last executing test programs: 16m36.082922315s ago: executing program 2 (id=397): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000480)={[{@grpid}, {@noacl}, {@nodioread_nolock}, {@dioread_lock}, {@stripe}, {@init_itable}, {@grpjquota_path={'grpjquota', 0x3d, '\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/'}}, {@orlov}, {@nouser_xattr}]}, 0x1, 0xbd0, &(0x7f0000002380)="$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") openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0xffffffffffffffe2, &(0x7f0000000300)=0x20000002) sched_setscheduler(r0, 0x2, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000005c0), 0x651, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$sock_linger(r3, 0x1, 0x3d, &(0x7f0000000140), 0x8) sendmmsg$sock(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@txtime={{0x14}}], 0x14}}], 0x1, 0x20000000) r4 = fsopen(&(0x7f0000000640)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x80) r6 = openat$cgroup_procs(r5, &(0x7f0000000680)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000006c0), 0x12) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)={0xc8, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1000001}, @CTA_NAT_SRC={0x34, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @rand_addr=' \x01\x00'}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @rand_addr=0x64010100}]}]}, 0xc8}}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a00000008000000ff0f000007"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={&(0x7f0000000280), 0x0, 0x0, 0x0, 0x5, r8}, 0x38) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000700)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000740), 0x208e24b) 16m35.830988712s ago: executing program 0 (id=400): socket$nl_generic(0x10, 0x3, 0x10) lgetxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@known='system.posix_acl_access\x00', &(0x7f0000000180)=""/163, 0xa3) r0 = fsopen(&(0x7f0000000500)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000005c0)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000600)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000640)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000680)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000700)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000780), 0x318, 0x0) recvmmsg(r2, &(0x7f00000007c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000800)=0x100000000e2) r4 = syz_io_uring_setup(0x141c, &(0x7f0000000840)={0x0, 0x2af2, 0x1, 0x1, 0x139}, &(0x7f00000008c0), &(0x7f0000000900), &(0x7f0000000940)) io_uring_setup(0x168f, &(0x7f0000000980)={0x0, 0x631d, 0x2, 0x2, 0x2d8}) io_uring_enter(r4, 0x4118, 0x9bbf, 0x8, 0x0, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) keyctl$clear(0x3, 0xfffffffffffffffd) ptrace$ARCH_MAP_VDSO_64(0x1e, r1, 0x7, 0x2003) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000a00)=0x8, 0x1) syz_mount_image$exfat(&(0x7f0000000a40), &(0x7f0000000a80)='./file1\x00', 0x40, &(0x7f0000000ac0)=ANY=[], 0x1, 0x14fe, &(0x7f0000000b00)="$eJzs3AuYjlXXOPC99t43Y5r0NMlh2GuvmycNtkmSHBJySJIkSXJKSJokSUgMOSUNSchxkhyGkBymMWmcz4eckyavNEkSEhL2/9J78L5v7/f1ff/e/993fbN+17Wv2WvuZ61n3bPmmue+n+ua57ueo+q1qF+7GRGJPwT+/CVFCBEjhBgmhLhOCBEIISrFV4q/fLyAgpQ/9iTs3+vh9KvdAbuaeP55G88/b+P55208/7yN55+38fzzNp5/3sbzZywv2z6n2PW88u7i9//zMn79/18kt/zkrzaWv7HXfyOF55+38fzzNp5/3sbzz9t4/nkbz/9/v1r/yTGef97G82csL9sOWoj/Ae9D87o662r//jHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYyxvO+Su0EOKv+6vdF2OMMcYYY4wxxv59fP6r3QFjjDHGGGOMMcb+3wMhhRJaBCKfyC9iRAERK64RceJaUVBcJyLiehEvbhCFxI2isCgiiopiIkEUFyWEESisIBGKkqKUiIqbRGlxs0gUZURZUU44UV4kiVtEBXGrqChuE5XE7aKyuENUEVVFNVFd3ClqiLtETVFL1BZ3izqirqgn6ot7RANxr2go7hONxP2isXhANBEPiqbiIdFMPCyai0dEC/GoaCkeE61Ea9FGtBXt/q/yXxJ9xcuin+gvUsQAMVC8IgaJwWKIGCqGiVfFcPGaGCFeF6lipBgl3hCjxZtijHhLjBXjxHjxtpggJopJYrKYIqaKNPGOmCbeFdPFe2KGmClmidkiXcwRc8X7Yp6YLxaID8RC8aFYJBaLJWKpyBAfiUyxTGSJj8Vy8YnIFivESrFKrBZrxFqxTqwXG8RGsUlsFlvEVrFNbBefih1ip9gldos9Yq/YJz4T+8Xn4oD4QuSIL/+b+Wf/Kb8XCBAgQYIGDfkgH8RADMRCLMRBHBSEghCBCMRDPBSCQlAYCkNRKAoJkAAloAQgIBAQlISSEIUolIbSkAiJUBbKggMHSZAEFeBWqAgVoRJUgspQGapAVagK1aE61IAaUBNqQm2oDXWgDtSDenAP3AP3QkNoCI2gETSGxtAEmkBTaArNoBk0h+bQAlpAS2gJraAVtIE20A7aQXtoDx2gA3SCTtAZOkMX6ALJkAxdoSt0g27QHbpDD+gBPaEn9ILe0BtegpfgZXgZ+kMdOQAGwkAYBINgCAyFofAqDIfX4DV4HVJhJIyCN+ANeBPGwBkYC+NgPIyHGnIiTILJQHIqpEEaTINpMB2mwwyYCTNhNqTDHJgLc2EezIf58AEshA/hQ1gMi2EpZEAGZMIyyIIsWA5nIRtWwEpYBathDayGdbAe1sFG2AQbYQtsgW2wDT6FT2En7ITdsBv2wl74DD6Dz+FzSIUcyIGDcBAOwSE4DIchF3LhCByBo3AUjsExOA7H4QSchFNwEk7DaTgDZ+EcnIPzcB4uwAsJ3zTfW2ZDqpCXaallPplPxsgYGStjZZyMkwVlQRmRERkv42UhWUgWloVlUVlUJsgEWUKWkChRkgxlSVlSRmVUlpalZaJMlGVlWemkk0kySVaQFWRFWVFWkrfLyvIOWUVWlR1ddVld1pCdXE1ZS9aWtWUdWVfWk/VlfdlANpANZUPZSDaSjWVj2UQ+KJvKATAEHpaXJ9NCjoSWchS0kq1lG9lWvgmPy/ZyDHSQHWUn+aQcB2Ohi2zvkuUzsqucBN3kc3IyPC97yKnQU74oe8neso98SfaVHVw/2V/OgAFyoJwNg+RgOUQOlfOgrrw8sXrydZkqR8pR8g25FN6UY+RbcqwcJ8fLt+UEOVFOkpPlFDlVpsl35DT5rpwu35Mz5Ew5S86W6XKOnCvfl/PkfLlAfiAXyg/lIrlYLpFLZYb8SGbKZTJLfiyXy09ktlwhV8pVcrVcI9fKdXK93CA3yk1ys9wit8ptcrv8VO6QO+UuuVvukXvlPvmZ3C8/lwfkFzJHfikPyj/JQ/IreVh+LXPlN/KI/FYeld/JY/J7eVz+IE/Ik/KU/FGelj/JM/KsPCd/luflL/KCvCgvSS+FAiWVUloFKp/Kr2JUARWrrlFx6lpVUF2nIup6Fa9uUIXUjaqwKqKKqmIqQRVXJZRRqKwiFaqSqpSKqptUaXWzSlRlVFlVTjlVXiWpW1QFdauqqG5TldTtqrK6Q1VRVVU1VV3dqWqou1RNVUvVVnerOqquqqfqq3tUA3WvaqjuU43U/aqxekA1UQ+qpuoh1Uw9rJqrR1QL9ahqqR5TrVRr1Ua1Ve3U46q9ekJ1UB1VJ/Wk6qyeUl3U0ypZPaO6qmdVN/Wc6q6eVz3UC6qnelH1Ur1VH3VRXVJe9VP9VYoaoAaqV9QgNVgNUUPVMPWqGq5eUyPU6ypVjVSj1BtqtHpTjVFvqbFqnBqv3lYT1EQ1SU1WU9RUlabeUdPUu2q6ek/NUDPVLDVbpas5ashfKi34L+S/+y/yR/z67NvUdvWp2qF2ql1qt9qj9qp9ap/ar/arA+qAylE56qA6qA6pQ+qwOqxyVa46oo6oo+qoOqaOqePquDqhTqqf1Y/qtPpJnVFn1Vn1szqvzqsLf/kZCA1aaqW1DnQ+nV/H6AI6Vl+j4/S1uqC+Tkf09Tpe36AL6Rt1YV1EF9XFdIIurktoo1FbTTrUJXUpHdU36dL6Zp2oy+iyupx2urxO0rf84fzf66+dbqfb6/a6g+6gO+lOurPurLvoLjpZJ+uuuqvuprvp7rq77qF76J66p+6le+k+uo/uq/vqfrqfTtEpeqB+RQ/Sg/UQPVQP06/q4Xq4HqFH6FSdqkfpUXq0Hq3H6DF6rB6rx+vxeoKeoCfpSXqKnqLTdJqepqfp6Xq6nqFn6Fl6lk7X6Xqunqvn6Xl6gV6gF+qFepFepJfoJTpDZ+hMnamzdJZerpfrbL1Cr9Cr9Cq9Rq/R6/Q6vUFv0Jv0Jr1Fb9HZervernfoHXqX3qX36D16n96n9+v9+oA+oHN0jj6oD+pD+pA+rA/rXJ2rj+gj+qg+qo/pY/q4Pq5P6BP6lD6lT+vT+ow+o8/pc/q8Pq8v6Av6kr50+bIvkIEMdKCDfEG+ICaICWKD2CAuiAsKBgWDSBAJ4oP4oFBwY1A4KBIUDYoFCUHxoERgAgxsQEEYlAxKBdHgpqB0cHOQGJQJygblAheUD5KCW4IKwa1BxeC2oFJwe1A5uCOoUkAE1YLqwZ1BjeCuoGZQK6gd3B3UCeoG9YL6wT1Bg+DeoGFwX9AouD9oHDwQNAkeDJoGDwXNgoeD5sEjQYvg0aBl8FjQKmgdtAnaBu3+uX5Q9Q/U9/5MkSdcP9PfpJgBZqB5xQwyg80QM9QMM6+a4eY1M8K8blLNSDPKvGFGmzfNGPOWGWvGmfHmbTPBTDSTzGQzxUw1aeYdM828a6ab98wMM9PMMrNNuplj5pr3zTwz3ywwH5iF5kOzyCw2S8xSk2E+MplmmckyH5vl5hOTbVaYlWaVWW3WmLVmnVlvNpiNZpPZbLaYrWab2W4+NTvMTrPL7DZ7zF6zz3xm9pvPzQHzhckxX5qD5k/mkPnKHDZfm1zzjTlivjVHzXfmmPneHDc/mBPmpDllfjSnzU/mjDlrzpmfzXnzi7lgLppLxl++uL/88o4aNebDfBiDMRiLsRiHcVgQC2IEIxiP8VgIC2FhLIxFsSgmYAKWwBJ4GSFhSSyJUYxiaSyNiZiIZbEsOnSYhElYAStgRayIlbASVsbKWAWrYDWshnfinXgX3oW1sBbejXdjXayL9bE+NsAG2BAbYiNshI2xMTbBJtgUm2IzbIbNsTm2wBbYEltiK2yFbbANtsN22B7bYwfsgJ2wE3bGztgFu2AyJmNX7IrdsBt2x+7YA3tgT+yJvbAX9sE+2Bf7Yj/shymYggNxIA7CQTgEh+AwHIbDcTiOwBGYiqk4CkfhaByNY3AMjsVxOB7fxgk4ESfhZJyCUzEN03AaTsPpOB1n4AychbMwHdNxLs7FeTgPF+ACXIgLcREuwiW4BDMwAzMxE7MwC5fjcszGbFyJK3E1rsa1uBbX43rciBtxM27GrbgVt+N23IE7cBfuwj24B/fhPtyP+/EAHsAczMGDeBAP4SE8jIcxF3PxCB7Bo3gUj+ExPI7H8QSewFN4Ck/jaTyDZ/AcnsPz+AtewIt4CT3GWCli7TU2zl5rC9rrbIwtYP8+LmqL2QRb3Jawxha2Rf4hRmttoi1jy9py1tnyNsne8pu4iq1qq9nq9k5bw95la/4mbmDvtQ3tfbaRvd/Wt/f8Q9zYPmCb2EdtU/uYbWZb2+a2rW1hH7Ut7WO2lW1t29i2trN9ynaxT9tk+4ztap/9TZxpl9n1doPdaDfZ/fZze87+bI/a7+x5+4vtZ/vbYfZVO9y+ZkfY122qHfmbeLx9206wE+0kO9lOsVN/E8+ys226nWPn2vftPDv/N3GG/cgutFl2kV1sl9ilv8aXe8qyH9vl9hObbVfYlXaVXW3X2LV23d96XWW32K12m91nP7M77E67y+62e+zeX+PL53HAfmFz7Jf2iP3WHrJf2cP2mM213/waXz6/Y/Z7e9z+YE/Yk/aU/dGetj/ZM/bsr+d/+dx/tBftJeutICBJijQFlI/yUwwVoFi6huLoWipI11GErqd4uoEK0Y1UmIpQUSpGCVScSpAhJEtEIZWkUhSlm6g03UyJVIbKUjlyVJ6S6BaqQLdSRbqNKtHtVJnuoCpUlapRdbqTatBdVJNqUW26m+pQXapH9ekeakD3UkO6jxrR/dSYHqAm9CA1pYeoGT1MzekRakGPUkt6jFpRa2pDbakdPU7t6QnqQB2pEz1Jnekp6kJPUzI9Q13pWepGz1F3ep560AvUk16kXtSb+tBL1Jdepn7Un1JoAA2kV2gQDaYhNJSG0as0nF6jEfQ6pdJIGkVv0Gh6k8bQWzSWxtF4epsm0ESaRJNpCk2lNHqHptG7NJ3eoxk0k2bRbEqnOTSX3qd5NJ8W0Ae0kD6kRbSYltBSyqCPKJOWURZ9TMvpE8qmFbSSVtFqWkNraR2tpw20kTbRZtpCW2kbbadPaQftpF20m/bQXtpHn9F++pwO0BeUQ1/SQfoTHaKv6DB9Tbn0DR2hb+kofUfH6Hs6Tj/QCTpJp+hHOk0/0Rk6S+foZzpPv9AFukiXyJMIIZShCnUYhPnC/GFMWCCMDa8J48Jrw4LhdWEkvD6MD28IC4U3hoXDImHRsFiYEBYPS4QmxNCGFIZhybBUGA1vCkuHN4eJYZmwbFgudGH5MCm8JawQ3hpWDG8LK4W3h5XDO8IqYdXw0furh3eGNcK7wpphrbB2eHdYJ6wb1gvrh/eEDcJ7w4bhfWGj8P6wYvhA2CR8MGwaPhQ2Cx8Om4ePhC3CR8OW4WNhq7B12CZsG7YLHw/bh0+EHcKOYafwybBz+FTYJXw6TA6fCbuGz/7u8ZRwQDgwfCV8JfT+PrUkujSaEf0omhldFs2KfhxdHv0kmh1dEV0ZXRVdHV0TXRtdF10f3RDdGN0U3RzdEt0a3Rb1vn5+4cBJp5x2gcvn8rsYV8DFumtcnLvWFXTXuYi73sW7G1whd6Mr7Iq4oq6YS3DFXQlnHDrryIWupCvlou4mV9rd7BJdGVfWlXPOlXdJrq1r59q59u4J18F1dJ3ck+5J95R7yj3tnnbPuK7uWdfNPee6u+ddD/eCe8G96Hq53q6Pe8n1dS+7fq6/S3EpbqAb6Aa5QW6IG+KGuWFuuBvuRrgRLtWlulFulBvtRrsxbowb68a68W68m+AmuElukpviprg0l+amuWluupvuZrgZbpab5dJdupvr5rp5bp5b4Ba4hYkL3SK3yC1xS1yGy3CZLtNluSy33C132S7brXQr3Wq32q11a916t95tdBvdZrfZbXVb3Xa33e1wO9wut8vtcXvcPrfP7Xf73QF3wOW4HHfQHXSH3CF32H3tct037oj71h1137lj7nt33P3gTriT7pT70Z12P7kz7qw75352590v7oK76C4579Ii70SmRd6NTI+8F5kRmRmZFZkdSY/MicyNvB+ZF5kfWRD5ILIw8mFkUWRxZElkaSQj8lEkM7IskhX5OLI88kkkO7IisjKyKrI6sibiffEdoS/pS/mov8mX9jf7RF/Gl/XlvPPlfZK/xVfwt/qK/jZfyd/uK/s7fBVf1Vfzj/lWvrVv49v6dv5x394/4Tv4jr6Tf9J39k/5Lv5pn+yf8V39s76bf85398/7Hv4F39O/6Hv53r6Pf8n39S/7fr6/T/ED/ED/ih/kB/shfqgf5l/1w/1rfoR/3af6kX6Uf8OP9m/6Mf4tP9aP8+P9236Cn+gn+cl+ip/q0/w7fpp/10/37/kZfqaf5Wf7dD/Hz/Xv+3l+vl/gP/AL/Yd+kV/sl/ilPsN/5DP9Mp/lP/bL/Sc+26/wK/0qv9qv8Wv9Or/eb/Ab/Sa/2W/xW/02v91/6nf4nX6X3+33+L1+n//M7/ef+wP+C5/jv/QH/Z/8If+VP+y/9rn+G3/Ef+uP+u/8Mf+9P+5/8Cf8SX/K/+hP+5/8GX/Wn/M/+/P+F3/BX/SX+H/WGGOMMcb+S9TvHB/wL74n/7IuGyiEuHZnsdx/rrm58J/3g2VC54gQ4pn+PR/+66pTJyUl5S+PzVYiKLVYCBG5kp9PXIlXiE7iKZEsOooK/7K/wbL3efqd+tHbhYj9W+dCxIi/xn9f/9b/oP7jT47PrByei/9P6i8WIrHUlZwC4kp8pX7F/6B+kfa/03+Br9KE6PB3OXHiSnylfpJ4Qjwrkv/hkYwxxhhjjDHG2J8NltW6/9798+X78wR9JSe/uBL/3v05Y4wxxhhjjDHGrr7ne/d5+vHk5I7decMb3vDmb5ur/ZeJMcYYY4wx9u925aL/anfCGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4zlXf8/Pk7sap8jY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxdrX9nwAAAP//JhA6YA==") r5 = open(&(0x7f0000002000)='./file1\x00', 0x145142, 0x0) sendfile(r5, r5, 0x0, 0x7a680000) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) unshare(0x64000400) socket$nl_route(0x10, 0x3, 0x0) fsmount(r0, 0x0, 0xa) 16m34.894039364s ago: executing program 0 (id=401): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000480)={[{@grpid}, {@noacl}, {@nodioread_nolock}, {@dioread_lock}, {@stripe}, {@init_itable}, {@grpjquota_path={'grpjquota', 0x3d, '\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/'}}, {@orlov}, {@nouser_xattr}]}, 0x1, 0xbd0, &(0x7f0000002380)="$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") openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0xffffffffffffffe2, &(0x7f0000000300)=0x20000002) sched_setscheduler(r0, 0x2, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000005c0), 0x651, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$sock_linger(r3, 0x1, 0x3d, &(0x7f0000000140), 0x8) sendmmsg$sock(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@txtime={{0x14}}], 0x14}}], 0x1, 0x20000000) recvmmsg(r1, &(0x7f0000000600), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000640)='cgroup2\x00', 0x0) r5 = fsmount(r4, 0x0, 0x80) r6 = openat$cgroup_procs(r5, &(0x7f0000000680)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000006c0), 0x12) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)={0xc8, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1000001}, @CTA_NAT_SRC={0x34, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @rand_addr=' \x01\x00'}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @rand_addr=0x64010100}]}]}, 0xc8}}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a00000008000000ff0f000007"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={&(0x7f0000000280), 0x0, 0x0, 0x0, 0x5, r8}, 0x38) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000700)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000740), 0x208e24b) 16m34.603473331s ago: executing program 2 (id=405): mount(0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffdfe) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000040)=r1) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={'syzkaller1\x00', 0xc201}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x1, r1}) mmap$IORING_OFF_SQ_RING(0x0, 0xc, 0x1, 0x1010, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x1, 0x1, 0x0, 0x0, 0x0, 0x60000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000180)=0x1) 16m33.461559449s ago: executing program 2 (id=409): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000bc0)='mounts\x00') capset(&(0x7f00000007c0)={0x20080522}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000d80)={0xa, 0x4e24, 0x0, @loopback, 0x800000e}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000dc0)={0x200000000000001}, 0x8) sendmmsg$inet6(r0, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000e40), 0x171}}], 0x400000000000172, 0x4001c00) 16m32.869058023s ago: executing program 0 (id=410): ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, &(0x7f0000000700)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x87) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000019080)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setfsgid(0xee00) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r3 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r3, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)}}, {{0x0, 0x0, 0x0}}], 0x3, 0x1c000) syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') 16m32.867167283s ago: executing program 2 (id=411): r0 = socket(0x28, 0x80000, 0x5) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000240)={@local, @local}, 0x8) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x4810) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f00000002c0)='./file1\x00', 0x38880, &(0x7f0000000340)={[{@i_version}, {@journal_dev={'journal_dev', 0x3d, 0x3ff}}, {@barrier_val={'barrier', 0x3d, 0x4fa9}}, {@noload}]}, 0x1, 0x52d, &(0x7f0000000dc0)="$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") openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) epoll_create1(0x0) socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000005c0)=0x6) 16m31.546164614s ago: executing program 0 (id=414): pipe(0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000080)={[{@init_itable}]}, 0x1, 0x79f, &(0x7f0000000300)="$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") ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000ac0)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000b00)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000b40)=0x5) sched_setscheduler(r0, 0x1, &(0x7f0000000b80)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000c80)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000cc0)=@abs={0x0, 0x0, 0x80}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000d40), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000d80), 0x4000087, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000e40)='./file1\x00', 0x101042, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000001140)='./file0/../file0\x00', &(0x7f0000001180)={0x0, 0x0, 0x13}, 0x19) 16m29.074413924s ago: executing program 2 (id=417): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x2, 0x0, 0x40000}]}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x10000, &(0x7f0000000200), 0x1, 0x50a, &(0x7f0000000240)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000780)='cpuset.effective_mems\x00', 0x275a, 0x0) syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f0000000800)='./file1/file0\x00', 0xc, &(0x7f0000000840), 0x0, 0x55a, &(0x7f0000000880)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x9) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$netlink(r2, 0x10e, 0xc, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000f00), 0x208e24b) fdatasync(r1) ioctl$XFS_IOC_GOINGDOWN(r1, 0x8004587d, 0x0) ftruncate(r1, 0x1000) syz_open_procfs(0x0, 0x0) 16m26.490810736s ago: executing program 0 (id=419): syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x18808, 0x0, 0xf7, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() socket$inet6_tcp(0xa, 0x1, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RVERSION(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r4, 0x0, 0x40) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000bc0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@debug={'debug', 0x3d, 0xada3}}, {@noxattr}, {@posixacl}, {@loose}, {@access_client}, {@dfltgid}, {@cache_mmap}]}}) 16m25.167158277s ago: executing program 2 (id=424): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000003480)='net/netlink\x00') preadv(r3, &(0x7f0000003440)=[{&(0x7f0000000140)=""/245, 0xf5}, {&(0x7f0000000280)=""/185, 0xb9}, {0x0}], 0x3, 0x162, 0xb) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000100)={0x0, 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001a00010028bd70000000000002202000ff00000700020000080002007f01010008000100ac14143308000300"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0xea5bc50b6199d76e) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./sys\x00', 0x9e) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pnp/drivers/serial\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000001c0)='00:03', 0x5) 16m23.486328168s ago: executing program 0 (id=427): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000380), 0x318, 0x0) recvmmsg(r0, &(0x7f00000003c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./trace\x00', &(0x7f0000000500)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) write(r2, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./trace/trace\x00', 0x0, 0x0) read(r3, &(0x7f00000005c0), 0x1000) openat$binderfs(0xffffffffffffff9c, 0x0, 0x6, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f00000005c0)="580000001400add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee00000000000000000200", 0x57}], 0x1) 16m15.581541207s ago: executing program 3 (id=434): socket(0x400000000010, 0x3, 0x0) mount(0x0, &(0x7f0000000440)='./trace\x00', &(0x7f0000000480)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x169842, 0x0) writev(r0, &(0x7f0000000500)=[{&(0x7f0000000540)="2fadd796256c0c35461ef477d2bc829169ffbd39b2dfcecc49f72bcb1820d62a15ef1073b5084b252b0e36ba46c71df351c97a624d8ac94a6a911fd8cbc8edcb58fcae", 0x43}], 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xfffffdfe) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000040)=r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000600)={'syzkaller1\x00', 0xc201}) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f00000000c0)={0x1, r2}) 16m15.349312753s ago: executing program 3 (id=436): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1c0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x400008bf) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) syz_open_procfs$namespace(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000180)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000280), 0x318, 0x0) recvmmsg(r3, &(0x7f00000002c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000014c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r6, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)=@getchain={0x2c, 0x66, 0x400, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xc, 0xfff2}, {0xe, 0xe}, {0x0, 0xfff2}}, [{0x8, 0xb, 0xeb}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004004}, 0x0) setreuid(0xee00, 0x0) keyctl$join(0x1, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000002100050125bd70000000000002000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x28}}, 0x0) write$UHID_INPUT(r1, &(0x7f0000000400)={0xe, {"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", 0x942}}, 0x1006) 16m13.554721396s ago: executing program 3 (id=437): ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, &(0x7f0000000700)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x87) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000019080)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setfsgid(0xee00) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r3 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r3, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)}}, {{0x0, 0x0, 0x0}}], 0x3, 0x1c000) syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') 16m12.193891889s ago: executing program 3 (id=438): mount_setattr(0xffffffffffffffff, 0x0, 0x100, &(0x7f0000000080)={0x1, 0xe5e2162e76de3f9e, 0x80000}, 0x20) r0 = syz_open_dev$loop(&(0x7f0000000040), 0xffffffff80000001, 0x1680a2) fchmod(r0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xc, "2af01c3d0040fbffffffffffffff00"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000140)=0x13) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)) ioctl$TCSETS(r2, 0x5402, &(0x7f00000001c0)={0xff7f, 0x7, 0x0, 0x7ff7, 0xf, "68e086e2df361089000000000000000400"}) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CAP_HYPERV_SYNIC2(0xffffffffffffffff, 0x4068aea3, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC(0xffffffffffffffff, 0x4068aea3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) sched_setaffinity(0x0, 0x42, &(0x7f0000000280)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000002c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$MSR(&(0x7f0000000340), 0x2, 0x0) connect$unix(r4, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000400), 0x318, 0x0) recvmmsg(r4, &(0x7f0000000440), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000480)=0x2) bind$inet(0xffffffffffffffff, &(0x7f00000004c0)={0x2, 0x0, @local}, 0x16) connect$inet(0xffffffffffffffff, &(0x7f0000000500)={0x2, 0x4, @multicast2}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) sendmmsg(0xffffffffffffffff, &(0x7f0000000780), 0x800001d, 0x0) 16m10.430664971s ago: executing program 3 (id=439): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f0000000300), 0x0) 16m10.354282233s ago: executing program 3 (id=440): socket$nl_generic(0x10, 0x3, 0x10) lgetxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@known='system.posix_acl_access\x00', &(0x7f0000000180)=""/163, 0xa3) r0 = fsopen(&(0x7f0000000500)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000005c0)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000600)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000640)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000680)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000700)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000780), 0x318, 0x0) recvmmsg(r2, &(0x7f00000007c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000800)=0x100000000e2) r4 = syz_io_uring_setup(0x141c, &(0x7f0000000840)={0x0, 0x2af2, 0x1, 0x1, 0x139}, &(0x7f00000008c0), &(0x7f0000000900), &(0x7f0000000940)) io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, 0x0, 0x0) io_uring_enter(r4, 0x4118, 0x9bbf, 0x8, 0x0, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) keyctl$clear(0x3, 0xfffffffffffffffd) ptrace$ARCH_MAP_VDSO_64(0x1e, r1, 0x7, 0x2003) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000a00)=0x8, 0x1) syz_mount_image$exfat(&(0x7f0000000a40), &(0x7f0000000a80)='./file1\x00', 0x40, &(0x7f0000000ac0)=ANY=[], 0x1, 0x14fe, &(0x7f0000000b00)="$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") r5 = open(&(0x7f0000002000)='./file1\x00', 0x145142, 0x0) sendfile(r5, r5, 0x0, 0x7a680000) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) unshare(0x64000400) socket$nl_route(0x10, 0x3, 0x0) fsmount(r0, 0x0, 0xa) 16m9.329308807s ago: executing program 32 (id=424): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000003480)='net/netlink\x00') preadv(r3, &(0x7f0000003440)=[{&(0x7f0000000140)=""/245, 0xf5}, {&(0x7f0000000280)=""/185, 0xb9}, {0x0}], 0x3, 0x162, 0xb) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000100)={0x0, 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001a00010028bd70000000000002202000ff00000700020000080002007f01010008000100ac14143308000300"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0xea5bc50b6199d76e) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./sys\x00', 0x9e) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pnp/drivers/serial\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000001c0)='00:03', 0x5) 16m8.034870508s ago: executing program 33 (id=427): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000380), 0x318, 0x0) recvmmsg(r0, &(0x7f00000003c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./trace\x00', &(0x7f0000000500)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) write(r2, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./trace/trace\x00', 0x0, 0x0) read(r3, &(0x7f00000005c0), 0x1000) openat$binderfs(0xffffffffffffff9c, 0x0, 0x6, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f00000005c0)="580000001400add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee00000000000000000200", 0x57}], 0x1) 15m54.547163262s ago: executing program 34 (id=440): socket$nl_generic(0x10, 0x3, 0x10) lgetxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@known='system.posix_acl_access\x00', &(0x7f0000000180)=""/163, 0xa3) r0 = fsopen(&(0x7f0000000500)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000005c0)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000600)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000640)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000680)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000700)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000780), 0x318, 0x0) recvmmsg(r2, &(0x7f00000007c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000800)=0x100000000e2) r4 = syz_io_uring_setup(0x141c, &(0x7f0000000840)={0x0, 0x2af2, 0x1, 0x1, 0x139}, &(0x7f00000008c0), &(0x7f0000000900), &(0x7f0000000940)) io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, 0x0, 0x0) io_uring_enter(r4, 0x4118, 0x9bbf, 0x8, 0x0, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) keyctl$clear(0x3, 0xfffffffffffffffd) ptrace$ARCH_MAP_VDSO_64(0x1e, r1, 0x7, 0x2003) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000a00)=0x8, 0x1) syz_mount_image$exfat(&(0x7f0000000a40), &(0x7f0000000a80)='./file1\x00', 0x40, &(0x7f0000000ac0)=ANY=[], 0x1, 0x14fe, &(0x7f0000000b00)="$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") r5 = open(&(0x7f0000002000)='./file1\x00', 0x145142, 0x0) sendfile(r5, r5, 0x0, 0x7a680000) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) unshare(0x64000400) socket$nl_route(0x10, 0x3, 0x0) fsmount(r0, 0x0, 0xa) 14m18.355639169s ago: executing program 1 (id=772): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000180), 0x651, 0x0) recvmmsg(r1, &(0x7f00000001c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000180)=@ccm_128={{0x303}, "245f48edcb63b703", "32d8ea43b6bfb410c5913d8c904f3a01", "a2913283", "866c88900778f2a3"}, 0x28) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000020, &(0x7f00000001c0)=0xa, 0x1959cc36) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000005c0)='./sys\x00', &(0x7f0000000600)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./sys/class/net/bridge0/bridge/multicast_querier\x00', 0x2, 0xe) read$FUSE(r4, &(0x7f0000003280)={0x2020}, 0x2020) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) r6 = fanotify_init(0x8, 0x80000) fanotify_mark(r6, 0x10, 0x0, r5, 0x0) syz_mount_image$udf(&(0x7f00000002c0), &(0x7f00000004c0)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc11, &(0x7f0000002640)="$eJzs3V1oXOl5B/DnnSOtRto00WYTb9Jm04GUxCi18VdsBZcgZxW1AccbIit0r6LRh51h5ZGR5MabtkFtSQu9Cd2b0psimi4t5KJX3V5WabaQUAol5CK9KAiaLHvRC10ECi0bhXPmHWlky7ayXlvS7u+3zP7PnHnO+P0YnzkCvzoBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAER89nOXTp1OB90KAOBxujL5pVNnff8DwLvKVT//AwAAAAAAAAAAAADAYZeiiGORYujVzTRdPe+oX261b92eGp/Y+7DBFClqUVT15aN++szZc586f2G0m/c//u324Xh+8uqlxnOLN24uzS8vz881ptqt2cW5+X2/w8Mef6eRagAaN168NXft2nLjzMmzu16+Pfz6wJPHhi9eOHF+tFs7NT4xMdlT09f/lv/0u9xrhccTUUQzUrw5/EZqRkQtHn4sHvDZedQGq06MVJ2YGp+oOrLQarZXyhdTLVfVIho9B411x+gxzMVDGYtYLZtfNnik7N7kzeZSc2ZhvvHF5tJKa6W12E61TmvL/jSiFqMpYi0iNgbufrv+KOKjkeLlU5tpJiKK7jh8sloY/OD21B5BH/ehbGejP2KtdgTm7BAbiCKuRIqfvXY8Zssxy4/4eMQXynw14pUyPxORyg/GuYif7vE54mjqiyL+PVIsps00V50PuueVy19ufL59bbGntnteOfLfD4/TIT831aOImeqMv5ne+sUOAAAAAAAAAAAAAAAAAG+3wSji25HiT579vWpdcVTr0t93cfQ9L/x275rxZx7wPmXtyYhYre1vTW5/XjqcauV/j6Bj7Es9ivhGXv/3RwfdGAAAAAAAAAAAAAAAAAAAgHe1Il6IFF85cTytRe89xVvt642rzZmFzl1hu/f+7d4zfWtra6uROjmWczrnas61nOs5N3JGLR+fcyzndM7VnGs513Nu5IwiH59zLOd0ztWcaznXc27kjL58fM6xnNM5V3Ou5VzPuZEzDsm9ewEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3klqUcTPI8W3vraZIkXEWMR0dHJ94KBbBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACU6qmIk5Fi/YV69XytFnE1In6+tbXVfUTEZpkP66D7CgAAAAAAAAAAAAAAAAAAAIdWKuJjkeLp/9tMjYi4Pfz6wJPHhi9eOHF+tIgiUlnSW//85NVLjecWb9xcml9enp9rTLVbs4tz8/v94+qXW+1bt6fGJx5JZx5o8BG3f7D+3OLNl5Za17+6sufrQ/VLM8srS83ZvV+OwahFTPfuGakaPDU+UTV6odVsV4em2j0aWIsY229nAAAAAAAAAAAAAAAAAAAAODSGUhGfixQ/+a9zqbtuvK+z5v9XOs+K7dpX/mDndwEs3JFdvb8/YD/bab8NHakW3jemxicmJnt29/XfXVq2KaUinokUn3j5Q9V6+BRDe66NL+veW9bdOJfrhn+trFvdVVUfmRqfaFxZbJ+4tLCwONtcac4szDcmbzZn9/2LAwAAAAAAAAAAAAAAAAAAAOA+hlIRP4oU//P3/5G6953P6//7Os961v//VrWEvlJPu3Nbtbb/vdXa/s72+y6ODn302XvtfxTr/8s2pVTENyPF2R99qLqffnf9//QdtWXdn0WKN579SK6rPVHWNbvd6bzjtdbC/Kmy9q8jxa+/2a2NqvZ6rn16p/Z0WTsYKf5yc3ftV3PtB3Zqz5S1xyPF9/5779oP7tSeLWt/Ein+6e8a3dqhsvb3c+2xndqTs4sLcw8a1nL+vxMp/vbK76Run+85/z2//2H1jtx215zff/vtmv/hnn2reV7/NM9/8wHzfz5SfKf+kVzXGfuZ/PpT1f935v8TkeI//2137bVc+/6d2tP77dZBK+f/25Hiu3/14+0+5/nPI7szQ73z/6t9u3P7U3JA8/9Uz77h3K7ZX3Is3o2WX/r6i82FhfklGzZs2NjeOOgzE49D+f3/55Hi/48VqXsdk7//39N5tnP997/f2Pn+v3hHbjug7//39+y7mK9a+vsi6is3bvY/E1FffunrJ1o3mtfnr8+3z5w+9elPnz996vT5/ie6F3c7W/seu3eCcv5/ECl++A8/3P45Zvf1397X/0N35LYDmv+ne/u067pm30PxrlTO/99Eiqc+++Ptnzfvd/3f/fn/+Md25/bfvwOa/w/07BvO7Wr9kmMBAAAAAAAAAABwlAylIv4iUvzuH/9m6q4h2s+//5u7I7cd0L//Otazb+4xrWvY9yADABwi5fXfByPFP299f3st9+7rv/iNbm3v9d+9HIb7/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFGXoog/jBRDr26m9YHyeUf9cqt96/bU+MTehw2mSFGLoqovH/XTZ86e+9T5C6PdvP/xb7cPx/OTVy81nlu8cXNpfnl5fq4x1W7NLs7N7/sdHvb4O41UA9C48eKtuWvXlhtnTp7d9fLt4dcHnjw2fPHCifOj3dqp8YmJyZ6avv63/KffJd1j/xNRxPcjxZvDb6TvDkTU4uHH4gGfnUdtsOrESNWJqfGJqiMLrWZ7pXwx1XJVLaLRc9BYd4wew1w8lLGI1bL5ZYNHyu5N3mwuNWcW5htfbC6ttFZai+1U67S27E8jajGaItYiYmPg7rfrjyK+GSlePrWZ/mUgouiOwyevTH7p1NkHt6f2CPq4D2U7G/0Ra7UjMGeH2EAU8Y+R4mevHY/vDUT0RecRH4/4QpmvRrxS5mciUvnBOBfx0z0+RxxNfVHEuUixmDbTawPl+aB7Xrn85cbn29cWe2q755Uj//3wOB3yc1M9ivhBdcbfTP/q7zUAAAAAAAAAAAAAAADAIVLEWqT4yonjqVofvL2muNW+3rjanFnoLOvrrv3rrpne2traaqROjuWczrmacy3nes6NnFHLx+ccyzmdczXnWs71nBs5o8jH5xzLOZ1zNedazvWcGzmjLx+fcyzndM7VnGs513Nu5IxDsnYPAAAAAAAAAAAAAAAAAAB4Z6lFUd3F/Vtf20xbA537S09HJ9fdD/Qd7xcBAAD//0kCdPc=") r7 = creat(&(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TCSETAW(r8, 0x5407, &(0x7f0000000300)={0x400a, 0x7, 0x80, 0x40e0, 0xc}) ioctl$TIOCMSET(r8, 0x5418, &(0x7f0000000500)=0x8001) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x42003, 0x0) write$P9_RGETATTR(r7, &(0x7f0000000400)={0xa0, 0x19, 0x1, {0x0, {0x1, 0x6, 0x4006}, 0x189, 0x0, 0x0, 0x10000002, 0x5, 0x8, 0x38, 0xa, 0x7b, 0x4, 0x2, 0x1, 0x84, 0x10001, 0x9, 0xfff, 0x100000004, 0x40000000000000ae}}, 0xa0) 14m16.105090784s ago: executing program 1 (id=781): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = open(&(0x7f0000000040)='./bus\x00', 0x4c27e, 0x10) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x1, 0x7, 0x1, 0x80000001}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000280)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f00006fc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) socket(0x400000000010, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a00000004000000080000000a"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) sendfile(r0, r0, 0x0, 0x40000000800) 14m15.281203424s ago: executing program 1 (id=784): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000480)={[{@grpid}, {@noacl}, {@nodioread_nolock}, {@dioread_lock}, {@stripe}, {@init_itable}, {@grpjquota_path={'grpjquota', 0x3d, '\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/'}}, {@orlov}, {@nouser_xattr}]}, 0x1, 0xbd0, &(0x7f0000002380)="$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") openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0xffffffffffffffe2, &(0x7f0000000300)=0x20000002) sched_setscheduler(r0, 0x2, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000005c0), 0x651, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$sock_linger(r3, 0x1, 0x3d, &(0x7f0000000140), 0x8) sendmmsg$sock(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@txtime={{0x14}}], 0x14}}], 0x1, 0x20000000) recvmmsg(r1, &(0x7f0000000600), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000640)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x80) r6 = openat$cgroup_procs(r5, &(0x7f0000000680)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000006c0), 0x12) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)={0xc8, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1000001}, @CTA_NAT_SRC={0x34, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @rand_addr=' \x01\x00'}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @rand_addr=0x64010100}]}]}, 0xc8}}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a00000008000000ff0f000007"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={&(0x7f0000000280), 0x0, 0x0, 0x0, 0x5, r8}, 0x38) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000700)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000740), 0x208e24b) 14m11.525447363s ago: executing program 1 (id=796): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x80000028b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socket(0x2, 0xa, 0x300) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r4 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r3) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socket$pppl2tp(0x18, 0x1, 0x1) r5 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000dc0)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0c70f5db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb06001b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be97323c8689937a3c4f7b0399de3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x564, r4) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f00000001c0)='asymmetric\x00', &(0x7f00000000c0)=@chain={'key_or_keyring:', r5}) keyctl$KEYCTL_MOVE(0x1e, r5, r4, r3, 0x0) 14m6.353919637s ago: executing program 1 (id=821): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$inet(r0, 0x0, 0x0, 0x14) 14m6.23454494s ago: executing program 1 (id=822): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r2) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') mount(&(0x7f0000000000), &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x1001, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000300)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast, @val={@val={0x88a8, 0x5, 0x0, 0x1}, {0x8100, 0x1, 0x0, 0x3}}, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x8, @broadcast, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}}, &(0x7f0000000380)={0x0, 0x1, [0x18, 0x2c, 0xbfc, 0xf25]}) 13m50.84538928s ago: executing program 35 (id=822): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r2) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') mount(&(0x7f0000000000), &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x1001, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000300)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast, @val={@val={0x88a8, 0x5, 0x0, 0x1}, {0x8100, 0x1, 0x0, 0x3}}, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x8, @broadcast, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}}, &(0x7f0000000380)={0x0, 0x1, [0x18, 0x2c, 0xbfc, 0xf25]}) 18.170213115s ago: executing program 4 (id=3834): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0xffffffffffffffa8, &(0x7f0000000040)={0x1}) r1 = syz_open_dev$dvb_demux(&(0x7f0000000000), 0x0, 0x8800) ioctl$DVB_DEMUX_DMX_SET_BUFFER_SIZE(r1, 0x6f2d, 0x200000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYRES16=r0], 0x0, 0x5a}, 0x28) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x11000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000000180)) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000340)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, &(0x7f00000003c0)=[{0x800000000, 0x0, 0xffffffffffffffff}, {0x3}, {0x31269f4d, 0x2, 0x9}, {0xdbab, 0x3, 0x9}], 0x4, 0xbff, 0x1e, 0x0, 0x2c, 0x6e}) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xb, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES8=r1, @ANYBLOB="0000000000000000b7080800000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085f500000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys\x00', 0x1ff) mount(&(0x7f0000000440)=@filename='none\x00', &(0x7f0000000480)='./sys\x00', &(0x7f00000004c0)='sysfs\x00', 0x0, 0x0) chdir(&(0x7f0000000500)='./sys/bus/pci\x00') write(0xffffffffffffffff, &(0x7f0000000580)='8086 29c0\x00', 0xa) close(0xffffffffffffffff) write(0xffffffffffffffff, &(0x7f00000006c0)='0000:00:00.0\x00', 0xd) openat(0xffffffffffffff9c, &(0x7f0000000700)='devices/0000:00:00.0/driver_override\x00', 0x1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000800)='./binderfs/binder0\x00', 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000008c0)={0x8, 0x0, &(0x7f0000000900)=[@increfs]}) dup3(r5, r4, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x7) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000980)={0x73622a85, 0x10a}) 16.413823256s ago: executing program 4 (id=3839): bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0600000004000000080000000c00000018000000", @ANYRES32=0x1, @ANYRES32=0x0], 0x50) 16.197164961s ago: executing program 4 (id=3841): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05000000040000000400000004"], 0x50) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000400)=@allocspi={0x11c, 0x16, 0x20, 0x70bd2a, 0x25dfdbfd, {{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@private=0xa010102, 0x4e23, 0x0, 0x4e22, 0x7f, 0xa, 0x80, 0x0, 0x6c}, {@in6=@private2, 0x4d6, 0x3c}, @in=@local, {0x3, 0x3ff, 0x95e, 0x5, 0x8, 0x5, 0x60000, 0x4}, {0xab2, 0x5, 0xf, 0xfffffffffffffffd}, {0x2, 0x9, 0x7fff}, 0x70bd2a, 0x3507, 0x2, 0x5, 0x36, 0xc0}, 0x1, 0x4}, [@lastused={0xc, 0xf, 0x1}, @XFRMA_IF_ID={0x8, 0x1f, 0x3}, @tfcpad={0x8, 0x16, 0x8}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x400}]}, 0x11c}, 0x1, 0x0, 0x0, 0xc000}, 0x4048054) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000540)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x20000, &(0x7f0000000580), 0x0, 0x0, 0x0, &(0x7f00000005c0)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r0, 0x8008976) set_mempolicy(0x4005, &(0x7f0000000640)=0x7e, 0x6) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt(r1, 0x0, 0x483, &(0x7f0000000680)="060000007f00000100150000000000006d6800"/33, 0x21) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vim2m(&(0x7f00000006c0), 0x5, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000700)={0x11, 0x1, 0x0, "ad2896b02ca8b044d00dc81345c4b935bab32cecd875596364ab192cb8b873aa"}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r3, &(0x7f0000000780)=0x807, 0x12) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000940)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f0000000980), 0x2, 0x143102) writev(r4, &(0x7f00000009c0)=[{&(0x7f0000000a00)="94", 0xf000}, {0x0}], 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) socket$xdp(0x2c, 0x3, 0x0) 11.764681875s ago: executing program 4 (id=3849): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000a80)=""/8, &(0x7f0000000ac0)=0x8) 10.561849223s ago: executing program 4 (id=3856): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_open_procfs$userns(0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000001c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000200), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'syz_tun\x00'}) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000600)={'veth0_to_batadv\x00', &(0x7f0000000640)=@ethtool_sfeatures}) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x3) 9.509202538s ago: executing program 8 (id=3861): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0xffffffffffffffa8, &(0x7f0000000040)={0x1}) r1 = syz_open_dev$dvb_demux(&(0x7f0000000000), 0x0, 0x8800) ioctl$DVB_DEMUX_DMX_SET_BUFFER_SIZE(r1, 0x6f2d, 0x200000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYRES16=r0], 0x0, 0x5a}, 0x28) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x11000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000000180)) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000340)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, &(0x7f00000003c0)=[{0x800000000, 0x0, 0xffffffffffffffff}, {0x3}, {0x31269f4d, 0x2, 0x9}, {0xdbab, 0x3, 0x9}], 0x4, 0xbff, 0x1e, 0x0, 0x2c, 0x6e}) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xb, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES8=r1, @ANYBLOB="0000000000000000b7080800000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085f500000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys\x00', 0x1ff) mount(&(0x7f0000000440)=@filename='none\x00', &(0x7f0000000480)='./sys\x00', &(0x7f00000004c0)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000540)='drivers/agpgart-intel/new_id\x00', 0x1, 0x0) write(r4, &(0x7f0000000580)='8086 29c0\x00', 0xa) close(r4) write(0xffffffffffffffff, &(0x7f00000006c0)='0000:00:00.0\x00', 0xd) openat(0xffffffffffffff9c, &(0x7f0000000700)='devices/0000:00:00.0/driver_override\x00', 0x1, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000800)='./binderfs/binder0\x00', 0x0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000008c0)={0x8, 0x0, &(0x7f0000000900)=[@increfs]}) dup3(r6, r5, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x7) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000980)={0x73622a85, 0x10a}) 8.480787732s ago: executing program 4 (id=3862): ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000380)={0xfffffff8, 0x0, 0x0, 'queue0\x00'}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000a580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x30000894}, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000340)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000440)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) symlink(0x0, &(0x7f0000000300)='./file0/file0\x00') syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(0xffffffffffffffff, 0xae44, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) 8.154716919s ago: executing program 6 (id=3863): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) splice(0xffffffffffffffff, &(0x7f0000000240)=0x100, r1, &(0x7f0000000280)=0x9, 0x9a, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) timerfd_create(0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001000)={0x1, &(0x7f0000001040)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) symlinkat(&(0x7f0000001080)='.\x00', 0xffffffffffffff9c, &(0x7f00000010c0)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001100)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000001140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000001180)='./bus\x00', &(0x7f00000011c0), 0xa14000, &(0x7f0000001200)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000001380)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001480)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f00000014c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000001500)='./file7/file0\x00', 0x0) getdents64(0xffffffffffffffff, 0xfffffffffffffffe, 0x29) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) umount2(&(0x7f0000001580)='.\x00', 0x2) close_range(r2, 0xffffffffffffffff, 0x0) 8.025313202s ago: executing program 6 (id=3865): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/cluster/ocfs2/node/node0\x00', 0x1ff) rmdir(&(0x7f0000000300)='./config/cluster/ocfs2/node/node0\x00') 7.928177725s ago: executing program 8 (id=3867): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0x4) syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0xa00000, &(0x7f0000000140)=ANY=[@ANYBLOB='anchor=0\x00000000000000000001,\x00'], 0x1, 0xc85, &(0x7f0000000e40)="$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") 7.898988505s ago: executing program 6 (id=3870): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x15, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe9}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa8}}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x39}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="12000000030000000400000002"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x9, 0xff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000004c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) socket$alg(0x26, 0x5, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) connect$unix(r4, &(0x7f0000000540)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000005c0), 0x651, 0x0) recvmmsg(r4, &(0x7f0000000600), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000006c0), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000700)='cpuset.sched_load_balance\x00', 0x2, 0x0) r8 = openat$cgroup_ro(r6, &(0x7f0000000740)='cpuset.effective_mems\x00', 0x0, 0x0) sendfile(r7, r8, 0x0, 0xd) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r2, 0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000800)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{r9}, &(0x7f0000000880)=0x2, &(0x7f00000008c0)=r1}, 0x20) close(r1) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000140)='xfrm0\x00', 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000040)="b684d94bf709d6f78d1aa5e8ed23347d3e2dee201be9835a58c1bba1e0d627e68fce7d46e88be224525374b7ea215c4f6ba9f6660292fc0912e20694b79c11c6f03460ea04a5", 0x46, 0x2004082c, &(0x7f0000000f00)={0x2, 0x4e22, @multicast1}, 0x10) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(0xffffffffffffffff, 0x942e, 0x0) 6.818234471s ago: executing program 6 (id=3873): close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) writev(r0, 0x0, 0x0) socket(0x28, 0x5, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000440), 0x206, 0x8401) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) ioctl$USBDEVFS_BULK(r1, 0x5523, 0x0) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, 0x0, 0x0) r3 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r3, 0xc0845657, 0x0) listen(r2, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) 6.743089602s ago: executing program 6 (id=3874): pread64(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffc) r0 = add_key$user(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000280)="5a8c", 0x2, 0xffffffffffffffff) request_key(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, 0x0, r0) syz_clone(0x100000, &(0x7f0000000000)="c1f7bbe41ba911b5d06ff1c31b3cab34a8773eefd409b367adab43fcbd67b4b61c4dcb2f1e16436bd8811c1e93015d882843bff20b1d88af648be56564bb77aea20c704ef9f720f221a75573d3bf98cf5419b062078db9b4925079fe5fa939da2035353644b242afd5b59c79a1c0d7f8862177d79d853fb790c9abf84ba8f20745f007324bcccafc529f2ed09003059f640e36c3a58a8b04fd3ec9ef7256640b0d2e4f7732f7e3a20df5ba04206f5ed3c69af21d9998a3c4f3d4ff34dd9e7ba95c69c99a0bba0751fbb5f288c9f43d680b3cda6ffe", 0xd5, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="a4fb5bab655b00a57837beb0688419c406307a5edc63847eca68f2220c507d4d4d144c0289d24fd75a629a7afa8d12451148342c51e070c773b3dfcb2515e52f3d0a392d37560dc36c98431bb0c77a32441d2f") socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) add_key(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x100}, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000400)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000440)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000540), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000580), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000005c0)=0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newsa={0xf0, 0x10, 0x401, 0x0, 0x0, {{@in6=@loopback, @in6=@loopback, 0x1234, 0x1234, 0x0, 0x0, 0xa}, {@in6=@loopback, 0x4d2, 0x33}, @in6=@loopback, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0xa}}, 0xf0}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000780), r4) sendmsg$NLBL_CALIPSO_C_LIST(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)={0x1c, r5, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x44044) 5.317361795s ago: executing program 7 (id=3880): bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x50) 5.14030717s ago: executing program 7 (id=3881): setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000000)={0x20080522}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 4.988557193s ago: executing program 5 (id=3882): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000480)={0x28, 0x0, 0x0, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000640)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000680)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000006c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xff224000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000007c0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000800), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000840)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000900)='./tracing\x00', &(0x7f0000000940)='tracefs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000a80)='-:s/', 0x4) 4.986411243s ago: executing program 8 (id=3883): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008f}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@deltclass={0x3c, 0x29, 0x10, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xf, 0x6}, {0x1, 0x4}, {0xc, 0xa}}, [@TCA_RATE={0x6, 0x5, {0xe, 0x8}}, @TCA_RATE={0x6, 0x5, {0x2, 0x2}}, @TCA_RATE={0x6, 0x5, {0xff}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_open_dev$video(&(0x7f0000000280), 0x101, 0xab02) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) openat$fuse(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$FS_IOC_GETFSLABEL(r2, 0x800452d3, &(0x7f0000000100)) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) chdir(&(0x7f0000000100)='./file0\x00') r3 = creat(&(0x7f0000000100)='./file0\x00', 0x59) quotactl_fd$Q_GETNEXTQUOTA(r3, 0xffffffff80000901, 0x0, &(0x7f0000000500)) socketpair$unix(0x1, 0x2, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x6c, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbfc, {0x60, 0x0, 0x0, r7, {0x0, 0xf}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x2fd, 0xea94, 0x6, 0x7, 0x4, 0xc091}, [@TCA_NETEM_RATE={0x14, 0x6, {0x200, 0x5b, 0x0, 0xf8}}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x1, 0x6}}]}}}]}, 0x6c}}, 0x40844) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={r5, &(0x7f00000001c0), 0x0}, 0x20) 4.925411855s ago: executing program 7 (id=3884): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x15, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe9}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa8}}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x39}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="12000000030000000400000002"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x9, 0xff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000004c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) socket$alg(0x26, 0x5, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) connect$unix(r4, &(0x7f0000000540)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000005c0), 0x651, 0x0) recvmmsg(r4, &(0x7f0000000600), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000006c0), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000700)='cpuset.sched_load_balance\x00', 0x2, 0x0) r8 = openat$cgroup_ro(r6, &(0x7f0000000740)='cpuset.effective_mems\x00', 0x0, 0x0) sendfile(r7, r8, 0x0, 0xd) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r2, 0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000800)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{r9}, &(0x7f0000000880)=0x2, &(0x7f00000008c0)=r1}, 0x20) close(r1) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000140)='xfrm0\x00', 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000040)="b684d94bf709d6f78d1aa5e8ed23347d3e2dee201be9835a58c1bba1e0d627e68fce7d46e88be224525374b7ea215c4f6ba9f6660292fc0912e20694b79c11c6f03460ea04a5", 0x46, 0x2004082c, &(0x7f0000000f00)={0x2, 0x4e22, @multicast1}, 0x10) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(0xffffffffffffffff, 0x942e, 0x0) 3.471394478s ago: executing program 5 (id=3885): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000e00)={@in6={{0xa, 0x4e21, 0x8, @ipv4={'\x00', '\xff\xff', @empty}}}, 0x0, 0x0, 0x4a, 0x0, "e541bd3d3aa6a2bf75e9671e8abcb31c134f3a9db8f52e7300fe6e079f35ac63186c7244fc3b3801e79f15ced9fd7e55d0345bce05c13ed90158fbdeb70322ea3188f81890e3db00"}, 0xd8) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22, 0x8000}, 0x1c) listen(0xffffffffffffffff, 0x7c2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sec/tomoyo/domain_policy\x00', 0x2, 0x110) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f00000065c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000006580)={&(0x7f0000002780)={0xb4, 0xd, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x70, 0x3, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY={0x2c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x4}]}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_KEY_END={0x1c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}]}, {0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x4}]}, {0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0xb4}, 0x1, 0x0, 0x0, 0x880}, 0x4800) setsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$vnet(0xffffff9c, &(0x7f00000001c0), 0x2, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x8, 0x0, 0x1, 0x7f, 0x6, @random="2d22aece4334"}, 0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r3}, 0x94) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000340), &(0x7f0000000440)=0x4) r4 = syz_open_dev$sndctrl(&(0x7f0000000580), 0x0, 0x0) r5 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x1088, 0x4, 0x5, 0x80, 'syz0\x00', 0x200000}, 0x5, 0x0, 0x1, r5, 0x0, 0x8, 'syz1\x00', 0x0}) 3.458798649s ago: executing program 7 (id=3886): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_open_procfs$userns(0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000001c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000200), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'syz_tun\x00'}) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000600)={'veth0_to_batadv\x00', &(0x7f0000000640)=@ethtool_sfeatures}) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x3) 2.907733532s ago: executing program 5 (id=3887): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mnt\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt/trace_marker\x00', 0x1, 0x1a) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt/trace_pipe\x00', 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x101301) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r1, 0x29, 0x8, &(0x7f00000002c0)=0x405, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./sys_sec\x00', &(0x7f00000003c0)='securityfs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000500)=[{&(0x7f0000000540)="94", 0xf000}, {0x0}], 0x2) pipe2$9p(0x0, 0x4000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) read(r3, &(0x7f00000005c0)=""/28, 0xfffffffffffffdee) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000640)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000680)={0xffffffffffffffff}, 0x111, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f00000006c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x9, @empty, 0x9}, {0xa, 0x5, 0x13, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x848a}, r5, 0x1}}, 0x48) write$binfmt_script(r0, 0x0, 0x0) 2.898371672s ago: executing program 6 (id=3888): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000001c0)=0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000ac0)='./proc\x00', 0x1a8) mount(0x0, &(0x7f0000000b00)='./proc\x00', &(0x7f0000000b40)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000b80)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r0, &(0x7f0000000bc0)='7', 0x1) r1 = syz_create_resource$futex(&(0x7f0000000c00)=0x2) futex(r1, 0x5, 0x4, 0x0, r1, 0x2) 2.895323922s ago: executing program 8 (id=3889): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) splice(0xffffffffffffffff, &(0x7f0000000240)=0x100, r1, &(0x7f0000000280)=0x9, 0x9a, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) timerfd_create(0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001000)={0x1, &(0x7f0000001040)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) symlinkat(&(0x7f0000001080)='.\x00', 0xffffffffffffff9c, &(0x7f00000010c0)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001100)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000001140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000001180)='./bus\x00', &(0x7f00000011c0), 0xa14000, &(0x7f0000001200)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000001380)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001480)='./file7\x00', 0x1c0) r3 = openat(0xffffffffffffff9c, &(0x7f0000001540)='./file7/file0\x00', 0x0, 0x2) getdents64(r3, 0xfffffffffffffffe, 0x29) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) umount2(&(0x7f0000001580)='.\x00', 0x2) close_range(r2, 0xffffffffffffffff, 0x0) 2.164119479s ago: executing program 7 (id=3890): syz_emit_ethernet(0x4a, &(0x7f0000000000)={@random="e33110495bfd", @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x14, 0x3a, 0xff, @empty, @local, {[], @ndisc_ns={0x87, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}}}}, 0x0) setns(0xc9, 0x0) socket$netlink(0x10, 0x3, 0x14) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000003c0)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000440)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000540), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000580)=0x2) recvmmsg(r2, &(0x7f00000005c0), 0x10106, 0x2, 0x0) fanotify_init(0xef0, 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/cluster/ocfs2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/cluster/ocfs2/node/node0\x00', 0x1ff) rmdir(&(0x7f0000000300)='./config/cluster/ocfs2/node/node0\x00') openat$vimc0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x5, &(0x7f0000000080)=[{0xd, 0x10, 0x0, 0x9}, {0x3, 0x10, 0x6, 0x1}, {0x332, 0x3, 0x7f, 0x4373}, {0xef7, 0xf8, 0x2, 0x8}, {0xfca, 0x4, 0x9, 0x10}]}) 1.830608137s ago: executing program 5 (id=3891): bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x50) 1.128341804s ago: executing program 7 (id=3892): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000100)=@ccm_128={{0x303}, "63a7d38a4937c1fc", "5f90d5f023d7bd5bd799356c95abffc8", "09fe0891", "0aa3b9dd5fe7a771"}, 0x28) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}, 0xfff}], 0x1, 0x0, 0x0) writev(r0, &(0x7f0000001600)=[{&(0x7f0000001680)="58ddb007a47a8b1f458ab677d5", 0xd}], 0x1) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000028c0)=0xffff1884, 0x4) 1.117778213s ago: executing program 8 (id=3893): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000002c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r3, &(0x7f0000000340)=""/102392, 0x18ff8) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x400e1, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000195c0)={&(0x7f0000019600)={0x30, r5, 0x5707b563827c8365, 0x1, 0xbffffffd, {{}, {@val={0x8, 0x1, 0x80}, @val={0x8}, @val={0xc, 0x99, {0xfffffffb, 0x50}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x40804}, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000019440)='./proc\x00', 0x4) mount(0x0, &(0x7f0000019480)='./proc\x00', &(0x7f00000194c0)='proc\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000019500)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r6, &(0x7f0000019540)='7', 0x1) name_to_handle_at(r6, 0x0, 0x0, 0x0, 0x1000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000160000000800000040"], 0x50) gettid() r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$kcm(0x2, 0x200000000000001, 0x106) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x15, 0x1c, &(0x7f0000019340)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xcd9}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0xd00a}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r8}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000019580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) 278.042453ms ago: executing program 8 (id=3894): syz_mount_image$udf(&(0x7f0000000200), &(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xa00004, &(0x7f00000005c0)={[{@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}, {@anchor={'anchor', 0x3d, 0x7}}, {@noadinicb}, {@noadinicb}, {@iocharset={'iocharset', 0x3d, 'cp855'}}, {@uid_ignore}, {@mode={'mode', 0x3d, 0x8009}}, {@longad}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}, {@undelete}, {@uid_forget}, {@umask={'umask', 0x3d, 0x7fffffff}}]}, 0x1, 0xc6d, &(0x7f00000006c0)="$eJzs3U9sHNd9B/DfG5LiSm4rJk4VJ42DTVuksmK5+hdTtgp3VdNsA8iyEIq5BeBKpNSFKZIgqUY23JbppYceAhRFDzkRaIUCKRoYTRH0yLQukFx8KHLqiWhhIyh6YIsAAVq4G8zsW3FFkZYsiiIlfz429d2deW/mvZnVDEXwzQsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIOJ3Xjl77HjaZEXfLjQGAHgozo999diJze7/AMBj6+JW//4HAAAAAAAAAAAAAAD2ihRFPBkp5s6vpYnqfUftXGvg+o3xkdHNq+1PVc2+qnz5VTt+4uSpLz8/fLqb51ozH1L/QftsvDZ28Wz95dlrc/NTCwtTk/Xxmdbl2cmpe97CdutvdKQ6APVrr1+fvHJloX7iuZO3rb4x9P7gE4eGzgw/c/TpbtnxkdHRsfUitd7y/ffdkI6tRnjsiyKORopnv/uT1IyIIrZ/LGoP99xvtL/qxJGqE+Mjo1VHplvNmcVy5YXugSgi6j2VGt1jtPm5iP6Bh9qHrTUilsrmlw0+UnZvbK4537w0PVW/0JxfbC22ZmcupE5ry/7Uo4jTKWI5IlYH79zcQBTRHym+fXAtXcpP/aiOw5eqgcFbt6PYwT7eg7Kd9YGI5eIROGd72GAU8Wqk+Ok7h+Nyvs5U15ovRrxa5vcjbpb5UkQqPxinIt7b5HPEo6k/iviz8vyfWUuT1fWge10597X6V2auzPaU7V5XPuL94Y4rxS7dH/ZvyIdjj1+balFEs7rir6X7/2YHAAAAAAAAAAAAAAAAgAdtfxTxmUjxyr/+QTWuOKpx6QfPDP/u0C/2jhl/6i7bKcs+FxFLxb2Nyd2XBwZeSBdS2uWxxB9ntSjiD/P4v2/udmMAAAAAAAAAAAAAAAAAAAA+1or4caR48d3DaTl65xRvzVytX2xemu7MCtud+7c7Z3q73W7XUycbOSdyLuVczrmSczVnFLl+zkbOiZxLOZdzruRczRl9uX7ORs6JnEs5l3Ou5FzNGf25fs5GzomcSzmXc67kXM0Ze2TuXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAx0kRRXwQKb71jbUUKSIaERPRyZXB3W4dAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFAaTEV8L1LUf69xa1l/RKTq/47D5R+norGvzE9GY7jMl6JxNmezyv7GN3eh/WzPQCriR5FisPb2rROez/9A592tj0HcfGv93Wf7O9nXXTn0/uAThw6eGR79/FNbvU6bNeDIudbM9Rv18ZHR0bGexf1575/sWTaU91s8mK4TEQtvvPl6c3p6av7+X5Qfgfus3j2T29j7w3yR+ne5qf+/Bw7Cx+lF9O/e3nf778Xt14naLlyb2Hnl/f+9SPGb7/5b94bfuf/X4hc6727d4eNnf7R+/39x44bu8f7fv7Fevv+Xd4LN7v9P9ix7MX83MtAfUVu8NjdwKKK28MabR1vXmlenrk7NnDp27IXh4RdOHhvYF1G70pqe6nn1QA4XAAAAAAAAAAAAAAAAwMOTivjtSNH80VqqR8SNarzW0JnhZ44+3Rd91Xir28ZtvzZ28Wz95dlrc/NTCwtTk/Xxmdbl2cmpe91drRruNT4yuiOduav9O9z+/bWXZ+femG9d/f3FTdcfqJ29tLA437y8+erYH0VEo3fJkarB4yOjVaOnW82ZquqFTQfTf3QDqYh/jxSXT9XTF/KyPP5/4wj/uPnWC7c+C0sbN/QAx/9//sD6+L9P9BQt95lSET+LFL/x50/FF6p2Hog7jlku99eR4sjpz+Vysa8s121D57kCnZGBZdn/jhR//8HtZbvjIZ9cL3v8Ix3cR0B5/g9Giu/96XfiV/Oy25//0Hv+14/fgY0b2qHnP3yqZ9mB255XsO2uk8//0Ujx0pNvx69VS/73Q5//0X1iw+FO4fXnc+zQ+f/lnmVDeb+//qA6DwAAAAAAAAAA8AgbSEX8TaT4wWh/ej4vu5ff/5vcuKEd+v2vT/csm3ww8xXd9cW2DyoAAAAA7BEDqYgfR4qri2/fGkN9+/jvnvGfv7U+/nMkbVhb/Zzvl6rnBjzIn//1Gsr7ndh+twEAAAAAAAAAAAAAAAAAAGBPSamI5/N86hPVeP7JLedTX4kUr/zns7lcOlSW684DP1T9WTs/O3P07PT0bC0Wm5emp+pjc83LU2XdT0WKtb/6XK5bVPOrd+eb78zxvj4X+3ykGP3bbtnOXOzduck784HX2u2I42XZT0SK//i728vmqanz3NHVdk+UZf8yUnz9Hzcve2i97Mmy7HcixQ+/Xu+WPVCW7T4f9dPrZZ+7PFvswFkBAAAAAAAAAAAAAAAAAADg42YgFfEnkeK/ri3fGsuf5/8f6HlbuflWz3z/G9yo5vkfqub/3+r1/cz/Xz1XYGmrvQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwOMpRRFvRoq582tpZbB831E715q5fmN8ZHTzavtTVbOvKl9+1Y6fOHnqy88Pn+7mh9d/0D4Tr41dPFt/efba3PzUwsLUZH18pnV5dnLqnrew3fobHakOQP3a69cnr1xZqJ947uRtq28MvT/4xKGhM8PPHH26W3Z8ZHR0rKdM/8B97/0OaYvl+6KIv4gUz373J+kHgxFFbP9Y3OWzs9P2V504UnVifGS06sh0qzmzWK680D0QRUS9p1Kje4zuei7+r91uP6yubKIRsVQ2v2zwkbJ7Y3PN+eal6an6heb8YmuxNTtzIXVaW/anHkWcThHLEbE6eOfmBqKI1yPFtw+upX8ajOjrHocvnR/76rETW7ej2ME+3oOynfWBiOXiXs4ZWxmMIv4hUvz0ncPxz4MR/dH5ii9GvFrm9yNuRud8p/KDcSrivU0+Rzya+qOI/ynP/5m19M5geT3oXlfOfa3+lZkrsz1lu9eVbd4f2u32H5e5e/eHh2mPX5tqUcQPqyv+WvoXf68BAAAAAAAAAAAAAAAA9pAifiVSvPju4VSND741prg1c7V+sXlpujOsrzv2rztmut1ut+upk42cEzmXci7nXMm5mjOKXD9no8xauz2R3y/lXM65knM1Z/Tl+n3VcMV2I7+fyLmUcznnSs7VnNGf6+ds5JzIuZRzOedKztWcsUfG7gEAAAAAAAAAAAAAAAAAAI+Xovovxbe+sZbag535pSeikyvmA33s/TwAAP//9xz3UA==") syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./ffs\x00', 0x1ff) 226.087954ms ago: executing program 5 (id=3895): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800080081000000060027"], 0x44}, 0x1, 0x0, 0x0, 0x24048004}, 0x4000) 0s ago: executing program 5 (id=3896): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000480)={0x28, 0x0, 0x0, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000640)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000680)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000006c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xff224000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000007c0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000800), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000840)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000900)='./tracing\x00', &(0x7f0000000940)='tracefs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000a80)='-:s/', 0x4) kernel console output (not intermixed with test programs): 11896] 9pnet: Insufficient options for proto=fd [ 701.308063][T11873] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1947'. [ 704.873285][T11961] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1982'. [ 704.906300][T11961] netlink: 168 bytes leftover after parsing attributes in process `syz.7.1982'. [ 705.114683][T11975] 9pnet_virtio: no channels available for device syz [ 708.390804][T12022] netlink: 168 bytes leftover after parsing attributes in process `syz.8.2003'. [ 708.531197][T11999] bridge0: port 2(bridge_slave_1) entered disabled state [ 708.538427][T11999] bridge0: port 1(bridge_slave_0) entered disabled state [ 709.103698][T11999] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 709.155164][T11999] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 709.269727][T11999] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.281062][T11999] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.291323][T11999] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.300380][T11999] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.359794][T12020] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2003'. [ 710.877664][T12060] overlayfs: failed to clone upperpath [ 710.908443][T12060] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2012'. [ 711.059322][T12073] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2019'. [ 711.074216][T12073] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2019'. [ 711.992418][T12090] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 712.022073][T12090] bond1: (slave lo): Enslaving as an active interface with an up link [ 712.055875][T12090] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 712.848496][T12098] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2027'. [ 716.106516][T12146] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2042'. [ 716.506115][T12146] netlink: 168 bytes leftover after parsing attributes in process `syz.5.2042'. [ 718.225110][T12187] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2057'. [ 718.753902][T12187] netlink: 168 bytes leftover after parsing attributes in process `syz.7.2057'. [ 719.630345][ C0] Adjusting tsc more than 11% (8579266 vs 8464875) [ 722.192755][T12231] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2071'. [ 722.243870][T12231] netlink: 168 bytes leftover after parsing attributes in process `syz.7.2071'. [ 722.379261][T12238] 9pnet_virtio: no channels available for device syz [ 724.920986][T12276] Invalid ELF header magic: != ELF [ 726.247975][T12285] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2089'. [ 726.271082][T12294] tmpfs: Unknown parameter 'noswap' [ 726.391071][T12295] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2089'. [ 728.400995][T12327] Invalid ELF header magic: != ELF [ 729.245822][T12335] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2109'. [ 729.291794][T12335] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2109'. [ 732.858524][T12364] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2120'. [ 733.221371][T12367] Invalid ELF header magic: != ELF [ 735.158480][T12385] Invalid ELF header magic: != ELF [ 740.423346][T12428] tmpfs: Bad value for 'mpol' [ 740.485936][T12430] 9pnet_virtio: no channels available for device 127.0.0.1 [ 740.814943][T12431] Invalid ELF header magic: != ELF [ 746.984169][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.990612][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.439003][T12496] Invalid ELF header magic: != ELF [ 750.801887][ T4332] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 750.815818][ T4332] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 751.384628][T12559] 9pnet_virtio: no channels available for device syz [ 753.048096][T12591] team0: Device ipip0 is up. Set it down before adding it as a team port [ 753.723029][T12606] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2200'. [ 753.774036][T12606] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2200'. [ 763.409538][T12752] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2246'. [ 763.530600][T12754] netlink: 168 bytes leftover after parsing attributes in process `syz.8.2246'. [ 766.982245][T12800] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2260'. [ 767.045169][T12800] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2260'. [ 767.165657][T12806] tipc: Can't bind to reserved service type 63 [ 768.312318][T12820] autofs4:pid:12820:autofs_fill_super: called with bogus options [ 770.541211][T12843] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2272'. [ 770.591345][T12843] netlink: 168 bytes leftover after parsing attributes in process `syz.5.2272'. [ 772.701075][T12878] netlink: 'syz.8.2283': attribute type 13 has an invalid length. [ 772.796623][T12880] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2284'. [ 772.876688][T12880] netlink: 168 bytes leftover after parsing attributes in process `syz.6.2284'. [ 776.380138][T12927] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 776.512198][T12927] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 776.533691][T12927] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 776.541416][T12927] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 776.616683][T12936] Invalid ELF header magic: != ELF [ 777.705890][T12948] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2304'. [ 777.989311][T12951] netlink: 168 bytes leftover after parsing attributes in process `syz.8.2304'. [ 781.288718][T12991] Invalid ELF header magic: != ELF [ 783.889001][T12982] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2313'. [ 785.040919][T13011] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2321'. [ 785.192350][T13012] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2321'. [ 791.608526][T13073] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2337'. [ 791.626702][T13073] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2337'. [ 796.383426][T13097] Invalid ELF header magic: != ELF [ 797.678884][T13106] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2349'. [ 797.725012][T13106] netlink: 168 bytes leftover after parsing attributes in process `syz.7.2349'. [ 801.723443][T13151] Invalid ELF header magic: != ELF [ 803.052002][T13165] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2363'. [ 803.086206][T13165] netlink: 168 bytes leftover after parsing attributes in process `syz.7.2363'. [ 808.132304][T13213] Invalid ELF header magic: != ELF [ 808.264879][T13214] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2375'. [ 808.296284][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.316992][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.604922][T13215] netlink: 168 bytes leftover after parsing attributes in process `syz.8.2375'. [ 812.229077][T13261] Invalid ELF header magic: != ELF [ 812.971728][T13263] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2388'. [ 812.985342][T13263] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2388'. [ 813.217856][T13271] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2389'. [ 817.488750][T13310] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2399'. [ 817.629937][T13310] 8021q: adding VLAN 0 to HW filter on device bond2 [ 818.380873][T13312] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2399'. [ 818.394770][T13312] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2399'. [ 819.649415][T13312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 819.670633][T13312] bond2: (slave bond0): making interface the new active one [ 819.707634][T13312] bond2: (slave bond0): Enslaving as an active interface with an up link [ 819.718710][T11333] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 819.809893][T13320] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2401'. [ 819.819281][T13329] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2403'. [ 825.470040][T13390] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2418'. [ 830.301751][T13434] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2432'. [ 832.578690][T13488] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2448'. [ 833.570642][T13500] device lo entered promiscuous mode [ 834.059950][T13500] device tunl0 entered promiscuous mode [ 834.088072][T13500] device gre0 entered promiscuous mode [ 835.171564][T13500] device gretap0 entered promiscuous mode [ 835.243737][T13500] device erspan0 entered promiscuous mode [ 835.260496][T13500] device ip_vti0 entered promiscuous mode [ 835.328593][T13500] device ip6_vti0 entered promiscuous mode [ 835.369903][T13500] device sit0 entered promiscuous mode [ 835.446489][T13500] device ip6tnl0 entered promiscuous mode [ 835.457920][T13500] device ip6gre0 entered promiscuous mode [ 835.470850][T13500] device syz_tun entered promiscuous mode [ 835.484314][T13500] device ip6gretap0 entered promiscuous mode [ 835.560022][T13500] bridge0: port 2(bridge_slave_1) entered disabled state [ 835.567479][T13500] bridge0: port 1(bridge_slave_0) entered disabled state [ 835.667254][T13500] device bridge0 entered promiscuous mode [ 835.762816][T13500] device vcan0 entered promiscuous mode [ 835.844834][T13500] device bond0 entered promiscuous mode [ 835.855620][T13500] device bond_slave_0 entered promiscuous mode [ 835.897132][T13500] device bond_slave_1 entered promiscuous mode [ 836.008057][T13500] device team0 entered promiscuous mode [ 836.017223][T13500] device team_slave_0 entered promiscuous mode [ 836.059283][T13500] device team_slave_1 entered promiscuous mode [ 836.117940][T13500] device dummy0 entered promiscuous mode [ 836.132190][T13500] device nlmon0 entered promiscuous mode [ 836.140801][T13500] device caif0 entered promiscuous mode [ 836.151972][T13500] device vxcan0 entered promiscuous mode [ 836.167490][T13500] device vxcan1 entered promiscuous mode [ 836.174741][T13500] device veth0 entered promiscuous mode [ 836.188593][T13500] device veth1 entered promiscuous mode [ 836.202474][T13500] device wg0 entered promiscuous mode [ 836.222999][T13500] device wg1 entered promiscuous mode [ 836.236952][T13500] device wg2 entered promiscuous mode [ 836.249378][T13500] device veth0_to_bridge entered promiscuous mode [ 836.286489][T13500] device veth1_to_bridge entered promiscuous mode [ 836.309325][T13500] device veth0_to_bond entered promiscuous mode [ 836.342884][T13500] device veth1_to_bond entered promiscuous mode [ 836.353951][T13500] device veth0_to_team entered promiscuous mode [ 836.378315][T13500] device veth1_to_team entered promiscuous mode [ 836.390949][T13500] device veth0_to_batadv entered promiscuous mode [ 836.400756][T13500] device batadv_slave_0 entered promiscuous mode [ 836.410723][T13500] device veth1_to_batadv entered promiscuous mode [ 836.419713][T13500] device batadv_slave_1 entered promiscuous mode [ 836.428871][T13500] device xfrm0 entered promiscuous mode [ 836.436250][T13500] device veth0_to_hsr entered promiscuous mode [ 836.467683][T13500] device veth1_to_hsr entered promiscuous mode [ 836.486255][T13500] device hsr0 entered promiscuous mode [ 836.588069][T13500] device veth1_virt_wifi entered promiscuous mode [ 836.614394][T13500] device veth0_virt_wifi entered promiscuous mode [ 836.628421][T13500] device virt_wifi0 entered promiscuous mode [ 836.662942][T13500] device vlan0 entered promiscuous mode [ 836.668974][T13500] device vlan1 entered promiscuous mode [ 836.675366][T13500] device macvlan0 entered promiscuous mode [ 836.685664][T13500] device macvlan1 entered promiscuous mode [ 836.694547][T13500] device ipvlan0 entered promiscuous mode [ 836.700552][T13500] device ipvlan1 entered promiscuous mode [ 836.711647][T13500] device macvtap0 entered promiscuous mode [ 836.738957][T13500] device macsec0 entered promiscuous mode [ 836.748144][T13500] device geneve0 entered promiscuous mode [ 836.763812][T13500] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.772813][T13500] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.803659][T13500] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.817242][T13500] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.828150][T13500] device geneve1 entered promiscuous mode [ 836.847867][T13500] device netdevsim0 entered promiscuous mode [ 836.856038][T13500] device netdevsim1 entered promiscuous mode [ 836.887089][T13500] device netdevsim2 entered promiscuous mode [ 836.905287][T13500] device netdevsim3 entered promiscuous mode [ 836.916777][T13500] device wlan0 entered promiscuous mode [ 836.930585][T13500] device wlan1 entered promiscuous mode [ 836.945063][T13500] device erspan0.1 entered promiscuous mode [ 836.951256][T13500] device syzkaller1 entered promiscuous mode [ 837.118034][T13532] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 837.386927][T13537] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2461'. [ 838.758123][T13575] Invalid ELF header magic: != ELF [ 839.682165][T13580] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2473'. [ 839.790057][T13580] netlink: 168 bytes leftover after parsing attributes in process `syz.6.2473'. [ 839.806976][T13581] netlink: 44 bytes leftover after parsing attributes in process `syz.8.2472'. [ 839.917231][T13593] 9pnet_virtio: no channels available for device 127.0.0.1 [ 843.026291][T13609] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2478'. [ 843.903400][T13631] Invalid ELF header magic: != ELF [ 845.120472][T13629] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2487'. [ 845.139574][T13629] netlink: 168 bytes leftover after parsing attributes in process `syz.6.2487'. [ 845.153971][T13638] 9pnet_virtio: no channels available for device 127.0.0.1 [ 845.519624][T13660] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2497'. [ 848.246838][T13682] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2503'. [ 848.265048][T13682] netlink: 168 bytes leftover after parsing attributes in process `syz.7.2503'. [ 848.418294][T13691] 9pnet_virtio: no channels available for device 127.0.0.1 [ 849.234059][T13705] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2509'. [ 852.499650][T13742] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2522'. [ 853.983828][T13749] Invalid ELF header magic: != ELF [ 855.492142][T13753] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2524'. [ 856.461262][T13770] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2532'. [ 857.078539][T13773] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2533'. [ 858.513378][T13804] Invalid ELF header magic: != ELF [ 860.917670][T13843] netlink: 'syz.6.2558': attribute type 1 has an invalid length. [ 860.975518][T13843] netlink: 'syz.6.2558': attribute type 2 has an invalid length. [ 863.095670][T13879] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2570'. [ 864.023767][T13889] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2576'. [ 864.803394][T13889] netlink: 168 bytes leftover after parsing attributes in process `syz.6.2576'. [ 867.643914][T13947] 9pnet_virtio: no channels available for device 127.0.0.1 [ 870.319443][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.325901][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.047132][T13967] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2589'. [ 871.341976][T13969] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2590'. [ 872.131955][T13969] netlink: 168 bytes leftover after parsing attributes in process `syz.8.2590'. [ 876.399426][T14016] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2605'. [ 876.493974][T14016] netlink: 168 bytes leftover after parsing attributes in process `syz.5.2605'. [ 881.451630][T14046] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2607'. [ 884.118129][T14069] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2617'. [ 884.135719][T14069] netlink: 168 bytes leftover after parsing attributes in process `syz.7.2617'. [ 886.396823][T14084] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2621'. [ 890.380842][T14113] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2630'. [ 890.455975][T14113] netlink: 168 bytes leftover after parsing attributes in process `syz.6.2630'. [ 892.000086][T14140] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2634'. [ 895.714310][T14181] Invalid ELF header magic: != ELF [ 896.306206][T14187] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2647'. [ 896.736514][T14187] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2647'. [ 896.819626][T14199] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2649'. [ 902.283437][T14238] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2659'. [ 902.292474][T14238] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2659'. [ 902.820583][T14246] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2664'. [ 902.859705][T14246] netlink: 168 bytes leftover after parsing attributes in process `syz.7.2664'. [ 908.869316][T14295] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2676'. [ 908.932449][T14295] netlink: 168 bytes leftover after parsing attributes in process `syz.7.2676'. [ 914.284385][T14343] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2686'. [ 918.664388][T14381] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2692'. [ 918.683958][T14381] netlink: 168 bytes leftover after parsing attributes in process `syz.7.2692'. [ 918.796053][T14390] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2703'. [ 920.307872][ T4190] Bluetooth: Wrong link type (-22) [ 926.536759][T14443] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2720'. [ 928.537955][T14477] fuse: Bad value for 'fd' [ 930.295312][T14497] netlink: 'syz.8.2739': attribute type 1 has an invalid length. [ 930.306175][T14497] netlink: 'syz.8.2739': attribute type 2 has an invalid length. [ 931.418246][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.424794][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.516449][T14508] rxe_eth0 speed is unknown, defaulting to 1000 [ 931.592117][T14513] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2745'. [ 931.669143][T14513] netlink: 168 bytes leftover after parsing attributes in process `syz.8.2745'. [ 932.089777][T14521] fuse: Bad value for 'fd' [ 934.244380][T14553] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2759'. [ 934.259260][T14553] netlink: 168 bytes leftover after parsing attributes in process `syz.6.2759'. [ 935.044239][T14575] fuse: Bad value for 'fd' [ 935.843878][T14588] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2771'. [ 935.872183][T14588] netlink: 168 bytes leftover after parsing attributes in process `syz.7.2771'. [ 936.682265][T14627] fuse: Bad value for 'fd' [ 937.445741][T14637] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2786'. [ 937.463327][T14637] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2786'. [ 938.835132][T14678] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2801'. [ 938.860000][T14678] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2801'. [ 938.899593][T14679] fuse: Bad value for 'fd' [ 939.856252][T14697] 9pnet_virtio: no channels available for device 127.0.0.1 [ 939.965507][T14701] team0: Device xfrm0 is of different type [ 941.803102][T14711] netlink: 'syz.4.2814': attribute type 11 has an invalid length. [ 943.245960][T14765] fuse: Bad value for 'fd' [ 943.743188][T14764] netlink: 'syz.7.2829': attribute type 11 has an invalid length. [ 948.503448][T14808] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2848'. [ 948.577986][T14808] netlink: 168 bytes leftover after parsing attributes in process `syz.6.2848'. [ 950.923929][T14849] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2864'. [ 950.955650][T14849] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2864'. [ 954.331278][T14902] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2880'. [ 954.343175][T14902] netlink: 168 bytes leftover after parsing attributes in process `syz.8.2880'. [ 954.518434][T14916] futex_wake_op: syz.6.2883 tries to shift op by 144; fix this program [ 954.526989][T14916] futex_wake_op: syz.6.2883 tries to shift op by 144; fix this program [ 955.690806][T14945] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2893'. [ 955.725224][T14945] netlink: 168 bytes leftover after parsing attributes in process `syz.7.2893'. [ 957.330051][T14992] fuse: Bad value for 'fd' [ 958.843941][T15012] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2912'. [ 959.563769][T15019] overlayfs: failed to clone upperpath [ 959.573134][T15012] netlink: 168 bytes leftover after parsing attributes in process `syz.5.2912'. [ 961.119347][T15050] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2929'. [ 961.139692][T15050] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2929'. [ 962.318533][T15068] overlayfs: failed to clone upperpath [ 962.468401][T15080] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2940'. [ 962.492493][T15080] netlink: 168 bytes leftover after parsing attributes in process `syz.6.2940'. [ 964.739841][T15118] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2952'. [ 964.900149][T15118] netlink: 168 bytes leftover after parsing attributes in process `syz.7.2952'. [ 967.423565][T15159] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2967'. [ 967.565438][T15159] netlink: 168 bytes leftover after parsing attributes in process `syz.7.2967'. [ 968.121120][T15178] fuse: Bad value for 'fd' [ 968.889917][T15192] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2974'. [ 970.267904][T15206] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2981'. [ 970.299236][T15206] netlink: 168 bytes leftover after parsing attributes in process `syz.8.2981'. [ 971.955282][T15222] 9pnet_virtio: no channels available for device syz [ 972.822436][T15233] fuse: Bad value for 'fd' [ 973.498312][T15241] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2990'. [ 979.565788][T15310] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3010'. [ 981.340761][ T6475] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 981.371971][ T6475] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 982.157384][T15361] device ip6gretap0 entered promiscuous mode [ 983.303799][T15374] 9pnet_virtio: no channels available for device 127.0.0.1 [ 985.241382][T13524] libceph: connect (1)[c::]:6789 error -101 [ 985.249674][T13524] libceph: mon0 (1)[c::]:6789 connect error [ 985.428993][T15425] ceph: No mds server is up or the cluster is laggy [ 992.764125][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.770474][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.022862][T15536] netlink: 'syz.8.3083': attribute type 1 has an invalid length. [ 993.280458][T15536] 8021q: adding VLAN 0 to HW filter on device bond2 [ 993.398073][T15536] xt_nfacct: accounting object `syz0' does not exist [ 995.413396][T12032] Bluetooth: hci1: command 0x2016 tx timeout [ 996.664620][T15579] netlink: 'syz.4.3100': attribute type 1 has an invalid length. [ 996.707209][T15579] 8021q: adding VLAN 0 to HW filter on device bond3 [ 996.740193][T15579] xt_nfacct: accounting object `syz0' does not exist [ 996.820999][T15588] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3098'. [ 996.832077][T15588] netlink: 168 bytes leftover after parsing attributes in process `syz.5.3098'. [ 1000.133068][T15621] overlayfs: failed to clone upperpath [ 1000.266596][T15626] Invalid ELF header magic: != ELF [ 1003.234426][T15542] Bluetooth: Unknown LE signaling command 0x03 [ 1003.240945][T15542] Bluetooth: Wrong link type (-22) [ 1003.246530][T15542] Bluetooth: hci6: link tx timeout [ 1003.252187][T15542] Bluetooth: hci6: killing stalled connection 10:aa:aa:aa:aa:aa [ 1003.263299][T15542] Bluetooth: hci6: link tx timeout [ 1003.268445][T15542] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 1005.373010][T12031] Bluetooth: hci6: command 0x0406 tx timeout [ 1009.727056][T15756] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3141'. [ 1014.162380][T15794] Could not find key with description: [syz] [ 1014.174569][T15794] process_request_key_err: No key [ 1014.207693][T15796] 9pnet_virtio: no channels available for device syz [ 1014.215421][T15794] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 1014.227668][T15796] 9pnet: Insufficient options for proto=fd [ 1014.263629][T15794] One or more global auth toks could not properly register; rc = [-2] [ 1014.293570][T15794] Error parsing options; rc = [-2] [ 1016.950603][T15847] netlink: 'syz.5.3174': attribute type 1 has an invalid length. [ 1016.972592][T15847] netlink: 'syz.5.3174': attribute type 2 has an invalid length. [ 1017.634728][T15864] sctp: [Deprecated]: syz.6.3179 (pid 15864) Use of int in max_burst socket option deprecated. [ 1017.634728][T15864] Use struct sctp_assoc_value instead [ 1023.432824][T15983] rxe_eth0 speed is unknown, defaulting to 1000 [ 1023.661472][T16001] fuse: Bad value for 'fd' [ 1025.431547][T12031] Bluetooth: hci2: command 0x0409 tx timeout [ 1025.488149][T15983] chnl_net:caif_netlink_parms(): no params data found [ 1025.786750][T15983] bridge0: port 1(bridge_slave_0) entered blocking state [ 1025.806910][T15983] bridge0: port 1(bridge_slave_0) entered disabled state [ 1025.842562][T15983] device bridge_slave_0 entered promiscuous mode [ 1025.874259][T15983] bridge0: port 2(bridge_slave_1) entered blocking state [ 1025.896076][T15983] bridge0: port 2(bridge_slave_1) entered disabled state [ 1025.928643][T15983] device bridge_slave_1 entered promiscuous mode [ 1026.020697][T15983] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1026.060198][T15983] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1026.171094][T15983] team0: Port device team_slave_0 added [ 1026.248227][T15983] team0: Port device team_slave_1 added [ 1026.296485][T15983] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1026.303843][T15983] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1026.342915][T15983] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1026.379312][T15983] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1026.394632][T15983] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1026.463315][T15983] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1026.648551][T15983] device hsr_slave_0 entered promiscuous mode [ 1026.688690][T15983] device hsr_slave_1 entered promiscuous mode [ 1026.710761][T15983] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1026.742166][T15983] Cannot create hsr debugfs directory [ 1027.493571][ T4296] Bluetooth: hci2: command 0x041b tx timeout [ 1027.557574][ T6475] device hsr_slave_0 left promiscuous mode [ 1027.598876][ T6475] device hsr_slave_1 left promiscuous mode [ 1027.607596][ T6475] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1027.639540][ T6475] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1027.684752][ T6475] device bridge_slave_1 left promiscuous mode [ 1027.723724][ T6475] bridge0: port 2(bridge_slave_1) entered disabled state [ 1027.743643][ T6475] device bridge_slave_0 left promiscuous mode [ 1027.749958][ T6475] bridge0: port 1(bridge_slave_0) entered disabled state [ 1028.094627][T16060] autofs4:pid:16060:autofs_fill_super: called with bogus options [ 1028.180513][ T6475] team0 (unregistering): Port device team_slave_1 removed [ 1028.229660][ T6475] team0 (unregistering): Port device team_slave_0 removed [ 1028.284884][ T6475] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1028.362337][ T6475] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1029.353679][ T6475] bond0 (unregistering): Released all slaves [ 1029.573442][T12031] Bluetooth: hci2: command 0x040f tx timeout [ 1030.748429][T15983] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1030.773598][T15983] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1030.821557][T15983] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1030.893732][T15983] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1031.215312][T15983] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1031.588318][T11324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1031.655798][T12031] Bluetooth: hci2: command 0x0419 tx timeout [ 1031.680832][T11324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1031.831790][T15983] 8021q: adding VLAN 0 to HW filter on device team0 [ 1031.894857][T11324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1031.913696][T11324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1031.932132][T11324] bridge0: port 1(bridge_slave_0) entered blocking state [ 1031.939275][T11324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1032.011666][T11324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1032.031154][T11324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1032.050513][T11324] bridge0: port 2(bridge_slave_1) entered blocking state [ 1032.057711][T11324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1032.229379][T15983] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1032.554421][T15983] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1032.776984][T11324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1032.795356][T11324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1032.851538][T11324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1032.899929][T11324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1032.957444][T11324] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1033.054365][T11324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1033.066909][T11324] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1033.077044][T11324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1033.089304][T11324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1033.099298][T11324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1033.111131][T11324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1033.252889][T11324] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1033.304082][T11324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1035.009910][T15983] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1035.025231][T16148] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3256'. [ 1035.067621][T11324] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1035.085112][T11324] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1035.227608][T16148] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3256'. [ 1035.696586][T16148] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3256'. [ 1036.410856][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1036.450623][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1036.538767][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1036.576884][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1036.622464][T15983] device veth0_vlan entered promiscuous mode [ 1036.648169][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1036.685171][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1036.737221][T15983] device veth1_vlan entered promiscuous mode [ 1036.873629][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1036.897319][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1036.937452][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1037.094391][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1037.340593][T15983] device veth0_macvtap entered promiscuous mode [ 1037.785774][T15983] device veth1_macvtap entered promiscuous mode [ 1037.944748][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1037.968088][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1038.026197][T15983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1038.092004][T15983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1038.123037][T15983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1038.153233][T15983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1038.206076][T15983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1038.362472][T15983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1038.573618][T15983] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1038.783004][T15983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1039.052769][T15983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1039.068611][T15983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1039.163423][T15983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1039.207889][T15983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1039.239075][T15983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1039.286682][T15983] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1039.296239][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1039.315671][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1039.354814][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1039.401093][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1039.555784][T15983] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1039.770895][T15983] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1039.826215][T15983] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1040.048131][T15983] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1041.789935][ T26] audit: type=1326 audit(1792747027.628:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16228 comm="syz.8.3278" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0de1a8559 code=0x7ffc0000 [ 1041.924208][T16233] tmpfs: Unknown parameter 'usrquota' [ 1041.963278][ T26] audit: type=1326 audit(1792747027.668:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16228 comm="syz.8.3278" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0de1a8559 code=0x7ffc0000 [ 1042.070497][ T26] audit: type=1326 audit(1792747027.668:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16228 comm="syz.8.3278" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd0de1a8559 code=0x7ffc0000 [ 1042.111364][ T1219] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1042.126395][ T1219] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1042.134946][ T1219] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1042.140232][T11324] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1042.142820][ T1219] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1042.328451][T11324] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1042.368731][ T26] audit: type=1326 audit(1792747027.668:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16228 comm="syz.8.3278" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0de1a8559 code=0x7ffc0000 [ 1042.393302][ T26] audit: type=1326 audit(1792747027.678:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16228 comm="syz.8.3278" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fd0de1a8559 code=0x7ffc0000 [ 1042.463032][ T26] audit: type=1326 audit(1792747027.678:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16228 comm="syz.8.3278" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0de1a8559 code=0x7ffc0000 [ 1042.616243][T16245] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3281'. [ 1042.909865][ T26] audit: type=1326 audit(1792747027.678:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16228 comm="syz.8.3278" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7fd0de1a8559 code=0x7ffc0000 [ 1043.118589][ T26] audit: type=1326 audit(1792747027.678:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16228 comm="syz.8.3278" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0de1a8559 code=0x7ffc0000 [ 1045.598937][T16279] rxe_eth0 speed is unknown, defaulting to 1000 [ 1047.379070][T16279] chnl_net:caif_netlink_parms(): no params data found [ 1047.684362][T12029] Bluetooth: hci4: command 0x0409 tx timeout [ 1047.729122][T16303] Invalid ELF header magic: != ELF [ 1049.733284][T12031] Bluetooth: hci4: command 0x041b tx timeout [ 1050.536758][T16312] bridge0: port 2(bridge_slave_1) entered disabled state [ 1050.544122][T16312] bridge0: port 1(bridge_slave_0) entered disabled state [ 1050.710675][T16334] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1050.913831][T16342] netlink: 168 bytes leftover after parsing attributes in process `syz.6.3306'. [ 1051.813287][T12031] Bluetooth: hci4: command 0x040f tx timeout [ 1052.079827][T16312] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1052.131771][T16312] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1052.555296][T16312] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1052.564504][T16312] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1052.573796][T16312] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1052.582718][T16312] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1052.656534][T16312] device wlan0 left promiscuous mode [ 1052.716697][T16312] Process accounting resumed [ 1052.775834][T16279] bridge0: port 1(bridge_slave_0) entered blocking state [ 1052.793304][T16279] bridge0: port 1(bridge_slave_0) entered disabled state [ 1052.813491][T16279] device bridge_slave_0 entered promiscuous mode [ 1052.844893][T16334] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3306'. [ 1052.861711][T16347] netlink: 'syz.5.3309': attribute type 8 has an invalid length. [ 1052.930196][T11324] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1052.980766][T16279] bridge0: port 2(bridge_slave_1) entered blocking state [ 1052.998081][T16279] bridge0: port 2(bridge_slave_1) entered disabled state [ 1053.030081][T16279] device bridge_slave_1 entered promiscuous mode [ 1053.066468][T11324] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1053.135753][T16361] fuse: Bad value for 'fd' [ 1053.192636][T16279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1053.241769][T11324] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1053.262728][T16279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1053.304280][T11324] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1053.325044][T16370] Invalid ELF header magic: != ELF [ 1053.357448][T16279] team0: Port device team_slave_0 added [ 1053.379466][T16279] team0: Port device team_slave_1 added [ 1053.485832][T16279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1053.507483][T16279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1053.578284][T16279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1053.614262][T16279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1053.624687][T16279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1053.652293][T16279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1053.793462][T16279] device hsr_slave_0 entered promiscuous mode [ 1053.818384][T16279] device hsr_slave_1 entered promiscuous mode [ 1053.846442][T16279] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1053.873539][T16279] Cannot create hsr debugfs directory [ 1053.903525][T12029] Bluetooth: hci4: command 0x0419 tx timeout [ 1054.089026][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.114935][T11324] bond1: (slave ip6erspan0): Releasing active interface [ 1054.216027][T16386] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3320'. [ 1055.048675][T16392] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3323'. [ 1055.060365][ T4201] Bluetooth: Unknown LE signaling command 0x0f [ 1055.067122][ T4201] Bluetooth: Wrong link type (-22) [ 1055.905178][ T4201] Bluetooth: Unknown LE signaling command 0x03 [ 1055.911395][ T4201] Bluetooth: Wrong link type (-22) [ 1055.929982][T16392] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3323'. [ 1058.258919][T11324] IPVS: stopping backup sync thread 11533 ... [ 1059.387842][T16433] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3332'. [ 1059.630824][T16435] loop6: detected capacity change from 0 to 128 [ 1059.694443][T16435] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1059.723408][T16435] ext4 filesystem being mounted at /7/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1060.024658][T16279] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1060.103765][T16279] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1060.164032][T16279] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1060.212993][T16279] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1060.469650][T16279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1060.508686][T16279] 8021q: adding VLAN 0 to HW filter on device team0 [ 1060.571827][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1060.584405][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1060.623941][T11324] device hsr_slave_0 left promiscuous mode [ 1060.630452][T11324] device hsr_slave_1 left promiscuous mode [ 1060.652713][T11324] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1060.675351][T11324] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1060.704301][T11324] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1060.711835][T11324] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1061.624237][T11324] device veth1_macvtap left promiscuous mode [ 1061.630327][T11324] device veth0_macvtap left promiscuous mode [ 1061.719523][T11324] device veth1_vlan left promiscuous mode [ 1061.734108][T11324] device veth0_vlan left promiscuous mode [ 1062.349155][T11324] bond2 (unregistering): (slave bond0): Releasing active interface [ 1062.378699][T16472] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3336'. [ 1062.390785][T11324] bond2 (unregistering): Released all slaves [ 1062.405180][T11324] bond1 (unregistering): Released all slaves [ 1062.612030][T11324] team0 (unregistering): Port device team_slave_1 removed [ 1062.659036][T11324] team0 (unregistering): Port device team_slave_0 removed [ 1062.687983][T11324] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1062.730339][T11324] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1062.882620][T11324] bond0 (unregistering): Released all slaves [ 1062.915283][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1062.926028][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1062.945969][ T4331] bridge0: port 1(bridge_slave_0) entered blocking state [ 1062.953113][ T4331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1062.999579][T16464] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3336'. [ 1063.032348][T16484] loop6: detected capacity change from 0 to 2048 [ 1063.128747][T16279] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1063.165334][T16279] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1063.178977][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1063.194033][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1063.224084][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1063.232807][ T4331] bridge0: port 2(bridge_slave_1) entered blocking state [ 1063.239930][ T4331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1063.249083][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1063.281606][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1063.340243][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1063.391894][T16484] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1063.416658][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1063.456302][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1063.524117][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1063.905377][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1063.958346][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1063.987789][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1064.023688][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1064.097773][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1064.123241][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1065.488317][T16491] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3347'. [ 1066.832678][T16517] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3353'. [ 1067.524031][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1067.531532][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1067.744510][T16279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1067.780779][T16529] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3356'. [ 1067.814986][T16524] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3356'. [ 1068.230590][T16544] Invalid ELF header magic: != ELF [ 1068.799411][ T6475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1068.822206][ T6475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1069.039798][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1069.060769][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1069.111862][T16279] device veth0_vlan entered promiscuous mode [ 1069.123964][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1069.158829][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1069.221990][T16279] device veth1_vlan entered promiscuous mode [ 1069.268393][T16554] fuse: Bad value for 'fd' [ 1069.338221][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1069.377037][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1069.421285][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1069.475295][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1069.531110][T16279] device veth0_macvtap entered promiscuous mode [ 1069.572054][T16279] device veth1_macvtap entered promiscuous mode [ 1069.679825][T16279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1069.747864][T16279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1069.818749][T16279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1069.883205][T16279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1069.958801][T16279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1070.010134][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1070.038888][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1070.080651][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1070.138112][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1070.198570][T16279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1070.261883][T16279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1070.320094][T16279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1070.383247][T16279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1070.452570][T16279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1070.503097][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1070.526890][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1070.577789][T16279] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1070.617718][T16279] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1070.670890][T16279] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1070.720281][T16279] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1070.992872][T16545] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3359'. [ 1071.244927][T16125] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1071.272685][T16125] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1071.287195][ T1266] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1071.337043][ T1266] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1071.339231][T16565] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3364'. [ 1071.381653][ T6475] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1071.439973][ T6475] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1071.519008][T16571] loop6: detected capacity change from 0 to 128 [ 1073.933423][T16591] fuse: Bad value for 'fd' [ 1073.982117][T16594] loop6: detected capacity change from 0 to 256 [ 1074.095243][T16588] rxe_eth0 speed is unknown, defaulting to 1000 [ 1074.242661][T16597] tmpfs: Unknown parameter 'quota' [ 1074.432191][T16603] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3374'. [ 1075.652459][T16618] Invalid ELF header magic: != ELF [ 1077.323001][T12029] Bluetooth: hci0: command 0x0409 tx timeout [ 1077.893377][ T26] audit: type=1326 audit(1792747063.718:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16611 comm="syz.6.3378" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0aa97c0559 code=0x0 [ 1078.040001][T16588] chnl_net:caif_netlink_parms(): no params data found [ 1078.845926][T16633] overlayfs: missing 'lowerdir' [ 1078.924137][T16630] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1078.985039][T16642] loop6: detected capacity change from 0 to 128 [ 1079.011246][T16630] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3382'. [ 1079.129376][T16630] netlink: 168 bytes leftover after parsing attributes in process `syz.7.3382'. [ 1079.174378][T16588] bridge0: port 1(bridge_slave_0) entered blocking state [ 1079.188165][T16588] bridge0: port 1(bridge_slave_0) entered disabled state [ 1079.190366][T16642] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1079.208738][T16642] ext4 filesystem being mounted at /18/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1079.230481][T16588] device bridge_slave_0 entered promiscuous mode [ 1079.309143][T16588] bridge0: port 2(bridge_slave_1) entered blocking state [ 1079.394034][T16588] bridge0: port 2(bridge_slave_1) entered disabled state [ 1079.402148][T16588] device bridge_slave_1 entered promiscuous mode [ 1079.423293][T12029] Bluetooth: hci0: command 0x041b tx timeout [ 1079.435626][T16588] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1079.455679][T16588] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1079.551043][T16588] team0: Port device team_slave_0 added [ 1079.586539][T16588] team0: Port device team_slave_1 added [ 1079.911017][T16658] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3387'. [ 1080.225109][T16588] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1080.308267][T16588] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1080.622862][T16588] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1080.675942][T16588] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1080.682955][T16588] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1081.991856][ T4296] Bluetooth: hci0: command 0x040f tx timeout [ 1081.999815][T16588] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1082.161949][T16588] device hsr_slave_0 entered promiscuous mode [ 1082.191786][T16588] device hsr_slave_1 entered promiscuous mode [ 1082.229643][T16588] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1082.260234][T16588] Cannot create hsr debugfs directory [ 1084.019893][T16703] tipc: Started in network mode [ 1084.035706][T16703] tipc: Node identity ac1414aa, cluster identity 4711 [ 1085.496544][T16703] tipc: New replicast peer: 172.20.20.187 [ 1085.498113][T12032] Bluetooth: hci0: command 0x0419 tx timeout [ 1085.511801][T16703] tipc: Enabled bearer , priority 10 [ 1086.526603][T16717] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3397'. [ 1086.607470][T16722] loop7: detected capacity change from 0 to 512 [ 1086.626698][T13529] tipc: Node number set to 2886997162 [ 1086.741367][T16722] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1086.850320][T16722] EXT4-fs (loop7): 1 truncate cleaned up [ 1086.866182][T16722] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1086.886537][T16732] IPVS: sync thread started: state = BACKUP, mcast_ifn = macsec0, syncid = 3, id = 0 [ 1088.397945][T16756] Invalid ELF header magic: != ELF [ 1088.835665][T16763] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3398'. [ 1089.374431][T16760] loop7: detected capacity change from 0 to 4096 [ 1089.538855][T16760] EXT4-fs (loop7): Mount option "noacl" will be removed by 3.5 [ 1089.538855][T16760] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 1089.538855][T16760] [ 1089.605079][T16760] EXT4-fs (loop7): Journaled quota options ignored when QUOTA feature is enabled [ 1089.813854][T16125] device hsr_slave_0 left promiscuous mode [ 1089.819897][T16760] EXT4-fs (loop7): Ignoring removed orlov option [ 1089.837143][T16125] device hsr_slave_1 left promiscuous mode [ 1089.843142][T16760] EXT4-fs (loop7): Mount option "nouser_xattr" will be removed by 3.5 [ 1089.843142][T16760] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 1089.843142][T16760] [ 1089.944684][T16125] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1090.341077][T16125] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1090.374985][T16125] device bridge_slave_1 left promiscuous mode [ 1090.394526][T16760] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpid,noacl,nodioread_nolock,dioread_lock,stripe=0x0000000000000000,init_itable,grpjquota=wÅü5ÔTÕÔ)­`)Y�Fæ¾nA­½@T<Ÿ3»Ú‚$¢ó×rçcnH³<¿pƒrèñ¹“>ÅwC¾" žð-ùËòöè€Ó8/,orlov,nouser_xattr,,errors=continue. Quota mode: writeback. [ 1090.546565][T16125] bridge0: port 2(bridge_slave_1) entered disabled state [ 1091.325453][T16779] overlayfs: failed to clone upperpath [ 1091.601486][T16125] device bridge_slave_0 left promiscuous mode [ 1092.696921][T16125] bridge0: port 1(bridge_slave_0) entered disabled state [ 1092.802251][T16125] bond3 (unregistering): Released all slaves [ 1092.882770][T16125] bond2 (unregistering): (slave bond0): Releasing active interface [ 1092.954829][T16125] bond2 (unregistering): Released all slaves [ 1093.038756][T16125] bond1 (unregistering): Released all slaves [ 1093.614422][T16125] team0 (unregistering): Port device team_slave_1 removed [ 1093.632716][T16125] team0 (unregistering): Port device team_slave_0 removed [ 1094.552265][T16125] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1094.634174][T16125] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1094.787950][T16125] bond0 (unregistering): Released all slaves [ 1095.066629][T16813] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3417'. [ 1095.103454][T16822] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3412'. [ 1096.014572][T16588] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1096.047831][T16588] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1096.056935][T16827] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3421'. [ 1096.084802][T16588] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1096.102011][T16827] netlink: 168 bytes leftover after parsing attributes in process `syz.5.3421'. [ 1096.111572][T16588] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1096.266979][T16588] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1096.321084][T11324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1096.335340][T11324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1096.356628][T16588] 8021q: adding VLAN 0 to HW filter on device team0 [ 1096.496188][T16588] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1096.518441][T16588] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1096.544677][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1096.557505][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1096.575741][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 1096.582939][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1096.621240][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1096.630245][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1096.638862][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 1096.645970][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1096.654598][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1096.722006][T16834] fuse: Bad value for 'fd' [ 1096.734963][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1096.761762][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1096.874666][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1096.898564][T16838] Invalid ELF header magic: != ELF [ 1096.916395][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1096.962274][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1097.011386][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1097.050255][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1097.099947][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1097.114508][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1097.123554][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1097.131652][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1097.140033][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1097.256576][T16837] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1097.312281][T16837] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 1099.596121][ T6475] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1099.611269][ T6475] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1099.652011][T16588] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1099.882664][T16872] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3431'. [ 1099.967491][T16872] netlink: 168 bytes leftover after parsing attributes in process `syz.5.3431'. [ 1100.179574][T16877] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3430'. [ 1101.347647][T11324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1101.388762][T11324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1101.488096][T11324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1101.507162][T11324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1101.532010][T16588] device veth0_vlan entered promiscuous mode [ 1101.557368][T11324] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1101.569314][T11324] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1101.618317][T16588] device veth1_vlan entered promiscuous mode [ 1101.646021][T11324] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1101.838086][T16588] device veth0_macvtap entered promiscuous mode [ 1101.882586][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1101.906211][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1101.944349][T16588] device veth1_macvtap entered promiscuous mode [ 1101.961340][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1101.975095][T16888] fuse: Bad value for 'fd' [ 1102.002636][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1102.094042][T16588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1102.153197][T16588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1102.212821][T16588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1102.273188][T16588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1102.329520][T16588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1102.361844][T16588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1102.395321][T16588] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1102.421852][T11324] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1102.450674][T11324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1102.548681][T16588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1102.565232][T16588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1102.615754][T16588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1102.668844][T16897] loop7: detected capacity change from 0 to 256 [ 1102.678421][T16588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1102.700061][T16588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1102.728565][T16588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1102.768766][T16588] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1102.788894][T11324] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1102.812691][T11324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1103.546672][T16902] overlayfs: failed to clone upperpath [ 1103.660668][T16588] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1103.679484][T16897] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x5d6de3ec, utbl_chksum : 0xe619d30d) [ 1103.757360][T16588] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1103.784327][T16588] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1103.833443][T16588] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1105.422839][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1105.440588][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1105.479724][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1105.529210][T11333] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1105.540960][T11333] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1105.568517][ T6475] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1105.713314][T16920] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1106.110144][T16928] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3445'. [ 1106.399558][T16931] fuse: Bad value for 'fd' [ 1106.918797][T16945] Invalid ELF header magic: != ELF [ 1107.242603][T16950] rxe_eth0 speed is unknown, defaulting to 1000 [ 1108.027326][T16950] chnl_net:caif_netlink_parms(): no params data found [ 1109.173431][ T4550] Bluetooth: hci3: command 0x0409 tx timeout [ 1109.548812][T16971] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3457'. [ 1109.584566][T16971] netlink: 168 bytes leftover after parsing attributes in process `syz.8.3457'. [ 1109.829782][T16950] bridge0: port 1(bridge_slave_0) entered blocking state [ 1110.017197][T16976] fuse: Bad value for 'fd' [ 1110.023355][T16950] bridge0: port 1(bridge_slave_0) entered disabled state [ 1110.032092][T16950] device bridge_slave_0 entered promiscuous mode [ 1110.113572][T16950] bridge0: port 2(bridge_slave_1) entered blocking state [ 1110.121900][T16950] bridge0: port 2(bridge_slave_1) entered disabled state [ 1110.138467][T16950] device bridge_slave_1 entered promiscuous mode [ 1110.187754][T16983] loop6: detected capacity change from 0 to 2048 [ 1110.234797][T16983] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1110.413974][T16950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1110.426002][T16950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1111.209591][T16950] team0: Port device team_slave_0 added [ 1111.219505][T16950] team0: Port device team_slave_1 added [ 1111.267562][T12031] Bluetooth: hci3: command 0x041b tx timeout [ 1111.302079][T16950] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1111.327318][T16950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1111.395294][T16950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1111.431163][T16950] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1111.453250][T16950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1111.541465][T16950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1112.441137][T16950] device hsr_slave_0 entered promiscuous mode [ 1112.459587][T16950] device hsr_slave_1 entered promiscuous mode [ 1112.479483][T16950] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1113.025541][T16950] Cannot create hsr debugfs directory [ 1113.431143][T12031] Bluetooth: hci3: command 0x040f tx timeout [ 1114.833598][T17015] loop7: detected capacity change from 0 to 128 [ 1114.895235][T17014] Invalid ELF header magic: != ELF [ 1115.369854][T17015] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1115.383552][T17015] ext4 filesystem being mounted at /26/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1115.497308][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.994826][T17025] loop4: detected capacity change from 0 to 32768 [ 1116.120657][T16950] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1116.144030][T17025] XFS: noattr2 mount option is deprecated. [ 1116.149965][T17025] XFS: noattr2 mount option is deprecated. [ 1116.191229][T17031] loop6: detected capacity change from 0 to 4096 [ 1116.373377][ T4296] Bluetooth: hci3: command 0x0419 tx timeout [ 1116.395611][T16950] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1116.486048][T16950] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1116.514092][T17025] XFS (loop4): Cannot mount a V5 filesystem as noattr2. attr2 is always enabled for V5 filesystems. [ 1116.565891][T16950] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1116.831002][T17031] NILFS (loop6): corrupt root inode [ 1116.869334][T17042] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1117.043696][ T4296] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1117.176398][T16950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1117.270657][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1117.311108][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1117.320880][ T4296] usb 8-1: Using ep0 maxpacket: 16 [ 1117.375856][T16950] 8021q: adding VLAN 0 to HW filter on device team0 [ 1117.436692][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1117.463643][ T4296] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 1117.479019][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1117.524049][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 1117.531208][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1117.570448][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1117.675378][ T4296] usb 8-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 1117.693282][ T4296] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1117.717256][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1117.732376][ T4296] usb 8-1: Product: syz [ 1117.749010][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1117.757673][ T4296] usb 8-1: Manufacturer: syz [ 1117.773713][ T4296] usb 8-1: SerialNumber: syz [ 1117.783469][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 1117.790612][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1117.817653][ T4296] usb 8-1: config 0 descriptor?? [ 1117.857408][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1117.892415][ T4296] ftdi_sio 8-1:0.0: FTDI USB Serial Device converter detected [ 1117.912828][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1117.930548][ T4296] usb 8-1: Detected FT232RL [ 1117.955886][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1117.979499][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1118.002425][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1118.020788][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1118.054930][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1118.097270][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1118.106142][ T4296] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1118.131083][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1118.139408][ T4296] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1118.168332][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1118.176626][ T4296] ftdi_sio 8-1:0.0: GPIO initialisation failed: -71 [ 1118.192019][ T4296] usb 8-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1118.210127][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1118.260035][ T4296] usb 8-1: USB disconnect, device number 5 [ 1118.294110][T16950] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1118.308767][ T4296] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1118.364290][ T4296] ftdi_sio 8-1:0.0: device disconnected [ 1119.006015][T17062] loop4: detected capacity change from 0 to 2048 [ 1119.128085][T17062] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1119.246910][T17068] loop7: detected capacity change from 0 to 4096 [ 1119.363644][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1119.384183][T17073] fuse: Bad value for 'fd' [ 1119.452623][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1119.674650][T17071] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1119.986167][T16950] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1120.994375][T17087] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3485'. [ 1122.404562][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1122.434751][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1122.490195][T11333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1122.506871][T11333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1122.616659][T11333] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1122.651559][T11333] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1122.688733][T16950] device veth0_vlan entered promiscuous mode [ 1122.729958][T16950] device veth1_vlan entered promiscuous mode [ 1122.786939][T17120] loop7: detected capacity change from 0 to 2048 [ 1122.795104][T17125] Invalid ELF header magic: != ELF [ 1122.881309][T17120] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1123.325011][T11333] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1123.344357][T11333] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1123.382015][T11333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1123.409538][T11333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1123.426029][T16950] device veth0_macvtap entered promiscuous mode [ 1123.447491][T11333] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1123.570138][T17135] loop7: detected capacity change from 0 to 2048 [ 1123.585608][T16950] device veth1_macvtap entered promiscuous mode [ 1123.670434][T17135] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1124.062959][T16950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1124.241392][T16950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1124.400758][T16950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1124.422094][T16950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1124.432415][T16950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1124.465589][T16950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1124.496074][T16950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1124.517468][T17142] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3501'. [ 1124.529113][T16950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1124.591019][T16950] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1124.630613][T16950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1124.714984][T16950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1124.734457][T16950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1124.745423][T16950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1124.760033][T16950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1124.772427][T16950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1124.788376][T16950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1124.799770][T16950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1124.878533][ T4550] libceph: connect (1)[c::]:6789 error -101 [ 1124.893264][ T4550] libceph: mon0 (1)[c::]:6789 connect error [ 1124.904906][T16950] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1124.923777][T17140] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3501'. [ 1125.185738][ T4550] libceph: connect (1)[c::]:6789 error -101 [ 1125.191786][ T4550] libceph: mon0 (1)[c::]:6789 connect error [ 1125.309964][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1125.322891][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1125.331847][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1125.340791][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1125.353927][T16950] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1125.387518][T16950] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1125.418350][T16950] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1125.563280][T16950] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1125.575992][T17160] loop4: detected capacity change from 0 to 2048 [ 1125.614921][T17153] ceph: No mds server is up or the cluster is laggy [ 1125.659683][T17160] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1125.737057][ T1266] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1125.757067][ T1266] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1125.826476][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1125.858395][ T4331] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1125.867416][ T4331] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1125.877851][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1126.049258][T17171] FAULT_INJECTION: forcing a failure. [ 1126.049258][T17171] name failslab, interval 1, probability 0, space 0, times 0 [ 1126.077925][T17171] CPU: 1 PID: 17171 Comm: syz.6.3511 Not tainted syzkaller #0 [ 1126.085462][T17171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1126.095703][T17171] Call Trace: [ 1126.099046][T17171] [ 1126.102002][T17171] dump_stack_lvl+0x188/0x250 [ 1126.106731][T17171] ? show_regs_print_info+0x20/0x20 [ 1126.112469][T17171] ? load_image+0x410/0x410 [ 1126.117025][T17171] ? __lock_acquire+0x7d40/0x7d40 [ 1126.122100][T17171] ? __context_tracking_exit+0x4c/0x80 [ 1126.127677][T17171] should_fail+0x383/0x4b0 [ 1126.132136][T17171] should_failslab+0x5/0x20 [ 1126.136686][T17171] slab_pre_alloc_hook+0x51/0xc0 [ 1126.141665][T17171] kmem_cache_alloc_trace+0x47/0x290 [ 1126.146983][T17171] ? do_epoll_create+0x107/0x340 [ 1126.152050][T17171] do_epoll_create+0x107/0x340 [ 1126.156849][T17171] __x64_sys_epoll_create1+0x33/0x40 [ 1126.162171][T17171] do_syscall_64+0x4c/0xa0 [ 1126.166616][T17171] ? clear_bhb_loop+0x30/0x80 [ 1126.171325][T17171] ? clear_bhb_loop+0x30/0x80 [ 1126.176036][T17171] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1126.181963][T17171] RIP: 0033:0x7f0aa97c0559 [ 1126.186410][T17171] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1126.206158][T17171] RSP: 002b:00007f0aa7a18028 EFLAGS: 00000246 ORIG_RAX: 0000000000000123 [ 1126.214649][T17171] RAX: ffffffffffffffda RBX: 00007f0aa9a47fa0 RCX: 00007f0aa97c0559 [ 1126.222660][T17171] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000080000 [ 1126.230656][T17171] RBP: 00007f0aa9857ab8 R08: 0000000000000000 R09: 0000000000000000 [ 1126.238659][T17171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1126.246660][T17171] R13: 00007f0aa9a48038 R14: 00007f0aa9a47fa0 R15: 00007ffdeef9e298 [ 1126.254684][T17171] [ 1127.575161][T17179] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3513'. [ 1127.688311][T17188] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3516'. [ 1127.810155][T17193] netlink: 168 bytes leftover after parsing attributes in process `syz.6.3516'. [ 1128.640707][T17202] loop7: detected capacity change from 0 to 2048 [ 1129.115002][T17202] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1130.932234][T17231] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3527'. [ 1131.534983][T17252] loop5: detected capacity change from 0 to 2048 [ 1131.611579][T17252] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=18881, location=18881 [ 1131.698194][T17252] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 1131.756591][T17252] UDF-fs: warning (device loop5): udf_fill_super: No partition found (2) [ 1132.148725][T17264] Invalid ELF header magic: != ELF [ 1132.456975][T17267] loop6: detected capacity change from 0 to 2048 [ 1132.521713][T17267] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1135.193014][T17286] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3543'. [ 1135.429091][T17289] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1135.765214][T17289] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3545'. [ 1135.938333][T17296] netlink: 168 bytes leftover after parsing attributes in process `syz.5.3545'. [ 1138.238817][T17321] loop7: detected capacity change from 0 to 2048 [ 1139.110288][T17336] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3558'. [ 1139.154793][T17321] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1139.437312][T17340] loop4: detected capacity change from 0 to 4096 [ 1139.938899][T17341] FAULT_INJECTION: forcing a failure. [ 1139.938899][T17341] name failslab, interval 1, probability 0, space 0, times 0 [ 1139.952023][T17341] CPU: 0 PID: 17341 Comm: syz.5.3557 Not tainted syzkaller #0 [ 1139.959536][T17341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1139.969648][T17341] Call Trace: [ 1139.972958][T17341] [ 1139.975912][T17341] dump_stack_lvl+0x188/0x250 [ 1139.980642][T17341] ? asm_sysvec_call_function_single+0x16/0x20 [ 1139.986830][T17341] ? show_regs_print_info+0x20/0x20 [ 1139.992054][T17341] ? load_image+0x410/0x410 [ 1139.996607][T17341] should_fail+0x383/0x4b0 [ 1140.001063][T17341] should_failslab+0x5/0x20 [ 1140.005613][T17341] slab_pre_alloc_hook+0x51/0xc0 [ 1140.010587][T17341] kmem_cache_alloc_node+0x47/0x2c0 [ 1140.015809][T17341] ? dup_task_struct+0x57/0xbc0 [ 1140.020776][T17341] dup_task_struct+0x57/0xbc0 [ 1140.025479][T17341] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1140.030709][T17341] ? lockdep_hardirqs_on+0x94/0x140 [ 1140.035960][T17341] copy_process+0x61f/0x3e70 [ 1140.040635][T17341] ? __pidfd_prepare+0x140/0x140 [ 1140.045601][T17341] ? verify_lock_unused+0x140/0x140 [ 1140.050844][T17341] kernel_clone+0x23f/0x990 [ 1140.055405][T17341] ? slab_free_freelist_hook+0xec/0x170 [ 1140.060988][T17341] ? create_io_thread+0x180/0x180 [ 1140.066063][T17341] __x64_sys_clone+0x19a/0x210 [ 1140.070857][T17341] ? __ia32_sys_vfork+0x130/0x130 [ 1140.075925][T17341] ? lockdep_hardirqs_on+0x94/0x140 [ 1140.081165][T17341] do_syscall_64+0x4c/0xa0 [ 1140.085614][T17341] ? clear_bhb_loop+0x30/0x80 [ 1140.090324][T17341] ? clear_bhb_loop+0x30/0x80 [ 1140.095045][T17341] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1140.100970][T17341] RIP: 0033:0x7f28ce0e3559 [ 1140.105416][T17341] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1140.125051][T17341] RSP: 002b:00007f28cc2f8fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1140.133501][T17341] RAX: ffffffffffffffda RBX: 00007f28ce36b180 RCX: 00007f28ce0e3559 [ 1140.141504][T17341] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 1140.149504][T17341] RBP: 00007f28ce17aab8 R08: 0000000000000000 R09: 0000000000000000 [ 1140.157505][T17341] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1140.165505][T17341] R13: 00007f28ce36b218 R14: 00007f28ce36b180 R15: 00007ffc81c3cb68 [ 1140.173554][T17341] [ 1140.945262][T17340] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 1141.071810][T17345] loop7: detected capacity change from 0 to 1024 [ 1141.082638][T17340] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 1141.121402][T17340] ntfs3: loop4: Failed to load $Extend. [ 1142.820660][T17350] loop7: detected capacity change from 0 to 32768 [ 1143.090343][T17369] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3570'. [ 1143.214179][T17350] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop7 scanned by syz.7.3564 (17350) [ 1144.013475][T17376] Invalid ELF header magic: != ELF [ 1145.360189][T17350] BTRFS info (device loop7): using blake2b (blake2b-256-generic) checksum algorithm [ 1145.877186][T17350] BTRFS info (device loop7): turning off barriers [ 1145.887460][T17350] BTRFS info (device loop7): enabling auto defrag [ 1145.894096][T17350] BTRFS info (device loop7): force zlib compression, level 3 [ 1145.901543][T17350] BTRFS info (device loop7): enabling ssd optimizations [ 1145.908579][T17350] BTRFS info (device loop7): using spread ssd allocation scheme [ 1145.916345][T17350] BTRFS info (device loop7): using free space tree [ 1145.922889][T17350] BTRFS info (device loop7): has skinny extents [ 1146.445843][T17392] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 1146.453055][T17392] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 1146.465174][T17392] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready [ 1146.472727][T17392] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready [ 1146.480211][T17392] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 1147.203381][T17418] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1147.322198][T17326] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop7 scanned by udevd (17326) [ 1147.343405][T17350] BTRFS error (device loop7): open_ctree failed: -12 [ 1148.303453][T17422] Bluetooth: hci2: command 0x0406 tx timeout [ 1149.389621][T17418] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1149.398833][T17418] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1149.457203][T17418] usb 7-1: Product: syz [ 1149.461455][T17418] usb 7-1: Manufacturer: syz [ 1149.516729][T17418] usb 7-1: SerialNumber: syz [ 1149.560540][T17418] usb 7-1: config 0 descriptor?? [ 1149.751871][T17441] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3582'. [ 1149.852460][T17418] usb 7-1: can't set config #0, error -71 [ 1149.859918][T17418] usb 7-1: USB disconnect, device number 9 [ 1151.746266][T17466] Invalid ELF header magic: != ELF [ 1151.996249][T17472] loop7: detected capacity change from 0 to 2048 [ 1152.054052][T17418] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1152.132187][T17472] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1152.313316][T17418] usb 6-1: Using ep0 maxpacket: 32 [ 1152.433622][T17418] usb 6-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 1152.483105][T17418] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1152.512219][T17418] usb 6-1: config 0 descriptor?? [ 1152.590579][T17418] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 1152.768831][T17418] input: xirlink-cit as /devices/platform/dummy_hcd.5/usb6/6-1/input/input11 [ 1152.797007][T17418] usb 6-1: USB disconnect, device number 3 [ 1153.500088][T17496] loop4: detected capacity change from 0 to 128 [ 1153.769234][T17496] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1153.786779][T17496] ext4 filesystem being mounted at /33/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1155.296155][T17528] loop5: detected capacity change from 0 to 512 [ 1158.337659][T17566] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3615'. [ 1158.633535][T17570] Invalid ELF header magic: != ELF [ 1159.345560][T17566] netlink: 168 bytes leftover after parsing attributes in process `syz.8.3615'. [ 1162.364341][T17611] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3630'. [ 1162.446752][T17416] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 1162.569887][T17614] Invalid ELF header magic: != ELF [ 1163.140239][T17612] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3630'. [ 1163.229465][T17416] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1163.248900][T17416] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1163.279440][T17416] usb 7-1: Product: syz [ 1163.290848][T17416] usb 7-1: Manufacturer: syz [ 1163.301436][T17416] usb 7-1: SerialNumber: syz [ 1163.332932][T17416] usb 7-1: config 0 descriptor?? [ 1163.757745][T17629] loop4: detected capacity change from 0 to 4096 [ 1163.924124][T17629] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1163.935494][T17629] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 4096) [ 1163.974960][T17416] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1164.022533][T17633] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1164.493278][T17422] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1164.570164][T17638] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3636'. [ 1164.822181][T17645] overlayfs: failed to clone upperpath [ 1164.896535][T17422] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1164.933420][T17422] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 1164.954665][T17422] usb 8-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 1164.999823][T17422] usb 8-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 1165.015061][T17422] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1165.693691][T17422] cxacru 8-1:1.0: send of cm 0x91 failed (-71) [ 1165.702705][T17422] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 1165.723943][T17422] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 1165.754533][T17422] cxacru: probe of 8-1:1.0 failed with error -71 [ 1165.779081][T17422] usb 8-1: USB disconnect, device number 6 [ 1166.043495][T17416] dvb_usb_rtl28xxu: probe of 7-1:0.0 failed with error -71 [ 1166.070448][T17416] usb 7-1: USB disconnect, device number 10 [ 1166.191969][T17664] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3645'. [ 1166.716352][T17666] netlink: 168 bytes leftover after parsing attributes in process `syz.5.3645'. [ 1168.776460][T17683] loop5: detected capacity change from 0 to 1764 [ 1169.232989][T17418] Bluetooth: hci4: command 0x0406 tx timeout [ 1172.223503][T17706] loop4: detected capacity change from 0 to 4096 [ 1173.319856][T17721] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3655'. [ 1173.374614][T17706] NILFS (loop4): invalid segment: Checksum error in segment payload [ 1173.408571][T17706] NILFS (loop4): trying rollback from an earlier position [ 1173.481670][T17706] NILFS (loop4): recovery complete [ 1173.673303][T17727] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1173.965966][T17742] loop6: detected capacity change from 0 to 4096 [ 1174.037323][T17746] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1175.191132][T17754] mmap: syz.4.3670 (17754) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 1175.231549][T17754] loop4: detected capacity change from 0 to 256 [ 1175.742784][T17758] 9pnet: p9_fd_create_tcp (17758): problem connecting socket to 127.0.0.1 [ 1176.936501][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.330720][T17772] loop7: detected capacity change from 0 to 1764 [ 1177.358756][T17777] loop4: detected capacity change from 0 to 512 [ 1177.402981][T17777] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1177.529790][T17772] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 1177.539631][T17777] EXT4-fs (loop4): 1 truncate cleaned up [ 1177.545437][T17777] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1177.780606][T17785] loop4: detected capacity change from 0 to 4096 [ 1178.335345][T17795] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3675'. [ 1178.344770][T17791] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1178.504458][T17798] netlink: 168 bytes leftover after parsing attributes in process `syz.6.3675'. [ 1179.484165][T17803] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 1179.493114][T17803] overlayfs: missing 'lowerdir' [ 1181.368399][T17824] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3695'. [ 1183.176571][T17858] loop4: detected capacity change from 0 to 64 [ 1184.480753][T17866] loop7: detected capacity change from 0 to 2048 [ 1184.549518][T17866] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1184.733224][T17420] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1186.493357][T17420] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1186.504584][T17877] loop5: detected capacity change from 0 to 512 [ 1186.780663][T17883] loop7: detected capacity change from 0 to 4096 [ 1186.788944][T17877] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 1186.803383][T17420] usb 7-1: New USB device found, idVendor=0ab4, idProduct=0011, bcdDevice=ca.fb [ 1186.851541][T17420] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1186.996228][T17877] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.3713: invalid indirect mapped block 256 (level 1) [ 1187.019405][T17877] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.3713: invalid indirect mapped block 2683928664 (level 1) [ 1187.028605][T17420] usb 7-1: Product: syz [ 1187.041357][T17890] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1187.053413][T17420] usb 7-1: Manufacturer: syz [ 1187.058434][T17420] usb 7-1: SerialNumber: syz [ 1187.268043][T17420] usb 7-1: config 0 descriptor?? [ 1187.654311][T17877] EXT4-fs (loop5): 1 truncate cleaned up [ 1187.703361][T17420] usb 7-1: can't set config #0, error -71 [ 1187.793442][T17877] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,max_dir_size_kb=0x0000000000000009,stripe=0x0000000000000ee9,nodioread_nolock,discard,usrjquota=.nouid32,noauto_da_alloc,jqfmt=vfsv0,barrier,nogrpid,,,errors=continue. Quota mode: writeback. [ 1187.845497][T17420] usb 7-1: USB disconnect, device number 11 [ 1188.747581][T17886] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:476: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 1189.876246][T17916] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3723'. [ 1189.887421][T13527] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 1190.457665][T17918] loop6: detected capacity change from 0 to 2048 [ 1190.578102][T17918] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1190.685402][T17925] loop7: detected capacity change from 0 to 2048 [ 1190.881890][T13527] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 1190.951991][T17925] EXT4-fs (loop7): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,auto_da_alloc=0x000000000000ffff,noblock_validity,noinit_itable,max_batch_time=0x00000000000003ff,. Quota mode: none. [ 1191.133626][T13527] usb 5-1: New USB device found, idVendor=1235, idProduct=8012, bcdDevice= 0.40 [ 1191.194676][T13527] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1191.302632][T13527] usb 5-1: Product: syz [ 1191.713183][T13527] usb 5-1: Manufacturer: syz [ 1191.717855][T13527] usb 5-1: SerialNumber: syz [ 1191.939630][T17935] EXT4-fs error (device loop7): ext4_find_extent:893: inode #2: comm syz.7.3727: inode has invalid extent depth: 8 [ 1192.034700][T17935] EXT4-fs (loop7): Remounting filesystem read-only [ 1192.042900][T17935] EXT4-fs error (device loop7): ext4_find_extent:893: inode #2: comm syz.7.3727: inode has invalid extent depth: 8 [ 1192.079930][T17935] EXT4-fs (loop7): Remounting filesystem read-only [ 1192.172521][T17936] EXT4-fs error (device loop7): ext4_find_extent:893: inode #2: comm syz.7.3727: inode has invalid extent depth: 8 [ 1192.189528][T17936] EXT4-fs (loop7): Remounting filesystem read-only [ 1192.201790][T17936] EXT4-fs error (device loop7): ext4_find_extent:893: inode #2: comm syz.7.3727: inode has invalid extent depth: 8 [ 1192.455347][T17936] EXT4-fs (loop7): Remounting filesystem read-only [ 1193.993688][T13527] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1194.119748][T13527] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1194.217934][T17958] loop4: detected capacity change from 0 to 8 [ 1194.447842][T17958] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 1194.465695][T13527] usb 5-1: USB disconnect, device number 6 [ 1199.658338][T13527] Bluetooth: hci0: command 0x0406 tx timeout [ 1200.005843][T18019] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3755'. [ 1200.091168][T18020] netlink: 168 bytes leftover after parsing attributes in process `syz.5.3755'. [ 1200.117157][T18024] netlink: 9456 bytes leftover after parsing attributes in process `syz.4.3756'. [ 1200.148949][T18024] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3756'. [ 1200.314151][T18031] loop4: detected capacity change from 0 to 4096 [ 1200.421615][T18034] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1200.623294][T17420] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1200.873203][T17420] usb 7-1: Using ep0 maxpacket: 32 [ 1201.143393][T17420] usb 7-1: config 0 has an invalid interface number: 196 but max is 0 [ 1201.156393][T17420] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1201.170678][T17420] usb 7-1: config 0 has no interface number 0 [ 1201.177590][T17420] usb 7-1: config 0 interface 196 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1201.191606][T17420] usb 7-1: config 0 interface 196 has no altsetting 0 [ 1201.363387][T17420] usb 7-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 1201.380246][T17420] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1201.390179][T17420] usb 7-1: Product: syz [ 1201.407293][T17420] usb 7-1: Manufacturer: syz [ 1201.418451][T17420] usb 7-1: SerialNumber: syz [ 1201.464090][T17420] usb 7-1: config 0 descriptor?? [ 1201.829559][T18065] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3773'. [ 1201.854742][T17420] ipheth 7-1:0.196: Unable to find endpoints [ 1201.874691][T18065] netlink: 168 bytes leftover after parsing attributes in process `syz.8.3773'. [ 1202.066301][T13530] usb 7-1: USB disconnect, device number 12 [ 1203.215644][T18086] overlayfs: failed to clone upperpath [ 1203.251323][T18084] loop7: detected capacity change from 0 to 4096 [ 1203.360684][T18092] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1204.304368][T18095] overlayfs: failed to create directory ./file0/work (errno: 13); mounting read-only [ 1204.835124][T18102] loop7: detected capacity change from 0 to 2048 [ 1204.884392][T18104] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3786'. [ 1204.915540][T18104] netlink: 168 bytes leftover after parsing attributes in process `syz.8.3786'. [ 1204.931048][T18102] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1205.417638][T13530] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1205.494119][T18114] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 1205.508734][T18114] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready [ 1205.517440][T18114] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 1207.577607][T18121] overlayfs: failed to clone upperpath [ 1207.989869][T13530] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1208.000239][T13530] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 1208.011688][T13530] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 1208.024804][T13530] usb 5-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 1208.033970][T13530] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1208.913291][T13530] usb 5-1: can't set config #1, error -71 [ 1208.924277][T13530] usb 5-1: USB disconnect, device number 7 [ 1208.945855][T18131] loop6: detected capacity change from 0 to 4096 [ 1209.007893][T18136] loop5: detected capacity change from 0 to 512 [ 1209.087556][T18132] rxe_eth0 speed is unknown, defaulting to 1000 [ 1209.146003][T18138] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1210.379230][T18132] chnl_net:caif_netlink_parms(): no params data found [ 1211.718941][T17418] Bluetooth: hci5: command 0x0409 tx timeout [ 1212.287860][T18132] bridge0: port 1(bridge_slave_0) entered blocking state [ 1212.386541][T18132] bridge0: port 1(bridge_slave_0) entered disabled state [ 1212.494757][T18132] device bridge_slave_0 entered promiscuous mode [ 1212.618450][T18132] bridge0: port 2(bridge_slave_1) entered blocking state [ 1212.696644][T18132] bridge0: port 2(bridge_slave_1) entered disabled state [ 1212.998518][T18132] device bridge_slave_1 entered promiscuous mode [ 1213.100234][T18132] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1213.138666][T18132] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1213.239260][T18132] team0: Port device team_slave_0 added [ 1213.260237][T18132] team0: Port device team_slave_1 added [ 1213.283525][T17420] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1213.325711][T18132] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1213.421031][T18193] loop6: detected capacity change from 0 to 128 [ 1213.989851][T18132] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1214.112104][T18132] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1214.149622][T17422] Bluetooth: hci5: command 0x041b tx timeout [ 1214.184193][T18193] hpfs: Bad version 183,140. Mount readonly to go around [ 1214.191749][T18193] hpfs: please try recent version of HPFS driver at http://artax.karlin.mff.cuni.cz/~mikulas/vyplody/hpfs/index-e.cgi and if it still can't understand this format, contact author - mikulas@artax.karlin.mff.cuni.cz [ 1214.247964][T18132] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1214.268625][T18132] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1214.296905][T18198] loop4: detected capacity change from 0 to 512 [ 1214.303256][T17418] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1214.312036][T18132] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1214.371172][T18132] device hsr_slave_0 entered promiscuous mode [ 1214.383025][T18132] device hsr_slave_1 entered promiscuous mode [ 1214.391355][T18132] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1214.402786][T18132] Cannot create hsr debugfs directory [ 1214.473397][T17420] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1214.513253][T17420] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 1214.543766][T17420] usb 8-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 1214.559195][T17418] usb 6-1: Using ep0 maxpacket: 16 [ 1214.565405][T17420] usb 8-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 1214.590357][T17420] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1214.683570][T17418] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1214.706848][T17418] usb 6-1: config 0 has no interface number 0 [ 1214.728404][T17418] usb 6-1: config 0 interface 1 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1214.742977][T17418] usb 6-1: config 0 interface 1 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1214.744725][T18132] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1214.767614][T17418] usb 6-1: config 0 interface 1 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1214.787851][T17418] usb 6-1: config 0 interface 1 has no altsetting 0 [ 1214.796544][T17418] usb 6-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 1214.811893][T17418] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1214.838592][T17418] usb 6-1: config 0 descriptor?? [ 1214.888241][T17418] usbhid 6-1:0.1: fixing wrong optional hid class descriptors count [ 1214.916441][T18132] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1214.992029][T18132] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1215.058948][T18132] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1215.184111][T17420] cxacru 8-1:1.0: send of cm 0x91 failed (-71) [ 1215.195320][T17420] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 1215.208880][T17420] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 1215.220080][T17420] cxacru: probe of 8-1:1.0 failed with error -71 [ 1215.252109][T17420] usb 8-1: USB disconnect, device number 7 [ 1215.327586][T17418] elan 0003:04F3:074D.0005: unknown main item tag 0x0 [ 1215.340197][T17418] elan 0003:04F3:074D.0005: unknown main item tag 0x0 [ 1215.349584][T17418] elan 0003:04F3:074D.0005: unknown main item tag 0x0 [ 1215.361136][T17418] elan 0003:04F3:074D.0005: unknown main item tag 0x0 [ 1215.370510][T17418] elan 0003:04F3:074D.0005: unknown main item tag 0x0 [ 1215.382939][T17418] elan 0003:04F3:074D.0005: unknown main item tag 0x0 [ 1215.392410][T17418] elan 0003:04F3:074D.0005: unknown main item tag 0x0 [ 1215.406729][T17418] elan 0003:04F3:074D.0005: unknown main item tag 0x0 [ 1215.417903][T17418] elan 0003:04F3:074D.0005: unknown main item tag 0x0 [ 1215.428600][T17418] elan 0003:04F3:074D.0005: unknown main item tag 0x0 [ 1215.439108][T17418] elan 0003:04F3:074D.0005: unknown main item tag 0x0 [ 1215.449676][T17418] elan 0003:04F3:074D.0005: unknown main item tag 0x0 [ 1215.460207][T17418] elan 0003:04F3:074D.0005: unknown main item tag 0x0 [ 1215.470438][T17418] elan 0003:04F3:074D.0005: unknown main item tag 0x0 [ 1215.481978][T17418] elan 0003:04F3:074D.0005: unbalanced collection at end of report description [ 1215.511982][T17418] elan 0003:04F3:074D.0005: Hid Parse failed [ 1215.531905][T17418] elan: probe of 0003:04F3:074D.0005 failed with error -22 [ 1215.573038][T17418] usb 6-1: USB disconnect, device number 4 [ 1216.214040][T17418] Bluetooth: hci5: command 0x040f tx timeout [ 1216.642412][T18132] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1216.667433][T18132] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1216.685663][T18132] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1216.701823][T18132] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1216.850348][T18132] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1216.888980][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1216.900551][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1216.922222][T18132] 8021q: adding VLAN 0 to HW filter on device team0 [ 1216.941355][T11333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1216.958707][T11333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1216.970439][T11333] bridge0: port 1(bridge_slave_0) entered blocking state [ 1216.977619][T11333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1217.009798][T11333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1217.028888][T11333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1217.042043][T11333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1217.059111][T11333] bridge0: port 2(bridge_slave_1) entered blocking state [ 1217.066295][T11333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1217.082936][T11333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1217.101659][T11333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1217.125275][T11333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1217.136831][T11333] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1217.146281][T11333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1217.243371][ T4267] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1217.266211][T11333] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1217.300296][T11333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1217.317894][T11333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1217.330138][T11333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1217.345076][T11333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1217.362755][T18132] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1217.425222][T11333] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1217.693963][ T4267] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1217.766645][ T4267] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 1217.959605][ T4267] usb 8-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 1218.019743][ T4267] usb 8-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 1218.063149][ T4267] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1218.124371][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1218.131875][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1218.182060][T18132] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1218.294075][T17416] Bluetooth: hci5: command 0x0419 tx timeout [ 1218.508875][T11333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1218.520628][T11333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1218.562254][T11333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1218.563465][ T4267] cxacru 8-1:1.0: send of cm 0x91 failed (-71) [ 1218.582442][T11333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1218.583257][ T4267] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 1218.608893][T18132] device veth0_vlan entered promiscuous mode [ 1218.615177][ T4267] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 1218.628664][T11333] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1218.636164][ T4267] cxacru: probe of 8-1:1.0 failed with error -71 [ 1218.647598][T11333] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1218.666948][T18132] device veth1_vlan entered promiscuous mode [ 1218.681999][ T4267] usb 8-1: USB disconnect, device number 8 [ 1218.742953][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1218.761401][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1218.771405][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1218.791374][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1218.809849][T18132] device veth0_macvtap entered promiscuous mode [ 1218.832206][T18132] device veth1_macvtap entered promiscuous mode [ 1218.872275][T18132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1218.890326][T18132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1218.901262][T18132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1218.918882][T18132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1218.932887][T18132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1218.951685][T18132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1218.962330][T18132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1218.981151][T18132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1218.991624][T18132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1219.019020][T18132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1219.052561][T18132] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1219.071889][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1219.083577][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1219.122508][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1219.139661][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1219.154004][T18132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1219.172829][T18132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1219.203753][T18132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1219.239486][T18132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1219.280198][T18132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1219.317633][T18263] loop5: detected capacity change from 0 to 4096 [ 1219.333876][T18132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1219.356408][T18132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1219.582411][T18132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1219.606667][T18132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1219.633246][T13530] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1219.646012][T18268] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1219.688674][T18132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1219.839328][T18132] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1219.908705][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1219.962783][ T4614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1220.096620][T18132] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1220.173647][T13530] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1220.185095][T18132] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1220.229587][T13530] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 1220.263810][T18132] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1220.308527][T13530] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 1220.330586][T18132] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1220.404829][T13530] usb 7-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 1220.468950][T13530] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1220.587333][T12031] libceph: connect (1)[c::]:6789 error -101 [ 1220.594269][T12031] libceph: mon0 (1)[c::]:6789 connect error [ 1220.611831][ T4332] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1220.631798][ T4332] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1220.662860][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1220.679303][ T4332] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1220.688189][ T4332] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1220.696685][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1221.536718][T12031] libceph: connect (1)[c::]:6789 error -101 [ 1221.544018][T18285] ceph: No mds server is up or the cluster is laggy [ 1221.563414][T12031] libceph: mon0 (1)[c::]:6789 connect error [ 1221.662198][T18297] loop8: detected capacity change from 0 to 128 [ 1222.594561][T13530] cxacru 7-1:1.0: send of cm 0x91 failed (-71) [ 1222.600795][T13530] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 1223.588868][T13530] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 1223.647798][T13530] cxacru: probe of 7-1:1.0 failed with error -71 [ 1226.130046][T13530] usb 7-1: USB disconnect, device number 13 [ 1226.479122][T18336] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3851'. [ 1226.722146][T18338] netlink: 168 bytes leftover after parsing attributes in process `syz.5.3851'. [ 1227.505527][T18353] FAULT_INJECTION: forcing a failure. [ 1227.505527][T18353] name failslab, interval 1, probability 0, space 0, times 0 [ 1227.542543][T18353] CPU: 1 PID: 18353 Comm: syz.7.3858 Not tainted syzkaller #0 [ 1227.550068][T18353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1227.560173][T18353] Call Trace: [ 1227.563476][T18353] [ 1227.566426][T18353] dump_stack_lvl+0x188/0x250 [ 1227.571144][T18353] ? show_regs_print_info+0x20/0x20 [ 1227.576394][T18353] ? load_image+0x410/0x410 [ 1227.580960][T18353] ? __might_sleep+0xf0/0xf0 [ 1227.585578][T18353] ? __lock_acquire+0x7d40/0x7d40 [ 1227.590647][T18353] should_fail+0x383/0x4b0 [ 1227.595106][T18353] should_failslab+0x5/0x20 [ 1227.599643][T18353] slab_pre_alloc_hook+0x51/0xc0 [ 1227.604604][T18353] ? security_inode_alloc+0x30/0x110 [ 1227.609930][T18353] kmem_cache_alloc+0x3d/0x280 [ 1227.614727][T18353] security_inode_alloc+0x30/0x110 [ 1227.619869][T18353] inode_init_always+0x8e5/0xc90 [ 1227.624840][T18353] new_inode_pseudo+0x8e/0x210 [ 1227.629635][T18353] new_inode+0x25/0x1d0 [ 1227.633821][T18353] shmem_get_inode+0x304/0xa40 [ 1227.638724][T18353] __shmem_file_setup+0x10b/0x290 [ 1227.643779][T18353] ? shmem_file_setup+0x13/0x30 [ 1227.648663][T18353] __se_sys_memfd_create+0x290/0x450 [ 1227.654038][T18353] ? __x64_sys_memfd_create+0x60/0x60 [ 1227.659444][T18353] ? lockdep_hardirqs_on+0x94/0x140 [ 1227.664680][T18353] do_syscall_64+0x4c/0xa0 [ 1227.669144][T18353] ? clear_bhb_loop+0x30/0x80 [ 1227.673844][T18353] ? clear_bhb_loop+0x30/0x80 [ 1227.678553][T18353] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1227.684493][T18353] RIP: 0033:0x7fd0a8295559 [ 1227.688921][T18353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1227.708518][T18353] RSP: 002b:00007fd0a64ece08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 1227.717150][T18353] RAX: ffffffffffffffda RBX: 00000000000105a0 RCX: 00007fd0a8295559 [ 1227.725121][T18353] RDX: 00007fd0a64ecee0 RSI: 0000000000000000 RDI: 00007fd0a832cc98 [ 1227.733087][T18353] RBP: 0000200000019940 R08: 00000000ffffffff R09: 0000000000000000 [ 1227.741074][T18353] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000340 [ 1227.749094][T18353] R13: 00007fd0a64ecee0 R14: 00007fd0a64ecea0 R15: 0000200000000440 [ 1227.757076][T18353] [ 1229.592657][T18366] afs: Unknown parameter 'flocRª³«…K›autocell' [ 1229.861198][T18377] overlayfs: failed to clone upperpath [ 1229.921004][T18379] loop7: detected capacity change from 0 to 4096 [ 1230.011585][T18384] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1230.411238][T18391] loop8: detected capacity change from 0 to 2048 [ 1230.418317][T18393] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3868'. [ 1230.453304][T17418] Bluetooth: hci3: command 0x0406 tx timeout [ 1230.730102][T18401] netlink: 168 bytes leftover after parsing attributes in process `syz.7.3868'. [ 1231.233630][T18391] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=4096, location=4096 [ 1231.243963][T18391] UDF-fs: error (device loop8): udf_process_sequence: Primary Volume Descriptor not found! [ 1231.340719][T18391] UDF-fs: error (device loop8): udf_process_sequence: Primary Volume Descriptor not found! [ 1231.565155][T18391] UDF-fs: Scanning with blocksize 512 failed [ 1231.958312][T18391] UDF-fs: warning (device loop8): udf_load_vrs: No anchor found [ 1232.121810][T18414] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3862'. [ 1232.143282][T18391] UDF-fs: Scanning with blocksize 1024 failed [ 1232.196691][T18391] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=512, location=512 [ 1232.319979][T18391] UDF-fs: warning (device loop8): udf_load_vrs: No anchor found [ 1232.346322][T18391] UDF-fs: Scanning with blocksize 2048 failed [ 1232.381598][T18391] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 1232.441081][T18391] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=512, location=512 [ 1232.520665][T18391] UDF-fs: warning (device loop8): udf_load_vrs: No anchor found [ 1232.563634][T18391] UDF-fs: Scanning with blocksize 4096 failed [ 1232.589592][T18391] UDF-fs: warning (device loop8): udf_fill_super: No partition found (1) [ 1234.442159][T18436] tmpfs: Unknown parameter 'quota' [ 1237.851972][T18478] netlink: 'syz.5.3895': attribute type 8 has an invalid length. [ 1237.973298][T16125] unregister_netdevice: waiting for vcan0 to become free. Usage count = 2 [ 1238.444145][ T1423] ieee802154 phy1 wpan1: encryption failed: -22