last executing test programs: 28m28.185817304s ago: executing program 4 (id=201): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$tcp_congestion(r1, &(0x7f0000000180)='nv\x00', 0x3) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000777a078afbd825c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000023000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000db2100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cc2351270000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) dup2(r5, r3) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 28m27.574297034s ago: executing program 4 (id=203): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$tipc(0x1e, 0x1, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r1, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000380)="2feebe8d881590f656d01482831f4b036a7bb40c6782cbb5dafe72ea85766575551d40e3", 0x24}], 0x1, 0x0, 0x0, 0x40010}, 0x0) recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)=""/35, 0x23}], 0x1}, 0x10040) close_range(r0, 0xffffffffffffffff, 0x0) 28m26.832252115s ago: executing program 4 (id=205): r0 = socket$kcm(0x2b, 0x1, 0x0) close(r0) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f00000017c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x80fe, 0x7, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x12, 0x2}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000004c0)="7f", 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000084000000070000007f00000000000000b8"], 0xd0}, 0x480c4) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f00000001c0), 0x45) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000001c0)=@in6={0xa, 0x4e21, 0x4, @mcast2, 0x9}, 0x80, 0x0}, 0x4000080) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40012000) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x6c}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)={0xffffffffffffffff, r4}) close(r1) 28m26.586043381s ago: executing program 4 (id=206): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000002c0)='./file0\x00', 0x2048c5, &(0x7f0000000300)={[{@rodir}, {@shortname_winnt}, {@shortname_mixed}, {@numtail}, {@uni_xlate}, {@fat=@quiet}, {@shortname_mixed}, {@utf8}, {@fat=@flush}, {@fat=@dos1xfloppy}, {@shortname_lower}, {@shortname_win95}, {@shortname_winnt}, {@uni_xlateno}, {@uni_xlate}, {@uni_xlate}]}, 0x0, 0x2c7, &(0x7f0000002b80)="$eJzs3EFrE1sUwPHTTJumLW2yKA/eg4cH3ehmaOMnCNKCGFBqI+pCmNqJhoxJmImRiNjuxJ2fo7h0paB+gW7cuRc3RRDcdCGONJmJMR2btFqnbf4/KHM7Z87MHe69cKbQu3X92b1y0TOLVl0SKZWEyLpsi2R2WoGR4JhotZPSbV3OTX15///VGzcv5fL5hSXVxdzy+ayqzpx6/eDR89Nv61PXXsy8GpfNzK2tz9kPm/9s/rv1bTm8e1XE0pVqtW6tOLaulryyqXrFsS3P1lLFs926WuqG8aJTrdWaalVWpydrru15alWaWrabWq9q3W2qdccqVdQ0TZ2elGFj7DujsLG0ZOUOpTOIw0TUSdfNWUZksLDxNzoFAACOlrjq/7slT0ueVqo79f0e9X9CuuN96n+Roa7/D6r261BkPYnjZCRcvl0rOkT9DwAAAAAAAAAAAAAAAAAAAADAcbDt+2nf99PhMfwZF5GUiIS/x91PHI4Bxt9g/E+urn/cS4k4TxqFRqF9bMc7m0PMjYl8bc2HQLu9eDG/MKctGXnjrAX5a42CITtzKFeUUudhmej8+Xa+duevyZhMhvmO2JKVtMxG52cj8huFpJw9448HT7bFlLS8uy1VcWS1Na9/5D+eV71wOd+TP9G6DgAAAACAk8DUjl3f7624qeG2IT3x9snO9/mcpPv8faDn+3pU/huN770BAAAAABgmXlLKluPYrtd82K/xNMgZ6OIj2Ag3s/0jNxSJ+3VSg148KiLBmZfx9dnYd1ZCRHpDY7vORDeM3xvlTyI/r4vZ2Ic7qiFJkb4X+0Znrn68314Be9159y7BAAAAAE6GsPofibsjAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMsYF3GgscZKOyrscZ8bwlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcDR8DwAA//9KIAfL") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x13481, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) rseq(0x0, 0x0, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$watch_queue(r1, 0x0, 0x0) stat(0x0, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000000840)={0x2020}, 0x2020) 28m26.358088273s ago: executing program 4 (id=208): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$set_reqkey_keyring(0xe, 0x3) request_key(&(0x7f0000000100)='dns_resolver\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f00000003c0)='\x0e9h\xb5\xe1\x00\xe4\xa6A\xb0{\xf4\x80opyr\xc5 z\fG@J\x7f\xa8\xeb{\x82\xea\x17!&\a\x80\x90\xcb\xe210\x9b\x13\xfd/\xbac4\x05\xd1\xf5\xaf\x9b\xbc\x96\xe6Y;\xbe\xcb.qVu\xae^\xdd\x04\x8a|\x1fA\x1e\x01\xfa`PyGj\x12W\xbe\xc00\xef\xe4a\x10W,\xaaz\xceE\xa0\xc4cV\xbcxV\x90\a\xb9\xdcpB\x80\x18\x0e\x82oso\xa07>E\xc2\x878\x94\x83\xc3\xab\xfb\xab\xa0\xc2R\xa9\xc5Un\xc9\x1fc\xbc)\xba3\xdf75\xc3D)\x1d-\x1c\xb6O\xf5\xdfp]\xb1o\xe1\x06\xf9\xb7\x195vAcbV\xed\x82\xe3\xbe!fq\x00E\xe98WO\xef\xc0\x94\x17$\x13\xf5J\xc4\xc2eE\xd2a\xe2\xa7\x18\xe1\xc9\xc9\xcf\xd0a0\xf0II\thN\x89=\x83\xee\xd0T\xac\xfd{\x9e2Wc\xdf\x98\x83s xy-\x9b\x1d\xf4\xf3\xc9\xb1c^\ta\x01\xabn\x05%\xef\x9f\xca\r\x82Su\xfa\xd1\xd8\xc1\xba\x00/', 0x0) 28m22.727676046s ago: executing program 4 (id=216): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) 28m22.381950946s ago: executing program 32 (id=216): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) 15m53.053413587s ago: executing program 5 (id=1964): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r8, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0xd, r7, 0x1, 0xda, 0x6, @random="98c8ca7122df"}, 0x14) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendto$packet(r8, &(0x7f0000000540)="f4efe0430444425a1a9942a2f606", 0xe, 0x0, &(0x7f0000000640)={0x11, 0x4, r10, 0x1, 0xff, 0x6, @remote}, 0x14) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x2000, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 15m51.778268725s ago: executing program 5 (id=1971): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/hid.usb0/no_out_endpoint\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='1\n', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/hid.usb0/subclass\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='1\n', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/hid.usb0/protocol\x00', 0x2, 0x0) write(r2, &(0x7f0000000300)='1\n', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r3, 0x0, 0x0) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/hid.usb0/report_desc\x00', 0x2, 0x0) write(r4, &(0x7f0000000400)="05010906a101050719e029e71500250175019508810295017508810195057501050819012905910295017503910195067508150025650507", 0x38) close(r4) symlinkat(&(0x7f0000000440)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00') 15m51.585145917s ago: executing program 1 (id=1973): socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1b7c, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xc}}}, 0x24}}, 0x4004004) r0 = socket$inet(0x2, 0x80001, 0x84) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000140)="163280", 0x3}], 0x1) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r2, &(0x7f0000000080)=""/1, 0x1) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) socket$inet(0x2, 0x2, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0xdabc3000) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff, 0x3a, 0x0, @val=@tcx}, 0x1c) mlock2(&(0x7f0000247000/0x1000)=nil, 0x1000, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 15m50.487190906s ago: executing program 5 (id=1974): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x10, &(0x7f0000001280), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000300)="ff", 0x1}], 0x1, 0x0, 0x0, 0x20000880}, 0x10044001) write$cgroup_pid(r0, &(0x7f0000000400), 0x12) recvmsg(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x1) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x2000) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) 15m49.000876239s ago: executing program 5 (id=1976): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r4, &(0x7f00000005c0)="306663353a313232373a3f7092c0f0", 0xf) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20) fsync(r7) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40, 0x400}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x20000000}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x30}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) 15m47.990600509s ago: executing program 1 (id=1983): ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x3000)=nil) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000140)='./mnt\x00', 0x0, 0x8410, 0x0) 15m46.919518782s ago: executing program 5 (id=1986): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x10, &(0x7f0000001280), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000300)="ff", 0x1}], 0x1, 0x0, 0x0, 0x20000880}, 0x10044001) write$cgroup_pid(r0, &(0x7f0000000400), 0x12) recvmsg(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x1) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x2000) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) 15m45.445978112s ago: executing program 1 (id=1990): ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0) write(r1, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x3000)=nil) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000140)='./mnt\x00', 0x0, 0x8410, 0x0) 15m43.878015304s ago: executing program 5 (id=1992): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x168, 0x168, 0x0, 0x200, 0x168, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x3, 0x3}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x1], 0x1}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'bond_slave_0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00', {}, {}, 0x0, 0x0, 0x13}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @loopback, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001640)={0x24, 0x41, 0x1, 0x5fffc, 0x5, {0x1}, [@nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@typed={0x6, 0x9, 0x0, 0x0, @str='{\x00'}]}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c801}, 0x200080c4) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, 0x0, 0x4040000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x519c02, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x1, 0x6, 0xfffffffffffffffe}) 15m42.880124321s ago: executing program 1 (id=1994): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r7, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r9, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0xd, r8, 0x1, 0xda, 0x6, @random="98c8ca7122df"}, 0x14) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendto$packet(r9, &(0x7f0000000540)="f4efe0430444425a1a9942a2f606", 0xe, 0x0, &(0x7f0000000640)={0x11, 0x4, r11, 0x1, 0xff, 0x6, @remote}, 0x14) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x2000, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 15m37.749794907s ago: executing program 1 (id=2003): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file5\x00', 0x882c0, 0x4) r1 = fanotify_init(0xf00, 0x0) fanotify_mark(r1, 0x105, 0x5000003a, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) futex(&(0x7f000000cffc)=0x1, 0xd, 0x2, 0x0, 0x0, 0x400000) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mknodat(r6, &(0x7f0000000040)='./file1/file4/file5\x00', 0x100, 0xfffffffc) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140, 0x82) renameat2(0xffffffffffffff9c, &(0x7f0000000600)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x2) syz_emit_ethernet(0xf87, 0x0, 0x0) 15m35.144372275s ago: executing program 1 (id=2006): syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000880)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='zero_size_dir,gid=', @ANYRESHEX=0x0, @ANYBLOB=',zero_size_dir,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c7a65726f5f73697a655f6469722c6e616d65636173653d312c7a65726f5f73697a655f6469722c6e616d65636173653d312c74696d655f6f66667365743d307830303030301f30303030382c6572726f72733d636f6e74696e75652c007e931980c4e016a2f623ca536c33a42a6e1502cbb33bb508d6ad8aa96bc1bedad03b535fb15f8082da1ac20e419ff3f343f9f9e7bd0f19bcd32f4dc61aecf64f44ea5cb61c7f834d6990a954b66ef75c1366f3918b5799b3f1cb978491913a444515da7724186e0436d2545ddf82b146260b3981c6b973eaecc797894d312592966ee3519bb01d95"], 0x1, 0x1533, &(0x7f0000006800)="$eJzs3AucTtX6OPDnWWvtMSS9TXIZ1lrP5k0uiyTJJUkuSZIkSW4JSZIjCYkht6QhCcllSC5DSC4Tk8b9fr8kJEmTJCG5Jev/mZi/OnX+55xfnfz+Z57v5/N+Zj2z3mftZ88z73733vPyTZehNRrVrNqAiOAPwYtfEgAgFgAGAsA1ABAAQNm4snEZ89klJvyxjbA/10PJV7oCdiVx/7M27n/Wxv3P2rj/WRv3P2vj/mdt3P+sjfvPWFa2eXr+a/mRdR98/z8r4/f//yLpJcd+sbbk9V0BYv7VFO7////wD+Ry//9rBf/Kk7j/WRv3P6uKvdIFsP8F+PWfFWT7hzPc/6yN+89YVvbLe8GxcOXvR//VD4j8J/8G4ntd/Clf+f38h/vPGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4z9Bc74yxQAZI6vdF2MMcYYY4wxxhj78/hsV7oCxhhjjDHGGGOM/echCJCgIIAYyAaxkB1ygACIyZy/FuLgOsgN10MeyAv5ID/EQwEoCBoMWCAIoRAUhijcAEXgRigKxaA4lAAHJaEU3ASl4WYoA7dAWbgVysFtUB4qQEWoBLdDZbgDqsCdUBXugmpQHWpATbgbasE9UBvuhTpwH9SF+6EePAD14UFoAA9BQ3gYGsEj0BgehSbQFJpBc2jxP8p/AXrAi9ATekEC9IY+8BL0hX7QHwbAQHgZBsErMBhehUQYAkPhNRgGr8NweANGwEgYBW/CaHgLxsBYGAfjIQkmwER4GybBOzAZpsBUmAbJMB1mwLswE2bBbHgP5sD7MBfmwXxYACnwASyERZAKH8Ji+AjSYAkshWWwHFbASlgFq2ENrIV1sB42wEbYBJthC2yFbbAddsBO+Bh2wSewG/bAXvgU9sFn/2b+6b/L74qAgAIFKlQYgzEYi7GYA3NgTsyJuTAXRjCCcRiHuTE35sE8mA/zYTzGY0EsiAYNEhIWwkIYxSgWwSJYFIticSyODh2WwlJYGm/GMlgGy2JZLIflsDxWwApYCSthZayMVbAKVsWqWA2rYQ2sgXfj3dgba2NtrIN1sC7Wzbw9hQ2wATbEhtgIG2FjbIxNsAk2w2bYAltgS2yJrbAVtsE22BbbYjtsh+2xPXbADtgRO2In7ISdsTN2wS7YFbtht/QXsgG+iC9iL6wmemMf7IN9MTFbfxyAA/BlHISv4Cv4KibiEByKr+Fr+DoOx1M44sJIHIWjsLJ4C8fgWCQxHpMwCSfiRJyEk3AyTsEpOA2TcTrOwBk4E2fhLHwP5+D7+D7Ow3m4AFMwBRfiIkzFVFyMpzENl+BSXIbLcQUux1W4GlfhWlyHa3EDbsBNuAm34BbchttwB+7Aj1EB4Ce4B/dgIu7Dfbgf9+MBPIAH8SCmYzoewkN4GA/jETyCR/EoHsPjeAKP40k8iafwNJ7BM3gOz+F5fC7+q4YfF1uTCCKDEkrEiBgRK2JFDpFD5BQ5RS6RS0RERMSJOJFb5BZ5RB6RT+QT8SJeFBQFhRFGkAgzjhQiKqKiiCgiioqiorgoLpxwopQoJUqL0qKMKCPKiltFOXGbKC8qiNaukqgkKos2roq4U1QVVUU1UV3UEDVFTVFL1BK1RW1RR9QRdUVdUU88IOqL3tgfHxIZnWkkhmBjMRSbiKZCXjpCtRTDsZVoLdqIJ8RIHIHtREvXXjwtOogx2FH8TYzFZ0VnMR67iOdFV9FNdBcviB6ilespeonJ2Fv0EdOwr+gn+osBYiZWF+/hnOw1xKsiUQwRQ8VrYgG+LoaLN8QIMVKMEm+K0eItMUaMFePEeJEkJoiJ4m0xSbwjJospYqqYJpLFdDFDvCtmillitnhPzBHvi7linpgvFogU8YFYKBaJVPGhWCw+EmliiVgqlonlYoVYKVaJ1WKNWCvWifVig9goNonNYovYKraJ7WKH2Ck+FrvEJ2K32CP2ik/FPvGZ2C8+FwfEF+Kg+FKki6/EIfG1OCy+EUfEt+Ko+E4cE8fFCfG9OCl+EKfEaXFGnBXnxI/ivPhJXBBegEQppJRKBjJGZpOxMrvMIa+SOWWQefyXcfI6mVteL/PIvDKfzC/jZQFZUGpppJUkQ1lIFpZReYMsIm+URWUxWVyWkE6WlKXkTbK0vFmWkbfIsvJWWU7eJsvLCrKirCRvl5XlHRIiF7dRTVaXNWRNebdMgHtkbXmvrCPvk3Xl/bKefEDWlw/KBvIh2VA+LBvJR2Rj+ahsIpvKZrK5bCEfky3l47KVbC3byCdkW/mkbCefku3l07KD9Jd+RZ6VneVzsot8XnaV3WR3+ZO8IL3sKXtJ6A2yj3xJ9pX9ZH85QA6UL8tB8hU5WL4qE+UQOVS+JofJ1+Vw+YYcIUfKUfJNOVq+JcfIsXKcHC+T5AQ5Ub4tJ8l35GQ5RU6V02SynC77X1pptpT/NP/t38kf/PPWN8nNcovcKrfJ7XKH3Ck/lrvkLrlb7pZ75V65T+6T++V+eUAekAflQZku0+UheUgeloflEXlEHpVH5TF5XJ6V38uT8gd5Sp6Wp+VZeU6ek+cv/QxAoRJKKqUCFaOyqViVXeVQV6mc6mqVS12jIupaFaeuU7nV9SqPyqvyqfwqXhVQBZVWRllFKlSFVGEVVTfgpV8YVVyVUE6VVKXUTf9OviqiblRFVbFf5WfWl/AP6muhWqiWqqVqpVqpNqqNaqvaqnaqnWqv2qsOqoPqqDqqTqqT6qw6qy6qi+qquqruqrvqoXqonqqnSlAJqo96SfVV/VR/NUANVC+LjH0YrAarRJWohqqhapgapoar4WqEGqFGqVFqtBqtxqgxapwap5JUkpqoJqpJapKarCarqWqqSlbJaoaaoWaqmWq2mq3mqDlqrpqr5qv5KkWlqIVqoUpVqWqxWqzS1BK1RC1Ty9QKtUKtUqvUGrVGrVPr1Aa1QaWpzWqz2qq2qu1qu9qpdqpdapfarXarvWqv2qf2qf1qvzqgDqiD6qBKV+nqkDqkDqvD6og6oo6qo+qYOqZOqBPqpDqpTqlT6ow6o86pc+q8Oq8uqAsZp32BCESgAhXEBDFBbBAb5AhyBDmDnEGuIFcQCSJBXBAX5A6uD/IEeYN8Qf4gPigQFAx0YAIbiEtNjwY3BEWCG4OiQbGgeFAicEHJoFRwU1A6uDkoE9wSlA1uDcoFtwXlgwpBxaBScHtQObgjqBLcGVQN7gqqBdWDGkHN4O6gVnBPUDu4N6gT3BfUDe4P6gUPBPWDB4MGwUNBw+DhoFHwSNA4eDRoEjQNmgXNgxZ/6vren8r7uOupe+kE3Vv30S/pvrqf7q8H6IH6ZT1Iv6IH61d1oh6ih+rX9DD9uh6u39Aj9Eg9Sr+pR+u39Bg9Vo/T43WSnqAn6rf1JP2Onqyn6Kl6mk7W0/UM/a6eqWfp2fo9PUe/r+fqeXq+XqBT9Ad6oV6kU/WHerH+SKfpJXqpXqaX6xV6pV6lV+s1eq1ep9frDXqj3qQ36y16q96mt+sdeqf+WO/Sn+jdeo/eqz/V+/Rner/+XB/QX+iD+kudrr/Sh/TX+rD+Rh/R3+qj+jt9TB/XZfT3+qT+QZ/Sp/UZfVaf0z/q8/onfUH7jJP7jLd3o4wyMSbGxJpYk8PkMDlNTpPL5DIREzFxJs7kNrlNHpPH5DP5TLyJNwVNQZOBDJlCppCJmqgpYoqYoqaoKW6KG2ecKWVKmdKmtCljypiypqwpZ8qZ8qa8qWgqmtvN7eYOc4e509xp7jJ3meqmuqlpappappapbWqbOqaOqWvqmnqmnqlv6psGpoFpaBqaRqaRaWwamyamiWlmmpkWpoVpaVqaVqaVaWPamLamrWln2pn2pr3pYDqYjqaj6WQ6mc6ms+liupiupqvpbrqbHqaH6Wl6mgSTYPqYPqav6Wv6m/5moBloBplBZrAZbBJNohlqhpphZpgZboabEWakGZVxomreMmPMWDPOjDdJJslMNBPNJDPJTDaTzVQz1SSbZDPDzDAzzUwz28w2c8wcM9fMNfPNfJNiUsxCs9CkmlSz2Cw2aSbNLDVLzXKz3Kw0K81qs9qsNWvNelhvNpqNZrPZbLaarWa72W52mp1ml9lldpvdZq/Za/aZfWa/2W8OmAPmoDlo0k26OWQOmcPmsDlijpij5qg5Zo6ZE+aEOWlOmlPmlDljzphzJu+l90tvYm12m8NeZXPaq20ue439+zifzW/jbQFb0Gqbx+b9VWystUVtMVvclrDOlrSl7E2/icvbCrairWRvt5XtHbbKb+Ja9h5b295r69j7bE1796/iuvZ+W88+YusjAtimtqFtbhvZR2xj+6htYpvaZra5bWuftO3sU7a9fdp2sM/8Jl5oF9nVdo1da9fZ3XaPPWPP2sP2G3vO/mh72l52oH3ZDrKv2MH2VZtoh/wmHmXftKPtW3aMHWvH2fG/iafaaTbZTrcz7Lt2pp31mzjFfmDn2FQ7186z8+2Cn+OMmlLth3ax/cim2QCW2mV2uV1hV9pV/7fWZXaD3Wg32V32E7vVbrPb7Q67M/NE2O6xe+2ndp/9zB6yX9sD9gt70B6x6farn+OM/Ttiv7VH7Xf2mD1uT9jv7Un7g8rMztj37+1P9oL1FggJSJKigGIoG8VSdspBV1FOuppy0TUUoWspjq6j3HQ95aG8lI/yUzwVoIKkyZAlopAKUWGK0g2UWV5xKkGOSlIpuolK081Uhm6hsnQrlaPbqDxVoIpUiW6nynQHVaE7qSrdRdWoOtWgmnQ31aJ7qDbdS3XoPqpL91M9eoDq04PUgB6ihvQwNaJHqDE9Sk2oKTWj5tSCHqOW9Di1otbUhp6gtvQktaOnqD09TR3oGepIf6NO9Cx1pueoCz1PXakbdacXqAe9SD2pFyVQb+pDL1Ff6kf9aQANpJdpEL1Cg+lVSqQhNJReo2H0Og2nN2gEjaRR9CaNprdoDI2lcTSekmgCTaS3aRK9Q5NpCk2laZRM02kGvUszaRbNpvdoDr1Pc2kezacFlEIf0EJaRKn0IS2mjyiNltBSWkbLaQWtpFW0mtbQWlpH62kDbaRNtJm20FbaRttpB+2kj2kXfUK7aQ/tpU9pH31G++lzOkBf0EH6ktLpKzpEX9Nh+oaO0Le+F31Hx+g4naDv6ST9QKfoNJ2hs3SOfqTz9BNdIE8QYihCGaowCGPCbGFsmD3MEV4V5gyvDnOF14SR8NowLrwuzB1eH+YJ84b5wvxhfFggLBjq0IQ2pDAMC4WFw2h4Q1gkvDEsGhYLi4clQheWDEuFN4Wlw5vDMuEtYdnw1rBceFtYPqwQPnJfpfD2sHJ4R1glvDOsGt4VVgurhzXCmuHdYa3wnrB2eG9YJ7wvLBPeH9YLHwjrhw+GDcKHwobhw2Gj8JGwcfho2CRsGjYLm4ctwsfCluHjYauwddgmvCpsGz4ZtgufCtuHT4cdwmd+nr9/Ueb8E7+ZTwh7h33Cl8KXQu/vlfOjC6Ip0Q+iC6OLoqnRD6OLox9F06JLokujy6LLoyuiK6Oroquja6Jro+ui66Mbohujm6Le18wGDp1w0ikXuBiXzcW67C6Hu8rldFe7XO4aF3HXujh3ncvtrnd5XF6Xz+V38a6AK+i0M846cqEr5Aq7qLvBFXE3uqKumCvuSjjnSrpSrrlr4Vq4lu5x18q1dm3cE+4J96R70j3lnnJPuw7uGdfR/c11cs+6zu4595x73nV13Vx394Lr4SbkuviaTHB9XB/X1/V1/V1/N9ANdIPcIDfYDXaJLtENdUPdMDfMDXfD3Qg3wo1yo9xoN9qNcWPcODfOJbkkN9FNdJPcJDfZTXZT3VSX7JLdDDfDzXQzXeVZF7cy18118918l+JS3EKXcc6Y6ha7xS7Npbmlbqlb7pa7lW6lW+1Wu7VurVvv1ruNbqPb7Da7rW6r2+62u51up9vldrnd/pqLi7p9br/b7w64A+6g+9Klu6/cIfe1O+y+cUfct+6o+84dc8fdCfe9O+l+cKfcaXfGnXXn3I/uvPvJXXDeJUUmRCZG3o5MirwTmRyZEpkamRZJjkyPzIi8G5kZmRWZHXkvMifyfmRuZF5kfmRBJCXyQWRhZFEkNfJhZHHko0haZElkaWRZZHlkRcT7AltDX8gX9lF/gy/ib/RFfTFf3Jfwzpf0pfxNvvTFutO8v9WX87f58r6Cr+gf9U18U9/MN/ct/GO+pX/ct/KtfRv/hG/rn/Tt/FO+vX/ad/DP+I7+b76Tf9Z39s/5Lv5539V38939C76Hf9H39L18gu/t+/iXfF/fz/f3A/xA/7If5F/xg/2rPtEP8UP9a36Yf90P92/4EX6kHxXzph+deYkM432Sn+An+rf9JP+On+yn+Kl+mk/20/0M/66f6Wf52f49P8e/7+f6eX6+X+BT/Ad+oV/kU/2HfrH/yKf5JZk3jf1Kv8qv9mv8Wr/Or/cb/Ea/yW/2W/xWv81v9zv8Tv+x3+U/8bv9Hr/Xf+r3+c/8fv+5P+C/8Af9lz7df+UP+a/9Yf+NP+K/9Uf9d/6YP+5P+O/9Sf+DP+VP+zP+rD/nf/Tn/U/+Av+bNcYYY4yxf8mEy0Px65mLt/N7/06O+MWT+wDA1dvyp/9yPuOMcn2ei+N+Ij424+vTvbo8lPmoVi0hIeHSc9MkBIXnAWT+JSjDzx89uBQvgTbwJLSH1lD6d+vvJ7qdo3+yfvRWgBy/yMkoKDO+vP7nAJjwO+s/9sSoheXCM3H/j/XnARQtfDknO1yOl0Cbn++vtIYy/6D+vC3/Sf3Zv0gCaPWLnJxwOb5cfyl4HJ6B9r96JmOMMcYYY4wxdlE/UbFT5vVn5ic+f+/6PF5dzskGl+N/dn3OGGOMMcYYY4yxK+/Zbt2feqx9+9ad/v1Blf9R1r88aAz/qZV58LsD7wEyv6MA4A8uCJAxkH/lXmz5S7aVeOml8/dTy8/6AP53tPLPGFzhAxNjjDHGGGPsT3f5pP/X31dXqiDGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYYywL+iv+O7ErvY+MMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcbYlfZ/AgAA//+1tfsI") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) add_key(&(0x7f0000000200)='big_key\x00', 0x0, &(0x7f0000000fc0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) landlock_create_ruleset(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071002700000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000600)={[{@adinicb}, {@nostrict}, {}, {@utf8}, {@volume={'volume', 0x3d, 0xdf48}}, {@mode={'mode', 0x3d, 0x439}}, {}, {@iocharset={'iocharset', 0x3d, 'cp1251'}}, {@iocharset={'iocharset', 0x3d, 'cp866'}}, {@iocharset={'iocharset', 0x3d, 'cp775'}}, {@undelete}, {@gid={'gid', 0x3d, 0xee00}}, {@uid_forget}, {@noadinicb}, {@volume={'volume', 0x3d, 0x1}}, {@lastblock={'lastblock', 0x3d, 0x37f}}]}, 0x1, 0xc66, &(0x7f0000001bc0)="$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") r4 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x149, &(0x7f0000000940)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x113, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x19, 0x40000000, 0x0, [{}, {0x0, 0x13, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b3"}, {0x0, 0x9, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d"}, {0x0, 0x4, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a"}]}}}}}}, 0x0) sendmsg$nl_route(r4, 0x0, 0x4004890) mount$tmpfs(0x0, 0x0, 0x0, 0x420, &(0x7f00000000c0)=ANY=[]) 15m28.572118295s ago: executing program 33 (id=1992): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x168, 0x168, 0x0, 0x200, 0x168, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x3, 0x3}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x1], 0x1}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'bond_slave_0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00', {}, {}, 0x0, 0x0, 0x13}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @loopback, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001640)={0x24, 0x41, 0x1, 0x5fffc, 0x5, {0x1}, [@nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@typed={0x6, 0x9, 0x0, 0x0, @str='{\x00'}]}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c801}, 0x200080c4) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, 0x0, 0x4040000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x519c02, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x1, 0x6, 0xfffffffffffffffe}) 15m19.700297516s ago: executing program 34 (id=2006): syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000880)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='zero_size_dir,gid=', @ANYRESHEX=0x0, @ANYBLOB=',zero_size_dir,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c7a65726f5f73697a655f6469722c6e616d65636173653d312c7a65726f5f73697a655f6469722c6e616d65636173653d312c74696d655f6f66667365743d307830303030301f30303030382c6572726f72733d636f6e74696e75652c007e931980c4e016a2f623ca536c33a42a6e1502cbb33bb508d6ad8aa96bc1bedad03b535fb15f8082da1ac20e419ff3f343f9f9e7bd0f19bcd32f4dc61aecf64f44ea5cb61c7f834d6990a954b66ef75c1366f3918b5799b3f1cb978491913a444515da7724186e0436d2545ddf82b146260b3981c6b973eaecc797894d312592966ee3519bb01d95"], 0x1, 0x1533, &(0x7f0000006800)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) add_key(&(0x7f0000000200)='big_key\x00', 0x0, &(0x7f0000000fc0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) landlock_create_ruleset(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071002700000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000600)={[{@adinicb}, {@nostrict}, {}, {@utf8}, {@volume={'volume', 0x3d, 0xdf48}}, {@mode={'mode', 0x3d, 0x439}}, {}, {@iocharset={'iocharset', 0x3d, 'cp1251'}}, {@iocharset={'iocharset', 0x3d, 'cp866'}}, {@iocharset={'iocharset', 0x3d, 'cp775'}}, {@undelete}, {@gid={'gid', 0x3d, 0xee00}}, {@uid_forget}, {@noadinicb}, {@volume={'volume', 0x3d, 0x1}}, {@lastblock={'lastblock', 0x3d, 0x37f}}]}, 0x1, 0xc66, &(0x7f0000001bc0)="$eJzs3U9sHNd9B/DfG+2KK7mtmDhVnDQONm2Ryorl6l9MxSrcVU2zDSDLQijmFoArkVIXpkiCpBrZSFumlx56CFAUPeREoDUKpGhgNEXQI9O6QHLxocipJ6KFjaDogS0CBCgabDGzb6UlRdqyREqU/PnY1Hd35r2Z92bWMzKxb14AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABG/8/K54yfSFiv23U3tYucbBADsugvjXzl+cqv7PwDw2Lq03f//AwAAAAAAAAAAAAAAe0WKIp6MFPMX1tNk9b6ncb5Tv3FzYnRs62oHUlVzX1W+/GmcOHnq9BefHznTz/Od2fepv9M+Ha+OXzrXfGnu+vzC9OLi9FRzYrZzZW5q+q63cL/1NztaHYDm9dduTF29utg8+dypDatvDr839MTh4bMjzxx7ul92YnRsbPx2kcZg+do9N6RnuxEe+6OIY5Hi2e/+JLX7D3S4z2PReLDnfrMDVSeOVp2YGB2rOjLTac8ulSsv9g9EEdEcqNTqH6Otz0XU6g+0D9trRSyXzS8bfLTs3vh8e6F9eWa6ebG9sNRZ6szNXky91pb9aUYRZ1LESkSsDd25uXoUUYsU3z60ni7np35Ux+EL1cDg7dvxkJ/8UbazWY9YKR6Bc7aHDUURr0SKn759JK7k60x1rfl8xCtlfj/izTJfjEjlB+N0xLtbfI54NNWiiD8rz//Z9TRVXQ/615XzX21+efbq3EDZ/nXlQ94f7rhSPKT7w4FN+WDs8WtTI4poV1f89XTvf9kBAAAAAAAAAAAAAAAAYKcdiCI+FSle/tc/qMYVRzUu/dDZkd8d/sXBMeNPfcB2yrLPRcRycXdjcvfngYEX08WUHvJY4o+yRhTxh3n83zcfdmMAAAAAAAAAAAAAAAAAAAA+0or4caSheOdIWonBOcU7s9eal9qXZ3qzwvbn/u3Pmd7tdrvN1MtWzsmcyzlXcq7mXMsZRa6fs5VzMudyzpWcqznXcsa+XD9nK+dkzuWcKzlXc67ljFqun7OVs5FzOedKztWcazljj8zdCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwOCmiiJ9Him99fT1FiohWxGT0cnXoYbcOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgNpSK+Fymav9e6tawWEan6t+dI+cfpaO0v8+PRGinzxWidy9mustb65kNoP/ennor4UaQYarx164Tn81/vvbv1MYg3v3H73adrvdzXXzn83tAThw+dHRn77FPbvU5bNeDo+c7sjZvNidGxsfGBxbW8948PLBvO+y12putExOLrb7zWnpmZXrj3F+VH4B6r98/kfez9Qb5ItUemqV7sxIuo7YlmPJy+b9B4GBcndl15/383UvzmO//Wv+H37v+N+IXeu1t3+PjZH+2/df9/YfOG7vL+X9tcL9//yzvBVvf/JweWvZD/NlKvRTSWrs/XD0c0Fl9/41jnevva9LXp2dPHj39pZORLp47X90c0rnZmpgde7cjhAgAAAAAAAAAAAAAAAHhwUhG/HSnaP1pPzYi4WY3XGj478syxp/fFvmq81YZx26+OXzrXfGnu+vzC9OLi9FRzYrZzZW5q+m5316iGe02Mju1KZz7QgV1u/4HGS3Pzry90rv3+0pbrDzbOXV5cWmhf2Xp1HIgiojW45GjV4InRsarRM532bFX14paD6T+8eiri3yPFldPN9Lm8LI//3zzCf8P4/+XNG9rB8f+fPXh7/N/HBoqW+0ypiJ9Fit/486fic1U7D8YdxyyX++tIcfTMZ3K52F+W67eh91yB3sjAsux/R4q///nGsv3xkE/eLnviQx3cR0B5/g9Fiu/96XfiV/Oyjc9/2Pr8H9y8oV16/sMnBpYd3PC8gvvuOvn8H4sULz75VvxateR/3/f5H/0nNhzpFb79fI5dOv+/PLBsOO/313eq8wAAAAAAAAAAAI+weiribyLFD8Zq6fm87G6+/ze1eUO79P2vTw4sm8rf/0ux87OedLvdPy734ZuFAAAAADxO6qmIH0eKa0tv3RpDvXH898D4z9+6Pf5zNG1aW/2e75eq5wbs5O//Bg3n/U7ef7cBAAAAAAAAAAAAAAAAAABgT0mpiOfzfOqT1Xj+qW3nU1+NFC//57O5XDpcluvPAz9c/dm4MDd77NzMzFwjltqXZ6ab4/PtK9Nl3U9EivW/+kyuW1Tzq/fnm+/N8X57LvaFSDH2t/2yvbnY+3OT9+YDb3S7ESfKsh+LFP/xdxvL5qmp89zR1XZPlmX/MlJ87R+3Lnv4dtlTZdnvRIoffq3ZL3uwLNt/Puonb5d97spcsQtnBQAAAAAAAAAAAAAAAAAAgI+aeiriTyLFf11fuTWWP8//Xx94W3nzGwPz/W9ys5rnf7ia/3+71/cy/3/1XIHl7fYKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACPpxRFvBEp5i+sp9Wh8n1P43xn9sbNidGxrasdSFXNfVX58qdx4uSp0198fuRMP9+//k77VLw6fulc86W56/ML04uL01PNidnOlbmp6bvewv3W3+xodQCa11+7MXX16mLz5HOnNqy+Ofze0BOHh8+OPHPs6X7ZidGxsfGBMrX6Pe/9Dmmb5fujiL+IFM9+9yfpB0MRRdxxLP7vwx6LD/js7LYDVSeOVp2YGB2rOjLTac8ulSsv9g9EEdEcqNTqH6MHcC7uSytiuWx+2eCjZffG59sL7csz082L7YWlzlJnbvZi6rW27E8zijiTIlYiYm3ozs3Vo4jXIsW3D62nfxqK2Nc/Dl+4MP6V4ye3b0exi328C2U7m/WIleIROGd72FAU8Q+R4qdvH4l/HoqoRe8nPh/xSpnfj3gzeuc7lR+M0xHvbvE54tFUiyL+pzz/Z9fT20Pl9aB/XTn/1eaXZ6/ODZTtX1fu91750O8PD9IevzY1oogfVlf89fQv/rsGAAAAAAAAAAAAAAAA2EOK+JVI8cI7R1I1PvjWmOLO7LXmpfblmd6wvv7Yv/6Y6W63222mXrZyTuZczrmSc7XKeqzl91Hk+jlbZTa63cn8fjnnSs7VnGs5q8G/0e029+X6OSdzLudcybmacy1n1PL+c7ZyTuZczrmSczXnWs7YI2P3AAAAAAAAAAAAAAAAAACAx0tR/ZPiW19fT92h3vzSk9HLVfOBPvb+PwAA//+mLvFm") r4 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x149, &(0x7f0000000940)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x113, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x19, 0x40000000, 0x0, [{}, {0x0, 0x13, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b3"}, {0x0, 0x9, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d"}, {0x0, 0x4, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a"}]}}}}}}, 0x0) sendmsg$nl_route(r4, 0x0, 0x4004890) mount$tmpfs(0x0, 0x0, 0x0, 0x420, &(0x7f00000000c0)=ANY=[]) 9m30.431046651s ago: executing program 3 (id=2733): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x8911, &(0x7f0000002300)={'veth0_to_batadv\x00', @ifru_addrs=@nfc={0x27, 0x0, 0xffffffffffffffff, 0x1}}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) request_key(0x0, &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000680)='\xf3\xcb\xd3\x1f\xd9A\xd4\xdet\x9e\xf1)\x00\xf9\xc4I7|\x1bB\x13\x812B\xb4\xad\xd4\xf8\x10\x01\xc1\xe0<.\xcd;\xce\xbf\xba\xd8\x85\xe0\xfe\t\b\xdfnP\xbf\xf1\x1a\x19\xff\x86@H\xa1\xed\xa3\x8d\x1b\xefE\xba\xc0[e\xdc\x15u\x03\xa8\x16\x0f\x9c{\xe0\xa8\x8d\x16?\x0f\xecYInt\xc3,\xf0\xee\xe1\xf9\xda\xb4\x0ey\xb3\xaa\xf1\x8fLN\x9f\xea\\\x01\'\xe4\x99\xed\x14\xb8o\xdet\x86\x1aX\xad\xc0\xa6F\xf0\xab8\xf0\xb4;=k\xa1>\n\x91\x11Qb[ch\x1fyb%[\x89Z\x9d\x91\x01Z\x80\xbb\x972\xbf\xdb\x8d\b,\xd7\xa3\x112W\xf7\xd5LM\x94o\xf4?\x12\xc3\xae\x92\x9ed\x94\xf9]\xc8\xfa\xf2$\xa8\xca\xb7`\xf0\xd7\x04qudz\xfa\x14\xdf\xc1\"[l\xee\x98\x87\xf4\xe8%z\xc3\xa2\x13\xe4S\xbbD]zO\x13\a\x1dq\xea\xec_\xd2(\xb6\x93_\x9dP\xbbT\x8f\xe6\x13C \aX\xbb\xfb\x98T\xc0\xb8\xae\xaf5q\x97\xf1\xcb=\x11\x99\x8br\x9b\x19\xdf\x9a\xe26 I`\xad\x86gNaK\xab\a\xde\xce\x86\xf2\xe2\xb3\x9f\xf7\xa6\xaf\x8c\xfax\x80\xdb\x17AT3Q\xb0h\xbe\xd5\xf4\xe3\xad\xc5\xbb\xfdf\xe4_NL \xe3\xd5\x8d\x03\r\xaa\x89\xbfs\xbc\x92_$\xb6\xd9\x9e/\xf0\xfb\xbe\'\xe3\x10\xa5\x7fA\xd1\x99\n\x80\xdb\x0e\xbc(\xc6\xd2\x8d\x1c\x1b\xfaW\xa7\xcd\xa5\x8e\r\x19v\xdb\xa4\xfb\xe9K\xdc%\xf7\xed\x17\x1a\xeb\x12M\xda\xd3\x7fD\x80\xf7X\x9c8\xc2%!J\xf8\x03/\"\xdd\xf1X:(\xc0\xc8?!::,\xa8/d\xa4\xba>\xea\x17~%\x8a(]U\xee\xdb\xf12\xc9\xfc\xa9\x1e\xe0s>\x16\x7f\xed\x15\x1bS\xf7\x99\xceO\xcb\xc5\x98\v\xab\xb8\xf8#\x9b\xf2\x97\xad\xb0\xb2Y\xf6\x85\xca\xb6g7\xb9c=T\x16\xc1\xbc\xfer\xb7\\\xd4[Q\x80N[`\x93\xf3\x10\xdaz\xdf\x85A\xa9\x98\xb6\x9f\x1c~\xb3\x80\xb6)\xfdEu\xde\xe8\xf4:2\x13\xec\x8cC\xe1\xb1\t\xb3<\xb60\x87\x80\x93<\xb8aI;\x03\xfe\x95\bn\xd7\xbf/\x89\xd3\xda\xf5\xfa\xcf\xdb\xfe\x12\x1b`\xab)F\x9e\xef27\xab\x9b\xadjQ\xa0\x95tF^\x81\xa8\xf4\xdc\x8bCD\x12\xba\xc6\xb3\x18^?\xf8\r', 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000f40)) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = dup2(r1, r1) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f0000000300)=""/107, 0x0, 0x6000}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000140)=0x5) read$FUSE(r2, &(0x7f0000002a80)={0x2020}, 0x2020) write$vhost_msg_v2(r2, &(0x7f0000000380)={0x2, 0x0, {&(0x7f00000001c0)=""/116, 0x74, 0x0, 0x1, 0x2}}, 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x90}, 0x9c) sendto$inet6(r5, &(0x7f0000000280)="ee", 0x1, 0x200400d0, 0x0, 0x0) ioctl$TUNATTACHFILTER(r4, 0x401054d5, 0x0) fstat(r3, &(0x7f0000000280)) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000050002000000000020000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a300000000008000540000000040c00098008000140ff"], 0x90}, 0x1, 0x0, 0x0, 0x8800}, 0x0) write$eventfd(r2, &(0x7f0000000100)=0xffffffffffffff00, 0x8) quotactl_fd$Q_SYNC(r3, 0xffffffff80000102, 0x0, 0x0) syz_emit_vhci(0x0, 0x0) syz_usb_connect(0x2, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) 9m28.673453023s ago: executing program 3 (id=2739): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x100000000e2) sendmsg$inet6(0xffffffffffffffff, 0x0, 0xc000) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) keyctl$clear(0x3, 0xfffffffffffffffd) ptrace$ARCH_MAP_VDSO_64(0x1e, r0, 0x7, 0x2003) syz_open_dev$usbmon(&(0x7f0000000280), 0x8000000, 0x200) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000680)={0xaf76, 0x3, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5455a3247e500f61669905db88235f8a5447dd2a2ed6e91626f158881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb7bc33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a825782f14eee686be0e358e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39e1aefe363590d1f600"}) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f00000001c0)='./file1\x00', 0x8000, &(0x7f0000000040)=ANY=[], 0x1, 0x14fe, &(0x7f0000002a80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1010c2, 0x15) r4 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x8040) sendfile(r4, r4, 0x0, 0x7a680000) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x2, &(0x7f0000000380)=ANY=[], 0x1, 0x14fe, &(0x7f0000002a80)="$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") openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) unshare(0x64000400) socket(0xa, 0x801, 0x0) 9m27.482868492s ago: executing program 3 (id=2741): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4040080) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x90}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x4048015}, 0xc000) syz_io_uring_setup(0xfff, &(0x7f0000000000)={0x0, 0x9a81, 0x400, 0x2, 0x14d}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000140)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) rt_sigprocmask(0x0, &(0x7f0000001480)={[0xffffffffffffffff]}, 0x0, 0x8) r4 = getpgrp(0x0) getpgrp(0x0) r5 = gettid() rt_tgsigqueueinfo(r4, r5, 0x1f, &(0x7f00000003c0)={0x21, 0x5, 0x10004}) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x8000}}) 9m26.76090968s ago: executing program 3 (id=2742): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000001280), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000300)="ff", 0x1}], 0x1, 0x0, 0x0, 0x20000880}, 0x10044001) write$cgroup_pid(r0, &(0x7f0000000400), 0x12) recvmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x1) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x2000) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) 9m22.69331778s ago: executing program 3 (id=2746): close(0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000001280), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000300)="ff", 0x1}], 0x1, 0x0, 0x0, 0x20000880}, 0x10044001) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000400), 0x12) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x1) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x2000) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) 9m11.162474257s ago: executing program 3 (id=2769): r0 = socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ppoll(&(0x7f0000000180)=[{0xffffffffffffffff, 0xc000}, {r0, 0x4554}, {r1, 0x8}, {r2, 0x10}], 0x2000000000000094, &(0x7f0000000000)={0x0, 0x989680}, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) setsockopt$MRT6_TABLE(r0, 0x29, 0xcf, &(0x7f0000000000)=0xfe, 0x4) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000380)={0x0, 0x3f, "8487e02b03a39d31360af964f83b6efc5357e6adfb929bc535a3ca45d92d23bafe0ecd0cfae15230433f272f4796424667bdc9a62b48b0213f2b4a88773d36"}, &(0x7f0000000440)=0x47) recvmsg$unix(r1, &(0x7f0000002500)={&(0x7f0000002380), 0x6e, &(0x7f00000024c0)=[{&(0x7f0000002400)=""/177, 0xb1}], 0x1}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008890}, 0x24000000) mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/sem\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000240)={0x2020}, 0x2020) r5 = semget$private(0x0, 0x7, 0x180) r6 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a8, &(0x7f0000000140)={{@my=0x1, 0x5}, @local, 0x8, 0x1, 0x0, 0x9, 0x8, 0x7, 0xfffffffa}) r7 = socket$netlink(0x10, 0x3, 0x4) write(r7, 0x0, 0x0) semop(r5, &(0x7f0000000200)=[{0x3, 0x2, 0x800}], 0x1) read$FUSE(r4, &(0x7f0000005c40)={0x2020}, 0x2020) 8m54.992808769s ago: executing program 35 (id=2769): r0 = socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ppoll(&(0x7f0000000180)=[{0xffffffffffffffff, 0xc000}, {r0, 0x4554}, {r1, 0x8}, {r2, 0x10}], 0x2000000000000094, &(0x7f0000000000)={0x0, 0x989680}, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) setsockopt$MRT6_TABLE(r0, 0x29, 0xcf, &(0x7f0000000000)=0xfe, 0x4) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000380)={0x0, 0x3f, "8487e02b03a39d31360af964f83b6efc5357e6adfb929bc535a3ca45d92d23bafe0ecd0cfae15230433f272f4796424667bdc9a62b48b0213f2b4a88773d36"}, &(0x7f0000000440)=0x47) recvmsg$unix(r1, &(0x7f0000002500)={&(0x7f0000002380), 0x6e, &(0x7f00000024c0)=[{&(0x7f0000002400)=""/177, 0xb1}], 0x1}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008890}, 0x24000000) mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/sem\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000240)={0x2020}, 0x2020) r5 = semget$private(0x0, 0x7, 0x180) r6 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a8, &(0x7f0000000140)={{@my=0x1, 0x5}, @local, 0x8, 0x1, 0x0, 0x9, 0x8, 0x7, 0xfffffffa}) r7 = socket$netlink(0x10, 0x3, 0x4) write(r7, 0x0, 0x0) semop(r5, &(0x7f0000000200)=[{0x3, 0x2, 0x800}], 0x1) read$FUSE(r4, &(0x7f0000005c40)={0x2020}, 0x2020) 2.627339609s ago: executing program 2 (id=6237): timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x2}, &(0x7f00000000c0)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000009180)='./mnt/trace_pipe\x00', 0x0, 0x0) read(r1, &(0x7f00000091c0)=""/16384, 0x4000) 2.488445744s ago: executing program 2 (id=6239): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) connect$unix(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000080)=""/236, 0x1a, 0xec, 0x1}, 0x28) ioctl(r0, 0xc138fd06, &(0x7f0000000000)="0400000000000000000000003801") 2.488289074s ago: executing program 8 (id=6240): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000480)={&(0x7f0000000240)={0x1d, r1, 0x0, {0x2, 0xff, 0x3}, 0xfd}, 0x18, &(0x7f00000003c0)={&(0x7f00000002c0)="a0330a5a2cec6f5960", 0x9}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r2 = socket$nl_route(0x10, 0x3, 0x0) close(0x3) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, r3, {0x6, 0xc}, {0x5, 0x10}, {0xd, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) 2.322578436s ago: executing program 7 (id=6243): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000080000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050002"], 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) 2.320892086s ago: executing program 2 (id=6253): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x0, 0x1, 0x0, &(0x7f0000000540)="9c", 0x0, 0x0, 0x800006}, 0x50) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 2.29518123s ago: executing program 0 (id=6244): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000093c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r0, &(0x7f0000000000)={0x18, 0x0, r1, {0x7}}, 0x18) syz_fuse_handle_req(r0, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba5234400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b60dd7710000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048636662867d08f50000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x0, 0x80000000000000, {0x0, 0x1d}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x160) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x14, 0x0, 0x0) 2.181998131s ago: executing program 7 (id=6246): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000003c0)="a6", 0x1, 0x2404c081, &(0x7f0000000300)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) syz_mount_image$jfs(&(0x7f0000000100), &(0x7f00000002c0)='./bus\x00', 0x2010880, &(0x7f0000000300)=ANY=[@ANYBLOB="646973636172643d3078303030303030303030303030303030342c71756f74612c6572726f72733d636f6e74696e75652c646973636172643d3078303030303030303030303030303030342c756d61736b3d303430372c75737271756f74612c6572726f72733d72656d6f756e742d726f006e6f646973636172642c726573697a653d3078303030303030303030303031303030302c756d61736b3d3078301030303030303030303030303030322c71756f74612c67695b3d00"/199, @ANYRESHEX=0x0, @ANYBLOB=',resize=0x0000000000008045,resize,uid>', @ANYRESDEC, @ANYRES8], 0x1, 0x61fd, &(0x7f00000068c0)="$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") setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed', 0x9) shutdown(r0, 0x1) 2.124085433s ago: executing program 0 (id=6247): r0 = socket$packet(0x11, 0xa, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1c}}) write$tun(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) recvmmsg(r1, 0x0, 0x0, 0x10162, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) lseek(0xffffffffffffffff, 0x1100, 0x1) 2.108918236s ago: executing program 8 (id=6249): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@newtfilter={0x30, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xfff1, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 1.864021231s ago: executing program 6 (id=6251): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000380)='memory.stat\x00', 0x0, 0x0) pread64(r1, &(0x7f0000002540)=""/4091, 0xffffffffffffff24, 0x202d9) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@bridge_newneigh={0x28, 0x1d, 0xc01, 0x0, 0x0, {0x7, 0x0, 0x0, r4, 0x80, 0x32}, [@NDA_LLADDR={0xa, 0x2, @random}]}, 0x28}}, 0x0) 1.742719674s ago: executing program 0 (id=6252): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000000000)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r2, &(0x7f0000000280)={0x1f, 0xfffe}, 0xe) listen(r2, 0x0) accept4(r2, 0x0, 0x0, 0x80800) close_range(r0, 0xffffffffffffffff, 0x0) 1.685921114s ago: executing program 6 (id=6254): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x202, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101081, 0x0) syz_fuse_handle_req(r0, &(0x7f0000006380)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x28, 0x0, 0x9, {{0xf7fffffffffffffd, 0x3, 0xd8bef8474886e58c}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$lock(r2, 0x5, &(0x7f0000000200)={0x1, 0x0, 0x200000000000000}) 1.610361728s ago: executing program 0 (id=6255): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002980)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x4001ffe, 0xa68d7c519fc00ff1, 0xffbc, 0x6, 0x1d45, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000006380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x68cc, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r2, &(0x7f00000005c0)=[{&(0x7f0000000280)="c643", 0x2}, {0x0, 0x204}], 0x2) close(r0) 1.582707764s ago: executing program 8 (id=6256): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@newtfilter={0x478, 0x2c, 0xd27, 0x70bd2d, 0x2, {0x0, 0x0, 0x0, r5, {0xffff, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x448, 0x2, [@TCA_FLOW_POLICE={0x444, 0xa, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x10000000, 0x40, 0xdc2, 0x1000, {0x7, 0x1, 0xe, 0x6, 0x6, 0x1}, {0x0, 0x1, 0x94, 0x9, 0x401}, 0x9, 0x5, 0x6}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x6, 0x5, 0x5, 0x0, 0x1, 0x7, 0x4, 0x4, 0x7, 0x3e97, 0x5, 0x18, 0xd, 0xfff, 0x0, 0x5, 0x8, 0x6, 0x0, 0xfce, 0x9, 0x8, 0x5, 0xfff, 0x6, 0xf, 0x6, 0x0, 0x8, 0x5edaf873, 0x1, 0xffff, 0xf1, 0x7, 0x7fffffff, 0x7ff, 0x8, 0x5, 0x4, 0x963e, 0x3, 0x56, 0xfff, 0x875, 0x29c, 0x1000, 0x400, 0x2, 0x1, 0x9, 0x9, 0xfffffffe, 0x7, 0x400, 0xffffff81, 0x0, 0x9, 0x2000, 0x1e2, 0x5, 0xfffffff8, 0x4, 0x0, 0x0, 0x2, 0x7f, 0x0, 0x621, 0x0, 0xff, 0x1ff, 0x3, 0x0, 0x2, 0x9, 0x8, 0x5, 0x3568, 0x4, 0x10001, 0x4, 0x6, 0x5, 0x7fff, 0x4, 0x5, 0x877, 0x6, 0x7, 0x5, 0x7, 0x1, 0x1ff, 0x200, 0x0, 0x9, 0x8, 0x0, 0x7b, 0x3ff, 0x4e, 0xf, 0x3, 0x400, 0x101, 0xfffffff4, 0x1, 0x3, 0x2332, 0x732d4911, 0x9, 0x7, 0xa48, 0x6, 0x7fff, 0x8, 0x6, 0x8, 0xfffffffd, 0x18b, 0x9, 0x7fffffff, 0x5, 0x51e, 0xfffffff5, 0x5, 0x1, 0x7fffffff, 0x6, 0x5, 0x2, 0x0, 0x7ff, 0xa, 0x80000001, 0xde, 0x7a, 0x5, 0x3, 0x1, 0x2, 0x7, 0x6, 0x2792, 0x7, 0x1, 0x8, 0x5, 0x5, 0xa, 0x5, 0x7, 0x400, 0x7, 0x3, 0x2, 0x5, 0x2, 0x252, 0x5, 0x4, 0x40000, 0x3, 0x6, 0x101, 0x1, 0x10, 0x3, 0x4, 0xc, 0xfffff801, 0x8, 0x0, 0x1, 0x6, 0x80000000, 0x1c, 0xd810, 0x101, 0x8001, 0x80, 0x5, 0x1, 0xfffffff8, 0x800, 0x4, 0x9, 0x9, 0x90000000, 0x5, 0x8, 0x6, 0x3ff, 0x53b2, 0x0, 0x9, 0x7, 0x7f, 0x6, 0x1, 0x4, 0xc7, 0x5, 0x6, 0x5, 0x5, 0x7fff, 0x12bc, 0x3, 0xffffffff, 0x1, 0xd, 0xa64, 0x5, 0xfffffff9, 0x2, 0x8, 0x8, 0x200, 0x8, 0xe512, 0xb5, 0x3, 0x0, 0x9f, 0x0, 0x7f, 0x6, 0x1, 0x3b1c, 0xc7, 0x2, 0xfffffffc, 0xa0, 0x100, 0x2, 0x6, 0x101, 0x3ff, 0x2, 0x8, 0x70, 0xd5, 0xffffffff, 0xf, 0xc, 0x1, 0x401, 0xffffffff, 0x1, 0x19d, 0x10001, 0x8fde, 0x8, 0x9]}]}]}}]}, 0x478}, 0x1, 0x0, 0x0, 0x884}, 0x40) 1.344993038s ago: executing program 2 (id=6257): pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r1, 0x0, 0xf3a, 0x9) tee(r0, r4, 0xf3a, 0x4) write$binfmt_elf64(r2, &(0x7f0000000380)=ANY=[], 0x18c6) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 1.344879188s ago: executing program 6 (id=6258): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f00000000c0)=0x8000, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x6, @empty, 0x8}, 0x7e) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@random="5b1a033f2511", @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x64, 0x0, 0x0, 0x11, 0x0, @empty, @empty=0xe0000001}, {0x0, 0x4e20, 0x8}}}}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1.223956591s ago: executing program 6 (id=6259): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x200000c0}, 0xc041) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x3e) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a010400000000000000000500000a0900010073797a30000000005c000000030a010400000000000000000500000a0900010073797a30000000000900030073797a30000000002800048008000140000000000800024000000001140003006e657464657673696d3000000000000008000a4000000002"], 0x104}}, 0x0) 1.169427481s ago: executing program 8 (id=6260): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x39, 0xffffffff, 0x3, 0x180, 0x100, 0x10, 0xf1, 0xf, 0x10, 0x5, 0x200000000000, 0x26, 0x0, 0xa, 0x0, 0xbd9], 0xe000, 0x43180}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x7, 0x6, 0x4, 0x200000000000043, 0x2000004, 0x0, 0x2004cb, 0x0, 0xa7c, 0x9, 0x8, 0x8000000009, 0x803, 0x0, 0x9, 0x9], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0x10000, 0x8, 0x0, 0xb, 0xe6, 0x40, 0x0, 0x0, 0x81, 0x80}, {0x5000, 0x33000, 0xa, 0x0, 0x2, 0x5, 0x6, 0x6, 0x36, 0xd, 0x6, 0x89}, {0x0, 0x0, 0x9, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x5, 0xd}, {0x0, 0xeeee0000, 0x9, 0x6, 0x5, 0x42, 0xb, 0x0, 0x8, 0x7, 0xf}, {0xf000, 0x1000, 0xf, 0x2a, 0x17, 0x7, 0x1, 0x8, 0x7, 0x9, 0xf7, 0x97}, {0x200000, 0xffff1000, 0xc, 0xa0, 0xb1, 0x8, 0x3, 0x6, 0x82, 0x2f, 0x1, 0x7}, {0x54000, 0x10000, 0xf, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x1, 0x40, 0x70}, {0x9000, 0x4000, 0xa, 0x5, 0xcd, 0x7, 0x0, 0x9, 0x2, 0xc, 0xb0, 0x83}, {0x9000, 0x30}, {0xf000, 0x7}, 0xe0040010, 0x0, 0x3000, 0x2024, 0x1, 0x0, 0x100000, [0x6800000100000000, 0x5, 0x2, 0x20008]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.130996588s ago: executing program 6 (id=6261): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f000016c000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) socket$nl_rdma(0x10, 0x3, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) read(r0, &(0x7f0000000140)=""/153, 0x99) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xe, 0x10, r0, 0x6901b000) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f00000003c0)={{&(0x7f0000c67000/0x4000)=nil, 0x4000}}) 1.104489303s ago: executing program 7 (id=6262): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002140)={0x50, 0x0, r2, {0x7, 0x27, 0x0, 0x14a4014, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x100, 0xfffffffe}}, 0x50) read$FUSE(r0, &(0x7f000000b040)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r3}, 0x10) open_by_handle_at(r1, &(0x7f00000021c0)=ANY=[@ANYBLOB="1c0000008100"], 0xfeffffff) 1.025977428s ago: executing program 8 (id=6263): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$proc_mixer(r0, 0x0, 0x33) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x200840, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x5, 0x4445, &(0x7f000000cd00)="$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") ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) 1.024665248s ago: executing program 2 (id=6273): pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') r2 = memfd_create(&(0x7f0000000580)='D\xa3\xd5Wj\x00\x00x0\xc1\xac*`\xeb\xc7,\x1f\xe9B\x92\x06]\x16\x9d\x02\x1a\vG\xa9~vB\xbc\t\x00\x00\x00VoA\xaa\xbc\xee[\xe1\xa2\xe0\xff\x04\x00\x00\x00\\i\xcf\t\xb0\xa9 +H/\x1a\xe7\x95\xce\"\"\xbd\xf9\xd0\xc0\xa9\b\x98\xfc:\x1b\xc4\x80!\xfd\xa4\xcaN\x84\xadS\x8bqE\x99\x01t\xb1\x1f|\x99PL\x92\x8f\xc2\xf9\xcd\x8cj\x03X\x05\x17mwI\xf0\x01\xe5z\xcdJ)\xc7\xfa)\xaa}\xef\xbb\xf5\a\x00o5\x18\xd6\v\x85q\x98\x9bB\xb9\xea\xe7\xff\x7f\x00\x00T\xc0\xd2\t?\bpBl\xf4*8\xc6\xe5\x06P\xc11\f^\x7f\x8e\xc1\xd1Wra\x19)\xe3\x8f\xd9\x9f\x15\x1e\xf2\x18\r\xad\b\xe0\x96NH\x85\r+\xfc\xb3\xdd\xddhg \x03\xa7\x92\xff\x00+h\xb7@#K\x9cMY\xd3\x9b\b-G\xb1\xdaS\x81\xb2\x93\xb83\x8a\x94*\x8d\\\b\xff/\xa1\xc0\xf9&\xd3M\xf6\n\xff\x83k\xe6\rDa\x16\xbd\x00\x02\xdfi\x00\xd5)\xa4\x80\xad\x97\'\x1b\xfd}\x96&\xd2\x0eGp\x8e\x1a\x19o\xf1\x14\xe2]J\xf2\xb5h\x9bt*\xd2\xfbT\x01ci\x87\x18\xc9\x13=\x1b\xadl;}\x9d\xbe\x9a\xee\x1a\xfc\x96 \x93\x12@\x19|f\x98\xdc,\x82SlA\t\xcb\xfe\xccSKO}\xb2U\xd6\xc5\xa7=\xf8s\x1dp\xe0\x14\xe5\x92\xfd)\bB\xcd\xc2`OE\x8e\xf0\xf9\xd2!KZ%\xad\xa1\x92b\x1e%\x9f!\xd8mV$\x1d?\xc2\f\xcc\xc5x\x9fJ#\xce\x90\xc5\x82\xfb\x97\xd2\xb7\xb5\xed\xb5\'J\xfc\xf4Z.\rS\x88\f\xd0zK\xc7\x81\xbe\xd5\xc2\xce\x89\xbc\x1e\xb78\xf6Z\xd5\x1b\xf1\x9bMD\f\xf6\xc5V\xe1\x12j\xdfW\x87\xf09\n\x1e\x1b\f\xe5p\xab\x9e\xe5}\x96\x9b\xea\x86\x0f\xca\xcf\x16\x96\x0e6\x8d\x11\xd2&\"eKKV\x8b?]<\xa7]\x93\xad\x1d\xfe\x13\xee\xca\xdc\x97\xa9\a\b\xac\xdd\xa0\xfe\x97\xa1?\xa2F\xae\xb7f\x85\xda', 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0xff, 0x0, 0x8, 0x0, 0x3ffd, 0xa462}, 0x0, &(0x7f0000000100)={0x8, 0x1, 0x6d, 0x1, 0x3, 0x2, 0x100000000, 0x40000000000}, 0x0, 0x0) write(r2, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) r3 = dup3(r1, r0, 0x0) fchdir(r3) creat(&(0x7f0000000040)='./bus\x00', 0x0) 992.257174ms ago: executing program 7 (id=6264): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000480)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x40) setpgid(0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x482, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7, r0, 0x0}]) 652.008348ms ago: executing program 7 (id=6265): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b179000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f968000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x61, {0x0, 0xc}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) dup2(r2, r0) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000100)={0xfffffffffffffeab, 0x1, 0x0, {0x2}}, 0xffffffe8) 632.260181ms ago: executing program 0 (id=6266): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000300)={0x48, r1, 0xb97534d5fe9704cf, 0x1, 0xffffffff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x7fc}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x2c9}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x80}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x404c000}, 0x0) 456.434854ms ago: executing program 0 (id=6267): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000200)={0x20, 0x1f}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000012c0)={0x2c, &(0x7f0000001140)={0x0, 0x31}, 0x0, 0x0, 0x0, 0x0}) 315.86095ms ago: executing program 8 (id=6268): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0xfff7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0) write$tun(r0, &(0x7f0000001380)={@val={0x8, 0x800}, @val={0x4, 0x0, 0x2, 0xe7b6, 0x14, 0x2}, @mpls={[], @ipv6=@generic={0x0, 0x6, "a31541", 0x0, 0x32, 0x0, @local, @mcast2}}}, 0x36) 156.01843ms ago: executing program 7 (id=6269): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1ec) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f00000002c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) getdents(r0, 0x0, 0x58) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) getdents64(r1, 0x0, 0x22) 86.512353ms ago: executing program 2 (id=6270): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000000)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r1, @ANYBLOB="010028bd7000fedbdf252100000008000300", @ANYRES32=r3], 0xa8}, 0x1, 0x0, 0x0, 0x4000008}, 0x20000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000500)={0x0, 0x16, &(0x7f0000000600)={&(0x7f0000000240)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}}, 0x0) 0s ago: executing program 6 (id=6271): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000080)={0x1, 0x0, 0xff7f5f11, 0xfffd, 0xfffffffffffffffb, 0x8001, 0xfffffffffffffffa, 0x1fe, 0x4a, 0x28, 0x4, 0x2}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r2, 0xc0984124, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) kernel console output (not intermixed with test programs): 4967295 subj=unconfined pid=14640 comm="syz.6.2336" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc8cc99e159 code=0x0 [ 1063.599462][ C1] vkms_vblank_simulate: vblank timer overrun [ 1067.338594][T14708] loop6: detected capacity change from 0 to 64 [ 1068.923577][T14720] loop2: detected capacity change from 0 to 4096 [ 1069.081649][T14720] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1069.136916][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 1072.404101][T14744] overlayfs: failed to clone upperpath [ 1072.422784][T14744] overlayfs: missing 'lowerdir' [ 1074.012699][T14764] loop7: detected capacity change from 0 to 512 [ 1074.155480][T14764] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 1074.265322][T14764] System zones: 1-12 [ 1074.405655][T14764] EXT4-fs error (device loop7): ext4_xattr_inode_iget:401: inode #12: comm syz.7.2361: missing EA_INODE flag [ 1074.449158][T14764] EXT4-fs error (device loop7): ext4_xattr_inode_iget:406: comm syz.7.2361: error while reading EA inode 12 err=-117 [ 1074.491288][T14764] EXT4-fs (loop7): 1 orphan inode deleted [ 1074.526070][T14764] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1075.726609][T14791] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1077.246223][T13161] EXT4-fs (loop7): unmounting filesystem. [ 1077.703959][T11562] Bluetooth: hci4: command 0x0405 tx timeout [ 1080.273973][T14831] loop2: detected capacity change from 0 to 4096 [ 1080.394162][T14831] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1080.561037][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 1088.149433][T14889] loop7: detected capacity change from 0 to 2048 [ 1088.170356][T14893] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2389'. [ 1088.484777][T14889] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1088.494054][T14889] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1089.347962][T14916] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.2388: bg 0: block 345: padding at end of block bitmap is not set [ 1089.653051][T14916] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 16 with error 117 [ 1090.444672][T14916] EXT4-fs (loop7): This should not happen!! Data will be lost [ 1090.444672][T14916] [ 1091.715240][T14950] overlayfs: failed to clone upperpath [ 1091.774271][T14951] fuse: Bad value for 'fd' [ 1091.965163][T10759] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 15 with error 28 [ 1092.019368][T10759] EXT4-fs (loop7): This should not happen!! Data will be lost [ 1092.019368][T10759] [ 1092.087211][T10759] EXT4-fs (loop7): Total free blocks count 0 [ 1092.223819][T10759] EXT4-fs (loop7): Free/Dirty block details [ 1092.254157][T10759] EXT4-fs (loop7): free_blocks=0 [ 1092.270618][T10759] EXT4-fs (loop7): dirty_blocks=32 [ 1092.385925][T14957] loop6: detected capacity change from 0 to 8 [ 1092.607751][T10759] EXT4-fs (loop7): Block reservation details [ 1092.671135][T14957] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1092.775927][T14957] SQUASHFS error: Failed to read block 0x9b: -5 [ 1092.833838][T14957] SQUASHFS error: Unable to read metadata cache entry [99] [ 1092.936368][T14957] SQUASHFS error: Unable to read inode 0x127 [ 1095.928407][T15007] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2407'. [ 1096.567747][T15007] syz.3.2407 (15007) used greatest stack depth: 17472 bytes left [ 1096.790694][T15014] binder: 15012:15014 ioctl 40046205 0 returned -22 [ 1097.788356][ T26] audit: type=1326 audit(1790718365.678:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15012 comm="syz.6.2410" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc8cc99e159 code=0x0 [ 1097.866934][T15014] loop6: detected capacity change from 0 to 512 [ 1097.974420][T15014] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1098.159576][T15014] EXT4-fs (loop6): unmounting filesystem. [ 1101.930807][ T26] audit: type=1326 audit(1790718369.818:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15059 comm="syz.6.2422" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc8cc99e159 code=0x0 [ 1102.563882][ T4288] Bluetooth: hci4: command 0x0406 tx timeout [ 1105.960973][T15112] tipc: Enabling of bearer rejected, failed to enable media [ 1106.045690][T15100] loop6: detected capacity change from 0 to 4096 [ 1106.222371][T15100] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1107.133048][T15132] blktrace: Concurrent blktraces are not allowed on sg0 [ 1111.003747][T13090] EXT4-fs (loop6): unmounting filesystem. [ 1112.667444][ T26] audit: type=1800 audit(1790718380.028:211): pid=15165 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2437" name="product" dev="configfs" ino=67717 res=0 errno=0 [ 1112.688572][ C1] vkms_vblank_simulate: vblank timer overrun [ 1113.228345][T15173] netlink: 'syz.3.2440': attribute type 1 has an invalid length. [ 1116.419744][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.426131][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.857455][T15215] loop7: detected capacity change from 0 to 4096 [ 1116.930589][T15215] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1117.577012][T13161] EXT4-fs (loop7): unmounting filesystem. [ 1125.816836][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1126.565888][T15298] proc: Unknown parameter 'trans' [ 1126.572816][T15298] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1128.088692][T15317] loop2: detected capacity change from 0 to 256 [ 1128.096127][T15317] FAT-fs (loop2): Unrecognized mount option "hortname=mixed" or missing value [ 1138.828630][T15413] overlayfs: missing 'lowerdir' [ 1140.241686][T15430] xt_hashlimit: size too large, truncated to 1048576 [ 1147.079812][T15480] loop7: detected capacity change from 0 to 40427 [ 1147.107416][T15480] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 1147.115372][T15480] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 1147.138387][T15480] F2FS-fs (loop7): invalid crc value [ 1147.195701][T15480] F2FS-fs (loop7): Found nat_bits in checkpoint [ 1147.244560][T15480] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 1147.251661][T15480] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 1150.633875][T15524] netlink: 'syz.2.2509': attribute type 4 has an invalid length. [ 1152.179353][ T26] audit: type=1107 audit(1790718419.798:212): pid=15522 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='1' [ 1152.936170][T15533] tipc: Enabling of bearer rejected, already enabled [ 1153.111823][T15545] loop2: detected capacity change from 0 to 1024 [ 1157.373322][T15600] tipc: Enabled bearer , priority 0 [ 1158.225207][T15597] tipc: Disabling bearer [ 1160.539325][T15623] loop2: detected capacity change from 0 to 4096 [ 1160.596641][T15623] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1160.646364][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 1163.257292][T15667] loop2: detected capacity change from 0 to 8 [ 1164.220270][T15667] SQUASHFS error: Failed to read block 0x4de: -5 [ 1164.229901][T15667] SQUASHFS error: Failed to read block 0x4de: -5 [ 1164.246481][ T26] audit: type=1800 audit(1790718432.128:213): pid=15667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2540" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 1165.153877][T15666] device syzkaller0 entered promiscuous mode [ 1165.186971][T15666] tipc: Enabled bearer , priority 0 [ 1165.279461][T15665] tipc: Resetting bearer [ 1167.550449][T15665] tipc: Disabling bearer [ 1167.578256][T15684] loop6: detected capacity change from 0 to 4096 [ 1167.718975][T15684] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1169.123640][T13090] EXT4-fs (loop6): unmounting filesystem. [ 1172.343274][T15720] tipc: Enabling of bearer rejected, failed to enable media [ 1173.866434][T15748] loop7: detected capacity change from 0 to 4096 [ 1173.896123][T15749] device syzkaller0 entered promiscuous mode [ 1173.903480][T15748] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1173.951895][T13161] EXT4-fs (loop7): unmounting filesystem. [ 1174.017180][T15749] tipc: Started in network mode [ 1174.038953][T15749] tipc: Node identity 080211, cluster identity 4711 [ 1174.079199][T15749] tipc: Enabled bearer , priority 0 [ 1175.371722][ T1192] tipc: Node number set to 134353152 [ 1176.195716][T15772] loop6: detected capacity change from 0 to 2048 [ 1177.298396][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.304912][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.708117][T15777] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1179.396625][T15798] input: syz0 as /devices/virtual/input/input10 [ 1182.566838][T15812] Attempt to restore checkpoint with obsolete wellknown handles [ 1186.499477][T15842] tipc: Enabling of bearer rejected, already enabled [ 1188.818225][T15866] loop2: detected capacity change from 0 to 2048 [ 1190.390906][T15868] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1190.876919][T15873] tipc: Resetting bearer [ 1191.949214][T15890] loop6: detected capacity change from 0 to 256 [ 1192.086306][T15890] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1192.148664][T15890] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1192.219441][ T26] audit: type=1804 audit(1790718460.108:214): pid=15890 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.2596" name="/newroot/88/file0/file0" dev="loop6" ino=1048684 res=1 errno=0 [ 1192.536884][T15902] loop6: detected capacity change from 0 to 4096 [ 1192.572677][T15902] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1192.815853][T13090] EXT4-fs (loop6): unmounting filesystem. [ 1194.491702][T15925] tipc: Enabling of bearer rejected, already enabled [ 1199.751088][T15973] tipc: Enabling of bearer rejected, already enabled [ 1200.875898][T15986] loop6: detected capacity change from 0 to 2048 [ 1201.002278][T15986] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1201.401737][T15997] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1202.061050][T13090] EXT4-fs (loop6): unmounting filesystem. [ 1204.224185][T16013] ip_tables: iptables: counters copy to user failed while replacing table [ 1206.100658][T16046] tipc: Enabling of bearer rejected, already enabled [ 1206.716241][T16067] loop2: detected capacity change from 0 to 4096 [ 1207.396133][T16070] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1209.589942][T16091] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2634'. [ 1209.670843][T16091] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2634'. [ 1211.034185][T16112] loop6: detected capacity change from 0 to 1024 [ 1211.056049][T16112] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1211.093878][T11819] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 1211.355612][T11819] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 57343, setting to 64 [ 1211.454372][T11819] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 1211.582237][T11819] usb 3-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 1211.673575][T11819] usb 3-1: New USB device strings: Mfr=1, Product=66, SerialNumber=3 [ 1211.766783][T11819] usb 3-1: Product: syz [ 1211.773910][T11819] usb 3-1: Manufacturer: syz [ 1211.778668][T11819] usb 3-1: SerialNumber: syz [ 1211.805958][T11819] usb 3-1: config 0 descriptor?? [ 1211.811617][T16107] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1211.930580][T11819] usb 3-1: can't set config #0, error -71 [ 1211.961720][T11819] usb 3-1: USB disconnect, device number 9 [ 1216.642929][T16172] loop7: detected capacity change from 0 to 256 [ 1216.670606][T16172] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 1216.690392][ T26] audit: type=1800 audit(1790718484.578:215): pid=16172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2649" name="file1" dev="loop7" ino=1048685 res=0 errno=0 [ 1218.451379][T16192] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2655'. [ 1218.475335][T16192] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2655'. [ 1218.593693][T16192] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2655'. [ 1232.322787][T16333] ip_tables: iptables: counters copy to user failed while replacing table [ 1236.158724][T16356] fuse: Unknown parameter '0x0000000000000005' [ 1238.861648][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.868119][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.311759][T16400] ubi0: attaching mtd0 [ 1239.328946][T16400] ubi0: scanning is finished [ 1239.405399][T16400] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1240.015873][T16400] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1241.615769][T16408] ip_tables: iptables: counters copy to user failed while replacing table [ 1242.116491][T16409] loop6: detected capacity change from 0 to 4096 [ 1242.197341][T16409] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1242.384368][T13090] EXT4-fs (loop6): unmounting filesystem. [ 1247.148317][T15235] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1247.314429][T16476] ubi0: attaching mtd0 [ 1247.324175][T16476] ubi0: scanning is finished [ 1247.328920][T16476] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1247.897673][T16476] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1248.429283][T16481] loop2: detected capacity change from 0 to 4096 [ 1248.671986][T16483] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1248.685091][T16483] infiniband syz5: RDMA CMA: cma_listen_on_dev, error -98 [ 1248.795265][T16481] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1248.897377][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 1251.725336][T16519] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2716'. [ 1251.739989][T16519] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2716'. [ 1251.932215][T16519] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2716'. [ 1254.735114][T16559] loop7: detected capacity change from 0 to 4096 [ 1254.883262][T16559] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1255.688943][T13161] EXT4-fs (loop7): unmounting filesystem. [ 1257.549690][T16577] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2729'. [ 1260.179924][T16613] loop2: detected capacity change from 0 to 4096 [ 1260.312199][T16613] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1260.389847][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 1260.591716][T16626] futex_wake_op: syz.3.2739 tries to shift op by 144; fix this program [ 1265.447824][ T26] audit: type=1800 audit(1790718533.338:216): pid=16666 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2745" name="id" dev="configfs" ino=72140 res=0 errno=0 [ 1269.444010][ T22] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1271.076799][ T22] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1271.924377][ T22] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1272.029136][ T22] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1272.100008][ T22] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1272.160025][ T22] usb 7-1: config 0 descriptor?? [ 1272.311086][ T22] usb 7-1: can't set config #0, error -71 [ 1272.450620][T16726] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1273.054935][ T22] usb 7-1: USB disconnect, device number 6 [ 1274.564800][T16749] loop6: detected capacity change from 0 to 4096 [ 1274.728837][T16749] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1274.774957][T13090] EXT4-fs (loop6): unmounting filesystem. [ 1279.358569][T16794] loop6: detected capacity change from 0 to 4096 [ 1279.373572][T16794] ntfs3: Unknown parameter '1' [ 1279.469398][T16792] loop2: detected capacity change from 0 to 4096 [ 1281.569270][T16792] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1281.618084][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 1282.243704][T16691] I/O error, dev loop6, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1282.745134][T16823] loop6: detected capacity change from 0 to 4096 [ 1282.949197][T16823] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1282.995547][T13090] EXT4-fs (loop6): unmounting filesystem. [ 1284.353012][ T26] audit: type=1326 audit(1790718552.118:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16829 comm="syz.2.2777" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5cd3f9e159 code=0x0 [ 1287.542541][T16862] overlayfs: failed to clone upperpath [ 1288.442130][ T26] audit: type=1800 audit(1790718556.328:218): pid=16875 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2784" name="id" dev="configfs" ino=73218 res=0 errno=0 [ 1288.723801][T16879] loop2: detected capacity change from 0 to 4096 [ 1288.944337][T16879] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1288.984324][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 1289.291832][T16890] input: syz0 as /devices/virtual/input/input11 [ 1294.755282][T16927] loop7: detected capacity change from 0 to 4096 [ 1294.925683][T16927] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1295.014797][T13161] EXT4-fs (loop7): unmounting filesystem. [ 1296.062831][T11562] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1296.075100][T11562] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1296.083555][T11562] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1296.091526][T11562] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1296.099271][T11562] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1296.106815][T11562] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1296.340428][T16950] tipc: Enabling of bearer rejected, already enabled [ 1297.277950][ T26] audit: type=1800 audit(1790718565.168:219): pid=16965 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2801" name="id" dev="configfs" ino=72499 res=0 errno=0 [ 1298.611320][T16944] Bluetooth: hci1: command 0x0409 tx timeout [ 1299.858705][T16935] chnl_net:caif_netlink_parms(): no params data found [ 1300.173114][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.186852][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.363132][T16985] loop6: detected capacity change from 0 to 4096 [ 1300.401214][T16985] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1300.551489][T13090] EXT4-fs (loop6): unmounting filesystem. [ 1300.570205][T16935] bridge0: port 1(bridge_slave_0) entered blocking state [ 1300.644026][T16944] Bluetooth: hci1: command 0x041b tx timeout [ 1300.655061][T16935] bridge0: port 1(bridge_slave_0) entered disabled state [ 1300.663221][T16935] device bridge_slave_0 entered promiscuous mode [ 1301.701273][T16935] bridge0: port 2(bridge_slave_1) entered blocking state [ 1301.773907][T16935] bridge0: port 2(bridge_slave_1) entered disabled state [ 1301.884094][T16935] device bridge_slave_1 entered promiscuous mode [ 1301.982634][T16855] bridge0: port 3(syz_tun) entered disabled state [ 1302.150577][T16855] device syz_tun left promiscuous mode [ 1302.184428][T16855] bridge0: port 3(syz_tun) entered disabled state [ 1302.337459][T16935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1302.415383][T16935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1302.839572][T16944] Bluetooth: hci1: command 0x040f tx timeout [ 1303.011853][T16935] team0: Port device team_slave_0 added [ 1304.003003][T16935] team0: Port device team_slave_1 added [ 1304.019748][T17018] tipc: Enabling of bearer rejected, already enabled [ 1304.091587][T16935] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1304.159459][T16935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1304.283645][T17025] input: syz0 as /devices/virtual/input/input12 [ 1304.471159][T16935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1304.631584][T16935] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1304.674698][T16935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1305.823932][T16944] Bluetooth: hci1: command 0x0419 tx timeout [ 1305.924868][T16935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1306.006798][T16935] device hsr_slave_0 entered promiscuous mode [ 1306.115239][T16935] device hsr_slave_1 entered promiscuous mode [ 1306.145198][T16935] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1306.152778][T16935] Cannot create hsr debugfs directory [ 1306.514927][T17048] loop6: detected capacity change from 0 to 4096 [ 1306.707295][T17048] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1306.824568][T13090] EXT4-fs (loop6): unmounting filesystem. [ 1309.492205][T16935] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1309.586088][T16935] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1309.668720][T16935] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1309.831645][T16935] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1310.935300][T16935] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1311.532956][T10765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1311.624819][T10765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1311.686763][T16935] 8021q: adding VLAN 0 to HW filter on device team0 [ 1311.784685][T10765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1311.839214][T10765] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1312.666824][T10765] bridge0: port 1(bridge_slave_0) entered blocking state [ 1312.674251][T10765] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1312.684242][T10765] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1312.751383][T10759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1312.801269][T10759] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1312.818475][T10759] bridge0: port 2(bridge_slave_1) entered blocking state [ 1312.825988][T10759] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1312.845019][T17085] tipc: Enabling of bearer rejected, already enabled [ 1313.618975][T10759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1313.739436][T10759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1313.764430][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1313.792896][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1313.814443][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1313.887541][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1313.920048][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1313.947695][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1314.195009][T17101] loop6: detected capacity change from 0 to 4096 [ 1314.348476][T17101] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1314.358837][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1314.389125][T16935] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1314.401877][T13090] EXT4-fs (loop6): unmounting filesystem. [ 1314.486241][T16935] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1315.414725][T10759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1315.431076][T10759] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1317.068276][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1317.093328][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1317.147539][T16935] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1317.499665][T17148] device syzkaller0 entered promiscuous mode [ 1317.545226][T17148] tipc: Enabled bearer , priority 0 [ 1317.647203][T17147] tipc: Resetting bearer [ 1317.728031][T17147] tipc: Disabling bearer [ 1321.290438][T10734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1321.315337][T10734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1321.387703][T10734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1321.418225][T10734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1321.432244][T16935] device veth0_vlan entered promiscuous mode [ 1321.442516][T10734] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1321.468507][T10734] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1321.526143][T16935] device veth1_vlan entered promiscuous mode [ 1322.197661][ T4919] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1322.208330][ T4919] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1322.217095][ T4919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1322.265767][ T4919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1322.310203][T16935] device veth0_macvtap entered promiscuous mode [ 1322.362723][ T4919] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1322.377316][T16935] device veth1_macvtap entered promiscuous mode [ 1322.457035][T16935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1322.498080][T16935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1322.539185][T16935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1322.589639][T16935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1322.623253][T16935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1322.683965][T16935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1322.727395][T16935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1322.762586][T16935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1322.801242][T16935] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1322.862650][ T4919] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1322.902183][ T4919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1322.969722][T16935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1323.001777][T16935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1323.034472][T16935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1323.053824][T16935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1323.073847][T16935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1323.104454][T16935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1323.134733][T16935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1323.175140][T16935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1323.186947][T16935] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1323.209095][T17209] loop2: detected capacity change from 0 to 1024 [ 1323.233694][T16935] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1324.028517][T16935] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1324.037634][T16935] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1324.046598][T16935] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1324.057778][ T4919] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1324.456326][ T4919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1324.990809][T17217] device wlan0 left promiscuous mode [ 1327.719039][ T5123] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1327.765073][ T5123] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1327.847714][ T5123] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1327.895505][T10631] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1327.912493][T10631] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1327.970704][T10631] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1329.956022][T17273] SET target dimension over the limit! [ 1331.494693][T17289] loop7: detected capacity change from 0 to 64 [ 1332.454309][T13161] hfs: node 4:3 still has 1 user(s)! [ 1333.617447][T17308] tipc: Enabling of bearer rejected, failed to enable media [ 1334.178717][T17313] loop7: detected capacity change from 0 to 1024 [ 1334.317874][T17313] EXT4-fs: Ignoring removed bh option [ 1335.664598][T17313] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1335.702274][T17313] ext4 filesystem being mounted at /123/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1335.909255][T17331] EXT4-fs error (device loop7): ext4_map_blocks:747: inode #15: block 3: comm syz.7.2863: lblock 3 mapped to illegal pblock 3 (length 1) [ 1335.931956][T17331] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 1335.944508][T17331] EXT4-fs (loop7): This should not happen!! Data will be lost [ 1335.944508][T17331] [ 1335.979275][T17332] EXT4-fs error (device loop7): ext4_map_blocks:747: inode #15: comm syz.7.2863: lblock 0 mapped to illegal pblock 0 (length 1) [ 1336.003130][T17332] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 1336.016071][T17332] EXT4-fs (loop7): This should not happen!! Data will be lost [ 1336.016071][T17332] [ 1336.035801][T17331] tmpfs: Unknown parameter '' [ 1336.874018][T17349] loop8: detected capacity change from 0 to 4096 [ 1337.083193][T17349] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1337.125210][T17325] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 1337.153533][T16935] EXT4-fs (loop8): unmounting filesystem. [ 1337.379706][T13161] EXT4-fs (loop7): unmounting filesystem. [ 1342.710122][T17403] loop8: detected capacity change from 0 to 4096 [ 1342.851830][T17403] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1342.924236][T16935] EXT4-fs (loop8): unmounting filesystem. [ 1344.478812][T17429] ieee802154 phy0 wpan0: encryption failed: -22 [ 1344.573387][T17430] Cannot find add_set index 0 as target [ 1344.714116][T11819] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1345.573937][T11819] usb 3-1: Using ep0 maxpacket: 16 [ 1348.209619][T11819] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1348.272127][T11819] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1348.351506][T17455] input: syz0 as /devices/virtual/input/input13 [ 1348.368425][T11819] usb 3-1: can't read configurations, error -71 [ 1348.632340][T17462] loop2: detected capacity change from 0 to 1024 [ 1349.292797][T17467] loop7: detected capacity change from 0 to 4096 [ 1349.502608][T17467] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1349.585125][T13161] EXT4-fs (loop7): unmounting filesystem. [ 1353.453621][T17508] overlayfs: failed to clone upperpath [ 1353.805184][T17513] device syzkaller0 entered promiscuous mode [ 1354.042818][T17529] tipc: Enabling of bearer rejected, already enabled [ 1355.218684][T17536] loop6: detected capacity change from 0 to 4096 [ 1355.416706][T17536] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1355.492559][T13090] EXT4-fs (loop6): unmounting filesystem. [ 1356.097876][T17550] futex_wake_op: syz.8.2910 tries to shift op by 144; fix this program [ 1356.140689][T17550] loop8: detected capacity change from 0 to 256 [ 1356.232571][T17551] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1357.223241][T17550] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 1357.276180][ T26] audit: type=1800 audit(1790718625.168:220): pid=17548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2910" name="file1" dev="loop8" ino=1048692 res=0 errno=0 [ 1357.694600][T17559] Cannot find add_set index 0 as target [ 1358.935267][T17566] tipc: Enabling of bearer rejected, already enabled [ 1361.580764][T17581] loop6: detected capacity change from 0 to 4096 [ 1361.607779][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.614246][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.639921][T17581] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1362.482570][T13090] EXT4-fs (loop6): unmounting filesystem. [ 1362.548432][T17599] loop7: detected capacity change from 0 to 512 [ 1362.574656][T17599] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1362.622184][T17599] ext4: Unknown parameter 'fsname' [ 1363.843898][ T6010] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1364.383549][ T6010] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1364.414679][ T6010] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1364.432461][ T6010] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1364.442356][ T6010] usb 7-1: Product: syz [ 1364.446955][ T6010] usb 7-1: Manufacturer: syz [ 1364.452217][ T6010] usb 7-1: SerialNumber: syz [ 1364.732739][ T6010] usblp 7-1:1.0: usblp1: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1365.561889][ T22] usb 7-1: USB disconnect, device number 7 [ 1365.611305][ T22] usblp1: removed [ 1369.573020][T17648] loop7: detected capacity change from 0 to 4096 [ 1369.775109][T17648] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1369.805847][T13161] EXT4-fs (loop7): unmounting filesystem. [ 1371.498394][T17663] jffs2: notice: (17663) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1371.517585][T17673] loop6: detected capacity change from 0 to 164 [ 1372.506124][T17691] loop2: detected capacity change from 0 to 128 [ 1374.176000][T17649] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1374.667181][T17704] loop6: detected capacity change from 0 to 4096 [ 1374.812463][T17704] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1374.876480][T17703] loop8: detected capacity change from 0 to 40427 [ 1374.884379][T17703] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 1374.892156][T17703] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 1374.902231][T17703] F2FS-fs (loop8): invalid crc value [ 1375.701609][T13090] EXT4-fs (loop6): unmounting filesystem. [ 1375.711641][T17702] tipc: Enabling of bearer rejected, already enabled [ 1375.729152][T17703] F2FS-fs (loop8): Found nat_bits in checkpoint [ 1375.793416][T17703] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 1375.800819][T17703] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 1377.818075][T17746] tmpfs: Unknown parameter 'quota' [ 1377.889712][T17740] block device autoloading is deprecated and will be removed. [ 1377.901530][T17740] syz.6.2954: attempt to access beyond end of device [ 1377.901530][T17740] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1378.970309][T17753] tipc: Enabling of bearer rejected, already enabled [ 1379.239862][T17758] IPVS: set_ctl: invalid protocol: 29 100.1.1.0:20003 [ 1380.995277][T17774] tipc: Enabling of bearer rejected, already enabled [ 1382.491724][T17791] netlink: 'syz.8.2967': attribute type 1 has an invalid length. [ 1386.817875][T17835] tipc: Enabling of bearer rejected, already enabled [ 1386.991944][T17841] lo speed is unknown, defaulting to 1000 [ 1387.098858][T17841] lo speed is unknown, defaulting to 1000 [ 1387.125141][T17841] lo speed is unknown, defaulting to 1000 [ 1387.978237][T17849] loop6: detected capacity change from 0 to 256 [ 1387.988405][T17849] exfat: Deprecated parameter 'namecase' [ 1387.994323][T17849] exfat: Deprecated parameter 'namecase' [ 1388.195010][T17841] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1388.209310][T17849] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 1388.533001][T17841] lo speed is unknown, defaulting to 1000 [ 1388.549634][T17841] lo speed is unknown, defaulting to 1000 [ 1388.574489][T17841] lo speed is unknown, defaulting to 1000 [ 1388.594406][T17841] lo speed is unknown, defaulting to 1000 [ 1388.624677][T17841] lo speed is unknown, defaulting to 1000 [ 1388.650613][T17841] lo speed is unknown, defaulting to 1000 [ 1390.377693][T17876] using random self ethernet address [ 1390.518513][T17872] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1390.533383][T17872] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1390.662364][T17876] using random host ethernet address [ 1390.733243][ T6010] usb 1-1: USB disconnect, device number 10 [ 1390.772632][ T6010] usblp0: removed [ 1391.321065][T17893] tipc: Started in network mode [ 1391.376881][T17893] tipc: Node identity 26f01045bd2d, cluster identity 4711 [ 1391.480290][T17893] tipc: Enabled bearer , priority 0 [ 1391.836429][T17906] tipc: Resetting bearer [ 1392.025385][T17892] tipc: Disabling bearer [ 1393.093655][T17924] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2993'. [ 1393.152344][T17924] tipc: Enabling of bearer rejected, failed to enable media [ 1395.804730][T17966] tipc: Enabling of bearer rejected, already enabled [ 1400.562845][T18016] tipc: Enabling of bearer rejected, already enabled [ 1403.240820][T18068] tipc: Enabling of bearer rejected, already enabled [ 1403.445054][T17230] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1403.509936][T18071] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1403.538203][T18071] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1403.665468][T17230] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1403.694786][T17230] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1403.715760][T17230] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1403.751072][T17230] usb 3-1: Product: syz [ 1403.768887][T17230] usb 3-1: Manufacturer: syz [ 1403.782013][T17230] usb 3-1: SerialNumber: syz [ 1405.123405][T17230] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1405.911064][ T6007] usb 3-1: USB disconnect, device number 12 [ 1405.947579][ T6007] usblp0: removed [ 1408.085107][T18107] tipc: Enabling of bearer rejected, already enabled [ 1410.018395][T18129] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1413.782833][T18154] tipc: Enabling of bearer rejected, already enabled [ 1414.653896][ T6007] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1415.415329][T18179] ALSA: mixer_oss: invalid OSS volume 'PHl6qӆONEOUT' [ 1415.431370][T18179] ALSA: mixer_oss: invalid index 1374389 [ 1415.457163][T18183] tipc: Enabling of bearer rejected, already enabled [ 1415.610228][ T6007] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1415.621303][ T6007] usb 9-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 1415.641731][ T6007] usb 9-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 1415.651032][ T6007] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1415.680483][T18185] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3061'. [ 1415.716065][T18185] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3061'. [ 1416.554626][T11819] Process accounting resumed [ 1416.784656][T18197] tipc: Enabling of bearer rejected, already enabled [ 1417.766634][ T6007] cxacru 9-1:1.0: send of cm 0x90 failed (-104) [ 1417.776613][ T6007] cxacru 9-1:1.0: usbatm_usb_probe: invalid endpoint 02! [ 1417.854572][ T6007] cxacru: probe of 9-1:1.0 failed with error -22 [ 1418.006893][ T6007] usb 9-1: USB disconnect, device number 2 [ 1419.405296][T18219] loop8: detected capacity change from 0 to 4096 [ 1419.414663][T18219] ntfs3: Unknown parameter '1' [ 1420.659325][T18224] tipc: Enabling of bearer rejected, already enabled [ 1421.594251][T18233] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1421.620850][T18233] CIFS: Attempting to mount \\127.0.0.1\share [ 1421.628399][T18233] CIFS: VFS: No username specified [ 1421.636527][T18235] device syzkaller0 entered promiscuous mode [ 1421.670976][T18235] tipc: Enabled bearer , priority 0 [ 1421.747271][T18235] tipc: Resetting bearer [ 1422.234976][T18243] loop6: detected capacity change from 0 to 256 [ 1422.247091][T18243] exfat: Deprecated parameter 'namecase' [ 1422.253203][T18243] exfat: Deprecated parameter 'utf8' [ 1423.544799][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.551156][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.574177][T18234] tipc: Resetting bearer [ 1423.584433][T18243] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001ff53, chksum : 0xd72bb7d8, utbl_chksum : 0xe619d30d) [ 1423.694202][T18234] tipc: Disabling bearer [ 1423.706502][ T22] tipc: Node number set to 2614956101 [ 1427.216370][T18264] device syzkaller0 entered promiscuous mode [ 1427.233707][T18265] loop6: detected capacity change from 0 to 1024 [ 1427.303433][T18264] tipc: Enabled bearer , priority 0 [ 1427.313398][T18265] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1427.334931][T18262] tipc: Resetting bearer [ 1427.401934][T18262] tipc: Disabling bearer [ 1427.432112][T18265] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1427.492356][T18265] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1427.889278][T18270] No such timeout policy "syz1" [ 1432.235180][T18298] tipc: Enabling of bearer rejected, already enabled [ 1432.395454][T18305] loop2: detected capacity change from 0 to 8 [ 1432.403282][T13090] EXT4-fs (loop6): unmounting filesystem. [ 1432.871352][T18315] tipc: Enabling of bearer rejected, already enabled [ 1434.308367][T18335] siw: device registration error -23 [ 1436.184201][T18345] lo speed is unknown, defaulting to 1000 [ 1436.327753][T18347] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3103'. [ 1437.069398][T18353] xt_HMARK: spi-set and port-set can't be combined [ 1437.118020][T18353] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 1437.140990][T18353] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1440.189914][T18365] device syzkaller0 entered promiscuous mode [ 1440.250576][T18365] tipc: Enabled bearer , priority 0 [ 1440.567794][T18364] tipc: Resetting bearer [ 1440.897892][T18364] tipc: Disabling bearer [ 1440.928491][T18374] tipc: Enabling of bearer rejected, already enabled [ 1443.289867][T18406] loop6: detected capacity change from 0 to 128 [ 1444.220666][T18406] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1444.230152][T18406] ext4 filesystem being mounted at /205/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1444.249660][T18406] FAULT_INJECTION: forcing a failure. [ 1444.249660][T18406] name failslab, interval 1, probability 0, space 0, times 0 [ 1444.262406][T18406] CPU: 0 PID: 18406 Comm: syz.6.3117 Not tainted syzkaller #0 [ 1444.269881][T18406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1444.280288][T18406] Call Trace: [ 1444.283563][T18406] [ 1444.286518][T18406] dump_stack_lvl+0x188/0x24e [ 1444.291203][T18406] ? show_regs_print_info+0x12/0x12 [ 1444.296506][T18406] ? load_image+0x410/0x410 [ 1444.301054][T18406] ? __might_sleep+0xd0/0xd0 [ 1444.305647][T18406] ? __lock_acquire+0x7c40/0x7c40 [ 1444.310682][T18406] ? verify_lock_unused+0x140/0x140 [ 1444.315892][T18406] should_fail_ex+0x390/0x4c0 [ 1444.320620][T18406] should_failslab+0x5/0x20 [ 1444.325159][T18406] slab_pre_alloc_hook+0x59/0x300 [ 1444.330291][T18406] ? io_uring_alloc_task_context+0xaa/0x5b1 [ 1444.336227][T18406] __kmem_cache_alloc_node+0x4f/0x270 [ 1444.341596][T18406] ? io_uring_alloc_task_context+0xaa/0x5b1 [ 1444.347490][T18406] kmalloc_trace+0x26/0xe0 [ 1444.351902][T18406] io_uring_alloc_task_context+0xaa/0x5b1 [ 1444.357629][T18406] ? io_uring_show_cred+0x4d9/0x4d9 [ 1444.362833][T18406] ? __lock_acquire+0x7c40/0x7c40 [ 1444.368001][T18406] ? __rwlock_init+0x140/0x140 [ 1444.372795][T18406] __io_uring_add_tctx_node+0x34b/0x4f0 [ 1444.378412][T18406] ? __io_uring_free+0x1f0/0x1f0 [ 1444.383347][T18406] ? alloc_fd+0x590/0x640 [ 1444.387701][T18406] io_uring_install_fd+0x32/0x70 [ 1444.392665][T18406] io_uring_create+0x8c8/0xd6c [ 1444.397442][T18406] __x64_sys_io_uring_setup+0x21b/0x230 [ 1444.403059][T18406] ? __ia32_sys_io_uring_enter+0xf0/0xf0 [ 1444.408701][T18406] ? lockdep_hardirqs_on+0x94/0x140 [ 1444.413904][T18406] do_syscall_64+0x4c/0xa0 [ 1444.418351][T18406] ? clear_bhb_loop+0x60/0xb0 [ 1444.423023][T18406] ? clear_bhb_loop+0x60/0xb0 [ 1444.427706][T18406] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1444.433599][T18406] RIP: 0033:0x7fc8cc99e159 [ 1444.438003][T18406] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1444.457608][T18406] RSP: 002b:00007fc8cabf6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 1444.466026][T18406] RAX: ffffffffffffffda RBX: 00007fc8ccc26180 RCX: 00007fc8cc99e159 [ 1444.473993][T18406] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000bbc [ 1444.481964][T18406] RBP: 00007fc8cca3506b R08: 0000000000000000 R09: 0000000000000000 [ 1444.489929][T18406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1444.497889][T18406] R13: 00007fc8ccc26218 R14: 00007fc8ccc26180 R15: 00007ffefab1d4f8 [ 1444.505864][T18406] [ 1445.795831][T13090] EXT4-fs (loop6): unmounting filesystem. [ 1448.934344][T18427] device syzkaller0 entered promiscuous mode [ 1448.989243][T18428] tipc: Enabled bearer , priority 0 [ 1449.012220][T18427] tipc: Resetting bearer [ 1449.064268][T18426] tipc: Resetting bearer [ 1449.183544][T18426] tipc: Disabling bearer [ 1449.231119][T18430] tipc: Enabling of bearer rejected, already enabled [ 1451.632200][T18456] input: syz0 as /devices/virtual/input/input14 [ 1451.883911][T18469] loop6: detected capacity change from 0 to 128 [ 1452.513260][T18450] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1454.480950][T18499] device syzkaller0 entered promiscuous mode [ 1455.836336][T18502] tipc: Enabled bearer , priority 0 [ 1455.843266][T18495] tipc: Resetting bearer [ 1455.879582][T18496] jffs2: notice: (18496) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1457.297344][T18495] tipc: Disabling bearer [ 1465.932900][T18568] tipc: Enabling of bearer rejected, already enabled [ 1466.049328][T18582] device syzkaller0 entered promiscuous mode [ 1466.169931][T18582] tipc: Enabled bearer , priority 0 [ 1466.190895][T18572] tipc: Resetting bearer [ 1466.387472][T18594] overlayfs: overlapping lowerdir path [ 1467.994959][T18572] tipc: Disabling bearer [ 1474.158356][T18653] tipc: Enabling of bearer rejected, already enabled [ 1474.501809][T18667] tipc: Enabling of bearer rejected, already enabled [ 1474.757439][T18673] input: syz1 as /devices/virtual/input/input15 [ 1474.937542][T18676] loop6: detected capacity change from 0 to 1024 [ 1474.960786][T18676] hfsplus: invalid btree flag [ 1474.966852][T18676] hfsplus: failed to load catalog file [ 1475.754053][T18681] loop2: detected capacity change from 0 to 4096 [ 1476.011362][T18681] EXT4-fs: inline encryption not supported [ 1476.047793][T18681] EXT4-fs: Ignoring removed mblk_io_submit option [ 1476.063675][T18686] loop8: detected capacity change from 0 to 1024 [ 1476.199147][T18681] EXT4-fs: inline encryption not supported [ 1476.206143][T18681] ext4: Unknown parameter 'in' [ 1476.230255][ T26] audit: type=1800 audit(1790718744.118:221): pid=18681 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3171" name="c_srate" dev="configfs" ino=79902 res=0 errno=0 [ 1476.420672][T18689] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3170'. [ 1477.720544][T18708] loop8: detected capacity change from 0 to 8 [ 1479.152409][T18727] SET target dimension over the limit! [ 1479.739874][T18729] tipc: Enabling of bearer rejected, already enabled [ 1479.980782][T18738] tipc: Enabling of bearer rejected, already enabled [ 1481.055964][T18756] loop6: detected capacity change from 0 to 1024 [ 1484.353980][ T4532] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1484.370885][T18794] loop7: detected capacity change from 0 to 8 [ 1484.487641][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.494194][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.766933][ T4532] usb 3-1: Using ep0 maxpacket: 8 [ 1484.781975][ T4532] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1484.795067][ T4532] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1484.804996][ T4532] usb 3-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 1.00 [ 1484.814389][ T4532] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1484.834764][ T4532] kobil_sct 3-1:1.0: KOBIL USB smart card terminal converter detected [ 1484.874533][ T4532] usb 3-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 1484.970951][T18808] SET target dimension over the limit! [ 1486.543235][T18791] overlayfs: failed to resolve './file0': -2 [ 1486.566525][T18815] tipc: Enabled bearer , priority 0 [ 1486.598645][T18821] tipc: Enabling of bearer rejected, already enabled [ 1486.688413][T18804] tipc: Disabling bearer [ 1487.701219][ T6007] usb 3-1: USB disconnect, device number 13 [ 1487.747993][ T6007] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 1487.893459][ T6007] kobil_sct 3-1:1.0: device disconnected [ 1491.537496][T18873] loop8: detected capacity change from 0 to 64 [ 1492.768954][T18881] device syzkaller0 entered promiscuous mode [ 1492.951514][T18881] tipc: Enabled bearer , priority 0 [ 1492.961415][T16935] hfs: node 4:3 still has 1 user(s)! [ 1492.973580][T18886] futex_wake_op: syz.6.3215 tries to shift op by 144; fix this program [ 1493.019494][T18886] loop6: detected capacity change from 0 to 256 [ 1493.123139][T18880] tipc: Resetting bearer [ 1493.207612][T18886] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 1493.292913][ T26] audit: type=1800 audit(1790718761.168:222): pid=18886 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3215" name="file1" dev="loop6" ino=1048717 res=0 errno=0 [ 1493.821785][T18880] tipc: Disabling bearer [ 1496.238944][T18907] loop2: detected capacity change from 0 to 512 [ 1496.278950][T18907] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1496.305162][T18907] ext4: Unknown parameter 'fsname' [ 1497.631338][T18927] tipc: Enabling of bearer rejected, failed to enable media [ 1500.605577][T18953] tipc: Enabling of bearer rejected, already enabled [ 1501.408350][T18967] ip_tables: iptables: counters copy to user failed while replacing table [ 1502.794561][ T6010] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1502.918475][T18978] loop7: detected capacity change from 0 to 256 [ 1502.928844][T18978] exfat: Deprecated parameter 'namecase' [ 1502.934889][T18978] exfat: Deprecated parameter 'namecase' [ 1503.048884][ T6010] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1503.535371][T18978] exFAT-fs (loop7): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 1503.596312][ T6010] usb 3-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice= 1.00 [ 1503.698576][ T6010] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1503.877155][ T6010] usb 3-1: Product: syz [ 1503.882137][ T6010] usb 3-1: Manufacturer: syz [ 1503.887202][ T6010] usb 3-1: SerialNumber: syz [ 1503.946829][T18989] loop2: detected capacity change from 0 to 64 [ 1503.953796][ T6010] usb 3-1: can't set config #1, error -71 [ 1504.644375][ T6010] usb 3-1: USB disconnect, device number 14 [ 1505.218697][ T4278] hfs: node 4:3 still has 1 user(s)! [ 1506.400760][T19004] loop7: detected capacity change from 0 to 1024 [ 1509.037029][T19016] tipc: Enabling of bearer rejected, already enabled [ 1509.541133][T19025] tipc: Enabling of bearer rejected, already enabled [ 1510.229513][T19036] loop8: detected capacity change from 0 to 128 [ 1510.266494][T19036] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1510.275477][T19036] ext4 filesystem being mounted at /67/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1510.294891][T19036] FAULT_INJECTION: forcing a failure. [ 1510.294891][T19036] name failslab, interval 1, probability 0, space 0, times 0 [ 1510.307699][T19036] CPU: 0 PID: 19036 Comm: syz.8.3249 Not tainted syzkaller #0 [ 1510.315260][T19036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1510.325486][T19036] Call Trace: [ 1510.328761][T19036] [ 1510.331692][T19036] dump_stack_lvl+0x188/0x24e [ 1510.336386][T19036] ? show_regs_print_info+0x12/0x12 [ 1510.341614][T19036] ? load_image+0x410/0x410 [ 1510.346128][T19036] ? __might_sleep+0xd0/0xd0 [ 1510.350715][T19036] ? __lock_acquire+0x7c40/0x7c40 [ 1510.355747][T19036] should_fail_ex+0x390/0x4c0 [ 1510.360431][T19036] should_failslab+0x5/0x20 [ 1510.364945][T19036] slab_pre_alloc_hook+0x59/0x300 [ 1510.369977][T19036] ? cpu_online+0xa0/0xa0 [ 1510.374402][T19036] ? io_uring_alloc_task_context+0xaa/0x5b1 [ 1510.380405][T19036] __kmem_cache_alloc_node+0x4f/0x270 [ 1510.385872][T19036] ? io_uring_alloc_task_context+0xaa/0x5b1 [ 1510.391768][T19036] kmalloc_trace+0x26/0xe0 [ 1510.396178][T19036] io_uring_alloc_task_context+0xaa/0x5b1 [ 1510.401992][T19036] ? cpu_online+0xa0/0xa0 [ 1510.406328][T19036] ? io_uring_show_cred+0x4d9/0x4d9 [ 1510.411641][T19036] io_sq_offload_create+0xc1c/0x10e2 [ 1510.416940][T19036] ? io_kill_timeouts+0x20a/0x20a [ 1510.422056][T19036] ? io_allocate_scq_urings+0x275/0x437 [ 1510.427607][T19036] io_uring_create+0x594/0xd6c [ 1510.432380][T19036] __x64_sys_io_uring_setup+0x21b/0x230 [ 1510.438024][T19036] ? __ia32_sys_io_uring_enter+0xf0/0xf0 [ 1510.443678][T19036] ? lockdep_hardirqs_on+0x94/0x140 [ 1510.448989][T19036] do_syscall_64+0x4c/0xa0 [ 1510.453404][T19036] ? clear_bhb_loop+0x60/0xb0 [ 1510.458188][T19036] ? clear_bhb_loop+0x60/0xb0 [ 1510.462882][T19036] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1510.468811][T19036] RIP: 0033:0x7f0ebc59e159 [ 1510.473235][T19036] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1510.492848][T19036] RSP: 002b:00007f0ebd485028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 1510.501297][T19036] RAX: ffffffffffffffda RBX: 00007f0ebc826180 RCX: 00007f0ebc59e159 [ 1510.509264][T19036] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000bbc [ 1510.517237][T19036] RBP: 00007f0ebc63506b R08: 0000000000000000 R09: 0000000000000000 [ 1510.525212][T19036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1510.533187][T19036] R13: 00007f0ebc826218 R14: 00007f0ebc826180 R15: 00007ffcb628a928 [ 1510.541173][T19036] [ 1511.292730][T16935] EXT4-fs (loop8): unmounting filesystem. [ 1511.524488][T19041] tipc: Enabling of bearer rejected, already enabled [ 1513.066753][T19065] tipc: Enabling of bearer rejected, failed to enable media [ 1513.414069][T15235] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1516.492555][T19103] loop2: detected capacity change from 0 to 256 [ 1516.502971][T19103] exfat: Deprecated parameter 'namecase' [ 1516.509282][T19103] exfat: Deprecated parameter 'namecase' [ 1516.733253][T19103] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 1518.885460][T19119] siw: device registration error -23 [ 1519.188079][T19131] tipc: Enabling of bearer rejected, already enabled [ 1519.431135][T19136] tipc: Enabling of bearer rejected, already enabled [ 1519.687734][T19144] tipc: Enabling of bearer rejected, failed to enable media [ 1524.160119][T19169] lo speed is unknown, defaulting to 1000 [ 1524.516727][T19177] loop6: detected capacity change from 0 to 64 [ 1524.796773][T19193] futex_wake_op: syz.7.3280 tries to shift op by 144; fix this program [ 1524.840612][T19193] loop7: detected capacity change from 0 to 256 [ 1525.958854][T19193] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 1525.997262][ T26] audit: type=1800 audit(1790718793.888:223): pid=19190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3280" name="file1" dev="loop7" ino=1048726 res=0 errno=0 [ 1526.118685][T19195] loop8: detected capacity change from 0 to 2048 [ 1526.205948][T13090] hfs: node 4:3 still has 1 user(s)! [ 1526.290415][T19195] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1526.945379][T19213] loop6: detected capacity change from 0 to 764 [ 1527.010684][T19213] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 1527.040671][T19213] binder: 19205:19213 ioctl c0205838 200000000000 returned -22 [ 1527.767500][T19229] overlayfs: overlapping lowerdir path [ 1528.395319][T19228] overlayfs: failed to clone upperpath [ 1528.680291][T19237] loop6: detected capacity change from 0 to 1024 [ 1529.284792][T19240] loop7: detected capacity change from 0 to 128 [ 1529.326203][T19240] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1529.339436][T19240] hpfs: filesystem error: improperly stopped [ 1529.345548][T19240] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1529.353293][T19240] hpfs: You really don't want any checks? You are crazy... [ 1529.361533][T19240] hpfs: hpfs_map_sector(): read error [ 1529.367356][T19240] hpfs: code page support is disabled [ 1529.374773][T19240] hpfs: hpfs_map_4sectors(): unaligned read [ 1529.381146][T19240] hpfs: hpfs_map_4sectors(): unaligned read [ 1529.387101][T19240] hpfs: filesystem error: unable to find root dir [ 1529.471589][T19244] xt_HMARK: spi-set and port-set can't be combined [ 1529.832774][T19244] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1531.771857][T19259] zram: Cannot change disksize for initialized device [ 1533.406185][T19269] futex_wake_op: syz.2.3297 tries to shift op by 144; fix this program [ 1533.455080][T19269] loop2: detected capacity change from 0 to 256 [ 1533.799773][T19269] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 1533.950469][ T26] audit: type=1800 audit(1790718801.748:224): pid=19269 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3297" name="file1" dev="loop2" ino=1048727 res=0 errno=0 [ 1534.638022][T19257] IPVS: set_ctl: invalid protocol: 29 100.1.1.0:20003 [ 1534.834900][T19276] loop6: detected capacity change from 0 to 512 [ 1536.217964][T19291] overlayfs: overlapping lowerdir path [ 1536.886451][ T4532] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1537.104450][T19302] netlink: 100 bytes leftover after parsing attributes in process `syz.8.3305'. [ 1537.113997][ T4532] usb 3-1: Using ep0 maxpacket: 32 [ 1537.128226][T19302] netlink: 64 bytes leftover after parsing attributes in process `syz.8.3305'. [ 1537.138847][ T4532] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 1537.158090][ T4532] usb 3-1: config 0 has no interface number 0 [ 1537.176118][ T4532] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1537.193858][ T4532] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1537.222921][ T4532] usb 3-1: Product: syz [ 1537.233059][ T4532] usb 3-1: Manufacturer: syz [ 1537.247593][ T4532] usb 3-1: SerialNumber: syz [ 1537.267068][ T4532] usb 3-1: config 0 descriptor?? [ 1537.284661][ T4532] smsc95xx v2.0.0 [ 1538.476030][T19310] loop8: detected capacity change from 0 to 256 [ 1538.482975][T19310] exfat: Deprecated parameter 'namecase' [ 1538.488767][T19310] exfat: Deprecated parameter 'utf8' [ 1538.540534][T19310] exFAT-fs (loop8): failed to load upcase table (idx : 0x0001ff53, chksum : 0xd72bb7d8, utbl_chksum : 0xe619d30d) [ 1538.746483][T19314] loop6: detected capacity change from 0 to 8 [ 1538.755430][T19314] MTD: Attempt to mount non-MTD device "/dev/loop6" [ 1539.639613][ T4532] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 1539.666951][ T4532] smsc95xx: probe of 3-1:0.67 failed with error -71 [ 1539.677789][ T4532] usb 3-1: USB disconnect, device number 15 [ 1539.696428][T19219] udevd[19219]: incorrect cramfs checksum on /dev/loop6 [ 1539.823338][T19321] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3310'. [ 1540.004741][T19328] futex_wake_op: syz.0.3311 tries to shift op by 144; fix this program [ 1540.442969][T19327] mmap: syz.6.3312 (19327): VmData 49479680 exceed data ulimit 14. Update limits or use boot option ignore_rlimit_data. [ 1540.960338][T19332] CIFS: Attempting to mount \\127.0.0.1\share [ 1540.966976][T19332] CIFS: VFS: No username specified [ 1543.877561][T19343] IPVS: set_ctl: invalid protocol: 29 100.1.1.0:20003 [ 1544.347754][T19352] tipc: Enabling of bearer rejected, already enabled [ 1544.380645][T19356] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1544.409593][T19356] loop7: detected capacity change from 0 to 256 [ 1544.421708][T19356] exfat: Unknown parameter 'dmask@R**s0 00000000000007^{)]LwhaͻsYg]P?WV goq#t̝LϞՓUa#JF' [ 1544.534967][T19356] loop7: detected capacity change from 0 to 128 [ 1544.568260][T19356] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 1545.373045][T19359] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1545.971860][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.978350][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1547.911058][T19367] Trying to write to read-only block-device nullb0 [ 1548.022763][T19379] Trying to write to read-only block-device nullb0 [ 1548.054893][T19379] Trying to write to read-only block-device nullb0 [ 1548.071136][T19381] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 1548.079587][T19381] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 1548.088132][T19381] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 1548.124193][T19379] Trying to write to read-only block-device nullb0 [ 1548.164037][T19379] Trying to write to read-only block-device nullb0 [ 1548.170677][T19379] Trying to write to read-only block-device nullb0 [ 1548.394041][T19379] Trying to write to read-only block-device nullb0 [ 1548.400947][T19379] Trying to write to read-only block-device nullb0 [ 1548.407994][T19379] Trying to write to read-only block-device nullb0 [ 1548.415719][T19379] Trying to write to read-only block-device nullb0 [ 1550.421370][T19416] loop8: detected capacity change from 0 to 256 [ 1550.431557][T19416] exfat: Deprecated parameter 'namecase' [ 1550.437487][T19416] exfat: Deprecated parameter 'namecase' [ 1550.443023][T19417] loop7: detected capacity change from 0 to 1024 [ 1550.612733][T19416] exFAT-fs (loop8): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 1550.959694][T19417] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1551.017683][T19408] EXT4-fs warning (device loop7): ext4_rmdir:3245: inode #11: comm syz.7.3330: empty directory 'file0' has too many links (111) [ 1551.176396][T13161] EXT4-fs (loop7): unmounting filesystem. [ 1553.302979][T19439] tipc: Enabled bearer , priority 0 [ 1553.633730][T19443] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3335'. [ 1553.655081][T19443] overlayfs: missing 'lowerdir' [ 1554.043330][T19446] tipc: Enabling of bearer rejected, already enabled [ 1554.507030][T19438] tipc: Disabling bearer [ 1554.563245][T19452] futex_wake_op: syz.6.3340 tries to shift op by 144; fix this program [ 1556.344527][T19466] loop8: detected capacity change from 0 to 256 [ 1556.355030][T19466] exfat: Deprecated parameter 'namecase' [ 1556.360928][T19466] exfat: Deprecated parameter 'namecase' [ 1556.631098][T19466] exFAT-fs (loop8): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 1557.424043][T17230] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 1557.579932][T19483] loop7: detected capacity change from 0 to 512 [ 1557.587959][T19483] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1557.594887][T19483] ext4: Unknown parameter 'fsname' [ 1557.703926][T17230] usb 9-1: config 0 has an invalid interface number: 8 but max is 0 [ 1557.711990][T17230] usb 9-1: config 0 has no interface number 0 [ 1557.730577][T17230] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1557.761688][T17230] usb 9-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1558.385964][T17230] usb 9-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1558.394254][T17230] usb 9-1: Product: syz [ 1558.398546][T17230] usb 9-1: SerialNumber: syz [ 1558.404944][T17230] usb 9-1: config 0 descriptor?? [ 1558.421235][T17230] usbhid 9-1:0.8: couldn't find an input interrupt endpoint [ 1558.620773][T17230] usb 9-1: USB disconnect, device number 3 [ 1558.786242][T19496] No such timeout policy "syz1" [ 1558.823092][T19497] loop7: detected capacity change from 0 to 8 [ 1558.833253][T19497] MTD: Attempt to mount non-MTD device "/dev/loop7" [ 1559.466939][T19467] udevd[19467]: incorrect cramfs checksum on /dev/loop7 [ 1559.491023][T19500] tipc: Enabling of bearer rejected, already enabled [ 1560.074546][T19467] udevd[19467]: incorrect cramfs checksum on /dev/loop7 [ 1560.406065][T19508] loop2: detected capacity change from 0 to 256 [ 1560.417263][T19508] exfat: Deprecated parameter 'namecase' [ 1560.423157][T19508] exfat: Deprecated parameter 'namecase' [ 1560.498904][T19508] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 1560.980309][T19512] loop7: detected capacity change from 0 to 256 [ 1561.292581][T19524] device syzkaller0 entered promiscuous mode [ 1561.687349][T19530] loop8: detected capacity change from 0 to 764 [ 1561.896247][T13485] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1561.991570][T19530] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 1562.041513][T19527] binder: 19525:19527 ioctl c0205838 200000000000 returned -22 [ 1562.051243][T19527] fuse: Bad value for 'fd' [ 1562.432458][T19537] device syzkaller0 entered promiscuous mode [ 1562.466307][T13485] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1562.475963][T13485] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1562.484130][T13485] usb 3-1: Product: syz [ 1562.488550][T13485] usb 3-1: SerialNumber: syz [ 1562.501583][T13485] usb 3-1: config 0 descriptor?? [ 1562.509238][T19537] tipc: Enabled bearer , priority 0 [ 1562.519540][T19536] tipc: Resetting bearer [ 1562.562316][T19536] tipc: Disabling bearer [ 1562.605403][T19543] No such timeout policy "syz1" [ 1563.182348][T13485] usb 3-1: USB disconnect, device number 16 [ 1563.623964][T13437] usb 9-1: new low-speed USB device number 4 using dummy_hcd [ 1563.681181][T19556] loop7: detected capacity change from 0 to 256 [ 1563.691310][T19556] exfat: Deprecated parameter 'namecase' [ 1563.697287][T19556] exfat: Deprecated parameter 'namecase' [ 1563.799519][T19556] exFAT-fs (loop7): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 1564.058855][T13437] usb 9-1: LPM exit latency is zeroed, disabling LPM. [ 1564.113098][T13437] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1564.204982][T13437] usb 9-1: string descriptor 0 read error: -22 [ 1564.228420][T13437] usb 9-1: New USB device found, idVendor=057e, idProduct=2017, bcdDevice= 0.40 [ 1564.302742][T13437] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1564.484492][T13437] usbhid 9-1:1.0: couldn't find an input interrupt endpoint [ 1565.204752][T13437] usb 9-1: USB disconnect, device number 4 [ 1567.836736][T19582] device syzkaller0 entered promiscuous mode [ 1567.931186][T19582] tipc: Enabled bearer , priority 0 [ 1567.932745][T19586] loop7: detected capacity change from 0 to 1024 [ 1567.952206][T19581] tipc: Resetting bearer [ 1568.019402][T19581] tipc: Disabling bearer [ 1568.030758][T19586] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1568.082631][T19593] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1568.115834][T19593] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3386'. [ 1568.162253][T19586] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1568.418501][T19601] No such timeout policy "syz1" [ 1568.850454][T13161] EXT4-fs (loop7): unmounting filesystem. [ 1568.971636][T19610] device syzkaller0 entered promiscuous mode [ 1570.847659][T19630] xt_HMARK: spi-set and port-set can't be combined [ 1571.037556][T19632] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1571.742884][T19636] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3400'. [ 1572.273675][T19644] loop2: detected capacity change from 0 to 1024 [ 1572.281187][T19644] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1572.308623][T19644] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1572.513985][ T4532] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1572.579232][T19649] No such timeout policy "syz1" [ 1572.924215][ T4532] usb 9-1: Using ep0 maxpacket: 16 [ 1572.936128][ T4532] usb 9-1: config 0 has an invalid interface number: 64 but max is 0 [ 1572.952812][ T4532] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1572.963348][ T4532] usb 9-1: config 0 has no interface number 0 [ 1572.970902][ T4532] usb 9-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice= 0.5b [ 1572.984768][ T4532] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1573.649647][ T4532] usb 9-1: config 0 descriptor?? [ 1573.717965][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 1573.839729][T19664] device syzkaller0 entered promiscuous mode [ 1573.874370][ T6007] usb 9-1: USB disconnect, device number 5 [ 1574.125226][ T4532] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1574.350719][ T4532] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1574.489384][ T4532] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1574.631244][ T4532] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 1574.759124][ T4532] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1574.970258][ T4532] usb 3-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice= 1.00 [ 1574.996847][ T4532] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1575.195590][ T4532] usb 3-1: Product: syz [ 1575.199902][ T4532] usb 3-1: Manufacturer: syz [ 1575.205741][ T4532] usb 3-1: SerialNumber: syz [ 1575.749392][T19681] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1575.759617][T19681] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1575.767245][T19681] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1576.369221][T19690] loop7: detected capacity change from 0 to 2048 [ 1576.507058][ T4532] usb 3-1: USB disconnect, device number 17 [ 1577.015041][T19690] loop7: p4 < > [ 1577.753554][ T3639] loop7: p4 < > [ 1577.996236][T19467] udevd[19467]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 1578.198541][T19704] device syzkaller0 entered promiscuous mode [ 1580.237175][T19729] loop7: detected capacity change from 0 to 256 [ 1580.250688][T19729] exfat: Deprecated parameter 'namecase' [ 1580.256736][T19729] exfat: Deprecated parameter 'namecase' [ 1580.369721][T19729] exFAT-fs (loop7): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 1581.029414][T19738] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3429'. [ 1581.894953][T19740] loop7: detected capacity change from 0 to 64 [ 1582.053747][T19738] CIFS: Attempting to mount \\127.0.0.1\share [ 1582.072026][T19738] CIFS: VFS: No username specified [ 1582.195819][T19740] BFS-fs: bfs_fill_super(): Inode 0x00000032 corrupted on loop7 [ 1582.370991][T19752] loop8: detected capacity change from 0 to 4096 [ 1582.399192][T19752] ntfs3: loop8: Different NTFS' sector size (4096) and media sector size (512) [ 1582.437136][T19752] ntfs3: loop8: Failed to load $BadClus. [ 1587.228940][T19790] tipc: Enabled bearer , priority 0 [ 1587.491829][T19786] tipc: Disabling bearer [ 1591.816278][T19824] device syzkaller0 entered promiscuous mode [ 1593.269665][T19840] tipc: Enabling of bearer rejected, already enabled [ 1596.378840][T19865] loop7: detected capacity change from 0 to 2048 [ 1596.420662][T19865] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1598.621580][T19866] loop8: detected capacity change from 0 to 32768 [ 1598.675915][T19885] tipc: Enabling of bearer rejected, already enabled [ 1598.771090][T19866] JBD2: Ignoring recovery information on journal [ 1598.849754][T19890] loop7: detected capacity change from 0 to 128 [ 1598.862407][T19890] FAT-fs (loop7): bogus number of reserved sectors [ 1598.869784][T19890] FAT-fs (loop7): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 1598.879360][T19890] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1599.533651][T19866] JBD2: recovery failed [ 1599.612538][T19866] (syz.8.3457,19866,0):ocfs2_journal_load:1135 ERROR: Failed to load journal! [ 1599.720041][T19866] (syz.8.3457,19866,1):ocfs2_check_volume:2431 ERROR: ocfs2 journal load failed! -5 [ 1599.753939][T19866] (syz.8.3457,19866,1):ocfs2_check_volume:2487 ERROR: status = -5 [ 1599.812635][T19866] (syz.8.3457,19866,1):ocfs2_mount_volume:1821 ERROR: status = -5 [ 1599.870358][T19866] (syz.8.3457,19866,1):ocfs2_fill_super:1176 ERROR: status = -5 [ 1600.029060][T19905] device syzkaller0 entered promiscuous mode [ 1601.512513][T19923] tipc: Enabling of bearer rejected, already enabled [ 1602.009608][T19938] loop2: detected capacity change from 0 to 4096 [ 1602.430396][T19938] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 1602.938686][T19957] loop8: detected capacity change from 0 to 256 [ 1603.389186][T19963] tipc: Enabling of bearer rejected, already enabled [ 1604.026290][T19965] loop7: detected capacity change from 0 to 4096 [ 1604.064080][T19965] ntfs3: loop7: Different NTFS' sector size (4096) and media sector size (512) [ 1604.100502][T19970] loop8: detected capacity change from 0 to 256 [ 1604.168114][T19970] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1604.263157][T19965] ntfs3: loop7: failed to convert "c46c" to maccroatian [ 1604.694810][T19984] loop8: detected capacity change from 0 to 8192 [ 1605.500905][T19989] device syzkaller0 entered promiscuous mode [ 1606.131889][T19991] loop2: detected capacity change from 0 to 32768 [ 1606.195199][T19994] loop8: detected capacity change from 0 to 40427 [ 1606.259998][T19994] F2FS-fs (loop8): build fault injection attr: rate: 690, type: 0x3ffff [ 1606.270938][T19996] device syzkaller0 entered promiscuous mode [ 1606.338619][T19991] jfs_strtoUCS: char2uni returned -22. [ 1606.363539][T19991] charset = cp949, char = 0xd4 [ 1606.385315][T19994] F2FS-fs (loop8): invalid crc value [ 1606.417333][T19994] F2FS-fs (loop8): Found nat_bits in checkpoint [ 1607.138557][T20009] tipc: Enabling of bearer rejected, already enabled [ 1607.168648][T19994] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 1607.376569][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.382941][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1609.001384][T20038] loop8: detected capacity change from 0 to 256 [ 1609.886603][T20048] device syzkaller0 entered promiscuous mode [ 1610.213062][T20059] loop8: detected capacity change from 0 to 256 [ 1610.245007][T20059] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x1aabf3fb, utbl_chksum : 0xe619d30d) [ 1610.379996][T20044] loop2: detected capacity change from 0 to 32768 [ 1610.524989][T20044] XFS (loop2): Mounting V5 Filesystem [ 1610.638717][T20044] XFS (loop2): Ending clean mount [ 1610.812283][T20044] XFS (loop2): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 1611.728106][ T4278] XFS (loop2): Unmounting Filesystem [ 1613.601703][T20098] loop8: detected capacity change from 0 to 32768 [ 1613.874569][T20098] XFS (loop8): Mounting V5 Filesystem [ 1613.959361][T20098] XFS (loop8): Ending clean mount [ 1614.230246][T16935] XFS (loop8): Unmounting Filesystem [ 1614.388902][ T26] audit: type=1326 audit(1790718882.278:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20138 comm="syz.2.3533" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cd3f9e159 code=0x7ffc0000 [ 1614.498492][ T26] audit: type=1326 audit(1790718882.278:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20138 comm="syz.2.3533" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cd3f9e159 code=0x7ffc0000 [ 1614.529342][ T26] audit: type=1326 audit(1790718882.278:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20138 comm="syz.2.3533" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cd3f9e159 code=0x7ffc0000 [ 1614.556900][ T26] audit: type=1326 audit(1790718882.278:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20138 comm="syz.2.3533" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f5cd3f9e159 code=0x7ffc0000 [ 1614.582650][ T26] audit: type=1326 audit(1790718882.278:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20138 comm="syz.2.3533" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cd3f9e159 code=0x7ffc0000 [ 1614.773510][ T26] audit: type=1326 audit(1790718882.278:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20138 comm="syz.2.3533" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f5cd3f9e159 code=0x7ffc0000 [ 1615.529644][ T26] audit: type=1326 audit(1790718882.278:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20138 comm="syz.2.3533" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f5cd3f9e159 code=0x7ffc0000 [ 1618.490006][T20188] loop2: detected capacity change from 0 to 4096 [ 1618.633464][T20188] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 1618.761039][T20208] loop8: detected capacity change from 0 to 1024 [ 1618.837588][T20208] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1618.867293][T20188] ntfs3: loop2: Failed to load $Extend. [ 1619.553318][T20208] ext4 filesystem being mounted at /122/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1619.604146][T20212] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 1619.621134][T20208] EXT4-fs error (device loop8): ext4_xattr_block_find:1828: inode #15: comm syz.8.3569: corrupted xattr block 128 [ 1619.665281][T20218] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3570'. [ 1619.684704][T20212] EXT4-fs (loop8): Remounting filesystem read-only [ 1619.698154][T20208] EXT4-fs (loop8): Remounting filesystem read-only [ 1619.805832][T16935] EXT4-fs (loop8): unmounting filesystem. [ 1621.119466][T20247] loop7: detected capacity change from 0 to 256 [ 1621.193649][T20248] loop8: detected capacity change from 0 to 2048 [ 1621.256686][T20247] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1621.277546][T20248] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1621.328035][T20247] FAT-fs (loop7): Filesystem has been set read-only [ 1621.371763][T20247] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1621.415158][T20247] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1621.452056][T20247] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1621.525651][T20247] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1621.544012][T20247] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1621.552870][T20247] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1621.568153][T20247] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1621.664972][T20247] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1621.783643][T20247] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1622.214875][ T26] audit: type=1800 audit(1790718890.078:232): pid=20247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3577" name="file1" dev="loop7" ino=1048756 res=0 errno=0 [ 1622.273223][T20247] FAT-fs (loop7): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1623.127569][T20271] loop8: detected capacity change from 0 to 1756 [ 1623.254145][T20271] UDF-fs: warning (device loop8): udf_load_vrs: No anchor found [ 1623.263590][T20271] UDF-fs: Scanning with blocksize 512 failed [ 1623.332949][T20271] UDF-fs: warning (device loop8): udf_load_vrs: No anchor found [ 1623.353840][T20271] UDF-fs: Scanning with blocksize 1024 failed [ 1623.423571][T20271] UDF-fs: INFO Mounting volume 'CDROM', timestamp 2022/11/22 15:59 (1000) [ 1624.665058][ T6007] usb 3-1: new low-speed USB device number 18 using dummy_hcd [ 1624.711644][T20298] loop8: detected capacity change from 0 to 2048 [ 1624.772362][T20298] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1624.851566][T20298] UDF-fs: unknown compression code (0) [ 1624.876609][ T6007] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 1624.891077][ T6007] usb 3-1: config 179 has no interface number 0 [ 1624.912195][ T6007] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 1624.952712][ T6007] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 1624.976102][ T6007] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1624.994275][ T6007] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 8 [ 1625.015823][ T6007] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1625.053161][ T6007] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1625.080095][ T6007] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1625.111246][T20292] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1625.129207][T20292] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1625.218588][T20317] loop8: detected capacity change from 0 to 256 [ 1625.507695][ T4532] usb 3-1: USB disconnect, device number 18 [ 1625.507766][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1625.525601][ C1] dummy_hcd dummy_hcd.2: timer fired with no URBs pending? [ 1625.736038][T20323] loop7: detected capacity change from 0 to 64 [ 1625.803110][ T26] audit: type=1800 audit(1790718893.688:233): pid=20323 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3605" name="file1" dev="loop7" ino=5 res=0 errno=0 [ 1625.924156][T17091] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1626.120611][T17091] usb 9-1: Using ep0 maxpacket: 16 [ 1626.129659][T17091] usb 9-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1626.169576][T17091] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1626.204010][T17091] usb 9-1: Product: syz [ 1626.208228][T17091] usb 9-1: Manufacturer: syz [ 1626.250388][T17091] usb 9-1: SerialNumber: syz [ 1626.273527][T17091] r8152-cfgselector 9-1: config 0 descriptor?? [ 1626.707990][T17091] r8152-cfgselector 9-1: Unknown version 0x0000 [ 1626.739151][T17091] r8152-cfgselector 9-1: USB disconnect, device number 6 [ 1627.052064][T20350] loop7: detected capacity change from 0 to 512 [ 1627.127545][T20350] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1627.141560][T20350] ext4 filesystem being mounted at /270/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1627.179083][T20350] EXT4-fs error (device loop7): ext4_xattr_block_get:543: inode #15: comm syz.7.3617: corrupted xattr block 33 [ 1627.234919][T13161] EXT4-fs (loop7): unmounting filesystem. [ 1627.633929][T17091] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1627.850618][T17091] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1627.874541][T17091] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1627.883694][T17091] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1627.893807][T17091] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1627.902046][T17091] usb 9-1: Product: syz [ 1627.906792][T17091] usb 9-1: Manufacturer: syz [ 1627.911498][T17091] usb 9-1: SerialNumber: syz [ 1627.924975][T17091] usb 9-1: config 0 descriptor?? [ 1627.936253][T17091] usb 9-1: selecting invalid altsetting 0 [ 1628.142207][T17091] usb 9-1: USB disconnect, device number 7 [ 1628.511308][T20395] loop2: detected capacity change from 0 to 512 [ 1628.537943][T20395] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1628.723163][T20395] ext4 filesystem being mounted at /705/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1629.279613][T20402] loop8: detected capacity change from 0 to 512 [ 1629.343030][T20402] EXT4-fs (loop8): Test dummy encryption mode enabled [ 1629.372029][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 1629.384000][T20402] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1629.466078][T20402] EXT4-fs error (device loop8): ext4_orphan_get:1435: comm syz.8.3639: bad orphan inode 131083 [ 1629.529374][T20402] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1629.643527][T16935] EXT4-fs (loop8): unmounting filesystem. [ 1629.734043][T20422] loop8: detected capacity change from 0 to 512 [ 1629.752205][T20422] FAT-fs (loop8): Directory bread(block 2080) failed [ 1629.759838][T20422] FAT-fs (loop8): Directory bread(block 2081) failed [ 1629.767299][T20422] FAT-fs (loop8): Directory bread(block 2082) failed [ 1629.774411][T20422] FAT-fs (loop8): Directory bread(block 2083) failed [ 1629.781266][T20422] FAT-fs (loop8): Directory bread(block 2084) failed [ 1629.791324][T20422] FAT-fs (loop8): Directory bread(block 2085) failed [ 1629.800288][T20422] FAT-fs (loop8): Directory bread(block 2086) failed [ 1629.812780][T20422] FAT-fs (loop8): Directory bread(block 2087) failed [ 1629.831607][T20422] FAT-fs (loop8): Directory bread(block 2080) failed [ 1629.843195][T20422] FAT-fs (loop8): Directory bread(block 2081) failed [ 1630.886980][T20435] loop8: detected capacity change from 0 to 64 [ 1630.961482][T20435] hfs: unable to locate alternate MDB [ 1630.993509][T20435] hfs: continuing without an alternate MDB [ 1631.840449][T20453] loop2: detected capacity change from 0 to 512 [ 1631.892126][T20453] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1631.932186][T20453] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.3661: bg 0: block 384: padding at end of block bitmap is not set [ 1631.961415][T20461] loop7: detected capacity change from 0 to 164 [ 1632.014533][T20453] EXT4-fs (loop2): Remounting filesystem read-only [ 1632.025984][T20453] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 1632.039009][T20453] EXT4-fs (loop2): Remounting filesystem read-only [ 1632.045783][T20453] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #11: comm syz.2.3661: attempt to clear invalid blocks 983260 len 1 [ 1632.060180][T20453] EXT4-fs (loop2): Remounting filesystem read-only [ 1632.070208][T20453] EXT4-fs error (device loop2): __ext4_get_inode_loc:4520: comm syz.2.3661: Invalid inode table block 0 in block_group 0 [ 1632.197997][T20453] EXT4-fs (loop2): Remounting filesystem read-only [ 1632.210304][T20453] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 1632.423355][T20453] EXT4-fs (loop2): Remounting filesystem read-only [ 1632.519950][T20453] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 1632.632853][T20453] EXT4-fs (loop2): Remounting filesystem read-only [ 1632.736632][T20453] EXT4-fs error (device loop2): __ext4_get_inode_loc:4520: comm syz.2.3661: Invalid inode table block 0 in block_group 0 [ 1632.907766][T20453] EXT4-fs (loop2): Remounting filesystem read-only [ 1632.943817][T20453] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 1632.999277][T20453] EXT4-fs (loop2): Remounting filesystem read-only [ 1633.030805][T20453] EXT4-fs error (device loop2): ext4_truncate:4325: inode #11: comm syz.2.3661: mark_inode_dirty error [ 1633.073383][T20453] EXT4-fs (loop2): Remounting filesystem read-only [ 1633.103468][T20453] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 1633.132664][T20453] EXT4-fs (loop2): Remounting filesystem read-only [ 1633.152677][T20453] EXT4-fs (loop2): 1 truncate cleaned up [ 1633.167106][T20453] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1633.265519][T20478] loop8: detected capacity change from 0 to 4096 [ 1633.268824][T20453] EXT4-fs error (device loop2): __ext4_get_inode_loc:4520: comm syz.2.3661: Invalid inode table block 0 in block_group 0 [ 1633.297269][T20478] ntfs3: loop8: Different NTFS' sector size (4096) and media sector size (512) [ 1633.311282][T20453] EXT4-fs (loop2): Remounting filesystem read-only [ 1633.643225][T20453] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 1633.657341][T20478] ntfs3: loop8: Mark volume as dirty due to NTFS errors [ 1633.815324][T20478] ntfs3: loop8: mft corrupted [ 1633.851340][T20453] EXT4-fs (loop2): Remounting filesystem read-only [ 1633.906075][T20478] ntfs3: loop8: Failed to load $Extend. [ 1633.945826][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 1634.111397][T20478] ntfs3: loop8: ino=1e, "file1" attr_set_size [ 1634.341629][T20489] device netdevsim0 entered promiscuous mode [ 1634.612301][T20505] loop8: detected capacity change from 0 to 512 [ 1634.711876][T20505] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1634.735472][T20514] netlink: 'syz.6.3684': attribute type 10 has an invalid length. [ 1634.759309][T20505] ext4 filesystem being mounted at /145/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1634.847751][T20505] Quota error (device loop8): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 1634.870320][T20505] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 1634.921037][T20505] EXT4-fs error (device loop8): ext4_acquire_dquot:6841: comm syz.8.3681: Failed to acquire dquot type 0 [ 1635.091120][T20528] netlink: 'syz.2.3691': attribute type 32 has an invalid length. [ 1635.091312][T16935] EXT4-fs (loop8): unmounting filesystem. [ 1635.099410][T20528] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3691'. [ 1635.179008][T20530] netlink: 'syz.8.3694': attribute type 10 has an invalid length. [ 1635.187382][T20530] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3694'. [ 1635.204627][T20530] netlink: 'syz.8.3694': attribute type 10 has an invalid length. [ 1635.212500][T20530] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3694'. [ 1635.298185][T20534] device syzkaller0 entered promiscuous mode [ 1635.342882][T20536] loop2: detected capacity change from 0 to 256 [ 1635.359735][T20534] tipc: Enabling of bearer rejected, failed to enable media [ 1635.362315][T20536] exfat: Deprecated parameter 'utf8' [ 1635.388110][T20536] exfat: Deprecated parameter 'utf8' [ 1635.421698][T20536] exfat: Deprecated parameter 'utf8' [ 1635.449133][T20536] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xc70f51ff, utbl_chksum : 0xe619d30d) [ 1635.583665][T20542] loop8: detected capacity change from 0 to 256 [ 1635.792652][T20549] loop2: detected capacity change from 0 to 8 [ 1635.807554][T20549] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 1636.373016][T19869] udevd[19869]: incorrect cramfs checksum on /dev/loop2 [ 1636.761767][T19869] udevd[19869]: incorrect cramfs checksum on /dev/loop2 [ 1637.377727][T20560] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1637.390935][T20560] loop8: detected capacity change from 0 to 256 [ 1637.398221][T20560] exfat: Unknown parameter 'dmask@R**s0 00000000000007^{)]LwhaͻsYg]P?WV goq#t̝LϞՓUa#JF' [ 1637.904537][T20560] loop8: detected capacity change from 0 to 128 [ 1637.915701][T20560] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 1637.953911][ T4532] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 1638.072155][T20572] tipc: Enabling of bearer rejected, failed to enable media [ 1638.205529][ T4532] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1638.216526][ T4532] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x77, skipping [ 1638.227152][ T4532] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 1638.238179][ T4532] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1638.252393][ T4532] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1638.261656][ T4532] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1638.280579][ T4532] usb 3-1: Manufacturer: syz [ 1638.295987][ T4532] usb 3-1: config 0 descriptor?? [ 1638.420109][T20579] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3712'. [ 1638.640593][T20581] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3712'. [ 1638.959238][ T4532] usb 3-1: USB disconnect, device number 19 [ 1639.222326][T20583] loop8: detected capacity change from 0 to 4096 [ 1640.534199][T20605] tipc: Enabling of bearer rejected, failed to enable media [ 1641.014318][T20614] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1643.180843][T20650] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3727'. [ 1643.201171][T20650] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3727'. [ 1644.209334][T20675] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3739'. [ 1644.373270][T20675] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1644.854563][T20675] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1645.070645][T20675] bond0 (unregistering): Released all slaves [ 1645.154174][T20681] tipc: Enabling of bearer rejected, failed to enable media [ 1646.471614][T20705] loop8: detected capacity change from 0 to 8 [ 1646.494436][T20705] MTD: Attempt to mount non-MTD device "/dev/loop8" [ 1647.389172][T20706] udevd[20706]: incorrect cramfs checksum on /dev/loop8 [ 1647.530074][T20706] udevd[20706]: incorrect cramfs checksum on /dev/loop8 [ 1647.619295][T20714] loop8: detected capacity change from 0 to 256 [ 1647.682124][T20714] exFAT-fs (loop8): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d) [ 1648.615127][T20724] tipc: Enabling of bearer rejected, failed to enable media [ 1651.935456][T20779] tipc: Enabling of bearer rejected, failed to enable media [ 1653.006405][T20822] tipc: Enabling of bearer rejected, failed to enable media [ 1657.748447][T20928] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3827'. [ 1659.794202][T20967] infiniband syz0: set down [ 1659.799717][T20967] infiniband syz0: added ipvlan0 [ 1659.994228][T20967] RDS/IB: syz0: added [ 1660.032588][T20967] smc: adding ib device syz0 with port count 1 [ 1660.146110][T20967] smc: ib device syz0 port 1 has pnetid [ 1662.401277][T21019] futex_wake_op: syz.7.3866 tries to shift op by 144; fix this program [ 1662.421614][T21019] futex_wake_op: syz.7.3866 tries to shift op by 144; fix this program [ 1663.465781][T21068] ip_tables: iptables: counters copy to user failed while replacing table [ 1665.141909][T21108] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3902'. [ 1665.991739][T21142] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1666.609776][T21168] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3924'. [ 1667.100843][T21180] tipc: Enabling of bearer rejected, failed to enable media [ 1667.743275][T21202] jffs2: notice: (21202) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1668.806676][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.813019][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1671.689282][T21348] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4008'. [ 1671.918892][T21359] tipc: Enabling of bearer rejected, failed to enable media [ 1672.262947][T21373] jffs2: notice: (21373) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1673.233701][T21413] tipc: Enabling of bearer rejected, failed to enable media [ 1674.174162][T21427] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4033'. [ 1674.260079][T21429] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4036'. [ 1675.627579][T21470] tipc: Enabling of bearer rejected, failed to enable media [ 1677.347416][T21516] tipc: Enabling of bearer rejected, failed to enable media [ 1678.787931][T21554] ip_tables: iptables: counters copy to user failed while replacing table [ 1679.003212][T21566] tipc: Enabling of bearer rejected, failed to enable media [ 1679.818329][T21594] tipc: Enabling of bearer rejected, failed to enable media [ 1680.829016][T21610] syz.6.4112[21610] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1680.829252][T21610] syz.6.4112[21610] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1684.340119][T21698] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1688.947308][T21824] ip_tables: iptables: counters copy to user failed while replacing table [ 1690.373006][T21860] lo speed is unknown, defaulting to 1000 [ 1695.636897][T22000] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4271'. [ 1695.656275][T22000] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4271'. [ 1697.391170][T22071] netlink: 220 bytes leftover after parsing attributes in process `syz.2.4304'. [ 1697.741098][T22092] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4315'. [ 1698.635272][T22127] syz.0.4332[22127] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1698.635411][T22127] syz.0.4332[22127] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1700.265328][T22181] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4358'. [ 1700.465321][T22188] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4361'. [ 1702.029393][T22250] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4391'. [ 1702.151436][T22260] 9pnet_fd: Insufficient options for proto=fd [ 1703.084949][T22285] ip_tables: iptables: counters copy to user failed while replacing table [ 1703.097948][T22285] ip_tables: iptables: counters copy to user failed while replacing table [ 1705.312627][T22379] 9pnet_fd: Insufficient options for proto=fd [ 1706.901576][T22449] Driver unsupported XDP return value 0 on prog (id 360) dev N/A, expect packet loss! [ 1707.935408][T22498] lo speed is unknown, defaulting to 1000 [ 1708.696060][T22535] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4518'. [ 1708.705533][T22535] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4518'. [ 1708.958840][T22548] bridge0: port 3(syz_tun) entered blocking state [ 1708.965797][T22548] bridge0: port 3(syz_tun) entered disabled state [ 1708.973559][T22548] device syz_tun entered promiscuous mode [ 1708.980016][T22548] bridge0: port 3(syz_tun) entered blocking state [ 1708.986566][T22548] bridge0: port 3(syz_tun) entered forwarding state [ 1708.996458][T22548] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1709.166282][ T26] audit: type=1326 audit(1790718977.058:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22555 comm="syz.0.4528" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc78539e159 code=0x0 [ 1710.281372][T22602] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4549'. [ 1710.344614][T22604] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4550'. [ 1715.437478][T22756] jffs2: notice: (22756) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1716.929802][T22826] batman_adv: batadv0: Adding interface: vlan2 [ 1716.936282][T22826] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1716.974054][T22826] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 1718.311039][T22884] 9pnet_fd: Insufficient options for proto=fd [ 1720.276561][T22966] netlink: 'syz.2.4710': attribute type 29 has an invalid length. [ 1720.324353][T22966] netlink: 'syz.2.4710': attribute type 29 has an invalid length. [ 1720.351000][T22966] netlink: 'syz.2.4710': attribute type 29 has an invalid length. [ 1720.375214][T22966] netlink: 'syz.2.4710': attribute type 29 has an invalid length. [ 1720.404234][T22966] netlink: 'syz.2.4710': attribute type 29 has an invalid length. [ 1720.510413][T22968] ecryptfs_mount: kern_path() failed [ 1720.518864][T22968] Reading sb failed; rc = [-2] [ 1723.371586][T23113] netlink: 52 bytes leftover after parsing attributes in process `syz.6.4775'. [ 1724.736153][T23166] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1724.992772][T23178] xt_bpf: check failed: parse error [ 1726.857020][T23232] IPv6: sit1: Disabled Multicast RS [ 1728.457475][T23285] MTD: Couldn't look up './dev/mtdblock0': -2 [ 1728.514772][T23288] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4849'. [ 1728.713700][T23297] overlayfs: failed to clone upperpath [ 1728.721858][T23299] overlayfs: failed to clone upperpath [ 1728.876681][T23307] Cannot find set identified by id 0 to match [ 1729.329711][T23333] overlayfs: failed to clone upperpath [ 1729.771224][T23346] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1730.190205][T23369] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4881'. [ 1730.246994][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.253398][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1731.308512][T23418] lo speed is unknown, defaulting to 1000 [ 1732.178166][T23444] fuse: Bad value for 'fd' [ 1732.473573][T23460] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4918'. [ 1732.740852][T23460] batman_adv: batadv0: Removing interface: vlan2 [ 1733.780601][ T26] audit: type=1326 audit(1790719001.668:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23514 comm="syz.8.4945" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0ebc59e159 code=0x0 [ 1736.198588][T23586] jffs2: notice: (23586) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1736.313155][T23594] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1736.419787][T23597] overlayfs: failed to clone upperpath [ 1738.584720][T23645] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1738.843746][T23656] MTD: Couldn't look up './dev/mtdblock0': -2 [ 1739.229840][T23665] overlayfs: failed to clone lowerpath [ 1739.387464][T23672] overlayfs: failed to clone upperpath [ 1739.509544][T23675] overlayfs: failed to clone upperpath [ 1739.874268][T23685] dccp_xmit_packet: Payload too large (65472) for featneg. [ 1740.137020][T23692] lo speed is unknown, defaulting to 1000 [ 1741.784360][T23725] fuse: Bad value for 'fd' [ 1744.213720][ T26] audit: type=1326 audit(1790719268.149:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23812 comm="syz.2.5071" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5cd3f9e159 code=0x0 [ 1744.685322][ T26] audit: type=1326 audit(1790719268.619:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23839 comm="syz.0.5083" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc78539e159 code=0x0 [ 1745.355541][T23863] overlayfs: failed to clone upperpath [ 1746.202561][T23907] overlayfs: failed to clone upperpath [ 1746.768063][T23923] ip_tables: iptables: counters copy to user failed while replacing table [ 1747.157908][T23934] overlayfs: failed to clone upperpath [ 1747.252365][T23936] 9pnet_fd: Insufficient options for proto=fd [ 1747.918930][T23967] MTD: Couldn't look up './dev/mtdblock0': -2 [ 1748.792201][T23999] overlayfs: failed to clone upperpath [ 1752.455726][T24129] 9pnet_fd: Insufficient options for proto=fd [ 1752.962745][T24150] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1753.448461][T24165] "syz.0.5224" (24165) uses obsolete ecb(arc4) skcipher [ 1755.000993][T24233] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1756.200733][T24277] overlayfs: failed to clone upperpath [ 1756.825391][T24301] fuse: Bad value for 'fd' [ 1757.279914][T24313] overlayfs: failed to clone upperpath [ 1757.590971][T24324] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5293'. [ 1757.614140][T24324] netlink: 'syz.6.5293': attribute type 12 has an invalid length. [ 1757.667411][T24324] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1757.677425][T24324] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1757.686360][T24324] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1757.695485][T24324] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1757.712836][T24324] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5293'. [ 1757.722130][T24324] netlink: 'syz.6.5293': attribute type 12 has an invalid length. [ 1757.801250][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807ae80000: rx timeout, send abort [ 1757.815642][ C1] vcan0: j1939_tp_rxtimer: 0xffff888077ba1800: rx timeout, send abort [ 1757.824545][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807ae80000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1757.842003][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888077ba1800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1758.216947][T24356] overlayfs: failed to clone upperpath [ 1758.699891][T24376] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1759.674787][T24417] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5325'. [ 1759.988081][T24432] IPv6: sit1: Disabled Multicast RS [ 1760.140489][T24442] overlayfs: failed to clone upperpath [ 1760.698184][T24469] fuse: Bad value for 'fd' [ 1760.713869][T24469] 9pnet_fd: p9_fd_create_unix (24469): problem connecting socket: ./file0: -111 [ 1760.898646][T24480] fuse: Bad value for 'fd' [ 1761.079392][T24488] fuse: Bad value for 'fd' [ 1761.689598][T24505] overlayfs: failed to clone upperpath [ 1761.820982][T24511] ip_tables: iptables: counters copy to user failed while replacing table [ 1762.336729][T24537] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5375'. [ 1762.376643][T24537] bridge0: port 3(syz_tun) entered disabled state [ 1762.386597][T24537] bridge0: port 2(bridge_slave_1) entered disabled state [ 1762.393953][T24537] bridge0: port 1(bridge_slave_0) entered disabled state [ 1764.507241][T24622] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5413'. [ 1765.598746][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888056260800: rx timeout, send abort [ 1766.098859][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888057c28c00: rx timeout, send abort [ 1766.107639][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888056260800: abort rx timeout. Force session deactivation [ 1766.599848][T24701] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5448'. [ 1766.607410][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888057c28c00: abort rx timeout. Force session deactivation [ 1766.862623][T24711] overlayfs: failed to clone upperpath [ 1768.923712][T24751] fuse: Bad value for 'fd' [ 1769.195515][T24766] fuse: Bad value for 'fd' [ 1769.959699][T24802] jffs2: notice: (24802) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1770.369551][T24819] netlink: 'syz.7.5496': attribute type 1 has an invalid length. [ 1770.432818][T24819] device bond1 entered promiscuous mode [ 1770.441826][T24819] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1770.510095][T24819] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1770.540951][T24819] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 1770.612869][T24819] bond1: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 1770.656752][T24819] bond1: (slave gre1): making interface the new active one [ 1770.679690][T24819] device gre1 entered promiscuous mode [ 1770.727765][T24819] bond1: (slave gre1): Enslaving as an active interface with an up link [ 1770.759653][T20180] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 1771.260848][T13485] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 1771.307627][T13485] libceph: connect (1)127.0.0.1:6789 error -22 [ 1771.316643][T13485] libceph: mon0 (1)127.0.0.1:6789 connect error [ 1771.470405][T24864] lo speed is unknown, defaulting to 1000 [ 1771.542338][T13485] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 1771.584399][T13485] libceph: connect (1)127.0.0.1:6789 error -22 [ 1771.591354][T13485] libceph: mon0 (1)127.0.0.1:6789 connect error [ 1772.000302][T24848] ceph: No mds server is up or the cluster is laggy [ 1772.004171][T24855] ceph: No mds server is up or the cluster is laggy [ 1772.084839][ T6007] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 1772.105028][T24882] fuse: Bad value for 'fd' [ 1772.116217][ T22] libceph: connect (1)127.0.0.1:6789 error -22 [ 1772.122536][ T22] libceph: mon0 (1)127.0.0.1:6789 connect error [ 1773.217308][T24928] overlayfs: failed to clone upperpath [ 1775.060041][T25006] overlayfs: failed to clone upperpath [ 1775.694766][T25033] overlayfs: failed to clone upperpath [ 1776.049315][T25050] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5584'. [ 1776.070625][T25050] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5584'. [ 1777.398042][T25100] infiniband s`z1: RDMA CMA: cma_listen_on_dev, error -98 [ 1777.486843][T25103] bridge0: port 3(syz_tun) entered disabled state [ 1777.622921][T25103] device syz_tun left promiscuous mode [ 1777.648420][T25103] bridge0: port 3(syz_tun) entered disabled state [ 1777.803011][T25100] siw: device registration error -19 [ 1778.869884][T25131] overlayfs: failed to clone upperpath [ 1779.225352][T25148] 9pnet_fd: Insufficient options for proto=fd [ 1779.688643][T25167] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4278] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[25167] [ 1779.826275][T25173] kernel read not supported for file /file0 (pid: 25173 comm: syz.2.5636) [ 1779.842849][ T26] audit: type=1800 audit(1790719303.779:238): pid=25173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5636" name="file0" dev="mqueue" ino=97787 res=0 errno=0 [ 1783.174058][T25271] overlayfs: failed to clone upperpath [ 1783.486814][T25279] overlayfs: failed to clone upperpath [ 1783.759133][T25292] netlink: 'syz.8.5680': attribute type 1 has an invalid length. [ 1783.899244][T25297] bond1: (slave gretap1): making interface the new active one [ 1783.974351][T25297] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1784.619870][T25331] team0: Port device syz_tun added [ 1786.098277][T25370] overlayfs: failed to clone upperpath [ 1787.262395][T25412] overlayfs: failed to clone upperpath [ 1788.208867][T25441] overlayfs: failed to resolve './file0': -2 [ 1788.747730][T25462] IPv6: ADDRCONF(NETDEV_CHANGE): gre2: link becomes ready [ 1788.767537][T25462] IPv6: ADDRCONF(NETDEV_CHANGE): gre2: link becomes ready [ 1789.244335][T25485] overlayfs: failed to clone upperpath [ 1789.258994][T25486] device syzkaller0 left promiscuous mode [ 1789.417250][T25493] overlayfs: failed to clone lowerpath [ 1789.465148][T25494] overlayfs: failed to clone upperpath [ 1789.673710][T25511] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1789.683476][T25511] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1789.693373][T25511] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1789.704576][T25511] device bridge_slave_0 left promiscuous mode [ 1789.710936][T25511] bridge0: port 1(bridge_slave_0) entered disabled state [ 1789.725102][T25511] device bridge_slave_1 left promiscuous mode [ 1789.731512][T25511] bridge0: port 2(bridge_slave_1) entered disabled state [ 1789.745035][T25511] bond0: (slave bond_slave_0): Releasing backup interface [ 1789.762949][T25511] bond0: (slave bond_slave_1): Releasing backup interface [ 1789.845466][T25514] overlayfs: failed to clone upperpath [ 1789.894306][T25511] team0: Port device team_slave_0 removed [ 1789.942723][T25511] team0: Port device team_slave_1 removed [ 1789.957965][T25511] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1789.976841][T25511] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1789.981937][T25520] fuse: Bad value for 'fd' [ 1789.998692][T25511] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1790.021769][T25511] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1790.078577][T25511] bond1: (slave gre1): Releasing backup interface [ 1790.093854][T25511] device gre1 left promiscuous mode [ 1790.179020][T25525] device syzkaller0 left promiscuous mode [ 1790.516370][T25543] overlayfs: failed to clone upperpath [ 1790.770957][T25553] fuse: Bad value for 'fd' [ 1790.772700][T25552] fuse: Bad value for 'fd' [ 1791.687276][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.693660][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1792.408879][T25616] netem: incorrect gi model size [ 1792.430612][T25616] netem: change failed [ 1793.253626][T25644] overlayfs: failed to clone upperpath [ 1794.831935][T25697] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5840'. [ 1794.957379][T25700] overlayfs: failed to clone upperpath [ 1795.293496][T25710] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5847'. [ 1795.406591][T25714] fuse: Bad value for 'fd' [ 1795.486050][T25715] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5848'. [ 1795.855096][T25721] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5850'. [ 1795.886867][T25721] bridge0: port 2(bridge_slave_1) entered disabled state [ 1795.896860][T25721] bridge0: port 1(bridge_slave_0) entered disabled state [ 1796.600835][T25742] overlayfs: failed to clone upperpath [ 1797.637483][T25759] netlink: 'syz.6.5863': attribute type 4 has an invalid length. [ 1797.769428][T25760] netlink: 'syz.6.5863': attribute type 4 has an invalid length. [ 1800.181779][T25826] fuse: Bad value for 'fd' [ 1800.242630][T25806] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1800.322135][T25806] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1800.980333][T25806] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1800.990946][T25806] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1801.005462][T25806] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1801.019668][T25806] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1801.165739][T25811] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5883'. [ 1801.895608][T25868] overlayfs: failed to clone upperpath [ 1802.160430][T25880] lo speed is unknown, defaulting to 1000 [ 1802.772792][T25902] ip_tables: iptables: counters copy to user failed while replacing table [ 1803.759847][T25942] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1803.775573][T25944] netlink: 'syz.6.5935': attribute type 1 has an invalid length. [ 1803.811825][T25942] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1803.816799][T25944] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1803.928061][T25946] 8021q: adding VLAN 0 to HW filter on device team0 [ 1803.941753][T25946] bond1: (slave team0): Enslaving as a backup interface with an up link [ 1804.039796][T10765] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 1806.270264][T26036] ip_tables: iptables: counters copy to user failed while replacing table [ 1807.096419][T26071] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5985'. [ 1807.140031][T26071] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1807.148935][T26071] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1807.157972][T26071] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1807.166731][T26071] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1810.333978][T26184] 9pnet_fd: Insufficient options for proto=fd [ 1810.848232][T26212] overlayfs: failed to clone upperpath [ 1812.745236][T26274] netlink: 'syz.6.6059': attribute type 1 has an invalid length. [ 1812.861783][T26274] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1812.962802][T26276] bond2: (slave veth3): Enslaving as an active interface with a down link [ 1813.058975][T26277] device syz_tun left promiscuous mode [ 1813.066350][T26277] bridge0: port 3(syz_tun) entered disabled state [ 1813.102961][T26277] bond2: (slave syz_tun): making interface the new active one [ 1813.153550][T26277] device syz_tun entered promiscuous mode [ 1813.166470][T26277] bond2: (slave syz_tun): Enslaving as an active interface with an up link [ 1813.197436][ T7470] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 1813.949815][T26322] overlayfs: failed to clone upperpath [ 1813.972086][T26322] overlayfs: failed to clone upperpath [ 1814.292324][T26333] overlayfs: failed to clone upperpath [ 1814.936615][T26354] overlayfs: failed to clone upperpath [ 1815.929154][T26384] jffs2: notice: (26384) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1816.070342][T26389] overlayfs: failed to clone upperpath [ 1816.329811][T26402] overlayfs: failed to clone lowerpath [ 1816.333731][T26404] overlayfs: failed to clone upperpath [ 1816.747254][T26423] overlayfs: failed to clone upperpath [ 1816.853108][T26428] process '/newroot/1226/file0' started with executable stack [ 1818.499088][T26505] netlink: 'syz.8.6155': attribute type 1 has an invalid length. [ 1818.520091][T26505] device bond2 entered promiscuous mode [ 1818.526099][T26505] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1818.572001][T26505] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1818.579256][T26505] bond2: (slave gre2): The slave device specified does not support setting the MAC address [ 1818.589842][T26505] bond2: (slave gre2): Setting fail_over_mac to active for active-backup mode [ 1818.601714][T26505] bond2: (slave gre2): making interface the new active one [ 1818.609026][T26505] device gre2 entered promiscuous mode [ 1818.617085][T26505] bond2: (slave gre2): Enslaving as an active interface with an up link [ 1818.626223][T20180] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 1818.742214][T26513] overlayfs: failed to clone upperpath [ 1819.322642][T26539] lo speed is unknown, defaulting to 1000 [ 1820.341097][T26568] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6179'. [ 1820.757915][T26582] netlink: 'syz.2.6183': attribute type 1 has an invalid length. [ 1820.851833][T26582] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1820.910963][T26589] bond4: (slave gretap1): Enslaving as a backup interface with an up link [ 1820.953902][T19146] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1821.031172][ T4919] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready [ 1821.073145][T26591] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6183'. [ 1821.210990][T26597] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6188'. [ 1822.439799][T26621] ip_tables: iptables: counters copy to user failed while replacing table [ 1823.518756][T26652] bond2: Unknown bonding mode 6 for xdp xmit [ 1824.297351][ T4919] device syz_tun left promiscuous mode [ 1825.179501][T26687] overlayfs: failed to clone upperpath [ 1825.461058][T26698] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6227'. [ 1826.116806][T26723] overlayfs: failed to clone upperpath [ 1826.468702][T26736] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6240'. [ 1828.833523][T26825] netlink: 140 bytes leftover after parsing attributes in process `syz.2.6270'. [ 1828.897027][T26825] ------------[ cut here ]------------ [ 1828.903680][T26825] WARNING: CPU: 0 PID: 26825 at net/mac80211/chan.c:2017 ieee80211_link_release_channel+0x150/0x180 [ 1828.915020][T26825] Modules linked in: [ 1828.919042][T26825] CPU: 0 PID: 26825 Comm: syz.2.6270 Not tainted syzkaller #0 [ 1828.926624][T26825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1828.936863][T26825] RIP: 0010:ieee80211_link_release_channel+0x150/0x180 [ 1828.943886][T26825] Code: 7c 2d 00 00 74 08 48 89 df e8 0c 17 19 f8 bf 18 1e 00 00 48 03 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 15 19 81 00 e8 30 d2 c7 f7 <0f> 0b eb c5 48 c7 c1 24 e9 20 8e 80 e1 07 80 c1 03 38 c1 0f 8c 51 [ 1828.960332][T26828] overlayfs: failed to clone upperpath [ 1828.964052][T26825] RSP: 0018:ffffc900034e7250 EFLAGS: 00010283 [ 1828.964185][T26825] RAX: ffffffff89ba60b0 RBX: ffff8880303415a8 RCX: 0000000000080000 [ 1828.964201][T26825] RDX: ffffc90005fba000 RSI: 00000000000039d4 RDI: 00000000000039d5 [ 1828.964214][T26825] RBP: 0000000000000000 R08: ffffffff8e20b46f R09: 1ffffffff1c4168d [ 1828.964228][T26825] R10: dffffc0000000000 R11: fffffbfff1c4168e R12: ffff888030342ab0 [ 1828.964242][T26825] R13: 1ffff110060682b5 R14: ffff888030342228 R15: dffffc0000000000 [ 1829.017044][T26825] FS: 00007f5cd4da36c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1829.026090][T26825] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1829.032716][T26825] CR2: 00007fc8cd7556c8 CR3: 0000000065844000 CR4: 00000000003506f0 [ 1829.041038][T26825] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1829.049196][T26825] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1829.057357][T26825] Call Trace: [ 1829.060692][T26825] [ 1829.063662][T26825] ieee80211_if_change_type+0x205/0xa80 [ 1829.069394][T26825] ? cfg80211_mgmt_registrations_update_wk+0xa0/0xa0 [ 1829.076422][T26825] ? cfg80211_mlme_purge_registrations+0x1d0/0x200 [ 1829.082972][T26825] ieee80211_change_iface+0x58/0x4c0 [ 1829.088382][T26825] cfg80211_change_iface+0x786/0xf10 [ 1829.093832][T26825] nl80211_set_interface+0x601/0x860 [ 1829.099409][T26825] ? nl80211_dump_interface+0x560/0x560 [ 1829.105053][T26825] genl_family_rcv_msg_doit+0x22f/0x350 [ 1829.110742][T26825] ? end_current_label_crit_section+0x170/0x170 [ 1829.117237][T26825] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1829.123546][T26825] ? bpf_lsm_capable+0x5/0x10 [ 1829.128395][T26825] ? security_capable+0x85/0xb0 [ 1829.133392][T26825] genl_rcv_msg+0x601/0x790 [ 1829.137994][T26825] ? genl_bind+0x360/0x360 [ 1829.142450][T26825] ? nl80211_dump_interface+0x560/0x560 [ 1829.148102][T26825] netlink_rcv_skb+0x1ef/0x440 [ 1829.152911][T26825] ? genl_bind+0x360/0x360 [ 1829.157424][T26825] ? netlink_ack+0x1160/0x1160 [ 1829.162243][T26825] ? down_read+0x1a8/0x2d0 [ 1829.166825][T26825] genl_rcv+0x24/0x40 [ 1829.170838][T26825] netlink_unicast+0x7ad/0x920 [ 1829.175686][T26825] netlink_sendmsg+0x8ad/0xbd0 [ 1829.180592][T26825] ? netlink_getsockopt+0x550/0x550 [ 1829.185975][T26825] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1829.191654][T26825] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1829.197308][T26825] ? security_socket_sendmsg+0x7c/0xa0 [ 1829.202882][T26825] ? netlink_getsockopt+0x550/0x550 [ 1829.208196][T26825] ____sys_sendmsg+0x5ed/0x9a0 [ 1829.213182][T26825] ? __sys_sendmsg_sock+0x30/0x30 [ 1829.218393][T26825] ? __import_iovec+0x306/0x510 [ 1829.223378][T26825] ? import_iovec+0x6f/0xa0 [ 1829.228075][T26825] ___sys_sendmsg+0x2a2/0x360 [ 1829.232811][T26825] ? __sys_sendmsg+0x2a0/0x2a0 [ 1829.237705][T26825] ? put_user_ifreq+0x81/0xb0 [ 1829.242628][T26825] __se_sys_sendmsg+0x1c3/0x2b0 [ 1829.247677][T26825] ? __x64_sys_sendmsg+0x80/0x80 [ 1829.252675][T26825] ? lockdep_hardirqs_on+0x94/0x140 [ 1829.258139][T26825] do_syscall_64+0x4c/0xa0 [ 1829.262590][T26825] ? clear_bhb_loop+0x60/0xb0 [ 1829.267365][T26825] ? clear_bhb_loop+0x60/0xb0 [ 1829.272080][T26825] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1829.278257][T26825] RIP: 0033:0x7f5cd3f9e159 [ 1829.282704][T26825] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1829.302675][T26825] RSP: 002b:00007f5cd4da3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1829.311370][T26825] RAX: ffffffffffffffda RBX: 00007f5cd4225fa0 RCX: 00007f5cd3f9e159 [ 1829.319517][T26825] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000005 [ 1829.327657][T26825] RBP: 00007f5cd403506b R08: 0000000000000000 R09: 0000000000000000 [ 1829.335721][T26825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1829.343939][T26825] R13: 00007f5cd4226038 R14: 00007f5cd4225fa0 R15: 00007ffe34da0b98 [ 1829.352058][T26825] [ 1829.355177][T26825] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1829.362474][T26825] CPU: 0 PID: 26825 Comm: syz.2.6270 Not tainted syzkaller #0 [ 1829.370056][T26825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1829.380113][T26825] Call Trace: [ 1829.383390][T26825] [ 1829.386319][T26825] dump_stack_lvl+0x188/0x24e [ 1829.391090][T26825] ? memcpy+0x3c/0x60 [ 1829.395073][T26825] ? show_regs_print_info+0x12/0x12 [ 1829.400265][T26825] ? load_image+0x410/0x410 [ 1829.404842][T26825] panic+0x2d3/0x710 [ 1829.408925][T26825] ? bpf_jit_dump+0xd0/0xd0 [ 1829.413478][T26825] __warn+0x2f8/0x4f0 [ 1829.417599][T26825] ? ieee80211_link_release_channel+0x150/0x180 [ 1829.423844][T26825] ? ieee80211_link_release_channel+0x150/0x180 [ 1829.430085][T26825] report_bug+0x2ba/0x4f0 [ 1829.434439][T26825] ? ieee80211_link_release_channel+0x150/0x180 [ 1829.440690][T26825] handle_bug+0x3a/0x70 [ 1829.444874][T26825] exc_invalid_op+0x16/0x40 [ 1829.449375][T26825] asm_exc_invalid_op+0x16/0x20 [ 1829.454224][T26825] RIP: 0010:ieee80211_link_release_channel+0x150/0x180 [ 1829.461075][T26825] Code: 7c 2d 00 00 74 08 48 89 df e8 0c 17 19 f8 bf 18 1e 00 00 48 03 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 15 19 81 00 e8 30 d2 c7 f7 <0f> 0b eb c5 48 c7 c1 24 e9 20 8e 80 e1 07 80 c1 03 38 c1 0f 8c 51 [ 1829.480684][T26825] RSP: 0018:ffffc900034e7250 EFLAGS: 00010283 [ 1829.486752][T26825] RAX: ffffffff89ba60b0 RBX: ffff8880303415a8 RCX: 0000000000080000 [ 1829.494722][T26825] RDX: ffffc90005fba000 RSI: 00000000000039d4 RDI: 00000000000039d5 [ 1829.502696][T26825] RBP: 0000000000000000 R08: ffffffff8e20b46f R09: 1ffffffff1c4168d [ 1829.510960][T26825] R10: dffffc0000000000 R11: fffffbfff1c4168e R12: ffff888030342ab0 [ 1829.518931][T26825] R13: 1ffff110060682b5 R14: ffff888030342228 R15: dffffc0000000000 [ 1829.526914][T26825] ? ieee80211_link_release_channel+0x150/0x180 [ 1829.533177][T26825] ieee80211_if_change_type+0x205/0xa80 [ 1829.538927][T26825] ? cfg80211_mgmt_registrations_update_wk+0xa0/0xa0 [ 1829.545631][T26825] ? cfg80211_mlme_purge_registrations+0x1d0/0x200 [ 1829.552249][T26825] ieee80211_change_iface+0x58/0x4c0 [ 1829.557624][T26825] cfg80211_change_iface+0x786/0xf10 [ 1829.562920][T26825] nl80211_set_interface+0x601/0x860 [ 1829.568216][T26825] ? nl80211_dump_interface+0x560/0x560 [ 1829.573768][T26825] genl_family_rcv_msg_doit+0x22f/0x350 [ 1829.579312][T26825] ? end_current_label_crit_section+0x170/0x170 [ 1829.585605][T26825] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1829.591678][T26825] ? bpf_lsm_capable+0x5/0x10 [ 1829.596366][T26825] ? security_capable+0x85/0xb0 [ 1829.601226][T26825] genl_rcv_msg+0x601/0x790 [ 1829.605830][T26825] ? genl_bind+0x360/0x360 [ 1829.610439][T26825] ? nl80211_dump_interface+0x560/0x560 [ 1829.616019][T26825] netlink_rcv_skb+0x1ef/0x440 [ 1829.620879][T26825] ? genl_bind+0x360/0x360 [ 1829.625386][T26825] ? netlink_ack+0x1160/0x1160 [ 1829.630337][T26825] ? down_read+0x1a8/0x2d0 [ 1829.634849][T26825] genl_rcv+0x24/0x40 [ 1829.638835][T26825] netlink_unicast+0x7ad/0x920 [ 1829.643625][T26825] netlink_sendmsg+0x8ad/0xbd0 [ 1829.648479][T26825] ? netlink_getsockopt+0x550/0x550 [ 1829.653679][T26825] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1829.659316][T26825] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1829.664602][T26825] ? security_socket_sendmsg+0x7c/0xa0 [ 1829.670069][T26825] ? netlink_getsockopt+0x550/0x550 [ 1829.675270][T26825] ____sys_sendmsg+0x5ed/0x9a0 [ 1829.680036][T26825] ? __sys_sendmsg_sock+0x30/0x30 [ 1829.685098][T26825] ? __import_iovec+0x306/0x510 [ 1829.690048][T26825] ? import_iovec+0x6f/0xa0 [ 1829.694557][T26825] ___sys_sendmsg+0x2a2/0x360 [ 1829.699236][T26825] ? __sys_sendmsg+0x2a0/0x2a0 [ 1829.704099][T26825] ? put_user_ifreq+0x81/0xb0 [ 1829.708798][T26825] __se_sys_sendmsg+0x1c3/0x2b0 [ 1829.713647][T26825] ? __x64_sys_sendmsg+0x80/0x80 [ 1829.718601][T26825] ? lockdep_hardirqs_on+0x94/0x140 [ 1829.723811][T26825] do_syscall_64+0x4c/0xa0 [ 1829.728228][T26825] ? clear_bhb_loop+0x60/0xb0 [ 1829.732903][T26825] ? clear_bhb_loop+0x60/0xb0 [ 1829.737572][T26825] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1829.743563][T26825] RIP: 0033:0x7f5cd3f9e159 [ 1829.748094][T26825] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1829.767891][T26825] RSP: 002b:00007f5cd4da3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1829.776574][T26825] RAX: ffffffffffffffda RBX: 00007f5cd4225fa0 RCX: 00007f5cd3f9e159 [ 1829.784641][T26825] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000005 [ 1829.792699][T26825] RBP: 00007f5cd403506b R08: 0000000000000000 R09: 0000000000000000 [ 1829.800676][T26825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1829.808653][T26825] R13: 00007f5cd4226038 R14: 00007f5cd4225fa0 R15: 00007ffe34da0b98 [ 1829.816742][T26825] [ 1829.820165][T26825] Kernel Offset: disabled [ 1829.824642][T26825] Rebooting in 86400 seconds..