 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x2000000, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd', @ANYRESHEX, @ANYBLOB="303030303030307b6cf4c23034308f725f69643d000000000000", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions,\x00'], 0xfd, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r2, &(0x7f00000020c0)={0x2020}, 0x2020) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x8]}, 0x8, 0x80000) read$FUSE(r3, &(0x7f0000000140)={0x2020}, 0x2020) r4 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r4) 13.674072129s ago: executing program 3 (id=2219): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x6b4, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r6, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r4}, 0x20) sendmmsg$inet6(r4, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="b0", 0x7ffff000}], 0x11}}], 0x2, 0x0) 11.397493918s ago: executing program 3 (id=2225): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x8000000}, 0xffffffffffffff30) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$igmp(0x2, 0x3, 0x2) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty, 0x1}, 0x1c) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000000000080003000000000014000600ff"], 0x58}}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x8004}, 0x4044180) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x78}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) 10.736139842s ago: executing program 6 (id=2228): socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r4, 0x2219, 0x40007721, 0x14, 0x0, 0x0) 8.252884221s ago: executing program 6 (id=2230): pipe(&(0x7f00000002c0)) r0 = openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x1) writev(r0, &(0x7f00000013c0)=[{&(0x7f0000000280)="1ee3057bee6ae980208552629bcf618f33c67be698c42031fb123485ac6434fedb7807e8b58e17309e426bd6d74205870003a5f02935478cd88d09eddf2f5214dca594617f8889e25a28dda33e3cda2db9a05e8751d73f470eb9153effc41937a570207bd3e11aa0bcbc6740b461ffc275669789e692a89a5cbed958b6fbe5f88a4c6499d3942a736778f168c21460233da23ed21cbc6fd663a22a257ca274344ce8f1e1ccf8bc35ee21bb70b78c4fd61ea96a2016e97b083496e8e30711eaab4b85c420e3605386861e33a877c5f1e62fe7215bea01664580b2ebe9feddb8c128ca639c0f2f20b49a91844dfade410f871c66f857fe8f5ad7", 0xf9}, {&(0x7f0000000480)="79783014bba9a6a681c508c4c920a7855100000000", 0x15}, {&(0x7f0000000540)="30eb8d2a037de0040507a7661b8acc5b599828575eb339f6801e98343e988b9df9ea001743f8ac6896177669717f3d5931c7c40b8003f72c417d7a9cab294b82ea967df9c8afd2b79d7d5e218ebdc378d060781cc1eeec3a2bfa84bbd442c0be2cae377a2f62d951872218103b0da11e07e25fbd649b0d030694fb7ba7e03377f7bc39c96d79c78fbbfbf7e63984e41d803633bd52396bccca916a266195ee6484c7a2161619deab9b30f638c1d186", 0xaf}, {0x0}, {&(0x7f00000001c0)}], 0x5) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fanotify_init(0x0, 0x0) fanotify_mark(r2, 0x401, 0x1000, r1, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="020000000400000008"], 0x50) r3 = socket(0x2a, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000d80)="f2435f0100088000008508004dae7f681a6902ee04229b5da5d844ca63a1b5a799ba234c8e951dd1610d44811e805d134e824795d541aa085963ad9132eb32de1a760a1ed0a875130316975f1e3e5eafb27cc1e0e1b8fe3887bd96", 0x5b, 0x45, &(0x7f0000000100)={0x11, 0xf5, r5, 0x1, 0x0, 0x6, @broadcast}, 0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5, @ANYBLOB="1400350064756d6d7930"], 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 8.225468632s ago: executing program 2 (id=2231): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001800dd8d0000000000000000020000000000fc050000000006001500010000001800168014000100800000100000030000001000000011"], 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000a0) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socket$inet6_tcp(0xa, 0x1, 0x0) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x58) 7.034176464s ago: executing program 2 (id=2232): pipe(&(0x7f00000002c0)) r0 = openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x1) writev(r0, &(0x7f00000013c0)=[{&(0x7f0000000280)="1ee3057bee6ae980208552629bcf618f33c67be698c42031fb123485ac6434fedb7807e8b58e17309e426bd6d74205870003a5f02935478cd88d09eddf2f5214dca594617f8889e25a28dda33e3cda2db9a05e8751d73f470eb9153effc41937a570207bd3e11aa0bcbc6740b461ffc275669789e692a89a5cbed958b6fbe5f88a4c6499d3942a736778f168c21460233da23ed21cbc6fd663a22a257ca274344ce8f1e1ccf8bc35ee21bb70b78c4fd61ea96a2016e97b083496e8e30711eaab4b85c420e3605386861e33a877c5f1e62fe7215bea01664580b2ebe9feddb8c128ca639c0f2f20b49a91844dfade410f871c66f857fe8f5ad7", 0xf9}, {&(0x7f0000000480)="79783014bba9a6a681c508c4c920a7855100000000", 0x15}, {&(0x7f0000000540)="30eb8d2a037de0040507a7661b8acc5b599828575eb339f6801e98343e988b9df9ea001743f8ac6896177669717f3d5931c7c40b8003f72c417d7a9cab294b82ea967df9c8afd2b79d7d5e218ebdc378d060781cc1eeec3a2bfa84bbd442c0be2cae377a2f62d951872218103b0da11e07e25fbd649b0d030694fb7ba7e03377f7bc39c96d79c78fbbfbf7e63984e41d803633bd52396bccca916a266195ee6484c7a2161619deab9b30f638c1d186", 0xaf}, {0x0}, {&(0x7f00000001c0)}], 0x5) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fanotify_init(0x0, 0x0) fanotify_mark(r2, 0x401, 0x1000, r1, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="020000000400000008"], 0x50) r3 = socket(0x2a, 0x2, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000d80)="f2435f0100088000008508004dae7f681a6902ee04229b5da5d844ca63a1b5a799ba234c8e951dd1610d44811e805d134e824795d541aa085963ad9132eb32de1a760a1ed0a875130316975f1e3e5eafb27cc1e0e1b8fe3887bd96", 0x5b, 0x45, &(0x7f0000000100)={0x11, 0xf5, r5, 0x1, 0x0, 0x6, @broadcast}, 0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5, @ANYBLOB="1400350064756d6d7930"], 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 6.945199729s ago: executing program 4 (id=2233): mprotect(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x123a02, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0xd, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f0000000240)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x2000000, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r4, @ANYBLOB="303030303030307b6cf4c23034308f725f69643d000000000000", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions,\x00'], 0xfd, 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r5, &(0x7f00000020c0)={0x2020}, 0x2020) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000140)={r3}, &(0x7f00000001c0)=0x8) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x8]}, 0x8, 0x80000) read$FUSE(r6, &(0x7f0000000140)={0x2020}, 0x2020) r7 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r7) 6.621773786s ago: executing program 2 (id=2234): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000180)='./file1/file4\x00', &(0x7f00000001c0), 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file4/file6\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x2000, r1}, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r0, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0/file3\x00', 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000500)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./file1/file4/file7/file5\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1/file4/file6\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file1/file4/file7/file6\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000600)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file1/file4/file7/file6\x00', 0x2) 6.518652151s ago: executing program 3 (id=2235): mprotect(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000010}, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f00000000c0)="b2", 0xfdef}], 0x10000000000000bb, 0x7, 0x1) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0xd, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f0000000240)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x2000000, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r4, @ANYBLOB="303030303030307b6cf4c23034308f725f69643d000000000000", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions,\x00'], 0xfd, 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r5, &(0x7f00000020c0)={0x2020}, 0x2020) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000140)={r3}, &(0x7f00000001c0)=0x8) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x8]}, 0x8, 0x80000) read$FUSE(r6, &(0x7f0000000140)={0x2020}, 0x2020) r7 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r7) 6.467634214s ago: executing program 2 (id=2236): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() read$FUSE(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x6b4, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYRES32=r3, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r2}, 0x20) 6.292386493s ago: executing program 6 (id=2237): mprotect(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f00000000c0)="b2", 0xfdef}], 0x10000000000000bb, 0x7, 0x1) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0xd, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f0000000240)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x2000000, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r4, @ANYBLOB="303030303030307b6cf4c23034308f725f69643d000000000000", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions,\x00'], 0xfd, 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r5, &(0x7f00000020c0)={0x2020}, 0x2020) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000140)={r3}, &(0x7f00000001c0)=0x8) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x8]}, 0x8, 0x80000) read$FUSE(r6, &(0x7f0000000140)={0x2020}, 0x2020) r7 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r7) 5.926104772s ago: executing program 4 (id=2238): ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000180), 0x800000000000000, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000040)={0x3, 0x2, 0x10, "11010000001400000100b64c0000005c4b7c1500", 0x30314442}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = accept4(r0, 0x0, 0x0, 0x800) recvmmsg$unix(r5, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) socket$packet(0x11, 0x3, 0x300) 4.163593024s ago: executing program 3 (id=2239): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x123a02, 0x0) pwritev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="b2", 0xfdef}], 0x10000000000000bb, 0x7, 0x1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0xd, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f0000000240)=0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x2000000, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r5, @ANYBLOB="303030303030307b6cf4c23034308f725f69643d000000000000", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions,\x00'], 0xfd, 0x0, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r6, &(0x7f00000020c0)={0x2020}, 0x2020) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000140)={r4}, &(0x7f00000001c0)=0x8) r7 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x8]}, 0x8, 0x80000) read$FUSE(r7, &(0x7f0000000140)={0x2020}, 0x2020) r8 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r8) 4.117074366s ago: executing program 6 (id=2240): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x8000000}, 0xffffffffffffff30) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$igmp(0x2, 0x3, 0x2) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty, 0x1}, 0x1c) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000000000080003000000000014000600ff"], 0x58}}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x8004}, 0x4044180) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x78}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) 3.962276524s ago: executing program 4 (id=2241): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f0000000c80)='./file0\x00', 0x800000, &(0x7f00000000c0)=ANY=[@ANYBLOB='lastblock=00000000000000000226,adinicb,gid=forget,nostrict,unhide,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c73686f727461642c7569643d69676e6f72652c73686f727461642c766f6c756d653d30303030303030303030303030303030303030362c001829935912ddb19b617db523a6bb7c0d782285ef952b9282ba93ba5ef9353deee866199e1a1a16f9b8980aa11304cc9667f126de9a575a9cb3c29169cb6e8bd4820f0d3882914f9f4dd2ac97c7c5181676dc89c5fd4f9c455fcdbd2eef48adb33cdc1f9e9a7f3a2bcb07fb13cffd272aa79076e8039f7ab310e76e7400"/192, @ANYRES64], 0x4, 0xc24, &(0x7f0000000d00)="$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") munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) socket$vsock_stream(0x28, 0x1, 0x0) r5 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f00000000c0)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f00000007c0)="$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") r6 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r5, 0xc0506617, &(0x7f0000000340)={@id={0x2, 0x0, @c}, 0x0, r6}) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000100)={0x28, 0x0, 0x0, @hyper}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x200000000000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0x1, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x444c0}, 0x40c0) sendmsg$NFT_MSG_GETFLOWTABLE(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x17, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x44004) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) unshare(0x20000400) 2.877240971s ago: executing program 3 (id=2242): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001800dd8d0000000000000000020000000000fc050000000006001500010000001800168014000100800000100000030000001000000011"], 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000a0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socket$inet6_tcp(0xa, 0x1, 0x0) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x58) 2.825294153s ago: executing program 4 (id=2243): socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001800dd8d0000000000000000020000000000fc050000000006001500010000001800168014000100800000100000030000001000000011"], 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000a0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socket$inet6_tcp(0xa, 0x1, 0x0) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x58) 1.697674732s ago: executing program 4 (id=2244): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x14) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000280)={r5, 0x3ff}, 0x8) 1.410979667s ago: executing program 2 (id=2245): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r5, 0x2219, 0x40007721, 0x14, 0x0, 0x0) 1.14776ms ago: executing program 4 (id=2246): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000180)='./file1/file4\x00', &(0x7f00000001c0), 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file4/file6\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x2000, r1}, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r0, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0/file3\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) linkat(0xffffffffffffff9c, &(0x7f0000000500)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./file1/file4/file7/file5\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000600)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file1/file4/file7/file6\x00', 0x2) 0s ago: executing program 2 (id=2247): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x8000000}, 0xffffffffffffff30) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$igmp(0x2, 0x3, 0x2) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty, 0x1}, 0x1c) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000000000080003000000000014000600ff"], 0x58}}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x8004}, 0x4044180) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x78}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) kernel console output (not intermixed with test programs): med from eth0 [ 245.689463][ T7675] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 245.748063][ T7675] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 245.866396][ T7675] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 246.324756][ T7675] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.418522][ T7675] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.457912][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.465136][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.510125][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.517877][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.740417][ T7675] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 249.144318][ T7675] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 249.173502][ T7874] syzkaller0: entered promiscuous mode [ 249.190954][ T7874] syzkaller0: entered allmulticast mode [ 249.798050][ T7885] loop4: detected capacity change from 0 to 32768 [ 249.837684][ T7885] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.484 (7885) [ 250.076608][ T7885] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 251.859364][ T7885] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 251.868362][ T7885] BTRFS info (device loop4): using free space tree [ 252.000317][ T7885] BTRFS info (device loop4): enabling ssd optimizations [ 252.007429][ T7885] BTRFS info (device loop4): auto enabling async discard [ 252.982668][ T7916] netlink: 'syz.2.487': attribute type 1 has an invalid length. [ 252.991230][ T6283] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 253.156850][ T7916] 8021q: adding VLAN 0 to HW filter on device bond2 [ 253.202517][ T7919] macvlan2: entered promiscuous mode [ 253.217766][ T7919] macvlan2: entered allmulticast mode [ 253.233160][ T7919] bond2: entered allmulticast mode [ 253.247181][ T7919] bond2: entered promiscuous mode [ 253.254110][ T7919] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 253.280181][ T7919] team0: Port device macvlan2 added [ 253.346587][ T7923] bond2: (slave ip6gretap1): making interface the new active one [ 253.386976][ T7923] ip6gretap1: entered promiscuous mode [ 253.415950][ T7923] ip6gretap1: entered allmulticast mode [ 253.448674][ T7923] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 253.562653][ T7675] veth0_vlan: entered promiscuous mode [ 253.849736][ T7675] veth1_vlan: entered promiscuous mode [ 253.991571][ T7675] veth0_macvtap: entered promiscuous mode [ 254.040925][ T7675] veth1_macvtap: entered promiscuous mode [ 254.083409][ T7947] __nla_validate_parse: 43 callbacks suppressed [ 254.083426][ T7947] netlink: 12 bytes leftover after parsing attributes in process `syz.3.490'. [ 254.150625][ T7675] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 254.371300][ T7675] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 254.461531][ T7675] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.197239][ T7675] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.222310][ T7675] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.297146][ T7675] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.791237][ T1134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.046106][ T1134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.284998][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.307253][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.680252][ T544] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.718338][ T544] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.026589][ T7995] kvm: kvm [7994]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0xffbe000068d0 [ 258.115985][ T7995] kvm_intel: kvm [7994]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0xff6b000030c1 [ 258.203905][ T7995] kvm: kvm [7994]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xff2c0000f0e2 [ 262.837187][ T8051] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 263.878266][ T5777] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 265.720855][ T8076] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 265.720855][ T8076] The task syz.2.515 (8076) triggered the difference, watch for misbehavior. [ 266.695149][ T8084] loop4: detected capacity change from 0 to 4096 [ 266.749425][ T8087] net_ratelimit: 10 callbacks suppressed [ 266.749442][ T8087] netlink: set zone limit has 8 unknown bytes [ 270.797573][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 271.207142][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 271.435540][ T8109] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 271.445033][ T8109] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 271.454702][ T8109] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 271.531936][ T27] audit: type=1800 audit(1776768294.410:8): pid=8109 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.521" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 276.627207][ T5775] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 276.829284][ T8157] netlink: 76 bytes leftover after parsing attributes in process `syz.2.530'. [ 276.859412][ T5775] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 276.887714][ T5775] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 276.929859][ T5775] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 276.965303][ T5775] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.008571][ T5775] usb 5-1: config 0 descriptor?? [ 277.031190][ T5775] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 277.698771][ T8187] netlink: 24 bytes leftover after parsing attributes in process `syz.4.523'. [ 277.832558][ T8171] fuse: Unknown parameter 'grou00000000000000000000' [ 279.098363][ T8205] : renamed from vlan0 (while UP) [ 279.392995][ T8] usb 5-1: USB disconnect, device number 3 [ 283.512051][ T8] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 284.725611][ T8265] Bluetooth: hci0: invalid length 0, exp 2 for type 17 [ 288.504943][ T8290] netlink: set zone limit has 8 unknown bytes [ 288.638211][ T8294] loop4: detected capacity change from 0 to 128 [ 288.667283][ T8294] EXT4-fs (loop4): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 288.703500][ T8141] udevd[8141]: incorrect ext4 checksum on /dev/loop4 [ 288.777786][ T8298] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 291.688640][ T8331] syzkaller0: entered promiscuous mode [ 291.707344][ T8331] syzkaller0: entered allmulticast mode [ 292.830984][ T8324] fuse: Unknown parameter 'grou00000000000000000000' [ 293.322292][ T8350] netlink: set zone limit has 8 unknown bytes [ 295.835483][ T8386] bridge0: port 1(syz_tun) entered blocking state [ 295.842910][ T8386] bridge0: port 1(syz_tun) entered disabled state [ 295.852876][ T8386] syz_tun: entered allmulticast mode [ 295.866517][ T8386] syz_tun: entered promiscuous mode [ 295.877111][ T8386] bridge0: port 1(syz_tun) entered blocking state [ 295.884102][ T8386] bridge0: port 1(syz_tun) entered forwarding state [ 298.356973][ T8398] fuse: Unknown parameter 'group_i00000000000000000000' [ 300.730403][ T8427] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 302.736237][ T8446] loop4: detected capacity change from 0 to 256 [ 304.039135][ T8446] loop4: detected capacity change from 256 to 0 [ 304.053913][ T11] loop: Write error at byte offset 9223372036854775807, length 512. [ 304.074060][ T8454] loop5: detected capacity change from 0 to 2048 [ 304.078321][ C0] I/O error, dev loop4, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 304.090272][ C0] I/O error, dev loop4, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 304.100666][ C0] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 304.133511][ T8456] syz.4.589: attempt to access beyond end of device [ 304.133511][ T8456] loop4: rw=395265, sector=0, nr_sectors = 1 limit=0 [ 304.180769][ T8456] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 304.200272][ T8456] syz.4.589: attempt to access beyond end of device [ 304.200272][ T8456] loop4: rw=2049, sector=144, nr_sectors = 8 limit=0 [ 305.361786][ T8462] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 305.443638][ T6283] syz-executor: attempt to access beyond end of device [ 305.443638][ T6283] loop4: rw=524288, sector=160, nr_sectors = 1 limit=0 [ 305.521963][ T6283] syz-executor: attempt to access beyond end of device [ 305.521963][ T6283] loop4: rw=524288, sector=161, nr_sectors = 1 limit=0 [ 305.675221][ T6283] syz-executor: attempt to access beyond end of device [ 305.675221][ T6283] loop4: rw=524288, sector=162, nr_sectors = 1 limit=0 [ 305.806627][ T6283] syz-executor: attempt to access beyond end of device [ 305.806627][ T6283] loop4: rw=524288, sector=163, nr_sectors = 1 limit=0 [ 305.822679][ T6283] syz-executor: attempt to access beyond end of device [ 305.822679][ T6283] loop4: rw=524288, sector=164, nr_sectors = 1 limit=0 [ 305.882187][ T6283] syz-executor: attempt to access beyond end of device [ 305.882187][ T6283] loop4: rw=524288, sector=165, nr_sectors = 1 limit=0 [ 305.906432][ T6283] syz-executor: attempt to access beyond end of device [ 305.906432][ T6283] loop4: rw=524288, sector=166, nr_sectors = 1 limit=0 [ 305.958153][ T6283] syz-executor: attempt to access beyond end of device [ 305.958153][ T6283] loop4: rw=524288, sector=167, nr_sectors = 1 limit=0 [ 306.123126][ T8462] NILFS (loop5): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 306.471984][ T8462] NILFS error (device loop5): nilfs_bmap_propagate: broken bmap (inode number=4) [ 306.531970][ T8462] Remounting filesystem read-only [ 306.572952][ T8470] syz.3.587 (8470) used greatest stack depth: 17608 bytes left [ 306.624960][ T49] Buffer I/O error on dev loop4, logical block 136, lost async page write [ 306.682861][ T6283] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 306.734027][ T7675] NILFS (loop5): disposed unprocessed dirty file(s) when stopping log writer [ 306.785406][ T7675] NILFS (loop5): discard dirty page: offset=0, ino=2 [ 306.819213][ T7675] NILFS (loop5): discard dirty block: blocknr=18, size=1024 [ 306.826764][ T7675] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 306.877548][ T7675] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 307.088193][ T7675] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 307.128769][ T7675] NILFS (loop5): discard dirty page: offset=0, ino=6 [ 307.135537][ T7675] NILFS (loop5): discard dirty block: blocknr=35, size=1024 [ 308.149118][ T7675] NILFS (loop5): discard dirty block: blocknr=36, size=1024 [ 308.156612][ T7675] NILFS (loop5): discard dirty block: blocknr=37, size=1024 [ 308.327143][ T7675] NILFS (loop5): discard dirty block: blocknr=38, size=1024 [ 308.347150][ T7675] NILFS (loop5): discard dirty page: offset=4096, ino=6 [ 308.428183][ T7675] NILFS (loop5): discard dirty block: blocknr=39, size=1024 [ 308.435552][ T7675] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 309.772256][ T7675] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 310.105106][ T7675] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 310.474732][ T7675] NILFS (loop5): discard dirty page: offset=0, ino=5 [ 310.634567][ T7675] NILFS (loop5): discard dirty block: blocknr=41, size=1024 [ 310.700391][ T7675] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 310.982632][ T7675] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 311.107849][ T7675] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 311.171436][ T7675] NILFS (loop5): discard dirty page: offset=0, ino=4 [ 311.217277][ T7675] NILFS (loop5): discard dirty block: blocknr=40, size=1024 [ 311.224750][ T7675] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 311.327802][ T7675] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 311.377413][ T7675] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 311.447213][ T7675] NILFS (loop5): discard dirty page: offset=0, ino=3 [ 311.462190][ T7675] NILFS (loop5): discard dirty block: blocknr=42, size=1024 [ 311.494596][ T7675] NILFS (loop5): discard dirty block: blocknr=43, size=1024 [ 311.527306][ T7675] NILFS (loop5): discard dirty block: blocknr=44, size=1024 [ 311.577421][ T7675] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 311.586415][ T7675] NILFS (loop5): discard dirty page: offset=196608, ino=3 [ 311.619420][ T7675] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 311.649899][ T7675] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 311.667267][ T7675] NILFS (loop5): discard dirty block: blocknr=49, size=1024 [ 311.674739][ T7675] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 312.046568][ T8580] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 312.798268][ T5777] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 313.003118][ T5780] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 314.317320][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 314.591471][ T5780] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 314.606928][ T5780] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 314.619831][ T5780] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 314.631114][ T5780] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 314.638954][ T5780] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 316.687533][ T5780] Bluetooth: hci1: command tx timeout [ 316.816168][ T8634] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 316.944440][ T8593] chnl_net:caif_netlink_parms(): no params data found [ 317.498696][ T8593] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.546897][ T8593] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.578082][ T8593] bridge_slave_0: entered allmulticast mode [ 317.597363][ T8593] bridge_slave_0: entered promiscuous mode [ 317.648306][ T8593] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.656083][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.664188][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.687308][ T8593] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.707318][ T8593] bridge_slave_1: entered allmulticast mode [ 317.748771][ T8593] bridge_slave_1: entered promiscuous mode [ 319.226644][ T5777] Bluetooth: hci1: command tx timeout [ 319.318356][ T8593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 319.381405][ T8593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 320.593952][ T8593] team0: Port device team_slave_0 added [ 320.693256][ T8593] team0: Port device team_slave_1 added [ 321.247275][ T5777] Bluetooth: hci1: command tx timeout [ 321.669054][ T8593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 321.676168][ T8593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.818155][ T8593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 321.869574][ T8593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 321.876803][ T8593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.087401][ T8593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 322.384100][ T8593] hsr_slave_0: entered promiscuous mode [ 322.457950][ T8593] hsr_slave_1: entered promiscuous mode [ 322.469421][ T8593] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 322.497359][ T8593] Cannot create hsr debugfs directory [ 323.327248][ T5777] Bluetooth: hci1: command tx timeout [ 323.446728][ T8593] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.451961][ T8593] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.883813][ T8593] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.120837][ T8593] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.387278][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 328.661256][ T8593] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 329.632877][ T8593] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 330.219166][ T8735] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 330.579703][ T8593] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 330.886334][ T8593] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 331.281185][ T8593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 331.379796][ T8593] 8021q: adding VLAN 0 to HW filter on device team0 [ 331.442941][ T4812] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.450180][ T4812] bridge0: port 1(bridge_slave_0) entered forwarding state [ 331.509413][ T4812] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.516693][ T4812] bridge0: port 2(bridge_slave_1) entered forwarding state [ 332.162666][ T8593] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 332.237289][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 332.625777][ T8756] can: request_module (can-proto-0) failed. [ 332.746555][ T8756] futex_wake_op: syz.2.634 tries to shift op by -1; fix this program [ 332.779845][ T5777] Bluetooth: hci0: hcon ffff888024efa000 sent 2 < count 511 [ 334.585678][ T8593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 335.692056][ T8789] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 340.672465][ T8593] veth0_vlan: entered promiscuous mode [ 340.734462][ T8593] veth1_vlan: entered promiscuous mode [ 340.874654][ T8593] veth0_macvtap: entered promiscuous mode [ 340.913367][ T8593] veth1_macvtap: entered promiscuous mode [ 340.994592][ T8593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 341.026152][ T8593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.068724][ T8593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 341.110217][ T8593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 341.147271][ T8593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.188749][ T8593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 341.233430][ T8593] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.259884][ T8593] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.277138][ T8593] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.286178][ T8593] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.507593][ T4812] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.515851][ T4812] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.586982][ T8552] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.595133][ T8552] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.602068][ T8838] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 345.998073][ T8885] geneve2: entered promiscuous mode [ 346.003508][ T8885] geneve2: entered allmulticast mode [ 346.526383][ T8880] can: request_module (can-proto-0) failed. [ 346.718201][ T8880] futex_wake_op: syz.3.657 tries to shift op by -1; fix this program [ 346.732735][ T5777] Bluetooth: hci2: hcon ffff88802f5c2000 sent 1 < count 511 [ 346.798015][ T8889] netlink: 4 bytes leftover after parsing attributes in process `syz.2.659'. [ 346.834467][ T8889] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 348.033098][ T8902] netlink: 4 bytes leftover after parsing attributes in process `syz.5.670'. [ 348.051231][ T8902] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 349.201204][ T8915] 9pnet_fd: Insufficient options for proto=fd [ 353.724087][ T8953] fuse: Unknown parameter 'group_id00000000000000000000' [ 355.569744][ T5780] Bluetooth: hci3: command 0x0406 tx timeout [ 355.578784][ T9011] loop5: detected capacity change from 0 to 1024 [ 355.608834][ T9011] EXT4-fs: Ignoring removed orlov option [ 355.711114][ T9007] can: request_module (can-proto-0) failed. [ 355.763877][ T9011] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 355.917325][ T9011] futex_wake_op: syz.5.671 tries to shift op by -1; fix this program [ 355.980270][ T5777] Bluetooth: hci3: hcon ffff888024fd6000 sent 1 < count 511 [ 356.019391][ T9021] netlink: 4 bytes leftover after parsing attributes in process `syz.3.676'. [ 356.043384][ T9021] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 356.405075][ T7675] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.159617][ T9028] fuse: Unknown parameter 'group_id00000000000000000000' [ 357.562065][ T9032] bridge0: port 1(syz_tun) entered disabled state [ 357.666797][ T9046] loop5: detected capacity change from 0 to 512 [ 357.686724][ T9046] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 357.865092][ T9046] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 361.445935][ T7675] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.747405][ T9077] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 362.749104][ T9099] netlink: 4 bytes leftover after parsing attributes in process `syz.3.690'. [ 362.802911][ T9100] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 362.908653][ T5777] Bluetooth: hci3: unexpected event for opcode 0x0419 [ 363.043191][ T9032] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.058768][ T9032] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.070314][ T9032] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.081656][ T9032] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.139219][ T9032] bond2: left allmulticast mode [ 363.155251][ T9032] ip6gretap1: left allmulticast mode [ 363.164481][ T9032] bond2: left promiscuous mode [ 363.172430][ T9032] ip6gretap1: left promiscuous mode [ 363.210361][ T9034] netlink: 'syz.2.682': attribute type 13 has an invalid length. [ 363.219328][ T9034] netlink: 'syz.2.682': attribute type 17 has an invalid length. [ 363.301397][ T9034] bridge0: port 1(syz_tun) entered blocking state [ 363.308018][ T9034] bridge0: port 1(syz_tun) entered forwarding state [ 363.321446][ T9034] 8021q: adding VLAN 0 to HW filter on device bond0 [ 363.330214][ T9034] 8021q: adding VLAN 0 to HW filter on device team0 [ 363.346737][ T9034] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 369.293220][ T9162] netlink: 4 bytes leftover after parsing attributes in process `syz.3.706'. [ 369.314983][ T9162] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 372.043211][ T9189] securityfs: Unknown parameter '' [ 372.089624][ T9191] loop4: detected capacity change from 0 to 1024 [ 372.199740][ T9193] loop5: detected capacity change from 0 to 2048 [ 373.217247][ T9058] IPVS: starting estimator thread 0... [ 373.226474][ T9193] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 373.317345][ T9202] IPVS: using max 15 ests per chain, 36000 per kthread [ 374.003625][ T8557] hfsplus: b-tree write err: -5, ino 25 [ 374.013646][ T8557] hfsplus: b-tree write err: -5, ino 4 [ 374.020708][ T8557] hfsplus: b-tree write err: -5, ino 2 [ 374.103264][ T27] audit: type=1326 audit(1776768397.080:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9207 comm="syz.3.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25acb9c819 code=0x7ffc0000 [ 374.340617][ T27] audit: type=1326 audit(1776768397.080:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9207 comm="syz.3.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25acb9c819 code=0x7ffc0000 [ 375.150457][ T27] audit: type=1326 audit(1776768397.080:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9207 comm="syz.3.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f25acb9c819 code=0x7ffc0000 [ 375.220391][ T27] audit: type=1326 audit(1776768397.080:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9207 comm="syz.3.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25acb9c819 code=0x7ffc0000 [ 375.411163][ T27] audit: type=1326 audit(1776768397.080:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9207 comm="syz.3.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f25acb9c819 code=0x7ffc0000 [ 375.434281][ T27] audit: type=1326 audit(1776768397.080:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9207 comm="syz.3.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25acb9c819 code=0x7ffc0000 [ 375.484152][ T27] audit: type=1326 audit(1776768397.080:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9207 comm="syz.3.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25acb9c819 code=0x7ffc0000 [ 375.659599][ T27] audit: type=1326 audit(1776768397.080:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9207 comm="syz.3.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f25acb5d04e code=0x7ffc0000 [ 375.747367][ T9052] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 376.283653][ T27] audit: type=1326 audit(1776768397.080:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9207 comm="syz.3.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25acb9c819 code=0x7ffc0000 [ 376.421992][ T27] audit: type=1326 audit(1776768397.080:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9207 comm="syz.3.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25acb9c819 code=0x7ffc0000 [ 376.465983][ T9229] netlink: 'syz.2.720': attribute type 1 has an invalid length. [ 376.485525][ T9052] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 376.599432][ T9052] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 376.620298][ T9052] usb 5-1: config 0 interface 0 has no altsetting 0 [ 376.770964][ T9052] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 376.780725][ T9052] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 376.789875][ T9052] usb 5-1: Product: syz [ 376.794529][ T9052] usb 5-1: Manufacturer: syz [ 376.824271][ T9052] usb 5-1: SerialNumber: syz [ 376.944716][ T9052] usb 5-1: config 0 descriptor?? [ 377.025720][ T9052] usb 5-1: selecting invalid altsetting 0 [ 377.518970][ T9087] usb 5-1: USB disconnect, device number 5 [ 377.594215][ T9229] 8021q: adding VLAN 0 to HW filter on device bond3 [ 377.648199][ T9232] netlink: 4 bytes leftover after parsing attributes in process `syz.2.720'. [ 377.671557][ T9234] macvlan3: entered promiscuous mode [ 377.676902][ T9234] macvlan3: entered allmulticast mode [ 377.725537][ T9234] bond3: entered promiscuous mode [ 377.743732][ T9234] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 377.774140][ T9234] bond3: left promiscuous mode [ 379.108281][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.114922][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.880923][ T9255] loop5: detected capacity change from 0 to 128 [ 379.983854][ T9255] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 380.129669][ T9255] ext4 filesystem being mounted at /49/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 380.220725][ T9254] fuse: Bad value for 'user_id' [ 381.211996][ T9262] loop4: detected capacity change from 0 to 4096 [ 381.288904][ T7675] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 381.700728][ T9277] netlink: 'syz.3.729': attribute type 28 has an invalid length. [ 383.916701][ T9299] loop5: detected capacity change from 0 to 512 [ 383.963986][ T9299] EXT4-fs error (device loop5): ext4_orphan_get:1404: inode #15: comm syz.5.733: inode has both inline data and extents flags [ 384.111282][ T9299] EXT4-fs error (device loop5): ext4_orphan_get:1409: comm syz.5.733: couldn't read orphan inode 15 (err -117) [ 387.263201][ T9299] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 387.344462][ T7675] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.280001][ T9317] netlink: 4 bytes leftover after parsing attributes in process `syz.5.740'. [ 389.213265][ T9317] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 392.119703][ T9336] netlink: 20 bytes leftover after parsing attributes in process `syz.4.744'. [ 394.473914][ T9351] netlink: 300 bytes leftover after parsing attributes in process `syz.2.738'. [ 396.697852][ T9362] loop4: detected capacity change from 0 to 32768 [ 396.710624][ T9362] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop4 scanned by syz.4.758 (9362) [ 396.757614][ T9362] BTRFS info (device loop4): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 396.768090][ T9362] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 396.777747][ T9362] BTRFS info (device loop4): using free space tree [ 399.107203][ T9362] BTRFS info (device loop4): enabling ssd optimizations [ 399.114317][ T9362] BTRFS info (device loop4): auto enabling async discard [ 399.231669][ T9398] netlink: 4 bytes leftover after parsing attributes in process `syz.5.754'. [ 399.249540][ T9398] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 399.464622][ T9401] usb usb9: check_ctrlrecip: process 9401 (syz.4.758) requesting ep 01 but needs 81 [ 399.474790][ T9401] usb usb9: usbfs: process 9401 (syz.4.758) did not claim interface 0 before use [ 399.903083][ T8593] BTRFS info (device loop4): last unmount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 401.501155][ T9412] netlink: 300 bytes leftover after parsing attributes in process `syz.4.759'. [ 401.538171][ T9412] comedi comedi0: ni_at_a2150: I/O port conflict (0x100003,28) [ 403.815763][ T9435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.762'. [ 403.825300][ T9435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.762'. [ 403.834372][ T9435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.762'. [ 403.843457][ T9435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.762'. [ 403.852540][ T9435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.762'. [ 403.861531][ T9435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.762'. [ 403.870534][ T9435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.762'. [ 403.879546][ T9435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.762'. [ 403.888627][ T9435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.762'. [ 404.001930][ T9439] loop5: detected capacity change from 0 to 512 [ 404.036337][ T9438] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 404.040055][ T9439] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 404.067523][ T9439] ext4 filesystem being mounted at /60/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 405.451863][ T7675] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.532085][ T9493] overlayfs: failed to clone lowerpath [ 416.283395][ T9503] capability: warning: `syz.5.782' uses 32-bit capabilities (legacy support in use) [ 418.340177][ T9514] vivid-001: kernel_thread() failed [ 420.532978][ T9530] __nla_validate_parse: 9 callbacks suppressed [ 420.532997][ T9530] netlink: 4 bytes leftover after parsing attributes in process `syz.2.780'. [ 420.572976][ T9530] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 421.928922][ T9546] bridge0: port 3(erspan0) entered blocking state [ 421.935593][ T9546] bridge0: port 3(erspan0) entered disabled state [ 421.966277][ T9546] erspan0: entered allmulticast mode [ 421.985166][ T9546] erspan0: entered promiscuous mode [ 421.996006][ T9546] bridge0: port 3(erspan0) entered blocking state [ 422.002639][ T9546] bridge0: port 3(erspan0) entered forwarding state [ 422.299306][ T9553] netlink: 'syz.4.795': attribute type 1 has an invalid length. [ 422.307183][ T9553] netlink: 16150 bytes leftover after parsing attributes in process `syz.4.795'. [ 423.517195][ T9058] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 423.717186][ T9058] usb 5-1: Invalid ep0 maxpacket: 32 [ 423.806650][ T9565] securityfs: Unknown parameter '' [ 423.887341][ T9058] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 424.283004][ T9574] netlink: 64 bytes leftover after parsing attributes in process `syz.2.800'. [ 424.977200][ T9058] usb 5-1: Invalid ep0 maxpacket: 32 [ 424.983637][ T9058] usb usb5-port1: attempt power cycle [ 427.197777][ T9058] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 427.308401][ T9058] usb 5-1: device descriptor read/8, error -71 [ 427.796377][ T9586] netlink: 4 bytes leftover after parsing attributes in process `syz.3.804'. [ 428.075760][ T9592] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 429.138014][ T9605] loop5: detected capacity change from 0 to 16 [ 429.520727][ T9605] erofs: (device loop5): mounted with root inode @ nid 36. [ 432.753886][ T9624] loop4: detected capacity change from 0 to 2048 [ 432.801694][ T9624] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 432.908786][ T9624] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 432.977191][ T27] kauditd_printk_skb: 33 callbacks suppressed [ 432.977207][ T27] audit: type=1800 audit(1776768455.940:52): pid=9624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.813" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 434.060707][ T9638] futex_wake_op: syz.5.814 tries to shift op by 144; fix this program [ 434.882944][ T8593] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 436.407751][ T9654] fuse: Bad value for 'fd' [ 437.033554][ T9656] futex_wake_op: syz.2.820 tries to shift op by 144; fix this program [ 438.578947][ T5780] Bluetooth: hci1: command 0x0406 tx timeout [ 438.578977][ T5771] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 438.733917][ T9665] loop4: detected capacity change from 0 to 512 [ 438.765649][ T9665] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 438.779756][ T9665] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 439.431148][ T9672] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 439.449137][ T9672] Quota error (device loop4): write_blk: dquota write failed [ 439.458346][ T9672] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 439.468589][ T9672] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.825: Failed to acquire dquot type 0 [ 439.823245][ T8593] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.882845][ T9682] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 441.934116][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 441.941036][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 443.233378][ T9688] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 443.832085][ T9698] geneve2: entered promiscuous mode [ 443.837809][ T9698] geneve2: entered allmulticast mode [ 445.959629][ T9706] securityfs: Unknown parameter '' [ 446.374936][ T9704] fuse: Bad value for 'fd' [ 449.920847][ T8974] Bluetooth: hci4: Frame reassembly failed (-84) [ 449.965907][ T8974] Bluetooth: hci4: Frame reassembly failed (-84) [ 451.257285][ T5777] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 457.078200][ T9755] loop5: detected capacity change from 0 to 32768 [ 457.220561][ T9755] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.854 (9755) [ 457.273164][ T9755] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 457.283420][ T9755] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 457.292117][ T9755] BTRFS info (device loop5): using free space tree [ 457.446389][ T9755] BTRFS info (device loop5): enabling ssd optimizations [ 457.453547][ T9755] BTRFS info (device loop5): auto enabling async discard [ 458.928211][ T7675] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 459.184826][ T9774] fuse: Invalid rootmode [ 460.197734][ T9793] netlink: 8 bytes leftover after parsing attributes in process `syz.2.851'. [ 460.242095][ T9089] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 460.680716][ T9089] usb 6-1: Using ep0 maxpacket: 16 [ 460.705311][ T9089] usb 6-1: config 0 has an invalid descriptor of length 60, skipping remainder of the config [ 460.740204][ T9089] usb 6-1: config 0 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 460.778336][ T9089] usb 6-1: config 0 interface 0 has no altsetting 0 [ 460.799252][ T9089] usb 6-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 460.827146][ T9089] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.835546][ T9089] usb 6-1: Product: syz [ 460.966554][ T9089] usb 6-1: Manufacturer: syz [ 460.972856][ T9089] usb 6-1: SerialNumber: syz [ 460.987395][ T9089] usb 6-1: config 0 descriptor?? [ 461.099300][ T9803] overlayfs: failed to clone upperpath [ 461.684504][ T9089] usb 6-1: Can not set alternate setting to 1, error: -71 [ 461.697501][ T9089] synaptics_usb: probe of 6-1:0.0 failed with error -71 [ 461.707859][ T9089] usb 6-1: USB disconnect, device number 2 [ 463.537429][ T5775] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 464.327943][ T9835] overlayfs: failed to clone upperpath [ 464.892624][ T5775] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 464.926533][ T5775] usb 6-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 464.947552][ T5775] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 464.987165][ T5775] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 465.013490][ T5775] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.069021][ T5775] usb 6-1: Quirk or no altest; falling back to MIDI 1.0 [ 465.094833][ T9830] fuse: Invalid rootmode [ 465.833233][ T5775] snd-usb-audio: probe of 6-1:27.0 failed with error -2 [ 465.862560][ T9715] udevd[9715]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 465.912240][ T9087] usb 6-1: USB disconnect, device number 3 [ 468.407302][ T9866] loop5: detected capacity change from 0 to 32768 [ 468.421790][ T9866] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop5 scanned by syz.5.877 (9866) [ 471.460417][ T9866] BTRFS error (device loop5): open_ctree failed: -4 [ 471.503568][ T9715] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop5 scanned by udevd (9715) [ 472.084537][ T9876] batman_adv: batadv0: Adding interface: macsec1 [ 472.091446][ T9876] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 472.117582][ T9876] batman_adv: batadv0: Interface activated: macsec1 [ 480.244757][ T9929] loop4: detected capacity change from 0 to 2048 [ 480.488182][ T9929] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 480.547481][ T9929] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 480.565528][ T9929] UDF-fs: Scanning with blocksize 512 failed [ 480.595868][ T9929] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 480.962915][ T9940] Cannot find add_set index 65532 as target [ 481.223085][ T9923] fuse: Bad value for 'rootmode' [ 484.296630][ T9958] loop4: detected capacity change from 0 to 131072 [ 485.967146][ T9958] fscrypt: Error allocating hmac(sha512): -2 [ 485.973294][ T9958] F2FS-fs (loop4): Error processing option "test_dummy_encryption" [-2] [ 486.516744][ T9976] overlayfs: failed to clone upperpath [ 491.126437][ T9996] syz.4.901 uses old SIOCAX25GETINFO [ 492.769903][T10002] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 497.628058][T10040] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 497.635156][T10040] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 497.922310][T10040] vhci_hcd vhci_hcd.0: Device attached [ 498.117312][ T9052] vhci_hcd: vhci_device speed not set [ 498.237223][ T9052] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 498.303111][T10041] vhci_hcd: connection reset by peer [ 498.514051][ T8555] vhci_hcd: stop threads [ 498.770618][ T8555] vhci_hcd: release socket [ 498.825905][ T8555] vhci_hcd: disconnect device [ 499.040237][T10053] capability: warning: `syz.5.912' uses deprecated v2 capabilities in a way that may be insecure [ 499.080143][T10053] netlink: 28 bytes leftover after parsing attributes in process `syz.5.912'. [ 500.043550][T10057] loop5: detected capacity change from 0 to 2048 [ 500.217225][T10057] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 500.291422][T10063] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 501.971293][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.059721][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.660416][ T9052] vhci_hcd: vhci_device speed not set [ 504.316482][T10079] fuse: Unknown parameter '0x0000000000000007' [ 504.490307][T10079] 9pnet_fd: Insufficient options for proto=fd [ 508.347672][ T5771] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 508.893215][ T5777] Bluetooth: hci4: command 0xfc11 tx timeout [ 510.292904][ T27] audit: type=1326 audit(1776768533.270:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10087 comm="syz.3.922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25acb9c819 code=0x7ffc0000 [ 510.376673][ T27] audit: type=1326 audit(1776768533.270:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10087 comm="syz.3.922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25acb9c819 code=0x7ffc0000 [ 510.443341][ T27] audit: type=1326 audit(1776768533.270:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10087 comm="syz.3.922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f25acb9c819 code=0x7ffc0000 [ 510.506600][ T27] audit: type=1326 audit(1776768533.270:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10087 comm="syz.3.922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25acb9c819 code=0x7ffc0000 [ 510.587259][ T27] audit: type=1326 audit(1776768533.270:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10087 comm="syz.3.922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25acb9c819 code=0x7ffc0000 [ 510.716851][ T27] audit: type=1326 audit(1776768533.270:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10087 comm="syz.3.922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=453 compat=0 ip=0x7f25acb9c819 code=0x7ffc0000 [ 510.785554][ T27] audit: type=1326 audit(1776768533.270:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10087 comm="syz.3.922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25acb9c819 code=0x7ffc0000 [ 510.945730][ T27] audit: type=1326 audit(1776768533.270:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10087 comm="syz.3.922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25acb9c819 code=0x7ffc0000 [ 511.003577][ T27] audit: type=1326 audit(1776768533.270:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10087 comm="syz.3.922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f25acb9c819 code=0x7ffc0000 [ 511.807126][ T27] audit: type=1326 audit(1776768533.270:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10087 comm="syz.3.922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25acb9c819 code=0x7ffc0000 [ 512.868049][T10122] lo speed is unknown, defaulting to 1000 [ 512.874571][T10122] lo speed is unknown, defaulting to 1000 [ 512.888266][T10122] lo speed is unknown, defaulting to 1000 [ 512.915401][T10122] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 512.967075][T10122] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 513.088071][T10122] lo speed is unknown, defaulting to 1000 [ 513.141587][T10122] lo speed is unknown, defaulting to 1000 [ 513.155950][T10122] lo speed is unknown, defaulting to 1000 [ 513.169644][T10122] lo speed is unknown, defaulting to 1000 [ 513.182884][T10122] lo speed is unknown, defaulting to 1000 [ 516.252489][T10144] loop5: detected capacity change from 0 to 16 [ 516.278886][T10144] erofs: (device loop5): mounted with root inode @ nid 36. [ 516.303662][T10144] bio_check_eod: 6 callbacks suppressed [ 516.303681][T10144] syz.5.930: attempt to access beyond end of device [ 516.303681][T10144] loop5: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 519.374975][ T27] kauditd_printk_skb: 6 callbacks suppressed [ 519.374994][ T27] audit: type=1800 audit(1776768542.150:69): pid=10144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.930" name="file2" dev="loop5" ino=89 res=0 errno=0 [ 519.574938][T10146] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.805318][T10146] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.360624][T10146] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.421663][T10146] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.586425][T10171] IPVS: Error connecting to the multicast addr [ 521.609979][T10171] netlink: 20 bytes leftover after parsing attributes in process `syz.2.940'. [ 521.717304][T10146] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.736315][T10146] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.760297][T10146] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.779228][T10146] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.969911][T10178] netlink: 4 bytes leftover after parsing attributes in process `syz.4.938'. [ 522.319480][T10178] netlink: 12 bytes leftover after parsing attributes in process `syz.4.938'. [ 526.137368][ T5771] Bluetooth: hci2: command 0x0406 tx timeout [ 526.164020][ T27] audit: type=1326 audit(1776768549.140:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10192 comm="syz.3.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25acb9c819 code=0x7ffc0000 [ 526.225805][ T27] audit: type=1326 audit(1776768549.140:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10192 comm="syz.3.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25acb9c819 code=0x7ffc0000 [ 526.258527][ T5771] Bluetooth: hci0: unexpected event for opcode 0x203b [ 526.334571][ T27] audit: type=1326 audit(1776768549.180:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10192 comm="syz.3.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f25acb9c819 code=0x7ffc0000 [ 526.455866][ T5771] Bluetooth: hci0: unexpected event for opcode 0x041b [ 526.503483][ T27] audit: type=1326 audit(1776768549.180:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10192 comm="syz.3.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25acb9c819 code=0x7ffc0000 [ 526.597098][ T27] audit: type=1326 audit(1776768549.180:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10192 comm="syz.3.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f25acb9c819 code=0x7ffc0000 [ 526.620143][T10217] loop5: detected capacity change from 0 to 512 [ 526.679656][T10217] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 526.693492][ T27] audit: type=1326 audit(1776768549.180:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10192 comm="syz.3.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25acb9c819 code=0x7ffc0000 [ 526.749180][T10217] EXT4-fs (loop5): orphan cleanup on readonly fs [ 526.765917][ T27] audit: type=1326 audit(1776768549.200:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10192 comm="syz.3.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f25acb9c819 code=0x7ffc0000 [ 526.857876][T10222] netlink: 4 bytes leftover after parsing attributes in process `syz.2.953'. [ 526.895897][T10222] netlink: 12 bytes leftover after parsing attributes in process `syz.2.953'. [ 527.768775][T10217] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 527.827707][T10217] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 527.865441][ T27] audit: type=1326 audit(1776768549.200:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10192 comm="syz.3.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25acb9c819 code=0x7ffc0000 [ 527.970756][T10217] EXT4-fs (loop5): 1 truncate cleaned up [ 527.980619][ T27] audit: type=1326 audit(1776768549.240:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10192 comm="syz.3.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f25acb9c819 code=0x7ffc0000 [ 528.013000][T10217] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 528.031916][ T27] audit: type=1326 audit(1776768549.270:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10192 comm="syz.3.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25acb9c819 code=0x7ffc0000 [ 528.164903][ T7675] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 529.210807][T10229] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 531.304583][ T5771] Bluetooth: hci2: Malformed HCI Event [ 534.834723][ T5780] Bluetooth: Wrong link type (-71) [ 535.640427][T10270] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 535.877728][ T9058] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 536.092633][ T5780] Bluetooth: hci3: Malformed LE Event: 0x1b [ 536.103471][ T9058] usb 5-1: Using ep0 maxpacket: 32 [ 536.159675][ T9058] usb 5-1: unable to get BOS descriptor or descriptor too short [ 536.224534][ T9058] usb 5-1: New USB device found, idVendor=0499, idProduct=1054, bcdDevice= 0.40 [ 536.242772][ T9058] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.297242][ T9058] usb 5-1: Product: syz [ 536.297406][ T5780] Bluetooth: hci1: command 0x0406 tx timeout [ 536.301577][ T9058] usb 5-1: Manufacturer: syz [ 536.313133][ T9058] usb 5-1: SerialNumber: syz [ 537.501610][ T9058] usb 5-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 537.591991][ T9058] usb 5-1: unit 37 not found! [ 537.602607][ T9058] usb 5-1: unit 0 not found! [ 537.757294][ T9058] usb 5-1: USB disconnect, device number 10 [ 537.959467][T10296] udevd[10296]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 538.603941][ T5771] Bluetooth: hci3: unexpected subevent 0x19 length: 24 < 28 [ 539.891612][T10315] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 540.099847][T10316] netlink: 28 bytes leftover after parsing attributes in process `syz.5.976'. [ 541.182081][ T5771] Bluetooth: hci1: unexpected event for opcode 0x041b [ 541.272430][T10325] fuse: Unknown parameter '0x0000000000000006' [ 541.291055][T10325] 9pnet_fd: Insufficient options for proto=fd [ 542.591624][T10327] netlink: 4 bytes leftover after parsing attributes in process `syz.5.977'. [ 542.606796][T10327] netlink: 12 bytes leftover after parsing attributes in process `syz.5.977'. [ 543.272290][T10330] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.980'. [ 543.327362][T10330] bridge_slave_1: default FDB implementation only supports local addresses [ 543.742835][T10337] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 544.488386][T10338] loop5: detected capacity change from 0 to 1024 [ 544.557515][T10338] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 545.017460][ T9052] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 545.177162][ T9090] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 545.231757][ T9052] usb 5-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 545.244333][ T9052] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 10 [ 545.264399][ T9052] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 545.276066][ T9052] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 545.310972][ T9052] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 545.327270][ T9052] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 545.392677][ T9052] usb 5-1: SerialNumber: syz [ 545.416783][ T9090] usb 6-1: config 0 has an invalid interface number: 64 but max is 0 [ 545.417712][T10345] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 545.437890][ T9090] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 545.450520][ T9052] cdc_acm 5-1:1.0: skipping garbage [ 545.476326][T10349] netlink: 28 bytes leftover after parsing attributes in process `syz.3.988'. [ 545.496643][ T9090] usb 6-1: config 0 has no interface number 0 [ 545.517712][ T9090] usb 6-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 545.540036][ T9090] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.575038][ T9090] usb 6-1: Product: syz [ 545.597825][ T9090] usb 6-1: Manufacturer: syz [ 545.628788][ T9090] usb 6-1: SerialNumber: syz [ 545.666941][ T9090] usb 6-1: config 0 descriptor?? [ 545.799616][ T9087] usb 5-1: USB disconnect, device number 11 [ 546.107447][ T9090] usb 6-1: Found UVC 0.00 device syz (046d:0823) [ 546.177447][ T9090] usb 6-1: No valid video chain found. [ 546.830532][ T9052] usb 6-1: USB disconnect, device number 4 [ 547.813139][T10365] loop4: detected capacity change from 0 to 256 [ 547.845852][T10365] exfat: Deprecated parameter 'utf8' [ 547.867466][T10365] exfat: Deprecated parameter 'namecase' [ 547.873823][T10365] exfat: Deprecated parameter 'namecase' [ 547.915685][T10365] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 549.409308][T10376] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 549.417434][T10376] IPv6: NLM_F_CREATE should be set when creating new route [ 549.424825][T10376] IPv6: NLM_F_CREATE should be set when creating new route [ 549.432407][T10376] IPv6: NLM_F_CREATE should be set when creating new route [ 551.123710][T10396] loop4: detected capacity change from 0 to 32768 [ 551.132698][T10396] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1007 (10396) [ 551.175825][T10396] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 551.203315][T10396] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 551.219321][T10396] BTRFS info (device loop4): using free space tree [ 551.271862][T10396] BTRFS info (device loop4): enabling ssd optimizations [ 551.279278][T10396] BTRFS info (device loop4): auto enabling async discard [ 551.406256][ T8593] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 553.064431][T10473] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 553.697549][T10491] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1038'. [ 554.031172][T10487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 554.611247][T10515] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 556.843566][ T5771] Bluetooth: hci2: unexpected event for opcode 0x2062 [ 557.312809][T10567] loop5: detected capacity change from 0 to 256 [ 557.354937][T10567] FAT-fs (loop5): Directory bread(block 64) failed [ 557.367524][T10567] FAT-fs (loop5): Directory bread(block 65) failed [ 557.374737][T10567] FAT-fs (loop5): Directory bread(block 66) failed [ 557.397376][T10567] FAT-fs (loop5): Directory bread(block 67) failed [ 557.413358][T10567] FAT-fs (loop5): Directory bread(block 68) failed [ 557.427582][T10567] FAT-fs (loop5): Directory bread(block 69) failed [ 557.445263][T10567] FAT-fs (loop5): Directory bread(block 70) failed [ 557.464692][T10567] FAT-fs (loop5): Directory bread(block 71) failed [ 557.481046][T10567] FAT-fs (loop5): Directory bread(block 72) failed [ 557.497269][T10567] FAT-fs (loop5): Directory bread(block 73) failed [ 557.712774][T10571] Process accounting resumed [ 558.578178][T10586] siw: device registration error -23 [ 558.778803][T10596] loop4: detected capacity change from 0 to 512 [ 558.786522][T10596] EXT4-fs: Ignoring removed nomblk_io_submit option [ 558.815898][T10596] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8817e02c, mo2=0002] [ 558.842723][T10596] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1081: invalid indirect mapped block 2683928664 (level 1) [ 558.966529][T10596] EXT4-fs (loop4): Remounting filesystem read-only [ 558.993906][T10596] EXT4-fs (loop4): 1 truncate cleaned up [ 559.016147][T10596] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 559.102045][T10596] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #2: comm syz.4.1081: directory missing '.' [ 559.201345][ T8593] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 560.125432][T10613] loop4: detected capacity change from 0 to 32768 [ 560.167205][T10613] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1087 (10613) [ 560.240644][T10613] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 560.265293][T10613] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 560.289916][T10613] BTRFS info (device loop4): turning on sync discard [ 560.308102][T10613] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 560.338565][T10613] BTRFS info (device loop4): use zstd compression, level 3 [ 560.355939][T10613] BTRFS info (device loop4): turning on async discard [ 560.388546][T10613] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 560.417422][T10613] BTRFS info (device loop4): trying to use backup root at mount time [ 560.457449][T10613] BTRFS info (device loop4): enabling auto defrag [ 560.480127][T10613] BTRFS info (device loop4): using free space tree [ 560.549168][ T8522] BTRFS warning (device loop4): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 560.571110][T10613] BTRFS error (device loop4): failed to load root extent [ 560.579149][T10613] BTRFS warning (device loop4): try to load backup roots slot 1 [ 560.588546][ T8970] BTRFS warning (device loop4): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 560.638962][T10613] BTRFS warning (device loop4): couldn't read tree root [ 560.646285][T10613] BTRFS warning (device loop4): try to load backup roots slot 2 [ 560.654922][ T8555] BTRFS error (device loop4): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 560.685007][T10657] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1097'. [ 560.707442][T10613] BTRFS warning (device loop4): couldn't read tree root [ 560.740537][T10613] BTRFS warning (device loop4): try to load backup roots slot 3 [ 560.759475][T10653] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 560.800620][T10613] BTRFS info (device loop4): enabling ssd optimizations [ 560.811206][T10664] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist [ 560.832289][T10613] BTRFS info (device loop4): rebuilding free space tree [ 560.956260][T10613] BTRFS info (device loop4): checking UUID tree [ 561.248339][T10671] loop5: detected capacity change from 0 to 64 [ 561.307484][ T8593] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 562.015927][T10681] genirq: Flags mismatch irq 4. 00000000 (pcl816) vs. 00000000 (ttyS0) [ 563.038692][T10701] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1112'. [ 563.079823][T10700] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 563.411007][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.417518][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.693422][T10717] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1119'. [ 565.285955][T10754] loop4: detected capacity change from 0 to 8192 [ 565.316628][T10754] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 565.368350][ T27] kauditd_printk_skb: 15 callbacks suppressed [ 565.368365][ T27] audit: type=1800 audit(1776768588.340:95): pid=10754 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1131" name="file2" dev="loop4" ino=1048632 res=0 errno=0 [ 565.401809][T10754] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 565.439719][T10754] FAT-fs (loop4): Filesystem has been set read-only [ 567.587361][T10780] fuse: Unknown parameter '0x0000000000000007' [ 567.595794][T10780] 9pnet_fd: Insufficient options for proto=fd [ 574.013108][T10804] loop5: detected capacity change from 0 to 512 [ 574.033154][T10804] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 574.257286][T10804] EXT4-fs (loop5): 1 truncate cleaned up [ 575.626054][T10804] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 578.590483][ T7675] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 578.620244][T10820] Driver unsupported XDP return value 0 on prog (id 71) dev N/A, expect packet loss! [ 579.514190][T10829] loop4: detected capacity change from 0 to 32768 [ 579.528561][T10829] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.1164 (10829) [ 579.549274][ T5771] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 579.561209][ T5771] CPU: 0 PID: 5771 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 579.568995][ T5771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 579.579543][ T5771] Workqueue: hci0 hci_rx_work [ 579.584315][ T5771] Call Trace: [ 579.587650][ T5771] [ 579.590619][ T5771] dump_stack_lvl+0x18c/0x250 [ 579.595455][ T5771] ? show_regs_print_info+0x20/0x20 [ 579.600807][ T5771] ? load_image+0x420/0x420 [ 579.605388][ T5771] sysfs_create_dir_ns+0x26e/0x2a0 [ 579.610548][ T5771] ? sysfs_warn_dup+0xa0/0xa0 [ 579.615454][ T5771] ? do_raw_spin_unlock+0x121/0x230 [ 579.620806][ T5771] kobject_add_internal+0x61c/0xcc0 [ 579.626166][ T5771] kobject_add+0x164/0x240 [ 579.630753][ T5771] ? __rwlock_init+0x150/0x150 [ 579.635591][ T5771] ? kobject_init+0x1e0/0x1e0 [ 579.640359][ T5771] ? _raw_spin_unlock+0x28/0x40 [ 579.645723][ T5771] ? get_device_parent+0x366/0x390 [ 579.650919][ T5771] device_add+0x408/0xc20 [ 579.655519][ T5771] hci_conn_add_sysfs+0xd5/0x1e0 [ 579.660532][ T5771] le_conn_complete_evt+0xf5d/0x1540 [ 579.665873][ T5771] ? hci_event_packet+0x4cb/0x1270 [ 579.671075][ T5771] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 579.677552][ T5771] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 579.683241][ T5771] ? skb_pull_data+0xfb/0x200 [ 579.687994][ T5771] hci_le_enh_conn_complete_evt+0x189/0x460 [ 579.694183][ T5771] ? hci_le_remote_conn_param_req_evt+0xce0/0xce0 [ 579.700740][ T5771] ? hci_remote_host_features_evt+0x150/0x150 [ 579.706943][ T5771] hci_event_packet+0x7ba/0x1270 [ 579.712028][ T5771] ? bis_list+0x290/0x290 [ 579.716479][ T5771] ? lockdep_hardirqs_on+0x98/0x150 [ 579.722159][ T5771] ? hci_send_to_monitor+0xd7/0x4f0 [ 579.727615][ T5771] hci_rx_work+0x43a/0xd60 [ 579.732110][ T5771] ? process_scheduled_works+0x96f/0x15d0 [ 579.737998][ T5771] process_scheduled_works+0xa5d/0x15d0 [ 579.743742][ T5771] ? worker_attach_to_pool+0x380/0x380 [ 579.749452][ T5771] ? assign_work+0x3d2/0x5d0 [ 579.754390][ T5771] worker_thread+0xa55/0xfc0 [ 579.759103][ T5771] kthread+0x2fa/0x390 [ 579.763233][ T5771] ? pr_cont_work+0x560/0x560 [ 579.767983][ T5771] ? kthread_blkcg+0xd0/0xd0 [ 579.772893][ T5771] ret_from_fork+0x48/0x80 [ 579.777380][ T5771] ? kthread_blkcg+0xd0/0xd0 [ 579.783109][ T5771] ret_from_fork_asm+0x11/0x20 [ 579.788329][ T5771] [ 579.803996][ T5771] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 579.818728][ T5771] Bluetooth: hci0: failed to register connection device [ 579.839639][T10829] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 579.901670][T10829] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 579.957882][T10829] BTRFS info (device loop4): using free space tree [ 580.010554][T10848] loop5: detected capacity change from 0 to 32768 [ 580.079879][T10848] (syz.5.1165,10848,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 580.108271][T10848] (syz.5.1165,10848,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 580.215431][T10829] BTRFS info (device loop4): enabling ssd optimizations [ 580.249559][T10829] BTRFS info (device loop4): auto enabling async discard [ 580.253606][T10848] JBD2: Ignoring recovery information on journal [ 580.404289][T10848] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 580.505252][ T27] audit: type=1800 audit(1776768603.480:96): pid=10829 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1164" name="file2" dev="loop4" ino=261 res=0 errno=0 [ 580.599420][ T8593] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 581.636756][ T7675] ocfs2: Unmounting device (7,5) on (node local) [ 582.530484][T10909] loop4: detected capacity change from 0 to 32768 [ 582.532409][T10926] bridge_slave_0: invalid flags given to default FDB implementation [ 582.559235][T10924] nbd0: detected capacity change from 0 to 127 [ 582.570163][ T5771] block nbd0: Receive control failed (result -104) [ 582.690495][T10909] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 582.928142][ T5775] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 583.048144][T10935] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1191'. [ 583.090568][ T5771] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 583.099799][ T5771] Bluetooth: hci2: Injecting HCI hardware error event [ 583.112028][ T5780] Bluetooth: hci2: hardware error 0x00 [ 583.141013][ T5775] usb 6-1: Using ep0 maxpacket: 32 [ 583.163792][ T5775] usb 6-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 583.184877][ T5775] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.197986][ T5775] usb 6-1: Product: syz [ 583.202263][ T5775] usb 6-1: Manufacturer: syz [ 583.206902][ T5775] usb 6-1: SerialNumber: syz [ 583.224039][ T5775] usb 6-1: config 0 descriptor?? [ 583.246003][ T5775] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 583.268833][ T5775] dvb-usb: bulk message failed: -22 (4/0) [ 583.275735][ T5775] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 583.292096][ T5775] dvb-usb: bulk message failed: -22 (5/0) [ 583.299053][ T8593] ocfs2: Unmounting device (7,4) on (node local) [ 583.301934][ T5775] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 583.352717][ T5775] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 583.397878][ T5775] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 583.409887][T10943] netlink: 'syz.2.1196': attribute type 12 has an invalid length. [ 583.439092][ T5775] usb 6-1: media controller created [ 583.445456][T10945] netlink: 'syz.3.1197': attribute type 39 has an invalid length. [ 583.494254][T10929] dvb-usb: bulk message failed: -22 (7/0) [ 583.517243][T10929] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 583.550690][T10929] ttusb2: i2c transfer failed. [ 583.558868][ T5775] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 583.658266][ T5775] usb 6-1: selecting invalid altsetting 3 [ 583.664183][ T5775] ttusb2: set interface to alts=3 failed [ 583.848154][ T5775] DVB: Unable to find symbol tda10086_attach() [ 583.858473][ T5775] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 583.884747][ T5775] dvb-usb: bulk message failed: -22 (4/0) [ 583.907891][ T5775] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 583.937109][ T5775] dvb-usb: bulk message failed: -22 (5/0) [ 583.943008][ T5775] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 584.016427][ T5775] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 584.046074][ T5775] usb 6-1: USB disconnect, device number 5 [ 584.266291][ T5775] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 584.878815][T10983] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1211'. [ 584.953873][T10985] batadv1: entered allmulticast mode [ 584.976868][T10985] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 585.001270][T10985] bridge0: port 4(batadv1) entered blocking state [ 585.032072][T10985] bridge0: port 4(batadv1) entered disabled state [ 585.063552][T10985] batadv1: entered promiscuous mode [ 585.083784][T10985] bridge0: port 4(batadv1) entered blocking state [ 585.090679][T10985] bridge0: port 4(batadv1) entered forwarding state [ 585.167408][ T5780] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 585.442746][ T8970] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 585.453459][ T8970] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 585.505146][ T5780] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 585.516363][ T5780] Bluetooth: hci0: Injecting HCI hardware error event [ 585.528093][ T5771] Bluetooth: hci0: hardware error 0x00 [ 586.330754][T11026] loop5: detected capacity change from 0 to 2048 [ 586.374484][T11029] loop4: detected capacity change from 0 to 512 [ 586.383600][T11026] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 586.418976][T11026] ext4 filesystem being mounted at /172/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 586.549225][T11029] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 586.566296][T11029] FAT-fs (loop4): Filesystem has been set read-only [ 586.718266][T11029] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 548) [ 586.787724][ T7675] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 586.885520][T11039] fuse: Unknown parameter '0x0000000000000006' [ 586.906714][T11039] 9pnet_fd: Insufficient options for proto=fd [ 588.394452][ T5771] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 588.718022][ T9090] kernel write not supported for file bpf-prog (pid: 9090 comm: kworker/0:13) [ 588.802671][ T27] audit: type=1326 audit(1776768611.780:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11047 comm="syz.2.1234" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f893679c819 code=0x0 [ 589.461231][T11068] loop5: detected capacity change from 0 to 128 [ 589.894194][T11079] fuse: Unknown parameter '0x0000000000000006' [ 589.915319][T11079] 9pnet_fd: Insufficient options for proto=fd [ 590.797029][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 593.555402][ T9052] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 596.065811][ T9052] usb 6-1: device descriptor read/all, error -71 [ 596.407263][T11124] fuse: Unknown parameter '0x0000000000000006' [ 596.427554][T11124] 9pnet_fd: Insufficient options for proto=fd [ 598.624306][T11134] loop4: detected capacity change from 0 to 512 [ 598.714537][T11134] EXT4-fs (loop4): 1 truncate cleaned up [ 598.788545][T11134] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 598.908467][T11120] loop5: detected capacity change from 0 to 40427 [ 598.912785][T11134] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1262: invalid indirect mapped block 4294901760 (level 0) [ 598.959784][T11120] F2FS-fs (loop5): invalid crc value [ 599.016909][T11120] F2FS-fs (loop5): Found nat_bits in checkpoint [ 599.039769][ T8593] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 599.931580][T11171] fuse: Unknown parameter '0x0000000000000007' [ 599.952585][T11171] 9pnet_fd: Insufficient options for proto=fd [ 601.875691][T11181] syzkaller1: entered promiscuous mode [ 601.907447][T11181] syzkaller1: entered allmulticast mode [ 603.400617][T11217] loop4: detected capacity change from 0 to 8192 [ 603.465790][T11217] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 603.497590][T11217] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 603.568550][T11217] REISERFS (device loop4): using ordered data mode [ 603.575230][T11217] reiserfs: using flush barriers [ 603.631096][T11217] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 603.685331][T11217] REISERFS (device loop4): checking transaction log (loop4) [ 603.699944][T11217] REISERFS (device loop4): Using r5 hash to sort names [ 603.727832][T11217] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 604.524680][T11226] loop5: detected capacity change from 0 to 32768 [ 604.636342][T11226] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 604.899962][T11226] XFS (loop5): Ending clean mount [ 604.948976][T11226] XFS (loop5): Quotacheck needed: Please wait. [ 605.273183][T11226] XFS (loop5): Quotacheck: Done. [ 605.597437][T11226] XFS (loop5): User initiated shutdown received. [ 605.627619][T11226] XFS (loop5): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:501). Shutting down filesystem. [ 605.687065][T11226] XFS (loop5): Please unmount the filesystem and rectify the problem(s) [ 605.798348][ T7675] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 606.038400][T11257] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1294'. [ 606.048580][T11257] bond0: invalid ARP target 0.0.0.0 specified for addition [ 606.056267][T11257] bond0: option arp_ip_target: invalid value (0) [ 608.441797][T11314] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1311'. [ 608.753482][T11326] ip6tnl2: entered allmulticast mode [ 610.357379][T11294] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 610.523333][T11371] netlink: 51 bytes leftover after parsing attributes in process `syz.5.1335'. [ 614.033962][ T9908] block nbd0: Possible stuck request ffff888021fe8000: control (read@0,1024B). Runtime 30 seconds [ 614.048054][ T9908] block nbd0: Possible stuck request ffff888021fe8200: control (read@1024,1024B). Runtime 30 seconds [ 614.062066][ T9908] block nbd0: Possible stuck request ffff888021fe8400: control (read@2048,1024B). Runtime 30 seconds [ 614.073341][ T9908] block nbd0: Possible stuck request ffff888021fe8600: control (read@3072,1024B). Runtime 30 seconds [ 614.786315][T11391] netlink: 1363 bytes leftover after parsing attributes in process `syz.5.1341'. [ 615.649700][ T9088] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 615.870205][ T9088] usb 6-1: Using ep0 maxpacket: 8 [ 615.877947][ T9088] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 615.886830][ T9088] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 615.936667][ T9088] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 615.950876][ T9088] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 616.142360][ T9088] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 616.197065][ T9088] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 616.211407][T11423] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 616.231332][ T9088] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.361870][T11434] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1358'. [ 616.849264][T11449] netlink: 'syz.3.1365': attribute type 4 has an invalid length. [ 616.911049][T11451] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 617.095952][T11456] usbtmc 6-1:16.0: simple control status returned 3d [ 617.299222][ T9089] usb 6-1: USB disconnect, device number 8 [ 621.209781][T11565] Cannot find del_set index 2 as target [ 622.738771][T11575] loop5: detected capacity change from 0 to 32768 [ 622.762540][T11575] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.1412 (11575) [ 622.807959][T11575] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 622.831091][T11575] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 622.876012][T11575] BTRFS info (device loop5): force clearing of disk cache [ 622.899057][T11575] BTRFS info (device loop5): enabling auto defrag [ 622.926374][T11575] BTRFS info (device loop5): max_inline at 0 [ 622.959417][T11575] BTRFS info (device loop5): enabling ssd optimizations [ 622.984600][T11575] BTRFS info (device loop5): using spread ssd allocation scheme [ 623.041483][T11575] BTRFS info (device loop5): using free space tree [ 623.323157][T11575] BTRFS info (device loop5): rebuilding free space tree [ 624.049093][ T7675] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 624.057539][ T8555] BTRFS info (device loop5): qgroup scan completed (inconsistency flag cleared) [ 624.511721][T11621] overlayfs: failed to clone upperpath [ 624.788785][T11626] overlayfs: failed to resolve './cgroup': -2 [ 624.852218][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.858898][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.819435][T11650] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1431'. [ 625.851907][T11650] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 627.838214][T11685] overlayfs: failed to clone upperpath [ 628.131611][T11694] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1446'. [ 628.192634][T11694] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 629.139598][T11701] loop4: detected capacity change from 0 to 32768 [ 629.377181][T11701] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 629.692129][T11701] XFS (loop4): Ending clean mount [ 630.483288][ T8593] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 631.301241][T11742] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 631.304721][T11743] lo speed is unknown, defaulting to 1000 [ 631.427180][ T9089] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 631.687024][ T9089] usb 5-1: Using ep0 maxpacket: 8 [ 631.699141][ T9089] usb 5-1: config 0 has no interfaces? [ 631.704719][ T9089] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 631.737170][ T9089] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.768421][ T9089] usb 5-1: config 0 descriptor?? [ 632.012715][ T9058] usb 5-1: USB disconnect, device number 12 [ 632.607569][T11768] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1469'. [ 632.744744][ T27] audit: type=1326 audit(1776768655.720:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11770 comm="syz.4.1470" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd6059c819 code=0x0 [ 637.135009][T11805] overlayfs: failed to clone upperpath [ 638.725770][T11834] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1491'. [ 639.246349][T11847] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1496'. [ 641.740965][T11836] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 642.081922][T11898] cgroup: Setting release_agent not allowed [ 642.812050][T11910] syzkaller1: entered promiscuous mode [ 642.831870][T11910] syzkaller1: entered allmulticast mode [ 643.950645][T11931] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 644.700560][ T9908] block nbd0: Possible stuck request ffff888021fe8000: control (read@0,1024B). Runtime 60 seconds [ 644.713000][ T9908] block nbd0: Possible stuck request ffff888021fe8200: control (read@1024,1024B). Runtime 60 seconds [ 644.725625][ T9908] block nbd0: Possible stuck request ffff888021fe8400: control (read@2048,1024B). Runtime 60 seconds [ 644.737067][ T9908] block nbd0: Possible stuck request ffff888021fe8600: control (read@3072,1024B). Runtime 60 seconds [ 646.607714][T11964] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1534'. [ 646.611563][T11963] overlayfs: failed to clone upperpath [ 646.761090][T11966] 8021q: adding VLAN 0 to HW filter on device bond2 [ 646.773904][T11966] bond1: (slave bond2): Enslaving as an active interface with an up link [ 646.817198][T11964] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1534'. [ 646.849190][T11964] bond1: entered promiscuous mode [ 646.865200][T11964] bond2: entered promiscuous mode [ 646.885799][T11964] 8021q: adding VLAN 0 to HW filter on device bond1 [ 647.814965][T11993] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 648.327220][ T9052] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 648.532672][ T9052] usb 6-1: config 0 has no interfaces? [ 648.559611][ T9052] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 648.573667][ T9052] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 648.582734][ T9052] usb 6-1: Product: syz [ 648.593417][ T9052] usb 6-1: Manufacturer: syz [ 648.600128][ T9052] usb 6-1: SerialNumber: syz [ 648.657847][ T9052] usb 6-1: config 0 descriptor?? [ 648.779070][T12020] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 649.231102][T12034] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1561'. [ 650.924345][T12086] overlayfs: failed to clone upperpath [ 651.087660][ T9089] usb 6-1: USB disconnect, device number 9 [ 651.172600][T12097] overlayfs: failed to clone upperpath [ 651.404507][T12109] veth1_to_bond: entered allmulticast mode [ 651.428648][T12107] veth1_to_bond: left allmulticast mode [ 651.704728][T12115] loop5: detected capacity change from 0 to 128 [ 651.738891][T12115] EXT4-fs: Ignoring removed oldalloc option [ 651.809704][T12115] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 651.894313][T12115] ext4 filesystem being mounted at /237/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 652.021687][T12115] overlayfs: missing 'lowerdir' [ 652.121685][ T7675] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 653.910515][T12141] lo speed is unknown, defaulting to 1000 [ 655.549565][T12157] bridge0: port 2(bridge_slave_1) entered disabled state [ 655.557262][T12157] bridge0: port 1(bridge_slave_0) entered disabled state [ 655.972187][T12157] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 656.018473][T12157] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 657.045677][T12157] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.055000][T12157] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.065849][T12157] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.074883][T12157] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.084199][T12157] geneve2: left promiscuous mode [ 657.089455][T12157] geneve2: left allmulticast mode [ 657.155038][T12157] bond1: left promiscuous mode [ 657.167081][T12157] bond2: left promiscuous mode [ 657.717868][T12216] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1621'. [ 657.900504][ T5137] udevd[5137]: worker [10785] /devices/virtual/block/nbd0 is taking a long time [ 658.068693][T12204] overlayfs: failed to resolve './file0': -2 [ 658.719781][T12237] binder_alloc: 12236: binder_alloc_buf size 16777216 failed, no address space [ 658.754160][T12237] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 659.678058][ T9087] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 659.899312][ T9087] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 659.947012][ T9087] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 660.018003][ T9087] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 660.047217][ T9087] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 660.055291][ T9087] usb 6-1: SerialNumber: syz [ 660.137675][T12275] tipc: Enabling of bearer rejected, failed to enable media [ 660.364486][ T9087] usb 6-1: 0:2 : does not exist [ 660.460624][ T9087] usb 6-1: USB disconnect, device number 10 [ 660.533370][T10857] udevd[10857]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 662.697044][ T9088] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 662.917034][ T9088] usb 6-1: Using ep0 maxpacket: 8 [ 662.948306][ T9088] usb 6-1: config 0 has an invalid interface number: 156 but max is 0 [ 662.991970][ T9088] usb 6-1: config 0 has no interface number 0 [ 663.027032][ T9088] usb 6-1: too many endpoints for config 0 interface 156 altsetting 110: 151, using maximum allowed: 30 [ 663.057048][ T9088] usb 6-1: config 0 interface 156 altsetting 110 has 0 endpoint descriptors, different from the interface descriptor's value: 151 [ 663.110383][ T9088] usb 6-1: config 0 interface 156 has no altsetting 0 [ 663.135013][ T9088] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 663.166138][ T9088] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.195865][ T9088] usb 6-1: Product: syz [ 663.205205][ T9088] usb 6-1: Manufacturer: syz [ 663.223856][ T9088] usb 6-1: SerialNumber: syz [ 663.245306][ T9088] usb 6-1: config 0 descriptor?? [ 663.428315][T12361] overlayfs: failed to resolve './cgroup': -2 [ 663.508999][ T9088] usb 6-1: USB disconnect, device number 11 [ 663.587921][T12363] warning: `syz.4.1679' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 666.312923][T12458] netlink: 'syz.4.1705': attribute type 7 has an invalid length. [ 666.371514][T12460] overlayfs: failed to clone upperpath [ 666.904907][T12479] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1714'. [ 667.859789][T12501] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1724'. [ 668.324654][T12509] syzkaller0: entered promiscuous mode [ 668.334338][T12509] syzkaller0: entered allmulticast mode [ 668.482412][T12514] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1730'. [ 668.521550][T12514] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 668.792150][T12518] loop5: detected capacity change from 0 to 8192 [ 668.810779][T12518] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 670.680547][T12537] overlayfs: failed to clone upperpath [ 671.142698][T12549] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 673.510234][ T5780] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 673.525912][ T5780] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 673.539134][ T5780] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 673.548093][ T5780] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 673.558483][ T5780] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 673.566433][ T5780] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 674.138720][T12557] batman_adv: batadv0: Interface deactivated: dummy0 [ 674.786146][ T9908] block nbd0: Possible stuck request ffff888021fe8000: control (read@0,1024B). Runtime 90 seconds [ 674.797445][ T9908] block nbd0: Possible stuck request ffff888021fe8200: control (read@1024,1024B). Runtime 90 seconds [ 674.813619][ T9908] block nbd0: Possible stuck request ffff888021fe8400: control (read@2048,1024B). Runtime 90 seconds [ 674.825378][ T9908] block nbd0: Possible stuck request ffff888021fe8600: control (read@3072,1024B). Runtime 90 seconds [ 674.847566][T12586] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1757'. [ 674.900291][T12587] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 675.658358][ T5771] Bluetooth: hci3: command tx timeout [ 675.960752][T12557] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.005014][T12557] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.058890][T12557] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.106434][T12557] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.554232][T12568] lo speed is unknown, defaulting to 1000 [ 676.852199][T12568] chnl_net:caif_netlink_parms(): no params data found [ 677.001013][T12568] bridge0: port 1(bridge_slave_0) entered blocking state [ 677.020111][T12568] bridge0: port 1(bridge_slave_0) entered disabled state [ 677.035282][T12568] bridge_slave_0: entered allmulticast mode [ 677.062162][T12568] bridge_slave_0: entered promiscuous mode [ 677.091546][T12568] bridge0: port 2(bridge_slave_1) entered blocking state [ 677.120533][T12568] bridge0: port 2(bridge_slave_1) entered disabled state [ 677.136479][T12568] bridge_slave_1: entered allmulticast mode [ 677.146795][T12568] bridge_slave_1: entered promiscuous mode [ 677.193039][T12568] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 677.206450][T12568] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 677.727100][ T5771] Bluetooth: hci3: command tx timeout [ 677.913633][T12568] team0: Port device team_slave_0 added [ 677.969854][T12568] team0: Port device team_slave_1 added [ 678.086456][T12568] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 678.228657][T12568] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 678.337388][T12568] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 678.395371][T12568] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 678.417164][T12568] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 678.534286][T12568] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 678.623044][T12631] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1770'. [ 678.703290][T12632] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 679.434073][T12568] hsr_slave_0: entered promiscuous mode [ 679.456176][T12568] hsr_slave_1: entered promiscuous mode [ 679.484532][T12568] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 679.510017][T12568] Cannot create hsr debugfs directory [ 679.907118][ T5771] Bluetooth: hci3: command tx timeout [ 681.967225][ T5771] Bluetooth: hci3: command tx timeout [ 682.362256][T12568] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 682.376693][T12568] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 682.398677][T12568] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 682.453722][T12645] cgroup: Unknown subsys name 'subj_type' [ 682.480193][T12568] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 682.903981][T12568] 8021q: adding VLAN 0 to HW filter on device bond0 [ 682.975409][T12568] 8021q: adding VLAN 0 to HW filter on device team0 [ 683.022010][ T8560] bridge0: port 1(bridge_slave_0) entered blocking state [ 683.029236][ T8560] bridge0: port 1(bridge_slave_0) entered forwarding state [ 683.113228][ T1134] bridge0: port 2(bridge_slave_1) entered blocking state [ 683.120585][ T1134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 683.250838][T12568] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 683.776574][T12669] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1781'. [ 683.814785][T12568] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 683.831715][T12674] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 685.232900][T12568] veth0_vlan: entered promiscuous mode [ 685.253525][T12568] veth1_vlan: entered promiscuous mode [ 685.330742][T12568] veth0_macvtap: entered promiscuous mode [ 685.351589][T12568] veth1_macvtap: entered promiscuous mode [ 685.400596][T12568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 685.412605][T12568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 685.424849][T12568] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 685.459856][T12568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 685.493231][T12568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 685.513468][T12568] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 685.542478][T12568] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.567503][T12568] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.576297][T12568] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.595390][T12568] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.806538][ T8555] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 685.841871][ T8555] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 685.957974][ T8974] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 685.997085][ T8974] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 686.297627][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.304115][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 689.271560][T12743] syzkaller0: entered promiscuous mode [ 689.282086][T12743] syzkaller0: entered allmulticast mode [ 689.687402][T12748] UBIFS error (pid: 12748): cannot open "./file0", error -22 [ 693.197397][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 696.046300][T12786] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1810'. [ 696.468378][T12788] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1811'. [ 699.674302][T12802] syzkaller0: entered promiscuous mode [ 699.690605][T12802] syzkaller0: entered allmulticast mode [ 699.703463][T12804] tipc: Enabling of bearer rejected, failed to enable media [ 705.183743][ T9908] block nbd0: Possible stuck request ffff888021fe8000: control (read@0,1024B). Runtime 120 seconds [ 705.194926][ T9908] block nbd0: Possible stuck request ffff888021fe8200: control (read@1024,1024B). Runtime 120 seconds [ 705.206158][ T9908] block nbd0: Possible stuck request ffff888021fe8400: control (read@2048,1024B). Runtime 120 seconds [ 705.217947][ T9908] block nbd0: Possible stuck request ffff888021fe8600: control (read@3072,1024B). Runtime 120 seconds [ 710.188119][T12885] syzkaller0: entered promiscuous mode [ 710.193821][T12885] syzkaller0: entered allmulticast mode [ 710.734448][T12888] loop6: detected capacity change from 0 to 256 [ 711.337055][ T9085] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 711.542009][ T9085] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 711.563591][ T9085] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 711.597220][ T9085] usb 7-1: Product: syz [ 711.601458][ T9085] usb 7-1: Manufacturer: syz [ 711.610293][ T9085] usb 7-1: SerialNumber: syz [ 711.619834][ T9085] usb 7-1: config 0 descriptor?? [ 711.917550][ T9085] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 712.978473][T12930] fuse: Bad value for 'fd' [ 714.288134][ T9085] dvb_usb_rtl28xxu: probe of 7-1:0.0 failed with error -71 [ 714.339372][ T9085] usb 7-1: USB disconnect, device number 2 [ 716.092740][T12956] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 716.442915][T12959] syzkaller0: entered promiscuous mode [ 716.467177][T12959] syzkaller0: entered allmulticast mode [ 718.024463][T12970] binder_alloc: 12968: binder_alloc_buf, no vma [ 728.023236][T13062] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 729.087122][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 730.795820][T13084] libceph: resolve '0..' (ret=-3): failed [ 731.277615][T13093] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1893'. [ 731.286659][T13093] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1893'. [ 731.359108][T13093] team0: entered promiscuous mode [ 731.407589][T13093] bond0: entered promiscuous mode [ 731.443019][T13093] batadv0: entered promiscuous mode [ 731.468868][T13093] hsr1: Slave A (team0) is not up; please bring it up to get a fully working HSR network [ 731.499771][T13093] hsr1: Slave B (bond0) is not up; please bring it up to get a fully working HSR network [ 731.534467][T13093] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 736.717359][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 737.126962][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 737.296980][ T9908] block nbd0: Possible stuck request ffff888021fe8000: control (read@0,1024B). Runtime 150 seconds [ 737.308131][ T9908] block nbd0: Possible stuck request ffff888021fe8200: control (read@1024,1024B). Runtime 150 seconds [ 737.319322][ T9908] block nbd0: Possible stuck request ffff888021fe8400: control (read@2048,1024B). Runtime 150 seconds [ 737.330506][ T9908] block nbd0: Possible stuck request ffff888021fe8600: control (read@3072,1024B). Runtime 150 seconds [ 738.886257][T13153] syzkaller0: entered promiscuous mode [ 738.897099][T13153] syzkaller0: entered allmulticast mode [ 738.925719][T13153] tc action pedit 'at' offset 134217728 out of bounds [ 738.933502][T13153] tc action pedit 'at' offset 134217728 out of bounds [ 738.940483][T13153] tc action pedit 'at' offset 134217728 out of bounds [ 738.947337][T13153] tc action pedit 'at' offset 134217728 out of bounds [ 738.954133][T13153] tc action pedit 'at' offset 134217728 out of bounds [ 738.960972][T13153] tc action pedit 'at' offset 134217728 out of bounds [ 738.967811][T13153] tc action pedit 'at' offset 134217728 out of bounds [ 738.974640][T13153] tc action pedit 'at' offset 134217728 out of bounds [ 738.981504][T13153] tc action pedit 'at' offset 134217728 out of bounds [ 738.988369][T13153] tc action pedit 'at' offset 134217728 out of bounds [ 738.995192][T13153] 0: reclassify loop, rule prio 0, protocol 800 [ 743.349537][T13190] loop6: detected capacity change from 0 to 512 [ 743.701333][T13190] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 743.787108][T13190] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 745.381799][T13206] lo speed is unknown, defaulting to 1000 [ 745.772907][T12568] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 748.757479][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 748.763915][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 750.677296][T13229] tipc: Enabling of bearer rejected, failed to enable media [ 751.772745][T13245] 9pnet_virtio: no channels available for device 127.0.0.1 [ 751.788861][T13245] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1932'. [ 752.765673][T13247] lo speed is unknown, defaulting to 1000 [ 761.237746][T13296] syzkaller0: entered promiscuous mode [ 761.243483][T13296] syzkaller0: entered allmulticast mode [ 763.237140][ T28] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 763.453957][ T28] usb 7-1: config index 0 descriptor too short (expected 45, got 36) [ 763.575548][ T28] usb 7-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 763.725649][ T28] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 763.796582][ T28] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 763.846515][ T28] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 763.927329][ T28] usb 7-1: config 0 descriptor?? [ 764.004473][ T28] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 765.375198][T13332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 766.241364][T13332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 767.368223][ T28] usb 7-1: USB disconnect, device number 3 [ 767.454042][T13344] fuse: Unknown parameter '0xffffffffffffffff0000000000000000000000000000000000000000' [ 767.465451][T13344] netlink: 'syz.4.1960': attribute type 4 has an invalid length. [ 767.473423][T13344] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1960'. [ 767.570571][ T9908] block nbd0: Possible stuck request ffff888021fe8000: control (read@0,1024B). Runtime 180 seconds [ 767.581709][ T9908] block nbd0: Possible stuck request ffff888021fe8200: control (read@1024,1024B). Runtime 180 seconds [ 767.593110][ T9908] block nbd0: Possible stuck request ffff888021fe8400: control (read@2048,1024B). Runtime 180 seconds [ 767.604465][ T9908] block nbd0: Possible stuck request ffff888021fe8600: control (read@3072,1024B). Runtime 180 seconds [ 768.605945][T13352] xt_CT: You must specify a L4 protocol and not use inversions on it [ 772.865447][ T5137] udevd[5137]: worker [10785] /devices/virtual/block/nbd0 timeout; kill it [ 772.923107][ T5137] udevd[5137]: seq 13409 '/devices/virtual/block/nbd0' killed [ 776.252925][T13395] binder: 13393:13395 ioctl c0285840 0 returned -22 [ 778.208726][T13400] syzkaller0: entered promiscuous mode [ 778.258163][T13400] syzkaller0: entered allmulticast mode [ 782.249672][T13446] 9pnet_fd: Insufficient options for proto=fd [ 784.850667][T13492] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1988'. [ 784.875569][T13492] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1988'. [ 786.127149][ T27] audit: type=1326 audit(1776769065.100:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13504 comm="syz.6.1993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb4959c819 code=0x7ffc0000 [ 786.177355][ T27] audit: type=1326 audit(1776769065.130:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13504 comm="syz.6.1993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb4959c819 code=0x7ffc0000 [ 786.224435][ T27] audit: type=1326 audit(1776769065.130:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13504 comm="syz.6.1993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbb4959c819 code=0x7ffc0000 [ 786.277295][ T27] audit: type=1326 audit(1776769065.130:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13504 comm="syz.6.1993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb4959c819 code=0x7ffc0000 [ 786.349706][ T27] audit: type=1326 audit(1776769065.130:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13504 comm="syz.6.1993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb4959c819 code=0x7ffc0000 [ 786.407154][ T27] audit: type=1326 audit(1776769065.130:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13504 comm="syz.6.1993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fbb4959c819 code=0x7ffc0000 [ 786.457657][ T27] audit: type=1326 audit(1776769065.130:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13504 comm="syz.6.1993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb4959c819 code=0x7ffc0000 [ 786.517185][ T27] audit: type=1326 audit(1776769065.130:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13504 comm="syz.6.1993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb4959c819 code=0x7ffc0000 [ 786.567105][ T27] audit: type=1326 audit(1776769065.130:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13504 comm="syz.6.1993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbb4955d04e code=0x7ffc0000 [ 786.627290][ T27] audit: type=1326 audit(1776769065.130:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13504 comm="syz.6.1993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb4959c819 code=0x7ffc0000 [ 787.999132][T13518] securityfs: Unknown parameter '' [ 790.341934][T13541] lo speed is unknown, defaulting to 1000 [ 791.653157][T13552] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2002'. [ 795.647017][T13578] ubi16: attaching mtd0 [ 795.669260][T13578] ubi16: scanning is finished [ 795.674544][T13578] ubi16: empty MTD device detected [ 796.147124][T13578] ubi16: attached mtd0 (name "mtdram test device", size 0 MiB) [ 796.155116][T13578] ubi16: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 796.164385][T13578] ubi16: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 796.174651][T13578] ubi16: VID header offset: 64 (aligned 64), data offset: 128 [ 796.182750][T13578] ubi16: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 796.190168][T13578] ubi16: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 796.199166][T13578] ubi16: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3355742250 [ 796.210408][T13578] ubi16: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 796.378030][ T5780] Bluetooth: hci3: command 0x0406 tx timeout [ 796.447332][T13581] ubi16: background thread "ubi_bgt16d" started, PID 13581 [ 798.900090][ T9908] block nbd0: Possible stuck request ffff888021fe8000: control (read@0,1024B). Runtime 210 seconds [ 798.966053][ T9908] block nbd0: Possible stuck request ffff888021fe8200: control (read@1024,1024B). Runtime 210 seconds [ 798.977733][ T9908] block nbd0: Possible stuck request ffff888021fe8400: control (read@2048,1024B). Runtime 210 seconds [ 798.989809][ T9908] block nbd0: Possible stuck request ffff888021fe8600: control (read@3072,1024B). Runtime 210 seconds [ 802.976181][T13623] xt_CT: You must specify a L4 protocol and not use inversions on it [ 808.997192][T13687] 9pnet: Could not find request transport: f0xffffffffffffffff [ 809.179599][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.186400][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.367402][T13695] xt_CT: No such helper "pptp" [ 809.471724][T13700] fuse: Unknown parameter '0x00000000000000030000000000000000000000000000000000000000' [ 819.682569][T13765] ubi: mtd0 is already attached to ubi16 [ 819.691048][ T5771] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 821.674366][T13775] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2048'. [ 822.837820][T13782] xt_TPROXY: Can be used only with -p tcp or -p udp [ 823.540855][ T27] kauditd_printk_skb: 43 callbacks suppressed [ 823.540875][ T27] audit: type=1326 audit(1776769102.435:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13787 comm="syz.3.2050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25acb9c819 code=0x7ffc0000 [ 823.585222][ T27] audit: type=1326 audit(1776769102.473:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13787 comm="syz.3.2050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25acb9c819 code=0x7ffc0000 [ 823.634545][ T27] audit: type=1326 audit(1776769102.519:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13787 comm="syz.3.2050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f25acb9c819 code=0x7ffc0000 [ 823.905560][ T27] audit: type=1326 audit(1776769102.547:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13787 comm="syz.3.2050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25acb9c819 code=0x7ffc0000 [ 824.028520][ T27] audit: type=1326 audit(1776769102.547:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13787 comm="syz.3.2050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25acb9c819 code=0x7ffc0000 [ 824.341697][ T5827] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 824.371261][ T27] audit: type=1326 audit(1776769102.557:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13787 comm="syz.3.2050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f25acb9c819 code=0x7ffc0000 [ 824.457090][ T27] audit: type=1326 audit(1776769102.557:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13787 comm="syz.3.2050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25acb9c819 code=0x7ffc0000 [ 824.483076][ T27] audit: type=1326 audit(1776769102.557:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13787 comm="syz.3.2050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25acb9c819 code=0x7ffc0000 [ 824.523584][ T27] audit: type=1326 audit(1776769102.557:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13787 comm="syz.3.2050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f25acb5d04e code=0x7ffc0000 [ 824.570564][ T27] audit: type=1326 audit(1776769102.557:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13787 comm="syz.3.2050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25acb9c819 code=0x7ffc0000 [ 824.761283][ T5827] usb 7-1: Using ep0 maxpacket: 16 [ 824.769083][ T5827] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 824.780782][T13796] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2052'. [ 825.726121][ T5827] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 825.739888][ T5827] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 825.749669][ T5827] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 825.760686][ T5827] usb 7-1: config 0 descriptor?? [ 825.779294][ T5827] usb 7-1: can't set config #0, error -71 [ 825.808896][ T5827] usb 7-1: USB disconnect, device number 4 [ 826.585495][T13802] loop6: detected capacity change from 0 to 131072 [ 826.617418][T13802] F2FS-fs (loop6): invalid crc value [ 826.636461][T13802] F2FS-fs (loop6): Found nat_bits in checkpoint [ 826.680369][T13802] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 830.362095][ T9908] block nbd0: Possible stuck request ffff888021fe8000: control (read@0,1024B). Runtime 240 seconds [ 830.373694][ T9908] block nbd0: Possible stuck request ffff888021fe8200: control (read@1024,1024B). Runtime 240 seconds [ 830.384934][ T9908] block nbd0: Possible stuck request ffff888021fe8400: control (read@2048,1024B). Runtime 240 seconds [ 830.396138][ T9908] block nbd0: Possible stuck request ffff888021fe8600: control (read@3072,1024B). Runtime 240 seconds [ 833.044277][T13848] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 839.482214][T13910] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2081'. [ 839.518337][T13910] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2081'. [ 839.527286][T13910] netlink: 'syz.2.2081': attribute type 11 has an invalid length. [ 839.577283][T13910] netlink: 'syz.2.2081': attribute type 13 has an invalid length. [ 839.635105][T13914] bridge0: port 1(syz_tun) entered disabled state [ 839.653834][T13914] bridge0: entered allmulticast mode [ 840.590773][T13910] syz_tun: left promiscuous mode [ 840.609644][T13910] bridge0: port 1(syz_tun) entered disabled state [ 844.775999][ T9086] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 846.534913][ T9086] usb 7-1: device descriptor read/all, error -71 [ 847.034331][T13977] securityfs: Unknown parameter '' [ 848.210394][T13987] netlink: 'syz.3.2100': attribute type 10 has an invalid length. [ 854.373918][T14029] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 860.628088][T14068] lo speed is unknown, defaulting to 1000 [ 862.991866][ T9908] block nbd0: Possible stuck request ffff888021fe8000: control (read@0,1024B). Runtime 270 seconds [ 863.006353][ T9908] block nbd0: Possible stuck request ffff888021fe8200: control (read@1024,1024B). Runtime 270 seconds [ 863.018152][ T9908] block nbd0: Possible stuck request ffff888021fe8400: control (read@2048,1024B). Runtime 270 seconds [ 863.340227][ T9908] block nbd0: Possible stuck request ffff888021fe8600: control (read@3072,1024B). Runtime 270 seconds [ 868.350252][T14125] fuse: Unknown parameter 'fd0x00000000000000070000000{l040r_id' [ 868.522522][T14134] fuse: Unknown parameter 'fd0x00000000000000070000000{l040r_id' [ 868.560630][T14135] fuse: Unknown parameter 'fd0x00000000000000070000000{l040r_id' [ 873.189683][T14166] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2142'. [ 873.200148][T14166] IPVS: Unknown mcast interface: vcan0 [ 873.549517][T14173] fuse: Unknown parameter 'fd0x00000000000000070000000{l040r_id' [ 873.780025][T14178] fuse: Unknown parameter 'fd0x00000000000000070000000{l040r_id' [ 873.933798][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 873.940565][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 875.618829][T14194] fuse: Unknown parameter 'fd0x00000000000000070000000{l040r_id' [ 878.674335][T14212] loop6: detected capacity change from 0 to 2048 [ 878.720845][T14212] UDF-fs: error (device loop6): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 878.762760][T14212] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 878.803166][T14212] UDF-fs: Scanning with blocksize 512 failed [ 878.862525][T14212] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 884.104268][T14242] fuse: Unknown parameter 'fd0x00000000000000060000000{l040r_id' [ 884.220594][T14244] fuse: Unknown parameter 'fd0x00000000000000070000000{l040r_id' [ 887.290165][T14267] fuse: Unknown parameter 'fd0xffffffffffffffff0000000{l040r_id' [ 887.614197][T14265] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2171'. [ 887.720084][T14265] IPVS: Unknown mcast interface: vcan0 [ 890.715511][T14294] fuse: Unknown parameter 'fd0x00000000000000070000000{l040r_id' [ 891.110191][T14292] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2177'. [ 891.301286][T14292] IPVS: Unknown mcast interface: vcan0 [ 896.088868][ T9908] block nbd0: Possible stuck request ffff888021fe8000: control (read@0,1024B). Runtime 300 seconds [ 896.762416][ T9908] block nbd0: Possible stuck request ffff888021fe8200: control (read@1024,1024B). Runtime 300 seconds [ 896.774306][ T9908] block nbd0: Possible stuck request ffff888021fe8400: control (read@2048,1024B). Runtime 300 seconds [ 896.813325][ T9908] block nbd0: Possible stuck request ffff888021fe8600: control (read@3072,1024B). Runtime 300 seconds [ 897.255692][T14337] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2191'. [ 897.307710][T14337] IPVS: Error joining to the multicast group [ 899.905008][T14362] batman_adv: batadv0: Adding interface: dummy0 [ 899.913403][T14362] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 900.449071][T14362] batman_adv: batadv0: Interface activated: dummy0 [ 900.546999][T14368] batadv0: mtu less than device minimum [ 900.597651][T14368] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 900.609556][T14368] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 900.621372][T14368] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 900.633365][T14368] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 900.645249][T14368] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 900.656864][T14368] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 900.668800][T14368] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 900.681093][T14368] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 900.693143][T14368] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 903.756924][T14387] fuse: Unknown parameter 'fd0xffffffffffffffff0000000{l040r_id' [ 905.768506][T14395] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2205'. [ 905.814003][T14395] IPVS: Error joining to the multicast group [ 908.626671][T14414] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2209'. [ 908.637131][T14414] IPVS: Error joining to the multicast group [ 913.327917][T14426] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2215'. [ 913.351659][T14426] IPVS: Error joining to the multicast group [ 913.387208][T14429] fuse: Unknown parameter 'fd0xffffffffffffffff0000000{l040r_id' [ 914.528649][T14436] batman_adv: batadv0: Adding interface: dummy0 [ 914.535531][T14436] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 914.563393][T14436] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 915.016161][T14446] fuse: Unknown parameter 'fd0x00000000000000070000000{l040r_id' [ 915.076440][T14450] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2221'. [ 915.104142][T14450] IPVS: Error joining to the multicast group [ 915.982967][T14461] fuse: Unknown parameter 'fd0x00000000000000060000000{l040r_id' [ 917.447141][T14474] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2227'. [ 918.022732][T14474] IPVS: Unknown mcast interface: vcan0 [ 918.140493][T14472] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2225'. [ 918.362839][T14472] IPVS: Error joining to the multicast group [ 921.216493][T14499] batman_adv: batadv0: Adding interface: dummy0 [ 921.223354][T14499] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 921.251255][T14499] batman_adv: batadv0: Interface activated: dummy0 [ 921.283511][T14499] net_ratelimit: 10 callbacks suppressed [ 921.283531][T14499] batadv0: mtu less than device minimum [ 921.308673][T14499] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 921.321550][T14499] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 921.334430][T14499] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 921.347191][T14499] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 921.360092][T14499] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 921.373303][T14499] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 921.386216][T14499] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 921.399086][T14499] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 921.412279][T14499] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 921.428690][T14503] fuse: Unknown parameter 'fd0x00000000000000060000000{l040r_id' [ 921.862470][T14512] fuse: Unknown parameter 'fd0x00000000000000060000000{l040r_id' [ 922.054088][T14517] fuse: Unknown parameter 'fd0x00000000000000060000000{l040r_id' [ 924.264132][T14531] fuse: Unknown parameter 'fd0x00000000000000070000000{l040r_id' [ 924.414175][T14534] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2240'. [ 924.495564][T14528] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 924.541195][T14534] IPVS: Error joining to the multicast group [ 925.266338][T14528] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 925.608966][T14528] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 926.528970][T14528] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 928.149659][ T29] INFO: task udevd:10785 blocked for more than 143 seconds. [ 928.157221][ T29] Not tainted syzkaller #0 [ 928.215602][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 928.252449][T14528] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 928.255313][ T29] task:udevd state:D stack:23368 pid:10785 ppid:5137 flags:0x00004006 [ 928.296453][ T29] Call Trace: [ 928.305309][T14528] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 928.308556][ T29] [ 928.326427][T14528] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 928.330100][ T29] __schedule+0x1553/0x45a0 [ 928.347267][T14528] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 928.351389][ T29] ? asan.module_dtor+0x20/0x20 [ 928.372912][ T29] ? mark_lock+0x94/0x320 [ 928.377342][ T29] ? lock_chain_count+0x20/0x20 [ 928.382246][ T29] ? _raw_spin_lock_irq+0xbb/0xf0 [ 928.416517][ T29] ? _raw_spin_lock_irqsave+0x100/0x100 [ 928.424778][ T29] schedule+0xbd/0x170 [ 928.431533][ T29] io_schedule+0x80/0xd0 [ 928.436128][ T29] folio_wait_bit_common+0x714/0xfa0 [ 928.448887][ T29] ? folio_wait_bit+0x30/0x30 [ 928.453812][ T29] ? _compound_head+0x120/0x120 [ 928.459090][ T29] ? filemap_add_folio+0x192/0x3c0 [ 928.464332][ T29] ? __filemap_get_folio+0x704/0xbb0 [ 928.469843][ T29] ? blkdev_writepage+0x30/0x30 [ 928.474926][ T29] do_read_cache_folio+0x1c0/0x7d0 [ 928.481329][ T29] ? blkdev_writepage+0x30/0x30 [ 928.486434][ T29] read_part_sector+0xd2/0x340 [ 928.491566][ T29] adfspart_check_POWERTEC+0x93/0xed0 [ 928.497217][ T29] ? adfspart_check_ADFS+0x620/0x620 [ 928.502964][ T29] ? put_partition+0x370/0x370 [ 928.508037][ T29] ? alloc_pages+0x4dc/0x740 [ 928.513079][ T29] bdev_disk_changed+0x740/0x1420 [ 928.518269][ T29] ? bdev_resize_partition+0xf0/0xf0 [ 928.523854][ T29] ? iput+0x343/0x920 [ 928.528050][ T29] blkdev_get_whole+0x30d/0x390 [ 928.533312][ T29] blkdev_get_by_dev+0x279/0x600 [ 928.556990][ T29] blkdev_open+0x152/0x360 [ 928.561707][ T29] ? blkdev_mmap+0x1b0/0x1b0 [ 928.572572][ T29] do_dentry_open+0x8c6/0x1500 [ 928.580761][ T29] path_openat+0x27f1/0x3230 [ 928.585996][ T29] ? do_sys_openat2+0xda/0x1d0 [ 928.596046][ T29] ? verify_lock_unused+0x140/0x140 [ 928.604013][ T29] ? do_filp_open+0x430/0x430 [ 928.615513][ T29] ? __virt_addr_valid+0x18c/0x540 [ 928.623219][ T29] do_filp_open+0x1f5/0x430 [ 928.627940][ T29] ? vfs_tmpfile+0x490/0x490 [ 928.633511][ T29] ? _raw_spin_unlock+0x28/0x40 [ 928.638515][ T29] ? alloc_fd+0x58f/0x630 [ 928.643684][ T29] do_sys_openat2+0x134/0x1d0 [ 928.648643][ T29] ? do_sys_open+0xe0/0xe0 [ 928.655778][ T29] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 928.668317][ T29] ? lock_chain_count+0x20/0x20 [ 928.675483][ T29] __x64_sys_openat+0x139/0x160 [ 928.680514][ T29] do_syscall_64+0x55/0xa0 [ 928.694763][ T29] ? clear_bhb_loop+0x40/0x90 [ 928.699624][ T29] ? clear_bhb_loop+0x40/0x90 [ 928.712021][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 928.719605][ T29] RIP: 0033:0x7f1894aa7407 [ 928.724147][ T29] RSP: 002b:00007fff98251870 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 928.740341][ T29] RAX: ffffffffffffffda RBX: 00007f1895243880 RCX: 00007f1894aa7407 [ 928.753881][ T29] RDX: 00000000000a0800 RSI: 0000561b46314ac0 RDI: ffffffffffffff9c [ 928.765360][ T29] RBP: 0000561b46303910 R08: 0000000000000000 R09: 0000000000000000 [ 928.780150][ T29] R10: 0000000000000000 R11: 0000000000000202 R12: 0000561b46320f10 [ 928.788816][ T29] R13: 0000561b4631b410 R14: 0000000000000000 R15: 0000561b46320f10 [ 928.797529][ T29] [ 928.801436][ T29] [ 928.801436][ T29] Showing all locks held in the system: [ 928.809334][ T29] 1 lock held by khungtaskd/29: [ 928.823802][ T29] #0: ffffffff8d1320e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 928.840312][ T29] 2 locks held by kworker/u4:2/34: [ 928.848648][ T29] #0: ffff88801973f938 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 928.869592][ T29] #1: ffffc90000aafd00 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 928.882548][ T29] 1 lock held by klogd/5126: [ 928.896580][ T29] #0: ffff8880b8e3c018 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xa9/0x140 [ 928.906817][ T29] 2 locks held by getty/5527: [ 928.919978][ T29] #0: ffff88802d6a10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 928.936447][ T29] #1: ffffc9000326e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x433/0x1390 [ 928.946920][ T29] 4 locks held by syz-executor/5766: [ 928.960524][ T29] #0: ffff8880b8e3c018 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xa9/0x140 [ 928.970597][ T29] #1: ffff8880b8e289c0 (psi_seq){-.-.}-{0:0}, at: __schedule+0x2176/0x45a0 [ 928.979884][ T29] #2: ffff888028009668 (&(&sig->stats_lock)->lock){....}-{2:2}, at: release_task+0x7db/0x1630 [ 928.990926][ T29] #3: ffff888028009620 (&____s->seqcount#5){....}-{0:0}, at: wait_consider_task+0x19b1/0x2eb0 [ 929.001979][ T29] 3 locks held by kworker/1:10/9054: [ 929.007649][ T29] #0: ffff888017c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 929.018951][ T29] #1: ffffc9000465fd00 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 929.032502][ T29] #2: ffff88807c384240 (&data->fib_lock){+.+.}-{3:3}, at: nsim_fib_event_work+0x286/0x31b0 [ 929.043677][ T29] 2 locks held by kworker/0:14/9091: [ 929.049539][ T29] #0: ffff888017c72538 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 929.061064][T14558] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2247'. [ 929.061335][ T29] #1: ffffc900049efd00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 929.082305][ T29] 1 lock held by udevd/10785: [ 929.087129][ T29] #0: ffff888021f514c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 929.097519][ T29] 5 locks held by kworker/u4:7/13453: [ 929.103256][ T29] 3 locks held by kworker/u4:8/13455: [ 929.108674][ T29] 4 locks held by syz.2.2247/14557: [ 929.118960][ T29] #0: ffffffff8e4274b0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 929.128357][ T29] #1: ffff88803106a250 (&devlink->lock_key#2){+.+.}-{3:3}, at: devlink_get_from_attrs_lock+0x113/0x360 [ 929.147582][ T29] #2: ffffffff8e3c2808 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x3f/0x180 [ 929.156769][ T29] #3: ffffffff8d137ab8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x306/0x880 [ 929.168210][ T29] 3 locks held by syz.2.2247/14558: [ 929.173525][ T29] #0: ffffffff8e4274b0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 929.182521][ T29] #1: ffffffff8e4272c8 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x10c/0x7a0 [ 929.191845][ T29] #2: ffffffff8e3c2808 (rtnl_mutex){+.+.}-{3:3}, at: start_sync_thread+0xca/0x2870 [ 929.201711][ T29] [ 929.204300][ T29] ============================================= [ 929.204300][ T29] [ 929.217200][ T29] NMI backtrace for cpu 1 [ 929.221880][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 929.229204][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 929.239399][ T29] Call Trace: [ 929.242712][ T29] [ 929.245664][ T29] dump_stack_lvl+0x18c/0x250 [ 929.250400][ T29] ? preempt_count_add+0x91/0x1a0 [ 929.255639][ T29] ? show_regs_print_info+0x20/0x20 [ 929.260864][ T29] ? load_image+0x420/0x420 [ 929.265484][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 929.270643][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 929.277029][ T29] ? _printk+0xde/0x130 [ 929.281288][ T29] ? load_image+0x420/0x420 [ 929.285903][ T29] ? load_image+0x420/0x420 [ 929.290429][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 929.296523][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 929.302519][ T29] watchdog+0xf3d/0xf80 [ 929.306699][ T29] ? watchdog+0x1e1/0xf80 [ 929.311054][ T29] kthread+0x2fa/0x390 [ 929.315232][ T29] ? hungtask_pm_notify+0x90/0x90 [ 929.320293][ T29] ? kthread_blkcg+0xd0/0xd0 [ 929.324989][ T29] ret_from_fork+0x48/0x80 [ 929.329420][ T29] ? kthread_blkcg+0xd0/0xd0 [ 929.334028][ T29] ret_from_fork_asm+0x11/0x20 [ 929.338908][ T29] [ 929.343259][ T29] Sending NMI from CPU 1 to CPUs 0: [ 929.348786][ C0] NMI backtrace for cpu 0 [ 929.348797][ C0] CPU: 0 PID: 9090 Comm: kworker/0:13 Not tainted syzkaller #0 [ 929.348812][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 929.348821][ C0] Workqueue: events_power_efficient wg_ratelimiter_gc_entries [ 929.348843][ C0] RIP: 0010:__sanitizer_cov_trace_switch+0x68/0x120 [ 929.348865][ C0] Code: 00 00 00 48 83 f9 07 0f 85 cb 00 00 00 b9 07 00 00 00 48 85 c0 75 13 e9 bc 00 00 00 b9 01 00 00 00 48 85 c0 0f 84 ae 00 00 00 <41> 57 41 56 41 54 53 48 8b 54 24 20 65 4c 8b 05 84 8e 7c 7e 45 31 [ 929.348878][ C0] RSP: 0018:ffffc900000073d0 EFLAGS: 00000206 [ 929.348890][ C0] RAX: 0000000000000003 RBX: ffffffff8f19dd9d RCX: 0000000000000003 [ 929.348900][ C0] RDX: ffffc90000007828 RSI: ffffffff8cfa0830 RDI: 0000000000000002 [ 929.348910][ C0] RBP: ffffc900000074f8 R08: ffff8880607d3c00 R09: 0000000000000008 [ 929.348919][ C0] R10: 0000000000000009 R11: 0000000000000100 R12: ffffc900000074a8 [ 929.348929][ C0] R13: dffffc0000000000 R14: 0000000000000002 R15: ffffffff8f19dd9c [ 929.348939][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 929.348951][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 929.348962][ C0] CR2: 00007f89367e9f00 CR3: 0000000062e19000 CR4: 00000000003506f0 [ 929.348977][ C0] Call Trace: [ 929.348983][ C0] [ 929.348988][ C0] unwind_next_frame+0xe46/0x2970 [ 929.349009][ C0] ? kasan_set_track+0x4e/0x70 [ 929.349026][ C0] ? kasan_set_track+0x4e/0x70 [ 929.349040][ C0] ? stack_trace_save+0x100/0x100 [ 929.349057][ C0] arch_stack_walk+0x144/0x190 [ 929.349075][ C0] ? kasan_set_track+0x4e/0x70 [ 929.349092][ C0] stack_trace_save+0xaa/0x100 [ 929.349108][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 929.349123][ C0] ? rcu_read_lock_sched_held+0x8a/0x110 [ 929.349144][ C0] kasan_set_track+0x4e/0x70 [ 929.349158][ C0] ? kasan_set_track+0x4e/0x70 [ 929.349195][ C0] ? __lock_acquire+0x1347/0x7d40 [ 929.349212][ C0] __kasan_slab_alloc+0x6c/0x80 [ 929.349229][ C0] slab_post_alloc_hook+0x6e/0x4b0 [ 929.349251][ C0] kmem_cache_alloc_node+0x14c/0x320 [ 929.349271][ C0] ? __alloc_skb+0x103/0x2c0 [ 929.349287][ C0] __alloc_skb+0x103/0x2c0 [ 929.349300][ C0] ? ieee80211_beacon_get_template+0x50/0x50 [ 929.349319][ C0] __netdev_alloc_skb+0x10c/0x500 [ 929.349335][ C0] ? kmalloc_reserve+0x240/0x240 [ 929.349350][ C0] ? __ieee80211_beacon_get+0x36/0x1600 [ 929.349368][ C0] __ieee80211_beacon_get+0xe17/0x1600 [ 929.349386][ C0] ? __ieee80211_beacon_get+0x36/0x1600 [ 929.349407][ C0] ieee80211_beacon_get_tim+0xbf/0x580 [ 929.349437][ C0] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 929.349460][ C0] mac80211_hwsim_beacon_tx+0x3c7/0x780 [ 929.349481][ C0] __iterate_interfaces+0x243/0x500 [ 929.349502][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 929.349518][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 929.349539][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 929.349555][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 929.349578][ C0] mac80211_hwsim_beacon+0xbb/0x1b0 [ 929.349594][ C0] __hrtimer_run_queues+0x520/0xc40 [ 929.349609][ C0] ? ktime_get_update_offsets_now+0x99/0x3f0 [ 929.349629][ C0] ? hw_scan_work+0xf60/0xf60 [ 929.349647][ C0] ? hrtimer_interrupt+0x9c0/0x9c0 [ 929.349662][ C0] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 929.349683][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 929.349702][ C0] handle_softirqs+0x280/0x820 [ 929.349718][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 929.349734][ C0] ? do_softirq+0x1a0/0x1a0 [ 929.349750][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 929.349769][ C0] __irq_exit_rcu+0xd3/0x190 [ 929.349783][ C0] ? irq_exit_rcu+0x20/0x20 [ 929.349801][ C0] irq_exit_rcu+0x9/0x20 [ 929.349813][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 929.349831][ C0] [ 929.349835][ C0] [ 929.349840][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 929.349858][ C0] RIP: 0010:kasan_check_range+0x22c/0x290 [ 929.349876][ C0] Code: eb 28 84 db 75 77 49 c1 ef 30 bb 07 00 00 00 45 84 ff 75 70 4d 01 f3 49 01 db 4d 89 dc 4d 85 db 74 95 4d 01 d1 4d 39 cc 75 0d <41> 83 e0 07 45 0f be 09 45 39 c8 7c 80 0f b6 d2 e8 af f2 ff ff 34 [ 929.349887][ C0] RSP: 0018:ffffc900049dfa68 EFLAGS: 00000246 [ 929.349898][ C0] RAX: 00000000ffffff01 RBX: ffffffffffffffff RCX: ffffffff81697e5f [ 929.349908][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffc900049dfae0 [ 929.349918][ C0] RBP: ffffc900049dfb58 R08: ffffc900049dfae3 R09: fffff5200093bf5c [ 929.349928][ C0] R10: dffffc0000000000 R11: fffff5200093bf5c R12: fffff5200093bf5c [ 929.349938][ C0] R13: dffffc0000000000 R14: fffff5200093bf5d R15: 1ffff9200093bf5c [ 929.349952][ C0] ? do_raw_spin_lock+0x11f/0x2c0 [ 929.349976][ C0] do_raw_spin_lock+0x11f/0x2c0 [ 929.349995][ C0] ? __rwlock_init+0x150/0x150 [ 929.350018][ C0] wg_ratelimiter_gc_entries+0x5d/0x450 [ 929.350035][ C0] ? process_scheduled_works+0x96f/0x15d0 [ 929.350053][ C0] process_scheduled_works+0xa5d/0x15d0 [ 929.350082][ C0] ? worker_attach_to_pool+0x380/0x380 [ 929.350102][ C0] ? assign_work+0x3d2/0x5d0 [ 929.350121][ C0] worker_thread+0xa55/0xfc0 [ 929.350150][ C0] kthread+0x2fa/0x390 [ 929.350163][ C0] ? pr_cont_work+0x560/0x560 [ 929.350179][ C0] ? kthread_blkcg+0xd0/0xd0 [ 929.350193][ C0] ret_from_fork+0x48/0x80 [ 929.350209][ C0] ? kthread_blkcg+0xd0/0xd0 [ 929.350223][ C0] ret_from_fork_asm+0x11/0x20 [ 929.350248][ C0] [ 929.385711][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 929.385726][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 929.909927][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 929.920184][ T29] Call Trace: [ 929.923502][ T29] [ 929.926446][ T29] dump_stack_lvl+0x18c/0x250 [ 929.931150][ T29] ? show_regs_print_info+0x20/0x20 [ 929.936535][ T29] ? load_image+0x420/0x420 [ 929.941064][ T29] panic+0x2dc/0x730 [ 929.945158][ T29] ? schedule_preempt_disabled+0x20/0x20 [ 929.950900][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 929.955591][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 929.961156][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 929.967330][ T29] watchdog+0xf7c/0xf80 [ 929.971517][ T29] ? watchdog+0x1e1/0xf80 [ 929.975874][ T29] kthread+0x2fa/0x390 [ 929.980038][ T29] ? hungtask_pm_notify+0x90/0x90 [ 929.985163][ T29] ? kthread_blkcg+0xd0/0xd0 [ 929.990198][ T29] ret_from_fork+0x48/0x80 [ 929.994656][ T29] ? kthread_blkcg+0xd0/0xd0 [ 929.999256][ T29] ret_from_fork_asm+0x11/0x20 [ 930.004045][ T29] [ 930.007797][ T29] Kernel Offset: disabled [ 930.012148][ T29] Rebooting in 86400 seconds..