last executing test programs: 4m17.949701282s ago: executing program 2 (id=360): socket(0xa, 0x3, 0xff) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') pread64(r0, &(0x7f0000000080)=""/237, 0xed, 0x5) 4m17.705690917s ago: executing program 2 (id=362): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x4000)=nil) brk(0x55555ede6001) 4m17.47166857s ago: executing program 2 (id=364): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000000380)={0x18, 0x14, 0x609, 0x0, 0x0, {0x1e}, [@generic="c1"]}, 0x18}}, 0x8040) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0xfc, &(0x7f00000001c0)={&(0x7f0000000040)=@ipv6_newrule={0x2c, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FIB_RULE_POLICY=@FRA_FWMASK={0x8, 0x10, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040090}, 0x40000) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x14, 0x1, 0x2, 0x3, 0x0, 0x0, {0x5, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000a40), 0x401, 0x0) write$UHID_INPUT(r5, &(0x7f0000000e40)={0x8, {"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", 0x1000}}, 0x1006) 4m14.90682024s ago: executing program 2 (id=374): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000740)='./file0\x00', 0x8000, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000009c0), 0x8, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 4m13.265726436s ago: executing program 3 (id=376): newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x2000) r0 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r4) sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000008c0)={0x24, r5, 0x3, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x1000}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[], &(0x7f0000000180)='GPL\x00'}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000080", 0x14, 0x6, 0x0, @remote, @mcast1, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x80, 0x11}}}}}}}, 0x0) r6 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0xc) 4m12.831010842s ago: executing program 2 (id=377): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x0) 4m11.925253974s ago: executing program 3 (id=379): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) 4m11.66489267s ago: executing program 2 (id=380): socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) io_uring_setup(0x1f9d, &(0x7f00000001c0)={0x0, 0x6685, 0x1, 0x2, 0x115}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000012edfffebfa30000000000007603090028feffff7a0af0fff8ffffff69a4f0ff000000005d040000000000007f000000000000002704000001ed0a002500000017ffff0cce040000000000007b0300fe000000001c04000000000000c6000000000000009500000000000000023bc065b7a379d17cf9333379fc9eca44d88e9a8a1087042584af69912435f1b6a693002e7f3be361917adef6ee1c8a2b4f8ef1e50b91f32050e436fe275daf51efd601b6482a0800000098efd2a102ee010400006e7a1de4a21f379dbf01de00b1b564faf3bef70548aed0d600c095199fe3ff312ce599b0eaebbdbd7359a48f5b0afc532ef58de3c1b7646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff095edc710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9ec21ead2ed51b104d4d91af25b8123deda8a3658d42ecb428bf6d8e8afcb913466aaa7f6df70252e79166d85827513acd02b5a63355a314d31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f08050e46850600000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040b96e37c4f46010400000000c3da29faf75ddd1aa96960bca97af133824b881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f13792292cb949b3aab06b1e042ff2164d80c605532b18ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fcd7071b53ac29df826f8ae6d6e18c1eacf5bf870768d5217e9bb5a05d9e22ce67f1231bd236ed200073826593c4e1a0f50a74bb482e486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292c6fe6e188750cf4f87cce2aa7d67c6133a9f05954cde298a35ea6d715ba80aee63300000000000000000000000000000000000040000000000000000386000000b854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc1caa80e64461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885f69754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8264f7b029b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8288e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347926a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd239e4a50d7eb8e327fb5db12cbd6a9efe8e671c4f251cabdfe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb6c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa232697526e24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76ab3f60afea80bb066aafb7517f787b090f419a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f8089322d84ac523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f6260a483632a2ab447f88dd6efec73a0271a19ca3aa860aa4dcaeebe3d53040b853a7c02a5fcc08b3a572969bbe91c921ac1476027772c87d172ab29967e38ba49e3e57fafea83e495a6a1d1a4ebf834349860d1dd66ffe3ffed0c39552a312e2db596d9c827e02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007fe79d2d25e30830b92fca00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d07d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cfe56557a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b53208ad8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2ccb1decb15b5d7d380008b7d28921c4b9280979525173f522df408d9818b6cc400098abb869921911480a876fbba698801937e8b4264eb6f5137bdaa075f1488d22230592a79000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb520400000000000000c3ae49f88c462ea2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399fa5ee0b41e14a6fe6894e901a523fcbadfeff535f2514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014fa841061e63d40f4e536314beda5738fee012365f963b2a85e7d8075c333475b9f0284405e30700000041285fbe0bdd37220e31d4731614a50c16c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd6d6ab7e0e843591d2618e2d2cdc7081c8fafffe8c350a5c554a387de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa22f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a9503000000da599d625054776151b2cd1fcde238bdc527594a6c17aa9728af24e2bb7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b0000f700de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81bdfcc8bc0000000000000000000000000000000000000000009231feef3117197c7963c2ba910969f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a9201bc4b73b431df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21da4fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a4ee271e35ed90000800847683c08bfda74a143c855030ae004ac797c575c202d8091eb77565212548ead770d68ad9fa2b2528798df1c36fc438d9c98f168490b41e158bb2e2d8ed19d44b9cce67c79f9f7bfae7ebe09e441745c592ce69c522b5136be09ed1b97ea3d5b317508df23e92c56fc2eb74d27d3861d91745b8fb9f6cc20e9f8b174000c62c4a2b212332a073fc5d0be7347e41454cb27e081c43e92ae7f9f046600db85d945a4666b588629ce0809d5c8506308688db21ec04d365497bf900600000000000000b17fe0abebd8a6bd8a881977dc1c09bb6f6267315b933c7e62067b4c3571e1cf078808ae993570f4a4fbec6f3c1311ed8f36670b4a5a6c2aa5c7018262837348c98d1180a85eb2cb8e75a244a8f0c86c96a19ec03659d5f6114a66db98653fe1f2c38d79829bdaa3169ad7e07edfc959b2dd0696e4d58f1a362c72a91cbda7ded220f35ab63693709d3e831f61bd38ecdf9b28fe51d4ee73d1341c002cdebfd2cbb86cf8d358ad4b70fc676c686823b6676192a63d5de9a20dd6960b0e92f184451b2a98ab87a71578b6d703c1742ca8391173a788698b909c99f39aaee3f0addbb187d12de9952abae9c87f3f497703a1d66c5c3062fd5f185a8b03cb1cbd541d28cd72666eb5941ddbd3ba02783dd1db8958c6d65858e8540868732a057c2a6705"], &(0x7f00000001c0)='GPL\x00'}, 0x48) socket$rds(0x15, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f00000001c0)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d65746100000000140002800800014000000012080002400000", @ANYRES16=r0], 0xc4}}, 0x0) 4m11.626478312s ago: executing program 3 (id=381): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, 0x0, 0x0) 4m11.161708599s ago: executing program 32 (id=380): socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) io_uring_setup(0x1f9d, &(0x7f00000001c0)={0x0, 0x6685, 0x1, 0x2, 0x115}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) socket$rds(0x15, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f00000001c0)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d65746100000000140002800800014000000012080002400000", @ANYRES16=r0], 0xc4}}, 0x0) 4m11.126177722s ago: executing program 3 (id=385): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000740)='./file0\x00', 0x8000, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000009c0), 0x8, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 4m8.541548513s ago: executing program 3 (id=388): openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000200)=@v3={0x3000000, [{0x7fffffff, 0x81}, {0x87d, 0xac76}]}, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/203, 0xfffffffffffffe5f) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(0xffffffffffffffff, 0x28, 0x6, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e24, 0x9817, @loopback, 0x2}, 0x1c) syz_mount_image$exfat(&(0x7f0000000180), &(0x7f0000000380)='./cgroup\x00', 0x800, &(0x7f00000003c0)=ANY=[@ANYBLOB="000472160556c49a8f77d21f2a5ddadd0700000000000000b9773e93b10bea54840856fcb2d48332a9bc03c716106c3045d5f3c338b810be692d50a50b8a1c4a287b3eb1bc43e5135e8d", @ANYRESDEC], 0x1, 0x1534, &(0x7f0000002d00)="$eJzs3AucTtX6OPDnWWvtMSbpbZLLsNZ6Nm8SyyRJLklySZIkSXJLSJrkSEJiyC1pSJJch+QyhOQyMWnc7/dLQpI0SRKSW7L+H8Vfnep3zvmdfjmfM8/383k/1jNrP2s/+33ey94b83WnwdUb1qhSn4jg34I//5EMALEA0B8ArgKAAADKxJeJPz+fU2Lyv7cT9ud6MO1yV8AuJ+5/9sb9z964/9kb9z974/5nb9z/7I37n71x/xnLzjZOLXA1P7Lvg+////er+4cz/P3/XySr5OjPV5e8tjNAzD+bwv3P3rj//7WCf2Yj7n/2xv3PrmIvdwHsPwC//7ODHH84w/3P3rj/jGVnl/v+8+V+QCR7PweX+/XHGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYYyx7OOUvUQBwcXy562KMMcYYY4wxxtifx+e43BUwxhhjjDHGGGPs/x6CAAkKAoiBHBALOSEOBABcCbnhKojA1RAP10AeuBbyQj7IDwUgAQpCIdBgwAJBCIWhCEThOigK10MxuAGKQwlwUBIS4UYoBTdBabgZysAtUBZuhXJQHipARbgNKsHtUBnugCpwJ1SFalAdasBdUBPuhlpwD9SGe6EO3Ad14X6oBw9AfXgQGsBD0BAehkbwCDSGJtAUmkHz/1X+89ANXoDu0AOSoSf0ghehN/SBvtAP+sNLMABehoHwCqTAIBgMr8IQeA2GwuswDN6A4fAmjICRMApGwxgYC6kwDsbDWzAB3oaJMAkmwxRIg6kwDd6B6TADZsK7MAveg9kwB+bCPEiH92E+LIAM+AAWwoeQCYtgMSyBpbAMlsMKWAmrYDWsgbWwDtbDBtgIm2AzbIGtsA22w0ewAz6GnbALdsMnsAc+/RfzT/5dfmcEBBQoUKHCGIzBWIzFOIzDXJgLc2NujGAE4zEe82AezIt5MT/mxwRMwEJYCA0aJCQsjIUxilEsikWxGBbD4lgcHTpMxEQshTdhaSyNZbAMlsWyWA7LY3msiBWxElbCylgZq2AVrIpVsTpWx7vwLuyJtbAW1sbaWAfrXLw9hfWxPjbABtgQG2IjbISNsTE2xabYHJtjC2yBLbEltsbW2AbbYFtsi0mYhO2wHbbH9tgBO2BH7IidsBN2xi7YJev5HIAv4AvYA6uKntgLe2FvTMnRF/thP3wJB+DL+DK+gik4CAfjq/gqvoZD8QQOwzdwOA7HSmIkjsLRSGIspmIqjsfxOAEn4ESchJNwCqbhVJyG03A6zsAZ+C7OwvfwPZyDc3AepmM6zscFmIEZuBBPYiYuwsW4BJfiMlyKK3AlrsDVuAZX4zpchxtwA27CTbgFt+A23AYfoQLAj3EX7sIU3IN7cC/uxX24D/fjfszCLDyAB/AgHsRDeAgP42E8gkfxGB7F43gcT+BJPIWn8AyewbP4bMKXDT66YVUKiPOUUCJGxIhYESviRJzIJXKJ3CK3iIiIiBfxIo/II/KKvCK/yC8SRIIoJAoJI4wgEcYAgIiKqCgqiopiopgoLooLJ5xIFImilCglSovSooy4RZQVt4pyorxo5SqKiqKSaO0qiztEFVFFVBXVRHVRQ9QQNUVNUUvUErVFbVFH1BF1xf2inuiJffFBcb4zDcUgbCQGY2PRRMgLn2AtxFBsKVqJ1uJx8QYOw7aihUsST4l2YhS2F38To/EZ0VGMxU7iOdFZdBFdxfOim2jpuoseYiL2FL3EFOwt+oi+op+YjtXEuzgrZ3XxikgRg8Rg8aqYh6+JoeJ1MeynI31TjBAjxSgxWowRY0WqGCfGi7fEBPG2mCgmicliikgTU8U08Y6YLmaImeJdMUu8J2aLOWKumCfSxftivlggMsQHYqH4UGSKRWKxWCKWimViuVghVopVYrVYI9aKdWK92CA2ik1is9gitoptYrv4SOwQH4udYpfYLT4Re8SnYq/4TOwTn4v94guRJb4UB8RX4qD4WhwS34jD4ltxRBwVx8R34rj4XpwQJ8UpcVqcET+Is+JHcU54ARKlkFIqGcgYmUPGypwyTl4hc8ngwrN7tYyX18g88lqZV+aT+WUBmSALykJSSyOtJBnKwrKIjMrrZFF5vSwmb5DFZQnpZEmZKG+UpeRNsrS8WZaRt8iy8lZZTpaXFWRFeZusJG+XEPl5H1VlNVld1pB3yWS4W9aS98ja8l5ZR94n68r7ZT35gKwvH5QN5EOyoXxYNpKPyMayiWwqm8nm8lHZQj4mW8pWsrV8XLaRT8i28kmZJJ+S7aS/8BJ5RnaUz8pO8jnZWXaRXeWP8pz0srvsIaEnyF7yRdlb9pF9ZT/ZX74kB8iX5UD5ikyRg+Rg+aocIl+TQ+Xrcph8Qw6Xb8oRcqQcJUfLMXKsTJXj5Hj5lpwg35YT5SQ5WU6RaXKq7HthpZlS/sP8t34nf+BPe98gN8pNcrPcIrfKbXK7/EjukDvkTrlT7pa75R65R+6Ve+U+uU/ul/tllsySB+QBeVAelIfkIXlYHpZH5FF5Wn4nj8vv5Ql5Up6Up+UZeUaevfAcgEIllFRKBSpG5VCxKqeKU1eoXOpKlVtdpSLqahWvrlF51LUqr8qn8qsCKkEVVIWUVkZZRSpUhVURFVXX4YUXjCquSiinSqpEdeO/kq+KqutVMXXDr/Iv1pf8B/U1V81VC9VCtVQtVWvVWrVRbVRb1VYlqSTVTrVT7VV71UF1UB1VR9VJdVKdVWfVVXVV3VQ31V11V8kqWfVSL6reqo/qq/qp/uolNUANUAPVQJWiUtRgNVgNUUPUUDVUDVPD1HA1XI1QI9QoNUqNUWNUqkpV49V4NUFNUBPVRDVZTVZpKk1NU9PUdDVdzVQz1Sw1S81Ws9VcNVelq3Q1X81XGSpDLVQLVaZapBapJWqJWqaWqRVqhVqlVqk1ao1ap9apTLVRbVSb1Wa1VW1V29V2tUPtUDvVTrVb7VZ71B61V+1V+9Q+tV/tV1kqSx1QB9RBdVAdUofUYXVYHVFH1DF1TB1Xx9UJdUKdUqfUGXVGnVVn1Tl17vxpXyACEahABTFBTBAbxAZxQVyQK8gV5A5yB5EgEsQH8UGe4Nogb5AvyB8UCBKCgkGhQAcmsIG40PRocF1QNLg+KBbcEBQPSgQuKBkkBjcGpYKbgtLBzUGZ4JagbHBrUC4oH1QIKga3BZWC24PKwR1BleDOoGpQLage1AjuCmoGdwe1gnuC2sG9QZ3gvqBucH9QL3ggqB88GDQIHgoaBg8HjYJHgsZBk6Bp0Cxo/qeu7/2JfI+57rqHTtY9dS/9ou6t++i+up/ur1/SA/TLeqB+RafoQXqwflUP0a/pofp1PUy/oYfrN/UIPVKP0qP1GD1Wp+pxerx+S0/Qb+uJepKerKfoND1VT9Pv6Ol6hp6p39Wz9Ht6tp6j5+p5Ol2/r+frBTpDf6AX6g91pl6kF+sleqleppfrFXqlXqVX6zV6rV6n1+sNeqPepDfrLXqr3qa364/0Dv2x3ql36d36E71Hf6r36s/0Pv253q+/0Fn6S31Af6UP6q/1If2NPqy/1Uf0UX1Mf6eP6+/1CX1Sn9Kn9Rn9gz6rf9TntD9/cn/+690oo0yMiTGxJtbEmTiTy+QyuU1uEzERE2/iTR6Tx+Q1eU1+k98kmARTyBQy55EhU9gUNlETNUVNUVPMFDPFTXHjjDOJJtGUMqVMaVPalDFlTFlT1pQz5UwFU8HcZm4zt5vbzR3mDnOnudNUM9VMDVPD1DQ1TS1Ty9Q2tU0dU8fUNXVNPVPP1Df1TQPTwDQ0DU0j08g0No1NU9PUNDfNTQvTwrQ0LU1r09q0MW1MW9PWJJkk0860M+1Ne9PBdDAdTUfTyXQynU1n09V0Nd1MN9PddDfJJtn0Mr1Mb9Pb9DV9TX/T3wwwA8xAM9CkmBQz2Aw2Q8wQM9QMNcPMG2b4+RNVM9KMMqPNGDPWpJpUM96MNxPMBDPRTDSTzWSTZtLMNDPNTDfTzUwz08wys8xsM9vMNXNNukk38818k2EyzEKz0GSaTLPYLDZLzVKz3Cw3K81Ks9qsNmthrVlv1puNZqPZbDabrWar2W62mx1mh9lpdprdZrfZY/aYvWav2Wf2mf1mv8kyWeaAOWAOmoPmkDlkDpvD5og5Yo6ZY+a4OW5OmBPmlDllzph8F74vvYm1OW2cvcLmslfa3PYq+/dxflvAJtiCtpDVNq/N96vYWGuL2RtscVvCOlvSJtobfxOXs+VtBVvR3mYr2dtt5d/ENe3dtpa9x9a299oa9q5fxXXsfbaufdjWQwSwTWwD28w2tA/bRvYR29g2sU1tM9vGPmHb2idtkn3KtrNP/yaebxfYlXaVXW3X2J12lz1lT9uD9mt7xv5gu9setr99yQ6wL9uB9hWbYgf9Jh5u37Qj7Eg7yo62Y+zY38ST7RSbZqfaafYdO93O+E2cbt+3s2yGnW3n2Ll23k/x+Zoy7Ad2of3QZtoAFtsldqldZpfbFf+/1iV2nV1vN9gd9mO72W6xW+02u/3iibDdZXfbT+we+6k9YL+y++zndr89ZLPslz/F54/vkP3GHrbf2iP2qD1mv7PH7ffqp9yRvQHsD/Y7+6M9Z70FQgKSpCigGMpBsZST4ugKykVXUm66iiJ0NcXTNZSHrqW8lI/yUwFKoIJUiDQZskQUUmEqQlG6ji6WV5xKkKOSlEg3Uim6iUrTzVSGbqGydCuVo/JUgSrSbVSJbqfKdAdVoTupKlWj6lSD7qKadDfVonuoNt1Ldeg+qkv3Uz16gOrTg9SAHqKG9DA1okeoMTWhptSMmtOj1IIeo5bUilrT49SGnqC29CQl0VPUjp6m9vQ36kDPUEd6ljrRc9SZulBXep660QvUnXpQMvWkXvQi9aY+1Jf6UX96iQbQyzSQXqEUGkSD6VUaQq/RUHqdhtEbNJzepBE0kkbRaBpDYymVxtF4eosm0Ns0kSbRZJpCaTSVptE7NJ1m0Ex6l2bRezSb5tBcmkfp9D7NpwWUQR/QQvqQMmkRLaYltJSW0XJaQStpFa2mNbSW1tF62kAbaRNtpi20lbbRdvqIdtDHtJN20W76hPbQp7SXPqN99Dntpy8oi76kA/QVHaSv6RB943vQt3SEjtIx+o6O0/d0gk7SKTpNZ+gHOks/0jnyBCGGIpShCoMwJswRxoY5w7jwijBXeGWYO7wqjIRXh/HhNWGe8Nowb5gvzB8WCBPCgmGhUIcmtCGFYVg4LBJGw+vCouH1YbEQw+JhidCFJcPE8MawVHhTWDq8OSwT3hKWDW8Ny4Xlw4fvrRjeFlYKbw8rh3eEVcI7w6phtbB6WCO8K6wZ3h3WCu8Ja4f3hqXD+8K64f1hvfCBsH74YNggfChsGD4cNgofCRuHTcKmYbOwefho2CJ8LGwZtgpbh4+HbcInwrbhk2FS+FTYLnz6p/n7FvzxfHLYM+wVvhi+GHp/j5wbnRdNj74fnR9dEM2IfhBdGP0wmhldFF0cXRJdGl0WXR5dEV0ZXRVdHV0TXRtdF10f3RD1vkYOcOiEk065wMW4HC7W5XRx7gqXy13pcrurXMRd7eLdNS6Pu9bldflcflfAJbiCrpDTzjjryIWusCviou46V9Rd74q5G1xxV8I5V9IlumauuWvuWrjHXEvXyrV2j7vH3RPuCfeke9I95dq5p1179zfXwT3jOrpn3bPuOdfZdXFd3fOumxuX++f3ZLLr5Xq53q636+v6uv6uvxvgBriBbqBLcSlusBvshrghbqgb6oa5YW64G+5GuBFulBvlxrgxLtWluvFuvJvgJriJbqKb7Ca7NJfmprlpbrqb7irN+Hkvs91sN9fNdeku3c13588ZM9xCt9Bluky32C12S91St9wtdyvdSrfarXZr3Vq33q13G91Gt9ltdlvdVrfdbXc73A6301/186Juj9vr9rp9bp/b775wWe5Ld8B95Q66r90h94077L51R9xRd8x95467790Jd9KdcqfdGfeDO+t+dOecd6mRcZHxkbciEyJvRyZGJkUmR6ZE0iJTI9Mi70SmR2ZEZkbejcyKvBeZHZkTmRuZF0mPvB+ZH1kQyYh8EFkY+TCSGVkUWRxZElkaWRbxvuDm0Bf2RXzUX+eL+ut9MX+DL+5LeOdL+kR/oy/lb/Kl/c2+jL/Fl/W3+nK+vK/gH/GNfRPf1Dfzzf2jvoV/zLf0rXxr/7hv45/wbf2TPsk/5dv5p317/zffwT/jO/pnfSf/nO/su/iu/nnfzb/gu/sePtn39L38i7637+P7+n6+v3/JD/Av+4H+FZ/iB/nB/lU/xL/mh/rX/TD/hh8e86YfcfESGcb6VD/Oj/dv+Qn+bT/RT/KT/RSf5qf6af4dP93P8DP9u36Wf8/P9nP8XD/Pp/v3/Xy/wGf4D/xC/6HP9Isu3lT2y/0Kv9Kv8qv9Gr/Wr/Pr/Qa/0W/ym/0Wv9Vv89v9R36H/9jv9Lv8bv+J3+M/9Xv9Z36f/9zv91/4LP+lP+C/8gf91/6Q/8Yf9t/6I/6oP+a/88f99/6EP+lP+dP+jP/Bn/U/+nP8f9YYY4wxxv4p4y4Nxa9nfr6d3/N3csQvNu4FAFduKZD1y/nzZ5Rr8/487iMS2kQA4KkenR68+KhaNTk5+cK2mRKCInMALv5N0HkxcCleBK3hCUiCVlDqd+vvI7qcoX+wfvQWgLhf5MTCpfjS+p8BYPLvrP/o48Pnlw1Pxf8P688BKFbkUk5OuBQvgtY/3V9pBaX/oP58LX5Zf+xv18/5eSpAy1/k5IJL8aX6E+ExeBqSfrUlY4wxxhhjjDH2sz6iQoeL158X/8Xn712fJ6hLOTngUvyPrs8ZY4wxxhhjjDF2+T3TpeuTjyYlterwrw8q/6+y/ulBI/i/WvkvGdzxn1HGvzDwHuDiTxQA/JsLApwfyL/yKDb9JftKufDW+fuppad9AP8ZrfwzBpf5g4kxxhhjjDH2p7t00v/rn6vLVRBjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMZYN/RW/TuyX++tx+Q6VMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYu2z+XwAAAP//dMcCKA==") r3 = socket(0x10, 0x803, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x44, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xf}, {}, {0xc, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f}}]}}]}, 0x44}}, 0x24040084) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 4m6.885524219s ago: executing program 3 (id=390): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x0) 4m6.550809149s ago: executing program 33 (id=390): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x0) 2m36.320341466s ago: executing program 0 (id=596): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x1c1f40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000002580)=@vmx={0x4, 0x0, 0x2080, {0xa000, 0x0, {0x3}, 0x1, 0x8}, {"0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700", "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f58a00"}}) 2m36.161973616s ago: executing program 0 (id=598): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x18, r1, 0x1, 0x0, 0x0, {0x1c}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) r2 = socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x24403}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 2m34.569023939s ago: executing program 0 (id=603): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000480)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x80, 0x1c, {0x75e9, 0x38, 0x88, 0x74e, 0x3, 0x8010, 0x3, 0x200, 0x201, 0x2, 0x1004, 0x1ff}}, 0x0, 0x0, 0x0, 0x0}) r2 = dup(0xffffffffffffffff) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) lseek(r3, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) r7 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400090600000000000000001e000000c10000002c06a190268e90fbb71f7b4ef4eb55fa848602927b8487f16d6b683afda9da8d3cf4023a7bbc7e3468470d879e7fd20c608adb82f9ff3fdb4a7fada28a36bd130c574dd14bef81e8a215e6860bc121d68c6d003a1f4702316d5fd242a87fa011dd478c5ec6"], 0x18}}, 0x8040) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000440)={@broadcast, @initdev, 0x0}, &(0x7f00000004c0)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000580)={'ip6tnl0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x6, 0x7, 0x0, 0x1, 0x18, @ipv4={'\x00', '\xff\xff', @multicast2}, @local, 0x1, 0x7800, 0x4d, 0x42}}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r7, &(0x7f00000006c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0xac, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000001}, 0x40000) 2m29.783714679s ago: executing program 0 (id=616): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) setreuid(0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x0, 0x0, 0x4, 0x0, 0xffffff7f}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x1, 0xe4}}]}}, 0x0, 0x3e}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{}, &(0x7f0000000540), 0x0}, 0x20) setsockopt$inet_int(r1, 0x0, 0x22, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x4008090) prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='[[-\\\x8d%\xbc+\x00') bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b000000000000000000000000800000", @ANYBLOB="00000000d3ec66ecc053c543da2e2e"], 0x48) 2m28.685438853s ago: executing program 0 (id=619): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="01000000080000000200000004"], 0x48) socket(0x41503864490ca358, 0x6, 0xffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0xdedb) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc776000) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) syz_open_procfs(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000740)='./file0\x00', 0x8000, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000009c0), 0x8, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 2m25.193715167s ago: executing program 0 (id=625): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, &(0x7f0000000540)) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file1\x00', 0x2000084c, &(0x7f0000000580)=ANY=[@ANYBLOB="696f636861727365743d61736369692c646973636172642c646d61736b3d3030303030303030303030303030303030303030822c1c1b0a2b80e1a018403030372c7569643d7d22b6cb2f00000000485ed78cb31de77578a9161cf569d4b085eefcc835c6b1f2e77b03a4bbfb25e2243da74bef4eb16171aff136746ddea6ad23a49a10225a6339e0e0bb07bda2b0792f4ab1f2e3e1453176d3e39e4e65ddcd21df82949e7bd0e77b19c8a05205c3bf200b6f894dbba064ae8230375cf5e3178cf380684aa6f7aef8d22091e3e9bd6385ef17c433f8964408213341914e63af", @ANYRESHEX, @ANYRES64, @ANYRES8, @ANYRES16, @ANYRES64, @ANYBLOB="2c6469736361726459ad809e1eb82c00fb278330ab3b4884d36adf6908d11f5783dc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x81, 0x14fc, &(0x7f0000002a80)="$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") keyctl$chown(0x4, r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) setxattr$security_capability(&(0x7f0000000240)='./file1\x00', &(0x7f00000001c0), 0x0, 0x0, 0x1) syz_mount_image$vfat(&(0x7f00000016c0), &(0x7f0000000100)='./bus\x00', 0x1010000, &(0x7f0000001780)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0], 0xfd, 0x36e, &(0x7f0000000f00)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000000080)=""/234, 0xea) 2m9.381803833s ago: executing program 34 (id=625): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, &(0x7f0000000540)) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file1\x00', 0x2000084c, &(0x7f0000000580)=ANY=[@ANYBLOB="696f636861727365743d61736369692c646973636172642c646d61736b3d3030303030303030303030303030303030303030822c1c1b0a2b80e1a018403030372c7569643d7d22b6cb2f00000000485ed78cb31de77578a9161cf569d4b085eefcc835c6b1f2e77b03a4bbfb25e2243da74bef4eb16171aff136746ddea6ad23a49a10225a6339e0e0bb07bda2b0792f4ab1f2e3e1453176d3e39e4e65ddcd21df82949e7bd0e77b19c8a05205c3bf200b6f894dbba064ae8230375cf5e3178cf380684aa6f7aef8d22091e3e9bd6385ef17c433f8964408213341914e63af", @ANYRESHEX, @ANYRES64, @ANYRES8, @ANYRES16, @ANYRES64, @ANYBLOB="2c6469736361726459ad809e1eb82c00fb278330ab3b4884d36adf6908d11f5783dc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x81, 0x14fc, &(0x7f0000002a80)="$eJzs3AuUjlXbOPB97b1vxjTpaZLDsK993TxpsE2S5JCQQ5IkSZJTQtIkSUJiyClpSEKOk+QwhOQwjUnjfD7knDR5pUmSkJCw/0vv+356v97v6/3W2/+z1jfXb629Zl9zP9f1XPdcs+a572eteb7rOapei/q1mxGR+LfAX7+kCCFihBDDhBDXCSECIUSl+Erxl48XUJDy7z0J+3M9nH61O2BXE88/b+P55208/7yN55+38fzzNp5/3sbzz9t4/ozlZdvnFLueV95d/P5/Xsav//+H5Jaf/NXG8jf2+h+k8PzzNp5/3sbzz9t4/nkbzz9v4/n/31frvznG88/beP6M5WVX+/1nXld3Xe3fP8YYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjecM5f4UWQvx9f7X7YowxxhhjjDHG2J/H57/aHTDGGGOMMcYYY+z/PxBSKKFFIPKJ/CJGFBCx4hoRJ64VBcV1IiKuF/HiBlFI3CgKiyKiqCgmEkRxUUIYgcIKEqEoKUqJqLhJlBY3i0RRRpQV5YQT5UWSuEVUELeKiuI2UUncLiqLO0QVUVVUE9XFnaKGuEvUFLVEbXG3qCPqinqivrhHNBD3iobiPtFI3C8aiwdEE/GgaCoeEs3Ew6K5eES0EI+KluIx0Uq0Fm1EW9Hut/l98/+L+S+JvuJl0U/0FyligBgoXhGDxGAxRAwVw8SrYrh4TYwQr4tUMVKMEm+I0eJNMUa8JcaKcWK8eFtMEBPFJDFZTBFTRZp4R0wT74rp4j0xQ8wUs8RskS7miLnifTFPzBcLxAdiofhQLBKLxRKxVGSIj0SmWCayxMdiufhEZIsVYqVYJVaLNWKtWCfWiw1io9gkNostYqvYJraLT8UOsVPsErvFHrFX7BOfif3ic3FAfCFyxJf/w/yz/ym/FwgQIEGCBg35IB/EQAzEQizEQRwUhIIQgQjEQzwUgkJQGApDUSgKCZAAJaAEICAQEJSEkhCFKJSG0pAIiVAWyoIDB0mQBBXgVqgIFaESVILKUBmqQFWoCtWhOtSAGlATakJtqA11oA7Ug3pwD9wD90JDaAiNoBE0hsbQBJpAU2gKzaAZNIfm0AJaQEtoCa2gFbSBNtAO2kF7aA8doAN0gk7QGTpDF+gCyZAMXaErdINu0B26Qw/oAT2hJ/SC3tAbXoKX4GV4GfpDHTkABsJAGASDYAgMhaHwKgyH1+A1eB1SYSSMgjfgDXgTxsAZGAvjYDyMhxpyIkyCyUByKqRBGkyDaTAdpsMMmAkzYTakwxyYC3NhHsyH+fABLIQP4UNYDIthKWRABmTCMsiCLFgOZyEbVsBKWAWrYQ2shnWwHtbBRtgEG2ELbIFtsA0+hU9hJ+yE3bAb9sJe+Aw+g8/hc0iFHMiBg3AQDsEhOAyHIRdy4QgcgaNwFI7BMTgOx+EEnIRTcBJOw2k4A2fhHJyD83AeLsALCd8031tmQ6qQl2mpZT6ZT8bIGBkrY2WcjJMFZUEZkREZL+NlIVlIFpaFZVFZVCbIBFlClpAoUZIMZUlZUkZlVJaWpWWiTJRlZVnppJNJMklWkBVkRVlRVpK3y8ryDllFVpUdXXVZXdaQnVxNWUvWlrVlHVlX1pP1ZX3ZQDaQDWVD2Ug2ko1lY9lEPiibygEwBB6WlyfTQo6ElnIUtJKtZRvZVr4Jj8v2cgx0kB1lJ/mkHAdjoYts75LlM7KrnATd5HNyMjwve8ip0FO+KHvJ3rKPfEn2lR1cP9lfzoABcqCcDYPkYDlEDpXzoK68PLF68nWZKkfKUfINuRTelGPkW3KsHCfHy7flBDlRTpKT5RQ5VabJd+Q0+a6cLt+TM+RMOUvOlulyjpwr35fz5Hy5QH4gF8oP5SK5WC6RS2WG/EhmymUyS34sl8tPZLZcIVfKVXK1XCPXynVyvdwgN8pNcrPcIrfKbXK7/FTukDvlLrlb7pF75T75mdwvP5cH5BcyR34pD8q/yEPyK3lYfi1z5TfyiPxWHpXfyWPye3lc/iBPyJPylPxRnpY/yTPyrDwnf5bn5S/ygrwoL0kvhQIllVJaBSqfyq9iVAEVq65RcepaVVBdpyLqehWvblCF1I2qsCqiiqpiKkEVVyWUUaisIhWqkqqUiqqbVGl1s0pUZVRZVU45VV4lqVtUBXWrqqhuU5XU7aqyukNVUVVVNVVd3alqqLtUTVVL1VZ3qzqqrqqn6qt7VAN1r2qo7lON1P2qsXpANVEPqqbqIdVMPayaq0dUC/WoaqkeU61Ua9VGtVXt1OOqvXpCdVAdVSf1pOqsnlJd1NMqWT2juqpnVTf1nOqunlc91Auqp3pR9VK9VR91UV1SXvVT/VWKGqAGqlfUIDVYDVFD1TD1qhquXlMj1OsqVY1Uo9QbarR6U41Rb6mxapwar95WE9RENUlNVlPUVJWm3lHT1LtqunpPzVAz1Sw1W6WrOWrI3yot+Bfy3/0n+SN+ffZtarv6VO1QO9UutVvtUXvVPrVP7Vf71QF1QOWoHHVQHVSH1CF1WB1WuSpXHVFH1FF1VB1Tx9RxdVydUCfVz+pHdVr9pM6os+qs+lmdV+fVhb/9DIQGLbXSWgc6n86vY3QBHauv0XH6Wl1QX6cj+nodr2/QhfSNurAuoovqYjpBF9cltNGorSYd6pK6lI7qm3RpfbNO1GV0WV1OO11eJ+lb/u38P+qvnW6n2+v2uoPuoDvpTrqz7qy76C46WSfrrrqr7qa76e66u+6he+ieuqfupXvpPrqP7qv76n66n07RKXqgfkUP0oP1ED1UD9Ov6uF6uB6hR+hUnapH6VF6tB6tx+gxeqweq8fr8XqCnqAn6Ul6ip6i03Sanqan6el6up6hZ+hZepZO1+l6rp6r5+l5eoFeoBfqhXqRXqSX6CU6Q2foTJ2ps3SWXq6X62y9Qq/Qq/QqvUav0ev0Or1Bb9Cb9Ca9RW/R2Xq73q536B16l96l9+g9ep/ep/fr/fqAPqBzdI4+qA/qQ/qQPqwP61ydq4/oI/qoPqqP6WP6uD6uT+gT+pQ+pU/r0/qMPqPP6XP6vD6vL+gL+pK+dPmyL5CBDHSgg3xBviAmiAlig9ggLogLCgYFg0gQCeKD+KBQcGNQOCgSFA2KBQlB8aBEYAIMbEBBGJQMSgXR4KagdHBzkBiUCcoG5QIXlA+SgluCCsGtQcXgtqBScHtQObgjqBJUDaoF1YM7gxrBXUHNoFZQO7g7qBPUDeoF9YN7ggbBvUHD4L6gUXB/0Dh4IGgSPBg0DR4KmgUPB82DR4IWwaNBy+CxoFXQOmgTtA3a/an1vT9T5AnXz/Q3KWaAGWheMYPMYDPEDDXDzKtmuHnNjDCvm1Qz0owyb5jR5k0zxrxlxppxZrx520wwE80kM9lMMVNNmnnHTDPvmunmPTPDzDSzzGyTbuaYueZ9M8/MNwvMB2ah+dAsMovNErPUZJiPTKZZZrLMx2a5+cRkmxVmpVllVps1Zq1ZZ9abDWaj2WQ2my1mq9lmtptPzQ6z0+wyu80es9fsM5+Z/eZzc8B8YXLMl+ag+Ys5ZL4yh83XJtd8Y46Yb81R8505Zr43x80P5oQ5aU6ZH81p85M5Y86ac+Znc978Yi6Yi+aS8Zcv7i+/vKNGjfkwH8ZgDMZiLMZhHBbEghjBCMZjPBbCQlgYC2NRLIoJmIAlsAReRkhYEktiFKNYGktjIiZiWSyLDh0mYRJWwApYEStiJayElbEyVsEqWA2r4Z14J96Fd2EtrIV3491YF+tifayPDbABNsSG2AgbYWNsjE2wCTbFptgMm2FzbI4tsAW2xJbYClthG2yD7bAdtsf22AE7YCfshJ2xM3bBLpiMydgVu2I37IbdsTv2wB7YE3tiL+yFfbAP9sW+2A/7YQqm4EAciINwEA7BITgMh+FwHI4jcASmYiqOwlE4GkfjGByDY3Ecjse3cQJOxEk4GafgVEzDNJyG03A6TscZOANn4SxMx3Sci3NxHs7DBbgAF+JCXISLcAkuwQzMwEzMxCzMwuW4HLMxG1fiSlyNq3EtrsX1uB434kbcjJtxK27F7bgdd+AO3IW7cA/uwX24D/fjfjyABzAHc/AgHsRDeAgP42HMxVw8gkfwKB7FY3gMj+NxPIEn8BSewtN4Gs/gGTyH5/A8/oIX8CJeQo8xVopYe42Ns9fagvY6G2ML2N/GRW0xm2CL2xLW2MK2yD/EaK1NtGVsWVvOOlveJtlbfhdXsVVtNVvd3mlr2Ltszd/FDey9tqG9zzay99v69p5/iBvbB2wT+6htah+zzWxr29y2tS3so7alfcy2sq1tG9vWdrZP2S72aZtsn7Fd7bO/izPtMrvebrAb7Sa7335uz9mf7VH7nT1vf7H9bH87zL5qh9vX7Aj7uk21I38Xj7dv2wl2op1kJ9spdurv4ll2tk23c+xc+76dZ+f/Ls6wH9mFNssusovtErv01/hyT1n2Y7vcfmKz7Qq70q6yq+0au9au+49eV9ktdqvdZvfZz+wOu9PusrvtHrv31/jyeRywX9gc+6U9Yr+1h+xX9rA9ZnPtN7/Gl8/vmP3eHrc/2BP2pD1lf7Sn7U/2jD376/lfPvcf7UV7yXorCEiSIk0B5aP8FEMFKJauoTi6lgrSdRSh6ymebqBCdCMVpiJUlIpRAhWnEmQIyRJRSCWpFEXpJipNN1MilaGyVI4clackuoUq0K1UkW6jSnQ7VaY7qApVpWpUne6kGnQX1aRaVJvupjpUl+pRfbqHGtC91JDuo0Z0PzWmB6gJPUhN6SFqRg9Tc3qEWtCj1JIeo1bUmtpQW2pHj1N7eoI6UEfqRE9SZ3qKutDTlEzPUFd6lrrRc9Sdnqce9AL1pBepF/WmPvQS9aWXqR/1pxQaQAPpFRpEg2kIDaVh9CoNp9doBL1OqTSSRtEbNJrepDH0Fo2lcTSe3qYJNJEm0WSaQlMpjd6hafQuTaf3aAbNpFk0m9JpDs2l92kezacF9AEtpA9pES2mJbSUMugjyqRllEUf03L6hLJpBa2kVbSa1tBaWkfraQNtpE20mbbQVtpG2+lT2kE7aRftpj20l/bRZ7SfPqcD9AXl0Jd0kP5Ch+grOkxfUy59Q0foWzpK39Ex+p6O0w90gk7SKfqRTtNPdIbO0jn6mc7TL3SBLtIl8iRCCGWoQh0GYb4wfxgTFghjw2vCuPDasGB4XRgJrw/jwxvCQuGNYeGwSFg0LBYmhMXDEqEJMbQhhWFYMiwVRsObwtLhzWFiWCYsG5YLXVg+TApvCSuEt4YVw9vCSuHtYeXwjrBKWDV89P7q4Z1hjfCusGZYK6wd3h3WCeuG9cL64T1hg/DesGF4X9govD+sGD4QNgkfDJuGD4XNwofD5uEjYYvw0bBl+FjYKmwdtgnbhu3Cx8P24RNhh7Bj2Cl8MuwcPhV2CZ8Ok8Nnwq7hs394PCUcEA4MXwlfCb2/Ty2JLo1mRD+KZkaXRbOiH0eXRz+JZkdXRFdGV0VXR9dE10bXRddHN0Q3RjdFN0e3RLdGt0W9r59fOHDSKadd4PK5/C7GFXCx7hoX5651Bd11LuKud/HuBlfI3egKuyKuqCvmElxxV8IZh846cqEr6Uq5qLvJlXY3u0RXxpV15Zxz5V2Sa+vauXauvXvCdXAdXSf3pHvSPeWeck+7p90zrqt71nVzz7nu7nnXw73gXnAvul6ut+vjXnJ93cuun+vvUlyKG+gGukFukBvihrhhbpgb7oa7EW6ES3WpbpQb5Ua70W6MG+PGurFuvBvvJrgJbpKb5Ka4KS7Npblpbpqb7qa7GW6Gm+VmuXSX7ua6uW6em+cWuAVuYeJCt8gtckvcEpfhMlymy3RZLsstd8tdtst2K91Kt9qtdmvdWrferXcb3Ua32W12W91Wt91tdzvcDrfL7XJ73B63z+1z+91+d8AdcDkuxx10B90hd8gddl+7XPeNO+K+dUfdd+6Y+94ddz+4E+6kO+V+dKfdT+6MO+vOuZ/defeLu+AuukvOu7TIO5FpkXcj0yPvRWZEZkZmRWZH0iNzInMj70fmReZHFkQ+iCyMfBhZFFkcWRJZGsmIfBTJjCyLZEU+jiyPfBLJjqyIrIysiqyOrIl4X3xH6Ev6Uj7qb/Kl/c0+0ZfxZX0573x5n+Rv8RX8rb6iv81X8rf7yv4OX8VX9dX8Y76Vb+3b+La+nX/ct/dP+A6+o+/kn/Sd/VO+i3/aJ/tnfFf/rO/mn/Pd/fO+h3/B9/Qv+l6+t+/jX/J9/cu+n+/vU/wAP9C/4gf5wX6IH+qH+Vf9cP+aH+Ff96l+pB/l3/Cj/Zt+jH/Lj/Xj/Hj/tp/gJ/pJfrKf4qf6NP+On+bf9dP9e36Gn+ln+dk+3c/xc/37fp6f7xf4D/xC/6Ff5Bf7JX6pz/Af+Uy/zGf5j/1y/4nP9iv8Sr/Kr/Zr/Fq/zq/3G/xGv8lv9lv8Vr/Nb/ef+h1+p9/ld/s9fq/f5z/z+/3n/oD/wuf4L/1B/xd/yH/lD/uvfa7/xh/x3/qj/jt/zH/vj/sf/Al/0p/yP/rT/id/xp/15/zP/rz/xV/wF/0l/p81xhhjjLF/ifqD4wP+yffk39ZlA4UQ1+4slvufa24u/Nf9YJnQOSKEeKZ/z4f/vurUSdn698dmKxGUWiyEiFzJzyeuxCtEJ/GUSBYdRYV/2t9g2fs8/b5+Sspv6kdvFyL2Nzkx4kp8pf6t/0X9x58cn1k5PBf/39RfLERiqSs5BcSV+Er9iv9F/SLt/6D/Al+lCdHhNzlx4kp8pX6SeEI8K5L/4ZGMMcYYY4wxxthfDZbVuv/R/fPl+/MEfSUnv7gS/9H9OWOMMcYYY4wxxq6+53v3efrx5OSO3XnDG97w5j82V/svE2OMMcYYY+zPduWi/2p3whhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOM5V3/Gx8ndrXPkTHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGLva/l8AAAD//zG6PD0=") keyctl$chown(0x4, r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) setxattr$security_capability(&(0x7f0000000240)='./file1\x00', &(0x7f00000001c0), 0x0, 0x0, 0x1) syz_mount_image$vfat(&(0x7f00000016c0), &(0x7f0000000100)='./bus\x00', 0x1010000, &(0x7f0000001780)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0], 0xfd, 0x36e, &(0x7f0000000f00)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000000080)=""/234, 0xea) 16.701138855s ago: executing program 1 (id=928): r0 = socket$l2tp(0x2, 0x2, 0x73) sendmmsg$inet(r0, &(0x7f0000007340)=[{{&(0x7f0000000a40)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10, 0x0}}, {{&(0x7f0000001dc0)={0x2, 0x4e24, @private=0xa010100}, 0x10, 0x0}}], 0x2, 0x8014) 16.333612867s ago: executing program 1 (id=929): ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = inotify_init() socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x4) inotify_add_watch(r2, &(0x7f00000000c0)='.\x00', 0x5000009) r3 = open(0x0, 0x189a7c, 0x113) r4 = open(&(0x7f0000000040)='./bus\x00', 0x4e142, 0x0) pwritev2(r4, 0x0, 0x0, 0x6000000, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x37fffee, 0x4002011, r3, 0x0) 12.622551323s ago: executing program 4 (id=931): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) sendmsg$NL80211_CMD_START_NAN(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x33}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000001}, 0x8810) write$sndseq(r0, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r1, &(0x7f0000000080)=[{0x1e, 0x0, 0x0, 0xfd, @time, {}, {}, @result}], 0x1c) 12.33761052s ago: executing program 4 (id=934): syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}, @broadcast}, {0x17, 0x7c, 0x0, @loopback}}}}}, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000081, &(0x7f0000000080)=ANY=[@ANYRES8=0x0, @ANYRES8, @ANYRES64, @ANYRES8], 0x0, 0x23e, &(0x7f0000000bc0)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, 0x0, 0x0) 12.176187529s ago: executing program 4 (id=936): io_uring_setup(0x1b24, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$sysfs(0xffffffffffffff9c, 0x0, 0x123481, 0x127) socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) sendfile(r2, r3, 0x0, 0xffffffff004) 10.884099394s ago: executing program 6 (id=937): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="01acd0"], 0x25) 10.753326872s ago: executing program 5 (id=938): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800002, &(0x7f0000000100)={[{@noblock_validity}, {@dioread_nolock}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}, {@noquota}, {@data_err_ignore}], [], 0x22}, 0x84, 0x464, &(0x7f0000000ac0)="$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") sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xb, &(0x7f00000002c0)=0x41, 0x4) accept4(r1, 0x0, &(0x7f0000000040), 0x0) r4 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) fsmount(r4, 0x0, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0x8, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@nfs_export_on}]}) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x322020, &(0x7f0000000480)=ANY=[], 0x1, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file7\x00', 0x0, 0x10000, 0x0) 10.644327908s ago: executing program 6 (id=939): socket(0x1d, 0x2, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x44, 0x30, 0x1, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000805}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) keyctl$invalidate(0x15, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) chroot(&(0x7f0000000000)='./file0\x00') getresuid(0x0, &(0x7f00000001c0), 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaa002000000008080047000030", @ANYRES32=0x41424344, @ANYRESHEX, @ANYBLOB="0000000000000020c21944d604000016612f69444755fe"], 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) 10.46006251s ago: executing program 1 (id=940): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f00000006c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x6, 0xad, &(0x7f0000000140)=""/173, 0x41100, 0x1b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfff}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_io_uring_setup(0x54f, &(0x7f0000000140)={0x0, 0x84d9, 0x400, 0xffffffff, 0x204}, &(0x7f00000001c0)=0x0, &(0x7f0000000440)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd=r2, 0x0, 0x0, 0xf67, 0x8, 0x1}) io_uring_enter(r4, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f) 9.428490479s ago: executing program 5 (id=941): symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000200)='./file0\x00') chmod(&(0x7f0000000100)='./file0\x00', 0xed) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="800000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000011c00108008000140"], 0x80}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000380)={'tunl0\x00', &(0x7f0000000700)={'syztnl0\x00', 0x0, 0x8, 0x8, 0x5, 0x6, {{0x5, 0x4, 0x2, 0x12, 0x14, 0x68, 0x0, 0x1c, 0x4, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="02030003120000002cbd7000fbdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a00000000000000000000000000000000000000000000010b0000000000000002000100000000000000070c0000000005000500000000000a00000000000000fc0100000000000000000000000000010700000000000000010014"], 0x90}, 0x1, 0x7}, 0x0) 7.919789867s ago: executing program 4 (id=942): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000480)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x80, 0x1c, {0x75e9, 0x38, 0x88, 0x74e, 0x3, 0x8010, 0x3, 0x200, 0x201, 0x2, 0x1004, 0x1ff}}, 0x0, 0x0, 0x0, 0x0}) r2 = dup(0xffffffffffffffff) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) lseek(r3, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) r7 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400090600000000000000001e000000c10000002c06a190268e90fbb71f7b4ef4eb55fa848602927b8487f16d6b683afda9da8d3cf4023a7bbc7e3468470d879e7fd20c608adb82f9ff3fdb4a7fada28a36bd130c574dd14bef81e8a215e6860bc121d68c6d003a1f4702316d5fd242a87fa011dd478c5ec6"], 0x18}}, 0x8040) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000440)={@broadcast, @initdev, 0x0}, &(0x7f00000004c0)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000580)={'ip6tnl0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x6, 0x7, 0x0, 0x1, 0x18, @ipv4={'\x00', '\xff\xff', @multicast2}, @local, 0x1, 0x7800, 0x4d, 0x42}}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r7, &(0x7f00000006c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0xac, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000001}, 0x40000) 7.53347595s ago: executing program 6 (id=943): openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x141040, 0x42) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000500), 0xc80, 0x0) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x8000000000000000) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x80000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000040)={0xc}) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c40)=ANY=[@ANYBLOB="2c0000003f000701feffffff00000000047c0000040042800c00018006000600800a0000080002800400188080c2ff66506c97bf3b24209dd6c20c68c4179500132f2788b20c6cbda0a671c7f88fce3065fac4045e62c67616f5b4b970eb8511173ec0ceb3083aeb7ee838f9187b104180aba2e2c6d9db9b1d1d26d418a75ac3a0faa3efce63cb2c6d6a1198b258dbe4b457a64a3e7f787084cbed65c10a9b518fe975c53ddbb2adf58dfcb67835c3acdbfced2594ff71ac64dbbca16487cfa99329bcb4c1864e637e3a24e2f23b5a790a808545345e32ea2b02d02e88efbdc49646a7d5ef"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_buf(r5, 0x29, 0x1f, 0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0xffffffffffffff19, 0x0}, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) ioctl$DRM_IOCTL_WAIT_VBLANK(r7, 0xc018643a, &(0x7f0000000140)={0x4000000, 0x100, 0x2}) ioctl$DRM_IOCTL_WAIT_VBLANK(r7, 0xc018643a, &(0x7f0000000040)={0x10000000, 0x8, 0x3}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{0x0}], 0x1, 0x0, 0x0, 0x7000000}}], 0x1, 0x8000) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x441, 0x0) socket$netlink(0x10, 0x3, 0x10) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f00000014c0)=0x60, 0x4) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r8, 0xffffffffffffffff, 0x0) 6.443921603s ago: executing program 5 (id=944): syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}, @broadcast}, {0x17, 0x7c, 0x0, @loopback}}}}}, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000081, &(0x7f0000000080)=ANY=[@ANYRES8=0x0, @ANYRES8, @ANYRES64, @ANYRES8], 0x0, 0x23e, &(0x7f0000000bc0)="$eJzs3c9qE1EUB+AzSdqmukgWrkRwQBeuStsnSJEKYldKFupCi21BklCwEGgVQ1c+gU/ic7jxDXwAoTtdFEYmSZsWUm0wf0r9vk0uzP3NOTe5Iau5eX2n1dja3ds5/PA9yuUkCrWoJUcR1ShEbiEAgOvmV5bFUdYzWrJUmFRPAMBkXfL3f3GKLQEAE/bs+Ysnaxsb60/TtBzR+tSuJ9F77V1f24m30YztWI5KHEdkp3rjR4831qOU5qpxv9Vp1/Nk69XX/v3XfkR08ytRierw/Eracybfadfn4ka/fi3Pr0Ylbg3Prw7JR30+Htw70/9SVOLbm9iNZmxFnh3kP66k6cPs88/3L/OO83zSadcXuvMGsuLUPxwAAAAAAAAAAAAAAAAAAAAAAK6tpTRN0yz7kmVZ1jl3/k7xuHt9KT1RPX8+Ty9/0flAnTPn6yznJZLe/EG+FLdLUZrl2gEAAAAAAAAAAAAAAAAAAOCq2Ns/aGw2m9vvxjo4eax//Hf+10EU+601k4gr0E93sJj3M51ad2PEWrURS0Rh/6Bxsrsam0n8JVWe0CbJhmy/4oWp+TFVn7853lUkETF3+mb+aXIh5sb8TQEAAAAAAAAAAAAAAAAAAKZs8NDvkIuHM2gIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGZg8P//Iww6/fAlUzNeIgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP+B3wEAAP//bkR7Lg==") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, 0x0, 0x0) 6.361378348s ago: executing program 6 (id=945): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@i_version}, {@min_batch_time={'min_batch_time', 0x3d, 0x3a5}}, {@bh}]}, 0x1, 0x51d, &(0x7f0000000200)="$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") r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000300)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001f40)=""/4107, 0x100b, 0x1, 0x0}, &(0x7f0000000080)=0x40) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0xffffe000) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x11, 0xf1cb, 0x344, 0x4, 0x0, r0, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0xfffffffc}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008230000b7040000000000008500000001000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000060ff850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f138d509000000000100005ae583de0dd7d8319f98af017028ec214e6cf484fda542e718f94b929ade5b175c0a9b2ce9", 0x5d}], 0x1}, 0x44) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000000)={'bond_slave_1\x00', {0x2, 0x4e31, @empty=0xfdfdffff}}) write$P9_RWSTAT(r0, &(0x7f0000000100)={0x7, 0x7f, 0x1}, 0x7) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, 0xffffffffffffffff, 0xfffffffffffffffc, 0x5, 0x5, 0xfffffffffdffffff}) 6.257505455s ago: executing program 5 (id=946): syz_open_dev$loop(&(0x7f0000000140), 0xd9, 0x82) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001500)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000400)=""/185, &(0x7f0000000140)=""/79, 0x9000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 6.239094475s ago: executing program 1 (id=947): r0 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) getpid() r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r5, 0x0, 0x30) sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dffefffffffffffffff60a64c9f4080003fe060100000400020011b53631", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x44010) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) 6.190503859s ago: executing program 5 (id=948): syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8}}, 0x4) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x404c050}, 0x20000000) read$msr(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000280), 0x84000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x4) syz_io_uring_setup(0x4e1, 0x0, 0x0, &(0x7f00000001c0)) clock_nanosleep(0xfffffff2, 0xca9a3b, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 4.472830919s ago: executing program 4 (id=949): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800002, &(0x7f0000000100)={[{@noblock_validity}, {@dioread_nolock}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}, {@noquota}, {@data_err_ignore}], [], 0x22}, 0x84, 0x464, &(0x7f0000000ac0)="$eJzs3EtvG0UcAPD/bpq+S0Ipjz6AQEFEPJImLdADFxBIvSAhwaEcQ5pWpWmDmiDRKqIpQuWI+gmAIxKfgBNcEHACcYU7QqpQLgQOaNHau6lx7GAncZ3g30/aeGZ31jt/7449O2MngJ41lP9JIvZGxM8RMRARffUFhqoPS4vzk38uzk8mkWWv/57ku8Ufi/OTZdGkeNxTZIbTiPTDJA43OO7slasXJqanpy4X+dG5i++Mzl65+sz5ixPnps5NXRo/efLE8bHnnxt/dkPi3JfX9dD7M0cOnnrz5quTp2++9d0XeX33Fttr46gaXPcxh2Jo+TWp9/i6n31z2VeTTrZ1sSK0JW/r+enqr7T/geiL2ydvIF75oKuVAzoqy7Jsx4q1yz2AhQz4H0ui2zUAuqP8oM/vf8vlDnY/uu7Wi9UboDzupWKpbtkWaVGmv+7+diMNRcTphb8+yZdoOA4BALCxvsr7P0836v+lcV9NubuKuaHBiLg7IvZHxD0RcSAi7o2olL0/Ih5o8/hDdfmV/Z8fd60psBbl/b8Xirmtf/f/yt5fDPYVuX2V+PuTs+enp44Vr8lw9O/I82OrHOPrl3/6uNm22v5fviz1x2TZFyzq8du2ugG6MxNzE+uJudat65UxwGsr40+WZwKSiDgYEYfW8Pw7I+L8k58fabZ9RfyL83Xxr2ID5pmyzyKeqJ7/haiLv5SsPj85ujOmp46NllfFSt//cOO1ZsdfV/wbID//uxte/8vxDya187Wz7R/jxi8fNb2n+e/4G1//25M3Kuntxbr3JubmLo9FbE8WVq4fv71vmS/L5/EPH23c/vdH/P1psd/hiMgv4gcj4qGIeLio+yMR8WhEHF0l/m9feuzttcffWXn8Z9o6/+0n+i5882Wz47d2/k9UUsPFmlbe/1qt4HpeOwAAANgq0sp34JN0ZDmdpiMj1e/wH4jd6fTM7NxTZ2fevXSm+l35wehPy5GugZrx0LFibLjMj9flj1fGjbMsy3ZV8iOTM9OdmlMHWrOnSfvP/drX7doBHdfWPFqzX7QBW5Lfa0Lv0v6hd2n/0Lu0f+hdjdr/tYilVXe63rHqAHeQz3/oXdo/9C7tH3qX9g89aT2/618tsf9Ua4XLf0DYoWpsgUTf5qhG24lIN0U11pZIN0c1qokdEdFq4Wt3rKV0+Y0JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/wTAAD//7YA6Ok=") sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xb, &(0x7f00000002c0)=0x41, 0x4) accept4(r1, 0x0, &(0x7f0000000040), 0x0) r4 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) fsmount(r4, 0x0, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0x8, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@nfs_export_on}]}) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x322020, &(0x7f0000000480)=ANY=[], 0x1, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file7\x00', 0x0, 0x10000, 0x0) 4.27330393s ago: executing program 6 (id=950): socket(0x10, 0x3, 0x4) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) read(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002640)=@newtaction={0xe68, 0x30, 0x3f, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0xfffffffc, 0x0, 0x0, 0x0, 0x100}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x5943}, {0x0, 0x800000, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x10}, {}, {}, {0x0, 0xa2}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x1cbe}, {0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {0x2}, {0x8}, {}, {0x0, 0xfffffffe, 0x400000}, {0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x4, 0xffffff6a}, {0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x800000}, {0x0, 0x0, 0x0, 0xe54b}, {0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x7fffffff}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x27a}, {0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x2}, {}, {}, {}, {0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0xc}, {}, {0x0, 0x0, 0x2b7f}, {0x3ff, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0xcfc, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x70}, {}, {0xfffffffd, 0x0, 0x0, 0x0, 0xa92}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x40000000, 0x1, 0x0, 0x10001}, {0x0, 0x0, 0x20}, {}, {0x80000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, {0xfffffffc}, {}, {}, {}, {0x0, 0xa, 0xfffffffc}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x40, 0x0, 0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1, 0x2}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x2}, {0x5}, {}, {}, {}, {}, {}, {0x7, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) 3.701404914s ago: executing program 1 (id=951): unshare(0x200) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) io_setup(0x222, &(0x7f0000000180)=0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000540)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xc, 0xb9, &(0x7f0000000140)=""/185, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x0, 0xc9, 0x81ad}}}, 0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r5, &(0x7f00000009c0)={0x2, 0x4e24, @loopback}, 0x10) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) writev(r5, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) io_submit(r1, 0x1a, &(0x7f00000000c0)=[&(0x7f0000000200)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000000000)='%', 0x1a000}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) syz_io_uring_setup(0x43d2, &(0x7f0000000080)={0x0, 0x3670, 0x10100, 0x2, 0x4}, &(0x7f0000000100), &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 3.700893804s ago: executing program 5 (id=952): symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000200)='./file0\x00') chmod(&(0x7f0000000100)='./file0\x00', 0xed) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="800000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000011c00108008000140"], 0x80}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000380)={'tunl0\x00', &(0x7f0000000700)={'syztnl0\x00', 0x0, 0x8, 0x8, 0x5, 0x6, {{0x5, 0x4, 0x2, 0x12, 0x14, 0x68, 0x0, 0x1c, 0x4, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="02030003120000002cbd7000fbdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a00000000000000000000000000000000000000000000010b0000000000000002000100000000000000070c0000000005000500000000000a00000000000000fc0100000000000000000000000000010700000000000000010014"], 0x90}, 0x1, 0x7}, 0x0) 861.771839ms ago: executing program 4 (id=953): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000000)) syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendto(r1, 0x0, 0x0, 0x4004040, 0x0, 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x24004010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x2}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14008081}, 0x800) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292", 0xc) accept4(r3, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) mkdir(&(0x7f0000003a00)='./file0\x00', 0x0) 536.505829ms ago: executing program 6 (id=954): openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x141040, 0x42) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000500), 0xc80, 0x0) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x8000000000000000) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x80000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000040)={0xc}) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c40)=ANY=[@ANYBLOB="2c0000003f000701feffffff00000000047c0000040042800c00018006000600800a0000080002800400188080c2ff66506c97bf3b24209dd6c20c68c4179500132f2788b20c6cbda0a671c7f88fce3065fac4045e62c67616f5b4b970eb8511173ec0ceb3083aeb7ee838f9187b104180aba2e2c6d9db9b1d1d26d418a75ac3a0faa3efce63cb2c6d6a1198b258dbe4b457a64a3e7f787084cbed65c10a9b518fe975c53ddbb2adf58dfcb67835c3acdbfced2594ff71ac64dbbca16487cfa99329bcb4c1864e637e3a24e2f23b5a790a808545345e32ea2b02d02e88efbdc49646a7d5ef"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_buf(r5, 0x29, 0x1f, 0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0xffffffffffffff19, 0x0}, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) ioctl$DRM_IOCTL_WAIT_VBLANK(r7, 0xc018643a, &(0x7f0000000140)={0x4000000, 0x100, 0x2}) ioctl$DRM_IOCTL_WAIT_VBLANK(r7, 0xc018643a, &(0x7f0000000040)={0x10000000, 0x8, 0x3}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{0x0}], 0x1, 0x0, 0x0, 0x7000000}}], 0x1, 0x8000) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x441, 0x0) socket$netlink(0x10, 0x3, 0x10) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f00000014c0)=0x60, 0x4) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r8, 0xffffffffffffffff, 0x0) 0s ago: executing program 1 (id=955): sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x80003, 0x6) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)={0x4c, 0x12, 0x301, 0x0, 0x0, {0x0, 0x7, 0x0, 0x0, {0x4e23, 0x0, [0x0, 0x0, 0x81], [0x1, 0xfffffffd, 0x10000], 0x0, [0x0, 0x7fff]}, 0x7}}, 0x4c}, 0x1, 0x0, 0x0, 0x20044190}, 0x40000) kernel console output (not intermixed with test programs): MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.163177][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.395071][ T5769] hsr_slave_0: entered promiscuous mode [ 89.402259][ T5769] hsr_slave_1: entered promiscuous mode [ 89.409102][ T5769] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.416787][ T5769] Cannot create hsr debugfs directory [ 89.575742][ T5768] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.588125][ T5768] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.601235][ T5768] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.617650][ T5768] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.775119][ T5766] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.785835][ T5766] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.814327][ T5766] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.830745][ T5766] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.907060][ T5770] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.933603][ T5770] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.950334][ T5770] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.963042][ T5770] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.062968][ T5769] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.075409][ T5769] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.101155][ T5769] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.121372][ T5769] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.204232][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.267788][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.291728][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.299665][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.315631][ T5766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.341776][ T1138] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.349096][ T1138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.443736][ T5766] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.490071][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.510691][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.517976][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.538539][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.545770][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.622651][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.643927][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.701297][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.713010][ T3477] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.720448][ T3477] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.735083][ T3477] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.742332][ T3477] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.774470][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.781754][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.789590][ T5773] Bluetooth: hci1: command tx timeout [ 90.797040][ T5773] Bluetooth: hci0: command tx timeout [ 90.811127][ T1138] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.818380][ T1138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.842174][ T5766] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.866285][ T5773] Bluetooth: hci3: command tx timeout [ 90.947661][ T5773] Bluetooth: hci2: command tx timeout [ 90.984514][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.099328][ T5770] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.123565][ T5769] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.215445][ T5766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.410403][ T5768] veth0_vlan: entered promiscuous mode [ 91.452091][ T5768] veth1_vlan: entered promiscuous mode [ 91.465077][ T5766] veth0_vlan: entered promiscuous mode [ 91.502926][ T5766] veth1_vlan: entered promiscuous mode [ 91.583017][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.640459][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.689803][ T5768] veth0_macvtap: entered promiscuous mode [ 91.711701][ T5766] veth0_macvtap: entered promiscuous mode [ 91.722549][ T5768] veth1_macvtap: entered promiscuous mode [ 91.759265][ T5766] veth1_macvtap: entered promiscuous mode [ 91.782514][ T5770] veth0_vlan: entered promiscuous mode [ 91.814225][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.854530][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.869791][ T5769] veth0_vlan: entered promiscuous mode [ 91.886930][ T5768] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.895859][ T5768] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.904952][ T5768] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.915421][ T5768] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.938379][ T5769] veth1_vlan: entered promiscuous mode [ 91.948749][ T5770] veth1_vlan: entered promiscuous mode [ 91.956954][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.969187][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.981544][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.004282][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.015577][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.028531][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.040645][ T5766] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.049630][ T5766] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.060146][ T5766] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.069871][ T5766] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.171614][ T5769] veth0_macvtap: entered promiscuous mode [ 92.240808][ T5769] veth1_macvtap: entered promiscuous mode [ 92.268322][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.279609][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.282781][ T3517] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.302776][ T3517] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.314380][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.325460][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.338981][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.381515][ T5770] veth0_macvtap: entered promiscuous mode [ 92.412371][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.427702][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.438149][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.449588][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.461666][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.476808][ T5770] veth1_macvtap: entered promiscuous mode [ 92.490823][ T5769] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.500703][ T5769] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.512725][ T5769] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.521868][ T5769] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.555457][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.566973][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.580372][ T3517] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.622338][ T3517] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.668417][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.680188][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.691240][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.703227][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.719332][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.730187][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.742698][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.797534][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.797742][ T3517] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.814558][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.846054][ T3517] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.853742][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.867553][ T5773] Bluetooth: hci0: command tx timeout [ 92.867575][ T5776] Bluetooth: hci1: command tx timeout [ 92.892070][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.914570][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.930110][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.945228][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.952957][ T5776] Bluetooth: hci3: command tx timeout [ 92.972578][ T5770] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.986720][ T5770] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.995503][ T5770] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.027932][ T5773] Bluetooth: hci2: command tx timeout [ 93.033533][ T5770] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.065718][ T5857] syz.2.5[5857]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 93.081032][ T5857] loop2: detected capacity change from 0 to 16 [ 93.105207][ T5857] erofs: (device loop2): mounted with root inode @ nid 36. [ 93.235800][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.259076][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.381361][ T3517] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.396542][ T3517] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.468956][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.487871][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.618989][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.746669][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.928862][ T5883] overlayfs: workdir and upperdir must reside under the same mount [ 94.946246][ T5773] Bluetooth: hci1: command tx timeout [ 94.953189][ T5773] Bluetooth: hci0: command tx timeout [ 95.055300][ T5776] Bluetooth: hci3: command tx timeout [ 95.136136][ T5776] Bluetooth: hci2: command tx timeout [ 98.794164][ T787] cfg80211: failed to load regulatory.db [ 99.214637][ T5924] loop2: detected capacity change from 0 to 512 [ 99.380440][ T5924] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.21: bg 0: block 393: padding at end of block bitmap is not set [ 99.404368][ T5924] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6653: Corrupt filesystem [ 99.419930][ T5924] EXT4-fs (loop2): 2 truncates cleaned up [ 99.432917][ T5924] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.340585][ T5924] netlink: 9 bytes leftover after parsing attributes in process `syz.2.21'. [ 100.402046][ T5924] gretap0: entered promiscuous mode [ 100.445944][ C0] sched: RT throttling activated [ 100.707907][ T5923] syzkaller0: entered promiscuous mode [ 100.734552][ T5923] syzkaller0: entered allmulticast mode [ 101.561101][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.877009][ T5957] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 107.077761][ T5966] Zero length message leads to an empty skb [ 108.276524][ T5977] loop2: detected capacity change from 0 to 128 [ 108.461079][ T5978] syzkaller0: entered promiscuous mode [ 108.496107][ T5978] syzkaller0: entered allmulticast mode [ 109.063242][ T5985] loop3: detected capacity change from 0 to 512 [ 109.093602][ T5985] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 109.864794][ T5995] loop3: detected capacity change from 0 to 16 [ 109.872326][ T5995] ======================================================= [ 109.872326][ T5995] WARNING: The mand mount option has been deprecated and [ 109.872326][ T5995] and is ignored by this kernel. Remove the mand [ 109.872326][ T5995] option from the mount to silence this warning. [ 109.872326][ T5995] ======================================================= [ 109.914173][ T5995] erofs: (device loop3): mounted with root inode @ nid 36. [ 109.928066][ T5995] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 112.257640][ T5851] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 112.368302][ T6011] loop2: detected capacity change from 0 to 1024 [ 112.423215][ T6011] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.486414][ T5851] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.518256][ T5851] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 112.550232][ T5851] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 112.584674][ T6011] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4047: comm syz.2.53: Allocating blocks 497-513 which overlap fs metadata [ 112.588244][ T5851] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.610330][ T6011] EXT4-fs (loop2): pa ffff888076ce7910: logic 256, phys. 385, len 8 [ 112.618829][ T6011] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5388: group 0, free 0, pa_free 1 [ 112.640437][ T5851] usb 2-1: Product: syz [ 112.717381][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.837250][ T5851] usb 2-1: Manufacturer: syz [ 112.842405][ T5851] usb 2-1: SerialNumber: syz [ 112.983918][ T5851] cdc_mbim 2-1:1.0: skipping garbage [ 113.000537][ T6024] loop2: detected capacity change from 0 to 1024 [ 113.058453][ T6024] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.174927][ T6006] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 113.215141][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.711805][ T6047] Illegal XDP return value 4294967262 on prog (id 6) dev syz_tun, expect packet loss! [ 115.251001][ T6062] mmap: syz.2.65 (6062) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 115.866264][ T6065] loop3: detected capacity change from 0 to 128 [ 115.915168][ T6065] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 116.005089][ T6067] loop2: detected capacity change from 0 to 128 [ 116.036335][ T5851] cdc_mbim 2-1:1.0: bind() failure [ 116.081777][ T5851] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 116.133120][ T6067] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 116.191435][ T6067] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.321393][ T5851] cdc_ncm 2-1:1.1: bind() failure [ 116.334859][ T5851] usb 2-1: USB disconnect, device number 2 [ 116.360402][ T28] audit: type=1800 audit(1769675232.714:2): pid=6067 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.69" name="file1" dev="loop2" ino=12 res=0 errno=0 [ 116.461031][ T6072] netlink: 196 bytes leftover after parsing attributes in process `syz.3.68'. [ 116.969678][ T5768] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 117.433915][ T6077] loop1: detected capacity change from 0 to 512 [ 117.526669][ T6077] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 117.579705][ T6077] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 117.686804][ T6077] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.747052][ T6077] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.807692][ T6079] syzkaller0: entered promiscuous mode [ 117.819878][ T6077] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #2: comm syz.1.70: corrupted inode contents [ 117.846598][ T6079] syzkaller0: entered allmulticast mode [ 117.894903][ T6077] EXT4-fs (loop1): Remounting filesystem read-only [ 120.805172][ T6089] loop3: detected capacity change from 0 to 131072 [ 120.960034][ T6089] fscrypt: Error allocating hmac(sha512): -4 [ 120.981635][ T6089] F2FS-fs (loop3): Error processing option "test_dummy_encryption" [-4] [ 123.093700][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.138408][ T11] Quota error (device loop1): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync! [ 124.237157][ T5812] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 124.359136][ T6120] loop3: detected capacity change from 0 to 1024 [ 124.439164][ T5812] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.456883][ T6120] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.489674][ T6128] loop2: detected capacity change from 0 to 256 [ 124.500586][ T5812] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 124.530330][ T6120] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.541604][ T5812] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 124.588607][ T5812] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.639485][ T5812] usb 2-1: Product: syz [ 124.646437][ T5812] usb 2-1: Manufacturer: syz [ 124.661417][ T5812] usb 2-1: SerialNumber: syz [ 124.683061][ T6120] kvm: vcpu 0: requested 155768 ns lapic timer period limited to 200000 ns [ 124.697483][ T5812] cdc_mbim 2-1:1.0: skipping garbage [ 124.710292][ T6120] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3091007040 (6182014080 ns) > initial count (200000 ns). Using initial count to start timer. [ 124.889585][ T6118] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 124.995499][ T5766] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.216042][ T27] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 125.630500][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.645270][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.658387][ T27] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 125.670971][ T27] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 125.679632][ T27] usb 3-1: Manufacturer: syz [ 125.697318][ T27] usb 3-1: config 0 descriptor?? [ 126.734470][ T6160] loop3: detected capacity change from 0 to 512 [ 126.767360][ T6160] EXT4-fs: Ignoring removed oldalloc option [ 126.821413][ T6160] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.239378][ T27] uclogic 0003:256C:006D.0001: v1 frame probing failed: -71 [ 127.398949][ T27] uclogic 0003:256C:006D.0001: failed probing parameters: -71 [ 127.604374][ T27] uclogic: probe of 0003:256C:006D.0001 failed with error -71 [ 127.869625][ T27] usb 3-1: USB disconnect, device number 2 [ 127.915482][ T5766] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.608622][ T6179] syzkaller0: entered promiscuous mode [ 128.614470][ T6179] syzkaller0: entered allmulticast mode [ 128.909956][ T5812] cdc_mbim 2-1:1.0: bind() failure [ 128.939262][ T5812] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 128.961878][ T5812] cdc_ncm 2-1:1.1: bind() failure [ 129.007854][ T5812] usb 2-1: USB disconnect, device number 3 [ 130.805774][ T6184] netlink: 'syz.1.100': attribute type 12 has an invalid length. [ 131.286032][ T5853] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 131.399112][ T5812] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 131.468082][ T5853] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 131.479043][ T5853] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 131.494191][ T5853] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 131.505092][ T5853] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 131.520687][ T5853] usb 4-1: SerialNumber: syz [ 131.593783][ T5812] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.605124][ T5812] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 131.627659][ T5812] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 131.642745][ T5812] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.651020][ T5812] usb 2-1: Product: syz [ 131.655288][ T5812] usb 2-1: Manufacturer: syz [ 131.660231][ T5812] usb 2-1: SerialNumber: syz [ 131.674627][ T5812] cdc_mbim 2-1:1.0: skipping garbage [ 131.745361][ T5853] usb 4-1: 0:2 : does not exist [ 131.757212][ T5853] usb 4-1: unit 16 not found! [ 131.793595][ T5853] usb 4-1: USB disconnect, device number 2 [ 131.863487][ T5948] udevd[5948]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 131.895266][ T6201] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 132.280337][ T6210] loop2: detected capacity change from 0 to 256 [ 132.753135][ T6213] loop3: detected capacity change from 0 to 512 [ 133.067321][ T6213] EXT4-fs (loop3): Test dummy encryption mode enabled [ 133.074190][ T6213] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 133.102060][ T6213] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 133.196712][ T6213] EXT4-fs error (device loop3): ext4_orphan_get:1424: comm syz.3.113: bad orphan inode 131083 [ 133.259611][ T6213] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.403011][ T6220] loop2: detected capacity change from 0 to 256 [ 133.435861][ T6220] FAT-fs (loop2): bogus sectors per cluster 223 [ 133.482228][ T6220] FAT-fs (loop2): Can't find a valid FAT filesystem [ 133.576687][ T6213] fscrypt (loop3): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 133.880031][ T5766] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.072913][ T6228] syzkaller0: entered promiscuous mode [ 134.083608][ T6228] syzkaller0: entered allmulticast mode [ 134.602016][ T5812] cdc_mbim 2-1:1.0: bind() failure [ 134.641439][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.648484][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.781362][ T5812] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 134.790508][ T5812] cdc_ncm 2-1:1.1: bind() failure [ 134.800376][ T5812] usb 2-1: USB disconnect, device number 4 [ 135.922288][ T6252] loop3: detected capacity change from 0 to 256 [ 136.183417][ T6256] loop3: detected capacity change from 0 to 256 [ 136.191360][ T6256] exfat: Bad value for 'dmask' [ 136.228608][ T5948] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 136.533980][ T6257] loop3: detected capacity change from 0 to 256 [ 136.562176][ T6257] FAT-fs (loop3): Directory bread(block 64) failed [ 136.570165][ T6257] FAT-fs (loop3): Directory bread(block 65) failed [ 136.576993][ T6257] FAT-fs (loop3): Directory bread(block 66) failed [ 136.583594][ T6257] FAT-fs (loop3): Directory bread(block 67) failed [ 136.590366][ T6257] FAT-fs (loop3): Directory bread(block 68) failed [ 136.597167][ T6257] FAT-fs (loop3): Directory bread(block 69) failed [ 136.604042][ T6257] FAT-fs (loop3): Directory bread(block 70) failed [ 136.610875][ T6257] FAT-fs (loop3): Directory bread(block 71) failed [ 136.617646][ T6257] FAT-fs (loop3): Directory bread(block 72) failed [ 136.624860][ T6257] FAT-fs (loop3): Directory bread(block 73) failed [ 140.084231][ T6289] loop1: detected capacity change from 0 to 256 [ 140.092122][ T6289] exfat: Bad value for 'dmask' [ 140.385779][ T6292] loop1: detected capacity change from 0 to 256 [ 140.465506][ T6292] FAT-fs (loop1): Directory bread(block 64) failed [ 140.472289][ T6292] FAT-fs (loop1): Directory bread(block 65) failed [ 140.479036][ T6292] FAT-fs (loop1): Directory bread(block 66) failed [ 140.485671][ T6292] FAT-fs (loop1): Directory bread(block 67) failed [ 140.492483][ T6292] FAT-fs (loop1): Directory bread(block 68) failed [ 140.499484][ T6292] FAT-fs (loop1): Directory bread(block 69) failed [ 140.507462][ T6292] FAT-fs (loop1): Directory bread(block 70) failed [ 140.514106][ T6292] FAT-fs (loop1): Directory bread(block 71) failed [ 140.521854][ T6292] FAT-fs (loop1): Directory bread(block 72) failed [ 140.528577][ T6292] FAT-fs (loop1): Directory bread(block 73) failed [ 141.164640][ T6308] loop3: detected capacity change from 0 to 128 [ 141.238783][ T6308] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 141.284337][ T6308] ext4 filesystem being mounted at /44/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 142.172711][ T6326] netlink: 8 bytes leftover after parsing attributes in process `syz.1.145'. [ 142.181741][ T6326] netlink: 96 bytes leftover after parsing attributes in process `syz.1.145'. [ 142.191111][ T6326] vlan1: entered allmulticast mode [ 142.196705][ T6326] veth0_vlan: entered allmulticast mode [ 142.269627][ T6315] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 142.329921][ T6315] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 142.374024][ T6315] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 142.409281][ T6315] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 142.439719][ T6315] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 142.524808][ T6315] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 142.553035][ T6315] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 142.589711][ T6315] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 142.631356][ T6315] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 142.659786][ T6315] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 142.678390][ T6315] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 142.702112][ T6315] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 142.915297][ T6328] syzkaller0: entered promiscuous mode [ 142.921347][ T6328] syzkaller0: entered allmulticast mode [ 142.945879][ T6333] loop2: detected capacity change from 0 to 256 [ 142.953828][ T6333] exfat: Bad value for 'dmask' [ 142.959253][ T6331] IPv6: sit1: Disabled Multicast RS [ 142.988485][ T5948] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 143.167951][ T5766] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 143.292907][ T6334] loop2: detected capacity change from 0 to 256 [ 143.345849][ T6334] FAT-fs (loop2): Directory bread(block 64) failed [ 143.352788][ T6334] FAT-fs (loop2): Directory bread(block 65) failed [ 143.359580][ T6334] FAT-fs (loop2): Directory bread(block 66) failed [ 143.366222][ T6334] FAT-fs (loop2): Directory bread(block 67) failed [ 143.372889][ T6334] FAT-fs (loop2): Directory bread(block 68) failed [ 143.379539][ T6334] FAT-fs (loop2): Directory bread(block 69) failed [ 143.387159][ T6334] FAT-fs (loop2): Directory bread(block 70) failed [ 143.393803][ T6334] FAT-fs (loop2): Directory bread(block 71) failed [ 143.400548][ T6334] FAT-fs (loop2): Directory bread(block 72) failed [ 143.407188][ T6334] FAT-fs (loop2): Directory bread(block 73) failed [ 143.507892][ T5776] Bluetooth: hci0: command 0x0c1a tx timeout [ 144.486083][ T5776] Bluetooth: hci1: command 0x0c1a tx timeout [ 144.632812][ T5776] Bluetooth: hci3: command 0x0c1a tx timeout [ 144.720560][ T5776] Bluetooth: hci2: command 0x0c1a tx timeout [ 145.587407][ T5776] Bluetooth: hci0: command 0x0c1a tx timeout [ 146.588202][ T5776] Bluetooth: hci1: command 0x0c1a tx timeout [ 146.605018][ T5812] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 146.712211][ T5776] Bluetooth: hci3: command 0x0c1a tx timeout [ 146.791084][ T5776] Bluetooth: hci2: command 0x0c1a tx timeout [ 146.802462][ T5812] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.817127][ T5812] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 146.862144][ T5812] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 146.887790][ T5812] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.910409][ T5812] usb 3-1: Product: syz [ 146.928631][ T5812] usb 3-1: Manufacturer: syz [ 146.933431][ T5812] usb 3-1: SerialNumber: syz [ 146.988894][ T5812] cdc_mbim 3-1:1.0: skipping garbage [ 147.189364][ T6354] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 147.672908][ T5776] Bluetooth: hci0: command 0x0c1a tx timeout [ 148.686082][ T5776] Bluetooth: hci1: command 0x0c1a tx timeout [ 148.786501][ T5776] Bluetooth: hci3: command 0x0c1a tx timeout [ 148.883046][ T5776] Bluetooth: hci2: command 0x0c1a tx timeout [ 149.505633][ T6362] IPv6: sit1: Disabled Multicast RS [ 149.837552][ T6371] netlink: 12 bytes leftover after parsing attributes in process `syz.3.162'. [ 150.087194][ T5812] cdc_mbim 3-1:1.0: bind() failure [ 150.100301][ T5812] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 150.158440][ T5812] cdc_ncm 3-1:1.1: bind() failure [ 150.243790][ T5812] usb 3-1: USB disconnect, device number 3 [ 150.331608][ T6374] loop1: detected capacity change from 0 to 128 [ 150.527425][ T6374] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 150.541007][ T6378] loop3: detected capacity change from 0 to 512 [ 150.613430][ T6374] ext4 filesystem being mounted at /23/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 150.717788][ T6378] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.810309][ T6378] ext4 filesystem being mounted at /48/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 150.949466][ T5770] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 151.040664][ T5766] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.697567][ T6387] loop2: detected capacity change from 0 to 256 [ 151.771278][ T6387] exfat: Deprecated parameter 'utf8' [ 151.807352][ T6387] exfat: Deprecated parameter 'utf8' [ 151.899037][ T6389] syzkaller0: entered promiscuous mode [ 151.914892][ T6389] syzkaller0: entered allmulticast mode [ 151.944891][ T6387] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x23a77120, utbl_chksum : 0xe619d30d) [ 152.068055][ T6387] fuse: Bad value for 'fd' [ 152.401899][ T6398] loop2: detected capacity change from 0 to 1024 [ 152.431381][ T6398] EXT4-fs: Ignoring removed bh option [ 152.536049][ T6398] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 152.617773][ T6398] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.901356][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.560089][ T6407] loop3: detected capacity change from 0 to 512 [ 155.695098][ T6407] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.174: bg 0: block 393: padding at end of block bitmap is not set [ 155.718179][ T6407] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6653: Corrupt filesystem [ 155.739136][ T6407] EXT4-fs (loop3): 2 truncates cleaned up [ 155.750071][ T6407] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.820607][ T6407] netlink: 9 bytes leftover after parsing attributes in process `syz.3.174'. [ 159.996876][ T6407] gretap0: entered promiscuous mode [ 160.183798][ T5766] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.205487][ T6423] loop2: detected capacity change from 0 to 256 [ 160.213658][ T6423] exfat: Bad value for 'dmask' [ 160.266177][ T5948] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 160.582031][ T6431] loop2: detected capacity change from 0 to 256 [ 162.545224][ T6431] FAT-fs (loop2): Directory bread(block 64) failed [ 162.551969][ T6431] FAT-fs (loop2): Directory bread(block 65) failed [ 162.558839][ T6431] FAT-fs (loop2): Directory bread(block 66) failed [ 162.565421][ T6431] FAT-fs (loop2): Directory bread(block 67) failed [ 162.572227][ T6431] FAT-fs (loop2): Directory bread(block 68) failed [ 162.578855][ T6431] FAT-fs (loop2): Directory bread(block 69) failed [ 162.585509][ T6431] FAT-fs (loop2): Directory bread(block 70) failed [ 162.592177][ T6431] FAT-fs (loop2): Directory bread(block 71) failed [ 162.598892][ T6431] FAT-fs (loop2): Directory bread(block 72) failed [ 162.605463][ T6431] FAT-fs (loop2): Directory bread(block 73) failed [ 163.308191][ T6444] loop1: detected capacity change from 0 to 256 [ 163.444163][ T6444] FAT-fs (loop1): Directory bread(block 64) failed [ 163.451130][ T6444] FAT-fs (loop1): Directory bread(block 65) failed [ 163.470098][ T6444] FAT-fs (loop1): Directory bread(block 66) failed [ 163.500165][ T6444] FAT-fs (loop1): Directory bread(block 67) failed [ 163.512395][ T6444] FAT-fs (loop1): Directory bread(block 68) failed [ 163.524902][ T6444] FAT-fs (loop1): Directory bread(block 69) failed [ 163.532101][ T6444] FAT-fs (loop1): Directory bread(block 70) failed [ 163.539506][ T6444] FAT-fs (loop1): Directory bread(block 71) failed [ 163.551413][ T6444] FAT-fs (loop1): Directory bread(block 72) failed [ 163.560812][ T6444] FAT-fs (loop1): Directory bread(block 73) failed [ 164.725945][ T6453] process 'syz.1.190' launched '/dev/fd/-1/./file0' with NULL argv: empty string added [ 166.242400][ T6458] loop1: detected capacity change from 0 to 256 [ 166.249893][ T6458] exfat: Bad value for 'dmask' [ 166.624749][ T6461] loop1: detected capacity change from 0 to 256 [ 166.870148][ T6462] loop3: detected capacity change from 0 to 1024 [ 166.963384][ T6462] EXT4-fs: Ignoring removed bh option [ 167.022897][ T6461] FAT-fs (loop1): Directory bread(block 64) failed [ 167.029789][ T6461] FAT-fs (loop1): Directory bread(block 65) failed [ 167.036616][ T6461] FAT-fs (loop1): Directory bread(block 66) failed [ 167.044087][ T6461] FAT-fs (loop1): Directory bread(block 67) failed [ 167.050862][ T6461] FAT-fs (loop1): Directory bread(block 68) failed [ 167.057467][ T6461] FAT-fs (loop1): Directory bread(block 69) failed [ 167.064151][ T6461] FAT-fs (loop1): Directory bread(block 70) failed [ 167.070937][ T6461] FAT-fs (loop1): Directory bread(block 71) failed [ 167.077719][ T6461] FAT-fs (loop1): Directory bread(block 72) failed [ 167.084279][ T6461] FAT-fs (loop1): Directory bread(block 73) failed [ 167.160564][ T6462] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 167.504390][ T6471] netlink: 20 bytes leftover after parsing attributes in process `syz.2.193'. [ 169.079460][ T5766] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 169.287300][ T6479] loop2: detected capacity change from 0 to 256 [ 169.353684][ T6479] exfat: Deprecated parameter 'utf8' [ 169.437275][ T6479] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 169.506918][ T6478] loop1: detected capacity change from 0 to 4096 [ 169.532787][ T6478] EXT4-fs: Ignoring removed bh option [ 169.542916][ T6478] EXT4-fs: Ignoring removed mblk_io_submit option [ 169.561181][ T6478] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.678773][ T6484] loop3: detected capacity change from 0 to 512 [ 169.749041][ T6484] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=684ec018, mo2=0002] [ 169.773446][ T6484] System zones: 0-2, 18-18, 34-34 [ 169.818301][ T6484] EXT4-fs (loop3): orphan cleanup on readonly fs [ 169.877264][ T6484] EXT4-fs error (device loop3): ext4_orphan_get:1424: comm syz.3.197: bad orphan inode 13 [ 169.926526][ T6484] ext4_test_bit(bit=12, block=18) = 1 [ 169.931996][ T6484] is_bad_inode(inode)=0 [ 169.967456][ T6484] NEXT_ORPHAN(inode)=2130706432 [ 169.972443][ T6484] max_ino=32 [ 169.975700][ T6484] i_nlink=1 [ 169.998368][ T6484] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 170.012836][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.554454][ T6499] loop2: detected capacity change from 0 to 512 [ 171.618461][ T6499] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.656119][ T6499] ext4 filesystem being mounted at /51/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 171.836752][ T6506] netlink: 20 bytes leftover after parsing attributes in process `syz.1.204'. [ 171.864429][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.119189][ T6510] IPv6: sit1: Disabled Multicast RS [ 172.475213][ T5852] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 172.666700][ T5852] usb 2-1: Using ep0 maxpacket: 32 [ 172.699767][ T5852] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 172.726401][ T5852] usb 2-1: config 0 has no interface number 0 [ 172.749670][ T6519] loop2: detected capacity change from 0 to 1024 [ 172.770436][ T5852] usb 2-1: config 0 interface 184 has no altsetting 0 [ 172.783382][ T5852] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 172.821544][ T5852] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.863718][ T6519] Quota error (device loop2): do_check_range: Getting block 64 out of range 1-5 [ 172.891422][ T5852] usb 2-1: Product: syz [ 172.907087][ T5852] usb 2-1: Manufacturer: syz [ 172.921130][ T6519] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 172.936215][ T5852] usb 2-1: SerialNumber: syz [ 172.961557][ T6519] EXT4-fs error (device loop2): ext4_acquire_dquot:6949: comm syz.2.209: Failed to acquire dquot type 0 [ 173.010780][ T6519] EXT4-fs error (device loop2): mb_free_blocks:1954: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 173.047419][ T5852] usb 2-1: config 0 descriptor?? [ 173.076800][ T5852] smsc75xx v1.0.0 [ 173.123032][ T6519] EXT4-fs (loop2): 1 truncate cleaned up [ 173.149239][ T6519] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.293914][ T6519] Quota error (device loop2): do_check_range: Getting block 64 out of range 1-5 [ 173.344811][ T6519] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 173.375284][ T5766] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.387433][ T6519] EXT4-fs error (device loop2): ext4_acquire_dquot:6949: comm syz.2.209: Failed to acquire dquot type 0 [ 174.035323][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.942724][ T5852] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 175.021863][ T5852] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 175.116249][ T5852] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 175.185728][ T5852] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 175.204859][ T5852] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 175.236194][ T5852] smsc75xx: probe of 2-1:0.184 failed with error -71 [ 175.270430][ T5852] usb 2-1: USB disconnect, device number 5 [ 176.190078][ T6535] netlink: 20 bytes leftover after parsing attributes in process `syz.2.214'. [ 176.351447][ T6537] netlink: 40 bytes leftover after parsing attributes in process `syz.1.216'. [ 176.602183][ T6546] loop1: detected capacity change from 0 to 256 [ 176.616517][ T6546] exfat: Deprecated parameter 'utf8' [ 176.626748][ T6546] exfat: Deprecated parameter 'utf8' [ 176.663750][ T6546] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 176.769327][ T6546] exFAT-fs (loop1): error, found bogus dentry(12) beyond unused empty group(11) (start_clu : 5, cur_clu : 5) [ 177.195837][ T6556] loop1: detected capacity change from 0 to 512 [ 177.257173][ T6556] EXT4-fs (loop1): invalid inodes per group: 0 [ 177.257173][ T6556] [ 177.351138][ T6558] loop2: detected capacity change from 0 to 512 [ 177.362308][ T5948] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 177.434460][ T6558] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.627109][ T6561] EXT4-fs error (device loop2): ext4_validate_block_bitmap:421: comm ext4lazyinit: bg 0: bad block bitmap checksum [ 178.737668][ T6569] netlink: 20 bytes leftover after parsing attributes in process `syz.0.225'. [ 178.753883][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.944107][ T6573] netlink: 40 bytes leftover after parsing attributes in process `syz.3.227'. [ 179.122167][ T6579] loop2: detected capacity change from 0 to 256 [ 179.130557][ T6579] exfat: Bad value for 'dmask' [ 179.172474][ T5951] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 179.196274][ T6579] loop2: detected capacity change from 0 to 256 [ 179.415250][ T6585] loop3: detected capacity change from 0 to 512 [ 179.460472][ T6585] EXT4-fs: Ignoring removed i_version option [ 179.466937][ T6585] EXT4-fs: Ignoring removed bh option [ 179.557043][ T6579] FAT-fs (loop2): Directory bread(block 64) failed [ 179.563776][ T6579] FAT-fs (loop2): Directory bread(block 65) failed [ 179.570615][ T6579] FAT-fs (loop2): Directory bread(block 66) failed [ 179.577257][ T6579] FAT-fs (loop2): Directory bread(block 67) failed [ 179.583926][ T6579] FAT-fs (loop2): Directory bread(block 68) failed [ 179.590567][ T6579] FAT-fs (loop2): Directory bread(block 69) failed [ 179.597557][ T6579] FAT-fs (loop2): Directory bread(block 70) failed [ 179.604149][ T6579] FAT-fs (loop2): Directory bread(block 71) failed [ 179.610887][ T6579] FAT-fs (loop2): Directory bread(block 72) failed [ 179.617493][ T6579] FAT-fs (loop2): Directory bread(block 73) failed [ 179.718205][ T6585] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.816078][ T6585] ext4 filesystem being mounted at /63/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 180.059745][ T6597] netlink: 20 bytes leftover after parsing attributes in process `syz.2.237'. [ 180.294502][ T6601] loop2: detected capacity change from 0 to 256 [ 180.341764][ T6601] FAT-fs (loop2): Directory bread(block 64) failed [ 180.348684][ T6601] FAT-fs (loop2): Directory bread(block 65) failed [ 180.356392][ T6601] FAT-fs (loop2): Directory bread(block 66) failed [ 180.363162][ T6601] FAT-fs (loop2): Directory bread(block 67) failed [ 180.369979][ T6601] FAT-fs (loop2): Directory bread(block 68) failed [ 180.376760][ T6601] FAT-fs (loop2): Directory bread(block 69) failed [ 180.385292][ T6601] FAT-fs (loop2): Directory bread(block 70) failed [ 180.392056][ T6601] FAT-fs (loop2): Directory bread(block 71) failed [ 180.398775][ T6601] FAT-fs (loop2): Directory bread(block 72) failed [ 180.405457][ T6601] FAT-fs (loop2): Directory bread(block 73) failed [ 180.518678][ T6606] netlink: 'syz.3.233': attribute type 4 has an invalid length. [ 180.526543][ T6606] netlink: 17 bytes leftover after parsing attributes in process `syz.3.233'. [ 181.700234][ T6571] loop1: detected capacity change from 0 to 40427 [ 181.775223][ T6571] F2FS-fs (loop1): Corrupted extension count (64 + 1 > 64) [ 181.832930][ T6571] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 181.885824][ T6571] F2FS-fs (loop1): inline encryption not supported [ 181.927241][ T6571] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x2 [ 182.009871][ T6571] F2FS-fs (loop1): invalid crc value [ 182.066380][ T6611] netlink: 40 bytes leftover after parsing attributes in process `syz.2.241'. [ 182.246697][ T5766] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.496124][ T6621] netlink: 20 bytes leftover after parsing attributes in process `syz.3.247'. [ 182.593081][ T6571] F2FS-fs (loop1): Start checkpoint disabled! [ 183.679209][ T6635] loop2: detected capacity change from 0 to 128 [ 183.740786][ T6635] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 183.772307][ T6635] ext4 filesystem being mounted at /69/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 183.876717][ T6635] EXT4-fs error (device loop2): __ext4_new_inode:1075: comm syz.2.252: reserved inode found cleared - inode=2 [ 183.927451][ T6640] loop3: detected capacity change from 0 to 256 [ 183.935020][ T6640] exfat: Bad value for 'dmask' [ 184.018689][ T6642] netlink: 16 bytes leftover after parsing attributes in process `syz.1.250'. [ 184.124225][ T6640] loop3: detected capacity change from 0 to 256 [ 184.318064][ T6640] FAT-fs (loop3): Directory bread(block 64) failed [ 184.324908][ T6640] FAT-fs (loop3): Directory bread(block 65) failed [ 184.332269][ T6640] FAT-fs (loop3): Directory bread(block 66) failed [ 184.338948][ T6640] FAT-fs (loop3): Directory bread(block 67) failed [ 184.346770][ T6640] FAT-fs (loop3): Directory bread(block 68) failed [ 184.353574][ T6640] FAT-fs (loop3): Directory bread(block 69) failed [ 184.360835][ T6640] FAT-fs (loop3): Directory bread(block 70) failed [ 184.367753][ T6640] FAT-fs (loop3): Directory bread(block 71) failed [ 184.374878][ T6640] FAT-fs (loop3): Directory bread(block 72) failed [ 184.381802][ T6640] FAT-fs (loop3): Directory bread(block 73) failed [ 184.990054][ T5768] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 185.108940][ T6649] netlink: 20 bytes leftover after parsing attributes in process `syz.0.255'. [ 185.115859][ T6653] netlink: 20 bytes leftover after parsing attributes in process `syz.1.256'. [ 185.149964][ T28] audit: type=1326 audit(1769675301.554:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6650 comm="syz.3.254" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f153cd9aeb9 code=0x0 [ 185.258443][ T6656] loop2: detected capacity change from 0 to 2048 [ 185.322884][ T6656] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.350649][ T6656] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.404640][ T6656] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.257: bg 0: block 345: padding at end of block bitmap is not set [ 185.421368][ T6656] EXT4-fs (loop2): Remounting filesystem read-only [ 185.431523][ T1138] EXT4-fs warning (device loop2): ext4_convert_unwritten_extents:4868: inode #15: block 15: len 1: ext4_ext_map_blocks returned -5 [ 186.371839][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.488337][ T6669] IPv6: sit1: Disabled Multicast RS [ 186.662564][ T6675] loop2: detected capacity change from 0 to 256 [ 186.707999][ T6675] exfat: Bad value for 'dmask' [ 187.982788][ T6686] netlink: 20 bytes leftover after parsing attributes in process `syz.1.266'. [ 188.024590][ T6691] netlink: 20 bytes leftover after parsing attributes in process `syz.3.267'. [ 188.646202][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 189.362890][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 189.567682][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 191.077115][ T6721] netlink: 20 bytes leftover after parsing attributes in process `syz.0.279'. [ 191.149282][ T6723] netlink: 20 bytes leftover after parsing attributes in process `syz.1.278'. [ 191.319400][ T6726] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 191.428521][ T6730] loop1: detected capacity change from 0 to 256 [ 191.485991][ T6730] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 191.523675][ T6730] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 191.560805][ T6730] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 191.579691][ T6733] loop2: detected capacity change from 0 to 256 [ 191.587277][ T6733] exfat: Bad value for 'dmask' [ 191.618444][ T5951] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 191.998019][ T6736] loop2: detected capacity change from 0 to 256 [ 192.119369][ T6736] FAT-fs (loop2): Directory bread(block 64) failed [ 192.126360][ T6736] FAT-fs (loop2): Directory bread(block 65) failed [ 192.134401][ T6736] FAT-fs (loop2): Directory bread(block 66) failed [ 192.141384][ T6736] FAT-fs (loop2): Directory bread(block 67) failed [ 192.149162][ T6736] FAT-fs (loop2): Directory bread(block 68) failed [ 192.155957][ T6736] FAT-fs (loop2): Directory bread(block 69) failed [ 192.163289][ T6736] FAT-fs (loop2): Directory bread(block 70) failed [ 192.170067][ T6736] FAT-fs (loop2): Directory bread(block 71) failed [ 192.177502][ T6736] FAT-fs (loop2): Directory bread(block 72) failed [ 192.184244][ T6736] FAT-fs (loop2): Directory bread(block 73) failed [ 192.932288][ T6739] loop3: detected capacity change from 0 to 512 [ 192.968249][ T6739] EXT4-fs: Ignoring removed mblk_io_submit option [ 193.045510][ T6739] EXT4-fs: journaled quota format not specified [ 193.799543][ T6748] loop1: detected capacity change from 0 to 1024 [ 193.821579][ T6748] EXT4-fs: Ignoring removed nomblk_io_submit option [ 193.872557][ T6748] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 193.930910][ T6748] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 193.958450][ T6748] System zones: 0-1, 3-36 [ 193.982451][ T6751] netlink: 20 bytes leftover after parsing attributes in process `syz.0.290'. [ 193.998249][ T6748] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.029491][ T5948] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 194.334424][ T6757] netlink: 8 bytes leftover after parsing attributes in process `syz.0.292'. [ 194.350713][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.812703][ T6768] loop3: detected capacity change from 0 to 256 [ 196.027882][ T6768] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 196.082276][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 196.091491][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.017467][ T6787] netlink: 8 bytes leftover after parsing attributes in process `syz.2.302'. [ 197.691084][ T6800] loop3: detected capacity change from 0 to 1024 [ 197.817498][ T6800] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.912792][ T6808] fuse: Bad value for 'fd' [ 198.025087][ T6800] EXT4-fs error (device loop3): __ext4_get_inode_loc:4489: comm syz.3.307: Invalid inode table block 7428809249909042369 in block_group 0 [ 198.060277][ T6800] EXT4-fs (loop3): Remounting filesystem read-only [ 198.141130][ T5766] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.151479][ T5852] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 198.162548][ T6812] loop1: detected capacity change from 0 to 512 [ 198.232965][ T6812] EXT4-fs (loop1): orphan cleanup on readonly fs [ 198.254698][ T6812] EXT4-fs error (device loop1): ext4_find_extent:900: inode #4: comm syz.1.311: inode has invalid extent depth: 7 [ 198.294127][ T6812] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=-117 [ 198.314227][ T6812] EXT4-fs warning (device loop1): ext4_enable_quotas:7184: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 198.334851][ T6812] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 198.343278][ T6812] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 198.356044][ T5852] usb 3-1: Using ep0 maxpacket: 16 [ 198.363910][ T5852] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 198.370770][ T6817] netlink: 8 bytes leftover after parsing attributes in process `syz.3.313'. [ 198.376600][ T5852] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 198.391517][ T5852] usb 3-1: config 0 has no interface number 0 [ 198.398122][ T5852] usb 3-1: config 0 interface 251 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 198.420366][ T5852] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 198.429967][ T5852] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.438576][ T5852] usb 3-1: Product: syz [ 198.442992][ T5852] usb 3-1: Manufacturer: syz [ 198.448039][ T5852] usb 3-1: SerialNumber: syz [ 198.455554][ T5852] usb 3-1: config 0 descriptor?? [ 198.463875][ T5852] asix: probe of 3-1:0.251 failed with error -22 [ 198.535398][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.639888][ T6819] netlink: 100 bytes leftover after parsing attributes in process `syz.1.314'. [ 198.794688][ T5853] usb 3-1: USB disconnect, device number 4 [ 200.453037][ T6835] loop3: detected capacity change from 0 to 512 [ 200.597907][ T6835] EXT4-fs error (device loop3): ext4_quota_enable:7140: comm syz.3.320: inode #50331648: comm syz.3.320: iget: illegal inode # [ 200.683037][ T6835] EXT4-fs (loop3): Remounting filesystem read-only [ 200.716344][ T6835] EXT4-fs warning (device loop3): ext4_enable_quotas:7184: Failed to enable quota tracking (type=2, err=-117, ino=50331648). Please run e2fsck to fix. [ 200.810346][ T6835] EXT4-fs (loop3): mount failed [ 201.442289][ T6854] netlink: 16 bytes leftover after parsing attributes in process `syz.0.325'. [ 201.961231][ T6856] netlink: 12 bytes leftover after parsing attributes in process `syz.3.320'. [ 202.063786][ T6856] loop3: detected capacity change from 0 to 128 [ 203.428723][ T6876] loop2: detected capacity change from 0 to 256 [ 203.592385][ T6876] FAT-fs (loop2): Directory bread(block 64) failed [ 203.600376][ T6876] FAT-fs (loop2): Directory bread(block 65) failed [ 203.607966][ T6876] FAT-fs (loop2): Directory bread(block 66) failed [ 203.614731][ T6876] FAT-fs (loop2): Directory bread(block 67) failed [ 203.622087][ T6876] FAT-fs (loop2): Directory bread(block 68) failed [ 203.628881][ T6876] FAT-fs (loop2): Directory bread(block 69) failed [ 203.636078][ T6876] FAT-fs (loop2): Directory bread(block 70) failed [ 203.642902][ T6876] FAT-fs (loop2): Directory bread(block 71) failed [ 203.650643][ T6876] FAT-fs (loop2): Directory bread(block 72) failed [ 203.657498][ T6876] FAT-fs (loop2): Directory bread(block 73) failed [ 205.584721][ T6884] loop1: detected capacity change from 0 to 1024 [ 205.604262][ T6884] EXT4-fs: Ignoring removed bh option [ 206.141771][ T6888] netlink: 16 bytes leftover after parsing attributes in process `syz.0.337'. [ 206.477875][ T6884] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 206.666157][ T28] audit: type=1800 audit(1769675323.054:4): pid=6884 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.338" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 206.847799][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 209.478424][ T6916] loop3: detected capacity change from 0 to 256 [ 209.682584][ T6916] FAT-fs (loop3): Directory bread(block 64) failed [ 209.689438][ T6916] FAT-fs (loop3): Directory bread(block 65) failed [ 209.696877][ T6916] FAT-fs (loop3): Directory bread(block 66) failed [ 209.703591][ T6916] FAT-fs (loop3): Directory bread(block 67) failed [ 209.711064][ T6916] FAT-fs (loop3): Directory bread(block 68) failed [ 209.717932][ T6916] FAT-fs (loop3): Directory bread(block 69) failed [ 209.725363][ T6916] FAT-fs (loop3): Directory bread(block 70) failed [ 209.732216][ T6916] FAT-fs (loop3): Directory bread(block 71) failed [ 209.739743][ T6916] FAT-fs (loop3): Directory bread(block 72) failed [ 209.747343][ T6916] FAT-fs (loop3): Directory bread(block 73) failed [ 211.552881][ T6920] netlink: 16 bytes leftover after parsing attributes in process `syz.0.348'. [ 212.128515][ T6926] 9pnet_fd: Insufficient options for proto=fd [ 212.807295][ T5852] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 213.318833][ T5852] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.347165][ T5852] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 213.380728][ T5852] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 213.405963][ T5852] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.421276][ T5852] usb 3-1: Product: syz [ 213.435735][ T5852] usb 3-1: Manufacturer: syz [ 213.444817][ T5852] usb 3-1: SerialNumber: syz [ 213.468157][ T5852] cdc_mbim 3-1:1.0: skipping garbage [ 213.659082][ T6944] overlayfs: failed to clone upperpath [ 213.729103][ T6930] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 213.846683][ T27] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 214.027296][ T6947] loop1: detected capacity change from 0 to 256 [ 214.629496][ T6947] FAT-fs (loop1): Directory bread(block 64) failed [ 214.636497][ T6947] FAT-fs (loop1): Directory bread(block 65) failed [ 214.644578][ T6947] FAT-fs (loop1): Directory bread(block 66) failed [ 214.651512][ T6947] FAT-fs (loop1): Directory bread(block 67) failed [ 214.659647][ T6947] FAT-fs (loop1): Directory bread(block 68) failed [ 214.666673][ T6947] FAT-fs (loop1): Directory bread(block 69) failed [ 214.674531][ T6947] FAT-fs (loop1): Directory bread(block 70) failed [ 214.681355][ T6947] FAT-fs (loop1): Directory bread(block 71) failed [ 214.689165][ T6947] FAT-fs (loop1): Directory bread(block 72) failed [ 214.696030][ T6947] FAT-fs (loop1): Directory bread(block 73) failed [ 215.172263][ T27] usb 4-1: unable to get BOS descriptor or descriptor too short [ 215.226016][ T27] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 215.268073][ T27] usb 4-1: can't read configurations, error -71 [ 215.369958][ T5852] cdc_mbim 3-1:1.0: bind() failure [ 215.441682][ T5852] cdc_ncm: probe of 3-1:1.1 failed with error -71 [ 215.536170][ T5852] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 215.586788][ T5852] usbtest: probe of 3-1:1.1 failed with error -71 [ 215.655683][ T5852] usb 3-1: USB disconnect, device number 5 [ 216.440741][ T6962] loop3: detected capacity change from 0 to 512 [ 216.488297][ T6962] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 216.538390][ T6967] loop1: detected capacity change from 0 to 16 [ 216.587607][ T6967] erofs: (device loop1): mounted with root inode @ nid 36. [ 216.678838][ T6962] EXT4-fs error (device loop3): ext4_init_orphan_info:584: inode #3: comm syz.3.361: iget: special inode unallocated [ 216.781033][ T6962] EXT4-fs (loop3): Remounting filesystem read-only [ 216.847419][ T6962] EXT4-fs (loop3): get orphan inode failed [ 216.853622][ T6962] EXT4-fs (loop3): mount failed [ 217.596591][ T27] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 217.913695][ T27] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.171565][ T27] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 218.219789][ T27] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 218.260469][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.278293][ T27] usb 2-1: Product: syz [ 218.282544][ T27] usb 2-1: Manufacturer: syz [ 218.308210][ T27] usb 2-1: SerialNumber: syz [ 218.328960][ T27] cdc_mbim 2-1:1.0: skipping garbage [ 218.530865][ T6976] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 218.562948][ T6992] loop3: detected capacity change from 0 to 512 [ 219.177823][ T7003] overlayfs: workdir and upperdir must reside under the same mount [ 221.717336][ T27] cdc_mbim 2-1:1.0: bind() failure [ 221.734262][ T27] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 221.743263][ T27] cdc_ncm 2-1:1.1: bind() failure [ 221.892947][ T27] usb 2-1: USB disconnect, device number 6 [ 222.392304][ T3477] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.626862][ T3477] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.736596][ T3477] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.882964][ T3477] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.119635][ T7029] overlayfs: workdir and upperdir must reside under the same mount [ 223.616619][ T27] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 224.006413][ T27] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.053784][ T27] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 224.131202][ T7036] netlink: 16 bytes leftover after parsing attributes in process `syz.0.387'. [ 224.148823][ T27] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 224.179602][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.206872][ T27] usb 2-1: Product: syz [ 224.231709][ T27] usb 2-1: Manufacturer: syz [ 224.259053][ T27] usb 2-1: SerialNumber: syz [ 224.289081][ T27] cdc_mbim 2-1:1.0: skipping garbage [ 224.390651][ T5773] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 224.410744][ T5773] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 224.436302][ T5773] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 224.452213][ T5773] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 224.464690][ T5773] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 224.474222][ T5773] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 224.516438][ T7031] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 225.471793][ T7038] chnl_net:caif_netlink_parms(): no params data found [ 226.194676][ T7060] overlayfs: workdir and upperdir must reside under the same mount [ 226.596736][ T5773] Bluetooth: hci1: command tx timeout [ 227.147334][ T7038] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.163169][ T7038] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.171460][ T7038] bridge_slave_0: entered allmulticast mode [ 227.187369][ T7038] bridge_slave_0: entered promiscuous mode [ 227.346168][ T7038] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.354536][ T7038] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.364682][ T27] cdc_mbim 2-1:1.0: bind() failure [ 227.371272][ T7038] bridge_slave_1: entered allmulticast mode [ 227.381739][ T27] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 227.406550][ T27] cdc_ncm 2-1:1.1: bind() failure [ 227.414867][ T7038] bridge_slave_1: entered promiscuous mode [ 227.431935][ T27] usb 2-1: USB disconnect, device number 7 [ 227.508047][ T3477] hsr_slave_0: left promiscuous mode [ 227.543811][ T3477] hsr_slave_1: left promiscuous mode [ 227.570128][ T3477] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 227.588469][ T3477] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 227.614649][ T3477] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 227.635149][ T3477] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 227.646399][ T3477] bridge_slave_1: left allmulticast mode [ 227.652271][ T3477] bridge_slave_1: left promiscuous mode [ 227.666061][ T3477] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.684974][ T3477] bridge_slave_0: left allmulticast mode [ 227.693318][ T3477] bridge_slave_0: left promiscuous mode [ 227.786481][ T3477] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.894918][ T3477] veth1_macvtap: left promiscuous mode [ 227.913168][ T3477] veth0_macvtap: left promiscuous mode [ 227.930837][ T3477] veth1_vlan: left promiscuous mode [ 227.936653][ T3477] veth0_vlan: left promiscuous mode [ 228.068625][ T5776] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 228.083534][ T5776] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 228.094653][ T5776] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 228.327520][ T5776] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 228.352980][ T5776] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 228.367929][ T5776] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 228.628620][ T5776] Bluetooth: hci1: command tx timeout [ 229.413484][ T3477] team0 (unregistering): Port device team_slave_1 removed [ 229.473608][ T3477] team0 (unregistering): Port device team_slave_0 removed [ 229.529202][ T3477] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 229.584766][ T3477] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 230.002651][ T3477] bond0 (unregistering): Released all slaves [ 230.103186][ T7038] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.124934][ T7038] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.378563][ T7038] team0: Port device team_slave_0 added [ 230.404763][ T7083] netlink: 52 bytes leftover after parsing attributes in process `syz.1.396'. [ 230.463885][ T7038] team0: Port device team_slave_1 added [ 230.533084][ T7083] netlink: 52 bytes leftover after parsing attributes in process `syz.1.396'. [ 230.595355][ T5776] Bluetooth: hci0: command tx timeout [ 230.647688][ T7091] overlayfs: workdir and upperdir must reside under the same mount [ 230.782043][ T5776] Bluetooth: hci1: command tx timeout [ 231.433675][ T7038] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 231.503424][ T7038] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.553078][ T7038] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 231.577542][ T7038] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 231.584997][ T7038] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.733537][ T7038] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 232.706870][ T5776] Bluetooth: hci0: command tx timeout [ 232.819527][ T7038] hsr_slave_0: entered promiscuous mode [ 232.841386][ T7038] hsr_slave_1: entered promiscuous mode [ 232.866071][ T5776] Bluetooth: hci1: command tx timeout [ 232.995979][ T967] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 233.198159][ T967] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.215954][ T967] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 233.259900][ T967] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 233.280454][ T967] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.289647][ T3477] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.301704][ T967] usb 2-1: Product: syz [ 233.307332][ T967] usb 2-1: Manufacturer: syz [ 233.316520][ T967] usb 2-1: SerialNumber: syz [ 233.337929][ T967] cdc_mbim 2-1:1.0: skipping garbage [ 233.374738][ T7076] chnl_net:caif_netlink_parms(): no params data found [ 233.433823][ T3477] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.539670][ T7110] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 233.573309][ T3477] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.710389][ T3477] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.812023][ T7076] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.847892][ T7076] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.871794][ T7076] bridge_slave_0: entered allmulticast mode [ 233.894203][ T7076] bridge_slave_0: entered promiscuous mode [ 233.917331][ T7076] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.932953][ T7076] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.940738][ T7076] bridge_slave_1: entered allmulticast mode [ 233.956801][ T7076] bridge_slave_1: entered promiscuous mode [ 234.062581][ T7076] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.102390][ T7076] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.145658][ T7038] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 234.436745][ T7038] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 234.474186][ T7076] team0: Port device team_slave_0 added [ 234.516897][ T7076] team0: Port device team_slave_1 added [ 234.786193][ T5776] Bluetooth: hci0: command tx timeout [ 235.248763][ T7038] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 235.385209][ T7038] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 235.446110][ T7076] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 235.453745][ T7076] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.491341][ T7076] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 235.552153][ T7076] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 235.577401][ T7076] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.635985][ T7076] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 236.034239][ T7076] hsr_slave_0: entered promiscuous mode [ 236.044703][ T7076] hsr_slave_1: entered promiscuous mode [ 236.064121][ T7076] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 236.079818][ T7076] Cannot create hsr debugfs directory [ 236.355772][ T967] cdc_mbim 2-1:1.0: bind() failure [ 236.370888][ T967] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 236.395977][ T967] cdc_ncm 2-1:1.1: bind() failure [ 236.423894][ T967] usb 2-1: USB disconnect, device number 8 [ 236.866166][ T5776] Bluetooth: hci0: command tx timeout [ 236.983139][ T7038] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.142265][ T7038] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.243189][ T3477] hsr_slave_0: left promiscuous mode [ 237.261510][ T3477] hsr_slave_1: left promiscuous mode [ 237.278422][ T3477] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 237.296356][ T3477] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 237.310544][ T3477] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 237.329455][ T3477] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 237.348798][ T3477] bridge_slave_1: left allmulticast mode [ 237.366051][ T3477] bridge_slave_1: left promiscuous mode [ 237.396277][ T3477] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.437005][ T3477] bridge_slave_0: left allmulticast mode [ 237.442747][ T3477] bridge_slave_0: left promiscuous mode [ 237.473785][ T3477] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.611283][ T3477] veth1_macvtap: left promiscuous mode [ 237.634113][ T3477] veth0_macvtap: left promiscuous mode [ 237.650432][ T3477] veth1_vlan: left promiscuous mode [ 237.670669][ T3477] veth0_vlan: left promiscuous mode [ 239.651409][ T7167] loop1: detected capacity change from 0 to 256 [ 239.665758][ T7167] exfat: Deprecated parameter 'namecase' [ 239.675114][ T7167] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 239.723355][ T7167] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 240.000201][ T3477] team0 (unregistering): Port device team_slave_1 removed [ 240.101938][ T3477] team0 (unregistering): Port device team_slave_0 removed [ 240.158744][ T3477] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 240.220444][ T3477] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 240.423365][ T7174] overlayfs: workdir and upperdir must reside under the same mount [ 241.584369][ T3477] bond0 (unregistering): Released all slaves [ 241.710686][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.718992][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.730071][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.737334][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.746958][ T7076] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 241.876260][ T7076] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 241.905580][ T7076] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 241.947247][ T7076] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 244.483345][ T7076] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.659713][ T7076] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.735309][ T6701] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.742826][ T6701] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.873121][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.880543][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.168188][ T7038] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.496776][ T7215] netlink: 8 bytes leftover after parsing attributes in process `syz.0.411'. [ 245.505823][ T7215] netlink: 96 bytes leftover after parsing attributes in process `syz.0.411'. [ 245.515313][ T7215] vlan1: entered allmulticast mode [ 245.520645][ T7215] veth0_vlan: entered allmulticast mode [ 246.743509][ T7229] overlayfs: workdir and upperdir must reside under the same mount [ 247.866198][ T7038] veth0_vlan: entered promiscuous mode [ 247.878792][ T7076] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.914831][ T7038] veth1_vlan: entered promiscuous mode [ 248.065273][ T7038] veth0_macvtap: entered promiscuous mode [ 248.100172][ T7038] veth1_macvtap: entered promiscuous mode [ 248.159120][ T7038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.267312][ T7038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.384486][ T7038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.540146][ T7038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.806459][ T7038] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 248.858827][ T7038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.925924][ T7038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.957976][ T7038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.001545][ T7038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.041368][ T7038] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 249.095005][ T7038] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.138408][ T7038] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.163187][ T7038] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.173184][ T7038] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.558803][ T1138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.616663][ T1138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.758693][ T6950] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.792639][ T6950] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.409491][ T7076] veth0_vlan: entered promiscuous mode [ 250.437685][ T7265] netlink: 4 bytes leftover after parsing attributes in process `syz.4.383'. [ 250.469231][ T7265] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 251.201103][ T7265] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 251.381712][ T7076] veth1_vlan: entered promiscuous mode [ 251.466867][ T7076] veth0_macvtap: entered promiscuous mode [ 251.484632][ T7076] veth1_macvtap: entered promiscuous mode [ 251.528070][ T7076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.572206][ T7076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.777933][ T7284] overlayfs: workdir and upperdir must reside under the same mount [ 252.096998][ T7076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.115460][ T7076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.153714][ T7076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.248288][ T7076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.737760][ T7076] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 252.799771][ T7076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.844338][ T7076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.864732][ T7287] netlink: 20 bytes leftover after parsing attributes in process `syz.4.423'. [ 252.895694][ T7076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.932636][ T7076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.968078][ T7076] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 253.023398][ T7076] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.051202][ T7076] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.061589][ T7076] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.073065][ T7076] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.332460][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.432707][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.642442][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.686113][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.933340][ T7328] loop5: detected capacity change from 0 to 2048 [ 256.116755][ T7330] overlayfs: workdir and upperdir must reside under the same mount [ 256.900645][ T7328] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.964103][ T7328] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 257.505381][ T7076] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.530143][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 257.537018][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.176620][ T27] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 258.406196][ T27] usb 6-1: Using ep0 maxpacket: 32 [ 258.422612][ T27] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 258.460484][ T7369] netlink: 16 bytes leftover after parsing attributes in process `syz.1.439'. [ 258.519099][ T27] usb 6-1: config 0 has no interface number 0 [ 258.633042][ T27] usb 6-1: config 0 interface 184 has no altsetting 0 [ 258.817892][ T27] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 259.017038][ T27] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.316782][ T27] usb 6-1: Product: syz [ 259.321283][ T27] usb 6-1: Manufacturer: syz [ 259.328378][ T27] usb 6-1: SerialNumber: syz [ 259.339212][ T27] usb 6-1: config 0 descriptor?? [ 259.367260][ T27] smsc75xx v1.0.0 [ 260.420407][ T27] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 260.582491][ T7357] process '/newroot/141/file0' started with executable stack [ 260.638841][ T27] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 260.673542][ T27] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 260.694153][ T27] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 260.731621][ T27] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 260.766239][ T27] smsc75xx: probe of 6-1:0.184 failed with error -71 [ 260.789650][ T27] usb 6-1: USB disconnect, device number 2 [ 262.255041][ T7398] overlayfs: workdir and upperdir must reside under the same mount [ 263.083642][ T7408] loop5: detected capacity change from 0 to 512 [ 263.209787][ T7408] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.265788][ T7408] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 263.378007][ T7408] EXT4-fs warning (device loop5): ext4_group_extend:1868: can't shrink FS - resize aborted [ 263.498065][ T7076] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.349497][ T7426] sit0: entered promiscuous mode [ 264.404616][ T7426] netlink: 'syz.1.450': attribute type 1 has an invalid length. [ 264.452668][ T7426] netlink: 1 bytes leftover after parsing attributes in process `syz.1.450'. [ 265.287952][ T7423] sch_fq: defrate 4294967295 ignored. [ 265.553253][ T7455] overlayfs: workdir and upperdir must reside under the same mount [ 266.680150][ T7463] overlayfs: failed to clone upperpath [ 267.334953][ T7478] netlink: 132 bytes leftover after parsing attributes in process `syz.4.461'. [ 269.673417][ T7503] overlayfs: workdir and upperdir must reside under the same mount [ 271.299629][ T7513] sit0: entered promiscuous mode [ 271.328093][ T7513] netlink: 'syz.4.468': attribute type 1 has an invalid length. [ 271.362165][ T7513] netlink: 1 bytes leftover after parsing attributes in process `syz.4.468'. [ 271.812068][ T7534] netlink: 'syz.5.473': attribute type 4 has an invalid length. [ 271.819979][ T7534] netlink: 17 bytes leftover after parsing attributes in process `syz.5.473'. [ 272.538324][ T7507] sch_fq: defrate 4294967295 ignored. [ 274.271553][ T7547] overlayfs: workdir and upperdir must reside under the same mount [ 278.390311][ T7603] sit0: entered promiscuous mode [ 278.479337][ T7603] netlink: 'syz.5.491': attribute type 1 has an invalid length. [ 278.576058][ T7603] netlink: 1 bytes leftover after parsing attributes in process `syz.5.491'. [ 279.444435][ T7601] sch_fq: defrate 4294967295 ignored. [ 279.593496][ T7605] overlayfs: workdir and upperdir must reside under the same mount [ 279.602420][ T7611] netlink: 'syz.1.492': attribute type 1 has an invalid length. [ 279.633199][ T7611] netlink: 1 bytes leftover after parsing attributes in process `syz.1.492'. [ 279.697497][ T7615] sch_fq: defrate 4294967295 ignored. [ 280.515104][ T7638] netlink: 20 bytes leftover after parsing attributes in process `syz.5.493'. [ 281.650025][ T7648] syz.5.495 uses obsolete (PF_INET,SOCK_PACKET) [ 281.803261][ T7648] netlink: 8 bytes leftover after parsing attributes in process `syz.5.495'. [ 281.835376][ T7648] vlan0: entered allmulticast mode [ 281.865993][ T7648] veth0_vlan: entered allmulticast mode [ 285.148301][ T7668] netlink: 'syz.5.501': attribute type 1 has an invalid length. [ 285.190032][ T7668] netlink: 1 bytes leftover after parsing attributes in process `syz.5.501'. [ 285.222742][ T7673] sch_fq: defrate 4294967295 ignored. [ 285.279151][ T7678] netlink: 'syz.1.502': attribute type 1 has an invalid length. [ 285.304593][ T7678] netlink: 1 bytes leftover after parsing attributes in process `syz.1.502'. [ 285.342138][ T7680] sch_fq: defrate 4294967295 ignored. [ 285.811374][ T7709] overlayfs: workdir and upperdir must reside under the same mount [ 287.876311][ T7722] tipc: Started in network mode [ 287.881469][ T7722] tipc: Node identity 84e, cluster identity 4711 [ 287.900680][ T7722] tipc: Node number set to 2126 [ 292.327176][ T7768] tipc: Started in network mode [ 292.332125][ T7768] tipc: Node identity 84e, cluster identity 4711 [ 292.346342][ T7768] tipc: Node number set to 2126 [ 292.636449][ T7765] netlink: 'syz.5.517': attribute type 1 has an invalid length. [ 292.644281][ T7765] netlink: 1 bytes leftover after parsing attributes in process `syz.5.517'. [ 292.678094][ T7765] sch_fq: defrate 4294967295 ignored. [ 292.790383][ T7774] netlink: 'syz.4.518': attribute type 1 has an invalid length. [ 292.826069][ T7774] netlink: 1 bytes leftover after parsing attributes in process `syz.4.518'. [ 293.239179][ T7755] sch_fq: defrate 4294967295 ignored. [ 297.305148][ T7820] overlayfs: workdir and upperdir must reside under the same mount [ 297.967057][ T7841] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 298.617888][ T7856] netlink: 'syz.5.538': attribute type 4 has an invalid length. [ 298.627230][ T7856] netlink: 17 bytes leftover after parsing attributes in process `syz.5.538'. [ 300.268600][ T7872] overlayfs: workdir and upperdir must reside under the same mount [ 300.348776][ T7873] veth0: entered promiscuous mode [ 300.863135][ T7867] veth0: left promiscuous mode [ 301.641611][ T7892] fuse: Bad value for 'fd' [ 305.377323][ T7955] netlink: 16 bytes leftover after parsing attributes in process `syz.1.557'. [ 308.172405][ T7987] overlayfs: failed to clone upperpath [ 310.696496][ T8006] sit0: entered promiscuous mode [ 310.740685][ T8006] netlink: 'syz.0.569': attribute type 1 has an invalid length. [ 310.811902][ T8006] netlink: 1 bytes leftover after parsing attributes in process `syz.0.569'. [ 311.567855][ T8036] netlink: 'syz.5.577': attribute type 4 has an invalid length. [ 311.575642][ T8036] netlink: 17 bytes leftover after parsing attributes in process `syz.5.577'. [ 311.619201][ T7998] sch_fq: defrate 4294967295 ignored. [ 313.097985][ T8046] netlink: 8 bytes leftover after parsing attributes in process `syz.4.579'. [ 313.107262][ T8046] netlink: 96 bytes leftover after parsing attributes in process `syz.4.579'. [ 313.116523][ T8046] vlan1: entered allmulticast mode [ 313.121759][ T8046] veth0_vlan: entered allmulticast mode [ 316.118238][ T8073] veth0: entered promiscuous mode [ 316.124045][ T8070] veth0: left promiscuous mode [ 317.312352][ T8099] netlink: 4 bytes leftover after parsing attributes in process `syz.0.592'. [ 317.831115][ T8117] overlayfs: workdir and upperdir must reside under the same mount [ 318.842341][ T8121] syz_tun: entered promiscuous mode [ 318.976592][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.983088][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 321.343106][ T8162] netlink: 8 bytes leftover after parsing attributes in process `syz.4.606'. [ 321.352220][ T8162] netlink: 96 bytes leftover after parsing attributes in process `syz.4.606'. [ 322.186088][ T8170] overlayfs: workdir and upperdir must reside under the same mount [ 325.564398][ T8211] netlink: 8 bytes leftover after parsing attributes in process `syz.4.618'. [ 325.573538][ T8211] netlink: 96 bytes leftover after parsing attributes in process `syz.4.618'. [ 327.877510][ T8206] overlayfs: workdir and upperdir must reside under the same mount [ 331.415368][ T8273] tipc: Started in network mode [ 331.430692][ T8273] tipc: Node identity 7f000001, cluster identity 4711 [ 331.458638][ T8273] tipc: Enabling of bearer rejected, failed to enable media [ 332.518442][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 332.724019][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 332.825904][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 333.016265][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 333.545993][ T8296] overlayfs: workdir and upperdir must reside under the same mount [ 335.006813][ T8301] syz.5.635 (8301) used greatest stack depth: 16720 bytes left [ 336.328134][ T8320] netlink: 20 bytes leftover after parsing attributes in process `syz.5.640'. [ 336.687841][ T8328] netlink: 8 bytes leftover after parsing attributes in process `syz.1.639'. [ 336.696998][ T8328] netlink: 96 bytes leftover after parsing attributes in process `syz.1.639'. [ 339.758212][ T8342] overlayfs: workdir and upperdir must reside under the same mount [ 345.713349][ T5083] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 345.724320][ T5083] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 345.736185][ T5083] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 345.757007][ T5083] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 345.777725][ T5083] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 345.785182][ T5083] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 346.661146][ T5773] Bluetooth: hci1: command 0x0406 tx timeout [ 347.098724][ T8422] netlink: 'syz.4.661': attribute type 12 has an invalid length. [ 347.896620][ T5776] Bluetooth: hci4: command tx timeout [ 348.001500][ T8399] chnl_net:caif_netlink_parms(): no params data found [ 348.558504][ T8399] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.626273][ T8399] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.665248][ T8399] bridge_slave_0: entered allmulticast mode [ 348.712950][ T8399] bridge_slave_0: entered promiscuous mode [ 348.957556][ T8399] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.149497][ T8399] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.356147][ T8399] bridge_slave_1: entered allmulticast mode [ 349.392692][ T8399] bridge_slave_1: entered promiscuous mode [ 349.465289][ T8458] netlink: 8 bytes leftover after parsing attributes in process `syz.1.670'. [ 349.474475][ T8458] netlink: 96 bytes leftover after parsing attributes in process `syz.1.670'. [ 349.637240][ T8399] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 349.843820][ T8399] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 349.907008][ T5773] Bluetooth: hci4: command tx timeout [ 349.929919][ T8399] team0: Port device team_slave_0 added [ 349.940894][ T8399] team0: Port device team_slave_1 added [ 351.748891][ T5773] Bluetooth: hci0: command 0x0406 tx timeout [ 351.800231][ T8399] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 351.846282][ T8399] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 351.946316][ T8399] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 351.986504][ T5776] Bluetooth: hci4: command tx timeout [ 352.057438][ T8399] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 352.064475][ T8399] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.189048][ T8399] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 352.506111][ T8399] hsr_slave_0: entered promiscuous mode [ 352.535581][ T8399] hsr_slave_1: entered promiscuous mode [ 352.572933][ T8399] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 352.602685][ T8399] Cannot create hsr debugfs directory [ 352.633366][ T8497] netlink: 8 bytes leftover after parsing attributes in process `syz.5.679'. [ 352.643007][ T8497] netlink: 96 bytes leftover after parsing attributes in process `syz.5.679'. [ 352.652128][ T8497] vlan1: entered allmulticast mode [ 353.765044][ T8399] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 353.814457][ T8399] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 353.870102][ T8399] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 353.926374][ T8399] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 354.066596][ T5776] Bluetooth: hci4: command tx timeout [ 354.844241][ T8399] 8021q: adding VLAN 0 to HW filter on device bond0 [ 354.897800][ T8495] overlayfs: failed to clone upperpath [ 354.930349][ T8399] 8021q: adding VLAN 0 to HW filter on device team0 [ 355.008086][ T6050] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.015337][ T6050] bridge0: port 1(bridge_slave_0) entered forwarding state [ 355.120390][ T6950] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.128019][ T6950] bridge0: port 2(bridge_slave_1) entered forwarding state [ 355.948651][ T8543] netlink: 'syz.4.686': attribute type 1 has an invalid length. [ 356.404420][ T8543] netlink: 1 bytes leftover after parsing attributes in process `syz.4.686'. [ 356.769932][ T8537] sch_fq: defrate 4294967295 ignored. [ 357.174072][ T8399] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 360.987297][ T8399] veth0_vlan: entered promiscuous mode [ 361.084415][ T8399] veth1_vlan: entered promiscuous mode [ 361.389072][ T8399] veth0_macvtap: entered promiscuous mode [ 361.431241][ T8399] veth1_macvtap: entered promiscuous mode [ 361.524356][ T8399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 361.608341][ T8399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.646499][ T8399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 361.684117][ T8399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.724396][ T8399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 361.836337][ T8399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.893231][ T8399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 361.949377][ T8399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.985269][ T8399] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 362.007072][ T8399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 362.019347][ T8399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.030663][ T8399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 362.041358][ T8399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.061567][ T8399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 362.116063][ T8399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.188391][ T8399] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 362.205000][ T8399] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.296266][ T8399] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.305065][ T8399] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.366090][ T8399] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.818971][ T8607] netlink: 8 bytes leftover after parsing attributes in process `syz.5.697'. [ 362.828765][ T8607] netlink: 96 bytes leftover after parsing attributes in process `syz.5.697'. [ 363.072004][ T6050] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.110414][ T6050] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.265118][ T3477] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.290771][ T3477] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.054128][ T3477] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.134193][ T8628] netlink: 48 bytes leftover after parsing attributes in process `syz.5.702'. [ 364.165639][ T8631] lo: entered allmulticast mode [ 364.239853][ T8631] tunl0: entered allmulticast mode [ 364.313542][ T8631] gre0: entered allmulticast mode [ 364.688443][ T8631] gretap0: entered allmulticast mode [ 364.749425][ T8631] erspan0: entered allmulticast mode [ 365.190490][ T8631] ip_vti0: entered allmulticast mode [ 366.017959][ T8631] ip6_vti0: entered allmulticast mode [ 366.081521][ T8631] sit0: left promiscuous mode [ 366.119490][ T8631] sit0: entered allmulticast mode [ 366.176259][ T8631] ip6tnl0: entered allmulticast mode [ 366.283314][ T8631] ip6gre0: entered allmulticast mode [ 366.333281][ T8631] syz_tun: entered allmulticast mode [ 366.386952][ T8631] ip6gretap0: entered allmulticast mode [ 366.454670][ T8631] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.463875][ T8631] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.550139][ T8631] bridge0: entered allmulticast mode [ 366.601953][ T8631] vcan0: entered allmulticast mode [ 366.658242][ T8631] bond0: entered allmulticast mode [ 366.694185][ T8631] bond_slave_0: entered allmulticast mode [ 366.786238][ T8631] bond_slave_1: entered allmulticast mode [ 367.101788][ T8664] netlink: 16 bytes leftover after parsing attributes in process `syz.1.704'. [ 367.407091][ T8631] team0: entered allmulticast mode [ 367.666170][ T8631] team_slave_0: entered allmulticast mode [ 367.672053][ T8631] team_slave_1: entered allmulticast mode [ 367.976682][ T8631] dummy0: entered allmulticast mode [ 368.082537][ T8631] nlmon0: entered allmulticast mode [ 368.105316][ T8631] caif0: entered allmulticast mode [ 368.157303][ T8631] batadv0: entered allmulticast mode [ 368.176885][ T8631] vxcan0: entered allmulticast mode [ 368.184454][ T8631] vxcan1: entered allmulticast mode [ 368.198049][ T8631] veth0: entered allmulticast mode [ 368.303490][ T8631] veth1: entered allmulticast mode [ 368.522800][ T8631] wg0: entered allmulticast mode [ 368.569106][ T8631] wg1: entered allmulticast mode [ 368.606557][ T8631] wg2: entered allmulticast mode [ 368.658877][ T8631] veth0_to_bridge: entered allmulticast mode [ 368.776414][ T8631] veth1_to_bridge: entered allmulticast mode [ 368.847321][ T8631] veth0_to_bond: entered allmulticast mode [ 368.915003][ T8631] veth1_to_bond: entered allmulticast mode [ 368.937991][ T8631] veth0_to_team: entered allmulticast mode [ 368.990177][ T8631] veth1_to_team: entered allmulticast mode [ 369.014015][ T8631] veth0_to_batadv: entered allmulticast mode [ 369.029083][ T8631] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 369.044603][ T8631] batadv_slave_0: entered allmulticast mode [ 369.066407][ T8631] veth1_to_batadv: entered allmulticast mode [ 369.082912][ T8631] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 369.092055][ T8631] batadv_slave_1: entered allmulticast mode [ 369.105184][ T8631] xfrm0: entered allmulticast mode [ 369.117962][ T8631] veth0_to_hsr: entered allmulticast mode [ 369.134126][ T8631] hsr_slave_0: entered allmulticast mode [ 369.152511][ T8631] veth1_to_hsr: entered allmulticast mode [ 369.162459][ T8631] hsr_slave_1: entered allmulticast mode [ 369.198159][ T8631] hsr0: entered allmulticast mode [ 369.212094][ T8631] veth1_virt_wifi: entered allmulticast mode [ 369.227016][ T8631] veth0_virt_wifi: entered allmulticast mode [ 369.246552][ T8631] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 369.256789][ T8631] veth1_vlan: entered allmulticast mode [ 369.417306][ T8631] macvlan0: entered allmulticast mode [ 369.555134][ T8631] macvlan1: entered allmulticast mode [ 369.572330][ T8631] ipvlan0: entered allmulticast mode [ 369.594200][ T8631] ipvlan1: entered allmulticast mode [ 369.616577][ T8631] veth1_macvtap: entered allmulticast mode [ 369.666752][ T8631] veth0_macvtap: entered allmulticast mode [ 369.727749][ T8631] macvtap0: entered allmulticast mode [ 369.783303][ T8631] macsec0: entered allmulticast mode [ 369.807376][ T8631] geneve0: entered allmulticast mode [ 369.817768][ T8631] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.828437][ T8631] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.837647][ T8631] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.847133][ T8631] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.856806][ T8631] geneve1: entered allmulticast mode [ 369.868502][ T8631] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 369.883239][ T8631] netdevsim netdevsim5 netdevsim1: entered allmulticast mode [ 370.019973][ T8631] netdevsim netdevsim5 netdevsim2: entered allmulticast mode [ 370.323169][ T8631] netdevsim netdevsim5 netdevsim3: entered allmulticast mode [ 370.782370][ T8631] mac80211_hwsim hwsim12 wlan0: entered allmulticast mode [ 370.812782][ T8631] mac80211_hwsim hwsim13 wlan1: entered allmulticast mode [ 370.921236][ T3477] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.976246][ T8690] netlink: 8 bytes leftover after parsing attributes in process `syz.1.707'. [ 370.985183][ T8690] netlink: 96 bytes leftover after parsing attributes in process `syz.1.707'. [ 371.142715][ T8699] loop6: detected capacity change from 0 to 512 [ 371.250246][ T3477] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.299819][ T8699] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 371.386900][ T8711] netlink: 16 bytes leftover after parsing attributes in process `syz.4.715'. [ 372.147795][ T8709] EXT4-fs error (device loop6): ext4_validate_block_bitmap:421: comm ext4lazyinit: bg 0: bad block bitmap checksum [ 372.234803][ T3477] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.958930][ T3477] tipc: Left network mode [ 372.963647][ T8732] veth0: entered promiscuous mode [ 372.972314][ T8731] veth0: left promiscuous mode [ 373.352032][ T8738] netlink: 20 bytes leftover after parsing attributes in process `syz.5.724'. [ 373.728528][ T8748] bridge_slave_0: left allmulticast mode [ 373.734277][ T8748] bridge_slave_0: left promiscuous mode [ 373.740197][ T8748] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.759396][ T8748] bridge_slave_1: left allmulticast mode [ 373.765299][ T8748] bridge_slave_1: left promiscuous mode [ 373.775511][ T8748] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.810614][ T8748] bond0: (slave bond_slave_0): Releasing backup interface [ 373.850955][ T8748] bond0: (slave bond_slave_1): Releasing backup interface [ 373.901584][ T8748] team0: Port device team_slave_0 removed [ 373.941805][ T8748] team0: Port device team_slave_1 removed [ 373.949066][ T8748] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 373.956640][ T8748] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 374.003121][ T8748] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 374.011019][ T8748] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 375.228561][ T8399] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.171503][ T8781] overlayfs: failed to resolve './file0': -2 [ 376.476222][ T3477] hsr_slave_0: left promiscuous mode [ 376.511908][ T3477] hsr_slave_1: left promiscuous mode [ 376.565513][ T3477] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 376.602557][ T3477] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 376.865163][ T3477] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 376.875913][ T3477] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 376.900594][ T3477] bridge_slave_1: left allmulticast mode [ 376.907500][ T3477] bridge_slave_1: left promiscuous mode [ 376.914537][ T3477] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.944473][ T3477] bridge_slave_0: left allmulticast mode [ 376.955981][ T3477] bridge_slave_0: left promiscuous mode [ 376.982357][ T3477] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.200915][ T3477] veth1_macvtap: left promiscuous mode [ 377.216350][ T3477] veth0_macvtap: left promiscuous mode [ 377.236963][ T3477] veth1_vlan: left promiscuous mode [ 377.242441][ T3477] veth0_vlan: left promiscuous mode [ 377.252578][ T8809] netlink: 16 bytes leftover after parsing attributes in process `syz.6.742'. [ 380.119895][ T8845] netlink: 104 bytes leftover after parsing attributes in process `syz.6.753'. [ 380.304566][ T8851] loop6: detected capacity change from 0 to 1024 [ 380.377103][ T8851] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 380.394920][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 380.406275][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.778828][ T8854] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1231: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 381.769126][ T3477] team0 (unregistering): Port device team_slave_1 removed [ 381.838621][ T3477] team0 (unregistering): Port device team_slave_0 removed [ 382.014980][ T3477] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 382.089634][ T3477] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 382.639373][ T3477] bond0 (unregistering): Released all slaves [ 382.796667][ T8866] netlink: 'syz.1.759': attribute type 1 has an invalid length. [ 382.804492][ T8866] netlink: 1 bytes leftover after parsing attributes in process `syz.1.759'. [ 382.825958][ T8865] sch_fq: defrate 4294967295 ignored. [ 382.875594][ T8399] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.173705][ T8920] sit0: entered promiscuous mode [ 387.235472][ T8920] netlink: 'syz.6.776': attribute type 1 has an invalid length. [ 387.302951][ T8920] netlink: 1 bytes leftover after parsing attributes in process `syz.6.776'. [ 387.404080][ T8907] sch_fq: defrate 4294967295 ignored. [ 389.555064][ T8950] overlayfs: failed to clone upperpath [ 390.432664][ T8956] loop6: detected capacity change from 0 to 512 [ 390.657319][ T8956] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 390.726784][ T8956] ext4 filesystem being mounted at /18/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 390.953100][ T8956] Quota error (device loop6): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 391.016239][ T8956] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 391.065616][ T8956] EXT4-fs error (device loop6): ext4_acquire_dquot:6949: comm syz.6.778: Failed to acquire dquot type 0 [ 391.145994][ T8969] Quota error (device loop6): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 391.175656][ T8969] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 391.227813][ T8969] EXT4-fs error (device loop6): ext4_acquire_dquot:6949: comm syz.6.778: Failed to acquire dquot type 0 [ 391.532892][ T8399] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 392.649106][ T9004] loop6: detected capacity change from 0 to 256 [ 394.100571][ T9025] netlink: 8 bytes leftover after parsing attributes in process `syz.6.787'. [ 394.115337][ T9025] netlink: 52 bytes leftover after parsing attributes in process `syz.6.787'. [ 396.556033][ T9061] netlink: 8 bytes leftover after parsing attributes in process `syz.1.797'. [ 396.565002][ T9061] netlink: 96 bytes leftover after parsing attributes in process `syz.1.797'. [ 398.063962][ T9086] netlink: 8 bytes leftover after parsing attributes in process `syz.4.802'. [ 398.074155][ T9086] netlink: 52 bytes leftover after parsing attributes in process `syz.4.802'. [ 402.320257][ T9114] fuse: Bad value for 'fd' [ 402.736380][ T9124] netlink: 8 bytes leftover after parsing attributes in process `syz.5.812'. [ 402.745535][ T9124] netlink: 96 bytes leftover after parsing attributes in process `syz.5.812'. [ 402.755938][ T9124] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 403.408505][ T9125] netlink: 'syz.1.810': attribute type 4 has an invalid length. [ 403.416375][ T9125] netlink: 17 bytes leftover after parsing attributes in process `syz.1.810'. [ 405.783868][ T9147] netlink: 8 bytes leftover after parsing attributes in process `syz.4.815'. [ 405.798774][ T9147] netlink: 52 bytes leftover after parsing attributes in process `syz.4.815'. [ 406.734279][ T9159] loop6: detected capacity change from 0 to 256 [ 406.764993][ T9159] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 407.564747][ T9175] netlink: 8 bytes leftover after parsing attributes in process `syz.6.822'. [ 408.039428][ T9179] bridge0: port 3(syz_tun) entered blocking state [ 408.112715][ T9179] bridge0: port 3(syz_tun) entered disabled state [ 408.156235][ T9179] syz_tun: entered promiscuous mode [ 408.331242][ T9188] loop6: detected capacity change from 0 to 256 [ 408.386269][ T8729] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 408.644726][ T9188] loop6: detected capacity change from 0 to 4096 [ 408.832896][ T9199] overlayfs: missing 'lowerdir' [ 409.009378][ T9188] EXT4-fs (loop6): Test dummy encryption mode enabled [ 409.416872][ T9188] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c019, mo2=0002] [ 409.474654][ T9188] System zones: 0-5 [ 409.527066][ T9188] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 409.584766][ T9194] netlink: 'syz.4.829': attribute type 1 has an invalid length. [ 409.645876][ T9194] netlink: 1 bytes leftover after parsing attributes in process `syz.4.829'. [ 410.400147][ T9212] netlink: 8 bytes leftover after parsing attributes in process `syz.6.828'. [ 410.621229][ T9212] netlink: 52 bytes leftover after parsing attributes in process `syz.6.828'. [ 411.647859][ T8399] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.066331][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 412.108148][ T9231] netlink: 8 bytes leftover after parsing attributes in process `syz.5.837'. [ 412.117165][ T9231] netlink: 96 bytes leftover after parsing attributes in process `syz.5.837'. [ 412.156093][ T9231] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 412.184980][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 412.277171][ T9229] bridge0: port 3(syz_tun) entered blocking state [ 412.284067][ T9229] bridge0: port 3(syz_tun) entered disabled state [ 412.292346][ T9229] syz_tun: entered allmulticast mode [ 412.300882][ T9229] syz_tun: entered promiscuous mode [ 412.307099][ T9229] bridge0: port 3(syz_tun) entered blocking state [ 412.314267][ T9229] bridge0: port 3(syz_tun) entered forwarding state [ 412.390406][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 412.878320][ T9245] overlayfs: missing 'lowerdir' [ 414.387579][ T9261] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 415.416995][ T9260] netlink: 'syz.4.843': attribute type 4 has an invalid length. [ 415.424775][ T9260] netlink: 17 bytes leftover after parsing attributes in process `syz.4.843'. [ 416.283667][ T9273] netlink: 8 bytes leftover after parsing attributes in process `syz.4.845'. [ 416.293846][ T9273] netlink: 52 bytes leftover after parsing attributes in process `syz.4.845'. [ 417.516550][ T9279] netlink: 'syz.1.846': attribute type 1 has an invalid length. [ 417.557698][ T9279] netlink: 1 bytes leftover after parsing attributes in process `syz.1.846'. [ 418.180155][ T9298] overlayfs: missing 'lowerdir' [ 423.102581][ T9363] overlayfs: missing 'lowerdir' [ 424.254476][ T9370] netlink: 'syz.5.865': attribute type 4 has an invalid length. [ 424.262250][ T9370] netlink: 17 bytes leftover after parsing attributes in process `syz.5.865'. [ 426.601737][ T9404] loop6: detected capacity change from 0 to 256 [ 426.614637][ T9404] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 426.641739][ T9404] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 426.710742][ T9404] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 426.996044][ T9411] overlayfs: missing 'lowerdir' [ 427.885237][ T9419] netlink: 4 bytes leftover after parsing attributes in process `syz.1.875'. [ 427.993128][ T9423] overlayfs: failed to clone lowerpath [ 428.957144][ T9424] netlink: 'syz.4.876': attribute type 1 has an invalid length. [ 428.964880][ T9424] netlink: 1 bytes leftover after parsing attributes in process `syz.4.876'. [ 429.342688][ T9424] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 429.367898][ T9438] netlink: 8 bytes leftover after parsing attributes in process `syz.1.880'. [ 429.376820][ T9438] netlink: 96 bytes leftover after parsing attributes in process `syz.1.880'. [ 430.574095][ T9458] fuse: Bad value for 'fd' [ 432.590419][ T9482] overlayfs: missing 'lowerdir' [ 433.645396][ T9491] netlink: 16 bytes leftover after parsing attributes in process `syz.6.886'. [ 435.942182][ T9508] netlink: 8 bytes leftover after parsing attributes in process `syz.4.890'. [ 435.954340][ T9508] netlink: 96 bytes leftover after parsing attributes in process `syz.4.890'. [ 438.649053][ T9516] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.857963][ T9516] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.259066][ T9516] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.465730][ T9516] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.634749][ T9516] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.656313][ T9516] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.676936][ T9516] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.696161][ T9516] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.508831][ T9536] overlayfs: failed to clone upperpath [ 441.364081][ T9542] netlink: 4 bytes leftover after parsing attributes in process `syz.4.896'. [ 441.392905][ T5776] Bluetooth: hci1: unexpected event for opcode 0x0c56 [ 441.552276][ T9540] sit0: entered promiscuous mode [ 441.584010][ T9540] sit0: left allmulticast mode [ 441.630587][ T9540] netlink: 'syz.5.894': attribute type 1 has an invalid length. [ 441.670785][ T9540] netlink: 1 bytes leftover after parsing attributes in process `syz.5.894'. [ 441.830079][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 441.836753][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.007035][ T28] audit: type=1326 audit(1769675558.394:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9547 comm="syz.6.897" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f98f099aeb9 code=0x0 [ 443.746476][ T28] audit: type=1326 audit(1769675560.144:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9570 comm="syz.5.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f040fd9aeb9 code=0x7fc00000 [ 444.367500][ T28] audit: type=1326 audit(1769675560.774:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9570 comm="syz.5.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f040fd9aeb9 code=0x7fc00000 [ 444.463212][ T28] audit: type=1326 audit(1769675560.804:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9570 comm="syz.5.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f040fd9aeb9 code=0x7fc00000 [ 444.500218][ T28] audit: type=1326 audit(1769675560.804:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9570 comm="syz.5.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f040fd9aeb9 code=0x7fc00000 [ 444.528239][ T28] audit: type=1326 audit(1769675560.804:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9570 comm="syz.5.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f040fd9aeb9 code=0x7fc00000 [ 444.706155][ T28] audit: type=1326 audit(1769675560.804:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9570 comm="syz.5.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f040fd9aeb9 code=0x7fc00000 [ 444.775939][ T28] audit: type=1326 audit(1769675560.804:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9570 comm="syz.5.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f040fd9aeb9 code=0x7fc00000 [ 444.819331][ T28] audit: type=1326 audit(1769675560.804:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9570 comm="syz.5.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f040fd9aeb9 code=0x7fc00000 [ 444.894135][ T28] audit: type=1326 audit(1769675560.804:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9570 comm="syz.5.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f040fd9aeb9 code=0x7fc00000 [ 447.995198][ T28] kauditd_printk_skb: 63 callbacks suppressed [ 447.995293][ T28] audit: type=1326 audit(1769675563.214:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9598 comm="syz.4.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f831839aeb9 code=0x7ffc0000 [ 449.039041][ T28] audit: type=1326 audit(1769675563.214:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9598 comm="syz.4.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f831839aeb9 code=0x7ffc0000 [ 449.178490][ T28] audit: type=1326 audit(1769675563.214:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9598 comm="syz.4.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f831839aeb9 code=0x7ffc0000 [ 449.203144][ T28] audit: type=1326 audit(1769675563.374:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9570 comm="syz.5.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f040fd9aeb9 code=0x7fc00000 [ 449.290068][ T9613] overlayfs: failed to clone upperpath [ 450.135915][ T28] audit: type=1326 audit(1769675563.494:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9598 comm="syz.4.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f831839aeb9 code=0x7ffc0000 [ 450.366398][ T28] audit: type=1326 audit(1769675563.494:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9598 comm="syz.4.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f831839aeb9 code=0x7ffc0000 [ 450.406606][ T9622] netlink: 4 bytes leftover after parsing attributes in process `syz.1.905'. [ 450.474286][ T9623] netlink: 16 bytes leftover after parsing attributes in process `syz.4.906'. [ 450.504332][ T28] audit: type=1326 audit(1769675563.494:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9598 comm="syz.4.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f831839aeb9 code=0x7ffc0000 [ 450.694441][ T28] audit: type=1326 audit(1769675563.914:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9598 comm="syz.4.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f831839aeb9 code=0x7ffc0000 [ 450.734324][ T28] audit: type=1326 audit(1769675563.914:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9598 comm="syz.4.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f831839aeb9 code=0x7ffc0000 [ 450.805109][ T28] audit: type=1326 audit(1769675563.914:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9598 comm="syz.4.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f831839aeb9 code=0x7ffc0000 [ 452.121352][ T9648] sch_tbf: burst 19360 is lower than device lo mtu (65550) ! [ 452.928203][ T9658] netlink: 'syz.5.908': attribute type 1 has an invalid length. [ 453.200818][ T9658] netlink: 1 bytes leftover after parsing attributes in process `syz.5.908'. [ 454.187878][ T9686] netlink: 4 bytes leftover after parsing attributes in process `syz.1.915'. [ 454.495272][ T9691] overlayfs: failed to clone upperpath [ 455.501550][ T9707] netlink: 16 bytes leftover after parsing attributes in process `syz.4.918'. [ 455.650164][ T9712] tipc: Enabling of bearer rejected, failed to enable media [ 456.270358][ T9732] netlink: 8 bytes leftover after parsing attributes in process `syz.6.924'. [ 456.279520][ T9732] netlink: 96 bytes leftover after parsing attributes in process `syz.6.924'. [ 456.288777][ T9732] vlan1: entered allmulticast mode [ 456.294075][ T9732] veth0_vlan: entered allmulticast mode [ 456.505652][ T9731] netlink: 4 bytes leftover after parsing attributes in process `syz.1.926'. [ 458.542307][ T9751] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 458.551343][ T9751] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 458.563324][ T9751] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 462.197775][ T9783] netlink: 'syz.6.935': attribute type 4 has an invalid length. [ 462.205502][ T9783] netlink: 17 bytes leftover after parsing attributes in process `syz.6.935'. [ 463.489341][ T9795] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 463.498184][ T9795] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 463.509941][ T9795] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 464.668918][ T9800] netlink: 16 bytes leftover after parsing attributes in process `syz.5.941'. [ 467.705427][ T5776] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 468.959794][ T9839] netlink: 'syz.6.945': attribute type 4 has an invalid length. [ 468.976313][ T9839] netlink: 17 bytes leftover after parsing attributes in process `syz.6.945'. [ 469.509275][ T5776] Bluetooth: hci4: command 0x0406 tx timeout [ 470.338168][ T9858] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 470.347426][ T9858] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 470.359921][ T9858] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 473.005266][ T9866] netlink: 16 bytes leftover after parsing attributes in process `syz.5.952'. [ 578.915780][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 578.922780][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P9872/2:b..l [ 578.931246][ C0] rcu: (detected by 0, t=10502 jiffies, g=44701, q=126 ncpus=2) [ 578.939091][ C0] task:syz-executor state:R running task stack:28840 pid:9872 ppid:5770 flags:0x00004000 [ 578.950967][ C0] Call Trace: [ 578.954278][ C0] [ 578.957235][ C0] __schedule+0x1553/0x45a0 [ 578.961788][ C0] ? asan.module_dtor+0x20/0x20 [ 578.966655][ C0] ? mark_lock+0x94/0x320 [ 578.971004][ C0] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 578.977010][ C0] ? preempt_schedule_irq+0xb4/0x150 [ 578.982320][ C0] preempt_schedule_irq+0xbf/0x150 [ 578.987459][ C0] ? preempt_schedule_notrace+0x110/0x110 [ 578.993287][ C0] ? mark_lock+0x94/0x320 [ 578.997641][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 579.003469][ C0] irqentry_exit+0x67/0x70 [ 579.007900][ C0] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 579.013393][ C0] RIP: 0010:xas_find+0x1ab/0xab0 [ 579.018381][ C0] Code: 00 0f 82 5a 01 00 00 41 83 fe 02 0f 85 50 01 00 00 41 0f b6 44 1d 00 84 c0 49 89 df 75 78 48 8d 5d fe 48 8b 04 24 44 0f b6 20 <49> 89 de 49 c1 ee 03 43 0f b6 04 3e 84 c0 75 79 44 0f b6 3b 45 0f [ 579.038013][ C0] RSP: 0000:ffffc9000e6379f0 EFLAGS: 00000246 [ 579.044217][ C0] RAX: ffffc9000e637bd0 RBX: ffff888023c839c0 RCX: ffff88802aae9e00 [ 579.052218][ C0] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000002 [ 579.060240][ C0] RBP: ffff888023c839c2 R08: ffff88802aae9e00 R09: 0000000000000002 [ 579.068258][ C0] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000000 [ 579.076239][ C0] R13: 1ffff92001cc6f7a R14: 0000000000000002 R15: dffffc0000000000 [ 579.084240][ C0] next_uptodate_folio+0x33/0xad0 [ 579.089302][ C0] filemap_map_pages+0x257/0x1980 [ 579.094342][ C0] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 579.100345][ C0] ? filemap_map_pages+0x18e/0x1980 [ 579.105585][ C0] ? filemap_read_folio+0x760/0x760 [ 579.110807][ C0] handle_mm_fault+0x3b05/0x4c00 [ 579.115776][ C0] ? handle_mm_fault+0xe7/0x4c00 [ 579.120756][ C0] ? lock_vma_under_rcu+0x549/0x680 [ 579.126089][ C0] ? numa_migrate_prep+0x350/0x350 [ 579.131222][ C0] ? do_user_addr_fault+0x1c3/0x12c0 [ 579.136539][ C0] do_user_addr_fault+0xac8/0x12c0 [ 579.141719][ C0] ? rcu_is_watching+0x15/0xb0 [ 579.146523][ C0] exc_page_fault+0x64/0x100 [ 579.151155][ C0] asm_exc_page_fault+0x26/0x30 [ 579.156126][ C0] RIP: 0033:0x7ff13875af10 [ 579.160637][ C0] RSP: 002b:00007ffdedd9cf48 EFLAGS: 00010206 [ 579.166741][ C0] RAX: 0000000000000000 RBX: 00007ffdedd9cf60 RCX: 00007ff1387c398c [ 579.174848][ C0] RDX: 0000000000000000 RSI: 0000000000000018 RDI: 00007ff139548060 [ 579.182871][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001 [ 579.190967][ C0] R10: 000055558c0ff7d0 R11: 0000000000000246 R12: 0000000000000001 [ 579.199231][ C0] R13: 00000000000927c0 R14: 00000000000739ab R15: 00007ffdedd9d140 [ 579.207295][ C0] [ 579.210370][ C0] rcu: rcu_preempt kthread starved for 10055 jiffies! g44701 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 579.221738][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 579.231810][ C0] rcu: RCU grace-period kthread stack dump: [ 579.237791][ C0] task:rcu_preempt state:R running task stack:27656 pid:17 ppid:2 flags:0x00004000 [ 579.248847][ C0] Call Trace: [ 579.252135][ C0] [ 579.255072][ C0] __schedule+0x1553/0x45a0 [ 579.259612][ C0] ? asan.module_dtor+0x20/0x20 [ 579.264479][ C0] ? enqueue_timer+0x23d/0x550 [ 579.269259][ C0] ? __mod_timer+0x984/0xdb0 [ 579.273907][ C0] schedule+0xbd/0x170 [ 579.278099][ C0] schedule_timeout+0x188/0x2d0 [ 579.282983][ C0] ? console_conditional_schedule+0x40/0x40 [ 579.288908][ C0] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 579.295003][ C0] ? update_process_times+0x1b0/0x1b0 [ 579.300432][ C0] ? prepare_to_swait_event+0x339/0x360 [ 579.306031][ C0] rcu_gp_fqs_loop+0x313/0x1590 [ 579.310925][ C0] ? dyntick_save_progress_counter+0x2b0/0x2b0 [ 579.317102][ C0] ? rcu_gp_init+0x1560/0x1560 [ 579.321984][ C0] ? rcu_gp_cleanup+0xb41/0xc90 [ 579.326869][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 579.332095][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 579.337307][ C0] rcu_gp_kthread+0x9d/0x3b0 [ 579.341915][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 579.347048][ C0] ? __kthread_parkme+0x7a/0x1c0 [ 579.352158][ C0] ? __kthread_parkme+0x162/0x1c0 [ 579.357313][ C0] kthread+0x2fa/0x390 [ 579.361411][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 579.366552][ C0] ? kthread_blkcg+0xd0/0xd0 [ 579.371162][ C0] ret_from_fork+0x48/0x80 [ 579.375596][ C0] ? kthread_blkcg+0xd0/0xd0 [ 579.380217][ C0] ret_from_fork_asm+0x11/0x20 [ 579.385012][ C0] [ 579.388074][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 579.394415][ C0] Sending NMI from CPU 0 to CPUs 1: [ 579.399713][ C1] NMI backtrace for cpu 1 [ 579.399736][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 579.399752][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 579.399762][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x10 [ 579.399807][ C1] Code: 18 23 02 c3 cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d 43 32 44 00 fb f4 66 0f 1f 00 55 41 57 41 56 41 54 53 50 8b 2f eb 2e 41 89 de 80 [ 579.399822][ C1] RSP: 0018:ffffc90000187de0 EFLAGS: 000002c2 [ 579.399837][ C1] RAX: 534172bc08aa0a00 RBX: ffffffff8162a570 RCX: 534172bc08aa0a00 [ 579.399850][ C1] RDX: 0000000000000001 RSI: ffffffff8acac900 RDI: ffffffff8b1c80e0 [ 579.399861][ C1] RBP: ffffc90000187f20 R08: ffff8880b8f36b2b R09: 1ffff110171e6d65 [ 579.399874][ C1] R10: dffffc0000000000 R11: ffffed10171e6d66 R12: 1ffff110036ce780 [ 579.399886][ C1] R13: 1ffff92000030fc8 R14: 0000000000000001 R15: dffffc0000000000 [ 579.399898][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 579.399912][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 579.399924][ C1] CR2: 00007f82cab8bb04 CR3: 00000000261d8000 CR4: 00000000003506e0 [ 579.399938][ C1] Call Trace: [ 579.399946][ C1] [ 579.399952][ C1] default_idle+0x13/0x20 [ 579.399971][ C1] default_idle_call+0x6c/0xa0 [ 579.399991][ C1] do_idle+0x1f0/0x4e0 [ 579.400015][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 579.400036][ C1] ? asm_sysvec_call_function_single+0x1a/0x20 [ 579.400064][ C1] cpu_startup_entry+0x43/0x60 [ 579.400084][ C1] start_secondary+0xee/0xf0 [ 579.400102][ C1] secondary_startup_64_no_verify+0x179/0x17b [ 579.400134][ C1]