last executing test programs: 11m36.484102761s ago: executing program 32 (id=41): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = memfd_secret(0x0) ftruncate(r3, 0x10000000000008) 11m34.778740341s ago: executing program 33 (id=49): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setreuid(0x0, 0xee00) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000300)=""/166) 10m50.898882969s ago: executing program 34 (id=221): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=@acquire={0x1ec, 0x17, 0x1, 0x0, 0x0, {{@in=@loopback}, @in6=@remote, {@in=@remote, @in=@broadcast, 0x4e21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56befe125658cb64}, {{@in6=@private2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x20, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2}, 0xfffffff9, 0x2}, [@tmpl={0xc4, 0x5, [{{@in=@broadcast, 0x4d3, 0x3c}, 0xa, @in6=@loopback, 0x3505, 0x2, 0x0, 0xac, 0x3, 0x1, 0x9}, {{@in6=@loopback, 0x4d5, 0x6c}, 0xa, @in=@remote, 0x3505, 0x3, 0x1, 0xf9, 0x2000009, 0x3, 0x200}, {{@in=@broadcast, 0x4d4, 0x3c}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x19}, 0x10003506, 0x0, 0x3, 0x2, 0x9, 0x101, 0x8}]}]}, 0x1ec}}, 0x0) 9m32.399024471s ago: executing program 35 (id=644): r0 = creat(&(0x7f0000000080)='./file0\x00', 0xc7) close(r0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x216000, 0x1000, 0x3, 0x1}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f00000001c0)={0x2c, 0x8, r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x4440, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 8m23.779883077s ago: executing program 8 (id=923): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb1000008747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb80035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22383e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485a4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2245eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e4c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8652b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad64c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc590800", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r2, r3, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$uinput_user_dev(r4, &(0x7f0000000600)={'syz1\x00', {0x6, 0x1, 0x1, 0x1ff}, 0x33, [0x73de, 0x7ff, 0x7, 0xa4, 0x7, 0x1000800, 0xffffffff, 0x6ae, 0x6, 0x8, 0x6, 0x0, 0x7, 0x7, 0x8000, 0x9, 0x5, 0xf05, 0x8, 0x7c33, 0x7, 0xdea, 0xc358, 0x3b4, 0x957, 0x7, 0x1, 0x1, 0xfffffffb, 0x3, 0x6b, 0x4, 0x7ff, 0x7, 0x9, 0x3ff, 0x8ce, 0x8, 0x10, 0x3, 0xe08c, 0x7, 0x5, 0x10001, 0x2, 0x2, 0x3, 0x3a26, 0x0, 0xd, 0x9, 0x0, 0x61e, 0x9, 0x25d, 0x3, 0x3, 0x3, 0x40, 0xfffffff7, 0x625, 0xa, 0x527, 0x6], [0x3, 0x1, 0x1, 0x6, 0xb83, 0x5, 0x1ff, 0xe, 0x3, 0x7, 0x4, 0x3, 0x3, 0x1, 0x3, 0x58b, 0x2, 0x0, 0x8, 0x6, 0x0, 0xd5b3, 0xfffffff0, 0x1, 0x9, 0x53, 0x9, 0x1, 0x0, 0x0, 0x800, 0x0, 0x5bd, 0x4, 0x1, 0x10001, 0x4, 0x561, 0xfe0, 0x5, 0x3, 0x400, 0x7, 0x714f, 0x1000, 0x4, 0x2, 0x1, 0x31, 0x4, 0x491, 0x2, 0x400, 0x9, 0x6, 0x8001, 0x3, 0xffffffff, 0x1, 0x0, 0x10001, 0x4, 0x1, 0xc], [0x2, 0x2, 0x3, 0x8, 0x6, 0x146, 0x6, 0x8, 0x8, 0xffffffff, 0xea, 0x5, 0x40, 0x2, 0x10000, 0x8000, 0x0, 0xa, 0x9c05, 0x100, 0x0, 0x0, 0x5, 0x6, 0x80000001, 0x8, 0x7, 0x0, 0x4, 0x80000001, 0x2, 0x4, 0x1, 0x7, 0x2b1, 0x8, 0x3c6, 0xf, 0x6, 0x0, 0x7f, 0x79cd, 0x1, 0x5, 0x7, 0xfffffffd, 0x1, 0x10000, 0x3, 0x9, 0x4, 0xfffffff8, 0x5, 0x3ff, 0xa69, 0x2, 0x9, 0x80, 0x9, 0x4, 0x9, 0x10000, 0x101, 0x7], [0xcb8, 0x1, 0x800, 0x5042eaa1, 0x9, 0x2, 0xea0000, 0xe, 0x0, 0x8a96, 0x10000000, 0x80000001, 0x1ff, 0x7, 0x9aa, 0x9, 0x0, 0xc, 0x101, 0x78, 0x6, 0x8c, 0x4, 0x4, 0x3, 0x9, 0x8001, 0x3, 0x3, 0x1, 0x100, 0x767, 0x400, 0x4, 0x4, 0x8, 0x40, 0x4, 0x7, 0x0, 0x80, 0x0, 0xaa, 0x1, 0x0, 0xcd, 0xe, 0x0, 0x8ae, 0x9, 0x8000, 0x9, 0x1ff, 0x9, 0x2f3d, 0x3, 0x7, 0x2, 0xffff, 0xe80000, 0x90, 0x4, 0x4, 0xfffffff1]}, 0x45c) dup2(r4, r0) write$FUSE_STATFS(r4, &(0x7f000000a380)={0x60, 0xffffffffffffffda, 0x0, {{0x2, 0x400, 0xfffffffffffffffa, 0x1, 0x18, 0x3, 0x2, 0x1}}}, 0x60) 8m23.413760625s ago: executing program 8 (id=924): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x268}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/ip_mr_cache\x00') fchdir(r1) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000000)='./file0\x00', 0x4000002) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000705000/0x3000)=nil, 0x3000) read(r0, &(0x7f00000001c0)=""/172, 0xac) 8m23.12573171s ago: executing program 8 (id=927): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x48, 0xfffffffffffffffc, &(0x7f0000001180)="14d11edd8503935b5737dc3e7b1be6dd6647926cc69165be53cc0d0f130e0177ccfb6c2f81be802eb36cc9b5d0c8e89cf0a0906d127d1475324e5cb7929a5cd23d44e61aa4d223a0"}) syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0) 8m21.962712601s ago: executing program 8 (id=929): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x50, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x300800c, &(0x7f0000000100)=ANY=[], 0x1, 0x259, &(0x7f0000000580)="$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") getdents(0xffffffffffffffff, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x181) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x21d000, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0/../file0/../file0\x00') ioctl(r0, 0x9, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xa, 0x362, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000100040000000000091931007b11400000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8m21.683284496s ago: executing program 8 (id=930): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x2b, 0xffffffde, 0x208060, 0x1, 0xfffa, 0x10000, 0xfffffffc, 0x0, 0x0, 0x100, 0x100}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40242, 0x1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r2, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0xfa, 0x8, 0x7fffffff}]}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x84, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 8m18.681574913s ago: executing program 8 (id=941): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 8m18.365194099s ago: executing program 36 (id=941): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 6m5.91064479s ago: executing program 9 (id=1403): syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x4028, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x100) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) stat(&(0x7f0000000140)='./file0\x00', 0x0) 6m5.470294143s ago: executing program 9 (id=1410): syz_mount_image$fuse(0x0, &(0x7f0000000a40)='./file0\x00', 0x80, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x18, &(0x7f0000000180)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) capset(0x0, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x300, 0x0, 0x8, 0x300}}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000040)='./bus\x00', 0x322020, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x0) setxattr$incfs_id(&(0x7f0000000000)='./file2\x00', 0x0, &(0x7f0000000140)={'0000000000000000000000000000000', 0x30}, 0x20, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0xe, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x8}, [@alu={0x4, 0x0, 0x2, 0x8}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x76}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6m4.705230563s ago: executing program 9 (id=1416): socket(0xa, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1, 0x2, 0x3, 0xfffffff9, 0x9, 0x101, 0x2, 0xffff}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x87c, 0x2c, 0xd27, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, r1, {0xe, 0x6}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x5, 0x8, 0x401, 0x7, 0xffffffff, 0x6, 0x8, 0x360a, 0x101, 0x3, 0x9, 0x5, 0x4dc6, 0x7fff, 0x6, 0x8, 0x3, 0xd, 0x4, 0x3ae0, 0x5, 0x99, 0x1, 0xff, 0x1, 0x200006, 0x80, 0x7f1b, 0x5, 0x5, 0x80000003, 0xfffffffa, 0xffffffff, 0x800, 0xf30d, 0x800, 0x0, 0x1, 0x4, 0x80000000, 0x6, 0x9, 0x3, 0xff, 0x0, 0x9f0, 0x1ff, 0xdf7a, 0x7fffffff, 0x0, 0x0, 0xc, 0x14, 0x2, 0xc, 0x9, 0xffff, 0x9bf, 0x6f3c, 0x8, 0x9, 0x7ff, 0x3, 0x9, 0x8000, 0x8, 0xffffffc0, 0x4, 0x1, 0x2, 0x6, 0x4, 0x9, 0x200, 0x3ff, 0xf, 0x81, 0x3, 0x8, 0x800, 0x1, 0x5, 0x80000000, 0x2, 0x5, 0x5, 0x1, 0x0, 0x10001, 0x81, 0xc, 0x6, 0x80000001, 0x401, 0x6, 0x0, 0x3, 0x800, 0xf79, 0x6, 0x1, 0x4, 0xfff, 0x2, 0x1, 0x37800000, 0x0, 0x3, 0xae5, 0x4, 0x4, 0xae, 0xfffffffe, 0x1, 0x6, 0x8, 0x400, 0x1, 0x8000, 0xc, 0x1, 0x8, 0x3, 0x95, 0x1, 0x6, 0x3, 0xca, 0x0, 0x0, 0x3, 0x7, 0xffffb09a, 0x1, 0xe, 0x9, 0x5, 0x6, 0x4b, 0x9, 0x4, 0xfffffffe, 0xfffffffe, 0x4, 0x69, 0x2, 0x2, 0xffff, 0x0, 0x5, 0xffff, 0x4, 0x5, 0x2, 0x6, 0xffffffd1, 0x6, 0x1, 0xb3, 0x5, 0x5, 0x1, 0x9, 0x4, 0x3, 0x9, 0x0, 0x5, 0x2c9, 0x8bf, 0x0, 0xde39067, 0x9, 0x8, 0x6, 0x1534fe8b, 0x5, 0x0, 0x6, 0x2, 0x4, 0x81, 0xd16d, 0x1000000, 0xf9, 0x9, 0xe, 0x1, 0xe19b, 0x80000000, 0x402, 0x81, 0x800, 0x9, 0x651, 0x10001, 0x6, 0x0, 0x5, 0x2001d58, 0x401, 0x3, 0x8002, 0x8, 0xffffffff, 0x15a, 0x2, 0x6, 0x5, 0x7, 0x6, 0x79, 0x8, 0x1da, 0x1, 0x9, 0x30, 0x0, 0xfffffff9, 0x81, 0x7, 0x0, 0x27b, 0x5, 0x1001, 0x3, 0x1, 0x6, 0x5, 0x64c, 0x4, 0xfffffff7, 0x9, 0x4, 0x80000000, 0x8000, 0x7, 0x7, 0x7, 0x3, 0xa, 0x8, 0xffff, 0x22, 0x9, 0x4, 0x3, 0x3, 0x9, 0xfffffffa, 0x1, 0x6, 0x3321, 0x9, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80000001, 0x7, 0x3ff, 0x7, 0x4, 0x2, 0xffffffc0, 0x7ff, 0x86, 0x9, 0x9, 0x2, 0x8c, 0x1000200, 0x5, 0x5, 0x40000000, 0x5, 0x7, 0x1, 0x0, 0x4, 0x0, 0xc, 0xdaf, 0x3, 0x9, 0x49, 0x80000000, 0xd35, 0x25431060, 0xd2, 0x5, 0x9, 0xb5f0, 0x401, 0x7, 0x2, 0x6, 0x80000001, 0xa, 0x8, 0x9, 0x1, 0x10001, 0x2c800000, 0x5d, 0xc5, 0x239, 0x100005, 0x5a5057fd, 0x5, 0x4, 0x6, 0xb, 0x5, 0x200, 0x6, 0x10000, 0xf9, 0x6, 0x8, 0x7, 0x3, 0xfffffeff, 0x9, 0x1, 0x401, 0x1ff, 0x2, 0x0, 0x0, 0x800, 0x3, 0x0, 0x8, 0x10000, 0x6, 0x7c, 0x1, 0x9, 0xffffff01, 0xff, 0x8, 0x8052, 0x9, 0x5, 0x8, 0x142, 0x2d, 0x7, 0x8, 0xb, 0x81, 0x9, 0x3ff, 0x1, 0x10000, 0x9, 0x1, 0x7, 0xfffffffc, 0x5, 0xe8, 0x6, 0x2f4, 0xf, 0x3, 0x0, 0xff, 0xfffffffa, 0xfffffff7, 0x8001, 0x5, 0x9, 0x8, 0x5, 0x9, 0x2, 0x2, 0x10001, 0xc, 0x0, 0x6, 0x4, 0x866, 0x7fff, 0xe0, 0x8, 0xd3a, 0x6000000, 0xfffffffc, 0x9, 0x7fff, 0x7, 0x10000, 0x3, 0x7fff, 0x40000000, 0x1, 0x7, 0xfffffffb, 0x3, 0x1, 0x9, 0x0, 0x52bd315b, 0x6, 0x4, 0x700, 0x4, 0x1, 0x2, 0x0, 0x5, 0x7, 0x4, 0x7, 0x8, 0x8, 0xc, 0x9, 0x6, 0x5, 0x0, 0x5, 0x2, 0x6, 0x8, 0x9, 0x9, 0x9, 0x5847cb5c, 0x9, 0x2, 0x9, 0x10001, 0xfffffffc, 0x5, 0x401, 0x8, 0x1, 0x2, 0x0, 0x0, 0x1200, 0x2, 0x0, 0xef2c, 0x80000001, 0xac5ae1dd, 0x0, 0x800, 0x1ff, 0x2, 0x3, 0x1, 0x8, 0x7785, 0x8001, 0x4, 0x40000005, 0x4, 0x7, 0x0, 0x6, 0xffffff2f, 0x8001, 0x3, 0x5, 0x3, 0x4, 0x7, 0x5, 0x7, 0xabd, 0x0, 0x10001, 0x6, 0x200, 0x30000000, 0x5, 0x13c1, 0x3, 0x7, 0x1, 0x8, 0x2, 0x6, 0x1, 0x2, 0x2, 0xb, 0x8, 0xa, 0x9, 0xfffffff9, 0x7, 0x8, 0x3, 0x20008, 0x9, 0xfffffffc, 0x6, 0xe7a9, 0x10001, 0x6, 0x0, 0xb9, 0x8cca, 0xdda5, 0x1, 0xa, 0x7fffffff, 0x10, 0x31f]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5ce6f98c, 0x84a515e295449745, 0x2ea9dcbf, 0x80000001, 0xfff, {0x7, 0x2, 0x3, 0x4, 0x9, 0x2000000}, {0x2, 0x2, 0xbae, 0x3, 0x1, 0x6}, 0x10, 0x5, 0x6}}]}]}}]}, 0x87c}}, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 6m3.638813959s ago: executing program 9 (id=1425): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) unshare(0x24060400) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfb, {0x60, 0x0, 0x0, r3, {0x0, 0xc}, {0xffe0, 0xa}, {0xffe0, 0xe}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x55}, 0xc010) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 6m3.075101719s ago: executing program 9 (id=1430): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f0000000640)='.\x00', 0x0, 0xdd) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',gro']) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 6m1.975860356s ago: executing program 9 (id=1435): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, 0x0, 0x29, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x40) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r4, 0x18000000000002a0, 0x1c, 0x0, &(0x7f00000011c0)="b9ffddc1ddcccdf175537d53888edfcef6e296510cff24fc83423368", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) 5m45.237348261s ago: executing program 37 (id=1435): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, 0x0, 0x29, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x40) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r4, 0x18000000000002a0, 0x1c, 0x0, &(0x7f00000011c0)="b9ffddc1ddcccdf175537d53888edfcef6e296510cff24fc83423368", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) 3m19.584073371s ago: executing program 0 (id=1935): socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$vim2m(0x0, 0x81, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x60, r3, 0xb7a006d1969b963b, 0x1, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @probe_request={{{}, {}, @broadcast, @device_b}, @val, @val, @void, @val={0x2d, 0x1a, {0x8802, 0x3, 0x6, 0x0, {0x5, 0xd, 0x0, 0xc0, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x1, 0x95ce, 0x9}}, @val={0x72, 0x6}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40001}, 0x10) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602019900000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x89e, &(0x7f0000000180)={[{@dax_always}, {@mblk_io_submit}, {@inlinecrypt}, {@test_dummy_encryption_v1}, {@barrier}, {@dioread_lock}, {@grpid}]}, 0x0, 0x445, &(0x7f0000000800)="$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") 3m19.187024152s ago: executing program 0 (id=1942): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x66, 0x903, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0xe, 0x7}, {0x2, 0xfff1}, {0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x24004804) 3m17.918547369s ago: executing program 0 (id=1949): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r0, 0x4000400) keyctl$describe(0x6, r0, 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0xe) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, r1) keyctl$KEYCTL_MOVE(0x1e, r1, 0xfffffffffffffffe, r1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$kcm(0x10, 0x2, 0x4) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000100), 0x64) syz_mount_image$nilfs2(&(0x7f000000a000), &(0x7f0000000400)='./file0\x00', 0x94, &(0x7f000000a380)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xd99, &(0x7f0000006900)="$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") 3m16.916435201s ago: executing program 0 (id=1951): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x25, 0x1, 0x0) sendmmsg$unix(r3, &(0x7f0000004400), 0x400000000000203, 0x0) 3m14.621510011s ago: executing program 0 (id=1956): socket(0x10, 0x803, 0x0) r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000340)={r0}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000000000000850000006d00000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xe, 0x4, 0x4, 0x20002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) r4 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r4, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1, 0x1000000000000}}], 0x48}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8001c00180081064e810cf782db44fd5617ec403ce69b0d12", 0x19}], 0x1}, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e3, &(0x7f0000000180)={r0, r3}) 3m12.170276889s ago: executing program 0 (id=1961): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0xa2) fcntl$setsig(r0, 0xa, 0x13) fcntl$setlease(r0, 0x400, 0x0) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000280)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = getpid() syz_clone(0x648e7000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000680)={0x40004000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) fcntl$setownex(r2, 0xf, &(0x7f0000000100)={0x2, r3}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000001c0)=0x0) fcntl$setown(r0, 0x8, r4) timer_settime(r1, 0x0, &(0x7f0000000200)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 2m54.971297787s ago: executing program 38 (id=1961): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0xa2) fcntl$setsig(r0, 0xa, 0x13) fcntl$setlease(r0, 0x400, 0x0) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000280)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = getpid() syz_clone(0x648e7000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000680)={0x40004000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) fcntl$setownex(r2, 0xf, &(0x7f0000000100)={0x2, r3}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000001c0)=0x0) fcntl$setown(r0, 0x8, r4) timer_settime(r1, 0x0, &(0x7f0000000200)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 2m50.936390858s ago: executing program 6 (id=2022): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000800), 0x800, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x4) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000001100)={r1, 0x9, 0x30, 0x7f, 0x1}, &(0x7f0000001140)=0x18) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000840)={r1}, 0x8) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) r4 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f0000000280)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000216000/0x2000)=nil, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x25, 0x2}) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r5 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000c40)=@raw={'raw\x00', 0x8, 0x3, 0x3d8, 0x0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x308, 0xffffffff, 0xffffffff, 0x308, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@unspec=@physdev={{0x68}, {'dummy0\x00', {0xff}, 'macvtap0\x00', {0xff}, 0x0, 0x2}}, @common=@srh1={{0x90}, {0x1, 0x1, 0x0, 0x0, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x3a}, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xff000000, 0xff, 0xffffffff, 0xffffffff], [0x0, 0x0, 0x0, 0xffffff00], [0xff, 0xffffffff, 0xff], 0x1, 0x1aeeb7877a132835}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, [0xffffff00, 0xff000000, 0x0, 0xffffff00], [0x0, 0xffffffff, 0xffffffff, 0xff000000], 'team_slave_0\x00', 'bridge_slave_1\x00', {0xff}, {0x101}, 0x11, 0x2, 0x5, 0x5}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x3, 0x2, 0x3, 0x1, 0x2}}, @common=@inet=@set1={{0x28}, {{0x0, 0x2, 0x1}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x100, 0x700000, 0x8, 'syz0\x00', {0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) 2m48.03180035s ago: executing program 6 (id=2029): r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1\x00'}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) socket(0x10, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x25, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @private2}}}, 0x90) 2m47.06428169s ago: executing program 6 (id=2034): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dos1xfloppy,usefree,nodots,fmask=0000000000000010,flush,nfs=nostale_ro,dots,nodots,\x00'], 0x1, 0x159, &(0x7f00000004c0)="$eJzs27GKE0EcBvB/TKJRm9RisWBjFdQnUCSCuKAoKbRSiDaJBEyz2phH8QUFSZVuRPdI7nLJkRzs7ZH8fk0++GZgpsgOs7Af738dDSfTL5M38+g0GtF6GlksGtGNG9GM0iwAgEOySCn+pJTSrVnc/hUppXNDftayMACgMjuc/wDAgXH+A8Dxcf4DwPF59/7Dq2d53n+bZZ2I37NiUAzK37J/8TLvP8r+665mzYti0Fz2j8s+O9u3485J/2RjfzMePij7f93z1/lafzeG1W8fAAAAjkIvW9p4v+/1tvVlOvV+YO3+3op7rSvbBgCwh+n3H6NP4/Hnb3uFiMvMOojQjohrsAxBqDbU/WQCqrb609e9EgAAAAAAAAAAAAAAYJudvwfqXDx4kbZPr3uPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsO5vAAAA//9XS09N") syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f00000003c0)='.\x00', 0x1b4a47c, &(0x7f0000000640)=ANY=[@ANYRES32=0x0, @ANYRES32=r3, @ANYRES32, @ANYRESHEX, @ANYRES16=r3, @ANYRES64, @ANYBLOB="3093e121f7523fece90a37d5a927c18dd10d3154456ac66e96749c346fd71173e12fcf6d1160b1a8ed194deb98dc67b07edd64d7e1afef339c828e956edf4068785cb0d7d4a24137cf9c2cac79060c0beb7d1ab2be0fac9a6d6028d2e9d895ec67dec6914528a112adced19a86ad8403eb4e04bc7d51afc6561063bbb696c825a82153efcf06941b3ae039ef7761b7a2bbddc32f3cc39f6ffb5d2a808f3e7ecd9039d8c7895b00ebbf6dc950788fbca296f89178e938440f8e57819e17eb79736882e9699d96b1959c119730542c4baf0af7acac79531d0c4623bb5055768b6228217225ea7782904746898b13fc6dab1c63a2c2d5a724a8bb745da18da54627d618842162c1367e4361737545a8628fb76106c1212ce6152ef12ebda119a33e28f17ba3fbf9eed69447ca88876cbabfce8b2aba2f668f5b91d00d5de2be7bf028b273ec31e63b4fbf87f6cbf1efb41a7e538e4f4a66962d7c7a0b2ff01e86df58b94f1a321aa1297c5a4cc42b656d9acb7a40490ede8099679fb86b4ee7a852aa68358dcea38ad3d2b3b794db5b3caec0228b39709eedd31a55aaf2b49146d0effdc3dfce3ec78e4bb2f65ceb9ca94a2e2fed7efc2b6bcd462955cf911ed5dbb62d6339d001bee46a4989d87cf0578d0f8913ed29d36c31e9b41678ec127f48d40003c0569b6102757c87f00adb7920ab2b78a82bfc115f831ab9abc72a93299c0e1971d17a2b3d376d66e6ddfe3dd86166507f87b6db73fe284aa52db7645601329b6087cab267eefc8bb846cad8ade3e61be692a066d0e6a3f0603d0405d58aa07c406950a69fff78a37cb9e2c9d420bb9394e483252739cabecc7418b142ec8c84e394b42c05c3f116409fc830fac08788bc2b93cb491696a8385d07cd1e19a9de182abeceb435e92d4eda2d2710cb06180c6271e5c1a26edf630ee16848993e3c3ef8804a87407b7e7cdb8d263238cec45424f7dfda3b1a8390e39820ac367c33aafc4edb3223578c108628e6fa84d7805208d796d91e4b83794fdea7fa49ed4c422aed72db2d46df97082b904dd80ed9cb4ab29b4cc1e345d76999971bb7a3bcf191634020eeda9c58c3b2a306921ef7830f672cc1da4905963b0a4aede35913fdf8dbd4e8ba22e39bfba342c6a302f7a03225d021f0e0e357200f7301ce560b065d1431ad16702e035caab022382d6251e88ef861145c1a3121ff099feda4dcf6561a026889ac3f0474d6a868a4f24ea60f7bc95bf7f2afb85a430658eb3b2b84b61a695f90e01f30a417c79caa44640e7eb9195f844346100c551d4fc23ef249f29ec1a5489839d153c3fce79b288d86a48eadc7024cab6f9b626c7eeb87e8f76ec6205c3487deaef65133ec2677c642887de743d1dcc2dbf72f7b9062b9654ff693aa688dd5e05ed48c8d681cd426bde017c08d31d83994284efb804a9beda7091240e7feb740307412e4c64aa422b91dfd31874a43aa2e76988e5933f557c884cd4b960a6321828692975a76f6473cd0650cbd9dd09acfad7aec17c7a6c34e3c9327469d77d1ee32992f1f2c47ff36026f74b4c8d01cf52eefd44d30519f33cc13cb30cf7a43f7305fd76b063d2363ac318e0090d3516cbbd82da99b3f53d570c2e2b85883abf68332f0ea3e0721bd251cea500281405d34aaed523c2684cd5e255919d828bf00f2d62a3d0b56d3d7cd18c5fa6f0764aeea0405e8731f0b223bd19471b8188c4b00cb5c2d057444148a390f36f2ddbf3bb6c46f4c96058ff00057311d2cff2a9c081f3f47967bc5c7c1dc554cd66c39ee403cd426a659131f3e2b9f0109af5414214e81344e0ff0129fe9ec7c01814823c995bf1b437e4f1f07f83055ded75331575d921231b448609f1aa76ae28edc70612e8de047c338712a43413a047c67a2fb3ec7c525a1720d01d8e0e92ae34f3b88c9b4e6c3e938919a4390628f6529dfa8d1f5666c28d4ae9bf8d5a579d5117e027a4cbbc5193a1c3f811a4822746e4c10fe9fd0ac93df86fb41e3d3993cdacb05f633be404a0d7fd256ca01c131859d08e5cd26809f786c5c57866d76f25ae000fc7517e2e74c29f1cf804fa6ae0bd985926daadbc1c61b9e042d8b6367d1e68e3e23476830f8fa2ff4999f17120d64537d601990fa130eaa19b6b660730f37f2256e028689c5b86582819ee5103d8cb23c246f4f34dfb7adebf2a14eb41eef768ecd6dbb37075ed8bf462104e0303f74fd81e69209c0d89cef3b0231a1b24b60d3edf5cb96043ef449823440c2edb1fcee97a9b56e811989ead072123d1090f1f7be126112497c2042bfdea16a14c34d6c90fe8be6a3558ecbcadba53a939f78bd2af5efcb96d697e78fdf099a57981099d4c3b10c560b814c3eb719bd441cc7fc1667776fe21b1a2288804a6b2a0c65341660053f800fef460b93d2dd27b38cdc32fd781fd34480278756e8b9ea8a3fd7687b55064bf95b80d01122f81ac7b1b33c08e92f9736dd80bd850f0f5d54197e28624e8aee1e171a449c21576f420f41d09c3f15c8723303338ede1f73020d1d637a59596092d02b7df0a649be2890b825978f5a571b88425cabbadbff56bbd2bcd3e1ff4c9197e7f639fec41ce603e34a18eb21fac02fcd0c68025c3eba6aa01a8470915ec51a499659a179b12deed0153e02c88dbf4429ecd922675132de722b0d225125e8650cbec160ea8dde590d87d37dda05aa4ebf21a9b2f96bebfc0a495cdea3258f732451716ee60bb9c69d7a1c87ea7e804ec2864234805f3f698f32289de4beecf3fa0cb3649aa6b2d6191ad9493dd01a5380a89af9fbbdcf8482429e254dce6e3d55cd012cf937ec058c922d9490228a7a75c8f28691452bc65184e89bc9b59278c05356c1e9db634b4c3d69ac5b0ac074e21b06cda6f57727dc67503cb78124c9ba71a98138ff73ff83344562a6835262517b239eb12244bafe6200595576f520b6cec0128cc18e94df1a2404dafa7b8631870d4b0b28706463fcdb12ff30a4dae6836cdb00080000d9a2a00d354ac4489be77b69de05646a12406473e2803bab37ca3a8e4057c8c1acdfe64529affda8ab2dc2a2912901dbdaf31add3db2a1998ac2524a6544cbbeea0015f2e3e219d9f65892345b9707a75e47308a0803076b1f3599804410513619a2224e51669d25b3d9ad1d795df41f6718a6bfec935fe61d5b4ed48c9b3506afac9e6215a64b56cc35d69c84914886da4f443aeb9ba4d7b92de2afcaae0d27dcb9fb587de4cfb501419ec1ecf6409761ac42a92d6bf9067f76eee3f459815459dadf700ffc024c511159626bc33f4b67ff894cada0dfd232639d1cb979d4f7f6064b2ff18c5376dd3bddcf70e0db0cbc4169aff2f81295cbcda865bb4d38b135003bf0db7264a80d74628c4e14a24d4453fbfa6ec81befc58c8dc52806961c90aacfbfcafd097d07e285158e96129b7d7fc1e692bb47e59fe42c86be772ce525f2df3cd7fee26fa6f2c4ae8820af6bd86f71a650a8fc636f50fa0be68986d8bc9c4af917c8483057f85700d177efc36127c5737439ccaae4753a97ab57b701a73a9580c497e11f07c60d47407898404f0b8b4187a51a6fa83ea3bca73d58e601f6d62eb86be9675dfc61620f09099de918c1e5d661d8cac1b4a638689ecc5ab23af6807a48be79af1a6fe9a0c4dd0496f8ff2c3e7e395719523d529a57c8cbde9594196e381a549b24e92f62e53f267bdfa214e5830513ca33fdc6abd42c274926eec5b9b26df5b1d19a4e5a33751419853cf372ff3b1f19b7f69b8cc21325828ab5a27ec12a6c6be92b3fe86cc1947e90032535c01dbf4bc8f511d71c2af2b5a2839be10d41786cac3037af2edc90e10005de6c7cd8c8f212ced643b901880e797cf39819200f2d7a52737ffb928798589a399ca3476cee2371e278d7a617cbc0ad3291f4c118d33366316be15a11738b0b36824064fd6e24a17e11c83a72fe54afe4b62d3280df32c0d7089cf67ca673613f223f0b66134c74878ca46fd11f965cbe337258f9e313da2edcd5fdeffc85d6ca8db1355b15d389d4068cefefc1e3e2dea21b22d07fb5120fd4827dd4b3dd6f0c1cdf773820f9b539065569f5e9bdeb6b8dd48cd01b30b3b9ed6b9fb48fa7dc87ceeff8f54cf0744b8c307319615ecb0d7b240cd663425d945cd00906e5b9bd63b89bcac0f4b28837fbfa299866f2b228e7341e517694f4a30c451512eb85e8e011911df0e050d125e63d559f1deae50745dc0a73eb6f0c04b725d8b0e2dfa7668442e9e0da2b83d07b6180a8152e6a35b61b642effaa6a57815d032dd643ed925884d4fdf0d115d5d75ea50999933a770ff1b10b4e172104ee61c2455987db88a053782b97a77af12f01f3f74d1d6224a14a047fda4c181e6b01de067d764d5e666e08d9be7bf5f936a3e3442f741d1619983c77e3bbedf97c4430ac96fe3cc8df98f15188ea9f796dd0e3e0e4bde70cf534a15d0e82d27ffbbafba15d8889451ec8cb0c4a63ef2d6907db89555385e11ec7ef2534ca29cc64df6dc5b3b92697ec11b826449c5db22f81b93868caf8e3df973edfa578b79c012ef8ef433a1eda720e22e30b2901e955dee0646c1efafdf997cd1163e08cf03e9d33f02bdffe0a89cf91acf2ac99796fa05018984ea13ce514460e159b49421c4356928031595dea599f000f0debe2c42e8d3bdd05207e74588ab36a6daaddc8ea2c7c4c5294c385886e58fc6309b94fd91b9b56a37b73a1c163a5a5ea1bfaecc1898c4fe857fec7e9b7f3a24c2f90f61119a9c72aa8df532787db0d25ac60db91b456d03baba0577d96ab9b8439ffc2b7b72e0146e3f2f61118d08449c2a816644c895345fd0a4c019bb4a983095e236a8c1a38b946bdb877c2ae202592cb0266f7d80e2c1d1292532204f9be9f2f5954ce2fa99697c9b20fe138db57ac3134ad556d16d8d615c356d05fd95ab1bef26b23e1ad2ea5abaffede3e14bfe2ee55f593700c49a6c9ecf28d1a01d72b1920b1b7944ef7ed7a2f96a6f5ee4f40f54978a735d155b259d7afd53ac19ed2443d45dcbc84335a419109ab159403b0f828d94079c0c5e5320f91496a043b92901a1e8a4966315ada9f8ffc5ac70868c0df278afe7bfe0affb68aa13ed029bb965b6d6a9ebaba1d0d1a2c17b69d0ca3b0edfa3fefedb5bc0064272577ac22fa84bf819a4eea0ab2ba920888e4c2bc89286184fc10b6dcce84466f3db078fe3af1a90a5b9aa7b66a9e5450807601c2a17460027109908618ac2cc1508029151fc96ee5ab264d2c4236aacfca06c0e6b71b748900652de55f7761a4606a237bd11902178e3a2afde4cc4964b3dfe1abdaad79ed0d80693674c4737a0b17c2e42ba390f98e776a4e758ed98ce8bdeb914b01707602b10fffca3992f1168e7ab3793ad47236351ff7a20ecd50b4edb63e95ed05d6093ead98bbc2dec9dda3ac4b902bd02e4d0eb528653ce3aa313cee066181d7612f40234c1c3aef14fc99b7d9196cd7dab2ff27c388ef67de7b351cf40d343059eeda90e45700c36febfde7a07fce384200618548cb76d8017c2053b332507045a914e39b93f927b33396ab82feb532870c4323c2305398867aac393339656bd4b39c5da5d676fa5a233c7c62f8cc9ab4417a658bf9e679d22bb801ab10d855897a75e4b3e523e87e4ea1e17f270830cee4185d62ea0afd170508453ab0f42d3b35292c4e0000000000000000", @ANYRESDEC=r3, @ANYRES8, @ANYRESHEX, @ANYRES64, @ANYRES16=r3, @ANYRESDEC=0x0, @ANYRES32, @ANYRES16], 0x5, 0x0, &(0x7f0000000000)) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) 2m45.977680557s ago: executing program 6 (id=2036): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = userfaultfd(0x80001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000001b00), 0xffffffffffffffff) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000003c0)={&(0x7f0000000000/0x800000)=nil, 0x800000}) 2m44.749650561s ago: executing program 6 (id=2041): getpid() timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f0000000640)='.\x00', 0x0, 0xdd) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 2m44.297759265s ago: executing program 6 (id=2042): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r5], 0x54}}, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xe, 0xb}, {}, {0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004040}, 0x800) 2m27.011912208s ago: executing program 39 (id=2042): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r5], 0x54}}, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xe, 0xb}, {}, {0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004040}, 0x800) 2m8.820109669s ago: executing program 5 (id=2138): socket(0x2a, 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket(0x400000000010, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newtaction={0xc4, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}, [{0xb0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000, 0x0, 0x4}, 0x3, r3}}]}, {0x4, 0xa}, {0xc}, {0xffac, 0x8, {0x0, 0x2}}}}, @m_mpls={0x5c, 0x2, 0x0, 0x0, {{0x9}, {0x30}, {0x4}, {0xc}, {0xc}}}]}]}, 0xc4}}, 0x0) 2m8.397140721s ago: executing program 5 (id=2141): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200051b08000300ac1414aa0800060021"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0) 2m8.157037424s ago: executing program 5 (id=2143): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./mnt\x00', 0x2000c10, &(0x7f00000000c0)={[{@i_version}, {@abort}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") r0 = creat(&(0x7f0000000380)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r2, 0x0, 0x0, 0x1001f0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000680)='./bus\x00', 0x0, 0x5000, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780800d1cbf7966d61f53dc17769048b0000fd0c000000000000000000000000000000000200000000000000000000000000008000", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) r4 = syz_open_dev$vbi(0x0, 0x0, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$VIDIOC_QUERY_DV_TIMINGS(r4, 0x80845663, 0x0) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x100000, 0x16}]) 2m5.957544089s ago: executing program 5 (id=2148): syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x3200c02, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x3, 0xa80, &(0x7f0000000c00)="$eJzs3U2MW0cBAOCxd73JNilxSkKXJLQJP2356W6zWcJPBE3VXIiailulikuUpiUiDYhUglaVmuTECVpV4QpFnMqhAoTUXlDUE5dKNBKXikPhwIEoSJU4QCExWu+M93nW5tn7Z3v9fdLseN48e+a9fX5+fzMTgLFVbf5dWJiphHD1rVdP/P2+v00vTnm4NUe9+XeykKqFECoxPZl93vsTS/GtD1480ymuhPnm35QOj99svXdHCOFSOBiuhXrYd/X6K+/MP3bq8skrh959/diNjVl6AAAYL9+8dmxh71/+uH/3h2/cczxsa01Px+f1mN4Zj/uPxwP/dPxfDe3pSiEUTWXzTcZQzeab6DBfsZxaNt9kl/Knss+ttfL3t823raT8icK0TssNoyxtx/VQqc62pavV2dmlc/LQPK+fqsxeOHf+6YsDqiiw7v55bwjhoNBvaDQaLzVX4BDURRBWGxq7Br0HAliS3y9c4VJ+ZWFtWp822Vv5Nx+pdn4/rIPN3v7Lyv/xnwdb/gpjXv4vL9vjsH626taUlit9j3bGdH4fIX9+qd/vf/q8/H5Ercd6druPMCr3F7rVc2KT67Fa3eqfbxdb1ddinNbD17P84vcn/5+Oyv8Y6Oxfm3X9/7XpgV/rXAwHh6AOWzrUhqAOQs+hMegdEDC0lp+bW9KIUn7+XF+ev60kf3tJ/nRJ/h0l+TtK8mGc/fa5n4SXK8vn+fk5fb/Xw9J1tjtj/JE+65Nfj+y3/Py5336ttfz8eWIYZm+efuLsl5968vrS8/+V1vZ/O27vB2O6Hr9b1+IM6Xphfl299ex/vb2capf57srqc+eK+RtLJe5pn6+yZ/lzQmE/s6IeM+3v29VtvgPt89Wz+aZj2J7VNz8+uSN7Xzr+SPvVtL4ms+WtZcsxldUj7Vd2xzivB6xG2h67Pf+fts+ZUKs8fe782YdiOm2nf5iobVucfrj4ob/anLoDa9Nr+5+Z0N7+Z2dreq1a2C+0Dr/T/uJw6/Pap88vJWv5/EdiOv3OfXtiujl99sx3zz+13gsPY+7i8y985/T582e/70V6MW21eOFF2Z5jqz45CONj7rlnvzd38fkXHjz37Olnzj5z9sKRo0ePzM8f/cqRhbnmcf1c8awf2EqWf/QHXRMAAAAAAAAAAACgVz84eeL6n97+0ntL7f+X2/+l9v/pyd/U/v9HWfv/vJ18ahWQ2tnv7pDfHHfvzfZ6TGXz1WL4aFbfPVk5e7P3fSzGrXH8Yvv/1N4+79c11efubHref2+aL+tOYEV/KVNZHySt8QJjg/1PxvSVGP8iwABVpjtPjnFZ/9ZpW2/2T/HSRlWSjZb6E0lbQ+rHJLX/7tavU9r/796EOrL+NqM54aCXEejsH8M4/me1mC4ciQ+6Xv8/NBqDr8Paw/CvZ2EdQ6NhFA9gOAx6/M903TPFF37/je2LIc1285H2/WXefymsxbCPP6n8rTX+Z2v8u572fx16V2/r57n30RX+/bMb7xWKDft63f/my5/6gd5TXmbRh7H8tPz3h97Kb7yWlZ/fEOrRf7Ly7+ix/BXLf2B15f83lp9W2wOf6rX8pRpXqu31yK8bp/t/+XXj5Fa2/Klvz76Xf5UDNd6O5cM46z7ObK8j2A6nURn/t5v8OYwvxnTaEabnHPJf5H7rn56vSL8De7PPr5T8vo3KOMXdjPv4v1+Ncdn3IY3/m7bHeod0tZCudVi3o76twFbz/jDe/xvlcGkI6iAMaRiOMbCLodFoDLQjb72ID9ag1/+g7z4PuvxBr/8y+fi/+TF8Pv5vNTuByMf/zd+fj/+b5+fj6+X5+fi/+frMx//N8+/OPje/gj1Tkv/xkvx9Jfn7l/OnO+UfKHn/J0ryD5Xk31OSf29J/l0l+RMl+Z8uyf9MSf59JfkPlOR/tiR/q2u2Ryl8qcZt+WGc5e3zfP9hfKT7P92+/3tK8oHR9dM3Dj/65G++VV9q/z/VOl9L9/GOx3Qtnjv/MKbz+96hkF7Mezum/5rlD/v1Dhgnef8Z+e/7/SX5wOhKz3n5fsMYqmzvPDnGab/Qrd+qbsf5jJbPxfjzMf5CjB+M8WyM52J8OMbzm1Q/Nsajv/7dsZcry+f7u7L8Xp8nz9sD5f1EHemxPvn1gX6fZ8/78evXWstfZXMwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAgak2/y4szFRCuPrWqyeeOHVubnHKw6056s2/k4VUrfW+EB6K8USMfx5f3PrgxTPF+HaMK2E+VEKlNT08frNV0o4QwqVwMFwL9bDv6vVX3pl/7NTlk1cOvfv6sRsbtwYAAABg6/tfAAAA//+tyxzC") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r3, &(0x7f0000004400), 0x400000000000203, 0x0) 2m4.343955723s ago: executing program 5 (id=2154): ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000200)=0x8000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r4, 0x40000000}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) 2m3.987764262s ago: executing program 5 (id=2156): syz_clone(0x668c7000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x40) fcntl$setsig(r0, 0xa, 0x13) fcntl$setlease(r0, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000280)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpid() fcntl$setownex(r1, 0xf, &(0x7f0000000100)={0x2, r2}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000001c0)=0x0) fcntl$setown(r0, 0x8, r3) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x4) fcntl$setlease(r0, 0x400, 0x2) 1m47.462734825s ago: executing program 40 (id=2156): syz_clone(0x668c7000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x40) fcntl$setsig(r0, 0xa, 0x13) fcntl$setlease(r0, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000280)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpid() fcntl$setownex(r1, 0xf, &(0x7f0000000100)={0x2, r2}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000001c0)=0x0) fcntl$setown(r0, 0x8, r3) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x4) fcntl$setlease(r0, 0x400, 0x2) 14.522101331s ago: executing program 7 (id=2406): userfaultfd(0x801) syz_init_net_socket$rose(0xb, 0x5, 0x0) r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x28383, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_mptcp(0x2, 0x1, 0x106) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x2000000007d, 0x0, 0x7fffffffffffffff, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x5, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 12.560851804s ago: executing program 3 (id=2411): socket$netlink(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000500)={[{@debug}, {@delalloc}, {@inlinecrypt}, {@test_dummy_encryption}, {@errors_continue}, {@errors_continue}, {@delalloc}, {@barrier}]}, 0x1, 0xbc8, &(0x7f0000002380)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in6=@local, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e21, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@dev={0xac, 0x14, 0x14, 0x21}, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0xffffffffffffffff, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x9, 0xfffffbfffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 12.291364918s ago: executing program 7 (id=2412): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x3) mlockall(0x2) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmat(0x0, &(0x7f0000ff1000/0x3000)=nil, 0x400c) 10.764281428s ago: executing program 7 (id=2413): getsockopt$packet_int(0xffffffffffffffff, 0x107, 0xc, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) close(0x3) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f00000001c0)=0x7, 0x4) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r2, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e67}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) 9.419717178s ago: executing program 7 (id=2416): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0x0, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b928, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x5, 0x7, 0x5, 0x1, 0x0, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000440)=@xdp={0x2c, 0x7, r6, 0x12}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000180)='Y', 0x1}], 0x1}, 0x8014) 9.041376288s ago: executing program 7 (id=2419): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000002e40)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x0, 0x2, "122b472e41e24b11f34b608816e5"}]}}}}}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 7.881784888s ago: executing program 1 (id=2422): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$packet(0x11, 0xa, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000004600)='map_files\x00') memfd_create(&(0x7f0000000040)='\x005', 0x3) userfaultfd(0x801) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r0, 0xfffffffffffffffb, 0x1, 0xfffffffffffffffd}) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 7.589294554s ago: executing program 1 (id=2424): r0 = inotify_init() r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r2, 0x0) connect$unix(r1, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r1, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r3 = socket$unix(0x1, 0x5, 0x0) bind$unix(r3, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r3, 0x8497) accept(r3, 0x0, 0x0) bind$unix(r1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 7.566216765s ago: executing program 3 (id=2425): syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') r3 = syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00') preadv(r3, &(0x7f0000000200)=[{&(0x7f00000003c0)=""/4096, 0x1000}], 0x1, 0x4002c2, 0xc8) 7.521728867s ago: executing program 7 (id=2426): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x378, 0x1b0, 0x1b0, 0xffffffff, 0x1b0, 0x2f8, 0x3c8, 0x3c8, 0xffffffff, 0x3c8, 0x3c8, 0x5, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x1d}, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {}, {}, 0x16}, 0x0, 0xb8, 0xf0, 0x48, {}, [@common=@unspec=@limit={{0x48}, {0x5, 0xb8e, 0x3, 0x80000000, 0x7f, 0x0, 0x5}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xd, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0xff, 0xffffff00, 'virt_wifi0\x00', 'batadv_slave_1\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @port=0x4e22, @port=0x4f23}}}}, {{@ip={@empty, @remote, 0xffffffff, 0xffffff00, 'vcan0\x00', 'pimreg1\x00', {}, {0xff}, 0x32, 0x2, 0x2d}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id=0x66}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d8) socket$nl_route(0x10, 0x3, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c0000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000000906010200120000000c0000000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c00028008000140"], 0x44}, 0x1, 0x0, 0x0, 0x30008003}, 0x4000050) syz_mount_image$cramfs(&(0x7f0000000040), &(0x7f0000000000)='./file2\x00', 0x2200400, &(0x7f0000000080)=ANY=[], 0xfe, 0x160, &(0x7f0000000200)="$eJzs0M+LEnEYx/H3d+brKKRYZCBBKXTIksAf1C3CiSQhGyi6dBJs+gGKkVDeUqJbB6Grh9q9Lgv7F+jqYdlFL7v/xF68LezRZWbcXZb1P9jndZvP830+D8yLp7OM4tzzVvPrN7fddj+k3zjV8tvD4bDk5RZ0ti7Mg/ejEnxGM9Iw74EXT2Lw8UvDNeqthvc9L0EYCF1b5jTjp/fshKanIU+wn7kH41v+O4PLmVsk5O/d1mDHgywHLP7DfQvsG0Hm9R0BJihlLY/dMfldyaZuKugMspsbe6+nu5VHD5+5fwrl/oNo0sz+hDVsFdmZfDowl1uzafWVU3VmxULhSTGXN3i87xd2++iX0e/wXoH2+gz8PovkXf0Ofin469+ab6sYMP537DTDZ/+6+8NMg0oN6rVkaL2WuG5gZrQ3WbCCPyGyaiSEEEIIIYQQQgghhBBCCCGEEOKqOwkAAP//fK1Sxw==") r3 = fanotify_init(0x200, 0x101000) r4 = dup(0xffffffffffffffff) fanotify_mark(r3, 0x1, 0x8001055, r4, 0x0) open(&(0x7f0000000a80)='./file2\x00', 0x8102, 0x112) 7.319486478s ago: executing program 4 (id=2427): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000001000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x4}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) 7.244916351s ago: executing program 1 (id=2428): socket(0x10, 0x803, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) unshare(0x62000000) 6.12358164s ago: executing program 3 (id=2429): syz_init_net_socket$netrom(0x6, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000000a00ecff0800010073797a300000000074000000160a010100000000000000000a00000008000740000000014000038008000140000000002c000380140001006e657464657673696d300000000000001400010076657468305f766c616e00000000000008000240000000070900010073797a3000000000090002"], 0xbc}}, 0x0) 2.8706467s ago: executing program 4 (id=2431): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000f00)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0xe, 0xa}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x800, 0x0, 0x8001, 0x51, 0x67, 0x0, 0x5, 0x6, 0x7fffffff, 0x100, 0x200, 0x7, 0x681e, 0xbeb, 0x76e1, 0x0, 0x1, 0x401, 0x2, 0xfe, 0x8001, 0x5, 0x2, 0x4, 0xffff52b3, 0x8, 0x629, 0x6, 0x1e1, 0x1000, 0x4, 0xde, 0x7ff, 0x3, 0x7, 0x8, 0x1ff, 0x8e1b087, 0xa858, 0x2, 0x1, 0xfffffffa, 0x1875, 0xffff, 0x7, 0x81, 0x3, 0x6, 0xff25, 0x4, 0x0, 0x7fff, 0x2, 0x6, 0xd7, 0x7ff, 0x2, 0xd, 0x4, 0x1, 0xef, 0x200, 0x5, 0x9, 0x0, 0x1, 0x0, 0x3, 0xb, 0x9, 0xffffff81, 0x0, 0x6, 0x101, 0xfffffffe, 0x8, 0x7, 0x2, 0x1, 0x800, 0x7, 0x85, 0x6, 0x4, 0xe0, 0x8001, 0x10, 0x8, 0x7, 0x0, 0x200, 0xffff2338, 0x5, 0x8, 0x80, 0xe, 0x7, 0x6c0, 0x80000000, 0x1, 0x200, 0xfffffffd, 0x40000008, 0x6, 0x3, 0x80000000, 0x2, 0x8, 0x3, 0x42, 0xe, 0x6, 0x8, 0x0, 0xa, 0xd, 0x4, 0x5, 0x8, 0x80, 0x5, 0x4, 0xdcb, 0x4, 0x9, 0x1000, 0x80000001, 0x3, 0x7, 0x100, 0x0, 0x4, 0xed00, 0x7fff, 0x401, 0x1130debc, 0x2, 0x40002, 0x7, 0x2c1, 0xe, 0x0, 0x1, 0x2, 0x7, 0xc7, 0xe68, 0x1006, 0x7, 0x3, 0xf, 0x6, 0x6, 0xf, 0x7, 0x5, 0x6, 0x4a3b, 0x5, 0x0, 0x3, 0x3ff, 0x5, 0x8, 0x0, 0x3d6f, 0x8, 0x6, 0xc73, 0x429, 0x1, 0x6, 0x8001, 0x6, 0x101, 0x9, 0x3, 0x2, 0x8, 0x81, 0xb573, 0x2, 0xfffffffa, 0x7c, 0xfffffffb, 0x7, 0x9, 0x200, 0xfffffffb, 0x0, 0x8, 0x200, 0x6, 0x566f, 0x0, 0x300000, 0x3, 0x2, 0x80000001, 0x6, 0x4, 0xfff, 0x2, 0xd7f5, 0x1, 0x9, 0x7, 0x0, 0xffffffff, 0x9, 0x1, 0x9, 0x8, 0x81, 0x9, 0x5, 0x3, 0x3, 0xa, 0x7fffffff, 0x7fffffff, 0xb, 0x8, 0x9, 0x3, 0x6, 0x0, 0x59, 0x401, 0x6, 0xffff, 0x2, 0x1, 0x38, 0x2, 0x4, 0x6, 0x4, 0x9, 0x1, 0xfffffffe, 0x0, 0x1, 0x7fffffff, 0x1, 0x6, 0x8, 0x1, 0x8, 0x2e32, 0xfffffffe, 0x7, 0x9be, 0x4, 0x6, 0xa]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x4040098}, 0x4084) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0xe, 0x20040040, &(0x7f00000001c0)={0x11, 0x1a, r4, 0x1, 0xd8, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) sendto$packet(r5, &(0x7f0000000dc0)="baf995704a8508a911e21fae656f", 0xe, 0x20005, &(0x7f0000000ec0)={0x11, 0xf5, r4, 0x1, 0x9, 0x6, @local}, 0x14) 2.405625605s ago: executing program 1 (id=2433): bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) setitimer(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000080)={[{@orlov}, {@usrjquota}]}, 0x3, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x1) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f00000000c0)='./bus\x00', 0x0, 0x1c10, 0x0) r0 = open(&(0x7f0000000400)='./bus\x00', 0xc40, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000080)=0x3f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) lsetxattr$security_capability(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080), &(0x7f0000000000)=@v3={0x3000000, [{0x7fffffff, 0xabda}, {0x3, 0x2}], 0xee00}, 0x18, 0x1) open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) 2.405279985s ago: executing program 3 (id=2434): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffffffffffff}, 0x106, 0x2}}, 0xfe5e) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000000), r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x2000000000001005, 0x19dff}}}, 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) listen(r4, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x1f}, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000000000)=0xe, 0x4) ioctl$SIOCGSTAMP(r3, 0x8906, 0x0) sendmsg$inet(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b2", 0x5d}, {0x0}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0", 0x7b}], 0x4}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0xb) 2.323629949s ago: executing program 4 (id=2435): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x30}}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, r5, 0x1, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000084}, 0x40) 2.287302091s ago: executing program 2 (id=2436): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xfff1, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x24, 0x2c, 0xd3f, 0x70bd27, 0x25dfdbf9, {0x0, 0x0, 0x0, r9, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 2.001985746s ago: executing program 2 (id=2437): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0xfffffffd}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r3, &(0x7f0000000040)=@name={0x1e, 0x2, 0x1, {{0x42, 0x2}}}, 0x10) bind$tipc(r3, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10) bind$tipc(r2, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) 1.887818091s ago: executing program 2 (id=2438): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() mq_open(0x0, 0x50f7bb45f81a15a, 0x120, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r3, 0x2284, &(0x7f0000000080)) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000480)={@private2, 0x18}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) 641.905147ms ago: executing program 2 (id=2439): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000840)='/sys/power/sync_on_suspend', 0x103400, 0x83) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x1, 0x0, @pic={0x2e, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x67, 0x58, 0xa0, 0x2, 0x1, 0x7e}}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa0402, 0x0) ioctl$TIOCSPTLCK(r3, 0x40045431, 0x0) pipe2(&(0x7f0000000340), 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000500)={r0, 0x0, 0x4000, &(0x7f00000001c0)={@_ha_fsid={[0x0, 0x5]}, {0x9, 0x7, 0x8, 0x100000006bb}}, 0x9, 0x0, &(0x7f0000000280)=0x5}) ioctl$KVM_CAP_DISABLE_QUIRKS2(r4, 0x4068aea3, &(0x7f0000000540)={0xd5, 0x0, 0x1}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6, 0xfff, 0x9, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0xffff1000, 0x3c4213}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 636.674347ms ago: executing program 4 (id=2440): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24000084) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0x4}, {0xffff, 0xffff}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4005c}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0xe}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44010}, 0x4000080) 636.324797ms ago: executing program 3 (id=2441): chmod(0x0, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000340)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x9, r1}) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000004c40)={@ipv4={'\x00', '\xff\xff', @multicast2}, r1}, 0x14) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) setsockopt$inet6_mreq(r0, 0x29, 0x1c, 0x0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x30040a9, 0x0, 0xf, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x8, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80800) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000062c0)="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", 0x2000, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) close(0x3) capset(0x0, 0x0) 634.783577ms ago: executing program 1 (id=2442): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x80800) r4 = accept4$alg(r2, 0x0, 0x0, 0x80000) sendmmsg$alg(r4, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000018c0), 0x0, &(0x7f0000000140)=[@op={0x18}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5000000}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x1c, r1, 0x7d3a532c78f1abd1, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40060) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000003c0)={'pcmda12\x00', [0x4f22, 0x2, 0x80001, 0x0, 0x1, 0x5, 0x4, 0xd287, 0x8, 0xfd, 0x8, 0x23, 0x4, 0x1, 0x9, 0x101, 0xf7fffffe, 0x6d, 0x2, 0x1, 0x8, 0x927, 0xeb96, 0x401, 0xfc000, 0xe69, 0x6, 0x10008, 0x1, 0x1cdc, 0xfbfffff8]}) 478.686655ms ago: executing program 3 (id=2443): r0 = userfaultfd(0x80801) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x380}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) syz_clone(0x9c00000, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x600}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000264000/0x4000)=nil, 0x800000, 0x1}) 370.058921ms ago: executing program 2 (id=2444): syz_emit_ethernet(0x45, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x37, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1}, "040086dd0000ff"}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x15, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x25dfdbfe, {0x1d, 0x1, 0x6}, [@CGW_SRC_IF={0x8, 0x9, r5}, @CGW_DST_IF={0x8, 0xa, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) 177.370261ms ago: executing program 4 (id=2445): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x742f, 0x77ae, 0x1, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r2, 0x40045542, &(0x7f0000000b00)) syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x40002) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 167.315051ms ago: executing program 2 (id=2446): syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x10, 0x4, 0x306}, 0x0, &(0x7f0000000280), &(0x7f0000000000)) syz_mount_image$iso9660(&(0x7f0000000fc0), &(0x7f0000000000)='./file1\x00', 0x8800, &(0x7f0000000d80)=ANY=[], 0x2b, 0x80e, &(0x7f0000000480)="$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") setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x4c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) symlink(&(0x7f0000000580)='.\x02\x00', &(0x7f00000002c0)='.\x02\x00') 120.876124ms ago: executing program 1 (id=2447): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) userfaultfd(0x80001) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x800, 0x4) read$char_usb(r1, &(0x7f0000000040)=""/236, 0xec) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 0s ago: executing program 4 (id=2448): setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4}, {}, {0x6, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0xc858}, 0x80) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) kernel console output (not intermixed with test programs): [ 346.307899][ T9084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.323958][ T9084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.338924][ T9084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.374519][ T9084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.395810][ T9084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.415085][ T9084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.427282][ T9084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.509231][ T9084] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 346.516868][ T9083] netlink: 'syz.7.1161': attribute type 10 has an invalid length. [ 347.533190][ T9108] loop9: detected capacity change from 0 to 4096 [ 347.582636][ T9108] ntfs3: loop9: Different NTFS' sector size (4096) and media sector size (512) [ 347.695020][ T9108] ntfs3: loop9: Inode r=19 is not in use! [ 347.713945][ T9108] ntfs3: loop9: Mark volume as dirty due to NTFS errors [ 348.065327][ T4260] Bluetooth: hci5: command 0x1001 tx timeout [ 349.413078][ T4197] Bluetooth: hci5: sending frame failed (-49) [ 349.759182][ T4810] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.879862][ T5315] Bluetooth: hci5: command 0x1009 tx timeout [ 353.029724][ T1338] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 355.600468][ T1338] usb 10-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 355.756684][ T1338] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 355.872026][ T1338] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 355.881516][ T1338] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.906292][ T1338] usb 10-1: config 0 descriptor?? [ 355.990600][ T1338] usb 10-1: can't set config #0, error -71 [ 356.029138][ T1338] usb 10-1: USB disconnect, device number 2 [ 356.609395][ T9233] device dummy0 entered promiscuous mode [ 356.615286][ T9233] device macvlan2 entered promiscuous mode [ 357.019883][ T5315] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 357.081771][ T9246] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 357.695250][ T23] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 357.891199][ T9257] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1203'. [ 357.929947][ T9257] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1203'. [ 357.958026][ T9257] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1203'. [ 357.991765][ T9257] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 358.147258][ T23] usb 10-1: config 0 has no interfaces? [ 358.152937][ T23] usb 10-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 358.209897][ T23] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.223101][ T5315] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 358.270642][ T23] usb 10-1: config 0 descriptor?? [ 358.571635][ T1107] usb 10-1: USB disconnect, device number 3 [ 358.603277][ T5315] usb 7-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 358.622919][ T5315] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.641064][ T5315] usb 7-1: Product: syz [ 358.655192][ T5315] usb 7-1: Manufacturer: syz [ 358.699615][ T5315] usb 7-1: SerialNumber: syz [ 358.740750][ T5315] usb 7-1: config 0 descriptor?? [ 359.025856][ T5315] ims_pcu 7-1:0.0: Missing CDC union descriptor [ 359.032388][ T5315] ims_pcu: probe of 7-1:0.0 failed with error -22 [ 359.947953][ T9232] udc-core: couldn't find an available UDC or it's busy [ 359.977709][ T9232] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 360.099570][ T1107] usb 7-1: USB disconnect, device number 10 [ 361.320282][ T9300] loop9: detected capacity change from 0 to 128 [ 361.692405][ T9300] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 361.707763][ T9300] hpfs: filesystem error: improperly stopped [ 361.714365][ T9300] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 361.722277][ T9300] hpfs: You really don't want any checks? You are crazy... [ 361.732434][ T9300] hpfs: hpfs_map_sector(): read error [ 361.738011][ T9300] hpfs: code page support is disabled [ 361.748236][ T9300] hpfs: hpfs_map_4sectors(): unaligned read [ 361.754963][ T9300] hpfs: hpfs_map_4sectors(): unaligned read [ 361.761165][ T9300] hpfs: filesystem error: unable to find root dir [ 362.974552][ T9317] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1219'. [ 364.268626][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 364.716193][ T9337] netlink: 10 bytes leftover after parsing attributes in process `syz.7.1224'. [ 368.312976][ T1107] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 368.413002][ T26] kauditd_printk_skb: 29 callbacks suppressed [ 368.413030][ T26] audit: type=1804 audit(1776712395.172:275): pid=9383 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1235" name="file0" dev="hugetlbfs" ino=52095 res=1 errno=0 [ 368.469449][ T26] audit: type=1804 audit(1776712395.227:276): pid=9390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1235" name="file0" dev="hugetlbfs" ino=52095 res=1 errno=0 [ 368.610497][ T1107] usb 10-1: Using ep0 maxpacket: 16 [ 369.180636][ T1107] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 369.584468][ T1107] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 369.594483][ T1107] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.603098][ T1107] usb 10-1: Product: syz [ 369.607949][ T1107] usb 10-1: Manufacturer: syz [ 369.613595][ T1107] usb 10-1: SerialNumber: syz [ 369.620937][ T1107] usb 10-1: config 0 descriptor?? [ 369.670240][ T1107] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 369.730494][ T1107] em28xx 10-1:0.0: DVB interface 0 found: bulk [ 370.729801][ T1107] em28xx 10-1:0.0: unknown em28xx chip ID (0) [ 370.893923][ T9416] 9pnet: Insufficient options for proto=fd [ 370.906906][ T1107] em28xx 10-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 370.930495][ T1107] em28xx 10-1:0.0: board has no eeprom [ 371.154956][ T1107] em28xx 10-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 371.171726][ T26] audit: type=1804 audit(1776712397.718:277): pid=9449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.1251" name="/newroot/44/file1" dev="fuse" ino=1 res=1 errno=0 [ 371.203804][ T1107] em28xx 10-1:0.0: dvb set to bulk mode. [ 371.442264][ T26] audit: type=1800 audit(1776712397.727:278): pid=9449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1251" name="/" dev="fuse" ino=1 res=0 errno=0 [ 371.497198][ T1107] usb 10-1: USB disconnect, device number 4 [ 371.860331][ T26] audit: type=1804 audit(1776712397.746:279): pid=9449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.1251" name="/newroot/44/file1" dev="fuse" ino=1 res=1 errno=0 [ 371.881062][ T26] audit: type=1800 audit(1776712397.764:280): pid=9449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1251" name="/" dev="fuse" ino=1 res=0 errno=0 [ 371.926829][ T1107] em28xx 10-1:0.0: Disconnecting em28xx [ 371.940878][ T4230] em28xx 10-1:0.0: Binding DVB extension [ 372.238590][ T9469] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1257'. [ 372.260057][ T4230] em28xx 10-1:0.0: Registering input extension [ 372.266453][ T1107] em28xx 10-1:0.0: Closing input extension [ 372.847187][ T9465] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1257'. [ 373.764757][ T1107] em28xx 10-1:0.0: Freeing device [ 376.925824][ T9529] netlink: 60 bytes leftover after parsing attributes in process `syz.9.1274'. [ 378.522654][ T9531] Process accounting resumed [ 378.672188][ T9529] netlink: 60 bytes leftover after parsing attributes in process `syz.9.1274'. [ 379.014830][ T9545] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1278'. [ 379.079324][ T1327] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 379.509436][ T1327] usb 10-1: Using ep0 maxpacket: 16 [ 379.867101][ T1327] usb 10-1: config 1 has an invalid interface number: 152 but max is 0 [ 379.904790][ T1327] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 380.232393][ T1327] usb 10-1: config 1 has no interface number 0 [ 380.369031][ T1327] usb 10-1: config 1 interface 152 altsetting 239 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 380.564747][ T9573] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1294'. [ 380.570145][ T1327] usb 10-1: config 1 interface 152 altsetting 239 endpoint 0xF has invalid wMaxPacketSize 0 [ 380.589491][ T1327] usb 10-1: config 1 interface 152 has no altsetting 0 [ 380.624650][ T4230] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 380.660290][ T9573] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 380.771596][ T9573] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (68719607821) [ 380.863016][ T1327] usb 10-1: string descriptor 0 read error: -71 [ 380.869409][ T1327] usb 10-1: New USB device found, idVendor=03f0, idProduct=2101, bcdDevice=7e.a8 [ 380.895006][ T1327] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.517590][ T4230] usb 7-1: Using ep0 maxpacket: 16 [ 382.488947][ T4230] usb 7-1: device descriptor read/all, error -71 [ 382.607971][ T1327] usb 10-1: can't set config #1, error -71 [ 382.619006][ T1327] usb 10-1: USB disconnect, device number 5 [ 384.453907][ T9602] loop9: detected capacity change from 0 to 1024 [ 384.500122][ T9603] sch_tbf: burst 4 is lower than device lo mtu (18) ! [ 384.567890][ T9602] hfsplus: bad catalog entry type [ 384.937430][ T4386] hfsplus: b-tree write err: -5, ino 25 [ 384.953632][ T4386] hfsplus: b-tree write err: -5, ino 4 [ 384.992937][ T4386] hfsplus: b-tree write err: -5, ino 2 [ 386.131346][ T26] audit: type=1326 audit(1776712412.521:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9626 comm="syz.6.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5905c31819 code=0x7ffc0000 [ 386.263946][ T26] audit: type=1326 audit(1776712412.530:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9626 comm="syz.6.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5905c31819 code=0x7ffc0000 [ 386.455996][ T9629] loop9: detected capacity change from 0 to 4096 [ 386.513308][ T26] audit: type=1326 audit(1776712412.530:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9626 comm="syz.6.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5905c31819 code=0x7ffc0000 [ 386.544501][ T26] audit: type=1326 audit(1776712412.567:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9626 comm="syz.6.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f5905c31819 code=0x7ffc0000 [ 387.289538][ T26] audit: type=1326 audit(1776712412.567:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9626 comm="syz.6.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5905c31819 code=0x7ffc0000 [ 387.322223][ T26] audit: type=1326 audit(1776712412.567:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9626 comm="syz.6.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5905c31819 code=0x7ffc0000 [ 387.420789][ T9622] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1297'. [ 387.518018][ T9656] 9pnet: p9_errstr2errno: server reported unknown error aaaaaaaaa [ 387.559869][ T26] audit: type=1326 audit(1776712412.567:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9626 comm="syz.6.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5905c31819 code=0x7ffc0000 [ 387.582740][ T26] audit: type=1326 audit(1776712412.567:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9626 comm="syz.6.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f5905c31819 code=0x7ffc0000 [ 387.605848][ T26] audit: type=1326 audit(1776712412.567:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9626 comm="syz.6.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5905c31582 code=0x7ffc0000 [ 387.631014][ T26] audit: type=1326 audit(1776712412.567:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9626 comm="syz.6.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5905bf204e code=0x7ffc0000 [ 391.624428][ T1425] ieee802154 phy0 wpan0: encryption failed: -22 [ 391.630972][ T1425] ieee802154 phy1 wpan1: encryption failed: -22 [ 392.015145][ T1338] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 392.329532][ T1338] usb 7-1: Using ep0 maxpacket: 32 [ 392.459743][ T1338] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 392.541825][ T1338] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 393.031707][ T1338] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 393.041522][ T1338] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.049974][ T1338] usb 7-1: Product: syz [ 393.054229][ T1338] usb 7-1: Manufacturer: syz [ 393.059245][ T1338] usb 7-1: SerialNumber: syz [ 393.066640][ T1338] usb 7-1: config 0 descriptor?? [ 395.790181][ T4230] usb 7-1: USB disconnect, device number 13 [ 398.272914][ T9804] xt_policy: output policy not valid in PREROUTING and INPUT [ 399.576518][ T9811] loop9: detected capacity change from 0 to 256 [ 399.964637][ T9829] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1348'. [ 400.061155][ T9829] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 400.070465][ T9829] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 400.079337][ T9829] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 400.088096][ T9829] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 400.109872][ T9829] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1348'. [ 400.284290][ T23] usb 8-1: new low-speed USB device number 6 using dummy_hcd [ 400.786772][ T9845] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1350'. [ 400.797060][ T9845] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1350'. [ 400.806291][ T9845] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1350'. [ 400.816015][ T9845] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1350'. [ 400.825247][ T9845] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1350'. [ 401.553320][ T23] usb 8-1: config 0 has an invalid interface number: 244 but max is 0 [ 401.561578][ T23] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 401.605598][ T23] usb 8-1: config 0 has no interface number 0 [ 401.672993][ T23] usb 8-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=e1.32 [ 401.718608][ T23] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.027703][ T23] usb 8-1: config 0 descriptor?? [ 402.324696][ T9856] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1353'. [ 402.422564][ T9827] trusted_key: encrypted_key: insufficient parameters specified [ 402.571225][ T23] usb 8-1: string descriptor 0 read error: -71 [ 402.579135][ T23] cypress_m8 8-1:0.244: DeLorme Earthmate USB converter detected [ 402.642880][ T9868] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1355'. [ 402.652580][ T23] earthmate ttyUSB0: required endpoint is missing [ 402.691678][ T23] usb 8-1: USB disconnect, device number 6 [ 402.720134][ T23] cypress_m8 8-1:0.244: device disconnected [ 404.288281][ T9902] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1366'. [ 405.728298][ T9944] netlink: 'syz.5.1376': attribute type 10 has an invalid length. [ 405.745962][ T9944] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 407.215121][ T9963] <š [ 408.655255][ T9986] tipc: Enabling of bearer rejected, failed to enable media [ 408.770302][ T9992] netlink: 'syz.9.1388': attribute type 1 has an invalid length. [ 408.778106][ T9992] netlink: 146340 bytes leftover after parsing attributes in process `syz.9.1388'. [ 410.540092][T10026] device ipip0 entered promiscuous mode [ 411.846847][T10062] netlink: 63 bytes leftover after parsing attributes in process `syz.5.1405'. [ 411.874927][T10064] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 411.912251][T10064] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 412.104065][T10071] team0 (unregistering): Port device team_slave_0 removed [ 412.137920][T10071] team0 (unregistering): Failed to send options change via netlink (err -105) [ 412.194942][T10071] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 412.220727][T10071] team0 (unregistering): Port device team_slave_1 removed [ 412.342020][T10073] netlink: 'syz.7.1408': attribute type 1 has an invalid length. [ 412.384961][T10085] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 412.475236][T10073] 8021q: adding VLAN 0 to HW filter on device bond4 [ 412.587370][T10079] bond4: (slave geneve2): making interface the new active one [ 412.603768][T10079] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 412.604025][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready [ 412.686014][T10079] syz.7.1408 (10079) used greatest stack depth: 18768 bytes left [ 413.525127][ T26] kauditd_printk_skb: 58 callbacks suppressed [ 413.525143][ T26] audit: type=1326 audit(3924196085.802:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10119 comm="syz.0.1423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e91665819 code=0x7ffc0000 [ 413.601258][ T26] audit: type=1326 audit(3924196085.830:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10119 comm="syz.0.1423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e91665819 code=0x7ffc0000 [ 413.664041][ T26] audit: type=1326 audit(3924196085.839:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10119 comm="syz.0.1423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f6e91665819 code=0x7ffc0000 [ 413.734231][ T26] audit: type=1326 audit(3924196085.839:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10119 comm="syz.0.1423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e91665819 code=0x7ffc0000 [ 413.807696][ T26] audit: type=1326 audit(3924196085.839:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10119 comm="syz.0.1423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6e9162604e code=0x7ffc0000 [ 413.839548][ T26] audit: type=1326 audit(3924196085.839:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10119 comm="syz.0.1423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e91665819 code=0x7ffc0000 [ 413.888714][T10123] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1424'. [ 413.925718][ T26] audit: type=1326 audit(3924196085.839:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10119 comm="syz.0.1423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e91665819 code=0x7ffc0000 [ 414.026927][ T26] audit: type=1326 audit(3924196085.839:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10119 comm="syz.0.1423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6e91665819 code=0x7ffc0000 [ 414.121583][T10127] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1426'. [ 414.124451][ T26] audit: type=1326 audit(3924196085.839:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10119 comm="syz.0.1423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e91665819 code=0x7ffc0000 [ 414.222268][ T26] audit: type=1326 audit(3924196085.839:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10119 comm="syz.0.1423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e91665819 code=0x7ffc0000 [ 414.256017][T10128] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 415.349599][T10137] xt_hashlimit: size too large, truncated to 1048576 [ 415.381778][T10137] xt_hashlimit: invalid rate [ 415.867925][T10165] tipc: Started in network mode [ 415.883613][T10165] tipc: Node identity 4, cluster identity 4711 [ 415.890291][T10165] tipc: Node number set to 4 [ 420.113206][T10228] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1454'. [ 420.690311][T10229] device bond5 entered promiscuous mode [ 423.685239][T10279] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1464'. [ 425.623817][T10307] IPv6: NLM_F_CREATE should be specified when creating new route [ 425.994678][T10314] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 427.688730][T10306] syz.7.1472 (10306): drop_caches: 2 [ 429.947128][ T23] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 431.172823][ T23] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 431.819627][ T23] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 432.254126][T10423] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 432.417706][ T23] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 432.468157][ T23] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.519793][ T23] usb 8-1: config 0 descriptor?? [ 432.955760][ T23] ath6kl: Failed to submit usb control message: -71 [ 432.976291][ T23] ath6kl: unable to send the bmi data to the device: -71 [ 432.983857][ T23] ath6kl: Unable to send get target info: -71 [ 433.668512][ T23] ath6kl: Failed to init ath6kl core: -71 [ 433.838729][ T23] ath6kl_usb: probe of 8-1:0.0 failed with error -71 [ 433.904618][ T23] usb 8-1: USB disconnect, device number 7 [ 435.187351][T10450] chnl_net:caif_netlink_parms(): no params data found [ 435.282787][T10500] netlink: 'syz.0.1514': attribute type 1 has an invalid length. [ 435.377349][T10504] device gretap1 entered promiscuous mode [ 435.393659][T10504] bond3: (slave gretap1): making interface the new active one [ 435.453805][T10504] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 435.462887][T10450] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.473942][T10450] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.482862][T10450] device bridge_slave_0 entered promiscuous mode [ 435.492057][T10450] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.499574][T10450] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.524987][T10450] device bridge_slave_1 entered promiscuous mode [ 435.566144][ T4234] Bluetooth: hci0: command 0x0409 tx timeout [ 435.619048][T10450] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 435.654415][T10450] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 435.780789][T10450] team0: Port device team_slave_0 added [ 435.853159][T10450] team0: Port device team_slave_1 added [ 435.896558][T10450] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 435.905915][T10450] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 435.994224][T10450] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 436.057931][T10450] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 436.099438][T10450] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 436.252002][T10450] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 437.824945][ T4234] Bluetooth: hci0: command 0x041b tx timeout [ 438.784785][T10555] netlink: zone id is out of range [ 438.794596][T10555] netlink: zone id is out of range [ 438.799869][T10555] netlink: zone id is out of range [ 438.810583][T10555] netlink: zone id is out of range [ 438.822319][T10555] netlink: zone id is out of range [ 438.837862][T10555] netlink: zone id is out of range [ 438.843372][T10555] netlink: zone id is out of range [ 438.853377][T10555] netlink: zone id is out of range [ 438.884684][T10555] netlink: zone id is out of range [ 438.907118][T10555] netlink: zone id is out of range [ 439.459644][T10565] cgroup2: Unexpected value for 'memory_localevents' [ 439.723875][T10450] device hsr_slave_0 entered promiscuous mode [ 439.767135][T10450] device hsr_slave_1 entered promiscuous mode [ 439.798822][T10450] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 439.850289][T10450] Cannot create hsr debugfs directory [ 440.156384][ T4234] Bluetooth: hci0: command 0x040f tx timeout [ 442.124778][ T5315] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 442.430668][ T4230] Bluetooth: hci0: command 0x0419 tx timeout [ 443.126261][ T5315] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 443.169397][ T5315] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 443.299684][ T5315] usb 8-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 443.308804][ T5315] usb 8-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 443.415027][ T5315] usb 8-1: Manufacturer: syz [ 443.858246][ T5315] usb 8-1: config 0 descriptor?? [ 443.971434][ T5315] usb 8-1: can't set config #0, error -71 [ 443.988547][ T5315] usb 8-1: USB disconnect, device number 8 [ 444.345360][T10450] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 444.533474][T10450] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 444.573813][T10450] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 444.597156][T10450] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 447.138620][T10450] 8021q: adding VLAN 0 to HW filter on device bond0 [ 447.205171][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 447.286538][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 447.552128][T10450] 8021q: adding VLAN 0 to HW filter on device team0 [ 448.264630][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 448.284371][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 448.311486][ T4388] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.318679][ T4388] bridge0: port 1(bridge_slave_0) entered forwarding state [ 448.382717][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 448.415841][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 448.444589][ T4388] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.451791][ T4388] bridge0: port 2(bridge_slave_1) entered forwarding state [ 448.518622][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 448.608553][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 448.642952][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 448.715371][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 448.753587][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 448.778397][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 448.864109][T10450] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 448.874593][T10450] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 448.901630][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 448.939834][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 449.127040][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 449.374527][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 449.798134][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 449.815072][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 449.898897][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 451.749890][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 451.778120][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 451.840415][T10450] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 452.347364][T10781] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 453.217852][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 453.262780][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 453.499175][T10797] device syzkaller0 entered promiscuous mode [ 454.347100][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 455.025180][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 455.110571][T10450] device veth0_vlan entered promiscuous mode [ 455.361777][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 455.375613][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 455.443338][T10450] device veth1_vlan entered promiscuous mode [ 456.307673][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 456.335743][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 456.359348][T10450] device veth0_macvtap entered promiscuous mode [ 456.377385][T10450] device veth1_macvtap entered promiscuous mode [ 456.470273][T10450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 456.502978][T10450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.594595][T10833] overlayfs: failed to clone upperpath [ 456.600289][T10450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 456.617902][T10450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.846605][T10450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 457.066704][T10450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 457.501151][ T1425] ieee802154 phy0 wpan0: encryption failed: -22 [ 457.507769][ T1425] ieee802154 phy1 wpan1: encryption failed: -22 [ 457.551613][T10450] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 457.789778][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 457.798133][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 457.811979][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 457.849719][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 457.911308][T10852] /dev/loop0: Can't open blockdev [ 457.921167][ T26] audit: type=1326 audit(3924196126.770:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10851 comm="syz.0.1593" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6e91665819 code=0x0 [ 459.303593][T10450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 459.328336][T10450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.343425][T10450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 460.184118][T10450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.200800][T10450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 460.229815][T10450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.280172][T10450] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 460.307875][T10450] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.335930][T10450] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.379577][T10450] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.404273][T10450] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.450961][ T5564] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 460.466934][ T5564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 460.541879][T10873] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000000 [ 461.176742][ T4390] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 461.269773][ T4390] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 461.480554][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 461.549363][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 461.604044][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 461.673794][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 462.995607][T10904] loop4: detected capacity change from 0 to 512 [ 463.057962][T10904] EXT4-fs (loop4): 1 truncate cleaned up [ 463.132922][T10904] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,jqfmt=vfsv1,noload,errors=remount-ro,usrjquota=,. Quota mode: none. [ 464.287365][T10927] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1611'. [ 464.802284][T10944] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1615'. [ 467.104198][T10973] loop4: detected capacity change from 0 to 4096 [ 467.189091][T10973] EXT4-fs (loop4): inline encryption not supported [ 467.196171][T10973] EXT4-fs (loop4): Test dummy encryption mode enabled [ 467.230619][T10973] EXT4-fs (loop4): Ignoring removed oldalloc option [ 467.289856][T10973] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 467.408210][T10973] System zones: 0-5 [ 467.444424][T10973] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,delalloc,inlinecrypt,test_dummy_encryption,i_version,oldalloc,delalloc,barrier,,errors=continue. Quota mode: writeback. [ 470.366457][T11027] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1631'. [ 471.617316][ T26] audit: type=1326 audit(3924196139.402:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11036 comm="syz.4.1635" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffa4c448819 code=0x0 [ 474.871100][T11053] device syzkaller0 entered promiscuous mode [ 476.148641][T11065] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000000 [ 478.577648][T11113] 9pnet: p9_errstr2errno: server reported unknown error aaaaaaaaa [ 478.800718][ T26] audit: type=1326 audit(3924196146.027:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11119 comm="syz.7.1656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a2351c819 code=0x7ffc0000 [ 478.901511][ T26] audit: type=1326 audit(3924196146.082:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11119 comm="syz.7.1656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a2351c819 code=0x7ffc0000 [ 479.034631][ T26] audit: type=1326 audit(3924196146.082:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11119 comm="syz.7.1656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a2351c819 code=0x7ffc0000 [ 479.214200][ T26] audit: type=1326 audit(3924196146.082:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11119 comm="syz.7.1656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f3a2351c819 code=0x7ffc0000 [ 479.322797][ T26] audit: type=1326 audit(3924196146.082:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11119 comm="syz.7.1656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a2351c819 code=0x7ffc0000 [ 479.421204][ T26] audit: type=1326 audit(3924196146.082:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11119 comm="syz.7.1656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a2351c819 code=0x7ffc0000 [ 480.516349][ T26] audit: type=1326 audit(3924196146.082:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11119 comm="syz.7.1656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a2351c819 code=0x7ffc0000 [ 481.594782][ T26] audit: type=1326 audit(3924196146.082:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11119 comm="syz.7.1656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a2351c819 code=0x7ffc0000 [ 481.858717][ T26] audit: type=1326 audit(3924196146.100:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11119 comm="syz.7.1656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f3a2351c819 code=0x7ffc0000 [ 482.418890][ T26] audit: type=1326 audit(3924196146.100:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11119 comm="syz.7.1656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3a2351c582 code=0x7ffc0000 [ 482.872764][T11162] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1664'. [ 484.686556][T11191] batman_adv: batadv0: Adding interface: dummy0 [ 484.699554][T11191] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 484.850924][T11191] batman_adv: batadv0: Interface activated: dummy0 [ 484.995189][T11200] net_ratelimit: 23 callbacks suppressed [ 484.995209][T11200] batadv0: mtu less than device minimum [ 485.049960][T11200] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 485.063487][T11200] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 485.076074][T11200] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 485.088731][T11200] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 485.101331][T11200] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 485.113928][T11200] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 485.126560][T11200] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 485.139258][T11200] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 485.151896][T11200] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 486.487923][T11213] netlink: 'syz.4.1676': attribute type 4 has an invalid length. [ 486.566464][T11215] netlink: 'syz.4.1676': attribute type 4 has an invalid length. [ 486.595120][T11217] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1677'. [ 492.349582][T11308] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1709'. [ 492.364917][T11308] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1709'. [ 492.375126][T11308] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1709'. [ 492.385562][T11308] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1709'. [ 492.395367][T11308] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1709'. [ 493.001335][ T5315] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 494.118187][ T5315] usb 5-1: Using ep0 maxpacket: 32 [ 494.247882][ T5315] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 494.357070][ T5315] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 494.378991][ T26] kauditd_printk_skb: 57 callbacks suppressed [ 494.379412][ T26] audit: type=1800 audit(3924196160.402:428): pid=11333 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1705" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 494.843897][ T5315] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 494.853052][ T5315] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.897774][ T5315] usb 5-1: Product: syz [ 494.902877][ T5315] usb 5-1: Manufacturer: syz [ 494.924046][ T5315] usb 5-1: SerialNumber: syz [ 495.010639][T11350] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1707'. [ 495.106538][ T5315] usb 5-1: config 0 descriptor?? [ 496.116922][ T5315] usb 5-1: USB disconnect, device number 2 [ 501.771584][T11412] loop4: detected capacity change from 0 to 1024 [ 501.895190][T11412] hfsplus: bad catalog entry type [ 502.195724][ T5564] hfsplus: b-tree write err: -5, ino 25 [ 502.201569][ T5564] hfsplus: b-tree write err: -5, ino 4 [ 502.234176][T11416] device ipip0 entered promiscuous mode [ 502.240990][ T5564] hfsplus: b-tree write err: -5, ino 2 [ 502.450970][T11430] overlayfs: failed to clone upperpath [ 504.022137][T11454] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 504.148137][T11459] loop4: detected capacity change from 0 to 2048 [ 505.413333][T11478] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 505.970175][T11499] xt_hashlimit: size too large, truncated to 1048576 [ 505.977682][T11499] xt_hashlimit: invalid rate [ 506.251546][T11512] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1747'. [ 511.559229][T11553] Invalid option length (57448) for dns_resolver key [ 512.681704][T11574] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 521.204188][T11662] net_ratelimit: 10 callbacks suppressed [ 521.204208][T11662] netlink: zone id is out of range [ 521.233703][T11662] netlink: zone id is out of range [ 521.238990][T11662] netlink: zone id is out of range [ 521.272124][T11662] netlink: zone id is out of range [ 521.286665][T11662] netlink: zone id is out of range [ 521.299180][T11662] netlink: zone id is out of range [ 521.307937][T11662] netlink: zone id is out of range [ 521.333965][T11662] netlink: zone id is out of range [ 521.346085][T11662] netlink: zone id is out of range [ 521.357073][T11662] netlink: zone id is out of range [ 522.461065][T11682] loop4: detected capacity change from 0 to 64 [ 522.664264][T11682] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing [ 522.735735][T11682] bfs filesystem being mounted at /36/bus supports timestamps until 2106-02-07 (0xffffffff) [ 524.115873][ T1425] ieee802154 phy0 wpan0: encryption failed: -22 [ 524.135861][ T1425] ieee802154 phy1 wpan1: encryption failed: -22 [ 525.063053][T11720] device syzkaller0 entered promiscuous mode [ 526.175564][T11740] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.279512][T11748] loop4: detected capacity change from 0 to 512 [ 526.291060][T11746] bridge0: port 1(bridge_slave_0) entered forwarding state [ 526.841518][T11748] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodioread_nolock,noquota,,errors=continue. Quota mode: writeback. [ 526.891278][ T5314] usb 7-1: new full-speed USB device number 14 using dummy_hcd [ 527.536485][T11748] ext4 filesystem being mounted at /39/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 528.719573][T11763] binder: BINDER_SET_CONTEXT_MGR already set [ 528.733321][T11763] binder: 11762:11763 ioctl 4018620d 200000000100 returned -16 [ 528.950293][ T5314] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 528.971865][ T5314] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 529.015105][ T5314] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 529.032144][ T5314] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.079055][ T5314] usb 7-1: config 0 descriptor?? [ 529.147335][ T5314] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 529.154065][ T5314] dvb-usb: bulk message failed: -22 (3/0) [ 529.201397][ T5314] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 529.314496][ T5314] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 529.352371][ T5314] usb 7-1: media controller created [ 529.377980][T11754] dvb-usb: bulk message failed: -22 (2/0) [ 529.450581][ T5314] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 529.550467][ T5314] dvb-usb: bulk message failed: -22 (6/0) [ 529.558402][ T5314] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 530.002689][ T5314] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input11 [ 530.054366][ T5314] dvb-usb: schedule remote query interval to 150 msecs. [ 530.065655][ T5314] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 530.120676][ T5314] usb 7-1: USB disconnect, device number 14 [ 530.240068][ T5314] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 530.648129][T11816] kvm: pic: non byte write [ 531.459198][ T9837] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 533.144270][ T9837] usb 8-1: Using ep0 maxpacket: 8 [ 533.157944][T11840] MPTCP: kernel_bind error, err=-99 [ 534.726683][ T9837] usb 8-1: string descriptor 0 read error: -71 [ 534.780961][ T9837] usb 8-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 534.816580][ T9837] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.923304][ T9837] usb 8-1: config 0 descriptor?? [ 534.954300][ T9837] usb 8-1: can't set config #0, error -71 [ 534.990824][ T9837] usb 8-1: USB disconnect, device number 9 [ 535.123857][T11858] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1826'. [ 535.141133][T11861] 9p filesystem being mounted at /465/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 535.447865][T11870] netlink: 'syz.7.1830': attribute type 10 has an invalid length. [ 535.644428][T11874] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1831'. [ 535.711610][T11881] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1834'. [ 535.745610][T11874] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1831'. [ 539.530738][T11934] SET target dimension over the limit! [ 540.993316][T11941] syz.6.1845 (11941) used greatest stack depth: 17560 bytes left [ 541.057983][T11947] netlink: 'syz.5.1846': attribute type 1 has an invalid length. [ 541.479723][T11947] device bond1 entered promiscuous mode [ 541.541926][T11947] 8021q: adding VLAN 0 to HW filter on device bond1 [ 541.695315][ T5314] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 542.638236][ T5314] usb 5-1: Using ep0 maxpacket: 8 [ 543.835647][ T26] audit: type=1326 audit(3924196206.021:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11970 comm="syz.6.1854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5905c31819 code=0x7ffc0000 [ 544.205570][ T5314] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 544.227508][ T5314] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 545.285455][ T5314] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.332291][ T5314] usb 5-1: config 0 descriptor?? [ 545.377013][ T26] audit: type=1326 audit(3924196206.021:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11970 comm="syz.6.1854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5905c31819 code=0x7ffc0000 [ 545.401152][ T5314] usb 5-1: can't set config #0, error -71 [ 545.776262][ T5314] usb 5-1: USB disconnect, device number 3 [ 545.842381][ T26] audit: type=1326 audit(3924196206.030:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11970 comm="syz.6.1854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5905c31819 code=0x7ffc0000 [ 545.865579][ T26] audit: type=1326 audit(3924196206.039:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11970 comm="syz.6.1854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5905c31819 code=0x7ffc0000 [ 545.922475][ T26] audit: type=1326 audit(3924196206.039:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11970 comm="syz.6.1854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f5905c31819 code=0x7ffc0000 [ 545.995771][ T26] audit: type=1326 audit(3924196206.039:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11970 comm="syz.6.1854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5905c31819 code=0x7ffc0000 [ 546.026827][T11997] tipc: Enabled bearer , priority 0 [ 546.090343][T11997] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1869'. [ 546.113546][T11997] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1869'. [ 546.124020][ T26] audit: type=1326 audit(3924196206.039:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11970 comm="syz.6.1854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5905c31819 code=0x7ffc0000 [ 546.365698][ T26] audit: type=1326 audit(3924196206.039:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11970 comm="syz.6.1854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5905bf204e code=0x7ffc0000 [ 546.954631][ T26] audit: type=1326 audit(3924196206.057:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11970 comm="syz.6.1854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5905bf204e code=0x7ffc0000 [ 547.326976][ T26] audit: type=1326 audit(3924196206.057:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11970 comm="syz.6.1854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5905bf204e code=0x7ffc0000 [ 547.372139][T12017] device bridge1 entered promiscuous mode [ 547.976919][T12017] team0: Port device bridge1 added [ 548.557029][T12020] bridge0: port 3(team0) entered blocking state [ 548.593858][T12020] bridge0: port 3(team0) entered disabled state [ 548.611612][T12020] device team0 entered promiscuous mode [ 548.617618][T12020] device team_slave_0 entered promiscuous mode [ 548.637002][T12020] device team_slave_1 entered promiscuous mode [ 549.401734][T12037] bridge0: port 4(vlan5) entered blocking state [ 549.445418][T12037] bridge0: port 4(vlan5) entered disabled state [ 549.520843][T12037] device vlan5 entered promiscuous mode [ 552.751706][T12074] tipc: Failed to remove unknown binding: 66,0,0/2130706433:3045757698/3045757700 [ 552.761222][T12074] tipc: Failed to remove unknown binding: 66,0,0/2130706433:3045757698/3045757699 [ 552.773914][T12074] tipc: Failed to remove unknown binding: 66,0,0/2130706433:3045757698/3045757700 [ 552.783438][T12074] tipc: Failed to remove unknown binding: 66,0,0/2130706433:3045757698/3045757699 [ 553.911322][T12071] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1876'. [ 556.222301][T12101] netlink: 'syz.4.1884': attribute type 10 has an invalid length. [ 556.502092][T12114] loop4: detected capacity change from 0 to 512 [ 559.484687][T12101] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 559.888056][T12134] tipc: Started in network mode [ 559.907936][T12134] tipc: Node identity 4, cluster identity 4711 [ 559.929856][T12134] tipc: Node number set to 4 [ 561.307512][T12163] MPTCP: kernel_bind error, err=-99 [ 562.432281][T12170] tipc: Enabling of bearer rejected, failed to enable media [ 563.541655][T12189] device ip6gre1 entered promiscuous mode [ 563.561747][ T26] kauditd_printk_skb: 46 callbacks suppressed [ 563.561765][ T26] audit: type=1800 audit(3924196224.235:485): pid=12192 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1903" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 563.594768][T12190] netlink: 'syz.6.1901': attribute type 10 has an invalid length. [ 564.393763][T12190] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 564.726386][ T26] audit: type=1326 audit(3924196225.314:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12205 comm="syz.4.1904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa4c448819 code=0x7ffc0000 [ 564.813411][ T26] audit: type=1326 audit(3924196225.342:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12205 comm="syz.4.1904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa4c448819 code=0x7ffc0000 [ 564.913254][ T26] audit: type=1326 audit(3924196225.342:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12205 comm="syz.4.1904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa4c448819 code=0x7ffc0000 [ 565.018471][ T26] audit: type=1326 audit(3924196225.342:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12205 comm="syz.4.1904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7ffa4c448819 code=0x7ffc0000 [ 565.105213][ T26] audit: type=1326 audit(3924196225.342:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12205 comm="syz.4.1904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa4c448819 code=0x7ffc0000 [ 565.188965][ T26] audit: type=1326 audit(3924196225.342:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12205 comm="syz.4.1904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa4c448819 code=0x7ffc0000 [ 565.311690][ T26] audit: type=1326 audit(3924196225.342:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12205 comm="syz.4.1904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa4c448819 code=0x7ffc0000 [ 565.412367][ T26] audit: type=1326 audit(3924196225.342:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12205 comm="syz.4.1904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa4c448819 code=0x7ffc0000 [ 565.443121][ T26] audit: type=1326 audit(3924196225.342:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12205 comm="syz.4.1904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7ffa4c448819 code=0x7ffc0000 [ 566.217947][T12236] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 566.383942][T12236] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 567.966744][T12272] netlink: 'syz.5.1919': attribute type 10 has an invalid length. [ 573.745035][ T5314] Bluetooth: hci0: command 0x0406 tx timeout [ 577.578114][ T26] kauditd_printk_skb: 65 callbacks suppressed [ 577.578132][ T26] audit: type=1326 audit(3924196236.626:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12325 comm="syz.7.1932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a2351c819 code=0x7ffc0000 [ 577.641028][ T26] audit: type=1326 audit(3924196236.626:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12325 comm="syz.7.1932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a2351c819 code=0x7ffc0000 [ 577.663828][ T26] audit: type=1326 audit(3924196237.171:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12325 comm="syz.7.1932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f3a2351c819 code=0x7ffc0000 [ 577.703632][ T26] audit: type=1326 audit(3924196237.171:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12325 comm="syz.7.1932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a2351c819 code=0x7ffc0000 [ 577.749436][ T26] audit: type=1326 audit(3924196237.171:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12325 comm="syz.7.1932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a2351c819 code=0x7ffc0000 [ 577.821629][ T5932] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.853853][ T26] audit: type=1326 audit(3924196237.171:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12325 comm="syz.7.1932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a2351c819 code=0x7ffc0000 [ 577.892641][ T26] audit: type=1326 audit(3924196237.171:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12325 comm="syz.7.1932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a2351c819 code=0x7ffc0000 [ 577.985754][ T26] audit: type=1326 audit(3924196237.217:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12325 comm="syz.7.1932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a2351c819 code=0x7ffc0000 [ 578.061305][ T26] audit: type=1326 audit(3924196237.217:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12325 comm="syz.7.1932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a2351c819 code=0x7ffc0000 [ 578.107130][ T5932] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.112104][ T26] audit: type=1326 audit(3924196237.217:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12325 comm="syz.7.1932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a2351c819 code=0x7ffc0000 [ 578.245543][T12348] netlink: 'syz.0.1935': attribute type 10 has an invalid length. [ 578.264447][T12348] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 578.318327][ T5932] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.687575][ T5932] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.812947][T12372] gfs2: gfs2 mount does not exist [ 579.974402][T12378] netlink: 'syz.5.1948': attribute type 33 has an invalid length. [ 579.982945][T12378] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1948'. [ 582.846187][ T4232] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 582.940856][T12406] loop4: detected capacity change from 0 to 1024 [ 583.289349][T12406] hfsplus: unable to parse mount options [ 584.190283][ T4232] usb 7-1: string descriptor 0 read error: -71 [ 584.201033][ T4232] usb 7-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 584.270299][ T4232] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.468819][T12433] gfs2: gfs2 mount does not exist [ 585.440039][ T4232] usb 7-1: can't set config #1, error -71 [ 585.448043][ T4232] usb 7-1: USB disconnect, device number 15 [ 588.050346][T12467] device syzkaller0 entered promiscuous mode [ 588.269346][T12487] device syzkaller0 entered promiscuous mode [ 590.681026][ T1425] ieee802154 phy0 wpan0: encryption failed: -22 [ 590.689423][ T1425] ieee802154 phy1 wpan1: encryption failed: -22 [ 591.260094][ T5932] device hsr_slave_0 left promiscuous mode [ 591.567885][ T5932] device hsr_slave_1 left promiscuous mode [ 591.739913][ T5932] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 591.940223][ T5932] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 592.004548][ T5932] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 592.012306][ T5932] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 592.106201][ T5932] device bridge_slave_1 left promiscuous mode [ 592.119553][ T5932] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.580436][ T5932] device bridge_slave_0 left promiscuous mode [ 592.647771][ T5932] bridge0: port 1(bridge_slave_0) entered disabled state [ 593.133031][ T5932] device dummy0 left promiscuous mode [ 593.175154][ T5932] device veth1_macvtap left promiscuous mode [ 593.181353][ T5932] device veth0_macvtap left promiscuous mode [ 593.209739][ T5932] device veth1_vlan left promiscuous mode [ 593.222861][ T5932] device veth0_vlan left promiscuous mode [ 593.936345][ T5932] team0 (unregistering): Port device team_slave_1 removed [ 593.981244][ T5932] team0 (unregistering): Port device team_slave_0 removed [ 594.024348][ T5932] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 594.066955][ T5932] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 594.241863][ T5932] bond0 (unregistering): Released all slaves [ 600.042024][T12623] loop4: detected capacity change from 0 to 256 [ 600.102782][T12623] exfat: Deprecated parameter 'namecase' [ 600.108553][T12623] exfat: Deprecated parameter 'namecase' [ 600.378398][T12623] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 600.711691][T12623] exfat filesystem being mounted at /77/éq‰Y’3aK supports timestamps until 2107-12-31 (0x10391447f) [ 603.820414][T12666] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2014'. [ 604.786961][T12674] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2016'. [ 604.856875][T12682] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2016'. [ 607.955802][ T4234] Bluetooth: hci5: command 0x0409 tx timeout [ 608.260521][T12700] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2024'. [ 608.385181][T12700] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2024'. [ 608.597857][T12708] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2026'. [ 609.060230][T12709] bridge2: port 1(erspan0) entered blocking state [ 609.378049][T12709] bridge2: port 1(erspan0) entered disabled state [ 609.486093][T12709] device erspan0 entered promiscuous mode [ 609.493113][T12709] bridge2: port 1(erspan0) entered blocking state [ 609.499663][T12709] bridge2: port 1(erspan0) entered forwarding state [ 609.567146][T12718] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 610.128215][T12742] binder_alloc: 12741: binder_alloc_buf, no vma [ 610.203604][ T5314] Bluetooth: hci5: command 0x041b tx timeout [ 612.161837][T12734] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.169433][T12734] bridge0: port 1(bridge_slave_0) entered disabled state [ 612.433482][ T5314] Bluetooth: hci5: command 0x040f tx timeout [ 614.076362][T12734] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 614.131508][T12734] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 614.631516][T12734] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.640930][T12734] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.650197][T12734] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.659180][T12734] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.693799][ T4234] Bluetooth: hci5: command 0x0419 tx timeout [ 614.833766][T12675] chnl_net:caif_netlink_parms(): no params data found [ 615.047802][T12791] device syzkaller0 entered promiscuous mode [ 615.307526][T12675] bridge0: port 1(bridge_slave_0) entered blocking state [ 615.368238][T12675] bridge0: port 1(bridge_slave_0) entered disabled state [ 615.413034][T12675] device bridge_slave_0 entered promiscuous mode [ 615.449292][T12675] bridge0: port 2(bridge_slave_1) entered blocking state [ 615.489525][T12675] bridge0: port 2(bridge_slave_1) entered disabled state [ 615.503731][T12675] device bridge_slave_1 entered promiscuous mode [ 615.689839][T12675] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 615.747529][T12675] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 616.724329][T12675] team0: Port device team_slave_0 added [ 616.792958][T12675] team0: Port device team_slave_1 added [ 617.224104][T12675] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 617.231292][T12675] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 619.083662][T12675] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 619.652264][T12675] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 619.659307][T12675] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 619.737981][T12675] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 619.786412][T12850] device syzkaller0 left promiscuous mode [ 619.909038][T12675] device hsr_slave_0 entered promiscuous mode [ 619.927242][T12675] device hsr_slave_1 entered promiscuous mode [ 619.949079][T12675] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 619.968242][T12675] Cannot create hsr debugfs directory [ 623.620427][T12881] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2064'. [ 625.110715][T12899] atomic_op ffff88807ceb8198 conn xmit_atomic 0000000000000000 [ 625.968281][T12905] device vlan2 entered promiscuous mode [ 627.932376][T12925] overlayfs: failed to resolve './file0': -2 [ 628.188823][T12675] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 628.229668][T12675] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 628.291598][T12675] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 629.275474][T12675] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 629.759428][T12675] 8021q: adding VLAN 0 to HW filter on device bond0 [ 629.884507][T12675] 8021q: adding VLAN 0 to HW filter on device team0 [ 630.353219][T12675] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 630.738186][T12675] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 630.804671][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 630.814694][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 630.837880][T12957] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 630.868952][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 630.890114][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 630.964413][ T4388] bridge0: port 1(bridge_slave_0) entered blocking state [ 630.971601][ T4388] bridge0: port 1(bridge_slave_0) entered forwarding state [ 630.991559][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 631.064394][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 631.082016][ T4388] bridge0: port 2(bridge_slave_1) entered blocking state [ 631.089199][ T4388] bridge0: port 2(bridge_slave_1) entered forwarding state [ 631.526973][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 631.830769][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 631.942984][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 631.977370][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 632.117763][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 632.159286][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 632.190930][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 632.216538][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 632.248905][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 632.267171][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 632.311833][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 632.339615][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 632.383692][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 632.405685][T12981] loop4: detected capacity change from 0 to 16 [ 632.505035][T12981] erofs: (device loop4): mounted with root inode @ nid 36. [ 633.458265][ T7959] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 633.539252][ T7959] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 633.928463][T12675] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 634.143169][T12675] device veth0_vlan entered promiscuous mode [ 634.222105][T12675] device veth1_vlan entered promiscuous mode [ 634.252990][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 634.275491][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 634.433594][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 634.459471][ T4232] Bluetooth: hci2: command 0x0409 tx timeout [ 634.677096][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 634.896321][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 635.551105][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 635.623319][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 635.681516][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 636.078139][T12675] device veth0_macvtap entered promiscuous mode [ 636.135971][ T7963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 636.168423][ T7963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 636.193138][ T7963] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 636.720959][ T1338] Bluetooth: hci2: command 0x041b tx timeout [ 636.746724][T12675] device veth1_macvtap entered promiscuous mode [ 636.794715][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 636.898485][T12675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 636.984785][T12675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 637.015411][T12675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 637.034702][T12675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 637.077928][T12675] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 637.115781][T12978] chnl_net:caif_netlink_parms(): no params data found [ 637.136393][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 637.157352][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 637.199448][T12675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 637.245562][T12675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 637.277797][T12675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 637.326031][T12675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 637.337494][T12675] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 637.395940][T12675] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.417968][T12675] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.453920][T12675] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.612332][T12675] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.802902][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 637.869280][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 638.504533][ T5932] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.606762][T13073] netlink: 'syz.5.2103': attribute type 10 has an invalid length. [ 638.696748][ T5932] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.756188][T12978] bridge0: port 1(bridge_slave_0) entered blocking state [ 638.782009][T12978] bridge0: port 1(bridge_slave_0) entered disabled state [ 638.824505][T12978] device bridge_slave_0 entered promiscuous mode [ 638.867098][ T5932] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.948530][T12978] bridge0: port 2(bridge_slave_1) entered blocking state [ 638.963429][T12978] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.971398][ T4232] Bluetooth: hci2: command 0x040f tx timeout [ 639.002787][T13094] mmap: syz.7.2107 (13094): VmData 175874048 exceed data ulimit 9. Update limits or use boot option ignore_rlimit_data. [ 639.022845][T12978] device bridge_slave_1 entered promiscuous mode [ 639.062218][ T7959] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 639.070242][ T7959] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 639.080337][ T5932] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.122582][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 639.162408][T12978] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 639.200741][T12978] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 639.292533][ T7959] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 639.321682][ T7959] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 639.349885][T12978] team0: Port device team_slave_0 added [ 639.384711][T12978] team0: Port device team_slave_1 added [ 639.435298][ T7959] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 639.588544][T12978] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 639.604787][T12978] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 639.648693][T12978] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 639.672299][T12978] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 639.687961][T12978] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 639.719602][T13123] loop2: detected capacity change from 0 to 256 [ 639.751631][T12978] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 639.778659][T13123] FAT-fs (loop2): Unrecognized mount option "smackfsroot=shortname=mixed" or missing value [ 639.885691][T12978] device hsr_slave_0 entered promiscuous mode [ 639.927924][T12978] device hsr_slave_1 entered promiscuous mode [ 639.951456][T12978] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 639.982133][T12978] Cannot create hsr debugfs directory [ 640.039522][ T5932] team0: Port device netdevsim0 removed [ 640.091252][T13130] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2112'. [ 640.201538][T13135] 8021q: adding VLAN 0 to HW filter on device bond0 [ 641.292589][ T4193] Bluetooth: hci2: command 0x0419 tx timeout [ 643.179735][ T5932] tipc: Left network mode [ 643.286584][ T5932] tipc: Disabling bearer [ 643.295903][ T5932] tipc: Disabling bearer [ 643.314760][ T5932] tipc: Left network mode [ 643.392548][T13184] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 644.292653][T13195] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 644.314131][T13195] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 644.491479][ T5932] bond2: (slave ip6gretap1): Releasing active interface [ 644.571986][ T5932] bond1: (slave ip6gretap1): Releasing active interface [ 644.859203][T13207] Invalid ELF header magic: != ELF [ 645.455832][ T5932] bond3: (slave gretap1): Releasing active interface [ 645.523974][ T5932] bond3: (slave gretap1): Releasing active interface [ 645.554525][ T4231] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 645.799078][T12978] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 645.824644][ T4231] usb 8-1: Using ep0 maxpacket: 8 [ 645.833784][T12978] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 645.870606][ T5932] bond0: (slave wlan1): Releasing backup interface [ 645.898228][T12978] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 645.937160][T12978] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 645.969594][ T4231] usb 8-1: config 0 has no interfaces? [ 646.155456][T12978] 8021q: adding VLAN 0 to HW filter on device bond0 [ 647.014344][ T4231] usb 8-1: New USB device found, idVendor=12ee, idProduct=fae2, bcdDevice=70.8b [ 647.032512][ T4231] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.041018][ T4231] usb 8-1: Product: syz [ 647.045231][ T4231] usb 8-1: Manufacturer: syz [ 647.062065][ T4231] usb 8-1: config 0 descriptor?? [ 647.081603][ T4231] usb 8-1: can't set config #0, error -71 [ 647.098794][ T4231] usb 8-1: USB disconnect, device number 10 [ 648.105308][ T5932] bond0: (slave wlan1): Releasing backup interface [ 648.851655][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 648.865176][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 648.875893][T13251] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2138'. [ 648.896344][T13251] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2138'. [ 648.918161][T13251] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2138'. [ 648.940100][T13251] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2138'. [ 648.970034][T13251] netlink: 'syz.5.2138': attribute type 6 has an invalid length. [ 648.992355][T12978] 8021q: adding VLAN 0 to HW filter on device team0 [ 649.037019][ T7959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 649.061024][ T7959] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 649.183085][ T7959] bridge0: port 1(bridge_slave_0) entered blocking state [ 649.190690][ T7959] bridge0: port 1(bridge_slave_0) entered forwarding state [ 649.301573][T13258] MPTCP: kernel_bind error, err=-99 [ 649.350260][T12978] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 649.485722][T12978] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 649.700423][ T7959] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 649.710794][ T7959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 649.721029][ T7959] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 649.735154][ T7959] bridge0: port 2(bridge_slave_1) entered blocking state [ 649.742632][ T7959] bridge0: port 2(bridge_slave_1) entered forwarding state [ 649.751719][ T7959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 649.770568][ T7959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 651.315902][ T7959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 651.326566][ T7959] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 651.391950][ T7959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 651.447542][ T7959] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 651.497020][ T7959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 651.540718][ T7959] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 651.549840][ T7959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 651.558641][ T7959] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 651.580472][T13278] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 651.616324][ T7959] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 651.648082][ T7959] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 651.685642][ T26] kauditd_printk_skb: 64 callbacks suppressed [ 651.685659][ T26] audit: type=1326 audit(3924196305.552:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13277 comm="syz.4.2146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa4c448819 code=0x7ffc0000 [ 651.790172][ T26] audit: type=1326 audit(3924196305.552:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13277 comm="syz.4.2146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa4c448819 code=0x7ffc0000 [ 651.926700][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 651.934410][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 651.942390][ T26] audit: type=1326 audit(3924196305.598:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13277 comm="syz.4.2146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7ffa4c448819 code=0x7ffc0000 [ 652.014812][ T26] audit: type=1326 audit(3924196305.598:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13277 comm="syz.4.2146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa4c448819 code=0x7ffc0000 [ 652.141518][T12978] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 652.154819][ T26] audit: type=1326 audit(3924196305.598:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13277 comm="syz.4.2146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa4c448819 code=0x7ffc0000 [ 652.197474][ T26] audit: type=1326 audit(3924196305.608:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13277 comm="syz.4.2146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ffa4c448819 code=0x7ffc0000 [ 653.189616][ T26] audit: type=1326 audit(3924196305.608:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13277 comm="syz.4.2146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa4c448819 code=0x7ffc0000 [ 653.242974][T13293] device syzkaller0 entered promiscuous mode [ 653.268404][ T26] audit: type=1326 audit(3924196305.608:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13277 comm="syz.4.2146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa4c448819 code=0x7ffc0000 [ 653.303049][ T7959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 653.311966][ T7959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 653.540503][T13307] bridge0: port 3(hsr0) entered blocking state [ 653.558058][T13307] bridge0: port 3(hsr0) entered disabled state [ 653.813830][T13307] device hsr0 entered promiscuous mode [ 654.277954][ T5932] device hsr_slave_0 left promiscuous mode [ 654.300424][ T5932] device hsr_slave_1 left promiscuous mode [ 654.330103][ T5932] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 654.353915][ T5932] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 654.375740][ T5932] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 654.383466][ T5932] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 654.393399][ T5932] device bridge_slave_1 left promiscuous mode [ 654.404811][ T5932] bridge0: port 2(bridge_slave_1) entered disabled state [ 654.419784][ T5932] device bridge_slave_0 left promiscuous mode [ 654.426040][ T5932] bridge0: port 1(bridge_slave_0) entered disabled state [ 654.445695][ T5932] device hsr_slave_0 left promiscuous mode [ 654.455522][ T5932] device hsr_slave_1 left promiscuous mode [ 654.480588][ T5932] batman_adv: batadv0: Interface deactivated: dummy0 [ 654.490715][ T5932] batman_adv: batadv0: Removing interface: dummy0 [ 654.514582][ T5932] device bridge_slave_1 left promiscuous mode [ 654.521186][ T5932] bridge0: port 2(bridge_slave_1) entered disabled state [ 654.531267][ T5932] device bridge_slave_0 left promiscuous mode [ 654.548003][ T5932] bridge0: port 1(bridge_slave_0) entered disabled state [ 654.598585][ T5932] device veth1_macvtap left promiscuous mode [ 654.607468][ T5932] device veth0_macvtap left promiscuous mode [ 654.614351][ T5932] device veth1_vlan left promiscuous mode [ 654.620185][ T5932] device veth0_vlan left promiscuous mode [ 654.957209][ T5932] bond3 (unregistering): Released all slaves [ 654.978336][ T5932] bond2 (unregistering): Released all slaves [ 655.027019][ T5932] bond1 (unregistering): Released all slaves [ 655.857544][ T5932] team0 (unregistering): Port device team_slave_1 removed [ 656.008874][ T5932] team0 (unregistering): Port device team_slave_0 removed [ 656.104474][ T5932] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 656.126447][ T5932] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 656.233013][ T5932] bond0 (unregistering): Released all slaves [ 657.274453][ T1425] ieee802154 phy0 wpan0: encryption failed: -22 [ 657.282838][ T1425] ieee802154 phy1 wpan1: encryption failed: -22 [ 657.454403][ C0] EXT4-fs (loop7): last error at time 3489660928: ext4_validate_block_bitmap:301989632: inode 786197: block 15984629 [ 657.562630][ T5932] bond3 (unregistering): Released all slaves [ 657.673720][T13348] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 657.822094][T13350] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 657.891539][ T5932] bond2 (unregistering): Released all slaves [ 657.905059][ T5932] bond1 (unregistering): Released all slaves [ 657.916963][T13350] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 657.943879][T13350] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 658.727948][ T5932] team0 (unregistering): Port device team_slave_1 removed [ 658.747726][ T5932] team0 (unregistering): Port device team_slave_0 removed [ 658.764465][ T5932] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 658.783234][ T5932] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 658.868642][ T5932] bond0 (unregistering): Released all slaves [ 658.952080][T12978] device veth0_vlan entered promiscuous mode [ 658.969103][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 659.000466][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 659.032831][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 659.053648][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 659.115899][T12978] device veth1_vlan entered promiscuous mode [ 659.274097][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 659.282865][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 659.358836][T12978] device veth0_macvtap entered promiscuous mode [ 659.643283][T12978] device veth1_macvtap entered promiscuous mode [ 660.349057][T12978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 660.391698][T12978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 660.441152][T12978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 660.453339][T12978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.040746][T12978] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 661.100080][T12978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 661.183992][T12978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.220190][T12978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 661.253179][T12978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.284745][T12978] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 661.295614][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 661.304659][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 661.312990][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 661.321802][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 661.335370][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 661.344763][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 661.373858][T12978] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.384233][T12978] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.393080][T12978] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.403749][T12978] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.632243][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 661.637965][ T1338] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 661.659742][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 661.677415][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 661.704974][ T1238] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 661.726534][ T1238] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 661.746491][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 661.927858][ T1338] usb 8-1: Using ep0 maxpacket: 16 [ 662.092136][ T1338] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 662.933281][ T1338] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 663.052574][ T1338] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 663.066376][ T1338] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 663.076177][ T1338] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.086960][ T1338] usb 8-1: config 0 descriptor?? [ 664.725911][ T1338] usbhid 8-1:0.0: can't add hid device: -71 [ 664.749777][ T1338] usbhid: probe of 8-1:0.0 failed with error -71 [ 664.789550][ T1338] usb 8-1: USB disconnect, device number 11 [ 666.084101][T13408] loop2: detected capacity change from 0 to 512 [ 666.357212][T13408] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 666.437904][T13408] ext4 filesystem being mounted at /17/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 669.363985][T13456] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2195'. [ 669.933006][T13462] device erspan0 left promiscuous mode [ 669.954816][T13462] bridge2: port 1(erspan0) entered disabled state [ 670.039403][T13462] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 670.099556][T13462] device team0 left promiscuous mode [ 670.204003][T13462] device team_slave_0 left promiscuous mode [ 670.220521][T13462] device team_slave_1 left promiscuous mode [ 670.226875][T13462] bridge0: port 3(team0) entered disabled state [ 671.735716][T13462] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 671.784517][T13462] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 671.859529][T13462] bridge0: port 1(bridge_slave_0) entered disabled state [ 671.956336][T13462] device bridge_slave_1 left promiscuous mode [ 671.974160][T13462] bridge0: port 2(bridge_slave_1) entered disabled state [ 672.059279][T13462] bond0: (slave bond_slave_0): Releasing backup interface [ 672.081157][T13462] device bond_slave_0 left promiscuous mode [ 672.167440][T13462] rdma_rxe: ignoring netdev event = 27 for bond_slave_1 [ 672.230429][T13462] rdma_rxe: ignoring netdev event = 26 for bond_slave_1 [ 672.267234][T13462] rdma_rxe: ignoring netdev event = 21 for bond_slave_1 [ 672.303572][T13462] bond0: (slave bond_slave_1): Releasing backup interface [ 672.354034][T13462] device bond_slave_1 left promiscuous mode [ 672.381997][T13462] rdma_rxe: ignoring netdev event = 10 for bond_slave_1 [ 672.427501][T13462] infiniband syz2: set down [ 672.462557][T13462] rdma_rxe: ignoring netdev event = 9 for bond_slave_1 [ 672.502142][T13462] rdma_rxe: ignoring netdev event = 8 for bond_slave_1 [ 672.771621][T13462] team0: Port device team_slave_0 removed [ 672.836851][T13462] team0: Port device team_slave_1 removed [ 672.876609][T13462] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 672.884237][T13462] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 672.926616][T13462] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 672.981305][T13462] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 673.055106][T13462] bond0: (slave wlan1): Releasing backup interface [ 673.100683][T13462] bond2: (slave gretap2): Releasing active interface [ 673.199269][T13462] bond3: (slave macvlan2): Releasing active interface [ 673.263221][T13462] bond4: (slave geneve2): Releasing active interface [ 673.328879][T13462] team0: Port device bridge1 removed [ 673.355373][T13462] device vlan5 left promiscuous mode [ 673.370370][T13462] device bridge_slave_0 left promiscuous mode [ 673.392141][T13462] bridge0: port 4(vlan5) entered disabled state [ 673.450247][T13463] team0: Mode changed to "loadbalance" [ 673.470371][T13464] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2196'. [ 673.648773][T13507] bridge0: port 3(hsr0) entered blocking state [ 673.655232][T13507] bridge0: port 3(hsr0) entered disabled state [ 673.678746][T13507] device hsr0 entered promiscuous mode [ 673.706940][T13507] bridge0: port 3(hsr0) entered blocking state [ 673.713259][T13507] bridge0: port 3(hsr0) entered forwarding state [ 675.022833][ T1338] Bluetooth: hci4: command 0x0409 tx timeout [ 677.051880][T13549] device syzkaller0 entered promiscuous mode [ 677.291286][ T4232] Bluetooth: hci4: command 0x041b tx timeout [ 677.661349][T13488] chnl_net:caif_netlink_parms(): no params data found [ 678.970435][T13582] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2217'. [ 679.082604][T13488] bridge0: port 1(bridge_slave_0) entered blocking state [ 679.098865][T13488] bridge0: port 1(bridge_slave_0) entered disabled state [ 679.114119][T13488] device bridge_slave_0 entered promiscuous mode [ 679.123563][T13488] bridge0: port 2(bridge_slave_1) entered blocking state [ 679.130823][T13488] bridge0: port 2(bridge_slave_1) entered disabled state [ 679.139289][T13488] device bridge_slave_1 entered promiscuous mode [ 679.238676][T13488] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 679.297820][T13488] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 679.398482][T13488] team0: Port device team_slave_0 added [ 679.426519][T13488] team0: Port device team_slave_1 added [ 679.525469][T13488] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 679.536970][T13488] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 679.563543][ T4232] Bluetooth: hci4: command 0x040f tx timeout [ 679.607411][T13488] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 680.655568][T13488] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 680.665621][T13488] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 680.844155][T13488] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 680.911504][ T4388] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 681.093022][T13488] device hsr_slave_0 entered promiscuous mode [ 681.147925][T13488] device hsr_slave_1 entered promiscuous mode [ 681.178674][T13488] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 681.186501][T13488] Cannot create hsr debugfs directory [ 681.305130][ T4388] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 682.044275][T13630] netlink: 277 bytes leftover after parsing attributes in process `syz.3.2226'. [ 682.537630][ T1338] Bluetooth: hci4: command 0x0419 tx timeout [ 682.935118][ T4388] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 684.555098][ T4388] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 685.502328][T13648] device lo entered promiscuous mode [ 685.508247][T13648] device tunl0 entered promiscuous mode [ 685.515052][T13648] device gre0 entered promiscuous mode [ 685.521244][T13648] device gretap0 entered promiscuous mode [ 685.527839][T13648] device erspan0 entered promiscuous mode [ 685.534325][T13648] device ip_vti0 entered promiscuous mode [ 685.541150][T13648] device ip6_vti0 entered promiscuous mode [ 685.547924][T13648] device sit0 entered promiscuous mode [ 685.553996][T13648] device ip6tnl0 entered promiscuous mode [ 685.560393][T13648] device ip6gre0 entered promiscuous mode [ 685.567021][T13648] device ip6gretap0 entered promiscuous mode [ 685.573917][T13648] device bridge0 entered promiscuous mode [ 685.579830][T13648] device vcan0 entered promiscuous mode [ 685.585817][T13648] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 685.593287][T13648] device bond0 entered promiscuous mode [ 685.600164][T13648] device dummy0 entered promiscuous mode [ 685.606671][T13648] device nlmon0 entered promiscuous mode [ 685.613142][T13648] device caif0 entered promiscuous mode [ 685.618840][T13648] device batadv0 entered promiscuous mode [ 685.625453][T13648] device vxcan0 entered promiscuous mode [ 685.631287][T13648] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 685.638830][T13648] device vxcan1 entered promiscuous mode [ 685.644673][T13648] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 685.652185][T13648] device veth0 entered promiscuous mode [ 685.658549][T13648] device veth1 entered promiscuous mode [ 685.665318][T13648] device wg0 entered promiscuous mode [ 685.671360][T13648] device wg1 entered promiscuous mode [ 685.677503][T13648] device wg2 entered promiscuous mode [ 685.683565][T13648] device veth0_to_bridge entered promiscuous mode [ 685.690960][T13648] device bridge_slave_0 entered promiscuous mode [ 685.698540][T13648] device veth1_to_bridge entered promiscuous mode [ 685.705111][T13648] device bridge_slave_1 entered promiscuous mode [ 685.712472][T13648] device veth0_to_bond entered promiscuous mode [ 685.719623][T13648] device bond_slave_0 entered promiscuous mode [ 685.725977][T13648] device veth1_to_bond entered promiscuous mode [ 685.733341][T13648] device bond_slave_1 entered promiscuous mode [ 685.739756][T13648] device veth0_to_team entered promiscuous mode [ 685.746167][T13648] device team_slave_0 entered promiscuous mode [ 685.752525][T13648] device veth1_to_team entered promiscuous mode [ 685.759883][T13648] device team_slave_1 entered promiscuous mode [ 685.766236][T13648] device veth0_to_batadv entered promiscuous mode [ 685.773690][T13648] device batadv_slave_0 entered promiscuous mode [ 685.780689][T13648] device veth1_to_batadv entered promiscuous mode [ 685.787788][T13648] device batadv_slave_1 entered promiscuous mode [ 685.795276][T13648] device xfrm0 entered promiscuous mode [ 685.801570][T13648] device veth0_to_hsr entered promiscuous mode [ 685.809075][T13648] device veth1_to_hsr entered promiscuous mode [ 685.816355][T13648] device hsr0 entered promiscuous mode [ 685.822585][T13648] device veth1_virt_wifi entered promiscuous mode [ 685.829734][T13648] device veth0_virt_wifi entered promiscuous mode [ 685.836830][T13648] device virt_wifi0 entered promiscuous mode [ 685.844041][T13648] device vlan0 entered promiscuous mode [ 685.850681][T13648] device vlan1 entered promiscuous mode [ 685.856881][T13648] device macvlan0 entered promiscuous mode [ 685.863377][T13648] device macvlan1 entered promiscuous mode [ 685.869980][T13648] device ipvlan0 entered promiscuous mode [ 685.875860][T13648] device ipvlan1 entered promiscuous mode [ 685.882833][T13648] device macvtap0 entered promiscuous mode [ 685.889360][T13648] device macsec0 entered promiscuous mode [ 685.895815][T13648] device geneve0 entered promiscuous mode [ 685.902077][T13648] device geneve1 entered promiscuous mode [ 685.908490][T13648] device netdevsim0 entered promiscuous mode [ 685.915148][T13648] device netdevsim1 entered promiscuous mode [ 685.921657][T13648] device netdevsim2 entered promiscuous mode [ 685.928303][T13648] device netdevsim3 entered promiscuous mode [ 685.936647][T13648] device wlan0 entered promiscuous mode [ 685.942977][T13648] device veth2 entered promiscuous mode [ 685.948737][T13648] device veth3 entered promiscuous mode [ 685.954461][T13648] device gretap1 entered promiscuous mode [ 685.961006][T13648] device vlan2 entered promiscuous mode [ 685.967863][T13648] device bond1 entered promiscuous mode [ 685.974498][T13648] device bond2 entered promiscuous mode [ 685.981218][T13648] device vlan3 entered promiscuous mode [ 685.987012][T13648] device gretap2 entered promiscuous mode [ 685.992969][T13648] device bond3 entered promiscuous mode [ 685.999788][T13648] device macvlan2 entered promiscuous mode [ 686.005827][T13648] device syzkaller0 entered promiscuous mode [ 686.012502][T13648] device batadv1 entered promiscuous mode [ 686.018468][T13648] device syztnl0 entered promiscuous mode [ 686.024890][T13648] device bond4 entered promiscuous mode [ 686.031607][T13648] device vlan4 entered promiscuous mode [ 686.037563][T13648] device geneve2 entered promiscuous mode [ 686.043696][T13648] device veth4 entered promiscuous mode [ 686.049398][T13648] device veth5 entered promiscuous mode [ 686.055250][T13648] device gre1 entered promiscuous mode [ 686.062353][T13648] device gtp0 entered promiscuous mode [ 686.068010][T13648] device bond6 entered promiscuous mode [ 686.073728][T13648] device veth6 entered promiscuous mode [ 686.079448][T13648] device veth7 entered promiscuous mode [ 686.085129][T13648] device vlan5 entered promiscuous mode [ 686.091018][T13648] device sit1 entered promiscuous mode [ 686.097344][T13648] device bridge2 entered promiscuous mode [ 686.104059][T13648] device ip6erspan0 entered promiscuous mode [ 688.818695][T13679] kvm [13678]: vcpu128, guest rIP: 0xfff0 Hyper-V unhandled rdmsr: 0x40000076 [ 689.119270][ T4388] tipc: Left network mode [ 689.823634][T13692] hub 8-0:1.0: USB hub found [ 689.833523][T13692] hub 8-0:1.0: 1 port detected [ 693.566370][ T26] audit: type=1326 audit(3924196344.195:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13714 comm="syz.3.2245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff36bc6a819 code=0x7ffc0000 [ 693.662202][ T26] audit: type=1326 audit(3924196344.195:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13714 comm="syz.3.2245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff36bc6a819 code=0x7ffc0000 [ 693.748487][ T26] audit: type=1326 audit(3924196344.195:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13714 comm="syz.3.2245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7ff36bc6a819 code=0x7ffc0000 [ 694.832761][ T26] audit: type=1326 audit(3924196344.195:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13714 comm="syz.3.2245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff36bc6a819 code=0x7ffc0000 [ 694.865278][ T26] audit: type=1326 audit(3924196344.195:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13714 comm="syz.3.2245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff36bc6a819 code=0x7ffc0000 [ 694.968864][ T26] audit: type=1326 audit(3924196344.195:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13714 comm="syz.3.2245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7ff36bc6a819 code=0x7ffc0000 [ 695.230175][ T26] audit: type=1326 audit(3924196344.195:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13714 comm="syz.3.2245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff36bc6a819 code=0x7ffc0000 [ 695.323429][ T26] audit: type=1326 audit(3924196344.195:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13714 comm="syz.3.2245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff36bc6a819 code=0x7ffc0000 [ 695.396422][ T4193] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 696.142833][ T26] audit: type=1326 audit(3924196344.195:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13714 comm="syz.3.2245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff36bc6a819 code=0x7ffc0000 [ 696.165371][ T26] audit: type=1326 audit(3924196344.195:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13714 comm="syz.3.2245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff36bc6a819 code=0x7ffc0000 [ 696.363837][ T4388] bond0: (slave wlan1): Releasing backup interface [ 697.417574][T13759] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 697.444661][ T4193] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 697.455300][ T4193] usb 8-1: config 1 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 698.435576][ T4193] usb 8-1: config 1 interface 0 has no altsetting 0 [ 698.517568][T13759] usb 4-1: Using ep0 maxpacket: 8 [ 698.616927][ T4388] device hsr_slave_0 left promiscuous mode [ 698.639823][ T4388] device hsr_slave_1 left promiscuous mode [ 698.682095][ T4193] usb 8-1: string descriptor 0 read error: -71 [ 698.688806][ T4193] usb 8-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 698.704879][ T4193] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.717931][T13759] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 698.731480][T13759] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 699.840042][ T4193] usb 8-1: can't set config #1, error -71 [ 699.848649][ T4193] usb 8-1: USB disconnect, device number 12 [ 699.969322][ T4388] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 700.025835][T13759] usb 4-1: config 0 has no interfaces? [ 700.138902][T13759] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 700.312922][T13759] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.539938][T13759] usb 4-1: config 0 descriptor?? [ 700.644509][T13759] usb 4-1: can't set config #0, error -71 [ 700.777588][T13759] usb 4-1: USB disconnect, device number 5 [ 700.885305][ T4388] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 700.931115][ T4388] device bridge_slave_1 left promiscuous mode [ 700.946468][ T4388] bridge0: port 2(bridge_slave_1) entered disabled state [ 700.954940][ T4388] device bridge_slave_0 left promiscuous mode [ 700.973851][ T4388] bridge0: port 1(bridge_slave_0) entered disabled state [ 701.117701][ T4388] bond1 (unregistering): Released all slaves [ 702.174844][T13811] __sock_release: fasync list not empty! [ 703.294801][T13825] 9p filesystem being mounted at /24/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 703.412862][ T9837] hid-generic 0004:0004:FFFF0001.0007: unknown main item tag 0x0 [ 703.436783][ T9837] hid-generic 0004:0004:FFFF0001.0007: unknown main item tag 0x0 [ 703.459109][ T9837] hid-generic 0004:0004:FFFF0001.0007: unknown main item tag 0x0 [ 703.490778][ T9837] hid-generic 0004:0004:FFFF0001.0007: hidraw0: HID v0.b3 Device [syz0] on syz1 [ 703.521461][ T4388] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 703.660658][T13832] fido_id[13832]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 703.709758][ T4388] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 703.833976][ T4388] bond0 (unregistering): Released all slaves [ 704.627333][T13809] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2264'. [ 704.649349][T13809] chnl_net:caif_netlink_parms(): no params data found [ 705.781821][T13488] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 705.969113][T13488] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 706.226881][T13869] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 708.806513][T13856] 8021q: adding VLAN 0 to HW filter on device bond1 [ 709.886294][T13488] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 710.134465][T13881] ptrace attach of "./syz-executor exec"[5397] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ \x07    "[13881] [ 710.867511][T13488] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 712.210641][T13907] net_ratelimit: 23 callbacks suppressed [ 712.210681][T13907] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 712.539852][T13488] 8021q: adding VLAN 0 to HW filter on device bond0 [ 712.640691][T13488] 8021q: adding VLAN 0 to HW filter on device team0 [ 712.724964][ T7959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 712.757505][ T7959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 712.782170][ T7959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 712.806030][ T7959] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 712.814860][ T7959] bridge0: port 1(bridge_slave_0) entered blocking state [ 712.821950][ T7959] bridge0: port 1(bridge_slave_0) entered forwarding state [ 712.831468][ T7959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 712.840669][ T7959] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 712.856531][ T7959] bridge0: port 2(bridge_slave_1) entered blocking state [ 712.863646][ T7959] bridge0: port 2(bridge_slave_1) entered forwarding state [ 712.885168][ T7959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 712.894665][ T7959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 712.904285][ T7959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 712.920490][ T7959] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 712.930945][ T7959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 712.949371][ T7959] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 712.962027][ T7959] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 712.978462][ T7959] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 713.005689][T13488] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 713.024341][T13488] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 713.046832][ T7959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 713.058596][ T7959] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 713.070170][ T7959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 713.079797][ T7959] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 713.127192][ T7959] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 713.338441][ T7967] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 713.372167][ T7967] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 713.388764][T13488] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 713.424237][ T1250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 713.446190][ T1250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 713.498703][ T7967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 713.520125][ T7967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 713.558662][ T7967] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 713.572240][ T7967] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 713.596967][T13488] device veth0_vlan entered promiscuous mode [ 713.634829][T13488] device veth1_vlan entered promiscuous mode [ 713.694373][ T7959] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 713.703313][ T7959] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 713.723306][ T7959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 713.742037][ T7959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 713.754121][T13488] device veth0_macvtap entered promiscuous mode [ 713.765584][T13488] device veth1_macvtap entered promiscuous mode [ 713.785796][T13488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 713.797182][T13488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 713.808563][T13488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 713.825800][T13488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 713.837628][T13488] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 713.863544][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 713.886323][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 713.895072][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 713.935019][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 713.955751][T13488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 713.967808][T13488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 713.978256][T13488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 713.989170][T13488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 714.001678][T13488] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 714.018518][ T7967] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 714.034447][ T7967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 714.046994][T13488] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.056726][T13488] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.065889][T13488] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.075188][T13488] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.213328][ T1250] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 714.254206][ T1250] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 714.280721][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 714.303026][ T7959] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 714.314185][ T7959] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 714.331329][ T7959] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 716.662556][T13965] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 720.374160][T13993] device batadv_slave_1 entered promiscuous mode [ 720.924726][T13991] device batadv_slave_1 left promiscuous mode [ 723.859343][ T1425] ieee802154 phy0 wpan0: encryption failed: -22 [ 723.865730][ T1425] ieee802154 phy1 wpan1: encryption failed: -22 [ 725.555220][T14054] 9p filesystem being mounted at /148/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 725.695276][T14060] bond0 speed is unknown, defaulting to 1000 [ 725.742116][T14060] bond0 speed is unknown, defaulting to 1000 [ 725.757473][T14062] netlink: 14 bytes leftover after parsing attributes in process `syz.7.2314'. [ 727.110270][T14062] bond0 (unregistering): Released all slaves [ 727.125938][T14075] user requested TSC rate below hardware speed [ 727.681317][T14060] bond0 speed is unknown, defaulting to 1000 [ 728.027291][T14060] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 728.036683][T14075] kvm: vcpu 2: requested 148514 ns lapic timer period limited to 200000 ns [ 728.103629][T14075] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 728.140898][T14060] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 728.321064][T14060] siw: device registration error -19 [ 729.574374][T14102] loop1: detected capacity change from 0 to 40427 [ 730.957208][T14115] netlink: 'syz.3.2325': attribute type 1 has an invalid length. [ 731.057376][T14102] F2FS-fs (loop1): Unrecognized mount option "age_extent_cache" or missing value [ 731.321401][T14125] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 731.321430][T14125] CIFS mount error: No usable UNC path provided in device string! [ 731.321430][T14125] [ 731.321816][T14125] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 732.145865][ T5314] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 732.152754][T14115] device bond1 entered promiscuous mode [ 732.153069][T14115] 8021q: adding VLAN 0 to HW filter on device bond1 [ 732.280782][T14121] 8021q: adding VLAN 0 to HW filter on device bond1 [ 732.281103][T14121] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 732.281119][T14121] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 732.295984][T14121] bond1: (slave wireguard0): making interface the new active one [ 732.296003][T14121] device wireguard0 entered promiscuous mode [ 732.297681][T14121] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 732.297799][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 732.396389][ T5314] usb 8-1: Using ep0 maxpacket: 16 [ 732.527997][ T5314] usb 8-1: config 0 has an invalid interface number: 133 but max is 0 [ 732.528031][ T5314] usb 8-1: config 0 has no interface number 0 [ 732.528069][ T5314] usb 8-1: config 0 interface 133 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 732.703766][ T5314] usb 8-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 732.703803][ T5314] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.703852][ T5314] usb 8-1: Product: syz [ 732.703869][ T5314] usb 8-1: Manufacturer: syz [ 732.703885][ T5314] usb 8-1: SerialNumber: syz [ 732.706187][ T5314] usb 8-1: config 0 descriptor?? [ 732.725636][T14116] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 733.069640][ T5314] keyspan 8-1:0.133: Keyspan 1 port adapter converter detected [ 733.096186][ T5314] keyspan 8-1:0.133: found no endpoint descriptor for endpoint 81 [ 733.162442][ T5314] keyspan 8-1:0.133: found no endpoint descriptor for endpoint 1 [ 733.426071][ T5314] keyspan 8-1:0.133: found no endpoint descriptor for endpoint 2 [ 734.083066][ T5314] usb 8-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 734.119732][ T5314] usb 8-1: USB disconnect, device number 13 [ 734.168063][ T5314] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 734.189049][T14167] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2334'. [ 734.466050][T14170] device ip6gre1 left promiscuous mode [ 734.472563][T14170] device vlan2 left promiscuous mode [ 735.266792][ T5314] keyspan 8-1:0.133: device disconnected [ 737.119244][T14194] netlink: 'syz.2.2341': attribute type 1 has an invalid length. [ 737.143339][ T4230] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 737.211690][T14194] device bond1 entered promiscuous mode [ 737.240007][T14194] 8021q: adding VLAN 0 to HW filter on device bond1 [ 738.037989][ T5315] Bluetooth: hci5: command 0x0406 tx timeout [ 738.076359][T14204] 8021q: adding VLAN 0 to HW filter on device bond1 [ 738.102159][T14204] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 738.114616][T14204] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 738.151357][ T4230] usb 8-1: Using ep0 maxpacket: 16 [ 738.203183][T14204] bond1: (slave wireguard0): making interface the new active one [ 738.212168][T14204] device wireguard0 entered promiscuous mode [ 738.245292][T14204] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 738.260967][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 738.281571][ T4230] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 738.329195][ T4230] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 738.509074][ T4230] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 738.518828][ T4230] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.528283][ T4230] usb 8-1: Product: syz [ 738.532840][ T4230] usb 8-1: Manufacturer: syz [ 738.537484][ T4230] usb 8-1: SerialNumber: syz [ 738.910152][ T4230] usb 8-1: 0:2 : does not exist [ 739.960704][ T4230] usb 8-1: USB disconnect, device number 14 [ 740.202187][T14271] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2351'. [ 740.944640][T14265] orangefs_mount: mount request failed with -4 [ 742.879445][T13891] udevd[13891]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 746.054374][T14323] futex_wake_op: syz.3.2362 tries to shift op by 144; fix this program [ 747.524284][T14342] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 747.652572][T14342] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 750.042895][T14385] device vlan2 entered promiscuous mode [ 750.089765][T14385] device geneve1 entered promiscuous mode [ 754.024022][T14417] loop1: detected capacity change from 0 to 8192 [ 754.139344][T14417] REISERFS warning (device loop1): super-6515 reiserfs_parse_options: journaled quota format not specified. [ 754.252838][T14416] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2383'. [ 754.521891][T14416] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 755.986335][T14416] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 756.047111][T14422] netlink: 'syz.7.2387': attribute type 4 has an invalid length. [ 756.153936][T14437] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 756.238277][T14440] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2389'. [ 756.281240][T14442] IPv6: ADDRCONF(NETDEV_CHANGE): netdevsim0: link becomes ready [ 756.294896][T14453] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2392'. [ 756.318142][T14442] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 756.442253][ C1] Unknown status report in ack skb [ 756.482236][T14453] netlink: 'syz.3.2392': attribute type 12 has an invalid length. [ 760.200583][T14484] loop1: detected capacity change from 0 to 40427 [ 760.387740][T14484] F2FS-fs (loop1): invalid crc value [ 761.364799][T14484] F2FS-fs (loop1): Found nat_bits in checkpoint [ 761.502034][T14484] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 762.716553][T14516] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 768.588521][T14573] ipt_CLUSTERIP: Please specify destination IP [ 769.224797][T14579] binder_alloc: 14577: pid 14577 spamming oneway? 2 buffers allocated for a total size of 5120 [ 769.586375][T14584] binder_alloc: 14577: pid 14577 spamming oneway? 3 buffers allocated for a total size of 5128 [ 773.870818][T14630] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2429'. [ 775.150887][T14644] syz.1.2433 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 775.283833][T14644] loop1: detected capacity change from 0 to 1024 [ 775.435908][T14644] EXT4-fs (loop1): Ignoring removed orlov option [ 775.453618][T14644] EXT4-fs (loop1): bad geometry: bigalloc file system with non-zero first_data_block [ 775.453618][T14644] [ 777.301441][T14696] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.2444'. [ 777.541804][T14708] loop2: detected capacity change from 0 to 764 [ 778.836670][ C1] ------------[ cut here ]------------ [ 778.842290][ C1] WARNING: CPU: 1 PID: 20 at net/mac80211/tx.c:4859 __ieee80211_beacon_get+0x179f/0x2000 [ 778.852317][ C1] Modules linked in: [ 778.856379][ C1] CPU: 1 PID: 20 Comm: ksoftirqd/1 Not tainted syzkaller #0 [ 778.863924][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 778.874648][ C1] RIP: 0010:__ieee80211_beacon_get+0x179f/0x2000 [ 778.881344][ C1] Code: 2a f8 0f 0b 4f 89 64 2f 04 4f 89 64 2f 0c 43 c6 44 2f 14 f8 e9 19 fe ff ff e8 6d 09 2a f8 0f 0b e9 03 ef ff ff e8 61 09 2a f8 <0f> 0b e9 76 f2 ff ff e8 65 ae 6d 00 89 d9 80 e1 07 80 c1 03 38 c1 [ 778.902304][ C1] RSP: 0018:ffffc90000da7780 EFLAGS: 00010246 [ 778.908887][ C1] RAX: ffffffff894f2b2f RBX: ffff888063d4a268 RCX: ffff888017a08000 [ 778.917484][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 778.925805][ C1] RBP: ffffc90000da79a8 R08: ffff888017a08000 R09: 0000000000000003 [ 778.934149][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805f614000 [ 778.942952][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff920001b4f00 [ 778.951233][ C1] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 778.960349][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 778.967201][ C1] CR2: 0000001b34016ff8 CR3: 00000000748b1000 CR4: 00000000003506e0 [ 778.975333][ C1] Call Trace: [ 778.978839][ C1] [ 778.981854][ C1] ? ieee80211_beacon_get_template+0x30/0x30 [ 778.987998][ C1] ? verify_lock_unused+0x140/0x140 [ 778.993332][ C1] ? ieee80211_get_buffered_bc+0x697/0x8b0 [ 778.999308][ C1] ieee80211_beacon_get_tim+0x48/0x840 [ 779.005048][ C1] mac80211_hwsim_beacon_tx+0xf4/0x920 [ 779.010674][ C1] __iterate_interfaces+0x243/0x500 [ 779.015954][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 779.022358][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 779.028730][ C1] ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 [ 779.036039][ C1] mac80211_hwsim_beacon+0x9b/0x180 [ 779.041382][ C1] ? hw_scan_work+0xed0/0xed0 [ 779.046215][ C1] __hrtimer_run_queues+0x4f2/0xb70 [ 779.051573][ C1] ? hrtimer_interrupt+0x8d0/0x8d0 [ 779.056976][ C1] hrtimer_run_softirq+0x176/0x240 [ 779.062219][ C1] handle_softirqs+0x339/0x830 [ 779.067225][ C1] ? run_ksoftirqd+0xa4/0x100 [ 779.071985][ C1] ? do_softirq+0x210/0x210 [ 779.076607][ C1] ? run_ksoftirqd+0x81/0x100 [ 779.081377][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 779.086697][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 779.092054][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 779.097457][ C1] run_ksoftirqd+0xa4/0x100 [ 779.102403][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 779.108237][ C1] smpboot_thread_fn+0x4f6/0x970 [ 779.113436][ C1] kthread+0x436/0x520 [ 779.117580][ C1] ? cpu_report_death+0x180/0x180 [ 779.122816][ C1] ? kthread_blkcg+0xd0/0xd0 [ 779.127488][ C1] ret_from_fork+0x1f/0x30 [ 779.132002][ C1] [ 779.135154][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 779.142539][ C1] CPU: 1 PID: 20 Comm: ksoftirqd/1 Not tainted syzkaller #0 [ 779.150186][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 779.161045][ C1] Call Trace: [ 779.164353][ C1] [ 779.167433][ C1] dump_stack_lvl+0x188/0x250 [ 779.172276][ C1] ? show_regs_print_info+0x20/0x20 [ 779.177649][ C1] ? load_image+0x400/0x400 [ 779.182304][ C1] panic+0x2e5/0x810 [ 779.186227][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 779.190773][ C1] ? ret_from_fork+0x1f/0x30 [ 779.195382][ C1] ? __ieee80211_beacon_get+0x179f/0x2000 [ 779.201339][ C1] __warn+0x248/0x2b0 [ 779.205460][ C1] ? __ieee80211_beacon_get+0x179f/0x2000 [ 779.211287][ C1] report_bug+0x1b7/0x2e0 [ 779.215671][ C1] handle_bug+0x3a/0x70 [ 779.219854][ C1] exc_invalid_op+0x16/0x40 [ 779.224379][ C1] asm_exc_invalid_op+0x16/0x20 [ 779.229340][ C1] RIP: 0010:__ieee80211_beacon_get+0x179f/0x2000 [ 779.235860][ C1] Code: 2a f8 0f 0b 4f 89 64 2f 04 4f 89 64 2f 0c 43 c6 44 2f 14 f8 e9 19 fe ff ff e8 6d 09 2a f8 0f 0b e9 03 ef ff ff e8 61 09 2a f8 <0f> 0b e9 76 f2 ff ff e8 65 ae 6d 00 89 d9 80 e1 07 80 c1 03 38 c1 [ 779.255655][ C1] RSP: 0018:ffffc90000da7780 EFLAGS: 00010246 [ 779.261851][ C1] RAX: ffffffff894f2b2f RBX: ffff888063d4a268 RCX: ffff888017a08000 [ 779.269923][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 779.277901][ C1] RBP: ffffc90000da79a8 R08: ffff888017a08000 R09: 0000000000000003 [ 779.286084][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805f614000 [ 779.294292][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff920001b4f00 [ 779.302311][ C1] ? __ieee80211_beacon_get+0x179f/0x2000 [ 779.308236][ C1] ? ieee80211_beacon_get_template+0x30/0x30 [ 779.314265][ C1] ? verify_lock_unused+0x140/0x140 [ 779.319497][ C1] ? ieee80211_get_buffered_bc+0x697/0x8b0 [ 779.325396][ C1] ieee80211_beacon_get_tim+0x48/0x840 [ 779.330869][ C1] mac80211_hwsim_beacon_tx+0xf4/0x920 [ 779.336361][ C1] __iterate_interfaces+0x243/0x500 [ 779.341637][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 779.348033][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 779.354421][ C1] ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 [ 779.361953][ C1] mac80211_hwsim_beacon+0x9b/0x180 [ 779.367366][ C1] ? hw_scan_work+0xed0/0xed0 [ 779.372354][ C1] __hrtimer_run_queues+0x4f2/0xb70 [ 779.377706][ C1] ? hrtimer_interrupt+0x8d0/0x8d0 [ 779.383041][ C1] hrtimer_run_softirq+0x176/0x240 [ 779.388446][ C1] handle_softirqs+0x339/0x830 [ 779.393576][ C1] ? run_ksoftirqd+0xa4/0x100 [ 779.398465][ C1] ? do_softirq+0x210/0x210 [ 779.403076][ C1] ? run_ksoftirqd+0x81/0x100 [ 779.407926][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 779.413150][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 779.418464][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 779.423942][ C1] run_ksoftirqd+0xa4/0x100 [ 779.428559][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 779.433783][ C1] smpboot_thread_fn+0x4f6/0x970 [ 779.438835][ C1] kthread+0x436/0x520 [ 779.442932][ C1] ? cpu_report_death+0x180/0x180 [ 779.448028][ C1] ? kthread_blkcg+0xd0/0xd0 [ 779.452749][ C1] ret_from_fork+0x1f/0x30 [ 779.457263][ C1] [ 779.460642][ C1] Kernel Offset: disabled [ 779.464986][ C1] Rebooting in 86400 seconds..