last executing test programs: 24m15.385710307s ago: executing program 32 (id=41): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x441, 0x0) write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCXONC(r3, 0x540a, 0x2) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r5 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000440)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x203, 0x1, {0xffffffffffffffff, 0x9, 0x20ff, 0x5, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x400000}}, {0x0, 0x13}}}, 0x35) sendfile(r5, r5, &(0x7f0000000080), 0x7f03) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000300)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x64) pwritev2(0xffffffffffffffff, &(0x7f0000000680)=[{&(0x7f0000000200)="05", 0x6a000}], 0x1, 0x6000000, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0x7, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00}, [@call={0xc}, @exit, @generic={0x21, 0x2, 0x8, 0xe7c, 0x4}, @generic={0x2c, 0x9, 0x6, 0x160, 0x4}]}, 0x0, 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) 24m15.075343558s ago: executing program 33 (id=46): socket(0x10, 0x803, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42902, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000500)=@ready={0x0, 0x0, 0x8, "72918f72", {0x1, 0x1, 0x1000, 0x2, 0x5}}) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000180)={'a', ' *:* ', 'wm\x00'}, 0x9) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r1 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000780)=@newtfilter={0x24, 0x2c, 0xd27, 0x870b528, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x8, 0xc}, {}, {0xa, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x2204402c}, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r7 = dup(r6) r8 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0x1) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000200)=0xff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}, 0x1, 0x13}, 0x0) 23m1.713016659s ago: executing program 34 (id=62): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r2 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x2, 0x0) close(r2) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[], &(0x7f00000003c0)=""/94, 0x1a, 0x5e, 0x2, 0x2, 0x10000, @value=r3}, 0x28) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r4) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)={0x1c, r6, 0x48212b8952c3aff5, 0x70bd24, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r7 = socket(0x10, 0x80002, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x48, 0x30, 0x1, 0x0, 0x25dfdbfe, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x15}, 0x80) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYBLOB="00000000100000001c001a80080002802d00", @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 22m20.338437065s ago: executing program 35 (id=256): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) bind$qrtr(r2, &(0x7f0000000200), 0xc) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = mq_open(0x0, 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2008000000002000, 0x5, 0x56, 0x3}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x8, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x40505330, &(0x7f00000004c0)={0x800100, 0x8, 0x26, 0x100, 0x81, 0x5}) close(r4) mq_timedreceive(r3, &(0x7f0000000880)=""/202, 0x8f, 0x200000000004, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x40041) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_DEL(r5, 0x2, r3) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001a80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) openat$cgroup_int(r2, &(0x7f00000002c0)='cpu.max.burst\x00', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 22m0.910495877s ago: executing program 36 (id=288): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000440)=""/74, 0x328000, 0x1000, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000000000)={'team_slave_0\x00', {0x2, 0x0, @private}}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x40, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00'}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f00000005c0)=ANY=[], 0x9) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) unshare(0x64000600) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(r5, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 20m10.051226998s ago: executing program 37 (id=535): syz_open_procfs(0x0, &(0x7f0000000040)='net/udp6\x00') socket$inet6_tcp(0xa, 0x1, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2406000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0) socket(0x1, 0x803, 0x0) 20m9.149946669s ago: executing program 38 (id=536): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) kexec_load(0x0, 0x10, &(0x7f0000000340)=[{0x0}], 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x40002, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x0) sync() 20m8.659518253s ago: executing program 39 (id=523): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'tunl0\x00', &(0x7f0000000240)={'gretap0\x00', 0x0, 0x8000, 0x8000, 0xf79d, 0x2, {{0xb, 0x4, 0x3, 0x19, 0x2c, 0x68, 0x0, 0x2, 0x2f, 0x0, @empty, @rand_addr=0x64010100, {[@lsrr={0x83, 0x17, 0xd1, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x36}, @loopback, @rand_addr=0x64010101, @broadcast]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000000bc0)=ANY=[@ANYRES16=r0], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1000403, 0x2000000000032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x54, 0x10, 0x401, 0x4000, 0x0, {0x0, 0x0, 0xffff, 0x0, 0xd108}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xc, 0xc}}]}}}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x54}}, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) userfaultfd(0x801) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000340)=0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000380)=0x1) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x6f0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c00000013000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="28150000020000000c001aab0600058004c601"], 0x2c}, 0x1, 0x0, 0x0, 0x4048904}, 0x4) mlock(&(0x7f0000d50000/0x1000)=nil, 0x1000) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 20m7.910414994s ago: executing program 40 (id=537): socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f00000001c0)) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000300)={'rti800\x00', [0x2eff, 0x4, 0xd19b, 0xfffff044, 0x2, 0x9, 0x3, 0x3, 0xffe, 0xa, 0xc, 0x1001, 0x7f, 0x3, 0xffd, 0x6, 0x5, 0x40000009, 0x830, 0x30000, 0x9, 0x2, 0x800, 0xe2df, 0x2, 0x80d, 0x5, 0x9, 0x6, 0x5, 0x70f]}) socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 20m4.260007559s ago: executing program 41 (id=538): ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x0, 0x2c0, 0x0, &(0x7f0000000180)=[0x6bd1a312, 0x2ec66, 0x8, 0x8, 0x7, 0x800000000000009, 0x0, 0x1001, 0x10000, 0x100, 0x9004, 0x40000000000000, 0x3, 0x5, 0x5, 0x49, 0x3ff, 0x2, 0x0, 0xb, 0x8000000008, 0x4391, 0x1c1, 0x1000000003, 0x2, 0x2, 0x9, 0x7, 0x96, 0xffffffff, 0xffffffff00000000, 0x0, 0x9, 0x7, 0x23b, 0x3, 0x2, 0x8890, 0x8, 0x8, 0x6, 0x6, 0x3, 0xa3de, 0x4, 0x8, 0x5c3e, 0x622, 0x1, 0x5, 0xfffffffffffffffa, 0x1, 0xe, 0x7, 0x4, 0x100000000, 0x200000000000101, 0x5, 0x9, 0x66, 0x6, 0x7, 0x40000005, 0xfffffffeffffffff, 0x8, 0xd, 0x9, 0xe8, 0x80000000, 0xfffffffffffffc00, 0x2, 0x4, 0x2, 0xcdc, 0x7, 0x2, 0x3, 0x2, 0x5, 0xfff, 0x6, 0x4, 0x6, 0xab6, 0x8000000, 0x4, 0xfff, 0xffffffffffffff81, 0x9, 0x8000000000000000, 0x5, 0xff8, 0x5, 0x400000000008061d, 0x6, 0x8, 0xf6, 0x7, 0x6, 0x200, 0x7, 0xe53e, 0x2c, 0x2, 0x2293332f, 0x6, 0x34, 0x0, 0xd, 0x2, 0x4000005, 0x2, 0x2, 0x7, 0x8, 0xfffd, 0x10, 0x8, 0x8, 0x1, 0x53e0f0fe, 0xeb4, 0x3, 0xfffffffffffffffe, 0xb692, 0x3ffc00000, 0x8, 0x3]}) ioctl$KVM_CAP_X86_GUEST_MODE(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000240)) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x6, 0x3, 0x8000000000005, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x6, 0x6, 0x100000000000bdb], 0xffff1001, 0x124182}) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000700)={[0x60000000002, 0x1000000000, 0x9d, 0x43, 0x2000001, 0x20002, 0x2004cb, 0x0, 0x1000000, 0x6903, 0x5, 0xdda, 0x3, 0x0, 0x6, 0x10000000000000], 0xdddd1000, 0x212}) ioctl$KVM_SET_PIT(r0, 0x8048ae66, &(0x7f0000000480)={[{0x9570000, 0x3, 0x0, 0x0, 0x85, 0x1, 0xff, 0x2, 0x6, 0x4, 0x47, 0xf, 0x1}, {0x9f83, 0x7, 0xe, 0x5a, 0x1, 0xa7, 0x9, 0x81, 0x7, 0x5, 0x6, 0x3, 0x6}, {0x6, 0x1005, 0x81, 0xa, 0x6, 0x46, 0xf8, 0x4e, 0xc, 0x98, 0x1a, 0x1, 0x8}], 0x3}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 15m33.74145337s ago: executing program 42 (id=1075): connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x241) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x23, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x510, 0x358, 0xd0, 0x288, 0xd0, 0x288, 0x440, 0x440, 0x440, 0x440, 0x440, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [0x0, 0x0, 0x0, 0xff], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000001740)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7fffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffe, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x2]}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x6080, 0x0) io_submit(0x0, 0x0, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r3, 0xc1205531, &(0x7f0000000540)={0x1, 0x6, 0x0, 0x5, '\x00', '\x00', '\x00', 0x0, 0x0, 0x0, 0x0, "b6855a32474ffa64f778ddcf29c94337"}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) copy_file_range(r4, 0x0, r4, &(0x7f00000004c0)=0x100, 0x9, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) 14m14.67190428s ago: executing program 7 (id=1269): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000500)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0xfc1b2d1c5df07dbb, 0x0, 0x441, 0x100, 0x400008, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 14m13.215564072s ago: executing program 7 (id=1272): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003c58b3bd0000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x2, {0x0, 0x1e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents(r3, &(0x7f0000000080)=""/64, 0x40) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="50010000000000000000000000000000060000000000000002000000000000000600000000000000060000000000000005000000ffffffff090000000000000003000000000000000e010000000000000400000000000000000000000000000008000000000000000001000003000000040000000020000005000000", @ANYRES32=r2, @ANYRES32=r3], 0x0, 0x0, 0x0}) 14m12.27218547s ago: executing program 7 (id=1275): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0xb, 0x80, 0x9, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f00000000c0)=0x8b, 0x100000500) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 14m10.301218391s ago: executing program 7 (id=1281): socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) r0 = socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x5, 0x0) listen(r0, 0xda90) socket$netlink(0x10, 0x3, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) r1 = fsopen(&(0x7f0000000100)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) openat(r2, &(0x7f0000000040)='./file1\x00', 0x141242, 0x18f) accept4(r0, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000040000800060000fcffff08000900fc000000080011000700000008000e0080000000", @ANYRES16=r3], 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x140cc014) 14m8.91400042s ago: executing program 7 (id=1284): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}}, 0x18) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4}, 0x18) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={0x0}}, 0xee) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r1, {0xa, 0x8}, {0x5, 0xfff3}, {0xfff1, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) 14m7.551101028s ago: executing program 7 (id=1288): openat$fb0(0xffffffffffffff9c, 0x0, 0x446200, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000180), &(0x7f00000000c0)='./file0\x00', 0x8001, 0x0, 0x0, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r2 = syz_open_pts(0xffffffffffffffff, 0x400000) r3 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) ioctl$SG_GET_SG_TABLESIZE(r3, 0x227f, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000100)={0x8, 0xab81, 0x4, 0x25b, 0x18, "2c47dc405cd19fdd"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000600)={0x14, &(0x7f0000000440)={0x0, 0x21, 0x9e, {0x9e, 0x22, "a382d3efa47a47a5c7b2d85e6cb4b820a5a75c96e69ba41fef1ccd8292218e9a9d6b8f575a9f41e8d6b41c9812816c5bab22328f3af769685812230a2d55a94e954176119076c39d185422cf643174887662d1a1d6df06d6af74b8f083d1fbf7873b79b22a6a6b02094748c52eaae6f473c8682b614976910fa168f8fbfab467bce5b46c5a7d64d914e9bd2f314d869a45efe6994d275dcaeb041273"}}, &(0x7f0000000540)={0x0, 0x3, 0x2, @string={0x2}}}, &(0x7f00000007c0)={0x34, &(0x7f0000000640)={0x20, 0xf}, 0x0, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000700)={0x20, 0x0, 0x2}, &(0x7f0000000740)={0x20, 0x1, 0x1, 0xd2}, &(0x7f0000000780)={0x20, 0x0, 0x1, 0xd}}) mkdirat(0xffffffffffffff9c, 0x0, 0x40) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) io_uring_setup(0x54a1, &(0x7f0000000800)={0x0, 0x23c1, 0x0, 0x3, 0x96}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r4, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_open_dev$dri(0x0, 0xa, 0x10b043) sendfile(r4, r4, 0x0, 0x40008) 14m4.554935616s ago: executing program 5 (id=1292): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x4e1e2563543d84f9}, @TCA_TBF_PBURST={0x8, 0x7, 0x1fc0}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0xffff}, {0x0, 0x0, 0x0, 0x8, 0x2, 0x3}, 0x6, 0x81}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}]}, 0x78}}, 0x4000080) bind$packet(r0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 14m3.88655442s ago: executing program 5 (id=1294): r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$packet(0x11, 0x2, 0x300) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x80000001, 0xfffffe0000000003, 0x4000fa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) pipe(&(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r4, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r4, 0x1) recvfrom(r4, &(0x7f0000000000)=""/116, 0xffffffdd, 0x734, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r5, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r5, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) ioctl$int_in(r5, 0x5421, 0x0) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x3, 0x2) write$tun(r1, &(0x7f00000002c0)={@void, @val={0x5, 0x0, 0x0, 0x300, 0x14, 0x4}, @eth={@random="11c8e0ad5c91", @empty, @val={@val={0x88a8, 0x0, 0x0, 0xff}, {0x8100, 0x4, 0x0, 0x4}}, {@llc={0x4, {@snap={0x0, 0x1, "01", "2f943e", 0x22eb, "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"}}}}}}, 0xf62) 14m2.625802939s ago: executing program 2 (id=1295): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000500)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0xfc1b2d1c5df07dbb, 0x0, 0x441, 0x100, 0x400008, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 14m0.983215784s ago: executing program 2 (id=1298): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x1, 0x4, 0xb2, 0xe9, 0x8, 0x2}}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0x11}, {0xffe6, 0xb}, {0xb, 0xc}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4000000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 13m59.859476194s ago: executing program 2 (id=1300): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e500", 0x14, 0x6, 0xfe, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0xc2, 0x2000, 0x0, 0x7}}}}}}}, 0x0) 13m56.686473236s ago: executing program 2 (id=1302): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0xb, 0x80, 0x9, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f00000000c0)=0x8b, 0x100000500) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 13m55.109956896s ago: executing program 2 (id=1304): r0 = socket$rxrpc(0x21, 0x2, 0xa) listen(r0, 0x5) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="9f8b73d8", 0x4}], 0x1) 13m54.277939814s ago: executing program 2 (id=1305): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x50, 0x0, 0xfffffffd, 0x0, 0x9, 0x8, 0x800000, 0x7}, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000400), 0x800000000401, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc040564a, &(0x7f0000002580)={0x0, 0x1, 0x1014, 0xffffffffffffffff, 0x0, 0x0}) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000940)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 13m52.122839679s ago: executing program 43 (id=1288): openat$fb0(0xffffffffffffff9c, 0x0, 0x446200, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000180), &(0x7f00000000c0)='./file0\x00', 0x8001, 0x0, 0x0, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r2 = syz_open_pts(0xffffffffffffffff, 0x400000) r3 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) ioctl$SG_GET_SG_TABLESIZE(r3, 0x227f, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000100)={0x8, 0xab81, 0x4, 0x25b, 0x18, "2c47dc405cd19fdd"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000600)={0x14, &(0x7f0000000440)={0x0, 0x21, 0x9e, {0x9e, 0x22, "a382d3efa47a47a5c7b2d85e6cb4b820a5a75c96e69ba41fef1ccd8292218e9a9d6b8f575a9f41e8d6b41c9812816c5bab22328f3af769685812230a2d55a94e954176119076c39d185422cf643174887662d1a1d6df06d6af74b8f083d1fbf7873b79b22a6a6b02094748c52eaae6f473c8682b614976910fa168f8fbfab467bce5b46c5a7d64d914e9bd2f314d869a45efe6994d275dcaeb041273"}}, &(0x7f0000000540)={0x0, 0x3, 0x2, @string={0x2}}}, &(0x7f00000007c0)={0x34, &(0x7f0000000640)={0x20, 0xf}, 0x0, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000700)={0x20, 0x0, 0x2}, &(0x7f0000000740)={0x20, 0x1, 0x1, 0xd2}, &(0x7f0000000780)={0x20, 0x0, 0x1, 0xd}}) mkdirat(0xffffffffffffff9c, 0x0, 0x40) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) io_uring_setup(0x54a1, &(0x7f0000000800)={0x0, 0x23c1, 0x0, 0x3, 0x96}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r4, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_open_dev$dri(0x0, 0xa, 0x10b043) sendfile(r4, r4, 0x0, 0x40008) 13m51.204850893s ago: executing program 5 (id=1311): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = creat(0x0, 0x50) write$binfmt_elf32(r1, 0x0, 0x69) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @remote}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x200000000000, 0x3}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x2, @in=@broadcast, 0x6, 0x4, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000004180)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @local, @local, {[], {{0x8000, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x100, 0x0, 0x1}}}}}}}, 0x0) 13m50.080648209s ago: executing program 5 (id=1314): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0xb, 0x80, 0x9, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f00000000c0)=0x8b, 0x100000500) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 13m45.357861346s ago: executing program 5 (id=1318): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000000)=0x2) ioctl$VIDIOC_S_STD(r1, 0x40085618, &(0x7f00000000c0)=0x8000) 13m44.179707813s ago: executing program 5 (id=1321): r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$packet(0x11, 0x2, 0x300) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x80000001, 0xfffffe0000000003, 0x4000fa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) pipe(&(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r4, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r4, 0x1) recvfrom(r4, &(0x7f0000000000)=""/116, 0xffffffdd, 0x734, 0x0, 0x0) 13m38.760207466s ago: executing program 44 (id=1305): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x50, 0x0, 0xfffffffd, 0x0, 0x9, 0x8, 0x800000, 0x7}, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000400), 0x800000000401, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc040564a, &(0x7f0000002580)={0x0, 0x1, 0x1014, 0xffffffffffffffff, 0x0, 0x0}) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000940)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 13m25.183506797s ago: executing program 45 (id=1321): r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$packet(0x11, 0x2, 0x300) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x80000001, 0xfffffe0000000003, 0x4000fa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) pipe(&(0x7f0000000380)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r4, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r4, 0x1) recvfrom(r4, &(0x7f0000000000)=""/116, 0xffffffdd, 0x734, 0x0, 0x0) 3m1.198573708s ago: executing program 0 (id=3795): r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) read$FUSE(r1, &(0x7f0000000680)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) close(0x3) 3m0.022170132s ago: executing program 0 (id=3797): r0 = eventfd2(0x43, 0x1) writev(r0, &(0x7f0000000080)=[{0x0}], 0x1) 2m59.382442086s ago: executing program 0 (id=3799): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000002240)=[{&(0x7f00000002c0)=@in={0x2, 0x4e22, @private=0xa010105}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000080)='!', 0x1}], 0x1, 0x0, 0x0, 0x10}], 0x1, 0x4000) epoll_create1(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) shutdown(r0, 0x1) 2m58.821991715s ago: executing program 0 (id=3802): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@usrquota}, {@grpjquota}, {@nodelalloc}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$eJzs3ctvW1UaAPDPdpMmaWb6mNGo7UjTSh2p81DjPDRqMjObWc3MotJoKrEBqYTEDSVOHMVOaaIuUth1wQKBQEIs2PMXsKErKiTEGvaIBSqCEiRAQjK613abOHGwII1p7u8n3ebch/2dU+s7Ovf4Xt8AMuts8k8uYjgiPoyIo43VrQecbfzZuH9zJllyUa9f/iKXHpestw5tve5IRKxHxEBE/P/fEc/ktsetrq7NT5fLpeXmerG2sFSsrq5duLYwPVeaKy2OTV6cmpocnRif2rO23n7puduX3vlv/9vfvHjv7svvvZtUa7i5b3M79lKj6X1xfNO2QxHxz0cRrAcKzfYM9roi/CTJ5/ebiDiX5v/RKKSfJpAF9Xq9/n39cKfd63XgwMqnY+BcfiQiGuV8fmSkMYb/bQzly5Vq7a9XKyuLs42x8rHoy1+9Vi6NNs8VjkVfLlkfS8sP18fb1ici0jHwK4XBdH1kplKe3d+uDmhzpC3/vy408h/ICKf8kF3yH7JL/kN2yX/ILvkP2SX/IbvkP2SX/Ifskv+QXfIfskv+Qyb979KlZKm37n+fvb66Ml+5fmG2VJ0fWViZGZmpLC+NzFUqc+k9Ows/9n7lSmVp7G+xcqNYK1Vrxerq2pWFyspi7Up6X/+VUt++tAroxvEzdz7ORcT63wfTJdHf3CdX4WCr13PR63uQgd4o9LoDAnrG1B9kl3N8oP0netvHBQOdXrj0cL4QeLzke10BoGfOn/L9H2SV+X/ILvP/kF3G+MAOj+jbYrf5f+DxZP4fsmu4w/O/frXp2V2jEfHriPio0He49awv4CDIf5Zrjv/PH/3jcPve/ty36VcE/RHx/BuXX7sxXastjyXbv3ywvfZ6c/v4phd2PGEAeqWVp608BgCya+P+zZnWsp9xP/9X4yKE7fEPNecmB9LvKIc2cluuVcjt0bUL67ci4uRO8XPN5503TmSGNgrb4p9o/s013iKt76H0uen7E//Upvh/2BT/9M/+X4FsuJP0P6M75V8+zel4kH9b+5/hPbp2onP/l3/Q/xU69H9nuozx7JsvfNox/q2I0zvGb8UbSGO1x0/qdr7L+PeeeuJ3nfbV32q8z07xW5JSsbawVKyurl1If0durrQ4NnlxampydGJ8qpjOURdbM9Xb/ePkB3d3a/9Qh/i7tT/Z9ucu2//d799/8uwu8f90bufP/8Qu8Qcj4i9dxv9q/JOnO+1L4s92aH9+l/jJtoku41df/c/hLg8FAPZBdXVtfrpcLi0rKCj0pHDrl1GNtkKveybgUauuJqfmSdL3uiYAAAAAAAAAAABAt/bjcuJetxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4CD4IQAA//9HcdTQ") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x140, 0x8) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x8004587d, &(0x7f0000000140)={0x2, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) renameat2(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x4) 2m57.550320063s ago: executing program 0 (id=3805): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0xab, @loopback, 0x10001}, 0x1c) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'syz_tun\x00', &(0x7f00000006c0)=@ethtool_link_settings={0x4d, 0xd, 0x0, 0x4c, 0x3, 0x6, 0xf6, 0xd, 0x4, 0xd, [0x9, 0x4, 0x4, 0x2a6, 0xb, 0xffff9eea, 0xf, 0xf46]}}) connect$inet6(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="200000001300034700bb65e1c3e4ffff01000000010000005600000025000000", 0x20}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f00000002c0)={0x0, "5af7859538bd6691b0c0af651df83893"}) r2 = dup(r0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="4184d2477616d8aea2ddfacd2eb0334ef4fb252287737ef97e7ef6b2ce8804b8ba0b7efa646cd816ffdb9559634648fd95722aab117ddd4a27384fcab00ec822c5a3f8eba485563f1cd760", @ANYRES8], 0x18}, 0x1, 0x0, 0x0, 0x2008cc10}, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) 2m56.964477926s ago: executing program 0 (id=3808): r0 = eventfd2(0x43, 0x1) writev(r0, &(0x7f0000000080)=[{0x0}], 0x1) 2m55.177231555s ago: executing program 46 (id=3808): r0 = eventfd2(0x43, 0x1) writev(r0, &(0x7f0000000080)=[{0x0}], 0x1) 1m12.179729173s ago: executing program 8 (id=4313): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, &(0x7f00000000c0)={0x3, 0x0, [0x2, 0x7, 0x5, 0x7], 0x0}) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0xffffffff85000014, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x50) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x60800, 0x4b) syz_fuse_handle_req(r0, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000067c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b00", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="780000000000000002000000000000040000000000000000000000000000000004"], 0x0, 0x0, 0x0, 0x0}) getdents(r2, &(0x7f0000000240)=""/90, 0x5a) 1m11.39356481s ago: executing program 8 (id=4316): r0 = request_key(&(0x7f0000000480)='asymmetric\x00', &(0x7f00000004c0)={'syz', 0x0}, &(0x7f0000000500)='abcdefghijklmnop', 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, r0) 1m10.573699283s ago: executing program 8 (id=4318): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}}, 0x0) sendto$packet(r0, &(0x7f0000000180)="a6bea8a120e5f8320c30ce5088a8a5e986f3", 0x12, 0x0, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) 1m9.778177456s ago: executing program 8 (id=4320): mkdir(&(0x7f0000000040)='./file0\x00', 0x1) r0 = syz_open_dev$sg(0x0, 0x5d7000000000000, 0x2402) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0x1) read(r0, 0x0, 0x0) mkdir(0x0, 0x10) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000280)={[{@delalloc}, {@data_err_abort}, {@init_itable_val={'init_itable', 0x3d, 0x3}}, {@inlinecrypt}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1887008, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f0000006b40)={0x2020}, 0x206e) removexattr(0x0, &(0x7f0000000100)=@known='system.posix_acl_default\x00') 1m9.013495841s ago: executing program 8 (id=4322): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x3000c014}, 0x200000d0) 1m8.136363156s ago: executing program 8 (id=4328): request_key(&(0x7f0000000040)='asymmetric\x00', 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) 1m6.493503582s ago: executing program 47 (id=4328): request_key(&(0x7f0000000040)='asymmetric\x00', 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) 4.559116466s ago: executing program 6 (id=4596): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000000)="400f01c3650b07b9800000c02e6726f3400fc7b50000000035000400000f30c4417ff030b9800000c00f3235000100000f30640f01cf65490fc79ce656000000f30f1efc6764653e470f1b690c", 0x4d}], 0x1, 0x53, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000200)="0f20e035000004000f22e0c462f992a4f00080000048b848470000000000000f23d00f21f835000000010f23f8660f09c4a2cd9c3666baf80cb81a73ec86ef66bafc0cb0d8ee65470f2086c744240000000000c7442402375c0000c7442406000000000f011c24b8010000000f01c1666466420f38829f93e50000", 0x7b}], 0x1, 0x73, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.130554324s ago: executing program 3 (id=4598): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x18800}, 0x800) 3.855652142s ago: executing program 6 (id=4599): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x5, "ff00"}) r1 = syz_open_pts(r0, 0x0) read(r1, &(0x7f0000000240)=""/220, 0xdc) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x4) 3.746530062s ago: executing program 4 (id=4600): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="c6", 0x1}], 0x1, 0x0, 0x0, 0x20048054}}], 0x1, 0x8800) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000000)='./file0\x00', 0x2000844, &(0x7f00000006c0)={[{@fat=@allow_utime={'allow_utime', 0x3d, 0x80}}, {@fat=@uid}, {@fat=@quiet}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x1}}, {@fat=@nfs_nostale_ro}, {@fat=@umask={'umask', 0x3d, 0x87}}, {@dots}, {@fat=@nfs_stale_rw}, {@nodots}, {@nodots}, {@dots}, {@fat=@gid}, {@fat=@gid}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfshat={'smackfshat', 0x3d, '^,/\xf8\x12\xe1\xc0\xac\xac|\xd6\x11\xfev\x93\xb8F\xd7\x13\xa9\xcf\x1cD/\x7f:\b-^|\xf6\x05\x00\x00\x00\xf6Fd\xf5\xe7 \xd7\xa35\xef\xfdP'}}]}, 0x1, 0x262, &(0x7f0000000040)="$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") syz_emit_ethernet(0x2a, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffff0180c200000008060001080006040001aaaaaaaaaa32ac1414ffffffffaaaa38ac1414"], 0x0) request_key(&(0x7f00000011c0)='encrypted\x00', &(0x7f0000001200)={'syz', 0x0}, &(0x7f0000001240)='%\x00', 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x1}, 0x8) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000001c00), 0x12) timer_create(0x3, 0x0, &(0x7f0000000340)=0x0) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_settime(r2, 0x1, &(0x7f0000000940)={{}, {0x0, 0x989680}}, &(0x7f0000000a00)) 3.743758226s ago: executing program 3 (id=4601): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 3.324831417s ago: executing program 1 (id=4603): r0 = socket(0x10, 0x3, 0x0) close(0x3) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r2, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r2, 0x80) accept$netrom(r2, 0x0, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000800)="4261a3", 0x3}], 0x1) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[], 0x58}}, 0x0) 3.253792361s ago: executing program 6 (id=4604): mkdirat(0xffffffffffffff9c, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x21c0, 0x103) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000380)='./bus\x00', 0x322020, &(0x7f0000000140)=ANY=[], 0x1, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file7\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) 2.925204153s ago: executing program 4 (id=4605): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000005f4f7deb0008000300", @ANYRES32=r2], 0x55}}, 0x0) 2.723785788s ago: executing program 1 (id=4606): r0 = gettid() timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_io_uring_setup(0x111, 0x0, &(0x7f0000000140)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) io_uring_enter(r2, 0x7bfe, 0x3ffb, 0xd, 0x0, 0xffffffffffffff73) 2.290590003s ago: executing program 4 (id=4607): syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000200)='./file0\x00', 0x810410, &(0x7f0000000040)=ANY=[@ANYRES8=0x0], 0xfe, 0x211, &(0x7f0000000480)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, 0x0, 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 2.242764485s ago: executing program 9 (id=4608): memfd_create(&(0x7f0000000080)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x2, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x9, 0x7, 0x1, 0x4, 0x2, 0x1, 0x1, 0xff, 0x5, 0x0, 0xe, 0x9, 0xa, 0x2, 0xd, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6, 0x7, 0x5, 0x180, 0x0, 0x0, 0xf1, 0x0, 0x8, 0x5, 0x0, 0x9, 0x0, 0x0, 0x0, 0xbd5], 0x1, 0x3c4212}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.215088311s ago: executing program 6 (id=4609): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000080)={0x2000, 0x10000}) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000000)="400f01c3650b07b9800000c02e6726f3400fc7b50000000035000400000f30c4417ff030b9800000c00f3235000100000f30640f01cf65490fc79ce656000000f30f1efc6764653e470f1b690c", 0x4d}], 0x1, 0x53, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000200)="0f20e035000004000f22e0c462f992a4f00080000048b848470000000000000f23d00f21f835000000010f23f8660f09c4a2cd9c3666baf80cb81a73ec86ef66bafc0cb0d8ee65470f2086c744240000000000c7442402375c0000c7442406000000000f011c24b8010000000f01c1666466420f38829f93e50000", 0x7b}], 0x1, 0x73, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 2.111829055s ago: executing program 1 (id=4610): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x60) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x100000011, @multicast2, 0x0, 0x0, 'lc\x00', 0x37, 0x9d, 0x62}, 0x2c) 1.957915922s ago: executing program 3 (id=4611): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='mm_page_alloc_extfrag\x00', r1, 0x0, 0x4000}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 1.868257524s ago: executing program 9 (id=4612): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001e00030903000000ffdb5f25070000", @ANYRES32=r4, @ANYBLOB="002000001803000008000a00", @ANYRES32=r2], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x50) 1.506663274s ago: executing program 4 (id=4613): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x0, 0x0) sendmmsg(r0, &(0x7f0000001a80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x3d8}}], 0x1, 0x40884) 1.469627325s ago: executing program 6 (id=4614): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x5, "ff00"}) r1 = syz_open_pts(r0, 0x0) read(r1, &(0x7f0000000240)=""/220, 0xdc) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x4) 1.466006981s ago: executing program 1 (id=4615): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="c6", 0x1}], 0x1, 0x0, 0x0, 0x20048054}}], 0x1, 0x8800) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000000)='./file0\x00', 0x2000844, &(0x7f00000006c0)={[{@fat=@allow_utime={'allow_utime', 0x3d, 0x80}}, {@fat=@uid}, {@fat=@quiet}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x1}}, {@fat=@nfs_nostale_ro}, {@fat=@umask={'umask', 0x3d, 0x87}}, {@dots}, {@fat=@nfs_stale_rw}, {@nodots}, {@nodots}, {@dots}, {@fat=@gid}, {@fat=@gid}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfshat={'smackfshat', 0x3d, '^,/\xf8\x12\xe1\xc0\xac\xac|\xd6\x11\xfev\x93\xb8F\xd7\x13\xa9\xcf\x1cD/\x7f:\b-^|\xf6\x05\x00\x00\x00\xf6Fd\xf5\xe7 \xd7\xa35\xef\xfdP'}}]}, 0x1, 0x262, &(0x7f0000000040)="$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") syz_emit_ethernet(0x2a, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffff0180c200000008060001080006040001aaaaaaaaaa32ac1414ffffffffaaaa38ac1414"], 0x0) request_key(&(0x7f00000011c0)='encrypted\x00', &(0x7f0000001200)={'syz', 0x0}, &(0x7f0000001240)='%\x00', 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x1}, 0x8) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000001c00), 0x12) timer_create(0x3, 0x0, &(0x7f0000000340)=0x0) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_settime(r2, 0x1, &(0x7f0000000940)={{}, {0x0, 0x989680}}, &(0x7f0000000a00)) 1.388926397s ago: executing program 3 (id=4616): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)={0x1c, r1, 0x1, 0x70bd26, 0x25dfdbfe}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) 1.367311691s ago: executing program 9 (id=4617): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="500000001400030500008000ffdbdf25020751ff", @ANYRES32=r2, @ANYBLOB="080002007f000001"], 0x50}, 0x1, 0x0, 0x0, 0xc090}, 0x0) 890.875616ms ago: executing program 4 (id=4618): openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x81, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000001000/0x2000)=nil}) 890.667814ms ago: executing program 9 (id=4619): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x21c0, 0x103) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000380)='./bus\x00', 0x322020, &(0x7f0000000140)=ANY=[], 0x1, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file7\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) 838.077325ms ago: executing program 3 (id=4620): r0 = gettid() timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_io_uring_setup(0x111, 0x0, &(0x7f0000000140)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) io_uring_enter(r2, 0x7bfe, 0x3ffb, 0xd, 0x0, 0xffffffffffffff73) 793.412713ms ago: executing program 1 (id=4621): io_setup(0x3, &(0x7f0000000040)=0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) read$FUSE(r1, &(0x7f0000001740)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r1, &(0x7f0000000200)={0x78, 0x0, r2, {0x0, 0x6fe, 0x0, {0x1, 0x1, 0x7, 0x5, 0x8, 0x0, 0xea5, 0x7fff, 0x5, 0x8000, 0x0, 0x0, 0x0, 0x1c000000, 0x4}}}, 0x78) io_submit(r0, 0x1, &(0x7f0000001700)=[0x0]) 662.537602ms ago: executing program 6 (id=4622): memfd_create(&(0x7f0000000080)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x2, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x9, 0x7, 0x1, 0x4, 0x2, 0x1, 0x1, 0xff, 0x5, 0x0, 0xe, 0x9, 0xa, 0x2, 0xd, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6, 0x7, 0x5, 0x180, 0x0, 0x0, 0xf1, 0x0, 0x8, 0x5, 0x0, 0x9, 0x0, 0x0, 0x0, 0xbd5], 0x1, 0x3c4212}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 598.161244ms ago: executing program 4 (id=4623): syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000200)='./file0\x00', 0x810410, &(0x7f0000000040)=ANY=[@ANYRES8=0x0], 0xfe, 0x211, &(0x7f0000000480)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, 0x0, 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 490.306695ms ago: executing program 9 (id=4624): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}]]}, 0x44}}, 0x0) 270.498044ms ago: executing program 3 (id=4625): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r2, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="710505f1030202060e03034ee9da324cbcea1ec6b5"], 0x15) 254.3143ms ago: executing program 1 (id=4626): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='mm_page_alloc_extfrag\x00', r1, 0x0, 0x4000}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 0s ago: executing program 9 (id=4627): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001e00030903000000ffdb5f25070000", @ANYRES32=r4, @ANYBLOB="002000001803000008000a00", @ANYRES32=r2], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x50) kernel console output (not intermixed with test programs): .3.2525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa69758ebe9 code=0x7ffc0000 [ 1233.628739][T15443] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2532'. [ 1233.702118][T15444] bridge0: port 1(bridge_slave_0) entered listening state [ 1235.342052][T15471] netlink: 2048 bytes leftover after parsing attributes in process `syz.4.2542'. [ 1235.351769][T15471] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2542'. [ 1235.570463][T15475] fuse: Unknown parameter 'user_id00000000000000000000' [ 1236.024328][T15483] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2547'. [ 1236.041883][T15485] bridge0: port 1(bridge_slave_0) entered listening state [ 1236.102354][T15484] tipc: Enabling of bearer rejected, failed to enable media [ 1236.182331][T15486] syzkaller0: entered promiscuous mode [ 1236.188108][T15486] syzkaller0: entered allmulticast mode [ 1236.252924][T15484] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1237.657735][T15514] fuse: Unknown parameter 'user_id00000000000000000000' [ 1237.698477][T15517] netlink: 'syz.9.2559': attribute type 1 has an invalid length. [ 1237.812772][T15517] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1238.046933][T15519] bond0: (slave veth3): Enslaving as an active interface with a down link [ 1238.154743][T15521] vlan1: entered allmulticast mode [ 1238.160569][T15521] veth0_to_bond: entered allmulticast mode [ 1238.172894][T15521] bond0: (slave vlan1): Opening slave failed [ 1238.332330][T15529] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2562'. [ 1238.801719][T15533] tipc: Enabling of bearer rejected, failed to enable media [ 1238.851719][T15533] syzkaller0: entered promiscuous mode [ 1238.857395][T15533] syzkaller0: entered allmulticast mode [ 1238.934788][T15533] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1238.973726][T15539] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2564'. [ 1239.259814][T15544] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 37748736, id = 0 [ 1239.425791][ T30] audit: type=1326 audit(1755749472.181:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15545 comm="syz.9.2567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc61d8ebe9 code=0x7ffc0000 [ 1239.449412][ T30] audit: type=1326 audit(1755749472.181:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15545 comm="syz.9.2567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7efc61d8ebe9 code=0x7ffc0000 [ 1239.472656][ T30] audit: type=1326 audit(1755749472.181:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15545 comm="syz.9.2567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc61d8ebe9 code=0x7ffc0000 [ 1239.928449][T15559] fuse: Bad value for 'fd' [ 1240.651380][T15563] syz.0.2571 (15563): drop_caches: 2 [ 1240.661219][T15563] syz.0.2571 (15563): drop_caches: 2 [ 1240.932292][T15571] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2575'. [ 1242.140626][T15584] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2579'. [ 1242.944670][T15597] IPVS: Error connecting to the multicast addr [ 1243.790820][T15611] fuse: Bad value for 'fd' [ 1243.925230][T15614] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2587'. [ 1244.406066][ T30] audit: type=1326 audit(1755749477.151:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15615 comm="syz.6.2590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc44318ebe9 code=0x7ffc0000 [ 1244.428768][ C1] vkms_vblank_simulate: vblank timer overrun [ 1244.439346][ T30] audit: type=1326 audit(1755749477.161:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15615 comm="syz.6.2590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7fc44318ebe9 code=0x7ffc0000 [ 1244.461981][ C1] vkms_vblank_simulate: vblank timer overrun [ 1244.468726][ T30] audit: type=1326 audit(1755749477.191:1227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15615 comm="syz.6.2590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc44318ebe9 code=0x7ffc0000 [ 1244.491776][ T30] audit: type=1326 audit(1755749477.191:1228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15615 comm="syz.6.2590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc44318ebe9 code=0x7ffc0000 [ 1244.514362][ C1] vkms_vblank_simulate: vblank timer overrun [ 1244.660745][T15619] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2589'. [ 1244.681671][T15619] vlan2: entered promiscuous mode [ 1244.686832][T15619] bond0: entered promiscuous mode [ 1244.692117][T15619] bond_slave_0: entered promiscuous mode [ 1244.698626][T15619] bond_slave_1: entered promiscuous mode [ 1244.876045][T15626] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2591'. [ 1246.043188][T15636] syzkaller0: entered promiscuous mode [ 1246.054632][T15636] syzkaller0: entered allmulticast mode [ 1246.158002][T15636] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1246.888086][T15650] fuse: Bad value for 'fd' [ 1247.742569][ T30] audit: type=1326 audit(1755749480.491:1229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15660 comm="syz.9.2602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc61d8ebe9 code=0x7ffc0000 [ 1247.765258][ C1] vkms_vblank_simulate: vblank timer overrun [ 1247.902452][T15663] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2603'. [ 1247.936822][ T30] audit: type=1326 audit(1755749480.541:1230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15660 comm="syz.9.2602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7efc61d8ebe9 code=0x7ffc0000 [ 1247.960243][ T30] audit: type=1326 audit(1755749480.551:1231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15660 comm="syz.9.2602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc61d8ebe9 code=0x7ffc0000 [ 1247.982860][ C1] vkms_vblank_simulate: vblank timer overrun [ 1248.257207][T15668] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2605'. [ 1248.406416][T15667] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2604'. [ 1248.431895][T15667] vlan1: entered promiscuous mode [ 1249.586258][T15685] syzkaller0: entered promiscuous mode [ 1249.592290][T15685] syzkaller0: entered allmulticast mode [ 1249.667322][T15692] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1249.701049][T15691] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2612'. [ 1249.770964][T15695] fuse: Unknown parameter '0x0000000000000004' [ 1250.275201][T15707] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2618'. [ 1250.352591][T15702] tipc: Enabled bearer , priority 0 [ 1250.362066][T15705] syzkaller0: entered promiscuous mode [ 1250.367818][T15705] syzkaller0: entered allmulticast mode [ 1250.473501][T15702] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1250.495929][T15710] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2619'. [ 1250.537322][T15710] vlan3: entered promiscuous mode [ 1250.542985][T15710] bond0: entered promiscuous mode [ 1250.550694][T15710] bond_slave_0: entered promiscuous mode [ 1250.561501][T15710] bond_slave_1: entered promiscuous mode [ 1250.700154][T15702] tipc: Resetting bearer [ 1250.753395][T15699] tipc: Resetting bearer [ 1250.818107][T15699] tipc: Disabling bearer [ 1251.191250][T15719] syz.9.2620 (15719): drop_caches: 2 [ 1251.202136][T15719] syz.9.2620 (15719): drop_caches: 2 [ 1252.179446][T15735] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2626'. [ 1252.858795][T15741] fuse: Unknown parameter '0x0000000000000004' [ 1252.980988][T15743] syzkaller0: entered promiscuous mode [ 1252.986661][T15743] syzkaller0: entered allmulticast mode [ 1253.005984][T15748] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2630'. [ 1253.051383][T15743] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1253.694992][T15756] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2632'. [ 1253.721685][T15756] vlan3: entered promiscuous mode [ 1255.205854][T15782] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2639'. [ 1255.482078][T15785] fuse: Unknown parameter '0x0000000000000004' [ 1256.032763][T15790] syzkaller0: entered promiscuous mode [ 1256.038452][T15790] syzkaller0: entered allmulticast mode [ 1256.108861][ T61] kworker/u8:5: attempt to access beyond end of device [ 1256.108861][ T61] loop3: rw=0, sector=65, nr_sectors = 1 limit=0 [ 1256.123623][ T61] FAT-fs (loop3): unable to read inode block for updating (i_pos 1050) [ 1256.253757][T15790] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1256.381980][T15796] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2645'. [ 1258.661782][T15827] fuse: Unknown parameter '0x0000000000000004' [ 1259.261575][T15836] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2658'. [ 1259.384479][T15838] syzkaller0: entered promiscuous mode [ 1259.390469][T15838] syzkaller0: entered allmulticast mode [ 1259.443493][T15838] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1260.415022][T15859] fuse: Unknown parameter '0x0000000000000004' [ 1261.965739][T15881] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2674'. [ 1262.000092][T15878] syz.4.2671 (15878): drop_caches: 2 [ 1262.007875][T15878] syz.4.2671 (15878): drop_caches: 2 [ 1262.892833][T15891] syzkaller0: entered promiscuous mode [ 1262.898521][T15891] syzkaller0: entered allmulticast mode [ 1262.996208][T15891] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1264.332996][T15912] fuse: Unknown parameter '0x0000000000000004' [ 1265.803282][T15928] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2687'. [ 1266.764800][T15938] syzkaller0: entered promiscuous mode [ 1266.771908][T15938] syzkaller0: entered allmulticast mode [ 1266.878088][T15938] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1269.033666][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1269.041067][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1269.154414][T15966] syz.9.2698: attempt to access beyond end of device [ 1269.154414][T15966] loop9: rw=0, sector=65, nr_sectors = 1 limit=0 [ 1269.168250][T15966] FAT-fs (loop9): unable to read inode block for updating (i_pos 1050) [ 1269.176922][T15966] syz.9.2698: attempt to access beyond end of device [ 1269.176922][T15966] loop9: rw=0, sector=65, nr_sectors = 1 limit=0 [ 1269.194805][T15966] FAT-fs (loop9): unable to read inode block for updating (i_pos 1050) [ 1269.204803][T15966] FAT-fs (loop9): Failed to update on disk inode for unused fallocated blocks, inode could be corrupted. Please run fsck [ 1269.665007][T15969] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2699'. [ 1270.541207][T15985] syzkaller0: entered promiscuous mode [ 1270.546980][T15985] syzkaller0: entered allmulticast mode [ 1270.631062][T15987] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1271.824517][T16011] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2711'. [ 1271.977959][T16016] netlink: 5 bytes leftover after parsing attributes in process `syz.9.2711'. [ 1272.095403][T16016] 0{X功: renamed from gretap0 (while UP) [ 1272.111597][T16016] 0{X功: entered allmulticast mode [ 1272.118330][T16016] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 1272.286527][T16012] syz.4.2710 (16012): drop_caches: 2 [ 1272.295776][T16012] syz.4.2710 (16012): drop_caches: 2 [ 1273.125088][T16030] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2714'. [ 1273.656830][ T30] audit: type=1326 audit(1755749506.411:1232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16038 comm="syz.3.2717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa69758ebe9 code=0x7ffc0000 [ 1273.680632][ T30] audit: type=1326 audit(1755749506.411:1233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16038 comm="syz.3.2717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7fa69758ebe9 code=0x7ffc0000 [ 1273.706929][ T30] audit: type=1326 audit(1755749506.411:1234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16038 comm="syz.3.2717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa69758ebe9 code=0x7ffc0000 [ 1273.730972][ T30] audit: type=1326 audit(1755749506.411:1235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16038 comm="syz.3.2717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa69758ebe9 code=0x7ffc0000 [ 1273.862067][T16039] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2717'. [ 1273.917863][ T30] audit: type=1326 audit(1755749506.591:1236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16038 comm="syz.3.2717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa69758ebe9 code=0x7ffc0000 [ 1273.941114][ T30] audit: type=1326 audit(1755749506.601:1237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16038 comm="syz.3.2717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa69758ebe9 code=0x7ffc0000 [ 1273.963847][ T30] audit: type=1326 audit(1755749506.621:1238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16038 comm="syz.3.2717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa69758ebe9 code=0x7ffc0000 [ 1273.986963][ T30] audit: type=1326 audit(1755749506.671:1239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16038 comm="syz.3.2717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa69758ebe9 code=0x7ffc0000 [ 1274.012205][ T30] audit: type=1326 audit(1755749506.671:1240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16038 comm="syz.3.2717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa69758ebe9 code=0x7ffc0000 [ 1274.209743][T16039] netlink: 'syz.3.2717': attribute type 3 has an invalid length. [ 1274.532359][ T30] audit: type=1326 audit(1755749506.811:1241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16038 comm="syz.3.2717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa69758ebe9 code=0x7ffc0000 [ 1276.504446][T16072] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2726'. [ 1279.696825][T16115] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2740'. [ 1279.724696][T16115] bridge0: entered promiscuous mode [ 1279.733006][T16115] bridge0: port 3(macvlan2) entered blocking state [ 1279.746501][T16115] bridge0: port 3(macvlan2) entered disabled state [ 1279.753921][T16115] macvlan2: entered allmulticast mode [ 1279.759480][T16115] bridge0: entered allmulticast mode [ 1279.803973][T16115] macvlan2: left allmulticast mode [ 1279.810055][T16115] bridge0: left allmulticast mode [ 1279.826615][T16115] bridge0: left promiscuous mode [ 1281.801586][T16153] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2754'. [ 1281.826378][T16153] bridge0: entered promiscuous mode [ 1281.838216][T16153] bridge0: port 3(macvlan2) entered blocking state [ 1281.845209][T16153] bridge0: port 3(macvlan2) entered disabled state [ 1281.852317][T16153] macvlan2: entered allmulticast mode [ 1281.857786][T16153] bridge0: entered allmulticast mode [ 1282.057198][T16153] macvlan2: left allmulticast mode [ 1282.063003][T16153] bridge0: left allmulticast mode [ 1282.070390][T16153] bridge0: left promiscuous mode [ 1282.439463][T16159] syz.4.2752 (16159): drop_caches: 2 [ 1282.465139][T16159] syz.4.2752 (16159): drop_caches: 2 [ 1286.133814][T16205] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2768'. [ 1286.419249][T16205] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2768'. [ 1286.429209][T16205] 0{X功: renamed from gretap0 (while UP) [ 1286.560377][T16205] 0{X功: entered allmulticast mode [ 1286.567332][T16205] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 1289.020345][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 1289.020395][ T30] audit: type=1326 audit(1755749521.771:1258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16242 comm="syz.9.2777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc61d8ebe9 code=0x7ffc0000 [ 1289.171880][T16243] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2777'. [ 1289.214438][ T30] audit: type=1326 audit(1755749521.841:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16242 comm="syz.9.2777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7efc61d8ebe9 code=0x7ffc0000 [ 1289.237666][ T30] audit: type=1326 audit(1755749521.841:1260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16242 comm="syz.9.2777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc61d8ebe9 code=0x7ffc0000 [ 1289.262560][ T30] audit: type=1326 audit(1755749521.871:1261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16242 comm="syz.9.2777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efc61d8ebe9 code=0x7ffc0000 [ 1289.285755][ T30] audit: type=1326 audit(1755749521.901:1262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16242 comm="syz.9.2777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc61d8ebe9 code=0x7ffc0000 [ 1289.308487][ T30] audit: type=1326 audit(1755749521.901:1263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16242 comm="syz.9.2777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc61d8ebe9 code=0x7ffc0000 [ 1289.331292][ T30] audit: type=1326 audit(1755749521.921:1264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16242 comm="syz.9.2777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efc61d8ebe9 code=0x7ffc0000 [ 1289.353878][ T30] audit: type=1326 audit(1755749521.921:1265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16242 comm="syz.9.2777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc61d8ebe9 code=0x7ffc0000 [ 1289.377903][ T30] audit: type=1326 audit(1755749521.931:1266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16242 comm="syz.9.2777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7efc61d8ebe9 code=0x7ffc0000 [ 1289.512168][T16243] netlink: 'syz.9.2777': attribute type 3 has an invalid length. [ 1289.580013][ T30] audit: type=1326 audit(1755749522.211:1267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16242 comm="syz.9.2777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc61d8ebe9 code=0x7ffc0000 [ 1290.560842][T16257] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2781'. [ 1290.585293][T16257] bridge0: entered promiscuous mode [ 1290.602599][T16257] bridge0: port 3(macvlan2) entered blocking state [ 1290.609750][T16257] bridge0: port 3(macvlan2) entered disabled state [ 1290.616982][T16257] macvlan2: entered allmulticast mode [ 1290.622668][T16257] bridge0: entered allmulticast mode [ 1290.756014][T16257] macvlan2: left allmulticast mode [ 1290.761701][T16257] bridge0: left allmulticast mode [ 1290.768640][T16257] bridge0: left promiscuous mode [ 1299.125731][T16415] tipc: Enabled bearer , priority 0 [ 1299.189082][T16416] syzkaller0: entered promiscuous mode [ 1299.199854][T16416] syzkaller0: entered allmulticast mode [ 1299.284532][T16415] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1299.372871][T16414] tipc: Resetting bearer [ 1299.423683][T16414] tipc: Disabling bearer [ 1302.008140][T16470] program syz.0.2845 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1302.131390][T16476] tipc: Enabled bearer , priority 0 [ 1302.183516][T16479] syzkaller0: entered promiscuous mode [ 1302.189280][T16479] syzkaller0: entered allmulticast mode [ 1302.285125][T16476] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1302.391269][T16471] tipc: Resetting bearer [ 1302.464052][T16471] tipc: Disabling bearer [ 1304.404180][T16514] program syz.3.2859 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1305.701603][T16540] program syz.6.2868 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1306.732408][T16559] program syz.0.2873 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1307.962986][T16579] overlayfs: failed to clone lowerpath [ 1308.109023][T16582] program syz.4.2880 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1309.323332][T16599] program syz.4.2886 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1309.790685][T16604] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2887'. [ 1310.460592][T16619] program syz.0.2893 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1311.303625][T16634] program syz.6.2898 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1312.100497][T16647] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2902'. [ 1312.125790][T16647] bridge0: entered promiscuous mode [ 1312.139872][T16647] bridge0: port 3(macvlan2) entered blocking state [ 1312.146837][T16647] bridge0: port 3(macvlan2) entered disabled state [ 1312.154150][T16647] macvlan2: entered allmulticast mode [ 1312.159925][T16647] bridge0: entered allmulticast mode [ 1312.296522][T16647] macvlan2: left allmulticast mode [ 1312.307257][T16647] bridge0: left allmulticast mode [ 1312.315843][T16647] bridge0: left promiscuous mode [ 1313.283673][T16672] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2907'. [ 1313.584164][T16672] netlink: 5 bytes leftover after parsing attributes in process `syz.6.2907'. [ 1313.594974][T16672] 0{X功: renamed from gretap0 (while UP) [ 1313.730570][T16672] 0{X功: entered allmulticast mode [ 1313.746877][T16672] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 1316.547429][T16737] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2925'. [ 1316.761881][T16744] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2925'. [ 1316.771634][T16744] 1{X功: renamed from 30{X功 (while UP) [ 1316.857800][T16744] A link change request failed with some changes committed already. Interface 31{X功 may have been left with an inconsistent configuration, please check. [ 1317.649955][T16761] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2930'. [ 1317.678056][T16759] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2931'. [ 1317.689656][T16759] 8021q: VLANs not supported on vcan0 [ 1319.276426][T16791] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2942'. [ 1319.540849][T16791] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2942'. [ 1319.550579][T16791] 0{X功: renamed from gretap0 (while UP) [ 1319.667009][T16791] 0{X功: entered allmulticast mode [ 1319.681265][T16791] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 1319.810422][T16803] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2944'. [ 1319.820332][T16803] 8021q: VLANs not supported on vcan0 [ 1321.423708][T16823] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2949'. [ 1321.449907][T16823] bridge0: entered promiscuous mode [ 1321.457926][T16823] bridge0: port 3(macvlan2) entered blocking state [ 1321.465401][T16823] bridge0: port 3(macvlan2) entered disabled state [ 1321.472795][T16823] macvlan2: entered allmulticast mode [ 1321.478399][T16823] bridge0: entered allmulticast mode [ 1321.571667][T16823] macvlan2: left allmulticast mode [ 1321.576993][T16823] bridge0: left allmulticast mode [ 1321.680577][T16823] bridge0: left promiscuous mode [ 1321.996356][T16831] program syz.4.2952 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1322.544744][T16840] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2956'. [ 1322.554892][T16840] 8021q: VLANs not supported on vcan0 [ 1322.770800][T16844] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2957'. [ 1322.926424][T16847] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2957'. [ 1322.936109][T16847] 0{X功: renamed from 31{X功 (while UP) [ 1323.091560][T16847] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 1323.958010][T16869] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2965'. [ 1323.986173][T16869] bridge0: entered promiscuous mode [ 1323.998091][T16869] bridge0: port 3(macvlan2) entered blocking state [ 1324.005226][T16869] bridge0: port 3(macvlan2) entered disabled state [ 1324.012711][T16869] macvlan2: entered allmulticast mode [ 1324.018264][T16869] bridge0: entered allmulticast mode [ 1324.070886][T16869] macvlan2: left allmulticast mode [ 1324.083082][T16869] bridge0: left allmulticast mode [ 1324.090239][T16869] bridge0: left promiscuous mode [ 1324.369985][T16870] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2962'. [ 1326.859101][T16900] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2971'. [ 1326.869357][T16900] 8021q: VLANs not supported on vcan0 [ 1327.572877][T16910] program syz.6.2977 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1328.096756][T16914] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2978'. [ 1330.452586][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1330.459202][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1331.338999][T16947] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2987'. [ 1331.351397][T16947] 8021q: VLANs not supported on vcan0 [ 1331.564489][T16953] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2990'. [ 1331.602541][T16953] team_slave_0: left promiscuous mode [ 1331.694302][T16953] team0 (unregistering): Port device team_slave_0 removed [ 1331.702907][T16953] team_slave_1: left promiscuous mode [ 1331.782212][T16953] team0 (unregistering): Port device team_slave_1 removed [ 1331.790613][T16953] dummy0: left promiscuous mode [ 1331.882843][T16953] team0 (unregistering): Port device dummy0 removed [ 1332.232267][T16960] team0: No ports can be present during mode change [ 1333.828189][T16996] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3002'. [ 1333.838193][T16996] 8021q: VLANs not supported on vcan0 [ 1334.121832][T17003] syz.0.3003: attempt to access beyond end of device [ 1334.121832][T17003] loop0: rw=0, sector=65, nr_sectors = 1 limit=0 [ 1334.135274][T17003] FAT-fs (loop0): unable to read inode block for updating (i_pos 1050) [ 1334.144001][T17003] syz.0.3003: attempt to access beyond end of device [ 1334.144001][T17003] loop0: rw=0, sector=65, nr_sectors = 1 limit=0 [ 1334.157401][T17003] FAT-fs (loop0): unable to read inode block for updating (i_pos 1050) [ 1334.165984][T17003] FAT-fs (loop0): Failed to update on disk inode for unused fallocated blocks, inode could be corrupted. Please run fsck [ 1334.763535][T17010] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3005'. [ 1335.006759][T17013] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3005'. [ 1335.016488][T17013] 1{X功: renamed from 30{X功 (while UP) [ 1335.107655][T17013] 1{X功: entered allmulticast mode [ 1335.115497][T17013] A link change request failed with some changes committed already. Interface 31{X功 may have been left with an inconsistent configuration, please check. [ 1336.931626][T17042] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3015'. [ 1336.942025][T17042] 8021q: VLANs not supported on vcan0 [ 1339.760489][T17079] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3029'. [ 1339.770680][T17079] 8021q: VLANs not supported on vcan0 [ 1339.859290][T17081] syz.6.3030: attempt to access beyond end of device [ 1339.859290][T17081] loop6: rw=0, sector=65, nr_sectors = 1 limit=0 [ 1339.875849][T17081] FAT-fs (loop6): unable to read inode block for updating (i_pos 1050) [ 1339.885454][T17081] syz.6.3030: attempt to access beyond end of device [ 1339.885454][T17081] loop6: rw=0, sector=65, nr_sectors = 1 limit=0 [ 1339.899761][T17081] FAT-fs (loop6): unable to read inode block for updating (i_pos 1050) [ 1339.908200][T17081] FAT-fs (loop6): Failed to update on disk inode for unused fallocated blocks, inode could be corrupted. Please run fsck [ 1340.841375][T17092] tipc: Enabling of bearer rejected, failed to enable media [ 1341.754003][T17109] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3042'. [ 1341.764007][T17109] 8021q: VLANs not supported on vcan0 [ 1342.049221][T17114] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3044'. [ 1342.073411][T17114] bridge0: entered promiscuous mode [ 1342.086045][T17114] bridge0: port 3(macvlan2) entered blocking state [ 1342.093263][T17114] bridge0: port 3(macvlan2) entered disabled state [ 1342.104121][T17114] macvlan2: entered allmulticast mode [ 1342.109845][T17114] bridge0: entered allmulticast mode [ 1342.286660][T17114] macvlan2: left allmulticast mode [ 1342.292662][T17114] bridge0: left allmulticast mode [ 1342.299753][T17114] bridge0: left promiscuous mode [ 1344.616021][T17155] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3056'. [ 1344.626100][T17155] 8021q: VLANs not supported on vcan0 [ 1345.992229][T17171] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3061'. [ 1347.010799][T17180] tipc: Enabling of bearer rejected, failed to enable media [ 1347.981341][T17196] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3070'. [ 1347.991372][T17196] 8021q: VLANs not supported on vcan0 [ 1348.901916][T17207] program syz.3.3073 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1349.357458][T17212] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3075'. [ 1349.387480][T17212] bridge0: entered promiscuous mode [ 1349.400219][T17212] bridge0: port 3(macvlan2) entered blocking state [ 1349.407176][T17212] bridge0: port 3(macvlan2) entered disabled state [ 1349.414535][T17212] macvlan2: entered allmulticast mode [ 1349.420355][T17212] bridge0: entered allmulticast mode [ 1349.532910][T17212] macvlan2: left allmulticast mode [ 1349.538244][T17212] bridge0: left allmulticast mode [ 1349.545343][T17212] bridge0: left promiscuous mode [ 1350.421836][T17224] tipc: Enabling of bearer rejected, failed to enable media [ 1351.449954][T17239] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1352.064075][T17249] overlayfs: failed to clone upperpath [ 1357.327240][T17342] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3114'. [ 1357.642549][T17342] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3114'. [ 1357.652887][T17342] 1{X功: renamed from 30{X功 (while UP) [ 1357.688159][T17342] A link change request failed with some changes committed already. Interface 31{X功 may have been left with an inconsistent configuration, please check. [ 1358.222067][T17356] program syz.4.3116 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1358.971493][T17369] fuse: Bad value for 'fd' [ 1359.981485][T17382] tipc: Enabling of bearer rejected, failed to enable media [ 1367.101641][T17489] tipc: Enabling of bearer rejected, failed to enable media [ 1369.640428][T17509] kvm: emulating exchange as write [ 1373.888893][T17557] tipc: Enabling of bearer rejected, failed to enable media [ 1375.606135][T17593] netlink: 2076 bytes leftover after parsing attributes in process `syz.9.3187'. [ 1375.870917][T17599] 9pnet_fd: Insufficient options for proto=fd [ 1376.422809][T17603] tipc: Enabling of bearer rejected, failed to enable media [ 1378.568512][T17651] netlink: 2076 bytes leftover after parsing attributes in process `syz.9.3205'. [ 1378.738652][T17646] tipc: Enabled bearer , priority 0 [ 1378.796824][T17643] tipc: Resetting bearer [ 1378.915707][T17643] tipc: Disabling bearer [ 1379.709184][T17671] fuse: Bad value for 'fd' [ 1381.171207][T17702] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3222'. [ 1381.180581][T17702] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3222'. [ 1381.512340][T17700] tipc: Enabled bearer , priority 0 [ 1381.600460][T17697] tipc: Resetting bearer [ 1381.779938][T17697] tipc: Disabling bearer [ 1384.598209][T17748] tipc: Enabling of bearer rejected, failed to enable media [ 1385.637272][T17762] tipc: Enabling of bearer rejected, failed to enable media [ 1387.059166][T17788] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3248'. [ 1387.157858][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 1387.157935][ T30] audit: type=1800 audit(1755749619.901:1280): pid=17787 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3250" name="bus" dev="overlay" ino=2059 res=0 errno=0 [ 1389.437810][T17817] tipc: Enabling of bearer rejected, failed to enable media [ 1389.936325][T17827] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3262'. [ 1389.962301][T17827] bridge0: entered promiscuous mode [ 1389.971536][T17827] bridge0: port 3(macvlan2) entered blocking state [ 1389.978507][T17827] bridge0: port 3(macvlan2) entered disabled state [ 1389.985982][T17827] macvlan2: entered allmulticast mode [ 1389.991713][T17827] bridge0: entered allmulticast mode [ 1390.130969][T17827] macvlan2: left allmulticast mode [ 1390.136294][T17827] bridge0: left allmulticast mode [ 1390.240716][T17827] bridge0: left promiscuous mode [ 1391.459149][T17856] netlink: 'syz.9.3270': attribute type 3 has an invalid length. [ 1391.467650][T17856] netlink: 'syz.9.3270': attribute type 3 has an invalid length. [ 1391.906537][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1391.913513][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1393.170480][T17882] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3277'. [ 1393.201063][T17882] bridge0: entered promiscuous mode [ 1393.209083][T17882] bridge0: port 3(macvlan2) entered blocking state [ 1393.216334][T17882] bridge0: port 3(macvlan2) entered disabled state [ 1393.223755][T17882] macvlan2: entered allmulticast mode [ 1393.229309][T17882] bridge0: entered allmulticast mode [ 1393.387078][T17882] macvlan2: left allmulticast mode [ 1393.392893][T17882] bridge0: left allmulticast mode [ 1393.473508][T17882] bridge0: left promiscuous mode [ 1393.577900][T17888] 9pnet_fd: Insufficient options for proto=fd [ 1395.969014][T17938] 9pnet_fd: Insufficient options for proto=fd [ 1397.147156][T17958] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3302'. [ 1399.524763][T17994] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1402.704589][T18041] 9pnet_fd: Insufficient options for proto=fd [ 1404.957011][T18068] tipc: Enabling of bearer rejected, failed to enable media [ 1409.877723][T14305] lo speed is unknown, defaulting to 1000 [ 1409.883879][T14305] syz+: Port: 1 Link DOWN [ 1409.891716][T11044] lo speed is unknown, defaulting to 1000 [ 1410.551535][T18138] fuse: Bad value for 'fd' [ 1411.109937][T18149] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3359'. [ 1413.496645][T18173] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1416.202045][T18198] overlayfs: failed to clone upperpath [ 1418.517551][T18215] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1418.800182][T18219] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1421.060517][T18245] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1421.079367][T14565] lo speed is unknown, defaulting to 1000 [ 1421.085576][T14565] syz+: Port: 1 Link ACTIVE [ 1421.091215][ T5875] lo speed is unknown, defaulting to 1000 [ 1421.335177][T18247] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1422.987364][T18275] netlink: 2088 bytes leftover after parsing attributes in process `syz.3.3402'. [ 1424.544817][T18284] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1424.830275][T18289] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1425.745551][T18307] overlayfs: failed to clone upperpath [ 1426.103105][T18312] netlink: 2088 bytes leftover after parsing attributes in process `syz.3.3416'. [ 1426.519991][T18316] netlink: 'syz.4.3418': attribute type 3 has an invalid length. [ 1427.567059][T18329] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1428.201238][T18336] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1429.192848][T18355] netlink: 'syz.3.3431': attribute type 3 has an invalid length. [ 1429.414735][T18360] netlink: 2088 bytes leftover after parsing attributes in process `syz.9.3432'. [ 1430.270312][T18373] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1430.357148][T18379] netlink: 'syz.3.3438': attribute type 3 has an invalid length. [ 1430.375524][T18379] netlink: 'syz.3.3438': attribute type 3 has an invalid length. [ 1431.321586][T18396] netlink: 'syz.3.3445': attribute type 3 has an invalid length. [ 1433.224352][T18425] netlink: 'syz.0.3452': attribute type 3 has an invalid length. [ 1433.236525][T18425] netlink: 'syz.0.3452': attribute type 3 has an invalid length. [ 1434.124019][T18439] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3457'. [ 1434.616840][T18445] netlink: 'syz.6.3459': attribute type 3 has an invalid length. [ 1437.024981][T18480] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3470'. [ 1437.400785][T18486] netlink: 'syz.6.3473': attribute type 3 has an invalid length. [ 1437.670825][T18489] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1437.683994][T18489] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 1437.898660][T18495] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1439.212503][T18511] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3484'. [ 1439.680940][T18519] netlink: 'syz.4.3487': attribute type 3 has an invalid length. [ 1443.887638][T18558] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3499'. [ 1444.543891][T18565] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3502'. [ 1444.700341][T18565] netlink: 'syz.3.3502': attribute type 3 has an invalid length. [ 1447.069235][T18599] bond_slave_0: entered promiscuous mode [ 1447.075192][T18599] bond_slave_1: entered promiscuous mode [ 1447.081484][T18599] macvlan2: entered promiscuous mode [ 1447.086936][T18599] bond0: entered promiscuous mode [ 1447.093951][T18599] macvlan2: entered allmulticast mode [ 1447.099642][T18599] bond0: entered allmulticast mode [ 1447.104893][T18599] bond_slave_0: entered allmulticast mode [ 1447.110844][T18599] bond_slave_1: entered allmulticast mode [ 1447.120080][T18599] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1447.969176][T18607] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3515'. [ 1447.987177][T18607] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3515'. [ 1448.146997][T18607] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3515'. [ 1448.156442][T18607] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3515'. [ 1451.434919][T18645] netlink: 'syz.3.3527': attribute type 4 has an invalid length. [ 1451.443080][T18645] netlink: 17 bytes leftover after parsing attributes in process `syz.3.3527'. [ 1451.550836][T18654] 9pnet: p9_errstr2errno: server reported unknown error len=1 [ 1451.550836][T18654] . val=17587891078792 [ 1451.550836][T18654] [ 1453.340634][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1453.347255][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1456.634160][T18726] netlink: 5 bytes leftover after parsing attributes in process `syz.6.3552'. [ 1456.644088][T18726] 1{X功: renamed from 30{X功 (while UP) [ 1456.727243][T18726] A link change request failed with some changes committed already. Interface 31{X功 may have been left with an inconsistent configuration, please check. [ 1457.880244][T18741] netlink: 'syz.3.3557': attribute type 4 has an invalid length. [ 1457.888172][T18741] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.3557'. [ 1458.237300][T18747] overlayfs: failed to clone upperpath [ 1459.963044][T18771] netlink: 5 bytes leftover after parsing attributes in process `syz.9.3566'. [ 1459.972681][T18771] 1{X功: renamed from 30{X功 (while UP) [ 1460.068559][T18771] A link change request failed with some changes committed already. Interface 31{X功 may have been left with an inconsistent configuration, please check. [ 1460.885114][T18783] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3570'. [ 1460.920315][T18783] bridge0: entered promiscuous mode [ 1463.365127][T18828] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3584'. [ 1463.564859][T18835] overlayfs: failed to clone upperpath [ 1465.125880][T18866] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3600'. [ 1465.151071][T18866] bridge0: entered promiscuous mode [ 1465.221608][T18860] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3597'. [ 1466.158717][ T5816] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1466.178543][ T5816] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1466.221630][ T5816] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1466.268382][ T5816] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1466.281306][ T5816] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1466.418121][T18884] lo speed is unknown, defaulting to 1000 [ 1467.858506][T18884] chnl_net:caif_netlink_parms(): no params data found [ 1468.232310][T18913] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3612'. [ 1468.241962][T18913] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3612'. [ 1468.341050][ T5816] Bluetooth: hci5: command tx timeout [ 1469.958400][T18884] bridge0: port 1(bridge_slave_0) entered blocking state [ 1469.966118][T18884] bridge0: port 1(bridge_slave_0) entered disabled state [ 1469.974292][T18884] bridge_slave_0: entered allmulticast mode [ 1469.983763][T18884] bridge_slave_0: entered promiscuous mode [ 1470.184586][T18884] bridge0: port 2(bridge_slave_1) entered blocking state [ 1470.192393][T18884] bridge0: port 2(bridge_slave_1) entered disabled state [ 1470.205760][T18884] bridge_slave_1: entered allmulticast mode [ 1470.215263][T18884] bridge_slave_1: entered promiscuous mode [ 1470.243363][T18949] fuse: Bad value for 'fd' [ 1470.421249][ T5816] Bluetooth: hci5: command tx timeout [ 1470.557107][T18884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1470.660922][T18884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1470.662845][T18956] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3625'. [ 1470.680084][T18956] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3625'. [ 1471.087138][T18884] team0: Port device team_slave_0 added [ 1471.149829][T18884] team0: Port device team_slave_1 added [ 1471.301976][T18970] overlayfs: failed to clone upperpath [ 1471.416468][T18967] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1471.614260][T18884] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1471.621775][T18884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1471.650799][T18884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1471.728618][T18884] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1471.739168][T18884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1471.766517][T18884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1472.412219][T18985] fuse: Bad value for 'fd' [ 1472.500510][ T5816] Bluetooth: hci5: command tx timeout [ 1472.948967][T18884] hsr_slave_0: entered promiscuous mode [ 1472.959099][T18884] hsr_slave_1: entered promiscuous mode [ 1472.974099][T18884] debugfs: 'hsr0' already exists in 'hsr' [ 1472.980966][T18884] Cannot create hsr debugfs directory [ 1473.210859][T18996] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3639'. [ 1473.220410][T18996] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3639'. [ 1473.558224][T19000] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3640'. [ 1473.569820][T19000] macvlan1: entered allmulticast mode [ 1473.575376][T19000] veth1_vlan: entered allmulticast mode [ 1474.215168][T18884] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1474.366907][T18884] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1474.506838][T18884] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1474.580640][ T5811] Bluetooth: hci5: command tx timeout [ 1474.692645][T18884] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1475.184002][T18884] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1475.310624][T19021] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1475.333950][T18884] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1475.431823][T18884] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1475.572786][T18884] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1475.606311][T19028] overlayfs: failed to clone upperpath [ 1477.473970][T19039] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3650'. [ 1478.622022][T18884] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1478.860025][T18884] 8021q: adding VLAN 0 to HW filter on device team0 [ 1478.935119][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 1478.942663][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1479.078881][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 1479.086493][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1480.163214][T19074] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3663'. [ 1481.001617][T18884] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1482.184819][T19100] syz.3.3671: attempt to access beyond end of device [ 1482.184819][T19100] loop3: rw=0, sector=65, nr_sectors = 1 limit=0 [ 1482.198302][T19100] FAT-fs (loop3): unable to read inode block for updating (i_pos 1050) [ 1482.206950][T19100] syz.3.3671: attempt to access beyond end of device [ 1482.206950][T19100] loop3: rw=0, sector=65, nr_sectors = 1 limit=0 [ 1482.220434][T19100] FAT-fs (loop3): unable to read inode block for updating (i_pos 1050) [ 1482.228844][T19100] FAT-fs (loop3): Failed to update on disk inode for unused fallocated blocks, inode could be corrupted. Please run fsck [ 1482.841371][T18884] veth0_vlan: entered promiscuous mode [ 1483.072714][T18884] veth1_vlan: entered promiscuous mode [ 1483.709665][T18884] veth0_macvtap: entered promiscuous mode [ 1483.813427][T18884] veth1_macvtap: entered promiscuous mode [ 1483.979354][T19117] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3676'. [ 1484.037457][T18884] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1484.172107][T18884] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1484.309302][ T4194] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1484.390362][ T4194] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1484.439196][ T4194] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1484.510184][ T4194] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1485.235990][T11064] lo speed is unknown, defaulting to 1000 [ 1485.242282][T11064] syz+: Port: 1 Link DOWN [ 1485.247487][T11044] lo speed is unknown, defaulting to 1000 [ 1486.445894][T19162] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3688'. [ 1487.293976][T19172] netlink: 5 bytes leftover after parsing attributes in process `syz.9.3691'. [ 1487.307599][T19172] 0{X功: renamed from 31{X功 (while UP) [ 1487.376512][T19172] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 1489.276448][T19213] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3702'. [ 1490.965296][ T4194] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1490.973498][ T4194] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1491.280469][ T4013] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1491.288481][ T4013] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1491.983894][T19266] fuse: Bad value for 'fd' [ 1494.384048][ T5816] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1494.397686][ T5816] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1494.419807][ T5816] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1494.442556][ T5816] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1494.460250][ T5816] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1494.590203][T19307] lo speed is unknown, defaulting to 1000 [ 1495.575638][ T4013] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1495.688648][ T4013] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1495.862666][ T4013] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1495.975267][ T4013] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1496.595507][ T5811] Bluetooth: hci0: command tx timeout [ 1496.861945][T19341] netlink: 5 bytes leftover after parsing attributes in process `syz.9.3743'. [ 1497.407184][ T4013] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1497.490910][ T4013] bond_slave_0: left promiscuous mode [ 1497.548852][ T4013] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1497.608427][ T4013] bond_slave_1: left promiscuous mode [ 1497.667953][ T4013] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1497.716254][ T4013] dummy0: left promiscuous mode [ 1497.726268][ T4013] bond0 (unregistering): Released all slaves [ 1497.756187][ T4013] bond1 (unregistering): Released all slaves [ 1497.777301][ T4013] bond2 (unregistering): Released all slaves [ 1497.858219][T19341] 1{X功: renamed from 30{X功 (while UP) [ 1497.930879][T19341] A link change request failed with some changes committed already. Interface 31{X功 may have been left with an inconsistent configuration, please check. [ 1498.104687][ T4013] tipc: Left network mode [ 1498.144722][ T4013] IPVS: stopping master sync thread 15319 ... [ 1498.391868][T19307] chnl_net:caif_netlink_parms(): no params data found [ 1498.660040][ T5811] Bluetooth: hci0: command tx timeout [ 1499.217240][ T4013] hsr_slave_0: left promiscuous mode [ 1499.228492][ T4013] hsr_slave_1: left promiscuous mode [ 1499.236750][ T4013] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1499.244428][ T4013] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1499.324136][ T4013] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1499.331951][ T4013] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1499.431914][ T4013] veth1_macvtap: left promiscuous mode [ 1499.437686][ T4013] veth0_macvtap: left promiscuous mode [ 1499.443657][ T4013] veth1_vlan: left allmulticast mode [ 1499.449178][ T4013] veth1_vlan: left promiscuous mode [ 1500.614723][T19394] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3759'. [ 1500.637157][ T4013] team0 (unregistering): Port device team_slave_1 removed [ 1500.712326][ T4013] team0 (unregistering): Port device team_slave_0 removed [ 1500.750516][ T5811] Bluetooth: hci0: command tx timeout [ 1501.125768][T19394] 0{X功: renamed from gretap0 (while UP) [ 1501.141223][T19394] 0{X功: entered allmulticast mode [ 1501.148912][T19394] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 1502.073349][T19410] overlayfs: failed to clone upperpath [ 1502.288705][T19307] bridge0: port 1(bridge_slave_0) entered blocking state [ 1502.296555][T19307] bridge0: port 1(bridge_slave_0) entered disabled state [ 1502.304468][T19307] bridge_slave_0: entered allmulticast mode [ 1502.313825][T19307] bridge_slave_0: entered promiscuous mode [ 1502.442543][T19307] bridge0: port 2(bridge_slave_1) entered blocking state [ 1502.450336][T19307] bridge0: port 2(bridge_slave_1) entered disabled state [ 1502.465923][T19307] bridge_slave_1: entered allmulticast mode [ 1502.475258][T19307] bridge_slave_1: entered promiscuous mode [ 1502.846280][ T5811] Bluetooth: hci0: command tx timeout [ 1502.924072][T19307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1502.944680][T19307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1503.141304][T19307] team0: Port device team_slave_0 added [ 1503.189061][T19307] team0: Port device team_slave_1 added [ 1503.670740][T19307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1503.677863][T19307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1503.710247][T19307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1503.771456][T19307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1503.778693][T19307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1503.814255][T19307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1504.183450][T19441] netlink: 5 bytes leftover after parsing attributes in process `syz.6.3773'. [ 1504.253984][T19441] 0{X功: renamed from 31{X功 (while UP) [ 1504.288869][T19441] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 1504.416676][T19307] hsr_slave_0: entered promiscuous mode [ 1504.426696][T19307] hsr_slave_1: entered promiscuous mode [ 1504.435393][T19307] debugfs: 'hsr0' already exists in 'hsr' [ 1504.441404][T19307] Cannot create hsr debugfs directory [ 1504.491636][T19450] syz.0.3775: attempt to access beyond end of device [ 1504.491636][T19450] loop1: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 1504.511501][T19450] EXT4-fs (loop1): unable to read superblock [ 1504.533845][T19450] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3775'. [ 1506.854296][T19307] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1507.164259][ T30] audit: type=1326 audit(1755749739.641:1281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19467 comm="syz.3.3781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa69758ebe9 code=0x7ffc0000 [ 1507.330544][T19476] bridge0: port 1(bridge_slave_0) entered listening state [ 1507.391235][T19307] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1507.460922][T19307] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1507.545194][T19307] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1508.670223][T19307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1508.859991][T19307] 8021q: adding VLAN 0 to HW filter on device team0 [ 1508.936949][ T3602] bridge0: port 1(bridge_slave_0) entered blocking state [ 1508.944528][ T3602] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1509.029094][ T3602] bridge0: port 2(bridge_slave_1) entered blocking state [ 1509.036725][ T3602] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1509.987028][T19307] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1509.997978][T19307] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1511.744374][T19541] loop0: detected capacity change from 0 to 512 [ 1511.857997][T19541] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1512.071743][T19541] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1512.090501][T19541] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1512.328996][T19307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1512.414276][T19541] EXT4-fs (loop0): shut down requested (2) [ 1513.143373][T18884] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1514.262346][T19307] veth0_vlan: entered promiscuous mode [ 1514.328857][T19307] veth1_vlan: entered promiscuous mode [ 1514.511771][T19307] veth0_macvtap: entered promiscuous mode [ 1514.541365][T19307] veth1_macvtap: entered promiscuous mode [ 1514.614069][T19307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1514.677628][T19307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1514.716586][ T61] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1514.783747][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1514.790851][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1514.800044][ T61] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1514.809028][ T61] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1514.835347][ T61] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1516.233938][ T5816] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1516.271710][ T5816] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1516.288003][ T5816] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1516.305191][ T5816] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1516.317750][ T5816] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1516.470802][T19594] lo speed is unknown, defaulting to 1000 [ 1517.772082][T19594] chnl_net:caif_netlink_parms(): no params data found [ 1518.420279][ T5816] Bluetooth: hci1: command tx timeout [ 1518.931684][T19639] netlink: 5 bytes leftover after parsing attributes in process `syz.9.3827'. [ 1518.949291][T19639] 0{X功: renamed from 31{X功 (while UP) [ 1519.011380][T19639] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 1519.275999][T19594] bridge0: port 1(bridge_slave_0) entered blocking state [ 1519.283755][T19594] bridge0: port 1(bridge_slave_0) entered disabled state [ 1519.293723][T19594] bridge_slave_0: entered allmulticast mode [ 1519.303261][T19594] bridge_slave_0: entered promiscuous mode [ 1519.371834][T19594] bridge0: port 2(bridge_slave_1) entered blocking state [ 1519.380827][T19594] bridge0: port 2(bridge_slave_1) entered disabled state [ 1519.388586][T19594] bridge_slave_1: entered allmulticast mode [ 1519.402434][T19594] bridge_slave_1: entered promiscuous mode [ 1519.764030][T19594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1519.853903][T19594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1520.010684][T19594] team0: Port device team_slave_0 added [ 1520.032397][T19594] team0: Port device team_slave_1 added [ 1520.240759][T19594] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1520.247898][T19594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1520.275998][T19594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1520.370434][T19594] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1520.383493][T19594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1520.412126][T19594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1520.499939][ T5816] Bluetooth: hci1: command tx timeout [ 1520.650729][ T7842] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1520.658725][ T7842] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1520.942489][ T4239] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1520.951691][ T4239] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1520.991058][T19594] hsr_slave_0: entered promiscuous mode [ 1521.014605][T19594] hsr_slave_1: entered promiscuous mode [ 1521.023199][T19594] debugfs: 'hsr0' already exists in 'hsr' [ 1521.029084][T19594] Cannot create hsr debugfs directory [ 1522.598235][ T5816] Bluetooth: hci1: command tx timeout [ 1523.122143][T19594] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1523.241016][T19594] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1523.351023][T19594] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1523.444887][T19594] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1524.625272][T19594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1524.659997][ T5816] Bluetooth: hci1: command tx timeout [ 1524.784076][T19594] 8021q: adding VLAN 0 to HW filter on device team0 [ 1524.883206][ T4013] bridge0: port 1(bridge_slave_0) entered blocking state [ 1524.890939][ T4013] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1525.002385][ T4013] bridge0: port 2(bridge_slave_1) entered blocking state [ 1525.009935][ T4013] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1527.251738][T19761] netlink: 'syz.9.3865': attribute type 4 has an invalid length. [ 1527.259879][T19761] netlink: 17 bytes leftover after parsing attributes in process `syz.9.3865'. [ 1527.281003][T19594] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1529.651840][T19795] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3874'. [ 1529.661309][T19795] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3874'. [ 1530.110328][T19594] veth0_vlan: entered promiscuous mode [ 1530.149410][T19594] veth1_vlan: entered promiscuous mode [ 1530.377444][T19594] veth0_macvtap: entered promiscuous mode [ 1530.495975][T19594] veth1_macvtap: entered promiscuous mode [ 1530.662278][T19594] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1530.786060][T19594] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1530.896292][ T3602] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1531.253215][ T61] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1531.369194][ T4194] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1531.379635][ T4013] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1532.901010][T19833] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3886'. [ 1532.910400][T19833] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3886'. [ 1534.562017][T19867] netlink: 5 bytes leftover after parsing attributes in process `syz.9.3896'. [ 1534.571921][T19867] 1{X功: renamed from 30{X功 (while UP) [ 1534.636994][T19867] A link change request failed with some changes committed already. Interface 31{X功 may have been left with an inconsistent configuration, please check. [ 1535.211115][T19878] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3898'. [ 1535.222871][T19878] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3898'. [ 1537.255852][T19911] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3908'. [ 1537.265537][T19911] 1{X功: renamed from 30{X功 (while UP) [ 1537.371381][T19911] A link change request failed with some changes committed already. Interface 31{X功 may have been left with an inconsistent configuration, please check. [ 1538.801786][ T7842] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1538.815856][ T7842] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1539.110493][ T3602] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1539.124904][ T3602] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1540.309733][T19970] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3924'. [ 1540.319594][T19970] 0{X功: renamed from 31{X功 (while UP) [ 1540.377936][T19970] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 1541.866471][T19990] lo speed is unknown, defaulting to 1000 [ 1544.070034][T20015] lo speed is unknown, defaulting to 1000 [ 1547.628460][T20064] loop4: detected capacity change from 0 to 128 [ 1548.632692][T20084] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3967'. [ 1549.626715][T20104] loop8: detected capacity change from 0 to 1024 [ 1549.695290][T20104] EXT4-fs (loop8): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 1549.886415][T20104] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1550.315761][T19594] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1552.771240][T20148] syz.4.3987 (20148): drop_caches: 2 [ 1553.172043][T20161] overlayfs: failed to clone upperpath [ 1554.319644][T20183] loop4: detected capacity change from 0 to 2048 [ 1554.522314][T20183] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1554.535302][T20183] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1554.627302][T20183] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4000'. [ 1554.637032][T20183] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1554.644508][T20183] IPv6: NLM_F_CREATE should be set when creating new route [ 1555.045943][T19307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1556.068451][T20218] loop4: detected capacity change from 0 to 128 [ 1556.190116][T20218] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1556.380295][T20218] ext4 filesystem being mounted at /34/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1556.867544][T19307] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1558.087306][T20248] loop4: detected capacity change from 0 to 512 [ 1558.236736][T20248] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.4024: casefold flag without casefold feature [ 1558.386027][T20248] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.4024: couldn't read orphan inode 15 (err -117) [ 1558.462513][T20248] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1559.201591][T19307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1560.213257][T20281] netlink: 5 bytes leftover after parsing attributes in process `syz.4.4034'. [ 1560.223540][T20281] 0{X功: renamed from gretap0 (while UP) [ 1560.255700][T20281] 0{X功: entered allmulticast mode [ 1560.263874][T20281] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 1560.343088][T20285] block device autoloading is deprecated and will be removed. [ 1560.861734][ T14] bridge_slave_1: left allmulticast mode [ 1560.867580][ T14] bridge_slave_1: left promiscuous mode [ 1560.874423][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 1560.908041][ T14] bridge_slave_0: left allmulticast mode [ 1560.914157][ T14] bridge_slave_0: left promiscuous mode [ 1560.921583][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 1562.192961][ T14] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1562.338885][ T14] bond_slave_0: left promiscuous mode [ 1562.581848][ T14] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1562.724895][ T14] bond_slave_1: left promiscuous mode [ 1562.735901][ T14] bond0 (unregistering): Released all slaves [ 1562.758110][ T14] bond1 (unregistering): Released all slaves [ 1562.790781][ T14] bond2 (unregistering): Released all slaves [ 1563.735332][ T14] tipc: Left network mode [ 1563.851163][ T14] IPVS: stopping master sync thread 15544 ... [ 1565.133080][ T14] hsr_slave_0: left promiscuous mode [ 1565.150858][ T14] hsr_slave_1: left promiscuous mode [ 1565.158739][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1565.166440][ T14] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1565.307729][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1565.315460][ T14] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1565.450579][ T14] veth1_macvtap: left promiscuous mode [ 1565.456296][ T14] veth0_macvtap: left promiscuous mode [ 1565.462425][ T14] veth1_vlan: left promiscuous mode [ 1565.467927][ T14] veth0_vlan: left promiscuous mode [ 1565.572081][T20342] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4055'. [ 1567.697124][T20358] loop4: detected capacity change from 0 to 2048 [ 1567.800694][T20358] loop4: p1 p3 p4 [ 1567.873639][T20358] loop4: p4 size 589824 extends beyond EOD, truncated [ 1568.376118][T20376] loop8: detected capacity change from 0 to 512 [ 1569.110738][T20389] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4072'. [ 1569.175369][T20392] netlink: 36 bytes leftover after parsing attributes in process `syz.9.4073'. [ 1569.184987][T20386] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1569.838966][T20404] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1569.850931][ T5859] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1569.960018][ T5859] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1570.263995][T20396] loop8: detected capacity change from 0 to 8192 [ 1570.398453][T20396] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1570.660122][T20418] loop8: detected capacity change from 8192 to 0 [ 1570.681070][T20419] syz.8.4074: attempt to access beyond end of device [ 1570.681070][T20419] loop8: rw=0, sector=65, nr_sectors = 1 limit=0 [ 1570.694556][T20419] FAT-fs (loop8): Directory bread(block 65) failed [ 1570.701414][T20419] syz.8.4074: attempt to access beyond end of device [ 1570.701414][T20419] loop8: rw=0, sector=66, nr_sectors = 1 limit=0 [ 1570.714650][T20419] FAT-fs (loop8): Directory bread(block 66) failed [ 1570.716103][ C0] I/O error, dev loop8, sector 1 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 1570.721477][T20419] syz.8.4074: attempt to access beyond end of device [ 1570.721477][T20419] loop8: rw=0, sector=67, nr_sectors = 1 limit=0 [ 1570.730961][ C0] Buffer I/O error on dev loop8, logical block 1, lost sync page write [ 1570.745183][T20419] FAT-fs (loop8): Directory bread(block 67) failed [ 1570.752351][T20396] syz.8.4074: attempt to access beyond end of device [ 1570.752351][T20396] loop8: rw=0, sector=1, nr_sectors = 1 limit=0 [ 1570.765128][T20419] syz.8.4074: attempt to access beyond end of device [ 1570.765128][T20419] loop8: rw=0, sector=68, nr_sectors = 1 limit=0 [ 1570.774920][T20396] FAT-fs (loop8): FAT read failed (blocknr 1) [ 1570.795829][T20419] FAT-fs (loop8): Directory bread(block 68) failed [ 1570.802778][T20419] syz.8.4074: attempt to access beyond end of device [ 1570.802778][T20419] loop8: rw=0, sector=69, nr_sectors = 1 limit=0 [ 1570.815966][T20419] FAT-fs (loop8): Directory bread(block 69) failed [ 1570.822823][T20419] syz.8.4074: attempt to access beyond end of device [ 1570.822823][T20419] loop8: rw=0, sector=70, nr_sectors = 1 limit=0 [ 1570.836158][T20419] FAT-fs (loop8): Directory bread(block 70) failed [ 1570.843008][T20419] syz.8.4074: attempt to access beyond end of device [ 1570.843008][T20419] loop8: rw=0, sector=71, nr_sectors = 1 limit=0 [ 1570.856241][T20419] FAT-fs (loop8): Directory bread(block 71) failed [ 1570.940147][T20396] syz.8.4074: attempt to access beyond end of device [ 1570.940147][T20396] loop8: rw=0, sector=65, nr_sectors = 1 limit=0 [ 1570.953580][T20396] FAT-fs (loop8): unable to read inode block for updating (i_pos 1050) [ 1571.273359][T20423] fuse: Bad value for 'fd' [ 1575.245834][T20498] fuse: Bad value for 'fd' [ 1576.174956][T20509] loop4: detected capacity change from 0 to 512 [ 1576.222762][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1576.230232][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1576.503935][T20509] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1576.517910][T20509] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1576.929223][T19307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1580.305396][T20596] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4146'. [ 1580.685407][T20601] loop4: detected capacity change from 0 to 512 [ 1580.769174][T20601] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1580.782738][T20601] ext4 filesystem being mounted at /62/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1581.987892][T19307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1582.605082][T20629] netlink: 36 bytes leftover after parsing attributes in process `syz.9.4158'. [ 1584.252316][ T5811] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1584.270456][ T5811] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1584.297789][ T5811] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1584.324998][ T5811] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1584.337103][ T5811] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1584.566357][T20655] lo speed is unknown, defaulting to 1000 [ 1584.739247][T20661] overlayfs: failed to resolve './file0': -2 [ 1586.040262][T20655] chnl_net:caif_netlink_parms(): no params data found [ 1586.431131][ T5811] Bluetooth: hci5: command tx timeout [ 1586.931398][T20688] IPv6: Can't replace route, no match found [ 1587.145966][ T5093] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1587.325314][ T5093] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1587.542440][ T5093] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1587.823792][T20700] 9pnet_fd: Insufficient options for proto=fd [ 1587.844084][T20701] overlayfs: failed to clone upperpath [ 1587.924808][ T5093] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1588.000831][T20655] bridge0: port 1(bridge_slave_0) entered blocking state [ 1588.008559][T20655] bridge0: port 1(bridge_slave_0) entered disabled state [ 1588.016395][T20655] bridge_slave_0: entered allmulticast mode [ 1588.025934][T20655] bridge_slave_0: entered promiscuous mode [ 1588.118301][T20655] bridge0: port 2(bridge_slave_1) entered blocking state [ 1588.131953][T20655] bridge0: port 2(bridge_slave_1) entered disabled state [ 1588.140364][T20655] bridge_slave_1: entered allmulticast mode [ 1588.149752][T20655] bridge_slave_1: entered promiscuous mode [ 1588.504841][ T5811] Bluetooth: hci5: command tx timeout [ 1588.513800][ T5093] bridge_slave_1: left allmulticast mode [ 1588.520239][ T5093] bridge_slave_1: left promiscuous mode [ 1588.526812][ T5093] bridge0: port 2(bridge_slave_1) entered disabled state [ 1588.541109][ T5093] bridge_slave_0: left allmulticast mode [ 1588.547029][ T5093] bridge_slave_0: left promiscuous mode [ 1588.553634][ T5093] bridge0: port 1(bridge_slave_0) entered disabled state [ 1589.254046][ T5093] bond0 (unregistering): left allmulticast mode [ 1589.260864][ T5093] bond_slave_0: left allmulticast mode [ 1589.266487][ T5093] bond_slave_1: left allmulticast mode [ 1589.272220][ T5093] bond0 (unregistering): left promiscuous mode [ 1589.278530][ T5093] bond_slave_0: left promiscuous mode [ 1589.285528][ T5093] bond_slave_1: left promiscuous mode [ 1589.510995][ T5093] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1589.571051][ T5093] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1589.608963][ T5093] bond0 (unregistering): Released all slaves [ 1589.632965][ T5093] bond1 (unregistering): Released all slaves [ 1589.654625][ T5093] bond2 (unregistering): Released all slaves [ 1589.675966][ T5093] bond3 (unregistering): Released all slaves [ 1589.938539][T20655] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1590.059025][T20655] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1590.457857][ T5093] tipc: Left network mode [ 1590.478881][ T5093] IPVS: stopping master sync thread 15237 ... [ 1590.496944][T20655] team0: Port device team_slave_0 added [ 1590.516029][T20736] syz.8.4199 (20736): drop_caches: 2 [ 1590.577205][T20736] syz.8.4199 (20736): drop_caches: 2 [ 1590.580586][ T5811] Bluetooth: hci5: command tx timeout [ 1590.666799][T20655] team0: Port device team_slave_1 added [ 1590.972545][T20655] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1590.979835][T20655] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1591.006093][T20655] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1591.464553][T20655] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1591.471823][T20655] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1591.498141][T20655] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1591.606594][ T5093] hsr_slave_0: left promiscuous mode [ 1591.651881][ T5093] hsr_slave_1: left promiscuous mode [ 1591.660291][ T5093] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1591.667849][ T5093] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1591.792383][ T5093] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1591.800290][ T5093] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1591.921864][ T5093] veth1_macvtap: left promiscuous mode [ 1591.927718][ T5093] veth0_macvtap: left promiscuous mode [ 1591.933870][ T5093] veth1_vlan: left promiscuous mode [ 1591.939519][ T5093] veth0_vlan: left promiscuous mode [ 1592.511695][T20750] loop4: detected capacity change from 0 to 1024 [ 1592.618667][T20750] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1592.631744][T20750] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1592.679462][ T5811] Bluetooth: hci5: command tx timeout [ 1592.865114][ T5093] team0 (unregistering): Port device team_slave_1 removed [ 1592.960791][ T5093] team0 (unregistering): Port device team_slave_0 removed [ 1593.633554][T20655] hsr_slave_0: entered promiscuous mode [ 1593.642207][T20655] hsr_slave_1: entered promiscuous mode [ 1593.741585][T20758] netlink: 'syz.3.4207': attribute type 4 has an invalid length. [ 1593.750367][T20758] netlink: 17 bytes leftover after parsing attributes in process `syz.3.4207'. [ 1593.992395][T19307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1595.706550][T20655] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1595.793299][T20655] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1595.880477][T20655] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1595.959752][T20655] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1596.546648][T20786] netlink: 'syz.3.4219': attribute type 4 has an invalid length. [ 1596.554802][T20786] netlink: 17 bytes leftover after parsing attributes in process `syz.3.4219'. [ 1597.027813][T20655] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1597.259031][T20655] 8021q: adding VLAN 0 to HW filter on device team0 [ 1597.335836][ T3624] bridge0: port 1(bridge_slave_0) entered blocking state [ 1597.343408][ T3624] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1597.491564][ T3624] bridge0: port 2(bridge_slave_1) entered blocking state [ 1597.498949][ T3624] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1599.279588][T20814] netlink: 'syz.4.4230': attribute type 4 has an invalid length. [ 1599.287617][T20814] netlink: 17 bytes leftover after parsing attributes in process `syz.4.4230'. [ 1599.355921][T20655] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1600.093497][T20832] 9pnet_fd: Insufficient options for proto=fd [ 1600.760291][ T4194] kworker/u8:18: attempt to access beyond end of device [ 1600.760291][ T4194] loop8: rw=0, sector=65, nr_sectors = 1 limit=0 [ 1600.773931][ T4194] FAT-fs (loop8): unable to read inode block for updating (i_pos 1050) [ 1601.590730][T20855] netlink: 'syz.3.4243': attribute type 4 has an invalid length. [ 1601.598654][T20855] netlink: 17 bytes leftover after parsing attributes in process `syz.3.4243'. [ 1601.750957][T20655] veth0_vlan: entered promiscuous mode [ 1601.866482][T20655] veth1_vlan: entered promiscuous mode [ 1602.153771][T20655] veth0_macvtap: entered promiscuous mode [ 1602.226207][T20655] veth1_macvtap: entered promiscuous mode [ 1602.293071][T20864] 9pnet_fd: Insufficient options for proto=fd [ 1602.387191][T20655] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1602.471436][T20655] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1602.608723][ T5093] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1602.656766][ T58] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1602.724355][ T58] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1602.776872][ T5093] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1603.406702][T20879] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4251'. [ 1603.416127][T20879] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4251'. [ 1603.510142][T20879] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4251'. [ 1603.519506][T20879] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4251'. [ 1607.441109][T20894] netlink: 'syz.3.4256': attribute type 4 has an invalid length. [ 1607.449219][T20894] netlink: 17 bytes leftover after parsing attributes in process `syz.3.4256'. [ 1610.046732][T20936] loop4: detected capacity change from 0 to 256 [ 1610.093055][T20936] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1611.552489][ T4194] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1611.561154][ T4194] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1611.779834][ T3624] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1611.787840][ T3624] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1613.372328][ T5816] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1613.388869][ T5816] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1613.414772][ T5816] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1613.439600][ T5816] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1613.452235][ T5816] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1613.752607][T20989] lo speed is unknown, defaulting to 1000 [ 1615.141726][T20989] chnl_net:caif_netlink_parms(): no params data found [ 1615.539899][ T5816] Bluetooth: hci3: command tx timeout [ 1615.735549][ T4239] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1615.902204][ T4239] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1616.114581][ T4239] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1616.307718][ T4239] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1616.796056][ T4239] bridge_slave_1: left allmulticast mode [ 1616.802983][ T4239] bridge_slave_1: left promiscuous mode [ 1616.810040][ T4239] bridge0: port 2(bridge_slave_1) entered disabled state [ 1616.867219][ T4239] bridge_slave_0: left allmulticast mode [ 1616.873387][ T4239] bridge_slave_0: left promiscuous mode [ 1616.880022][ T4239] bridge0: port 1(bridge_slave_0) entered disabled state [ 1617.511514][ T4239] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1617.537433][ T4239] bond_slave_0: left promiscuous mode [ 1617.600250][ T4239] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1617.612292][ T4239] bond_slave_1: left promiscuous mode [ 1617.621632][ T5811] Bluetooth: hci3: command tx timeout [ 1617.626559][ T4239] bond0 (unregistering): Released all slaves [ 1617.648639][ T4239] bond1 (unregistering): Released all slaves [ 1617.685659][ T4239] bond2 (unregistering): Released all slaves [ 1617.712474][ T4239] bond3 (unregistering): Released all slaves [ 1617.733860][ T4239] bond4 (unregistering): Released all slaves [ 1618.011700][T20989] bridge0: port 1(bridge_slave_0) entered blocking state [ 1618.019182][T20989] bridge0: port 1(bridge_slave_0) entered disabled state [ 1618.029636][T20989] bridge_slave_0: entered allmulticast mode [ 1618.038797][T20989] bridge_slave_0: entered promiscuous mode [ 1618.140425][ T4239] tipc: Left network mode [ 1618.192952][T20989] bridge0: port 2(bridge_slave_1) entered blocking state [ 1618.201156][T20989] bridge0: port 2(bridge_slave_1) entered disabled state [ 1618.208864][T20989] bridge_slave_1: entered allmulticast mode [ 1618.218360][T20989] bridge_slave_1: entered promiscuous mode [ 1618.233422][ T4239] IPVS: stopping master sync thread 15278 ... [ 1618.775011][T20989] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1618.901641][T20989] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1619.322074][ T5811] Bluetooth: hci0: command 0x0406 tx timeout [ 1619.439839][ T4239] hsr_slave_0: left promiscuous mode [ 1619.473835][ T4239] hsr_slave_1: left promiscuous mode [ 1619.481988][ T4239] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1619.489769][ T4239] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1619.555104][ T4239] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1619.562856][ T4239] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1619.651540][ T4239] veth1_macvtap: left promiscuous mode [ 1619.657455][ T4239] veth0_macvtap: left promiscuous mode [ 1619.663484][ T4239] veth1_vlan: left promiscuous mode [ 1619.669006][ T4239] veth0_vlan: left promiscuous mode [ 1619.700038][ T5816] Bluetooth: hci3: command tx timeout [ 1620.606375][ T4239] team0 (unregistering): Port device team_slave_1 removed [ 1620.684808][ T4239] team0 (unregistering): Port device team_slave_0 removed [ 1620.867132][T20989] team0: Port device team_slave_0 added [ 1620.887936][T20989] team0: Port device team_slave_1 added [ 1621.457291][T20989] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1621.465118][T20989] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1621.491761][T20989] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1621.530954][T19594] syz-executor: attempt to access beyond end of device [ 1621.530954][T19594] loop8: rw=0, sector=65, nr_sectors = 1 limit=0 [ 1621.544610][T19594] FAT-fs (loop8): unable to read inode block for updating (i_pos 1050) [ 1621.559618][T19594] syz-executor: attempt to access beyond end of device [ 1621.559618][T19594] loop8: rw=0, sector=65, nr_sectors = 1 limit=0 [ 1621.575029][T19594] FAT-fs (loop8): unable to read inode block for updating (i_pos 1050) [ 1621.583629][T19594] FAT-fs (loop8): Failed to update on disk inode for unused fallocated blocks, inode could be corrupted. Please run fsck [ 1621.625862][T20989] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1621.633369][T20989] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1621.666586][T20989] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1621.777395][T21072] loop6: detected capacity change from 0 to 2048 [ 1621.790012][ T5816] Bluetooth: hci3: command tx timeout [ 1621.810798][ T4239] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1621.995470][T21072] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1622.134699][ T4239] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1622.223889][T20989] hsr_slave_0: entered promiscuous mode [ 1622.233713][T20989] hsr_slave_1: entered promiscuous mode [ 1622.242182][T20989] debugfs: 'hsr0' already exists in 'hsr' [ 1622.248126][T20989] Cannot create hsr debugfs directory [ 1622.343662][ T4239] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1622.381409][T20655] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1622.685576][ T4239] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1623.008202][ T4239] bridge_slave_1: left allmulticast mode [ 1623.014315][ T4239] bridge_slave_1: left promiscuous mode [ 1623.021039][ T4239] bridge0: port 2(bridge_slave_1) entered disabled state [ 1623.047241][ T4239] bridge_slave_0: left allmulticast mode [ 1623.053299][ T4239] bridge_slave_0: left promiscuous mode [ 1623.059981][ T4239] bridge0: port 1(bridge_slave_0) entered disabled state [ 1623.480131][ T4239] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1623.541582][ T4239] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1623.557368][ T4239] bond0 (unregistering): Released all slaves [ 1624.660181][ T4239] hsr_slave_0: left promiscuous mode [ 1624.679869][ T4239] hsr_slave_1: left promiscuous mode [ 1624.697163][ T4239] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1624.707600][ T4239] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1624.756472][ T4239] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1624.764336][ T4239] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1624.802072][ T4239] veth1_macvtap: left promiscuous mode [ 1624.807928][ T4239] veth0_macvtap: left promiscuous mode [ 1624.814075][ T4239] veth1_vlan: left promiscuous mode [ 1624.827969][ T4239] veth0_vlan: left promiscuous mode [ 1624.890624][ T5811] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1624.941487][ T5811] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1624.951580][ T5811] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1624.965630][ T5811] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1624.976815][ T5811] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1625.147270][T21099] loop4: detected capacity change from 0 to 1024 [ 1625.170390][T21099] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1625.198626][T21099] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 1625.208766][T21099] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1625.237654][T21099] Quota error (device loop4): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 1625.250390][T21099] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1625.261921][T21099] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.4336: Failed to acquire dquot type 0 [ 1625.292740][T21099] Quota error (device loop4): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 1625.304010][T21099] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1625.314446][T21099] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.4336: Failed to acquire dquot type 0 [ 1625.327419][T21099] EXT4-fs error (device loop4): ext4_free_blocks:6696: comm syz.4.4336: Freeing blocks not in datazone - block = 0, count = 4096 [ 1625.365907][T21099] Quota error (device loop4): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 1625.376856][T21099] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1625.387736][T21099] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.4336: Failed to acquire dquot type 0 [ 1625.477739][T21099] EXT4-fs (loop4): 1 orphan inode deleted [ 1625.562752][T21099] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1625.625589][ T4239] team0 (unregistering): Port device team_slave_1 removed [ 1625.680054][ T4239] team0 (unregistering): Port device team_slave_0 removed [ 1625.929622][T19307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1626.262504][T21096] lo speed is unknown, defaulting to 1000 [ 1627.064923][T20989] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1627.131376][T20989] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1627.144335][ T5816] Bluetooth: hci1: command tx timeout [ 1627.175392][ T4013] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1627.219953][T20989] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1627.272692][ T4013] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1627.378608][T20989] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1627.482342][ T4013] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1627.541402][T21120] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4342'. [ 1627.551066][T21120] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4342'. [ 1627.683245][ T4013] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1628.191666][ T4013] bridge_slave_1: left allmulticast mode [ 1628.197522][ T4013] bridge_slave_1: left promiscuous mode [ 1628.209716][ T4013] bridge0: port 2(bridge_slave_1) entered disabled state [ 1628.300872][ T4013] bridge_slave_0: left allmulticast mode [ 1628.312105][ T4013] bridge_slave_0: left promiscuous mode [ 1628.318620][ T4013] bridge0: port 1(bridge_slave_0) entered disabled state [ 1629.001253][ T4013] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1629.051929][ T4013] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1629.093955][ T4013] bond0 (unregistering): Released all slaves [ 1629.230783][ T5816] Bluetooth: hci1: command tx timeout [ 1629.520254][T21096] chnl_net:caif_netlink_parms(): no params data found [ 1630.037429][T20989] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1630.319670][T20989] 8021q: adding VLAN 0 to HW filter on device team0 [ 1630.408324][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 1630.415927][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1630.495530][ T4013] hsr_slave_0: left promiscuous mode [ 1630.528576][ T4013] hsr_slave_1: left promiscuous mode [ 1630.536702][ T4013] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1630.544972][ T4013] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1630.588081][ T4013] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1630.596309][ T4013] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1630.628214][ T4013] veth1_macvtap: left promiscuous mode [ 1630.634170][ T4013] veth0_macvtap: left promiscuous mode [ 1630.640958][ T4013] veth1_vlan: left promiscuous mode [ 1630.646474][ T4013] veth0_vlan: left promiscuous mode [ 1631.258190][ T4013] team0 (unregistering): Port device team_slave_1 removed [ 1631.365595][ T5816] Bluetooth: hci1: command tx timeout [ 1631.386144][ T4013] team0 (unregistering): Port device team_slave_0 removed [ 1631.683229][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 1631.690831][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1631.994694][T20989] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1632.006251][T20989] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1632.477348][T21166] netlink: 5 bytes leftover after parsing attributes in process `syz.4.4359'. [ 1632.487041][T21166] 1{X功: renamed from 30{X功 (while UP) [ 1632.535032][T21166] A link change request failed with some changes committed already. Interface 31{X功 may have been left with an inconsistent configuration, please check. [ 1632.715025][T21096] bridge0: port 1(bridge_slave_0) entered blocking state [ 1632.722865][T21096] bridge0: port 1(bridge_slave_0) entered disabled state [ 1632.730632][T21096] bridge_slave_0: entered allmulticast mode [ 1632.739839][T21096] bridge_slave_0: entered promiscuous mode [ 1632.801509][T21096] bridge0: port 2(bridge_slave_1) entered blocking state [ 1632.809154][T21096] bridge0: port 2(bridge_slave_1) entered disabled state [ 1632.820677][T21096] bridge_slave_1: entered allmulticast mode [ 1632.830114][T21096] bridge_slave_1: entered promiscuous mode [ 1633.093749][T21096] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1633.185877][T21096] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1633.460660][ T5816] Bluetooth: hci1: command tx timeout [ 1633.482095][T21096] team0: Port device team_slave_0 added [ 1633.573259][T21096] team0: Port device team_slave_1 added [ 1633.804204][T21096] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1633.811599][T21096] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1633.840732][T21096] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1633.881187][T21096] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1633.888316][T21096] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1633.914742][T21096] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1633.941127][T20989] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1634.264107][T21096] hsr_slave_0: entered promiscuous mode [ 1634.276073][T21096] hsr_slave_1: entered promiscuous mode [ 1634.284616][T21096] debugfs: 'hsr0' already exists in 'hsr' [ 1634.290578][T21096] Cannot create hsr debugfs directory [ 1634.494237][T21193] netlink: 5 bytes leftover after parsing attributes in process `syz.6.4369'. [ 1634.511421][T21193] 0{X功: renamed from gretap0 (while UP) [ 1634.542571][T21193] 0{X功: entered allmulticast mode [ 1634.551679][T21193] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 1634.863296][T20989] veth0_vlan: entered promiscuous mode [ 1635.093612][T20989] veth1_vlan: entered promiscuous mode [ 1635.417925][T20989] veth0_macvtap: entered promiscuous mode [ 1635.595946][T20989] veth1_macvtap: entered promiscuous mode [ 1635.842332][T20989] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1636.056773][T20989] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1636.129739][T21213] overlayfs: failed to resolve './bus': -2 [ 1636.184585][ T7842] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1636.258377][ T7842] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1636.268508][T21216] loop4: detected capacity change from 0 to 256 [ 1636.289464][ T4013] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1636.315111][T21096] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1636.387124][ T4013] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1636.405514][T21216] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1636.450929][T21096] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1636.483798][ T30] audit: type=1800 audit(1755749869.231:1282): pid=21216 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4379" name="file0" dev="loop4" ino=1048682 res=0 errno=0 [ 1636.531150][T21096] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1636.619719][T21096] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1636.690789][T21223] netlink: 5 bytes leftover after parsing attributes in process `syz.9.4381'. [ 1636.761506][T21223] 0{X功: renamed from 31{X功 (while UP) [ 1636.817428][T21223] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 1637.294990][T21231] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4382'. [ 1637.652294][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1637.658898][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1637.788980][ T30] audit: type=1326 audit(1755749870.541:1283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21239 comm="syz.6.4386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa90698ebe9 code=0x7ffc0000 [ 1637.876998][T21096] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1637.914658][ T30] audit: type=1326 audit(1755749870.601:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21239 comm="syz.6.4386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fa90698ebe9 code=0x7ffc0000 [ 1637.939022][ T30] audit: type=1326 audit(1755749870.601:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21239 comm="syz.6.4386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa90698ebe9 code=0x7ffc0000 [ 1637.963959][ T30] audit: type=1326 audit(1755749870.601:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21239 comm="syz.6.4386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa90698ebe9 code=0x7ffc0000 [ 1637.987196][ T30] audit: type=1326 audit(1755749870.611:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21239 comm="syz.6.4386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7fa90698ebe9 code=0x7ffc0000 [ 1638.010124][ T30] audit: type=1326 audit(1755749870.611:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21239 comm="syz.6.4386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa90698ebe9 code=0x7ffc0000 [ 1638.034204][ T30] audit: type=1326 audit(1755749870.611:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21239 comm="syz.6.4386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7fa90698ebe9 code=0x7ffc0000 [ 1638.057298][ T30] audit: type=1326 audit(1755749870.611:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21239 comm="syz.6.4386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa90698ebe9 code=0x7ffc0000 [ 1638.178587][T21096] 8021q: adding VLAN 0 to HW filter on device team0 [ 1638.311777][ T4013] bridge0: port 1(bridge_slave_0) entered blocking state [ 1638.319372][ T4013] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1638.448538][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 1638.456133][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1639.429076][T21268] netlink: 5 bytes leftover after parsing attributes in process `syz.4.4392'. [ 1639.438819][T21268] 0{X功: renamed from 31{X功 (while UP) [ 1639.537394][T21268] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 1640.252033][T21277] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4393'. [ 1640.435039][T21096] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1640.894955][T21096] veth0_vlan: entered promiscuous mode [ 1641.020871][T21096] veth1_vlan: entered promiscuous mode [ 1641.330399][T21096] veth0_macvtap: entered promiscuous mode [ 1641.420671][T21096] veth1_macvtap: entered promiscuous mode [ 1641.603586][T21096] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1641.707371][T21096] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1641.798464][ T58] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1641.856922][ T58] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1641.912876][ T58] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1641.960302][ T58] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1642.547521][T21312] netlink: 5 bytes leftover after parsing attributes in process `syz.4.4402'. [ 1642.557399][T21312] 1{X功: renamed from 30{X功 (while UP) [ 1642.631897][T21312] A link change request failed with some changes committed already. Interface 31{X功 may have been left with an inconsistent configuration, please check. [ 1643.395549][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1643.403771][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1643.654474][ T7842] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1643.666428][ T7842] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1644.562779][T21343] netlink: 300 bytes leftover after parsing attributes in process `syz.3.4288'. [ 1645.327073][T21357] netlink: 5 bytes leftover after parsing attributes in process `syz.9.4412'. [ 1645.336727][T21357] 1{X功: renamed from 30{X功 (while UP) [ 1645.422963][T21357] A link change request failed with some changes committed already. Interface 31{X功 may have been left with an inconsistent configuration, please check. [ 1646.780384][T21385] netlink: 300 bytes leftover after parsing attributes in process `syz.3.4420'. [ 1647.406720][T21399] netlink: 5 bytes leftover after parsing attributes in process `syz.3.4424'. [ 1647.416809][T21399] 0{X功: renamed from gretap0 (while UP) [ 1647.475394][T21399] 0{X功: entered allmulticast mode [ 1647.483207][T21399] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 1648.520687][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1648.528895][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1648.838095][ T4013] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1648.846829][ T4013] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1649.636356][T21440] netlink: 300 bytes leftover after parsing attributes in process `syz.4.4433'. [ 1650.720562][T21451] bridge0: port 2(bridge_slave_1) entered disabled state [ 1650.788879][ T5811] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1650.808023][ T5811] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1650.818036][ T5811] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1650.840220][ T5811] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1650.854693][ T5811] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1650.949811][T21461] lo speed is unknown, defaulting to 1000 [ 1652.375633][T21472] lo speed is unknown, defaulting to 1000 [ 1652.915621][ T5816] Bluetooth: hci2: command tx timeout [ 1653.158606][T21484] sctp: [Deprecated]: syz.1.4446 (pid 21484) Use of int in max_burst socket option deprecated. [ 1653.158606][T21484] Use struct sctp_assoc_value instead [ 1653.709790][T21461] chnl_net:caif_netlink_parms(): no params data found [ 1653.821560][T21497] netlink: 300 bytes leftover after parsing attributes in process `syz.6.4448'. [ 1654.058626][ T7842] bridge_slave_1: left allmulticast mode [ 1654.065172][ T7842] bridge_slave_1: left promiscuous mode [ 1654.071738][ T7842] bridge0: port 2(bridge_slave_1) entered disabled state [ 1654.248536][T21502] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 1654.264190][T21502] overlayfs: overlapping lowerdir path [ 1654.338937][ T7842] bridge_slave_0: left allmulticast mode [ 1654.345119][ T7842] bridge_slave_0: left promiscuous mode [ 1654.351707][ T7842] bridge0: port 1(bridge_slave_0) entered disabled state [ 1654.759075][ T7842] bond0 (unregistering): (slave veth3): Releasing active interface [ 1654.775826][ T7842] bond0 (unregistering): Released all slaves [ 1654.804987][T21506] fuse: Bad value for 'fd' [ 1654.805347][ T7842] bond1 (unregistering): Released all slaves [ 1654.833753][ T7842] bond2 (unregistering): Released all slaves [ 1654.981225][ T5816] Bluetooth: hci2: command tx timeout [ 1655.292021][ T7842] tipc: Left network mode [ 1656.299624][ T7842] hsr_slave_0: left promiscuous mode [ 1656.331516][ T7842] hsr_slave_1: left promiscuous mode [ 1656.339511][ T7842] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1656.380196][ T7842] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1656.575369][T21532] loop4: detected capacity change from 0 to 1024 [ 1656.727012][T21532] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1657.017831][ T7842] team0 (unregistering): Port device team_slave_1 removed [ 1657.060404][ T5816] Bluetooth: hci2: command tx timeout [ 1657.194725][ T7842] team0 (unregistering): Port device team_slave_0 removed [ 1657.445559][T21547] netlink: 300 bytes leftover after parsing attributes in process `syz.6.4461'. [ 1657.462748][ T61] smc: removing ib device syz+ [ 1657.847057][T19307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1658.783129][T21461] bridge0: port 1(bridge_slave_0) entered blocking state [ 1658.790790][T21461] bridge0: port 1(bridge_slave_0) entered disabled state [ 1658.800834][T21461] bridge_slave_0: entered allmulticast mode [ 1658.810108][T21461] bridge_slave_0: entered promiscuous mode [ 1658.942334][T21461] bridge0: port 2(bridge_slave_1) entered blocking state [ 1658.949971][T21461] bridge0: port 2(bridge_slave_1) entered disabled state [ 1658.957724][T21461] bridge_slave_1: entered allmulticast mode [ 1658.967031][T21461] bridge_slave_1: entered promiscuous mode [ 1659.249948][ T5816] Bluetooth: hci2: command tx timeout [ 1660.675485][T21461] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1660.738304][T21461] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1660.934731][T21461] team0: Port device team_slave_0 added [ 1661.008354][T21461] team0: Port device team_slave_1 added [ 1661.038974][T21584] loop1: detected capacity change from 0 to 512 [ 1661.218070][T21584] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.4472: casefold flag without casefold feature [ 1661.227410][T21461] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1661.238074][T21461] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1661.242168][T21584] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.4472: couldn't read orphan inode 15 (err -117) [ 1661.267003][T21461] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1661.324328][T21584] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1661.341169][T21461] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1661.348514][T21461] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1661.374982][T21461] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1661.395035][T21595] netlink: 300 bytes leftover after parsing attributes in process `syz.3.4474'. [ 1661.862641][T21096] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1661.999533][T21461] hsr_slave_0: entered promiscuous mode [ 1662.009498][T21461] hsr_slave_1: entered promiscuous mode [ 1662.017923][T21461] debugfs: 'hsr0' already exists in 'hsr' [ 1662.025098][T21461] Cannot create hsr debugfs directory [ 1662.967402][T21619] loop4: detected capacity change from 0 to 1024 [ 1663.128098][T21619] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1663.335163][ T30] audit: type=1800 audit(1755749896.081:1291): pid=21619 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4483" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 1663.447750][T21632] netlink: 300 bytes leftover after parsing attributes in process `syz.6.4485'. [ 1663.707858][ T30] audit: type=1800 audit(1755749896.461:1292): pid=21631 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4483" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 1663.898861][T21461] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1663.976417][T21461] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1664.067249][T21461] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1664.134881][T21461] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1664.208277][T19307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1664.971058][T21651] loop4: detected capacity change from 0 to 512 [ 1665.239100][T21651] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.4489: bad orphan inode 11862016 [ 1665.328172][T21651] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1665.341556][T21651] ext4 filesystem being mounted at /143/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1665.517982][T21461] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1665.710664][T21461] 8021q: adding VLAN 0 to HW filter on device team0 [ 1665.825560][ T4416] bridge0: port 1(bridge_slave_0) entered blocking state [ 1665.833239][ T4416] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1665.913929][ T4416] bridge0: port 2(bridge_slave_1) entered blocking state [ 1665.921535][ T4416] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1666.064570][T19307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1666.277988][T21677] fuse: Bad value for 'fd' [ 1666.465808][T21688] netlink: 300 bytes leftover after parsing attributes in process `syz.1.4496'. [ 1667.848894][T21711] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4504'. [ 1668.173772][T21461] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1670.520006][T21759] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4515'. [ 1670.562677][T21758] overlayfs: failed to clone upperpath [ 1670.681340][T21461] veth0_vlan: entered promiscuous mode [ 1670.778922][T21461] veth1_vlan: entered promiscuous mode [ 1671.027145][T21461] veth0_macvtap: entered promiscuous mode [ 1671.082625][T21461] veth1_macvtap: entered promiscuous mode [ 1671.283035][T21461] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1671.375267][T21461] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1671.472991][ T3602] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1671.485447][ T3602] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1671.498652][ T3602] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1671.582900][ T14] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1673.378344][T21806] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4527'. [ 1673.900019][T21816] loop4: detected capacity change from 0 to 128 [ 1675.160532][T21836] overlayfs: failed to resolve './bus': -2 [ 1676.086506][T21857] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4539'. [ 1676.301652][T21862] overlayfs: missing 'lowerdir' [ 1676.467527][T21857] bridge0: port 2(bridge_slave_1) entered disabled state [ 1677.319878][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1677.327902][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1677.553118][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1677.563947][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1677.628982][T21881] overlayfs: failed to resolve './bus': -2 [ 1677.784751][T21885] netlink: 'syz.1.4546': attribute type 13 has an invalid length. [ 1677.793094][T21885] netlink: 'syz.1.4546': attribute type 17 has an invalid length. [ 1678.404291][T21885] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1678.989689][T21901] overlayfs: missing 'lowerdir' [ 1679.127147][T21895] loop9: detected capacity change from 0 to 4096 [ 1679.336932][T21895] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1679.683999][T21461] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1679.905993][T21922] overlayfs: failed to resolve './bus': -2 [ 1680.173735][T21925] overlayfs: failed to clone upperpath [ 1680.283159][T21929] netlink: 'syz.1.4561': attribute type 13 has an invalid length. [ 1680.292838][T21929] netlink: 'syz.1.4561': attribute type 17 has an invalid length. [ 1680.350174][T21929] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1680.863947][T21946] loop1: detected capacity change from 0 to 128 [ 1681.082026][T21951] overlayfs: missing 'lowerdir' [ 1681.972923][T21964] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4571'. [ 1681.993840][T21962] fuse: Bad value for 'fd' [ 1682.075925][T21966] overlayfs: failed to resolve './bus': -2 [ 1682.671360][T21974] netlink: 'syz.3.4575': attribute type 13 has an invalid length. [ 1682.684239][T21974] netlink: 'syz.3.4575': attribute type 17 has an invalid length. [ 1682.706192][T21974] 0{X功: left allmulticast mode [ 1682.832795][T21979] overlayfs: missing 'lowerdir' [ 1683.291336][T21974] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1683.332367][T21987] netlink: 96 bytes leftover after parsing attributes in process `syz.9.4580'. [ 1683.901059][T22000] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4584'. [ 1684.046513][ T30] audit: type=1326 audit(1755749916.771:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21997 comm="syz.9.4585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f730098ebe9 code=0x7ffc0000 [ 1684.073466][ T30] audit: type=1326 audit(1755749916.781:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21997 comm="syz.9.4585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7f730098ebe9 code=0x7ffc0000 [ 1684.096470][ T30] audit: type=1326 audit(1755749916.781:1295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21997 comm="syz.9.4585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f730098ebe9 code=0x7ffc0000 [ 1684.122882][ T30] audit: type=1326 audit(1755749916.801:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21997 comm="syz.9.4585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f730098ebe9 code=0x7ffc0000 [ 1685.161788][T22025] overlayfs: failed to resolve './file0': -2 [ 1685.574443][T22033] netlink: 'syz.4.4593': attribute type 13 has an invalid length. [ 1685.582838][T22033] netlink: 'syz.4.4593': attribute type 17 has an invalid length. [ 1685.602661][T22033] 1{X功: left allmulticast mode [ 1685.696675][T22037] loop1: detected capacity change from 0 to 16 [ 1685.717079][T22037] erofs (device loop1): mounted with root inode @ nid 36. [ 1686.130215][T22033] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1686.249002][T22045] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4597'. [ 1686.756490][T22053] bridge_slave_0: left allmulticast mode [ 1686.762816][T22053] bridge_slave_0: left promiscuous mode [ 1686.769531][T22053] bridge0: port 1(bridge_slave_0) entered disabled state [ 1686.861906][T22053] bridge_slave_1: left allmulticast mode [ 1686.867770][T22053] bridge_slave_1: left promiscuous mode [ 1686.886719][T22053] bridge0: port 2(bridge_slave_1) entered disabled state [ 1686.959983][T22047] loop4: detected capacity change from 0 to 512 [ 1687.032175][T22053] bond0: (slave bond_slave_0): Releasing backup interface [ 1687.080940][T22053] bond0: (slave bond_slave_1): Releasing backup interface [ 1687.240248][T22053] team0: Port device team_slave_0 removed [ 1687.355429][T22053] team0: Port device team_slave_1 removed [ 1687.366099][T22053] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1687.373804][T22053] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1687.383093][T22062] overlayfs: failed to resolve './file0': -2 [ 1687.430149][T22053] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1687.437730][T22053] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1687.505251][T22065] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4605'. [ 1687.651951][T22056] vlan0: entered promiscuous mode [ 1687.682615][T22056] team0: Port device vlan0 added [ 1688.123090][T22070] loop4: detected capacity change from 0 to 16 [ 1688.148001][T22070] erofs (device loop4): mounted with root inode @ nid 36. [ 1688.381877][T22077] netlink: 'syz.3.4611': attribute type 13 has an invalid length. [ 1688.391074][T22077] netlink: 'syz.3.4611': attribute type 17 has an invalid length. [ 1688.487247][T22075] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1688.520524][T22077] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1688.522047][ T5859] IPVS: starting estimator thread 0... [ 1688.539024][T22080] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4612'. [ 1688.639945][T22081] IPVS: using max 240 ests per chain, 12000 per kthread [ 1689.026109][T22090] netlink: 48 bytes leftover after parsing attributes in process `syz.9.4617'. [ 1689.042662][T22085] loop1: detected capacity change from 0 to 512 [ 1689.478955][T22097] overlayfs: failed to clone upperpath [ 1689.814833][T22104] loop4: detected capacity change from 0 to 16 [ 1689.872845][T22104] erofs (device loop4): mounted with root inode @ nid 36. [ 1690.234874][T22114] netlink: 'syz.1.4626': attribute type 13 has an invalid length. [ 1690.243248][T22114] netlink: 'syz.1.4626': attribute type 17 has an invalid length. [ 1690.320272][T22114] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1690.368112][ T61] ===================================================== [ 1690.375579][ T61] BUG: KMSAN: uninit-value in nci_ntf_packet+0x2753/0x42b0 [ 1690.383306][ T61] nci_ntf_packet+0x2753/0x42b0 [ 1690.388360][ T61] nci_rx_work+0x403/0x750 [ 1690.393295][ T61] process_scheduled_works+0xb8e/0x1d80 [ 1690.399049][ T61] worker_thread+0xedf/0x1590 [ 1690.404084][ T61] kthread+0xd59/0xf00 [ 1690.408302][ T61] ret_from_fork+0x1e3/0x310 [ 1690.413366][ T61] ret_from_fork_asm+0x1a/0x30 [ 1690.418341][ T61] [ 1690.420855][ T61] Uninit was created at: [ 1690.425347][ T61] kmem_cache_alloc_node_noprof+0x818/0xf00 [ 1690.431568][ T61] kmalloc_reserve+0x13c/0x4b0 [ 1690.436499][ T61] __alloc_skb+0x347/0x7d0 [ 1690.441209][ T61] virtual_ncidev_write+0x6b/0x430 [ 1690.446476][ T61] vfs_write+0x48a/0x15d0 [ 1690.451140][ T61] __x64_sys_write+0x1fb/0x4d0 [ 1690.456086][ T61] x64_sys_call+0x3014/0x3e20 [ 1690.464752][ T61] do_syscall_64+0xd9/0x210 [ 1690.470866][ T61] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1690.476933][ T61] [ 1690.479481][ T61] CPU: 1 UID: 0 PID: 61 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(none) [ 1690.488909][ T61] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1690.499362][ T61] Workqueue: nfc2_nci_rx_wq nci_rx_work [ 1690.505102][ T61] ===================================================== [ 1690.512277][ T61] Disabling lock debugging due to kernel taint [ 1690.518526][ T61] Kernel panic - not syncing: kmsan.panic set ... [ 1690.525069][ T61] CPU: 1 UID: 0 PID: 61 Comm: kworker/u8:5 Tainted: G B syzkaller #0 PREEMPT(none) [ 1690.536112][ T61] Tainted: [B]=BAD_PAGE [ 1690.540356][ T61] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1690.550544][ T61] Workqueue: nfc2_nci_rx_wq nci_rx_work [ 1690.556317][ T61] Call Trace: [ 1690.559698][ T61] [ 1690.562715][ T61] __dump_stack+0x26/0x30 [ 1690.567233][ T61] dump_stack_lvl+0x53/0x270 [ 1690.572003][ T61] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1690.578003][ T61] dump_stack+0x1e/0x25 [ 1690.582324][ T61] vpanic+0x361/0xc50 [ 1690.586482][ T61] panic+0x15d/0x160 [ 1690.590577][ T61] kmsan_report+0x31c/0x320 [ 1690.595237][ T61] ? kmsan_get_metadata+0xfb/0x160 [ 1690.600516][ T61] ? __msan_warning+0x1b/0x30 [ 1690.605333][ T61] ? nci_ntf_packet+0x2753/0x42b0 [ 1690.610557][ T61] ? nci_rx_work+0x403/0x750 [ 1690.615320][ T61] ? process_scheduled_works+0xb8e/0x1d80 [ 1690.621229][ T61] ? worker_thread+0xedf/0x1590 [ 1690.626267][ T61] ? kthread+0xd59/0xf00 [ 1690.630649][ T61] ? ret_from_fork+0x1e3/0x310 [ 1690.635559][ T61] ? ret_from_fork_asm+0x1a/0x30 [ 1690.640681][ T61] ? ret_from_fork_asm+0x1a/0x30 [ 1690.645802][ T61] ? kmsan_get_metadata+0xfb/0x160 [ 1690.651075][ T61] ? kmsan_get_metadata+0xfb/0x160 [ 1690.656405][ T61] ? kmsan_get_metadata+0xfb/0x160 [ 1690.661681][ T61] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1690.668179][ T61] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1690.674466][ T61] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 1690.680527][ T61] ? stack_depot_save_flags+0x615/0x7b0 [ 1690.686278][ T61] ? kmsan_get_metadata+0xfb/0x160 [ 1690.691551][ T61] ? kmsan_internal_memmove_metadata+0x181/0x230 [ 1690.698047][ T61] ? kmsan_get_metadata+0xfb/0x160 [ 1690.703340][ T61] __msan_warning+0x1b/0x30 [ 1690.707984][ T61] nci_ntf_packet+0x2753/0x42b0 [ 1690.713021][ T61] ? __pfx_kmsan_internal_unpoison_memory+0x10/0x10 [ 1690.719876][ T61] nci_rx_work+0x403/0x750 [ 1690.724489][ T61] ? __pfx_nci_rx_work+0x10/0x10 [ 1690.729611][ T61] process_scheduled_works+0xb8e/0x1d80 [ 1690.735411][ T61] worker_thread+0xedf/0x1590 [ 1690.740321][ T61] kthread+0xd59/0xf00 [ 1690.744521][ T61] ? __pfx_worker_thread+0x10/0x10 [ 1690.749836][ T61] ? __pfx_kthread+0x10/0x10 [ 1690.754577][ T61] ret_from_fork+0x1e3/0x310 [ 1690.759310][ T61] ? __pfx_kthread+0x10/0x10 [ 1690.764052][ T61] ret_from_fork_asm+0x1a/0x30 [ 1690.769032][ T61] [ 1690.772439][ T61] Kernel Offset: disabled [ 1690.776808][ T61] Rebooting in 86400 seconds..