last executing test programs: 2m10.596612292s ago: executing program 3 (id=4): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000093c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) lstat(&(0x7f0000001100)='./file0/file0\x00', 0x0) syz_fuse_handle_req(r0, &(0x7f0000006380)="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", 0x2000, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)={0x90, 0x0, 0x5, {0x5, 0x1, 0xc, 0x1, 0x7, 0x7, {0x3, 0x4, 0x8, 0x49, 0x480f6ecb, 0x8000000000000001, 0x80000000, 0x9, 0x6, 0x6000, 0x800, r2, r3, 0x3, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) getdents64(r4, 0x0, 0x0) 2m9.6974351s ago: executing program 3 (id=15): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x20000000, 0x80000000440, 0x7, 0x0, 0xfffffffffffffffd, 0x2004cc, 0x0, 0x0, 0xb, 0x3, 0x1, 0x2000, 0x4, 0xfffffffffffffffd], 0x1000, 0x210306}) sendto$packet(0xffffffffffffffff, &(0x7f00000003c0)='?', 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000340)=0x1, 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000240)=@x86={0x0, 0x6, 0x1d, 0x0, 0x8000, 0x63, 0x6, 0x8, 0x6, 0xa0, 0x2, 0xfe, 0x0, 0x2, 0x1, 0xef, 0x8, 0x81, 0x5, '\x00', 0x1, 0x7fff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000000000070000040"]) 2m9.325663197s ago: executing program 3 (id=21): r0 = gettid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000340)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) io_setup(0x6, &(0x7f0000000680)=0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000080)=ANY=[], 0x8) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x180a, 0x3000, 0x3, 0x1, 0x80, r1, 0x0, 0x3000}]) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 2m9.054094692s ago: executing program 3 (id=24): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x243014, 0x0) setpgid(0x0, r0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0xa00000, 0x0) 2m8.907069595s ago: executing program 3 (id=26): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bdaa, 0xffffffff, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a80)=@newtfilter={0x70, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0x2}, {}, {0x10, 0x8}}, [@filter_kind_options=@f_bpf={{0x8}, {0x44, 0x2, [@TCA_BPF_ACT={0x34, 0x1, [@m_ctinfo={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084) 2m7.523420912s ago: executing program 32 (id=31): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2000, 0x1800}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x44000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) 2m0.88067976s ago: executing program 33 (id=63): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x3, 0x5, 0x10, 0xff, 0x5, 0x5f, 0x3, 0x0, 0xa6, 0x1, 0x5, 0x6}, {0xfffffff9, 0x4004, 0x0, 0x0, 0x0, 0xf6, 0x1, 0x9, 0x6, 0xff, 0x4, 0x0, 0x800000000000000}, {0xffffff02, 0x35, 0x0, 0x0, 0x4, 0x5, 0x7, 0xfe, 0x8, 0xd, 0x0, 0x7, 0x6}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000040)={{0x0, 0x3, 0xc20, 0xadb12e32f182386c, 0x3}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000300)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x3, 0xb, 0x200004, 0x200, 0x2, 0x0, 0x1], 0x80a0000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m53.839758436s ago: executing program 34 (id=26): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bdaa, 0xffffffff, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a80)=@newtfilter={0x70, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0x2}, {}, {0x10, 0x8}}, [@filter_kind_options=@f_bpf={{0x8}, {0x44, 0x2, [@TCA_BPF_ACT={0x34, 0x1, [@m_ctinfo={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084) 1m43.008972754s ago: executing program 6 (id=139): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000400)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x0, 0x0, 0x0, 0x7}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="97", 0xfffffffffffffe2c, 0x4040005, 0x0, 0x0) 1m41.933866605s ago: executing program 6 (id=157): bind$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x10, 0x0, 0x25dfdc03, 0x2ffffffff}, 0xc) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="7f454c460b067a25d4"], 0x98) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8d80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m41.68818926s ago: executing program 6 (id=151): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) semget$private(0x0, 0x1, 0x1) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) 1m40.712590888s ago: executing program 6 (id=153): syz_mount_image$iso9660(&(0x7f0000000d40), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000b80)=ANY=[], 0x1, 0x5ca, &(0x7f0000001480)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) chdir(&(0x7f00000001c0)='./file0\x00') chdir(&(0x7f0000000000)='./file0\x00') setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) readahead(r0, 0x5, 0x6) mknodat(0xffffffffffffff9c, 0x0, 0x21c0, 0x103) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', 0x0, 0x8, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) 1m40.011147242s ago: executing program 6 (id=161): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0x6, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r1}, &(0x7f0000000480)=0x20, &(0x7f00000004c0)='%pS \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m39.505998942s ago: executing program 6 (id=164): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x1, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x7b) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) epoll_create(0x10000e9) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2, 0x2, 0x2}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r1], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) 1m38.910347523s ago: executing program 35 (id=164): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x1, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x7b) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) epoll_create(0x10000e9) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2, 0x2, 0x2}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r1], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) 1m13.696103649s ago: executing program 4 (id=326): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000300), 0x20000, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000007, 0x40032, 0xffffffffffffffff, 0x40000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x48, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) 1m13.540979662s ago: executing program 4 (id=331): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) 1m11.656534739s ago: executing program 7 (id=354): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) syz_init_net_socket$ax25(0x3, 0x5, 0xcb) ioctl$TCFLSH(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x2) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x3) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000400)=0x7) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000200)=0x6) 1m11.336168405s ago: executing program 4 (id=358): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd21, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x5, 0x4}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8848}, 0x20004044) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xc, 0x4}, {0x0, 0xfff1}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4041080) 1m11.278715886s ago: executing program 4 (id=359): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) dup2(r2, r0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) r3 = open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x0) ioctl$BTRFS_IOC_DEFRAG(r3, 0x4c00, 0x3) 1m11.164230328s ago: executing program 4 (id=360): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000240)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}, {@oldalloc}]}, 0x2, 0x53a, &(0x7f0000000c80)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file1\x00', 0xe42, 0x1ff) llistxattr(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) 1m10.815705425s ago: executing program 4 (id=371): write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x15, 0x1}, 0x7) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x80000002, 0x8000000009, 0xfffffffffffffffd, 0x0, 0x2000002, 0x0, 0x4002004c4, 0x1004, 0x45c4, 0x8, 0x7, 0x2, 0x3, 0x2000000000000000, 0x80000004000000, 0xabb], 0x8000000, 0x12d7}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m10.739954956s ago: executing program 36 (id=371): write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x15, 0x1}, 0x7) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x80000002, 0x8000000009, 0xfffffffffffffffd, 0x0, 0x2000002, 0x0, 0x4002004c4, 0x1004, 0x45c4, 0x8, 0x7, 0x2, 0x3, 0x2000000000000000, 0x80000004000000, 0xabb], 0x8000000, 0x12d7}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m1.555833233s ago: executing program 9 (id=373): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x60000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000300)={0xc9, 0x0, 0xc}) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xa5}, 0x40000) times(&(0x7f0000002280)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m1.388041956s ago: executing program 9 (id=439): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1a, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m0.520761123s ago: executing program 9 (id=441): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0xffff}, 0x8) close(0x3) 1m0.472088184s ago: executing program 7 (id=442): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c00009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) connect$vsock_stream(r0, &(0x7f0000000100)={0x28, 0x0, 0x2711, @hyper}, 0x10) socket(0x15, 0x5, 0x0) pselect6(0x40, &(0x7f0000000080)={0x5, 0x0, 0x120000000000, 0x2, 0x500, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f0000000180)={0x3fe, 0x7, 0x0, 0x9, 0x86, 0x800, 0x80000002}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 57.955955933s ago: executing program 7 (id=459): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) socket$inet6_tcp(0xa, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket(0x1d, 0x2, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000180)=""/85, 0x55}], 0x1) sendmsg$can_raw(r0, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r1}, 0x10, &(0x7f0000000200)={&(0x7f00000007c0)=@can={{0x2, 0x0, 0x1, 0x1}, 0x1, 0x0, 0x0, 0x0, "001e0000000700"}, 0x10}}, 0x4000040) 57.303602725s ago: executing program 9 (id=463): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) r0 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x20000, 0x23) openat(r1, &(0x7f0000000680)='./file0\x00', 0x100, 0x104) 57.132074798s ago: executing program 9 (id=467): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, 0x1, 0xc000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c084}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700ff01000000000000000000000000000108000a00", @ANYRES32=r5], 0x54}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r3) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x1201}, [@IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x2c}}, 0x0) 57.08224385s ago: executing program 7 (id=468): openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1219, &(0x7f0000001100)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x360, &(0x7f0000000b00)="$eJzs3c1rO0UYwPEnaZImKW1yEEVBOtiLXpY2ehaDtCAELG0jtoKwbTcasiYlG6oRse3Jq3j3JHgovVnwUND+A71404sI3noRPFhBXdm3ZPPWl5g0/trvB0omM/PszmQn5dm0m718+/MPKiVLK+kNiSaVRERErkSyEpVAxH+MuuWEhB3KSzO///j8+mYx6VWolfzGyzml1Nz8dx9+kvK7nU3LRfbdy99yv148ffHs5T8b75ctVbZUtdZQutqu/dzQt01D7ZatiqbUqmnolqHKVcuoe+3f+Nsxa3t7TaVXd2fTe3XDspRebaqK0VSNmmrUm0p/Ty9XlaZpajYtuEnxeG1Nzw8ZvDPiwWBM6vW8PiUiqZ6W4vFEBgQAACaqO/+POin9MPn/lswVCstryunczv9PXjhvzLx1Oufn/2eJfvn/Kz952+rI/53TiXb+X/POD0o35/9fyh3y/96M6HEZOv/PjmEwGM58oqcq0vHMyf/T/vvXdfTOyaJbIP8HAAAAAAAAAAAAAAAAAAAAAOBJcGXbGdu2M8Fj8NO+hMB/jgdp0PGfFpGkc/Rtjv9Dtr65JUn3wj3nGJuf7Rf3i96j3+FcREwx/ra7OWsjuPJIObLyvXngxx/sF6fclnxJyk68LElGsu56CsXb9sobheUl5fHjW5cppcPxOcnIU+H4b93V6cTnOuP9/SfkxYVQvCYZ+WFHamLKrhvZ3v+nS0q9/mahKz7l9hORX+79oAAAAAAAMGKaaul7/q5pg9q9bxnJl9yPiQxZlIz81f/8frHv+Xks81xs0rMHAAAAAOBxsJofV3SJGnW3YJr9CikZ2DSCQqyjJi4ifTsnumri1215KjTD244nId4dTP7rvL4KXtW7RAX/SOEMvNXk31FFhhtPMH+3JhJrNf1513lFDsVdAIfhpqjcIjzWPfh5p0L17bwwcDtH/kRaNcHHRokBr7Os9m4nes1KiPfU2JHhFsAzX3z9x+jeIK+e+ivgo5s7H5mGfSC3OShdBWcXvU3xsf/iAQAAAHDv2kl/UPNauDl8I5HwzXL4yz0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAACM0lq/06ypMeo4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/8W/AQAA//9/d/Qh") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x4, 0x5, 0x0, 0x0, 0x1b, 0x10, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a3110697e4298d1e14ef01060000e9009600fdff0000000400", "d300e6d6ae9ef30bea2a004000", [0x0, 0x3]}) creat(&(0x7f0000002380)='./file1\x00', 0x0) lremovexattr(&(0x7f0000000080)='./file1\x00', &(0x7f0000000280)=@known='system.posix_acl_access\x00') 56.382678753s ago: executing program 7 (id=479): r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0xf) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r3 = accept4$unix(r1, 0x0, 0x0, 0x0) recvmsg(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000b00)=""/77, 0x4d}], 0x1}, 0x4c2003a0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 56.338501784s ago: executing program 9 (id=480): openat$ttynull(0xffffffffffffff9c, 0x0, 0x80080, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x29ba41, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, 0x0) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000100)=0xa70410b) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) writev(r2, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00\x004', 0x3}], 0x1) 56.135610408s ago: executing program 37 (id=480): openat$ttynull(0xffffffffffffff9c, 0x0, 0x80080, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x29ba41, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, 0x0) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000100)=0xa70410b) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) writev(r2, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00\x004', 0x3}], 0x1) 55.824001914s ago: executing program 7 (id=484): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x20, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000380)="27c051140ce966c729205e1f42bda4d4bfa0d04ea0f3aca34a12be7fe01477df17cede1d86888516e1b14299f716b74b1d65a922e13f8bce125009baf93221c5f41f11d1857ca48bf5c81f74a64be5b9de7c64d738d37573cc57f4bec3afa91f0b84c91673a2bcdcd3e557cf20fecd685e93c0bc1d318c2ed56d1796609a1d8774c99b74b6c4e65b276813c3ebd7c0695bdc4cb7", 0x94}, {&(0x7f0000001040)="7f37c2baff0de55ce257091de4c8892e4e2d3615845085eae2e0699584e968c7141722f4305e686bb965fd42e6d1e565ac9a4c61a54bedbb3ed6d56b12c88dfd97cca4043efd9cc56ed65429e609e6df87544cd6486c2c74e84799c1fbc811fe1fbf14c3d474c2baa1e7c86427d235110101be23c696a1ed2b506d8e84086ade5b56e6da5e8fbb88006e52187a0aac3c407725beecfdac80b216d755ae306072dd806b89ecb01fc0063b273eefcdfe2bdff1eb", 0xb3}], 0x2}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000740)="38e5ff7de25be6d1167222d310072fe90b455bc0bba8aeb7b9ce7df217bafd4d94d262b1b9dce1eef11803e1af0c1e1c0b32b9882f7b8171bb759ff583d14db6694ee1bcbc173085f65a118428b112258489b82a5921fa8a1d7dda0a1dad2856bcd0917821483cdabb5fc80cb65b512c3e6a60fb427d8e5b64bd7f494c1ba2e62c846554c5e76d1663dcbdd9ff6122efeec36c11f00aea3a801560243c21e3c7d4fd918c32a753c5d5a01136191352041f13adce0c7c99546ad3c4bb085366ad15fabe0e71758871cd", 0xc9}], 0x1}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 55.637538567s ago: executing program 38 (id=484): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x20, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000380)="27c051140ce966c729205e1f42bda4d4bfa0d04ea0f3aca34a12be7fe01477df17cede1d86888516e1b14299f716b74b1d65a922e13f8bce125009baf93221c5f41f11d1857ca48bf5c81f74a64be5b9de7c64d738d37573cc57f4bec3afa91f0b84c91673a2bcdcd3e557cf20fecd685e93c0bc1d318c2ed56d1796609a1d8774c99b74b6c4e65b276813c3ebd7c0695bdc4cb7", 0x94}, {&(0x7f0000001040)="7f37c2baff0de55ce257091de4c8892e4e2d3615845085eae2e0699584e968c7141722f4305e686bb965fd42e6d1e565ac9a4c61a54bedbb3ed6d56b12c88dfd97cca4043efd9cc56ed65429e609e6df87544cd6486c2c74e84799c1fbc811fe1fbf14c3d474c2baa1e7c86427d235110101be23c696a1ed2b506d8e84086ade5b56e6da5e8fbb88006e52187a0aac3c407725beecfdac80b216d755ae306072dd806b89ecb01fc0063b273eefcdfe2bdff1eb", 0xb3}], 0x2}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000740)="38e5ff7de25be6d1167222d310072fe90b455bc0bba8aeb7b9ce7df217bafd4d94d262b1b9dce1eef11803e1af0c1e1c0b32b9882f7b8171bb759ff583d14db6694ee1bcbc173085f65a118428b112258489b82a5921fa8a1d7dda0a1dad2856bcd0917821483cdabb5fc80cb65b512c3e6a60fb427d8e5b64bd7f494c1ba2e62c846554c5e76d1663dcbdd9ff6122efeec36c11f00aea3a801560243c21e3c7d4fd918c32a753c5d5a01136191352041f13adce0c7c99546ad3c4bb085366ad15fabe0e71758871cd", 0xc9}], 0x1}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 6.836609328s ago: executing program 2 (id=776): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000580)=""/265, 0xffffff3f, 0x3) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket(0x10, 0x803, 0x0) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000080)=ANY=[@ANYRES64=r0, @ANYRES16=r0]) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) 4.1639115s ago: executing program 0 (id=787): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getsockname$l2tp(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x55779000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newtaction={0x90, 0x30, 0x871a15abc695fa3d, 0x0, 0xffffffff, {}, [{0x7c, 0x1, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x0, 0x10000007}}]}, {0x4}, {0xc}, {0xc}}}, @m_mirred={0x30, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) 3.913236604s ago: executing program 2 (id=790): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000180)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) sendmmsg$inet(r0, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000007c0)="0d18687da3e7f33aed145cf8ff2d1e5a18c0d5f9856f4824f41040f6987d0b531da10713ed151bc4867681f28e033aef683334d03864ed30590dd4ea64a20ecbbc1346c9f42510d91eec0632885b7da95ca85f4b1435c5c1e993a85257df5f19bdfc5e038a16e6a8aef907e347081fdb93cee93217e11f19cde423e6138bd1b79ee615527ccaf8049959ac6e32af46d777ccb8c26ca925f69590df13a81aee3213e80ba5cacf1f930b3cc49093d11594ef13325790b55efbdc2dd99ed1c3c609a49cc15187", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f00000003c0)="353a35d6094e4ee7d764b6993f65136c5d6b84d9b1324a0b25e094700c9a66f9181738098f32e3e48859c3878d53a9752474da0d6af299d849d48f2fa2c8c807d7a1521da940585790ff1e6f9da83e32b751d1af9cfac640c1361f5ae8b99c187dafe9ea854120f6eaab11e7fdeb3f2152ebdbc21520ca01f64bb821576deef4ed6696cdddc1768b5b4fbd68a687cb6ba52ecf5cc6f8f05062f26de19d6aaaeb6cbca00e46685f77d2b3e8dd9d0d099e799cd5a76c67ab283f790366f7f744508edc9e48fa101b89215bd330c4e706c1f09d781a5a50aef5e424", 0xda}], 0x1}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 3.167133968s ago: executing program 0 (id=792): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, 0x0, 0x1) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x400}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x64, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xffe0}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0xfffa, 0x7, 0x8001}, {{0x2, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}}}, @TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0x8, 0x0, 0x4}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) 3.141958579s ago: executing program 8 (id=795): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x2a, 0x3, 0xe47) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, &(0x7f0000000080)={0x1d, r4, 0x0, {0x0, 0x0, 0x4}}, 0x18) sendmsg$can_j1939(r5, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000500)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f0000000540)="921304533ea0b13d2f", 0x9}}, 0xee) 3.08208201s ago: executing program 2 (id=796): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x30, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x30}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x48, r6, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x24, 0x33, @reassoc_resp={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x1}, {}, @broadcast, @device_a, @random="37e6fc966e04", {0x0, 0x7}}, 0x4c00, 0x5d, @default, @val, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0x1, 0x0]}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 2.929953563s ago: executing program 1 (id=798): socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, 0x0, 0x20000000) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c152bfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 2.929220393s ago: executing program 8 (id=799): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x48882, 0x0, 0x1, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) fchownat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, 0x0, 0x1000) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file1\x00', 0x101200, 0x140) chdir(&(0x7f0000000100)='./file0\x00') fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffe11) 2.870929115s ago: executing program 2 (id=800): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0xfffff4b8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48040}, 0x40004) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r6) 2.854247585s ago: executing program 5 (id=801): syz_mount_image$jfs(&(0x7f0000000400), &(0x7f0000000380)='./file1\x00', 0x1c802, &(0x7f0000002740)=ANY=[], 0x3, 0x5f4f, &(0x7f0000009040)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) sendmsg$TIPC_NL_SOCK_GET(r0, 0x0, 0x20060000) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x51) pidfd_send_signal(0xffffffffffffffff, 0x1d, 0x0, 0x0) 2.614532519s ago: executing program 0 (id=802): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x18) socket$inet6(0x10, 0x3, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000240)=0x2) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) shutdown(r1, 0x0) 2.56118294s ago: executing program 8 (id=803): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) inotify_init1(0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0x13) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x80) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000540)={0xfffffff7, 0x200401, 0xfffffffd, 0xc6cf, 0x91, "0000080100", 0x23fffd, 0x1fd}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="12000000070000000400000002"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x9) 2.482231872s ago: executing program 2 (id=804): openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124) openat$dir(0xffffffffffffff9c, 0x0, 0x42, 0x80) syz_read_part_table(0x5e0, &(0x7f0000000000)="$eJzs089LpGUcAPDvO+3s7LazjUTQoQ4LLQuBtdQSLeRAiwyDFxX7gYfOgkEdBA8eBkXnbPYPFJaCePEfELqUCqJgJ/Eoc+moBDFETLzvvJqJpxoy2c/n8L7P+zzP9/t9huc7wY1WiEq5O+qUIuKPu1fs6YuI0vnXD/fyQelefLJeK8WD0WdjH8d7SXwWEbXXy3neNGU3a9KNL2RFit3gobtxsLw7eLret5ene5A9NwsRaYYvjlcqfztL9pGe4vbt8/w89zaqW5WF5lR9caZainqj9WQiifgtWxpIIubG80ZJ+yruZMM7va2f9mRWf/Kw3mg9PHi6ut8ZOfnm/tvF7YP2uzvZrpey/0Cu2Mv6XK8PX4iI5l/3/+0r80fz7eFHa9OP+29FxFJ+8b/m7w/Sx+dzmgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOi5jepWO5pT9cWZ6uRhvdF6MvFW7bWval9+/f53A7OfvjowXkh3JdH5/crwYg/qVxaaZ2karWI8Xd3vjJzE/al04sWzff3Jxahb/7Ys/xNvFiMW0v6LrP/Si31nvj38aG36cf/LRz/OLiVZA0bncuAvO9dxXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgBqjFXKfzbKwQkcRPSTaVXFxPLk2MlLrvodJHyfLu4Ol6394bP28//H40n98sRzkbHK9U/qvfwD/3ZwAAAP//uBtt/Q==") socket$nl_route(0x10, 0x3, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000040)=0x2) write$P9_RRENAMEAT(r1, 0x0, 0x0) 2.276824636s ago: executing program 1 (id=805): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) close(r0) 2.111991089s ago: executing program 1 (id=806): fsopen(0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0xf3a, 0x0) write$binfmt_misc(r4, &(0x7f0000000180)="d1a3", 0x2) splice(r3, 0x0, r6, 0x0, 0x80, 0x4) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 1.595338559s ago: executing program 0 (id=807): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000180)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) sendmmsg$inet(r0, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000007c0)="0d18687da3e7f33aed145cf8ff2d1e5a18c0d5f9856f4824f41040f6987d0b531da10713ed151bc4867681f28e033aef683334d03864ed30590dd4ea64a20ecbbc1346c9f42510d91eec0632885b7da95ca85f4b1435c5c1e993a85257df5f19bdfc5e038a16e6a8aef907e347081fdb93cee93217e11f19cde423e6138bd1b79ee615527ccaf8049959ac6e32af46d777ccb8c26ca925f69590df13a81aee3213e80ba5cacf1f930b3cc49093d11594ef13325790b55efbdc2dd99ed1c3c609a49cc15187", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f00000003c0)="353a35d6094e4ee7d764b6993f65136c5d6b84d9b1324a0b25e094700c9a66f9181738098f32e3e48859c3878d53a9752474da0d6af299d849d48f2fa2c8c807d7a1521da940585790ff1e6f9da83e32b751d1af9cfac640c1361f5ae8b99c187dafe9ea854120f6eaab11e7fdeb3f2152ebdbc21520ca01f64bb821576deef4ed6696cdddc1768b5b4fbd68a687cb6ba52ecf5cc6f8f05062f26de19d6aaaeb6cbca00e46685f77d2b3e8dd9d0d099e799cd5a76c67ab283f790366f7f744508edc9e48fa101b89215bd330c4e706c1f09d781a5a50aef5e424", 0xda}], 0x1}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.595138229s ago: executing program 2 (id=808): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x2a, 0x3, 0xe47) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, &(0x7f0000000080)={0x1d, r4, 0x0, {0x0, 0x0, 0x4}}, 0x18) sendmsg$can_j1939(r5, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000500)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f0000000540)="921304533ea0b13d2f", 0x9}}, 0xee) 1.480346411s ago: executing program 8 (id=809): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r2 = dup(r0) r3 = socket(0xa, 0x3, 0xff) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty, 0x4000002}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f0000000280)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, 'z&-', 0x38, 0x3a, 0xfe, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x500, {0x2, 0x6, "081331", 0x3f6f, 0xff, 0x0, @mcast1, @loopback, [@fragment={0x84, 0x0, 0xa, 0x0, 0x0, 0x7, 0x65}]}}}}}}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000600)={0x0, @in6={{0xa, 0x4e23, 0x7, @empty, 0x2001}}, 0x6, 0x6}, 0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x7, 0x31, 0xffff1896, 0x3, 0xe, 0x400, 0x1b}, 0x9c) 1.480132981s ago: executing program 5 (id=810): socket$kcm(0x2, 0x200000000000001, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000280)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x40000012}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f00000003c0)={r1, 0x0, 0x0, 0x7e3c, 0x4, 0x9, 0xfffffff9, 0xffff, 0xfffffffe, 0x7, 0x1, 0xfefffffd}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x300, 0x1, &(0x7f0000000340)=[r1], &(0x7f0000000040)=[0x1], &(0x7f0000000200), &(0x7f00000000c0), 0x0, 0x7f}) 1.362934814s ago: executing program 8 (id=811): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x5, 0x4, 0xf06, 0x0, 0x84, 0x81, 0x5}, 0x9c) r3 = dup(r1) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000740)='team_slave_1\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x3, 0xfffc, 0xe652, 0x2, 0x85, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e24, 0x5, @empty, 0xb055}}, 0xff80, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x106, 0x4}}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 1.348827674s ago: executing program 5 (id=812): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000380)='Q', 0x1}], 0x1, 0x4, 0x5) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0x80, 0x5, 0x4, 0x7f, 0x4232, 0x0, 0x81, 0x9c1, 0x8001, 0x5, 0x7, 0x4db6, 0x0, 0xfffffdfffffffffd], 0xdddd1000, 0x80300}) syz_clone3(&(0x7f0000001040)={0xcc920480, 0x0, 0x0, 0x0, {0x1e}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.231338296s ago: executing program 8 (id=813): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x141101) socket(0xa, 0x1, 0x84) syz_open_procfs(0x0, &(0x7f0000000000)='net/udplite6\x00') socket(0xa, 0x1, 0x84) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f0000000600)={0x11, 0xff7ffffffffffffd, 0x2, 0xffffffffffffffff, 0xfffffffffffffffe, 0x9, 0x2, 0x8}, 0x0, &(0x7f0000000400)={0x7fc, 0x2, 0x800000, 0x0, 0x0, 0xc3ad, 0x0, 0xc2c5}, 0x0, 0x0) pselect6(0x40, &(0x7f0000000600)={0x6, 0x0, 0x0, 0x40, 0x2, 0x5e51, 0x0, 0x7}, 0x0, &(0x7f0000000680)={0x7ff, 0x4000007, 0x9, 0x7, 0x4, 0x0, 0x5, 0x5}, 0x0, 0x0) 1.010782581s ago: executing program 5 (id=814): syz_mount_image$msdos(&(0x7f0000000680), &(0x7f0000000a80)='./file1\x00', 0x2800810, &(0x7f00000025c0)=ANY=[@ANYBLOB="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"], 0x3, 0x15d, &(0x7f0000000f00)="$eJzs27+KE1EUB+AzJmrUJrVYDNhYBbWyVCSCOKAoKbRSiDaJBEwzWgWfxNaHEyRVCuGKzpLshoRl/8zO7ub7mhz4ccM9xZ3LGZj3dz6PhpPpp8mreXSyLNqPI49FFt24Eq2ozAIAuEwWKcXvlFK6PosbPyKl1PSOAIC6uf8BYPccev8/amhjAEBtzP8AsHvevH334klR9F/neSfi16wclIPqt8qfPS/69/P/uqtV87IctJb5gyrPD+ZX4+Ze/nBjfi3u3a3yf9nTl8VafiuG9bcPAAAAO6GXL22c73u9bXlV7Xs/sDa/t+N2+8zaAACOYPr12+jDePzxi0JxQYs/KaVjLP/+szoC56SL0y2yiDjZ/zT9ZALqtjr0Te8EAAAAAAAAAAAAAADYpt6vkVpNtwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAb/Q0AAP//LjxONw==") pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="b00000"], 0xb0) write$FUSE_DIRENTPLUS(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="10"], 0x10) getresuid(&(0x7f0000000000), &(0x7f0000000200), &(0x7f0000000400)) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000240)='./file0\x00') mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) 985.843411ms ago: executing program 1 (id=824): r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, &(0x7f0000000380)=""/4096, 0x1000) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) r3 = socket(0x2, 0x2, 0x0) r4 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) ioctl$NBD_DO_IT(r4, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x200000a) 558.170499ms ago: executing program 5 (id=815): socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, 0x0, 0x20000000) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c152bfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 394.206162ms ago: executing program 1 (id=816): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x48882, 0x0, 0x1, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) fchownat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, 0x0, 0x1000) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file1\x00', 0x101200, 0x140) chdir(&(0x7f0000000100)='./file0\x00') fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffe11) 382.327372ms ago: executing program 0 (id=817): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100bf2bbe11a5ce7839edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9", 0x32, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = dup(r2) syz_emit_ethernet(0x2a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004500001c000000008002907800000000e000030000009078006400d22b0361c2705048"], 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)=@arm64={0x1, 0xa, 0xb, '\x00', 0x7}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000002c0)=0x10000) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000300)={[0xe6, 0x55f, 0x1a0000, 0x4, 0xffffffffffffffff, 0x7, 0x9, 0xb, 0x4, 0x80, 0x6, 0x794, 0xa, 0x40, 0xc976, 0x6], 0x2, 0x20200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 350.559793ms ago: executing program 5 (id=818): socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x38, 0x10, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2825}, [@IFLA_BROADCAST={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @IFLA_OPERSTATE={0x5, 0x10, 0x7}, @IFLA_AF_SPEC={0x4}]}, 0x38}}, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sigaltstack(&(0x7f0000000480)={&(0x7f0000004000)=""/4126, 0x80000001, 0x101e}, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 110.707997ms ago: executing program 1 (id=819): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fddbdf252100000008000300", @ANYRES32=r2], 0x24}, 0x1, 0x0, 0x0, 0x8002}, 0x40084) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x40000) prlimit64(0x0, 0xe, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000a00)={'wlan0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="02030c65420002000000ab5d71acedd7c9560385dcb1080084d7dc039806112405ce811cc352", 0xff88, 0x0, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @broadcast}, 0x14) 0s ago: executing program 0 (id=820): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x0, 0x4, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x5, @empty, 0x2d}}, 0x4, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x2, 0x10}, 0xc) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x2, 0xaad, 0x4}}, 0x30) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x0, 0x1b}, 0x9c) kernel console output (not intermixed with test programs): mode [ 73.591774][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.609136][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.638577][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.694664][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.728227][ T4588] device veth0_macvtap entered promiscuous mode [ 73.746044][ T4588] device veth1_macvtap entered promiscuous mode [ 73.764246][ T4764] overlayfs: failed to clone upperpath [ 73.790530][ T4588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.801559][ T4767] process 'syz.4.92' launched './file0' with NULL argv: empty string added [ 73.846383][ T4588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.909142][ T4588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.936186][ T4588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.968448][ T4588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.990538][ T4588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.021215][ T4588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.042249][ T4588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.071226][ T4588] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.089593][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.130018][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.145425][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.167501][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.186011][ T4588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.218822][ T4588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.238880][ T4588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.265811][ T4588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.298467][ T4588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.309148][ T4588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.324522][ T4588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.338216][ T4588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.351612][ T4588] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.382009][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.414242][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.443168][ T4224] Bluetooth: hci2: command 0x040f tx timeout [ 74.455142][ T4588] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.474261][ T4588] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.490412][ T4588] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.499245][ T4588] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.641260][ T4781] loop5: detected capacity change from 0 to 32768 [ 74.676838][ T4370] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.698822][ T4371] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.736315][ T4370] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.738682][ T4371] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.770913][ T4781] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.98 (4781) [ 74.788773][ T4781] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 74.797962][ T4781] BTRFS info (device loop5): metadata ratio 134217730 [ 74.804815][ T4781] BTRFS info (device loop5): allowing degraded mounts [ 74.811591][ T4781] BTRFS info (device loop5): force clearing of disk cache [ 74.817449][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.818807][ T4781] BTRFS info (device loop5): max_inline at 0 [ 74.831938][ T4781] BTRFS info (device loop5): using free space tree [ 74.838534][ T4781] BTRFS info (device loop5): has skinny extents [ 74.865290][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.006224][ T4798] loop4: detected capacity change from 0 to 128 [ 75.126982][ T4781] BTRFS info (device loop5): enabling ssd optimizations [ 75.172235][ T4781] BTRFS info (device loop5): clearing free space tree [ 75.179201][ T4781] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 75.188990][ T4781] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 75.208389][ T4781] BTRFS info (device loop5): creating free space tree [ 75.217374][ T4781] BTRFS info (device loop5): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 75.227035][ T4781] BTRFS info (device loop5): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 75.245432][ T4798] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 75.273382][ T4798] ext4 filesystem being mounted at /23/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 75.316263][ T26] audit: type=1800 audit(1757641699.734:2): pid=4781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.98" name="file2" dev="loop5" ino=261 res=0 errno=0 [ 75.499987][ T4831] fuse: Bad value for 'group_id' [ 75.833042][ T4231] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 76.107358][ T4824] chnl_net:caif_netlink_parms(): no params data found [ 76.126014][ T4231] usb 7-1: Using ep0 maxpacket: 16 [ 76.243298][ T4231] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 76.277228][ T4231] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 76.445934][ T13] cfg80211: failed to load regulatory.db [ 76.483080][ T4231] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 76.528978][ T4231] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.547666][ T4231] usb 7-1: Product: syz [ 76.551862][ T4231] usb 7-1: Manufacturer: syz [ 76.608365][ T4231] usb 7-1: SerialNumber: syz [ 76.644943][ T1107] Bluetooth: hci2: command 0x0419 tx timeout [ 76.765138][ T4824] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.794064][ T4824] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.812992][ T4824] device bridge_slave_0 entered promiscuous mode [ 76.858361][ T4824] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.895677][ T4824] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.912406][ T4824] device bridge_slave_1 entered promiscuous mode [ 76.970275][ T4231] usb 7-1: 0:2 : does not exist [ 77.072499][ T4231] usb 7-1: USB disconnect, device number 2 [ 77.122957][ T4247] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 77.163472][ T4397] udevd[4397]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 77.202751][ T4824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.250281][ T4824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.341348][ T4824] team0: Port device team_slave_0 added [ 77.355846][ T4824] team0: Port device team_slave_1 added [ 77.405663][ T4369] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.441864][ T4824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.458049][ T4824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.502882][ T4232] Bluetooth: hci3: command 0x0409 tx timeout [ 77.507645][ T4871] loop5: detected capacity change from 0 to 32768 [ 77.558118][ T4824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.563151][ T4247] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 77.578842][ T4247] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 77.585496][ T4824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.598036][ T4871] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.107 (4871) [ 77.620237][ T4247] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 77.623288][ T4824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.657623][ T4247] usb 5-1: config 220 has no interface number 2 [ 77.670157][ T4824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.673681][ T4247] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 77.694853][ T4247] usb 5-1: config 220 interface 0 has no altsetting 0 [ 77.701802][ T4247] usb 5-1: config 220 interface 76 has no altsetting 0 [ 77.709145][ T4247] usb 5-1: config 220 interface 1 has no altsetting 0 [ 77.724870][ T4369] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.745496][ T4871] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 77.759206][ T4871] BTRFS info (device loop5): enabling auto defrag [ 77.790309][ T4871] BTRFS info (device loop5): doing ref verification [ 77.800707][ T4369] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.836152][ T4871] BTRFS info (device loop5): use no compression [ 77.856264][ T4824] device hsr_slave_0 entered promiscuous mode [ 77.868663][ T4824] device hsr_slave_1 entered promiscuous mode [ 77.874076][ T4871] BTRFS info (device loop5): force clearing of disk cache [ 77.881892][ T4871] BTRFS info (device loop5): max_inline at 4096 [ 77.888513][ T4824] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.896664][ T4247] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 77.913004][ T4824] Cannot create hsr debugfs directory [ 77.918548][ T4247] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.929158][ T4871] BTRFS info (device loop5): disabling free space tree [ 77.938818][ T4247] usb 5-1: Product: syz [ 77.951381][ T4247] usb 5-1: Manufacturer: syz [ 77.956192][ T4871] BTRFS info (device loop5): has skinny extents [ 77.963151][ T4247] usb 5-1: SerialNumber: syz [ 78.003051][ T4232] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 78.031415][ T4369] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.195692][ T4871] BTRFS info (device loop5): enabling ssd optimizations [ 78.220787][ T4871] BTRFS info (device loop5): clearing free space tree [ 78.237620][ T4871] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 78.257533][ T4871] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 78.398538][ T4247] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 78.403769][ T4824] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 78.423201][ T4232] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 78.438208][ T4247] usb 5-1: No valid video chain found. [ 78.444109][ T4232] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.459472][ T4824] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 78.474789][ T4247] usb 5-1: selecting invalid altsetting 0 [ 78.494400][ T4824] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 78.551192][ T4824] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 78.606996][ T4232] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 78.617160][ T4232] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 78.661364][ T4232] usb 7-1: Manufacturer: syz [ 78.667129][ T4247] usb 5-1: selecting invalid altsetting 0 [ 78.693646][ T4247] usbtest: probe of 5-1:220.1 failed with error -22 [ 78.720436][ T4232] usb 7-1: config 0 descriptor?? [ 78.733256][ T4247] usb 5-1: USB disconnect, device number 3 [ 78.944593][ T4824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.952920][ T4232] rc_core: IR keymap rc-hauppauge not found [ 78.958839][ T4232] Registered IR keymap rc-empty [ 79.011658][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.021951][ T4232] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 79.038792][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.056885][ T4232] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input5 [ 79.060353][ T4824] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.152907][ C1] igorplugusb 7-1:0.0: Error: urb status = -32 [ 79.174952][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.195765][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.247508][ T4371] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.254635][ T4371] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.280993][ T4283] usb 7-1: USB disconnect, device number 3 [ 79.289061][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.314363][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.332661][ T4371] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.339832][ T4371] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.355367][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.403992][ T4247] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 79.418755][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.449154][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.468813][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.480423][ T4931] loop5: detected capacity change from 0 to 32768 [ 79.499170][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.516189][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 79.543270][ T4931] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.112 (4931) [ 79.571501][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.585360][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.596817][ T4283] Bluetooth: hci3: command 0x041b tx timeout [ 79.606692][ T4931] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 79.623074][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 79.636496][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 79.642745][ T4931] BTRFS info (device loop5): turning on sync discard [ 79.660724][ T4824] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.671347][ T4247] usb 5-1: Using ep0 maxpacket: 8 [ 79.672956][ T4931] BTRFS info (device loop5): setting nodatacow, compression disabled [ 79.686980][ T4931] BTRFS info (device loop5): turning off barriers [ 79.702533][ T4824] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 79.710796][ T4931] BTRFS warning (device loop5): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 79.728869][ T4931] BTRFS info (device loop5): trying to use backup root at mount time [ 79.737234][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 79.769577][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 79.777929][ T4931] BTRFS info (device loop5): metadata ratio 32769 [ 79.798105][ T4931] BTRFS info (device loop5): max_inline at 0 [ 79.818661][ T4247] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.822205][ T4931] BTRFS info (device loop5): using free space tree [ 79.838460][ T4247] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.891023][ T4247] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 79.941610][ T4931] BTRFS info (device loop5): has skinny extents [ 79.963142][ T4247] usb 5-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 80.044024][ T4247] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.101111][ T4247] usb 5-1: config 0 descriptor?? [ 80.145777][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 80.159452][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 80.176446][ T154] BTRFS warning (device loop5): checksum verify failed on 5337088 wanted 0xe63dbdda found 0xc926492d level 0 [ 80.221825][ T4931] BTRFS warning (device loop5): failed to read root (objectid=2): -5 [ 80.239890][ T4824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.254238][ T154] BTRFS warning (device loop5): checksum verify failed on 5324800 wanted 0x9f73850b found 0x80379423 level 0 [ 80.296184][ T4931] BTRFS warning (device loop5): couldn't read tree root [ 80.319549][ T4369] device hsr_slave_0 left promiscuous mode [ 80.338907][ T4931] BTRFS error (device loop5): parent transid verify failed on 5255168 wanted 5 found 7 [ 80.356753][ T4369] device hsr_slave_1 left promiscuous mode [ 80.360840][ T4931] BTRFS warning (device loop5): couldn't read tree root [ 80.370875][ T4369] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.382677][ T4369] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 80.397235][ T4931] BTRFS info (device loop5): enabling ssd optimizations [ 80.413514][ T4369] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.421607][ T4931] BTRFS info (device loop5): clearing free space tree [ 80.437726][ T4931] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 80.441400][ T4369] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 80.469068][ T4369] device bridge_slave_1 left promiscuous mode [ 80.488915][ T4369] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.498270][ T4931] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 80.522109][ T4369] device bridge_slave_0 left promiscuous mode [ 80.537491][ T4369] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.548768][ T4931] BTRFS info (device loop5): creating free space tree [ 80.564086][ T4931] BTRFS info (device loop5): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 80.589332][ T4369] device veth1_macvtap left promiscuous mode [ 80.601617][ T4931] BTRFS info (device loop5): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 80.624094][ T4369] device veth0_macvtap left promiscuous mode [ 80.628635][ T4247] nzxt-kraken2 0003:1E71:170E.0002: hidraw0: USB HID v0.04 Device [HID 1e71:170e] on usb-dummy_hcd.4-1/input0 [ 80.640819][ T4369] device veth1_vlan left promiscuous mode [ 80.651481][ T4369] device veth0_vlan left promiscuous mode [ 80.824518][ T26] audit: type=1800 audit(1757641705.244:3): pid=4931 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.112" name="file1" dev="loop5" ino=257 res=0 errno=0 [ 80.913346][ T13] usb 5-1: USB disconnect, device number 4 [ 81.013913][ T5016] fido_id[5016]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 81.301151][ T5025] loop6: detected capacity change from 0 to 512 [ 81.365769][ T5025] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 81.421882][ T5025] EXT4-fs (loop6): 1 truncate cleaned up [ 81.427878][ T5025] EXT4-fs (loop6): mounted filesystem without journal. Opts: nogrpid,auto_da_alloc,debug_want_extra_isize=0x0000000000000068,errors=continue,lazytime,quota,,errors=continue. Quota mode: writeback. [ 81.462562][ T4369] team0 (unregistering): Port device team_slave_1 removed [ 81.590624][ T4369] team0 (unregistering): Port device team_slave_0 removed [ 81.622170][ T4369] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 81.652944][ T5031] Bluetooth: hci3: command 0x040f tx timeout [ 81.686164][ T4369] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 81.861835][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #240!!! [ 81.872892][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 81.883194][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 81.909925][ T4369] bond0 (unregistering): Released all slaves [ 82.915970][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.931667][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.993295][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.001649][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.032278][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.042431][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.070356][ T4824] device veth0_vlan entered promiscuous mode [ 83.131345][ T4824] device veth1_vlan entered promiscuous mode [ 83.200002][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 83.208432][ T5073] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 83.243766][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 83.279182][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.365034][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.393974][ T4824] device veth0_macvtap entered promiscuous mode [ 83.425523][ T4824] device veth1_macvtap entered promiscuous mode [ 83.463070][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.479999][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 83.554170][ T4824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.575790][ T4824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.602145][ T4824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.637869][ T4824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.668617][ T4824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.689667][ T4824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.723837][ T5033] Bluetooth: hci3: command 0x0419 tx timeout [ 83.724839][ T4824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.750854][ T4824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.772520][ T4824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.795081][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.809098][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.831085][ T4824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.852290][ T4824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.872678][ T4824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.893038][ T4824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.907400][ T5086] loop4: detected capacity change from 0 to 32768 [ 83.912891][ T4824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.931896][ T5086] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.135 (5086) [ 83.942943][ T4824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.958194][ T4824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.973640][ T5086] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 84.003020][ T4824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.006864][ T5086] BTRFS info (device loop4): turning on sync discard [ 84.020831][ T5086] BTRFS info (device loop4): setting nodatacow, compression disabled [ 84.029266][ T4824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.046492][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.068502][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.074243][ T5086] BTRFS info (device loop4): turning off barriers [ 84.091025][ T4824] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.110635][ T4824] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.112876][ T5086] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 84.151595][ T4824] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.152911][ T5086] BTRFS info (device loop4): trying to use backup root at mount time [ 84.168437][ T4824] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.210624][ T5086] BTRFS info (device loop4): metadata ratio 32769 [ 84.233471][ T5086] BTRFS info (device loop4): max_inline at 0 [ 84.262922][ T5086] BTRFS info (device loop4): using free space tree [ 84.269549][ T5086] BTRFS info (device loop4): has skinny extents [ 84.319097][ T4371] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.353741][ T4371] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.362075][ T4370] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.386865][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.406319][ T4370] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.430228][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 84.497957][ T5041] BTRFS warning (device loop4): checksum verify failed on 5337088 wanted 0xe63dbdda found 0xc926492d level 0 [ 84.577816][ T5117] binder: 5114:5117 ioctl c0306201 200000000080 returned -14 [ 84.594566][ T5086] BTRFS warning (device loop4): failed to read root (objectid=2): -5 [ 84.624145][ T9] BTRFS warning (device loop4): checksum verify failed on 5324800 wanted 0x9f73850b found 0x80379423 level 0 [ 84.702952][ T5086] BTRFS warning (device loop4): couldn't read tree root [ 84.726369][ T5086] BTRFS error (device loop4): parent transid verify failed on 5255168 wanted 5 found 7 [ 84.747429][ T5086] BTRFS warning (device loop4): couldn't read tree root [ 84.780848][ T5134] loop7: detected capacity change from 0 to 512 [ 84.784594][ T5086] BTRFS info (device loop4): enabling ssd optimizations [ 84.803145][ T5086] BTRFS info (device loop4): clearing free space tree [ 84.813079][ T5086] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 84.851293][ T5086] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 84.907643][ T5086] BTRFS info (device loop4): creating free space tree [ 84.935316][ T5134] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 84.955630][ T5086] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 84.993661][ T5086] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 85.013730][ T5134] EXT4-fs (loop7): 1 truncate cleaned up [ 85.027812][ T5134] EXT4-fs (loop7): mounted filesystem without journal. Opts: nogrpid,auto_da_alloc,debug_want_extra_isize=0x0000000000000068,errors=continue,lazytime,quota,,errors=continue. Quota mode: writeback. [ 85.190843][ T26] audit: type=1800 audit(1757641709.604:4): pid=5086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.135" name="file1" dev="loop4" ino=257 res=0 errno=0 [ 85.944998][ T5162] loop7: detected capacity change from 0 to 1764 [ 87.287924][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 87.297619][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 87.390067][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 87.492697][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 88.073221][ T4248] libceph: connect (1)[c::]:6789 error -13 [ 88.079811][ T4248] libceph: mon0 (1)[c::]:6789 connect error [ 88.091036][ T4248] libceph: connect (1)[c::]:6789 error -13 [ 88.103159][ T4248] libceph: mon0 (1)[c::]:6789 connect error [ 88.112798][ T5197] ceph: No mds server is up or the cluster is laggy [ 88.138367][ T5208] loop6: detected capacity change from 0 to 736 [ 88.690893][ T5231] loop5: detected capacity change from 0 to 2048 [ 88.772853][ T4588] Symlink component flag not implemented [ 88.854790][ T5231] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 88.890298][ T5231] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.997657][ T5221] loop7: detected capacity change from 0 to 32768 [ 89.016408][ T5221] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 scanned by syz.7.156 (5221) [ 89.041296][ T5231] fs-verity: sha512 using implementation "sha512-avx2" [ 89.064383][ T5221] BTRFS info (device loop7): using crc32c (crc32c-intel) checksum algorithm [ 89.099121][ T5221] BTRFS info (device loop7): turning on sync discard [ 89.127483][ T5221] BTRFS info (device loop7): setting nodatacow, compression disabled [ 89.157836][ T5221] BTRFS info (device loop7): turning off barriers [ 89.177765][ T5221] BTRFS warning (device loop7): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 89.229151][ T5221] BTRFS info (device loop7): trying to use backup root at mount time [ 89.259537][ T5221] BTRFS info (device loop7): metadata ratio 32769 [ 89.280592][ T5221] BTRFS info (device loop7): max_inline at 0 [ 89.312938][ T5221] BTRFS info (device loop7): using free space tree [ 89.350110][ T5221] BTRFS info (device loop7): has skinny extents [ 90.170077][ T5264] loop4: detected capacity change from 0 to 512 [ 90.237390][ T4369] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.251392][ T5270] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 90.331244][ T5264] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 90.356464][ T1561] BTRFS warning (device loop7): checksum verify failed on 5337088 wanted 0xe63dbdda found 0xc926492d level 0 [ 90.446416][ T5221] BTRFS warning (device loop7): failed to read root (objectid=2): -5 [ 90.467661][ T5042] BTRFS warning (device loop7): checksum verify failed on 5324800 wanted 0x9f73850b found 0x80379423 level 0 [ 90.498286][ T5264] ext4 filesystem being mounted at /34/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 90.518123][ T5221] BTRFS warning (device loop7): couldn't read tree root [ 90.530688][ T26] audit: type=1800 audit(1757641714.944:5): pid=5264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.167" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 90.733671][ T5221] BTRFS error (device loop7): parent transid verify failed on 5255168 wanted 5 found 7 [ 90.733962][ T5221] BTRFS warning (device loop7): couldn't read tree root [ 90.927172][ T5221] BTRFS info (device loop7): enabling ssd optimizations [ 90.931335][ T5221] BTRFS info (device loop7): clearing free space tree [ 90.931732][ T5221] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 90.931795][ T5221] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 91.137113][ T4369] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.257600][ T5221] BTRFS info (device loop7): creating free space tree [ 91.258332][ T5221] BTRFS info (device loop7): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 91.258356][ T5221] BTRFS info (device loop7): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 91.376766][ T26] audit: type=1800 audit(1757641715.794:6): pid=5221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.156" name="file1" dev="loop7" ino=257 res=0 errno=0 [ 91.378595][ T4369] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.671052][ T4369] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.784459][ T5307] overlayfs: failed to clone upperpath [ 92.649859][ T5299] chnl_net:caif_netlink_parms(): no params data found [ 92.659961][ T26] audit: type=1326 audit(1757641717.084:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5334 comm="syz.7.173" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0aa45b2ba9 code=0x0 [ 92.852705][ T5299] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.912745][ T5299] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.946252][ T5299] device bridge_slave_0 entered promiscuous mode [ 92.984259][ T5299] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.016509][ T5299] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.034531][ T5299] device bridge_slave_1 entered promiscuous mode [ 93.119257][ T5299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.154521][ T5299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.300477][ T5299] team0: Port device team_slave_0 added [ 93.332248][ T5299] team0: Port device team_slave_1 added [ 93.479977][ T5299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.488323][ T5031] Bluetooth: hci2: command 0x0409 tx timeout [ 93.508560][ T5299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.541434][ T5299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.561285][ T5299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.569784][ T5299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.596198][ T5299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.272164][ T5370] loop7: detected capacity change from 0 to 256 [ 94.306390][ T5370] exfat: Deprecated parameter 'namecase' [ 94.323021][ T5370] exfat: Deprecated parameter 'utf8' [ 94.379899][ T5370] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 94.502131][ T5299] device hsr_slave_0 entered promiscuous mode [ 94.529535][ T5299] device hsr_slave_1 entered promiscuous mode [ 94.544220][ T5299] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.557566][ T5299] Cannot create hsr debugfs directory [ 94.728671][ T4369] device hsr_slave_0 left promiscuous mode [ 94.736142][ T4369] device hsr_slave_1 left promiscuous mode [ 94.743137][ T4369] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.750708][ T4369] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.758671][ T4369] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.766514][ T4369] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.774906][ T4369] device bridge_slave_1 left promiscuous mode [ 94.781242][ T4369] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.789769][ T4369] device bridge_slave_0 left promiscuous mode [ 94.796502][ T4369] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.808669][ T4369] device veth1_macvtap left promiscuous mode [ 94.816794][ T4369] device veth0_macvtap left promiscuous mode [ 94.823140][ T4369] device veth1_vlan left promiscuous mode [ 94.829010][ T4369] device veth0_vlan left promiscuous mode [ 94.987846][ T4369] team0 (unregistering): Port device team_slave_1 removed [ 95.006590][ T4369] team0 (unregistering): Port device team_slave_0 removed [ 95.019914][ T4369] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 95.036797][ T4369] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 95.101286][ T4369] bond0 (unregistering): Released all slaves [ 95.252034][ T5299] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 95.262118][ T5299] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 95.272429][ T5299] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 95.296941][ T5299] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 95.428056][ T5299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.443807][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 95.451671][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 95.496326][ T5299] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.507040][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 95.516958][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 95.526142][ T4371] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.533263][ T4371] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.547559][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 95.559644][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 95.562979][ T4554] Bluetooth: hci2: command 0x041b tx timeout [ 95.577836][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 95.593503][ T4371] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.600614][ T4371] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.614502][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 95.635385][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 95.656621][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 95.671079][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 95.683244][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 95.695016][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 95.707857][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 95.732614][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 95.746514][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 95.765621][ T5299] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 95.782747][ T5299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 95.793737][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 95.802146][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 95.976319][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 95.991134][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 96.012607][ T5299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.319654][ T5041] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 96.339572][ T5041] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 96.378962][ T5041] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 96.391303][ T5041] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 96.404910][ T5299] device veth0_vlan entered promiscuous mode [ 96.420160][ T5041] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 96.428482][ T5041] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 96.447053][ T5299] device veth1_vlan entered promiscuous mode [ 96.487851][ T1561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 96.505864][ T1561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 96.522073][ T5299] device veth0_macvtap entered promiscuous mode [ 96.533320][ T5299] device veth1_macvtap entered promiscuous mode [ 96.556057][ T5299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.574572][ T5299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.587775][ T5299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.600699][ T5299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.632873][ T5299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.652872][ T5299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.662724][ T5299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.681049][ T5299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.704233][ T5299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.724422][ T5041] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 96.757755][ T5041] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 96.777253][ T5041] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 96.797876][ T5041] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 96.830440][ T5299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.841778][ T5299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.851963][ T5299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.867880][ T5299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.892940][ T5299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.906099][ T5299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.929567][ T5299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.941531][ T5299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.953209][ T5299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.966229][ T1561] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 96.975230][ T1561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 96.993495][ T5299] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.002227][ T5299] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.017449][ T5299] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.033116][ T5299] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.132465][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.159843][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.189152][ T5041] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 97.212957][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.233535][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.262138][ T1561] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 97.341796][ T26] audit: type=1326 audit(1757641721.754:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5447 comm="syz.5.193" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5188190ba9 code=0x0 [ 97.995869][ T13] Bluetooth: hci2: command 0x040f tx timeout [ 98.028545][ T5453] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 99.564939][ T5493] loop5: detected capacity change from 0 to 256 [ 99.683842][ T5493] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 99.694897][ T5322] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 99.962953][ T5322] usb 5-1: Using ep0 maxpacket: 16 [ 100.094410][ T5322] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 100.140817][ T5474] loop8: detected capacity change from 0 to 32768 [ 100.152855][ T5322] usb 5-1: config 0 has no interface number 0 [ 100.251092][ T5474] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 scanned by syz.8.183 (5474) [ 100.283297][ T4554] Bluetooth: hci2: command 0x0419 tx timeout [ 100.307858][ T5474] BTRFS info (device loop8): using crc32c (crc32c-intel) checksum algorithm [ 100.319775][ T5474] BTRFS info (device loop8): turning on sync discard [ 100.326996][ T5474] BTRFS info (device loop8): setting nodatacow, compression disabled [ 100.336475][ T5474] BTRFS info (device loop8): turning off barriers [ 100.353474][ T5474] BTRFS warning (device loop8): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 100.381974][ T5474] BTRFS info (device loop8): trying to use backup root at mount time [ 100.415957][ T5322] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 100.416325][ T5474] BTRFS info (device loop8): metadata ratio 32769 [ 100.450449][ T5322] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.458789][ T5474] BTRFS info (device loop8): max_inline at 0 [ 100.469247][ T5322] usb 5-1: Product: syz [ 100.480146][ T5474] BTRFS info (device loop8): using free space tree [ 100.489100][ T5322] usb 5-1: Manufacturer: syz [ 100.508657][ T5474] BTRFS info (device loop8): has skinny extents [ 100.509353][ T5322] usb 5-1: SerialNumber: syz [ 100.547070][ T5322] usb 5-1: config 0 descriptor?? [ 100.604629][ T5322] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 100.683090][ T5026] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 100.724151][ T4369] BTRFS warning (device loop8): checksum verify failed on 5337088 wanted 0xe63dbdda found 0xc926492d level 0 [ 100.775163][ T5474] BTRFS warning (device loop8): failed to read root (objectid=2): -5 [ 100.784323][ T4369] BTRFS warning (device loop8): checksum verify failed on 5324800 wanted 0x9f73850b found 0x80379423 level 0 [ 100.820026][ T5474] BTRFS warning (device loop8): couldn't read tree root [ 100.831733][ T5474] BTRFS error (device loop8): parent transid verify failed on 5255168 wanted 5 found 7 [ 100.848368][ T5474] BTRFS warning (device loop8): couldn't read tree root [ 100.885585][ T5474] BTRFS info (device loop8): enabling ssd optimizations [ 100.897384][ T5474] BTRFS info (device loop8): clearing free space tree [ 100.906443][ T5474] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 100.918664][ T5474] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 100.936128][ T5474] BTRFS info (device loop8): creating free space tree [ 100.943944][ T5474] BTRFS info (device loop8): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 100.953911][ T5026] usb 8-1: Using ep0 maxpacket: 16 [ 100.959159][ T5474] BTRFS info (device loop8): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 101.044627][ T26] audit: type=1800 audit(1757641725.464:9): pid=5474 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.183" name="file1" dev="loop8" ino=257 res=0 errno=0 [ 101.083051][ T5026] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 101.101710][ T5026] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 101.348193][ T5026] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 101.358716][ T5026] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.412627][ T5026] usb 8-1: Product: syz [ 101.438571][ T5026] usb 8-1: Manufacturer: syz [ 101.444482][ T5026] usb 8-1: SerialNumber: syz [ 101.806507][ T5026] usb 8-1: 0:2 : does not exist [ 101.847294][ T5026] usb 8-1: USB disconnect, device number 2 [ 101.849413][ T4555] kernel write not supported for file /cpu/0/msr (pid: 4555 comm: kworker/0:12) [ 102.106413][ T4396] udevd[4396]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 102.613151][ T5031] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 102.659559][ T5601] netlink: 8 bytes leftover after parsing attributes in process `syz.0.213'. [ 102.928847][ T5617] netlink: 28 bytes leftover after parsing attributes in process `syz.8.218'. [ 102.980113][ T5623] netlink: 28 bytes leftover after parsing attributes in process `syz.8.218'. [ 103.043196][ T5322] gspca_spca1528: reg_r err -71 [ 103.048402][ T5031] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 103.064870][ T5322] spca1528: probe of 5-1:0.1 failed with error -71 [ 103.071618][ T5031] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 103.101988][ T5322] usb 5-1: USB disconnect, device number 5 [ 103.130691][ T5031] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 103.152527][ T5031] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.198388][ T5588] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 103.581304][ T5641] netlink: 12 bytes leftover after parsing attributes in process `syz.8.222'. [ 103.588342][ T5322] usb 8-1: USB disconnect, device number 3 [ 103.680427][ T5647] fuse: Bad value for 'fd' [ 103.836479][ T5650] overlayfs: failed to clone upperpath [ 104.675906][ T5681] netlink: 4 bytes leftover after parsing attributes in process `syz.7.238'. [ 104.757125][ T5683] overlayfs: failed to clone upperpath [ 104.907624][ T5688] netlink: 'syz.8.240': attribute type 1 has an invalid length. [ 104.932750][ T5688] netlink: 220 bytes leftover after parsing attributes in process `syz.8.240'. [ 105.057483][ T5703] overlayfs: failed to clone upperpath [ 105.089590][ T5701] netlink: 4 bytes leftover after parsing attributes in process `syz.4.243'. [ 105.460740][ T5717] kvm: pic: non byte write [ 105.506529][ T5723] loop4: detected capacity change from 0 to 1024 [ 105.721187][ T5723] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 105.840876][ T5723] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,jqfmt=vfsold,delalloc,data_err=ignore,discard,data_err=ignore,grpquota,noblock_validity,user_xattr,block_validity,errors=remount-ro,. Quota mode: writeback. [ 105.959291][ T5736] loop7: detected capacity change from 0 to 2048 [ 106.094238][ T5736] UDF-fs: error (device loop7): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 106.155616][ T5736] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 106.180628][ T5746] kvm: pic: non byte write [ 106.258030][ T5746] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3722248192 (7444496384 ns) > initial count (18 ns). Using initial count to start timer. [ 106.543517][ T5753] fuse: Bad value for 'fd' [ 106.696278][ T5759] binder: 5758:5759 ioctl c0306201 200000000680 returned -14 [ 106.751307][ T5762] fuse: Bad value for 'fd' [ 106.902982][ T5322] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 107.760527][ T5322] usb 8-1: Using ep0 maxpacket: 16 [ 107.842019][ T5788] loop4: detected capacity change from 0 to 512 [ 107.894273][ T5322] usb 8-1: config 0 has an invalid interface number: 41 but max is 0 [ 107.902427][ T5322] usb 8-1: config 0 has no interface number 0 [ 107.924297][ T5788] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 107.940142][ T5322] usb 8-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 107.957966][ T5791] netlink: 32 bytes leftover after parsing attributes in process `syz.5.265'. [ 107.967826][ T5322] usb 8-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 111 [ 107.992377][ T5322] usb 8-1: config 0 interface 41 has no altsetting 0 [ 108.031259][ T5788] EXT4-fs (loop4): 1 truncate cleaned up [ 108.031352][ T5791] device erspan0 entered promiscuous mode [ 108.037205][ T5788] EXT4-fs (loop4): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,lazytime,debug_want_extra_isize=0x0000000000000004,norecovery,resuid=0x0000000000000000,quota,journal_ioprio=0x0000000000000005,,errors=continue. Quota mode: writeback. [ 108.223318][ T5322] usb 8-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 108.237600][ T5322] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.248370][ T5322] usb 8-1: Product: syz [ 108.252717][ T5322] usb 8-1: Manufacturer: syz [ 108.261832][ T5322] usb 8-1: SerialNumber: syz [ 108.288979][ T5781] loop8: detected capacity change from 0 to 32768 [ 108.294128][ T5322] usb 8-1: config 0 descriptor?? [ 108.323314][ T5757] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 108.332695][ T5757] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 108.367102][ T5796] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 108.403507][ T5781] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 scanned by syz.8.263 (5781) [ 108.461293][ T5781] BTRFS info (device loop8): using sha256 (sha256-avx2) checksum algorithm [ 108.500137][ T5781] BTRFS info (device loop8): using free space tree [ 108.517163][ T5781] BTRFS info (device loop8): has skinny extents [ 108.579115][ T5757] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 108.621669][ T5757] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 108.728959][ T5781] BTRFS info (device loop8): enabling ssd optimizations [ 108.935340][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807a200800: rx timeout, send abort [ 109.097908][ T4397] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop8 scanned by udevd (4397) [ 109.333057][ T5322] CoreChips 8-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 109.445249][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807a200800: abort rx timeout. Force session deactivation [ 111.093911][ T5029] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 111.153068][ T5322] CoreChips 8-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 111.222876][ T5322] CoreChips 8-1:0.41 (unnamed net_device) (uninitialized): Failed to power up PHY: -71 [ 111.264002][ T5322] CoreChips: probe of 8-1:0.41 failed with error -71 [ 111.316968][ T5322] usb 8-1: USB disconnect, device number 4 [ 111.520032][ T5929] loop7: detected capacity change from 0 to 2048 [ 111.548774][ T5029] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 111.590634][ T5029] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.639369][ T5029] usb 5-1: config 0 descriptor?? [ 111.695123][ T5929] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 111.708293][ T5029] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 111.881193][ T5953] EXT4-fs (loop7): shut down requested (0) [ 113.646533][ T6009] ODEBUG: Out of memory. ODEBUG disabled [ 113.671852][ C1] vkms_vblank_simulate: vblank timer overrun [ 113.863127][ T5029] gspca_stv06xx: I2C: Read error writing address: -71 [ 113.890726][ T5029] usb 5-1: USB disconnect, device number 6 [ 114.488206][ T6039] 8021q: adding VLAN 0 to HW filter on device bond1 [ 114.506839][ T6046] device veth0 entered promiscuous mode [ 114.570784][ T6046] bond1: (slave macvlan2): making interface the new active one [ 114.594972][ T6050] program syz.4.319 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 114.633727][ T6046] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 114.642839][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 115.240438][ T6079] fuse: Bad value for 'fd' [ 115.312081][ T6083] fuse: Bad value for 'fd' [ 115.378583][ T6089] fuse: Bad value for 'fd' [ 115.570041][ T6097] netlink: 20 bytes leftover after parsing attributes in process `syz.5.338'. [ 115.797609][ T6105] netlink: 60 bytes leftover after parsing attributes in process `syz.8.341'. [ 115.906779][ T6109] device syzkaller0 entered promiscuous mode [ 115.929716][ T6085] overlayfs: failed to clone upperpath [ 116.177776][ T6120] capability: warning: `syz.7.347' uses 32-bit capabilities (legacy support in use) [ 116.199466][ T6120] loop2: detected capacity change from 0 to 7 [ 116.225564][ T4397] loop2: [ 116.228880][ T4397] loop2: partition table partially beyond EOD, truncated [ 116.261335][ T6120] loop2: [ 116.265578][ T6120] loop2: partition table partially beyond EOD, truncated [ 116.516527][ T6125] loop7: detected capacity change from 0 to 164 [ 116.619786][ T6125] rock: directory entry would overflow storage [ 116.670326][ T6125] rock: sig=0x5053, size=7, remaining=4 [ 116.700490][ T6125] isofs_fill_super: root inode is not a directory. Corrupted media? [ 117.273910][ T4371] Bluetooth: hci5: Frame reassembly failed (-84) [ 117.284093][ T4269] Bluetooth: hci5: Frame reassembly failed (-84) [ 117.529948][ T6158] "syz.0.357" (6158) uses obsolete ecb(arc4) skcipher [ 117.745593][ T6175] fuse: Bad value for 'fd' [ 117.820567][ T6180] fuse: Bad value for 'fd' [ 117.924545][ T4183] syz-executor (4183) used greatest stack depth: 20256 bytes left [ 117.957249][ T4269] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.020057][ T4269] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.089277][ T4269] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.160075][ T4269] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.532388][ T6205] chnl_net:caif_netlink_parms(): no params data found [ 118.732574][ T6205] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.752534][ T6205] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.768414][ T6205] device bridge_slave_0 entered promiscuous mode [ 118.813189][ T6205] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.829539][ T6205] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.863976][ T6205] device bridge_slave_1 entered promiscuous mode [ 118.960630][ T6205] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.993512][ T6205] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.054567][ T6205] team0: Port device team_slave_0 added [ 119.074310][ T6205] team0: Port device team_slave_1 added [ 119.140339][ T6205] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.164250][ T6205] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.213482][ T6205] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.329946][ T5322] Bluetooth: hci5: command 0x1003 tx timeout [ 119.385859][ T4195] Bluetooth: hci5: sending frame failed (-49) [ 119.994515][ T6205] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 120.009434][ T6205] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.069037][ T6205] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 120.202070][ C1] Unknown status report in ack skb [ 120.285603][ T5026] Bluetooth: hci1: command 0x0409 tx timeout [ 120.450211][ T4269] device hsr_slave_0 left promiscuous mode [ 120.468379][ T4269] device hsr_slave_1 left promiscuous mode [ 120.485826][ T4269] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.506134][ T4269] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.524968][ T4269] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.534536][ T4269] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.556381][ T4269] device bridge_slave_1 left promiscuous mode [ 120.567384][ T4269] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.597721][ T4269] device bridge_slave_0 left promiscuous mode [ 120.610097][ T4269] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.640308][ T4269] device veth1_macvtap left promiscuous mode [ 120.649774][ T4269] device veth0_macvtap left promiscuous mode [ 120.659600][ T4269] device veth1_vlan left promiscuous mode [ 120.668751][ T4269] device veth0_vlan left promiscuous mode [ 121.585138][ T5322] Bluetooth: hci5: command 0x1001 tx timeout [ 121.598571][ T4195] Bluetooth: hci5: sending frame failed (-49) [ 121.769613][ T4269] team0 (unregistering): Port device team_slave_1 removed [ 121.810405][ T4269] team0 (unregistering): Port device team_slave_0 removed [ 121.837544][ T4269] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 121.868964][ T4269] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 122.014587][ T4269] bond0 (unregistering): Released all slaves [ 122.069222][ T6205] device hsr_slave_0 entered promiscuous mode [ 122.076182][ T6205] device hsr_slave_1 entered promiscuous mode [ 122.372903][ T5026] Bluetooth: hci1: command 0x041b tx timeout [ 122.734074][ T6205] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 122.980493][ T6205] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 123.002439][ T6205] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 123.013383][ T6205] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 123.232686][ T6355] batman_adv: batadv0: Adding interface: dummy0 [ 123.245049][ T6355] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.281198][ T6355] batman_adv: batadv0: Interface activated: dummy0 [ 123.332697][ T6362] batadv0: mtu less than device minimum [ 123.357959][ T6362] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 123.370860][ T6362] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 123.383166][ T6362] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 123.395542][ T6362] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 123.407821][ T6362] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 123.420225][ T6362] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 123.432461][ T6362] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 123.444778][ T6362] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 123.457098][ T6362] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 123.653054][ T4246] Bluetooth: hci5: command 0x1009 tx timeout [ 123.653939][ T6205] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.729629][ T5042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 123.752210][ T5042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 123.787914][ T6205] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.829237][ T5041] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 123.858200][ T5041] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 123.859506][ T6397] fuse: Bad value for 'fd' [ 123.873543][ T5041] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.880612][ T5041] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.929406][ T5041] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 123.957081][ T5041] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 123.969085][ T5041] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 123.986231][ T5041] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.993372][ T5041] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.006832][ T5041] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 124.016752][ T5041] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 124.062262][ T5041] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 124.086460][ T5041] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 124.098345][ T5041] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 124.119423][ T5041] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 124.140800][ T5041] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 124.176760][ T5041] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 124.201870][ T6205] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 124.220619][ T6205] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 124.239762][ T5041] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 124.259510][ T5041] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 124.281812][ T5041] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 124.443385][ T4246] Bluetooth: hci1: command 0x040f tx timeout [ 124.670079][ T5042] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 124.687135][ T5042] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 124.723334][ T6205] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.142564][ T5042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 125.173231][ T5042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 125.228957][ T5042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 125.252162][ T5042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 125.280778][ T5042] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 125.310711][ T5042] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 125.336758][ T6205] device veth0_vlan entered promiscuous mode [ 125.365684][ T6205] device veth1_vlan entered promiscuous mode [ 125.434507][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 125.473330][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 125.493718][ T6205] device veth0_macvtap entered promiscuous mode [ 125.523597][ T6205] device veth1_macvtap entered promiscuous mode [ 125.602230][ T6205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.635747][ T6205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.676553][ T6205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.710739][ T6205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.738206][ T6205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.772839][ T6205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.780388][ T6492] netlink: 428 bytes leftover after parsing attributes in process `+}[@'. [ 125.782676][ T6205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.844911][ T6205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.867749][ T6205] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.875944][ T26] audit: type=1326 audit(1757641750.294:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6495 comm="syz.0.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47dd30eba9 code=0x7ffc0000 [ 125.947553][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 125.956963][ T26] audit: type=1326 audit(1757641750.294:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6495 comm="syz.0.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47dd30eba9 code=0x7ffc0000 [ 125.983746][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 126.020814][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 126.029110][ T26] audit: type=1326 audit(1757641750.324:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6495 comm="syz.0.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f47dd30eba9 code=0x7ffc0000 [ 126.044831][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 126.071518][ T26] audit: type=1326 audit(1757641750.324:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6495 comm="syz.0.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47dd30eba9 code=0x7ffc0000 [ 126.096176][ T6205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.109706][ T26] audit: type=1326 audit(1757641750.324:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6495 comm="syz.0.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47dd30eba9 code=0x7ffc0000 [ 126.161978][ T26] audit: type=1326 audit(1757641750.324:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6495 comm="syz.0.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f47dd30eba9 code=0x7ffc0000 [ 126.162314][ T6205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.190417][ T26] audit: type=1326 audit(1757641750.324:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6495 comm="syz.0.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47dd30eba9 code=0x7ffc0000 [ 126.222483][ T26] audit: type=1326 audit(1757641750.324:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6495 comm="syz.0.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47dd30eba9 code=0x7ffc0000 [ 126.252866][ T6205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.264041][ T26] audit: type=1326 audit(1757641750.324:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6495 comm="syz.0.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f47dd30eba9 code=0x7ffc0000 [ 126.272844][ T6205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.326577][ T6205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.332869][ T4556] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 126.347321][ T6205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.349491][ T26] audit: type=1326 audit(1757641750.324:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6495 comm="syz.0.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47dd30eba9 code=0x7ffc0000 [ 126.367437][ T6205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.411113][ T6205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.435612][ T6205] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.478041][ T6205] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.507604][ T6205] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.530345][ T6205] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.540480][ T5029] Bluetooth: hci1: command 0x0419 tx timeout [ 126.581042][ T6205] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.619406][ T5042] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 126.634813][ T4556] usb 9-1: Using ep0 maxpacket: 16 [ 126.666457][ T5042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 126.764385][ T4556] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.821464][ T4556] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.864155][ T4556] usb 9-1: config 0 interface 0 has no altsetting 0 [ 126.870804][ T4556] usb 9-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 126.876317][ T5041] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.919174][ T5041] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.948308][ T4556] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.961851][ T5042] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 126.986680][ T5041] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.024975][ T4556] usb 9-1: config 0 descriptor?? [ 127.082288][ T5041] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.110167][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 127.513908][ T4556] hid (null): bogus close delimiter [ 128.653092][ T5325] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 128.929200][ T6538] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.937955][ T6538] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.050101][ T4851] usb 9-1: USB disconnect, device number 2 [ 129.063081][ T5325] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 129.106548][ T5325] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 129.148058][ T5325] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 129.353958][ T5325] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 129.380534][ T5325] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 129.432993][ T5325] usb 8-1: Product: syz [ 129.448915][ T5325] usb 8-1: Manufacturer: syz [ 129.454033][ T5325] usb 8-1: SerialNumber: syz [ 130.242518][ T5325] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 130.258632][ T5325] usb 8-1: USB disconnect, device number 5 [ 130.268809][ T5325] usblp0: removed [ 130.461069][ T6582] syz.0.458 uses obsolete (PF_INET,SOCK_PACKET) [ 130.471740][ T6538] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.510138][ T6538] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.644194][ T6569] loop8: detected capacity change from 0 to 40427 [ 130.744398][ T6569] F2FS-fs (loop8): build fault injection attr: rate: 771, type: 0x1ffff [ 130.779430][ T6569] F2FS-fs (loop8): invalid crc value [ 130.806743][ T6569] F2FS-fs (loop8): Found nat_bits in checkpoint [ 130.902205][ T6569] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 131.083810][ T6569] F2FS-fs (loop8) : inject page get in f2fs_pagecache_get_page of generic_perform_write+0x2aa/0x530 [ 131.184320][ T144] attempt to access beyond end of device [ 131.184320][ T144] loop8: rw=1, want=78312, limit=40427 [ 131.215085][ T144] attempt to access beyond end of device [ 131.215085][ T144] loop8: rw=2049, want=40984, limit=40427 [ 131.234039][ T6604] VFS:Filesystem freeze failed [ 131.234088][ T6538] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.238978][ T6538] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.259546][ T6538] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.268578][ T6538] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.010301][ T6635] loop7: detected capacity change from 0 to 8192 [ 132.022669][ T6643] loop8: detected capacity change from 0 to 8192 [ 132.079360][ T6651] netlink: 40 bytes leftover after parsing attributes in process `syz.0.473'. [ 132.099806][ T26] kauditd_printk_skb: 9 callbacks suppressed [ 132.099818][ T26] audit: type=1800 audit(1757641756.514:29): pid=6635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.468" name="file2" dev="loop7" ino=1048604 res=0 errno=0 [ 132.100123][ T6651] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 132.134263][ T6651] IPv6: NLM_F_CREATE should be set when creating new route [ 132.141516][ T6651] IPv6: NLM_F_CREATE should be set when creating new route [ 132.193050][ T6635] loop7: detected capacity change from 8192 to 0 [ 132.237370][ T6658] overlayfs: failed to clone upperpath [ 132.251827][ T6635] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000e1b1) [ 132.279897][ T6635] FAT-fs (loop7): Filesystem has been set read-only [ 132.408477][ T6670] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000696) [ 132.473066][ T6670] FAT-fs (loop8): Filesystem has been set read-only [ 132.688389][ T5322] net_ratelimit: 10 callbacks suppressed [ 132.688405][ T5322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.776354][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.986326][ T6688] netlink: 830 bytes leftover after parsing attributes in process `syz.5.485'. [ 133.037821][ T6688] device bond_slave_0 entered promiscuous mode [ 133.044383][ T6688] device bond_slave_1 entered promiscuous mode [ 133.243996][ T6697] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.273117][ T6697] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.300359][ T6697] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.341772][ T6697] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.394818][ T6697] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.453277][ T6697] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.474951][ T6697] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.500048][ T6697] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.527186][ T6697] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.565827][ T6689] chnl_net:caif_netlink_parms(): no params data found [ 135.092970][ T5322] Bluetooth: hci1: command 0x0409 tx timeout [ 135.425386][ T6689] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.436025][ T6689] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.444935][ T6689] device bridge_slave_0 entered promiscuous mode [ 135.457753][ T6689] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.493053][ T6689] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.493130][ T5029] Bluetooth: hci3: command 0x0409 tx timeout [ 135.528092][ T6746] 9pnet: Insufficient options for proto=fd [ 135.553944][ T6689] device bridge_slave_1 entered promiscuous mode [ 135.635653][ T6704] chnl_net:caif_netlink_parms(): no params data found [ 135.702559][ T6689] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.772039][ T6689] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 135.884477][ T6689] team0: Port device team_slave_0 added [ 136.684755][ T6689] team0: Port device team_slave_1 added [ 136.728296][ T4371] device hsr_slave_0 left promiscuous mode [ 136.736456][ T4371] device hsr_slave_1 left promiscuous mode [ 136.743947][ T4371] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.752252][ T4371] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.766717][ T4371] device bridge_slave_1 left promiscuous mode [ 136.783019][ T4371] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.815443][ T4371] device bridge_slave_0 left promiscuous mode [ 136.821680][ T4371] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.164234][ T5322] Bluetooth: hci1: command 0x041b tx timeout [ 137.470824][ T4371] team0 (unregistering): Port device team_slave_1 removed [ 137.518842][ T4371] team0 (unregistering): Port device team_slave_0 removed [ 137.539113][ T4371] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 137.567090][ T4371] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 137.573064][ T5322] Bluetooth: hci3: command 0x041b tx timeout [ 137.674585][ T4371] bond0 (unregistering): Released all slaves [ 137.761391][ T6689] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 137.768885][ T6689] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.803945][ T6689] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 138.447324][ T4255] net_ratelimit: 1795 callbacks suppressed [ 138.447344][ T4255] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.712923][ T5322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.815677][ T6824] netlink: 72 bytes leftover after parsing attributes in process `syz.0.511'. [ 138.884926][ T6827] fuse: Bad value for 'fd' [ 138.973438][ T6807] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.980873][ T6807] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.281243][ T5325] Bluetooth: hci1: command 0x040f tx timeout [ 139.351360][ T6841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.377918][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.398565][ T6841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.425259][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.435610][ T6844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.444417][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.456740][ T6844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.480692][ T6840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.653498][ T23] Bluetooth: hci3: command 0x040f tx timeout [ 140.255942][ T6807] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.297212][ T6807] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.426766][ T6857] netlink: 8 bytes leftover after parsing attributes in process `syz.5.523'. [ 141.324383][ T5324] Bluetooth: hci1: command 0x0419 tx timeout [ 141.733808][ T5026] Bluetooth: hci3: command 0x0419 tx timeout [ 141.740382][ T6807] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.749638][ T6807] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.758855][ T6807] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.771921][ T6807] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.896682][ T6689] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.921669][ T6689] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.950375][ T6689] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.979422][ T6857] device ~ÿ entered promiscuous mode [ 142.107779][ T6704] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.121201][ T6704] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.139716][ T6704] device bridge_slave_0 entered promiscuous mode [ 142.196557][ T6704] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.211098][ T6704] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.263098][ T6704] device bridge_slave_1 entered promiscuous mode [ 142.293639][ T6689] device hsr_slave_0 entered promiscuous mode [ 142.309915][ T6689] device hsr_slave_1 entered promiscuous mode [ 142.437207][ T6704] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 142.514030][ T6704] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 142.707836][ T6900] loop8: detected capacity change from 0 to 8 [ 142.741472][ T6704] team0: Port device team_slave_0 added [ 142.770604][ T6704] team0: Port device team_slave_1 added [ 143.031189][ T6704] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.048210][ T6704] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.112589][ T6704] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.145271][ T6704] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.152240][ T6704] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.219536][ T6704] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.458990][ T6704] device hsr_slave_0 entered promiscuous mode [ 143.490662][ T6704] device hsr_slave_1 entered promiscuous mode [ 143.518634][ T6704] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 143.537983][ T6704] Cannot create hsr debugfs directory [ 144.281029][ T6689] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 144.317621][ T6689] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 144.349953][ T6689] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 144.374601][ T6689] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 144.467566][ T5029] net_ratelimit: 8 callbacks suppressed [ 144.467580][ T5029] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.931547][ T6689] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.008131][ T6689] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.055807][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 145.071709][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 145.116360][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 145.137408][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 145.168658][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.175812][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.203177][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 145.222166][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 145.237825][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.244968][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.269295][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 145.291692][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 145.320627][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 145.386605][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 145.411576][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 145.420842][ T4556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.460373][ T6689] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 145.490448][ T5325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.538786][ T6689] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 145.591291][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 145.609106][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 145.651673][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 145.671058][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 145.688529][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 145.698183][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 145.716705][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 145.734434][ T6704] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 145.751551][ T6704] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 145.779553][ T6704] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 145.813588][ T6704] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 145.831958][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 146.128241][ T6704] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.643520][ T5042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 146.737912][ T5031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.744296][ T5042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 146.853408][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.896857][ T6704] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.940831][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 146.964185][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 146.972665][ T4373] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.979796][ T4373] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.029793][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 147.092659][ T7034] netlink: 60 bytes leftover after parsing attributes in process `syz.8.561'. [ 147.122549][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 147.133989][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 147.154038][ T4370] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.161123][ T4370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.176235][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 147.190976][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 147.200957][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 147.219918][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 147.256782][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 147.299285][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 147.310457][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 147.339706][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 147.397713][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 147.420690][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 147.472036][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 147.494918][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 147.508640][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 147.523710][ T6704] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 147.545293][ T4371] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.587616][ T6689] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.621804][ T4371] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.668218][ T7078] netlink: 24 bytes leftover after parsing attributes in process `syz.0.573'. [ 147.758651][ T7083] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.787142][ T7083] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.802241][ T7083] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.804578][ T4371] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.812711][ T7083] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.831194][ T7083] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.983099][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 148.017085][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 148.091268][ T4371] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.197405][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 148.215408][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 148.253486][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 148.268302][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 148.362269][ T6689] device veth0_vlan entered promiscuous mode [ 148.400204][ T6689] device veth1_vlan entered promiscuous mode [ 148.529442][ T6689] device veth0_macvtap entered promiscuous mode [ 148.578584][ T1135] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 148.613790][ T1135] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 148.638628][ T1135] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 148.693652][ T1135] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 148.713554][ T1135] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 148.721183][ T1135] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 148.757814][ T6689] device veth1_macvtap entered promiscuous mode [ 148.811874][ T6704] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.086214][ T1135] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 149.162728][ T1135] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 149.558802][ T6689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.579920][ T6689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.600128][ T6689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.620839][ T6689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.637759][ T6689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.663012][ T6689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.684276][ T6689] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 149.716667][ T1135] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 149.766296][ T1135] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 149.793892][ T6689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.812981][ T6689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.828285][ T6689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.842831][ T6689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.863234][ T6689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.873967][ T6689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.890963][ T6689] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 149.900695][ T5325] net_ratelimit: 10 callbacks suppressed [ 149.900709][ T5325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.934235][ T5042] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 149.974111][ T5042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 150.005118][ T6689] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.027705][ T6689] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.048035][ T6689] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.093026][ T6689] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.193635][ T6800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 150.214227][ T6800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 150.305914][ T5042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 150.354059][ T5042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 150.378034][ T6704] device veth0_vlan entered promiscuous mode [ 150.426091][ T5042] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 150.446522][ T5042] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 150.475854][ T6704] device veth1_vlan entered promiscuous mode [ 150.541807][ T7168] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 150.585364][ T6800] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.618548][ T6800] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.656614][ T5042] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 150.693306][ T5042] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 150.715976][ T5042] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 150.738787][ T5042] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.770326][ T6704] device veth0_macvtap entered promiscuous mode [ 150.792971][ T5042] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.820686][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 150.839823][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 150.872628][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 150.897760][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 150.940306][ T5324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.961656][ T6704] device veth1_macvtap entered promiscuous mode [ 151.051306][ T6704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.113043][ T6704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.137906][ T6704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.178950][ T6704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.201123][ T6704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.232028][ T6704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.252092][ T6704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.272831][ T6704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.294619][ T6704] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.345563][ T6800] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 151.380921][ T6800] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 151.422508][ T6800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 151.445495][ T6704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.472844][ T6704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.483195][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.512876][ T6704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.544661][ T6704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.559352][ T6704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.572823][ T6704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.602843][ T6704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.632844][ T6704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.662988][ T6704] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.722602][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 151.738529][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 151.779179][ T6704] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.799985][ T6704] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.828900][ T6704] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.847900][ T6704] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.982774][ T5029] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.144486][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.163750][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.172329][ T7195] loop8: detected capacity change from 0 to 40427 [ 152.259184][ T7195] F2FS-fs (loop8): invalid crc value [ 152.282980][ T6800] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 152.303543][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.314886][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.328530][ T7222] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 152.348588][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 152.373430][ T7195] F2FS-fs (loop8): Found nat_bits in checkpoint [ 152.430389][ T4371] device hsr_slave_0 left promiscuous mode [ 152.523489][ T4371] device hsr_slave_1 left promiscuous mode [ 152.533681][ T4371] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.541137][ T4371] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.569872][ T4371] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.580954][ T4371] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.602086][ T4371] device bridge_slave_1 left promiscuous mode [ 152.609422][ T7195] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 152.609433][ T4371] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.626445][ T7241] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 152.643941][ T4371] device bridge_slave_0 left promiscuous mode [ 152.664735][ T4371] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.687639][ T7243] fuse: Bad value for 'fd' [ 152.706019][ T4371] device veth1_macvtap left promiscuous mode [ 152.738014][ T4371] device veth0_macvtap left promiscuous mode [ 152.760443][ T4371] device veth1_vlan left promiscuous mode [ 152.780334][ T4371] device veth0_vlan left promiscuous mode [ 152.812274][ T7195] attempt to access beyond end of device [ 152.812274][ T7195] loop8: rw=10241, want=45104, limit=40427 [ 153.021064][ T5026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.196699][ T4371] team0 (unregistering): Port device team_slave_1 removed [ 153.231005][ T4371] team0 (unregistering): Port device team_slave_0 removed [ 153.263127][ T4371] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 153.312966][ T4371] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 153.423391][ T4371] bond0 (unregistering): Released all slaves [ 153.507348][ T7252] device netdevsim0 entered promiscuous mode [ 153.558099][ T7256] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 153.594444][ T7256] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 153.622186][ T7256] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 153.670888][ T7256] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 153.721976][ T7256] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 153.742087][ T7256] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 153.760887][ T7256] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 153.771094][ T7257] netlink: 20 bytes leftover after parsing attributes in process `syz.0.608'. [ 153.818584][ C0] vcan0: j1939_tp_rxtimer: 0xffff888061ac4800: rx timeout, send abort [ 153.833610][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888061ac4800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 154.607799][ T4554] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.776220][ T5324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.934103][ T7288] loop8: detected capacity change from 0 to 16 [ 154.995660][ T7288] erofs: (device loop8): mounted with root inode @ nid 36. [ 155.031610][ T7288] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 155.134640][ T7292] Illegal XDP return value 2896097582, expect packet loss! [ 155.635421][ T7317] bridge0: port 3(syz_tun) entered blocking state [ 155.843473][ T7317] bridge0: port 3(syz_tun) entered disabled state [ 156.886203][ T7317] device syz_tun entered promiscuous mode [ 156.983726][ T5322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.993194][ T4554] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.347443][ T7287] loop1: detected capacity change from 0 to 40427 [ 157.479790][ T7287] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 157.873874][ T4559] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.886494][ T7287] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 158.228271][ T7287] F2FS-fs (loop1): invalid crc value [ 158.269959][ T5322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.276995][ T7287] F2FS-fs (loop1): Failed to start F2FS issue_checkpoint_thread (-12) [ 158.469211][ T7353] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 159.343243][ T5322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.081677][ T7399] loop8: detected capacity change from 0 to 32768 [ 160.138957][ T7430] netlink: 'syz.0.653': attribute type 1 has an invalid length. [ 160.255285][ T7399] (syz.8.645,7399,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 160.318610][ T7435] bond2: (slave gretap1): making interface the new active one [ 160.370742][ T5322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.393961][ T7435] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 160.403992][ T7399] (syz.8.645,7399,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 160.433002][ T7430] netlink: 28 bytes leftover after parsing attributes in process `syz.0.653'. [ 160.476177][ T7442] xt_CT: You must specify a L4 protocol and not use inversions on it [ 160.497579][ T7430] 8021q: adding VLAN 0 to HW filter on device bond2 [ 160.518677][ T7399] JBD2: Ignoring recovery information on journal [ 160.551805][ T7427] loop2: detected capacity change from 0 to 32768 [ 160.615922][ T7399] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 160.638603][ T7427] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 160.924010][ T4554] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.961789][ T6689] ocfs2: Unmounting device (7,2) on (node local) [ 161.093987][ T7464] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.104207][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.136149][ T7464] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.537572][ T5299] ocfs2: Unmounting device (7,8) on (node local) [ 161.875232][ T7501] loop1: detected capacity change from 0 to 512 [ 161.924919][ T7501] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 162.215528][ T7501] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 162.259875][ T7501] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.666: invalid indirect mapped block 2683928664 (level 1) [ 163.008207][ T7501] EXT4-fs (loop1): Remounting filesystem read-only [ 163.033659][ T5031] net_ratelimit: 4 callbacks suppressed [ 163.033673][ T5031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.084427][ T7501] EXT4-fs (loop1): 1 truncate cleaned up [ 163.153116][ T7501] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,dioread_nolock,errors=remount-ro,minixdf,jqfmt=vfsv0,usrjquota=.". Quota mode: writeback. [ 163.339660][ T7527] netlink: 'syz.8.671': attribute type 2 has an invalid length. [ 163.970416][ T4556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.120623][ T7531] loop8: detected capacity change from 0 to 8192 [ 164.140519][ T5031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.756816][ T7511] loop2: detected capacity change from 0 to 32768 [ 165.155533][ T7547] loop1: detected capacity change from 0 to 128 [ 165.164945][ T5322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.565815][ T7561] input: syz1 as /devices/virtual/input/input6 [ 166.049439][ T4559] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.234587][ T5322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.067614][ T4556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.622728][ T5031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.716388][ T7605] loop2: detected capacity change from 0 to 1024 [ 167.740695][ T7612] netlink: 200 bytes leftover after parsing attributes in process `syz.1.694'. [ 167.816735][ T7612] netlink: 4 bytes leftover after parsing attributes in process `syz.1.694'. [ 168.467463][ T5031] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 168.522501][ T7627] loop1: detected capacity change from 0 to 32768 [ 168.703656][ T5029] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.760003][ T7627] XFS (loop1): Mounting V5 Filesystem [ 169.193695][ T5031] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 169.323080][ T5031] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 169.378697][ T5031] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 169.499565][ T5031] usb 3-1: config 0 interface 0 has no altsetting 0 [ 169.513478][ T7627] XFS (loop1): Ending clean mount [ 169.574420][ T7627] XFS (loop1): Quotacheck needed: Please wait. [ 169.603023][ T5031] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 169.622219][ T5031] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 169.654143][ T5031] usb 3-1: config 0 interface 0 has no altsetting 0 [ 169.663494][ T7682] syzkaller0: create flow: hash 9674695 index 1 [ 169.692564][ T7678] syzkaller0: delete flow: hash 9674695 index 1 [ 169.753256][ T5031] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 169.774049][ T5031] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 169.810489][ T5031] usb 3-1: config 0 interface 0 has no altsetting 0 [ 169.881139][ T5322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.894559][ T7627] XFS (loop1): Quotacheck: Done. [ 169.933940][ T5031] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 169.968040][ T5031] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 170.012833][ T5031] usb 3-1: config 0 interface 0 has no altsetting 0 [ 170.123380][ T4559] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.149087][ T5031] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 170.171563][ T5031] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 170.202899][ T5031] usb 3-1: config 0 interface 0 has no altsetting 0 [ 170.282620][ T7699] overlayfs: failed to clone upperpath [ 170.308081][ T5031] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 170.324916][ T5031] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 170.348220][ T5031] usb 3-1: config 0 interface 0 has no altsetting 0 [ 170.360507][ T7700] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 170.390510][ T6704] XFS (loop1): Unmounting Filesystem [ 170.443157][ T5031] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 170.468511][ T5031] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 170.508627][ T5031] usb 3-1: config 0 interface 0 has no altsetting 0 [ 170.598079][ T5031] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 170.617753][ T5031] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 170.637175][ T5031] usb 3-1: config 0 interface 0 has no altsetting 0 [ 170.750150][ T4554] libceph: connect (1)[c::]:6789 error -101 [ 170.775917][ T4554] libceph: mon0 (1)[c::]:6789 connect error [ 170.782127][ T7713] ceph: No mds server is up or the cluster is laggy [ 171.204403][ T4559] libceph: connect (1)[c::]:6789 error -101 [ 171.289786][ T4559] libceph: mon0 (1)[c::]:6789 connect error [ 171.376670][ T5029] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.512906][ T5031] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 171.521990][ T5031] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 171.579215][ T5031] usb 3-1: Product: syz [ 171.607616][ T5031] usb 3-1: config 0 descriptor?? [ 171.698213][ T5031] usb 3-1: can't set config #0, error -71 [ 172.134678][ T4559] libceph: connect (1)[c::]:6789 error -101 [ 172.141189][ T4559] libceph: mon0 (1)[c::]:6789 connect error [ 172.306732][ T5031] usb 3-1: USB disconnect, device number 2 [ 172.475267][ T5324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.573882][ T7755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.596688][ T7755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.612820][ T7755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.623030][ T5026] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 172.647586][ T7755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.063093][ T5026] usb 9-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 173.074715][ T5026] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.100569][ T5026] usb 9-1: config 0 descriptor?? [ 173.277111][ T5026] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 173.754907][ T5031] net_ratelimit: 45 callbacks suppressed [ 173.754926][ T5031] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.987325][ T7802] loop1: detected capacity change from 0 to 256 [ 174.074778][ T7796] ceph: No mds server is up or the cluster is laggy [ 174.084065][ T5322] libceph: connect (1)[c::]:6789 error -101 [ 174.090208][ T5322] libceph: mon0 (1)[c::]:6789 connect error [ 174.115886][ T7802] exFAT-fs (loop1): invalid fs_name [ 174.125415][ T7802] exFAT-fs (loop1): failed to read boot sector [ 174.162980][ T7802] exFAT-fs (loop1): failed to recognize exfat type [ 174.443148][ T7813] bridge0: port 3(syz_tun) entered blocking state [ 174.511222][ T7813] bridge0: port 3(syz_tun) entered disabled state [ 174.531936][ T7813] device syz_tun entered promiscuous mode [ 174.553251][ T7813] bridge0: port 3(syz_tun) entered blocking state [ 174.560346][ T7813] bridge0: port 3(syz_tun) entered forwarding state [ 174.708732][ T7833] netlink: 32 bytes leftover after parsing attributes in process `syz.1.738'. [ 174.807449][ T7833] device erspan0 entered promiscuous mode [ 174.815381][ T5324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.948557][ T5031] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 174.958644][ T7838] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 174.991833][ T5031] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 175.007747][ T5031] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 175.026003][ T5031] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 175.044832][ T5031] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 175.063600][ T5031] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 175.081359][ T5031] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 175.089403][ T5031] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 175.098950][ T5031] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 175.106841][ T5031] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 175.114764][ T5031] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 175.122472][ T5031] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 175.135290][ T5031] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 175.150647][ T5031] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 175.163788][ T5031] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 175.176866][ T5031] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 175.190446][ T5031] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 175.202518][ T5031] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 175.265825][ T5031] hid-generic 0003:0004:0000.0004: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 175.814546][ T5031] Bluetooth: hci4: command 0x0406 tx timeout [ 175.889302][ T5324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.911137][ T4554] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.004174][ T7853] fido_id[7853]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 176.182926][ T5026] gspca_stv06xx: I2C: Read error writing address: -71 [ 176.202997][ T4554] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.210253][ T5026] usb 9-1: USB disconnect, device number 3 [ 177.126526][ T5322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.323830][ T7900] overlayfs: failed to clone upperpath [ 177.463991][ T7888] ceph: No mds server is up or the cluster is laggy [ 177.474802][ T4851] libceph: connect (1)[c::]:6789 error -101 [ 177.497474][ T4851] libceph: mon0 (1)[c::]:6789 connect error [ 178.216067][ T5322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.637934][ T7941] loop8: detected capacity change from 0 to 256 [ 178.757859][ T7941] exFAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 178.802856][ T7941] exFAT-fs (loop8): Medium has reported failures. Some data may be lost. [ 178.851313][ T7941] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 178.888000][ T4851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.253124][ T4554] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.759375][ T5324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.806566][ T7961] loop8: detected capacity change from 0 to 512 [ 179.813283][ T7963] loop2: detected capacity change from 0 to 8 [ 179.997481][ T7963] SQUASHFS error: lzo decompression failed, data probably corrupt [ 180.016270][ T7963] SQUASHFS error: Failed to read block 0x144: -5 [ 180.044432][ T7963] SQUASHFS error: Unable to read metadata cache entry [142] [ 180.051763][ T7963] SQUASHFS error: Unable to read inode 0x11f [ 180.815488][ T5026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.845425][ T7961] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.762: invalid indirect mapped block 10 (level 1) [ 180.878634][ T7961] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.762: invalid indirect mapped block 8 (level 1) [ 180.976221][ T7961] EXT4-fs (loop8): 1 truncate cleaned up [ 181.022988][ T7961] EXT4-fs (loop8): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 181.173544][ T7961] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 255 vs 220 free clusters [ 181.392096][ T26] audit: type=1326 audit(1757641805.804:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8002 comm="syz.8.773" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb826fd2ba9 code=0x0 [ 181.891231][ T5322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.284955][ T4851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.468801][ T5026] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.579308][ T8048] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 183.660682][ T8025] program syz.2.776 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 184.211062][ T8076] loop1: detected capacity change from 0 to 512 [ 184.243203][ C1] vcan0: j1939_tp_rxtimer: 0xffff888061acd000: rx timeout, send abort [ 184.317729][ T8076] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 184.364327][ T8076] ext4 filesystem being mounted at /25/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 184.751488][ C1] vcan0: j1939_tp_rxtimer: 0xffff888061acd000: abort rx timeout. Force session deactivation [ 186.043093][ T4554] Bluetooth: hci0: command 0x0406 tx timeout [ 186.442143][ T8145] loop2: detected capacity change from 0 to 2048 [ 186.564817][ T8145] loop2: p1 < > p4 [ 186.599665][ T8145] loop2: p4 size 722688 extends beyond EOD, truncated [ 186.893752][ T6904] udevd[6904]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 186.925347][ T6867] udevd[6867]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 187.908553][ T8201] nbd1: detected capacity change from 0 to 67108884 [ 187.932351][ T150] block nbd1: Send control failed (result -89) [ 187.939340][ T150] block nbd1: Request send failed, requeueing [ 187.950398][ T4195] block nbd1: Receive control failed (result -32) [ 187.961003][ T150] block nbd1: Dead connection, failed to find a fallback [ 187.985971][ T150] block nbd1: shutting down sockets [ 187.991742][ T150] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 188.003004][ T150] Buffer I/O error on dev nbd1, logical block 0, async page read [ 188.012965][ T150] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 188.023847][ T150] Buffer I/O error on dev nbd1, logical block 0, async page read [ 188.032437][ T150] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 188.044759][ T150] Buffer I/O error on dev nbd1, logical block 0, async page read [ 188.053409][ T150] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 188.064323][ T150] Buffer I/O error on dev nbd1, logical block 0, async page read [ 188.072298][ T150] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 188.083165][ T150] Buffer I/O error on dev nbd1, logical block 0, async page read [ 188.091258][ T150] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 188.102106][ T150] Buffer I/O error on dev nbd1, logical block 0, async page read [ 188.110524][ T150] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 188.121371][ T150] Buffer I/O error on dev nbd1, logical block 0, async page read [ 188.129427][ T150] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 188.140251][ T150] Buffer I/O error on dev nbd1, logical block 0, async page read [ 188.148398][ T6904] ldm_validate_partition_table(): Disk read failed. [ 188.160178][ T150] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 188.171059][ T150] Buffer I/O error on dev nbd1, logical block 0, async page read [ 188.179556][ T150] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 188.190439][ T150] Buffer I/O error on dev nbd1, logical block 0, async page read [ 188.199277][ T6904] Dev nbd1: unable to read RDB block 0 [ 188.248237][ T6904] nbd1: unable to read partition table [ 188.259387][ T6904] ldm_validate_partition_table(): Disk read failed. [ 188.316612][ T6904] Dev nbd1: unable to read RDB block 0 [ 188.345148][ T6904] nbd1: unable to read partition table [ 293.452736][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 293.459387][ C1] rcu: 1-...!: (10501 ticks this GP) idle=bc3/1/0x4000000000000000 softirq=20152/20152 fqs=0 [ 293.471104][ C1] (t=10502 jiffies g=25673 q=127) [ 293.476219][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10502 jiffies! g25673 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 293.488517][ C1] rcu: Possible timer handling issue on cpu=1 timer-softirq=7985 [ 293.496292][ C1] rcu: rcu_preempt kthread starved for 10505 jiffies! g25673 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 293.507636][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 293.517580][ C1] rcu: RCU grace-period kthread stack dump: [ 293.523445][ C1] task:rcu_preempt state:I stack:28032 pid: 15 ppid: 2 flags:0x00004000 [ 293.532651][ C1] Call Trace: [ 293.535914][ C1] [ 293.538826][ C1] __schedule+0x11bb/0x4390 [ 293.543313][ C1] ? _raw_spin_lock_irqsave+0x7f/0xf0 [ 293.548666][ C1] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 293.554539][ C1] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 293.560411][ C1] ? _raw_spin_unlock+0x40/0x40 [ 293.565239][ C1] ? rcu_is_watching+0x11/0xa0 [ 293.569981][ C1] ? release_firmware_map_entry+0x190/0x190 [ 293.575854][ C1] schedule+0x11b/0x1e0 [ 293.579987][ C1] schedule_timeout+0x15c/0x280 [ 293.584814][ C1] ? console_conditional_schedule+0x40/0x40 [ 293.590687][ C1] ? update_process_times+0x200/0x200 [ 293.596042][ C1] ? prepare_to_swait_event+0x331/0x350 [ 293.601568][ C1] rcu_gp_fqs_loop+0x29e/0x11b0 [ 293.606400][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 293.611577][ C1] ? rcu_gp_init+0xd58/0x10e0 [ 293.616245][ C1] ? rcu_gp_init+0x10e0/0x10e0 [ 293.620989][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 293.626165][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 293.631341][ C1] rcu_gp_kthread+0x98/0x350 [ 293.635932][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 293.641021][ C1] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 293.646890][ C1] ? __kthread_parkme+0x157/0x1b0 [ 293.651894][ C1] kthread+0x436/0x520 [ 293.655959][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 293.661064][ C1] ? kthread_blkcg+0xd0/0xd0 [ 293.665640][ C1] ret_from_fork+0x1f/0x30 [ 293.670040][ C1] [ 293.673040][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 293.679346][ C1] NMI backtrace for cpu 1 [ 293.683645][ C1] CPU: 1 PID: 8216 Comm: syz.5.818 Not tainted syzkaller #0 [ 293.690903][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 293.700934][ C1] Call Trace: [ 293.704195][ C1] [ 293.707025][ C1] dump_stack_lvl+0x168/0x230 [ 293.711683][ C1] ? show_regs_print_info+0x20/0x20 [ 293.716859][ C1] ? load_image+0x3b0/0x3b0 [ 293.721340][ C1] ? irq_work_queue+0xbf/0x140 [ 293.726083][ C1] nmi_cpu_backtrace+0x397/0x3d0 [ 293.731000][ C1] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 293.737126][ C1] ? _printk+0xcc/0x110 [ 293.741259][ C1] ? cpu_online+0x1d/0x30 [ 293.745559][ C1] ? load_image+0x3b0/0x3b0 [ 293.750038][ C1] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 293.756086][ C1] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 293.762043][ C1] rcu_check_gp_kthread_starvation+0x1cd/0x250 [ 293.768189][ C1] print_cpu_stall+0x318/0x5f0 [ 293.772930][ C1] rcu_sched_clock_irq+0x6d8/0x1110 [ 293.778103][ C1] ? rcutree_dead_cpu+0x20/0x20 [ 293.782927][ C1] ? account_process_tick+0x227/0x3a0 [ 293.788282][ C1] update_process_times+0x193/0x200 [ 293.793458][ C1] tick_sched_timer+0x37d/0x560 [ 293.798285][ C1] __hrtimer_run_queues+0x4fe/0xc40 [ 293.803460][ C1] ? tick_setup_sched_timer+0x2c0/0x2c0 [ 293.808984][ C1] ? hrtimer_interrupt+0x8d0/0x8d0 [ 293.814067][ C1] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 293.820110][ C1] hrtimer_interrupt+0x3bb/0x8d0 [ 293.825043][ C1] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 293.831023][ C1] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 293.836640][ C1] [ 293.839551][ C1] [ 293.842457][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 293.848421][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x13/0x60 [ 293.854560][ C1] Code: 48 8b 3d 00 c9 f1 0b 48 89 de 5b e9 47 9e 43 00 00 00 cc cc 00 00 cc 48 8b 04 24 65 48 8b 0d 94 a4 8a 7e 65 8b 15 95 a4 8a 7e <81> e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 34 16 00 00 [ 293.874145][ C1] RSP: 0018:ffffc90002e8fed8 EFLAGS: 00000202 [ 293.880193][ C1] RAX: ffffffff814ec73c RBX: ffff8880645be210 RCX: ffff88801e191dc0 [ 293.888141][ C1] RDX: 0000000080000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 293.896092][ C1] RBP: 0000000000000001 R08: dffffc0000000000 R09: fffffbfff1ff7819 [ 293.904044][ C1] R10: fffffbfff1ff7819 R11: 1ffffffff1ff7818 R12: dffffc0000000000 [ 293.912000][ C1] R13: ffff88807a7a93c0 R14: ffff88802bafcfa0 R15: ffff88802bafcf98 [ 293.919959][ C1] ? __task_pid_nr_ns+0x1dc/0x420 [ 293.924976][ C1] __task_pid_nr_ns+0x1dc/0x420 [ 293.929812][ C1] __ia32_sys_getpid+0x19/0x20 [ 293.934553][ C1] do_syscall_64+0x4c/0xa0 [ 293.938946][ C1] ? clear_bhb_loop+0x30/0x80 [ 293.943597][ C1] ? clear_bhb_loop+0x30/0x80 [ 293.948249][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 293.954122][ C1] RIP: 0033:0x7f5188187b67 [ 293.958527][ C1] Code: 0b e9 68 fe ff ff 48 83 c4 18 48 8d 3d 32 6d d8 00 5b 5d 41 5c 41 5d 41 5e 41 5f e9 23 f8 fb ff 0f 1f 00 b8 27 00 00 00 0f 05 0f 1f 84 00 00 00 00 00 b8 6e 00 00 00 0f 05 c3 0f 1f 84 00 00 [ 293.978114][ C1] RSP: 002b:0000200000004ac8 EFLAGS: 00000202 ORIG_RAX: 0000000000000027 [ 293.986524][ C1] RAX: ffffffffffffffda RBX: 0000200000004c30 RCX: 00007f5188187b67 [ 293.994476][ C1] RDX: 0000200000004b00 RSI: 0000200000004c30 RDI: 0000000000000021 [ 294.002426][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 294.010371][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 294.018318][ C1] R13: 00007f51883d8038 R14: 00007f51883d7fa0 R15: 00007ffd1be1f038 [ 294.026273][ C1] [ 294.029299][ C1] NMI backtrace for cpu 1 [ 294.033596][ C1] CPU: 1 PID: 8216 Comm: syz.5.818 Not tainted syzkaller #0 [ 294.040849][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 294.050880][ C1] Call Trace: [ 294.054148][ C1] [ 294.057060][ C1] dump_stack_lvl+0x168/0x230 [ 294.061720][ C1] ? show_regs_print_info+0x20/0x20 [ 294.066900][ C1] ? load_image+0x3b0/0x3b0 [ 294.071395][ C1] ? try_to_wake_up+0x69d/0x1050 [ 294.076312][ C1] nmi_cpu_backtrace+0x397/0x3d0 [ 294.081226][ C1] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 294.087358][ C1] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 294.092711][ C1] ? _raw_spin_lock+0x40/0x40 [ 294.097390][ C1] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 294.103435][ C1] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 294.109394][ C1] rcu_dump_cpu_stacks+0x22f/0x380 [ 294.114484][ C1] print_cpu_stall+0x31d/0x5f0 [ 294.119226][ C1] rcu_sched_clock_irq+0x6d8/0x1110 [ 294.124409][ C1] ? rcutree_dead_cpu+0x20/0x20 [ 294.129235][ C1] ? account_process_tick+0x227/0x3a0 [ 294.134591][ C1] update_process_times+0x193/0x200 [ 294.139771][ C1] tick_sched_timer+0x37d/0x560 [ 294.144606][ C1] __hrtimer_run_queues+0x4fe/0xc40 [ 294.149786][ C1] ? tick_setup_sched_timer+0x2c0/0x2c0 [ 294.155316][ C1] ? hrtimer_interrupt+0x8d0/0x8d0 [ 294.160405][ C1] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 294.166466][ C1] hrtimer_interrupt+0x3bb/0x8d0 [ 294.171393][ C1] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 294.177352][ C1] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 294.182964][ C1] [ 294.185876][ C1] [ 294.188783][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 294.194746][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x13/0x60 [ 294.200877][ C1] Code: 48 8b 3d 00 c9 f1 0b 48 89 de 5b e9 47 9e 43 00 00 00 cc cc 00 00 cc 48 8b 04 24 65 48 8b 0d 94 a4 8a 7e 65 8b 15 95 a4 8a 7e <81> e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 34 16 00 00 [ 294.220483][ C1] RSP: 0018:ffffc90002e8fed8 EFLAGS: 00000202 [ 294.226529][ C1] RAX: ffffffff814ec73c RBX: ffff8880645be210 RCX: ffff88801e191dc0 [ 294.234475][ C1] RDX: 0000000080000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 294.242422][ C1] RBP: 0000000000000001 R08: dffffc0000000000 R09: fffffbfff1ff7819 [ 294.250367][ C1] R10: fffffbfff1ff7819 R11: 1ffffffff1ff7818 R12: dffffc0000000000 [ 294.258317][ C1] R13: ffff88807a7a93c0 R14: ffff88802bafcfa0 R15: ffff88802bafcf98 [ 294.266271][ C1] ? __task_pid_nr_ns+0x1dc/0x420 [ 294.271279][ C1] __task_pid_nr_ns+0x1dc/0x420 [ 294.276105][ C1] __ia32_sys_getpid+0x19/0x20 [ 294.280844][ C1] do_syscall_64+0x4c/0xa0 [ 294.285231][ C1] ? clear_bhb_loop+0x30/0x80 [ 294.289909][ C1] ? clear_bhb_loop+0x30/0x80 [ 294.294559][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 294.300423][ C1] RIP: 0033:0x7f5188187b67 [ 294.304815][ C1] Code: 0b e9 68 fe ff ff 48 83 c4 18 48 8d 3d 32 6d d8 00 5b 5d 41 5c 41 5d 41 5e 41 5f e9 23 f8 fb ff 0f 1f 00 b8 27 00 00 00 0f 05 0f 1f 84 00 00 00 00 00 b8 6e 00 00 00 0f 05 c3 0f 1f 84 00 00 [ 294.324395][ C1] RSP: 002b:0000200000004ac8 EFLAGS: 00000202 ORIG_RAX: 0000000000000027 [ 294.332793][ C1] RAX: ffffffffffffffda RBX: 0000200000004c30 RCX: 00007f5188187b67 [ 294.340742][ C1] RDX: 0000200000004b00 RSI: 0000200000004c30 RDI: 0000000000000021 [ 294.348711][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 294.356748][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 294.364694][ C1] R13: 00007f51883d8038 R14: 00007f51883d7fa0 R15: 00007ffd1be1f038 [ 294.372651][ C1] [ 294.375699][ C1] sched: RT throttling activated