last executing test programs: 8m16.180438033s ago: executing program 0 (id=131): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x1, 0xf, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x1d}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000000), &(0x7f0000000140)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 8m16.031557306s ago: executing program 0 (id=133): setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000140)={0x8, 0x200, 0x200, 0x4}, 0x3c) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x2, 0x1) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[], 0x48) select(0x0, 0x0, 0x0, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x3000, 0x100000000000000d) 8m15.142555846s ago: executing program 0 (id=140): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a380102030109021b0001000010000904590201801e2a00090582"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f00000002c0)={0x20, 0x1d}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000780)={0x2c, &(0x7f0000000480)={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0}) 8m11.792075891s ago: executing program 0 (id=161): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002480)={0x2020}, 0x2020) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) close_range(r0, 0xffffffffffffffff, 0x0) 8m11.634973245s ago: executing program 0 (id=162): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x50000, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) 8m11.544287956s ago: executing program 0 (id=163): syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x11d04b8, 0x0, 0x85, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="757365722e7266646e2f2ad9a7ed52b6990dedfb60b053d25a7dff13ad45af6574f861a3c79aab20abfc0df0b12d233631e4f5a67fd33972f2c8d8cc80766c21d4e306e208f6544ca6f469703eb12fa35fee18f7f0d6087eac540a0114d93eadf39ad86b3baa7ab39852ec22713e4c1f96d867e0b754ee63ee90fb606567de8bc6c0b41ed5b62a22e38d221bd2519b"], 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x800) 7m56.451792476s ago: executing program 32 (id=163): syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x11d04b8, 0x0, 0x85, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="757365722e7266646e2f2ad9a7ed52b6990dedfb60b053d25a7dff13ad45af6574f861a3c79aab20abfc0df0b12d233631e4f5a67fd33972f2c8d8cc80766c21d4e306e208f6544ca6f469703eb12fa35fee18f7f0d6087eac540a0114d93eadf39ad86b3baa7ab39852ec22713e4c1f96d867e0b754ee63ee90fb606567de8bc6c0b41ed5b62a22e38d221bd2519b"], 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x800) 6m58.529648728s ago: executing program 2 (id=648): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000300)) r1 = inotify_init() readv(r1, &(0x7f0000000540)=[{&(0x7f0000000340)=""/263, 0x107}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_usb_connect(0x3, 0x41, &(0x7f0000000580)={{0x12, 0x1, 0x10, 0x49, 0x88, 0x78, 0x10, 0x1199, 0x68aa, 0x20ea, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2f, 0x2, 0x9, 0xf8, 0xc0, 0x8, "", [{{0x9, 0x4, 0x7, 0xf, 0x0, 0x95, 0xcf, 0x4}}, {{0x9, 0x4, 0xf2, 0x5, 0x2, 0xff, 0xff, 0xff, 0x3, [], [{{0x9, 0x5, 0x9, 0x0, 0x10, 0x3, 0x40, 0x7, [@generic={0x2, 0x24}]}}, {{0x9, 0x5, 0x3, 0x4, 0x20, 0x3, 0x7, 0x1}}]}}]}}]}}, 0x0) fcntl$setstatus(r1, 0x4, 0x42800) inotify_rm_watch(0xffffffffffffffff, 0x0) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) 6m56.107080962s ago: executing program 2 (id=665): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x4000, &(0x7f0000001780)=ANY=[], 0xa, 0xc35, &(0x7f0000001c40)="$eJzs3UFsHNd9B+D/Gy3FldJWTJwoThoXm7RIZcZyZUkxFatwVzXNNoAsE6GYWwCuSEpdmCIJkmpkIy2YXnroIUBR9JATgdYokKKB0RRBLwWY1gWSiw9FTj0RLWwERQ8sYCCngMXMvhWXFGkzoihR1vfZ5G935r2Z92bWMzTBNy8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIjff/nSmefSw24FAPAgXRn72pmz7v8A8Fi56v//AQAAAAAAAAAAAADgsEtRxBORYv7Kepqo3nfUL7f7bt0eHx7ZudqxVNU8UpUvv+rPnT13/svPD13o5uX27AfUv98+G6+OXb3UeGnu5vzC9OLi9FRjfLY9OTc1vect7Lf+doPVAWjcfO3W1PXri42zz57bsvr2wHv9Hzs5cHHo6dNPdcuOD4+MjG0WqfeWr91zQzp2G+FxNIo4HSme+f7PUisiitj/sag/2HO/3bGqE4NVJ8aHR6qOzLRbs0vlytHugSgiGj2Vmt1jtPO5iFrfA+3D7poRy2XzywYPlt0bm28ttK7NTDdGWwtL7aX23Oxo6rS27E8jiriQIlYiYq3/7s31RRG1SPHdE+vpWkQc6R6HL1UDg3dvR3GAfdyDsp2NvoiV4hE4Z4dYfxTxSqR4/+1TMZmvM9W15osRr5T5w4g3y3wxIpUfjPMR7+7wOeLRVIsi/qI8/xfX01R1PeheVy5/vfHV2etzPWW715Vf8v5w15XiId0fjm3LB+OQX5vqUUSruuKvp3v/YQcAAAAAAAAAAAAAAACA++1YFPGZSPHyf/xxNa44qnHpJy4O/cHAr/aOGX/yQ7ZTln02IpaLvY3JPZoHBo6m0ZQe8ljix1k9iviTPP7v2w+7MQAAAAAAAAAAAAAAAAAAAI+1In4aKV5451Raid45xduzNxpXW9dmOrPCduf+7c6ZvrGxsdFInWzmnMi5nHMl52rOtZxR5Po5mzknci7nXMm5mnMtZxzJ9XM2c07kXM65knM151rOqOX6OZs5J3Iu51zJuZpzLWcckrl7AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+Sooo4heR4jvfXE+RIqIZMRGdXO1/2K0DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEr9qYgfRIrGHzbvLKtFRKr+7ThVfjsfzaNlfiKaQ2W+GM1LOVtV1prffgjtZ3/6UhE/iRT99bfunPB8/vs67+58DOLNb22++2ytk0e6Kwfe6//YyRMXh0Z+48ndXqedGjB4uT1763ZjfHhkZKxncS3v/RM9ywbyfov703UiYvH1N15rzcxML9z7i/IjsI/qj9CLVHtceupF9SJqh6IZD6fvPAbK+/+7keJ33vnP7g2/c/+vx6903t25w8fP/3Tz/v/C9g3t8f5f214v3//Le/pO9/8nepa9kH8a6atF1JduzvedjKgvvv7G6fbN1o3pG9Oz58+c+crQ0FfOnek7GlG/3p6Z7nl1Xw4XAAAAAAAAAAAAAAAAwIOTivi9SNH6yXpqRMTtarzWwMWhp08/dSSOVOOttozbfnXs6qXGS3M35xemFxenpxrjs+3Juanpve6uXg33Gh8eOZDOfKhjB9z+Y/WX5uZfX2jf+KOlHdcfr1+6tri00JrceXUciyKi2btksGrw+PBI1eiZdmu2qjq642D6X15fKuK/IsXk+Ub6fF6Wx/9vH+G/Zfz/8vYNHdD4/4/3LCv3mVIRP48Uv/2XT8bnq3Yej7uOWS73t5Fi8MLncrk4WpbrtqHzXIHOyMCy7P9Fin/8xday3fGQT2yWfW7PB/YRUZ7/E5HiB3/+vfhCXrb1+Q87n//j2zd0QOf/kz3Ljm95XsG+u04+/6cjxYtPvBW/mZd90PM/us/eOJUL33k+xwGd/0/1LBvI+/2t+9N1AAAAAAAAAACAR1pfKuLvIsWPRmrp+bxsL3//N7V9Qwf091+f7lk2tdf5imJ/059ExL/s+8ACAAAAwCHQl4r4aaS4sfTWnTHUW8d/94z//N3N8Z/Dadva6vd8v1Y9N+B+/v6v10De78T+uw0AAAAAAAAAAAAAAAAAAACHSkpFPJ/nU5+oxvNP7Tqf+mqkePl/nsnl0smyXHce+IHqe/3K3OzpSzMzc5Otpda1menG2Hxrcrqs+8lIsf43n8t1i2p+9e5885053jfnYl+IFCN/3y3bmYv9C9Xk+N35wDtzsZdlPx4p/vsftpbtzmP9qc2yZ8uyfx0pvvHPO5c9uVn2XFn2e5Hix99odMseL8t2n4/66c2yz07OFQd0ZgAAAAAAAAAAAAAAAAAAAHic9KUi/ixS/O/NlTtj+fP8/309bytvfqtnvv9tblfz/A9U8//v9vpe5v+vniuwvNteAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgoylFEW9Eivkr62m1v3zfUb/cnr11e3x4ZOdqx1JV80hVvvyqP3f23PkvPz90oZsfXP9++0y8Onb1UuOluZvzC9OLi9NTjfHZ9uTc1PSet7Df+tsNVgegcfO1W1PXry82zj57bsvq2wPv9X/s5MDFoadPP9UtOz48MjLWU6bWd897v0vaZfnRKOKvIsUz3/9Z+lF/RBH7PxYf8tk5aMeqTgxWnRgfHqk6MtNuzS6VK0e7B6KIaPRUanaP0QM4F/vSjFgum182eLDs3th8a6F1bWa6MdpaWGovtedmR1OntWV/GlHEhRSxEhFr/Xdvri+KeC1SfPfEevrX/ogj3ePwpStjXztzdvd2FAfYxz0o29noi1gpHoFzdoj1RxH/FCnef/tU/Ft/RC06X/HFiFfK/GHEm9E536n8YJyPeHeHzxGPploUR8t8/+J6eru/vB50ryuXv9746uz1uZ6y3evKI39/eJAO+bWpHkX8uLrir6d/9981AAAAAAAAAAAAAAAAwCFSxK9HihfeOZWq8cF3xhS3Z280rrauzXSG9XXH/nXHTG9sbGw0UiebOSdyLudcybmacy1nFLl+zmaZ9Y2Nifx+OedKztWcaznjSK6fs5lzIudyzpWcqznXckYt18/ZzDmRcznnSs7VnGs545CM3QMAAAAAAAAAAAAAAAAAAD5aiuqfFN/55nra6O/MLz0RnVw1H+hH3v8HAAD///8K+As=") r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = open(&(0x7f00000000c0)='.\x00', 0x12800, 0x120) getdents(r1, &(0x7f0000000440)=""/4082, 0xff2) 6m55.822265839s ago: executing program 2 (id=678): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x42}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, 0x0, 0x0) close(r0) 6m55.582972484s ago: executing program 2 (id=670): syz_mount_image$exfat(&(0x7f0000000a00), &(0x7f0000001540)='./file0\x00', 0x2010c00, &(0x7f00000003c0)=ANY=[], 0x1, 0x150f, &(0x7f0000001c00)="$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") r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$userns(r0, &(0x7f0000000040)) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000000000)={0x0, 0x87}, 0x20) 6m55.246471932s ago: executing program 2 (id=676): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000001c0)=r1, 0x4) sendmsg$inet(r2, &(0x7f0000000300)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x20000015) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)='R', 0x1}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000100)={r2}) 6m54.43800969s ago: executing program 2 (id=684): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000040)=@x86={0x0, 0x4, 0xa, 0x0, 0xffff, 0x25, 0x5, 0x0, 0xa, 0x8, 0x8, 0x12, 0x0, 0x2, 0x10, 0x0, 0x5, 0x7, 0x1, '\x00', 0x6, 0x4}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="a183000000000000000005"], 0x1c}}, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4040000) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) 6m54.178368706s ago: executing program 33 (id=684): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000040)=@x86={0x0, 0x4, 0xa, 0x0, 0xffff, 0x25, 0x5, 0x0, 0xa, 0x8, 0x8, 0x12, 0x0, 0x2, 0x10, 0x0, 0x5, 0x7, 0x1, '\x00', 0x6, 0x4}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="a183000000000000000005"], 0x1c}}, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4040000) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) 6m51.76797366s ago: executing program 5 (id=701): r0 = socket(0x10, 0x3, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x109040, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x103000, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r2, 0x50009405, &(0x7f0000000040)) ioctl$COMEDI_CMD(r1, 0x80506409, &(0x7f0000000180)={0x1, 0x80, 0x80, 0xd, 0x10, 0x3e8, 0x80, 0x0, 0x20, 0xff, 0x120, 0x0, 0x0, 0x0, 0x0}) write$tcp_mem(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x2417, 0x2021}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004000}, 0x8000002) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c0009"], 0x4c}}, 0x4000040) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 6m50.716090524s ago: executing program 5 (id=710): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x288, 0x148, 0x111, 0x4b4, 0x0, 0x700, 0x270, 0x278, 0x278, 0x270, 0x278, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, [0xffffff00], [], 'ip6tnl0\x00', 'team_slave_0\x00', {}, {}, 0x88}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, [], [], 'geneve1\x00', 'erspan0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x12}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x1, 'syz0\x00', {0x5}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e8) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r1, &(0x7f00000008c0)=[{&(0x7f0000000580)='`', 0x1}], 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x23fd, 0x4) recvmmsg(r0, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) 6m50.554587307s ago: executing program 5 (id=711): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="2508007a0000000000030700000008000300", @ANYRES32=r5, @ANYBLOB="140006005d756d6d79300000000000000000000014000400"], 0x54}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 6m49.597563479s ago: executing program 5 (id=728): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) setpgid(0x0, r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0x40049366, 0x0) 6m49.427910373s ago: executing program 5 (id=722): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!Tnux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000000)={0x3c, 0x9, 0xa, 0x3}) mq_timedreceive(r0, 0x0, 0xfffffffffffffee3, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mq_timedreceive(r0, &(0x7f0000000280)=""/196, 0xc4, 0x27, 0x0) mq_timedreceive(r0, &(0x7f0000000640)=""/155, 0x9b, 0x1000, 0x0) 6m47.165926513s ago: executing program 5 (id=736): r0 = io_uring_setup(0x4deb, &(0x7f0000000180)={0x0, 0x6d1e, 0x1, 0x503fa, 0x8100014f}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6m46.84254648s ago: executing program 34 (id=736): r0 = io_uring_setup(0x4deb, &(0x7f0000000180)={0x0, 0x6d1e, 0x1, 0x503fa, 0x8100014f}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6m27.326608479s ago: executing program 1 (id=822): r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f00000006c0)={0x2, 0x0, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE_TAIL_CALL(0x9, &(0x7f00000007c0)=ANY=[], 0xc) timer_create(0xfffffffffffffffc, &(0x7f0000000140)={0x0, 0x11}, &(0x7f0000001400)=0x0) r2 = socket(0x10, 0x3, 0x0) recvfrom(r2, 0x0, 0x0, 0x40002116, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@RTM_GETMDB={0x18, 0x56, 0xd23}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x4040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) timer_settime(r1, 0x1, &(0x7f0000000000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) 6m25.775970485s ago: executing program 1 (id=831): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket(0xa, 0x3, 0x3a) syz_emit_ethernet(0x3e, &(0x7f0000000200)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x8, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @echo_reply={0x81, 0x0, 0x0, 0x2, 0x9}}}}}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x39000, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x8000000, 0x4, 0x370, 0xffffffff, 0x0, 0x260, 0x260, 0xfeffffff, 0xffffffff, 0x380, 0x260, 0x380, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], 'macvlan0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x2000010}}}}, {{@ipv6={@private2, @private2={0xfc, 0x2, '\x00', 0x1}, [0x0, 0xffffff00, 0xff], [0x0, 0xffffff00, 0xf97f1f27bc0fd003, 0xff000000], 'bridge_slave_0\x00', 'ip6tnl0\x00', {}, {0xff}, 0x11, 0x80, 0x2, 0x6a}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r5 = memfd_create(&(0x7f0000000180)='J=\t\xeb\xf8\xa7\x04\x9f\xe1hO\x8e\xd7\xb5\x93}\x8d\xed\x01L`\x93\xcd^2P\x00$x\"\xda\xf1Az\xfe_\xc5\xb3\x9b`;\x1c\xfc\xaf9\x98\x91\xe7', 0x1) splice(r2, 0x0, r5, 0x0, 0x400c5, 0x5) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffe3e) 6m24.782789796s ago: executing program 1 (id=842): ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x10c000) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r1, &(0x7f0000001240)=""/102400, 0xffffff8c, 0x200000) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x882) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f00000000c0)={0x1, 0xe4ff71c170d132d5, &(0x7f0000000400)="fccdccc6aefa"}) 6m21.582145119s ago: executing program 1 (id=855): syz_mount_image$btrfs(&(0x7f0000000280), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000001600), 0x0, 0x559e, &(0x7f000000ac40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xff, 0xfffffffffffffffc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) chdir(&(0x7f0000000240)='./file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x68346000) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x4d) fallocate(r0, 0x0, 0x0, 0x280404) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x500, 0x81) ioctl$FITRIM(r1, 0xc4009420, &(0x7f0000000180)={0x5, 0x204}) 6m18.974935577s ago: executing program 1 (id=874): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x1c0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101) setpgid(r0, r0) setpgid(0x0, r0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) 6m16.643480439s ago: executing program 1 (id=884): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r3, @ANYBLOB="05"], 0x6c}, 0x1, 0x0, 0x0, 0x14044085}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(r4, 0x40046721, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r2, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, 0x0, 0x0, 0x3e}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) 6m2.331770141s ago: executing program 6 (id=988): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x3f, 0x0, 0x0) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x5, 0xffffffffce110f65, 0xd, 0xffff, 0x1ff, 0xffeffffa, 0x0, 0x0, 0xf, 0x10000}}, 0x50) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6m1.51711533s ago: executing program 35 (id=884): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r3, @ANYBLOB="05"], 0x6c}, 0x1, 0x0, 0x0, 0x14044085}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(r4, 0x40046721, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r2, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, 0x0, 0x0, 0x3e}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) 6m0.730732877s ago: executing program 6 (id=1002): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = memfd_create(&(0x7f0000000000)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x8dy\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x16\x8e-k\x12\xdf\xb9\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba$v\x8e\x9e\xef\xbc\x86f)\x01\xba\xdb\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4\x83Mav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00'/679, 0x6) fallocate(r0, 0x0, 0x0, 0x400001) fcntl$addseals(r0, 0x409, 0xc) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x80}) 6m0.510178792s ago: executing program 6 (id=1003): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x54, 0x0, 0x0) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f00000004c0)={'\x00', 0x4, 0xd, 0x99, 0x0, 0x0, 0x10000, 0xdddd0000, '\x00', 0xc94}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6m0.329319346s ago: executing program 6 (id=1004): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x804000, &(0x7f0000000f00)=ANY=[], 0x2, 0xc2d, &(0x7f00000001c0)="$eJzs3U9sHNd9B/DfGy3FldxWTOwoThoXm7ZIZcVy9S+mYhXuqqbZBpBlIhRzC8AVSakLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBcgoYzOxbcUmRNi2KEmV9Pjb13Z19b+a9eesZWdCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxB+8cun0mfSwWwEAPEhXRr96+qz7PwA8Vq76/38AAAAAAAAAAAAAADjoUhTxZKSYu7KWxqv3HfXL7b5bt8eGhrevdiRVNQ9V5cuf+pmz585/6YXBC9283J75gPr322fjtdGrlxovz96cm59aWJiabIzNtCdmJ6d2vYe91t/qZHUCGjdfvzV5/fpC4+zz5zZ9fHvg/f4njg9cHHz21DPdsmNDw8OjG0XqveVr99yQjp1meByOIk5Fiue+99PUiogi9n4u6g927Lc6UnXiZNWJsaHhqiPT7dbMYvnhSPdEFBGNnkrN7jnafiyi1vdA+7CzZsRS2fyywSfL7o3OteZb16anGiOt+cX2Ynt2ZiR1Wlv2pxFFXEgRyxGx2n/37vqiiFqk+M6xtXQtIg51z8MXq4nBO7ej2Mc+7kLZzkZfxHLxCIzZAdYfRbwaKX72zomYyNeZ6lrzhYhXy/xBxFtlvhSRyi/G+Yj3tvke8WiqRRF/WY7/xbU0WV0PuteVy19rfGXm+mxP2e515SPeH+66Ujyk+8ORLflgHPBrUz2KaFVX/LV077/ZAQAAAAAAAAAAAAAAAOB+OxJFfCZSvPIff1LNK45qXvqxi4N/OPCrvXPGn/6Q/ZRln4+IpWJ3c3IP54mBI2kkpYc8l/hxVo8i/jTP//vWw24MAAAAAAAAAAAAAAAAAADAY62In0SKF989kZajd03x9syNxtXWtenOqrDdtX+7a6avr6+vN1InmznHcy7lXM65knM1ZxS5fs5mzvGcSzmXc67kXM0Zh3L9nM2c4zmXci7nXMm5mjNquX7OZs7xnEs5l3Ou5FzNGQdk7V4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgI+TIor4RaT49jfWUqSIaEaMRydX+h926wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAUn8q4vuRovFHzTvbahGRqn87TpS/nI/m4TI/Gc3BMl+K5qWcrSprzW89hPazN32piB9Hiv7623cGPI9/X+fdna9BvPXNjXefrXXyUPfDgff7nzh+7OLg8G88vdPrtF0DTl5uz9y63RgbGh4e7dlcy0f/ZM+2gXzc4v50nYhYeOPN11vT01Pz9/6i/Arsofoj9CLVHpeeelG9iNqBaMbD6TuPgfL+/16k+N13/7N7w+/c/+vxK513d+7w8fM/27j/v7h1R7u8/9e21sv3//Kevt39/8mebS/m34301SLqizfn+o5H1BfeePNU+2brxtSNqZnzp09/eXDwy+dO9x2OqF9vT0/1vLovpwsAAAAAAAAAAAAAAADgwUlF/H6kaP14LTUi4nY1X2vg4uCzp545FIeq+Vab5m2/Nnr1UuPl2Ztz81MLC1OTjbGZ9sTs5NRuD1evpnuNDQ3vS2c+1JF9bv+R+suzc2/Mt2/88eK2nx+tX7q2sDjfmtj+4zgSRUSzd8vJqsFjQ8NVo6fbrZmq6si2k+k/ur5UxH9FionzjfT5vC3P/986w3/T/P+lrTvap/n/n+jZVh4zpSJ+Hil+56+ejs9X7Twad52zXO7vIsXJC5/L5eJwWa7bhs5zBTozA8uy/xcp/ukXm8t250M+uVH2zK5P7COiHP9jkeL7f/Hd+M28bfPzH7Yf/6Nbd7RP4/9Uz7ajm55XsOeuk8f/VKR46cm347fytg96/kf32RsncuE7z+fYp/H/VM+2gXzc374/XQcAAAAAAAAAAHik9aUi/j5S/HC4ll7I23bz9/8mt+5on/7+16d7tk3en/WKPvTFnk8qAAAAABwQfamIn0SKG4tv35lDvXn+d8/8z9/bmP85lLZ8Wv05369Vzw24n3/+12sgH3d8790GAAAAAAAAAAAAAAAAAACAAyWlIl7I66mPV/P5J3dcT30lUrzyP8/lcul4Wa67DvxA9Wv9yuzMqUvT07MTrcXWtempxuhca2KqrPtUpFj728/lukW1vnp3vfnOGu8ba7HPR4rhf+iW7azF3l2b/KmNsmfKsp+IFP/9j5vLdtex/tRG2bNl2b+JFF//l+3LHt8oe64s+91I8aOvN7plj5Zlu89H/fRG2ecnZot9GBUAAAAAAAAAAAAAAAAAAAAeN32piD+PFP97c/nOXP68/n9fz9vKW9/sWe9/i9vVOv8D1fr/O72+l/X/q+cKLO10VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+HhKUcSbkWLuylpa6S/fd9Qvt2du3R4bGt6+2pFU1TxUlS9/6mfOnjv/pRcGL3Tzg+vfb5+J10avXmq8PHtzbn5qYWFqsjE2056YnZza9R72Wn+rk9UJaNx8/dbk9esLjbPPn9v08e2B9/ufOD5wcfDZU890y44NDQ+P9pSp9d3z0e+Sdth+OIr460jx3Pd+mn7YH1HE3s/Fh3x39tuRqhMnq06MDQ1XHZlut2YWyw9HuieiiGj0VGp2z9EDGIs9aUYslc0vG3yy7N7oXGu+dW16qjHSml9sL7ZnZ0ZSp7VlfxpRxIUUsRwRq/13764ving9Unzn2Fr61/6IQ93z8MUro189fXbndhT72MddKNvZ6ItYLh6BMTvA+qOIf44UP3vnRPxbf0QtOj/xhYhXy/xBxFvRGe9UfjHOR7y3zfeIR1Mtivj/cvwvrqV3+svrQfe6cvlrja/MXJ/tKdu9rjzy94cH6YBfm+pRxI+qK/5a+nf/XQMAAAAAAAAAAAAAAAAcIEX8eqR48d0TqZoffGdOcXvmRuNq69p0Z1pfd+5fd870+vr6eiN1splzPOdSzuWcKzlXc0aR6+dslllfXx/P75dyLudcybmaMw7l+jmbOcdzLuVczrmSczVn1HL9nM2c4zmXci7nXMm5mjMOyNw9AAAAAAAAAAAAAAAAAADg46Wo/knx7W+spfX+zvrS49HJFeuBfuz9MgAA//8hX/ir") creat(&(0x7f0000000100)='./bus\x00', 0x44) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x301400, 0x0) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x47) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) mknod$loop(&(0x7f0000001280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) unlink(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 5m59.034263685s ago: executing program 6 (id=1007): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0x41000, 0xc, 0x9, 0x3, 0xe4, 0x40, 0x2c, 0x0, 0x30, 0x19, 0xe0}, {0xe000, 0x3000, 0xe, 0x0, 0x40, 0x5, 0x7d, 0x8, 0x58, 0x3, 0x3, 0x1}, {0xdddd1000, 0x3000, 0xe, 0x5, 0x6, 0x7, 0xfe, 0x89, 0x1, 0xab, 0x5, 0x81}, {0xdddd1000, 0x8000000, 0x3, 0x5d, 0x4, 0x43, 0x9, 0xfa, 0x80, 0x80, 0xe}, {0x0, 0x9000, 0xb, 0x1, 0xbd, 0x7, 0xab, 0x7f, 0x7, 0x83, 0xf7, 0x83}, {0xffffffff, 0x80a0000, 0x10, 0x0, 0xb1, 0x8, 0x1, 0x2, 0x9, 0xf, 0x1, 0xfd}, {0x3000, 0xffffffff, 0x4, 0x5, 0x7, 0x2, 0xb, 0x0, 0x5, 0x40, 0xff, 0x70}, {0xd000, 0x1000, 0xe, 0x5, 0xf, 0x7, 0x1, 0xc1, 0x2, 0x3, 0x7, 0x8}, {0x100000, 0x2d}, {0x30000, 0x86}, 0x80000031, 0x0, 0x8000000, 0x42025, 0xe, 0x1, 0x3000, [0x6840000000000000, 0x3, 0x5e, 0xff]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001b00)=[@textreal={0x8, 0x0}], 0x1, 0xe, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0006}]}) close_range(r3, 0xffffffffffffffff, 0x0) 5m58.530280157s ago: executing program 6 (id=1011): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$bt_hci(r0, 0x84, 0x1f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) 5m58.162470455s ago: executing program 36 (id=1011): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$bt_hci(r0, 0x84, 0x1f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) 8.540938978s ago: executing program 8 (id=2846): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f00000004c0), 0x48, 0x820b, 0x0) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/110, 0x14b}, {&(0x7f0000000300)=""/86, 0x53}, {&(0x7f0000000fc0)=""/4096, 0x564}, {&(0x7f0000000400)=""/106, 0x15}, {&(0x7f0000000740)=""/73, 0x60}, {&(0x7f0000000200)=""/77, 0x630}, {&(0x7f00000007c0)=""/154, 0x4a}, {&(0x7f0000000100)=""/16, 0xab}], 0x8, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x2, &(0x7f0000003700)={0x77359400}) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r2, &(0x7f0000000e80)="0d0ad7c36d6617110e434332d6ac582208222cfb7c37ce1148f448455bc37f5f70c92774dcb201629979039d7c8943b207e5bdf9ab8eed9ace110469c51f4f211dd9fad815eb5b273ac04e1edc679bcdf0a0d24482de5454be9003cb80714a95e136bb704ee58e707d1e69b3c3a1c2c37f9c0402e14abdeb32086a49aff25e5c0f0131d59b4783316b9fa2c71c51ce76942d5f519145c9e3bf0d4182b4a62970b2ce81d35a7afc8384b387b8e21f2051d90d92323a710cabe5275d335b64453e759251a140de480541d8dd7662a14296a59eba99b95bfdf5b22992c323865b471d13ad79867e2692fd4eece299a81e2b33336b6801f51c2ae8d73e4df90c9bd70cd535b72cbdf67754acdc44b3780450308d9c5527c3314eb7b2cc38b61e96403a30a8ba0c8a357aa04d3c62bc51bcf55cf214f44a909b29c30c18c3a43c86472612086664a80f2aa8490e58352732acb96eb46deab42895d1957a6029ad86e7a5ced6bde89c158aaee721954beeebe5973059007f7dd5459029af6d3f1d73d35f07d19b7cedfc80d1d7ef37f8b113f564afd0f093202929fef43e788619ca522c7f679dd2f27949d879b4dab46581a0e054b4ed1db37e43f528748b56ec5a54b7af198d4ae551046f7814fe3a5cbc1cc7cb6655fc198939b049f3c02443148c588e34d6ebef81096b4e48f468016d2bde0828664c0874d71e2d88b3bc04079d4a504255a83c3f07a4f1c3e5a4c66f55f36e51e344392487c8299d8d1bfb568780c0d57df48990cb5d6b35c3f7445f80312186d8598faf61072d4eefc961fb5a7e72b971c8f94a8346effd27362cee8d72a98b55e317de280d2d63ee83ca7140b7913122d402c536d914c8510c81d08f0ad1c952f5b7ad5e7ef72d7c58cb4d5bafbea535b381df6ebe94c62cf782cf7ab81c017c296a88ca91d641b45748d230cf5e87e5dbee4764ea4d131ae022e6bbf3ffc3ea7b264737d9db44354bfffa63d79bc403d3ac23fb615edc382d18b0daf1bbb2fbd708d1830ddac1c3f098b8cb1ef9a0019d804bf5d953110f12f3b9a8b9b7e0c61cb5d34116add1fc9a92721ffa5fdc83e1488cf88aa6e56ad2dd55e0aadd827cc7b4e7242f01241f49e905e5e7451092c28c3f6560a6a0002e5d91fc253a5a8fd8f27e42f4f02f5849528b7d93df9b0c568022acaff410e797e88d2f8eeadbba66e423335b843df734d203fa62a861b712da8f33d5ea721767871aa2cd53e659e505507de9a54d7e6fa3c20bbfb28cd6dd2b314dabbb59e9ce15c0a94ec3b3efc54eaaa27bd7576a687dcaf58dc182662539943014a02e76dc89f48c9f83cc7199038418f965ad3dc866098b89cabcac8691b0f51ffb71902337e49293309c4480a8f1b32411cc1b55a0ec0fe2c2572fe9d488a25bfc12ba74048e1d7beee93321c7aa49ea17cb9728dc46e5272154b3b995feacbacb8885621b335274af4df9365f8c8121ff323b572d320c8fc46acd6218b9579d43005e7b0506ccb14d9a0dac4cc6efaf5366c44342eaea8b5a11457f5afbea913ce4975ab67e6a85bc46e714ca5741da38a7cceb9e85d77fd03f83f7a5ecc7241e69e2bda327f769b48ba5f13662585c72778d12bd0e9a62a3d0dbe376d1aee81e6845c2cf23f42c458ae5668c8d387bf9ab224bc9703f1c08347be810d2f19278fe8d97560b3c9f1816667d0461a25e778eb1404dcaac1ed0a6a0745f3a5d2dc1b6babf98f5135d531cb26334ef2fec4c78c95b7193935139664fc65f17b047eb3dc39e251ba52ce33f8099719f1a789db1690347355e7b02d4c522692b9597fd31abb90f973ae4eb0bd0d900cdd887ff01d4845d7f0aee39b220a65a5aeee0fd386054070723c841c042d5339cc6325f07f0f733d124c6524f388ef7419f42c06278b8fceaa3a16b202dfb539b129762397e29cdd679ca6240272fa0c3e2e8c0a27aaa407f30b4024d0638dfca1bc9483db3ccc2880f", 0x5c6, 0x6d91fb6102d8910c, 0x0, 0xfffffffffffffe38) sendto$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 7.52669322s ago: executing program 8 (id=2854): bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xe0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!Tnux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000000)={0x3c, 0x9, 0xa, 0x3}) mq_timedreceive(r0, 0x0, 0xfffffffffffffee3, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() landlock_create_ruleset(0xfffffffffffffffe, 0x8, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mq_timedreceive(r0, &(0x7f0000000280)=""/196, 0xc4, 0x27, 0x0) mq_timedreceive(r0, &(0x7f0000000640)=""/155, 0x9b, 0x1000, 0x0) 5.999035745s ago: executing program 3 (id=2856): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000120021030000000000"], 0x1c}], 0x1, 0x0, 0x0, 0x44800}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) recvmmsg(r3, &(0x7f0000004300), 0x4000000000000e9, 0x60, 0x0) 5.807870129s ago: executing program 8 (id=2858): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=@newlink={0x48, 0x10, 0x439, 0x0, 0x60000, {0x0, 0x0, 0x0, r3, 0x9801}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_REMOTE={0x8, 0x7, @broadcast}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x1fe}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x8000000) sendto$packet(r0, &(0x7f0000000180)="280320000a0014000000fbf719143baa111f43c851ffab286e16195ecf3d77cc32b6d78839980700e6669d3c865c6b96e84000050016f37fe8c0295f5c", 0x3d, 0x840, &(0x7f00000000c0)={0x11, 0x86dd, r3, 0x1, 0x2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2eaaaac15ca67ef2}}, 0x14) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, &(0x7f0000000000)=0x87, 0x4) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b4b, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x7, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007700000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) 5.797338709s ago: executing program 4 (id=2859): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) unshare(0x22000000) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x2d, 0x1001, r2, 0x0) fanotify_mark(r3, 0x22, 0x40001017, r2, 0x0) 3.712245986s ago: executing program 3 (id=2861): io_setup(0xb79, &(0x7f0000000400)=0x0) r1 = fsopen(&(0x7f0000000500)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file3\x00', 0x1c0) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000140)='./file0/file3\x00', 0x90000880) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80800, 0x4) io_submit(r0, 0x1, &(0x7f0000000640)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x2}]) 3.707807786s ago: executing program 4 (id=2863): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1f, 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000003000000000000000000000085000000bc00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x15, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x2, 0x4, 0x6, 0x23, 0x0, 0x1, 0x3}, 0x50) syz_emit_ethernet(0x5d, &(0x7f0000000200)={@link_local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "081f20", 0x27, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x54, 0xe, 0xe87d, 0x0, [{}, {0x0, 0x1, "000000000400000126000400"}, {0x18, 0x0, "45972e75e4"}]}}}}}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2f) ioctl$KVM_GET_STATS_FD_vm(r5, 0xaece) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 3.704056826s ago: executing program 7 (id=2865): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x40814) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x38, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@typed={0x4, 0xd7}, @nested={0x20, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x14, 0x1a, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x19}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x78, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x40, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0xc, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "1f000000"}]}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x114}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20048850) 3.702001676s ago: executing program 4 (id=2867): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, 0x0, 0x20048014) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x10) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x5, 0x3, 0x8, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x4, 0x100000, 0x762, 0x3, 0xd, 0x3, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x80000000, 0x5, 0x79b, 0x2, 0x1, 0x7d, 0x4, 0x2, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x8, 0x180000, 0x400a, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x5, 0x6, 0x9, 0x9, 0xb, 0x4009, 0x0, 0x4, 0xffffff01, 0x8, 0x752, 0x0, 0x1005, 0x5, 0x10001, 0x2, 0xffffffff, 0x6, 0x4, 0x9, 0x7ffffffe, 0xfdffffff, 0x2, 0x2, 0x84, 0x800100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x2, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x3, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 3.06678969s ago: executing program 8 (id=2868): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x37b9, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0xa00008, &(0x7f0000000140), 0x1, 0x7d2, &(0x7f00000007c0)="$eJzs3c9rHNcdAPDvrH7LbqVCoXVPgkIrMF5Vrmq3YKhLD6VQg6E92xartXC10hrtylhCYJtS6KWHhBwC8cXnOHFuPuSSH9fkkr8hh2DjJLKJQw5BYXZn7ZVWK0u2duVYnw+M9r23s/ved97Mm6edYTeAA2ss/ZOLOBLRlyZHsvIksoLojThdX+/x2mohXZJYX//nV0ltnUdrq4Voek3qUJb5ZUR89N+Io7nWeivLK3PTpVJxMctPVOcvT1SWV45dmp+eLc4WF05MTk0dP/mHkyf2LtZvPl05fP+1v/323dPf/ecXd/7/cRKn43D2XHMce2UsxrJt0pduwg3+uteV7bNkvxvAc0kPzZ76UR5HYiR6tunJP3e1ZQBAp1yLiHUA4IBJnP8B4IBpfA7waG210Fiifj3n+rM+OzjV6Q8nuuDBXyJisB5/4/pm/Zne+jW7zwZr10GHHyW1ayQNSUSM7kH9YxFx8+652+kSHboOCbCV6zci4sLo2ObxPx3hNt+zsFu/28E6Y43E+/UH4x90zwfp/OePrfO/iFx2/A/W/m6e/ww0H7svYPN7tB7/uXsbsn17UGmTdP53qunetsdN8WdGe7LcT2pzvr7k4qVSMR3bfhoR49E3kOYnt6lj/OH3D9s91zz/+/r1f7+d1p8+Pl0jd693YONrZqar0y8Sc7MHNyJ+1btV/MmT/k/azH/PbvmOvS0lf//T/95qV38afxpvY2mNv7PWb0X8Zsv+f3ofVLLt/YkTtd1horFTbLF/vvf5m8Pt6m/u/5t305pWC43/Bboh7f/h7eMfTZrv16zsvo5Pbo182O65jfGfu53WvzH+rff//uRftXR/VnZ1ulpdnIzoT/7RWn786Wsb+cb6afzjv94Qf9aDuW33/3SlC1l6/Rk3P/be//Kd54+/s9L4Z9L+T7Igntn/u0/ceTzX067+nfX/VC01npW0jn+tY85OG/hCGw8AAAAAAAAAAAAAAAAAAAAAAAAAdigXEYcjyeWfpHO5fL7+G94/j+FcqVypHr1YXlqYidpvZY9GX67xVZcjTd+HOpl9H34jf3xT/vcR8bOIeGNgqJbPF8qlmf0OHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyh9r8/n/qi4H9bh0A0DGD+90AAKDrdnX+N1kAgFdCm1N6/9bFQx1tCwDQHbXzf9K7380AALrIR/oAcPA4/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANBhZ8+cSZf1b9dWC2l+5sry0lz5yrGZYmUuP79UyBfKi5fzs+XybKmYL5Tn277R9fpDqVy+PBULS1cnqsVKdaKyvHJ+vry0UD1/aX56tni+2Ne1yAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg5yrLK3PTpVJxUWJTYijbQlnJtf1uTy1xI2vUS7B9XpnEhWybvizt2UViICI6VUXzKDHU3UEJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4EfkhwAAAP//BIgaDw==") r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$KDSETLED(r1, 0x4b32, 0x5) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) 3.065486021s ago: executing program 9 (id=2869): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x2}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xfff7, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x6}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, &(0x7f0000000900)="ba2afe90", 0x4, 0x6e38c71ef11646a0, &(0x7f00000001c0)={0x11, 0x88a8, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) 2.946267233s ago: executing program 7 (id=2870): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0xa800) syz_clone3(&(0x7f00000002c0)={0x381000000, 0x0, 0x0, 0x0, {0x15}, &(0x7f00000001c0)=""/75, 0x4b, &(0x7f0000000240)=""/27, &(0x7f0000000280)=[0xffffffffffffffff], 0x1}, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x41042, 0x1) close(r0) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) r2 = fsopen(&(0x7f0000000080)='binfmt_misc\x00', 0x1) mount$9p_fd(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f0000000380), 0x14c98, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 2.937175493s ago: executing program 3 (id=2871): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x40, @empty}, 0x1c) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000000500)}}], 0x1, 0x48045) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r5}]}, 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x6c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x38, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8, 0x1, r5}]}}}]}, 0x6c}}, 0x0) 2.913328614s ago: executing program 4 (id=2872): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) socket$inet(0x2, 0x2, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000340)={{0x2, 0x4e1f, @broadcast}, {0x304, @local}, 0x2a, {0x2, 0x4e20, @empty}}) 1.790834159s ago: executing program 4 (id=2873): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000120021030000000000"], 0x1c}], 0x1, 0x0, 0x0, 0x44800}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) recvmmsg(r3, &(0x7f0000004300), 0x4000000000000e9, 0x60, 0x0) 1.78947915s ago: executing program 7 (id=2883): timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004}, &(0x7f0000bbdffc)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000580000/0x4000)=nil) mremap(&(0x7f0000580000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00007ff000/0x2000)=nil) 1.78898259s ago: executing program 3 (id=2874): socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42041, 0x19a) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x164) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLERRORu(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ffff", @ANYRES16=r0], 0x52) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_u}]}}) 1.024063956s ago: executing program 3 (id=2875): openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x40, 0x80) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x80000000, 0x410400, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x20}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ccc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485e4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6b3f0000f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784753f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2205eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a748cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d9f95e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad24c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc5908", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) syz_fuse_handle_req(r0, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 582.320526ms ago: executing program 7 (id=2876): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = dup(r0) write$tun(r2, &(0x7f0000000840)=ANY=[], 0x128e) sendto$inet6(r1, &(0x7f00000004c0)="1d", 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x8003, 0xbffc, 0x0, 0x5, 0x134, 0x48, 0x2}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 582.065977ms ago: executing program 9 (id=2877): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = socket(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4) r4 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r4, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40012002) ioctl$KVM_RUN(r3, 0xae80, 0x0) 577.376137ms ago: executing program 4 (id=2878): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mremap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) listen(0xffffffffffffffff, 0x7f) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x30}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 476.830359ms ago: executing program 8 (id=2879): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xfff3, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x7}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2402c8b1}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000240)="800000800000210ee7decd7a000340008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 398.450351ms ago: executing program 9 (id=2880): ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(0xffffffffffffffff, 0x942e, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000140)=0xfffffdfb) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0xffffffff, 0xc9a, 0x8007fffd, 0x6, 0xe, "dce4f0020100000000001b347d5c00010200"}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x604ab000) syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000180)={0x1ff, 0x4, 0x81, 0xfffff6a4, 0x7, "c1d846f1120224c70b82426319d4c37ee7e4c0", 0x1, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) socket$inet(0x2, 0x1, 0x0) 375.020221ms ago: executing program 9 (id=2881): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x1e9100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000004000000020000000000000001020000", @ANYRES32], 0x50) write$binfmt_script(r2, &(0x7f0000000000), 0xfffffe76) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x54, 0x0, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0xd, 0x99, 0x0, 0x0, 0x10000, 0x1, '\x00', 0xc94}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 352.658292ms ago: executing program 7 (id=2882): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x200, 0x80, 0x20000, 0x0, 0x0, 0x8}, 0x45) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r2, 0x0) read$FUSE(r1, &(0x7f0000002600)={0x2020}, 0x2020) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, 0xffffffffffffffff) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_udp_int(r4, 0x11, 0x65, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x8000, 0x700, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x67, 0x0, 0x0, 0x29, 0x0, @multicast1, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x0, 0x20, 0x81, 0x4, {{0x5, 0x4, 0x0, 0x1, 0x14, 0xfffe, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}) 246.369924ms ago: executing program 3 (id=2884): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xc00) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0xfffd, 0x0, 0x9, 0x7}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa4, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x25dfdbfb, {0x60, 0x0, 0x0, r3, {0x0, 0x6}, {0xffe0, 0xa}, {0x1, 0x8}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x9, 0x7, 0x46, 0x0, 0x5, 0x8, 0x0, 0x0, 0x10ce}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x55}, 0xc010) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 150.096186ms ago: executing program 8 (id=2885): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioprio_set$uid(0x3, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0) fcntl$setstatus(r1, 0x4, 0x2000) read$rfkill(r1, &(0x7f0000000040), 0x2) 125.091367ms ago: executing program 9 (id=2886): sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYBLOB='\x00\x00\x00\x00\x00\x00\v'], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x840) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x48800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x83, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f00000001c0)="f20f2b433e660fd87008baf80c66b84c8e9c8066efbafc0c66ed3e640fc7a10600f2823b0d6467670f01c466b8567f735b0f23d00f21f866353000000a0f23f83e0f79cbf30f1eca0fc79a0550", 0x4d}], 0x1, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xdddd0000, 0x2010d3}) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000100), 0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22.407379ms ago: executing program 7 (id=2887): syz_mount_image$hfsplus(&(0x7f0000000200), &(0x7f0000000180)='./file1\x00', 0x4810, &(0x7f00000001c0)=ANY=[], 0x14, 0x693, &(0x7f0000000880)="$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") r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) fsopen(0x0, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000140)=""/32, 0x20) getdents64(r1, &(0x7f00000003c0)=""/126, 0x7e) syz_open_procfs(0x0, 0x0) 0s ago: executing program 9 (id=2888): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380), 0xffffffffffffffff, 0x6, r3}, 0x38) kernel console output (not intermixed with test programs): [ T4664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 239.757749][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 239.788613][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 239.834146][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 239.941860][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 239.971829][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 240.003424][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 240.037885][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 240.095827][ T8262] netlink: 'syz.7.1052': attribute type 2 has an invalid length. [ 240.148771][ T8068] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 240.191193][ T8068] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 240.213969][ T4378] Bluetooth: hci0: command 0x0419 tx timeout [ 240.260691][ T8266] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1053'. [ 240.307112][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 240.329952][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 240.584289][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 240.591905][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 240.624934][ T8287] device wg1 entered promiscuous mode [ 240.653061][ T7988] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 240.994426][ T8068] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 241.038079][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 241.070360][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 241.178801][ T8298] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 241.453973][ T155] device hsr_slave_0 left promiscuous mode [ 241.499509][ T155] device hsr_slave_1 left promiscuous mode [ 241.523876][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 241.531401][ T155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.581293][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.596640][ T155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.627367][ T155] device bridge_slave_1 left promiscuous mode [ 241.643917][ T155] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.685406][ T155] device bridge_slave_0 left promiscuous mode [ 241.691838][ T155] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.753667][ T155] device hsr_slave_0 left promiscuous mode [ 241.773709][ T155] device hsr_slave_1 left promiscuous mode [ 241.844228][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 241.858841][ T155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.884684][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.912079][ T155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.947937][ T155] device bridge_slave_1 left promiscuous mode [ 241.963858][ T155] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.986006][ T155] device bridge_slave_0 left promiscuous mode [ 242.002557][ T155] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.069959][ T155] device veth1_macvtap left promiscuous mode [ 242.085924][ T155] device veth0_macvtap left promiscuous mode [ 242.102360][ T155] device veth1_vlan left promiscuous mode [ 242.113316][ T155] device veth0_vlan left promiscuous mode [ 242.178387][ T155] device veth1_vlan left promiscuous mode [ 242.194165][ T155] device veth0_vlan left promiscuous mode [ 242.741767][ T155] team0 (unregistering): Port device team_slave_1 removed [ 242.768983][ T155] team0 (unregistering): Port device team_slave_0 removed [ 242.790796][ T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 242.816213][ T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 242.929176][ T155] bond0 (unregistering): Released all slaves [ 243.014281][ T155] bond1 (unregistering): (slave geneve2): Releasing active interface [ 243.041543][ T155] bond1 (unregistering): Released all slaves [ 243.181083][ T155] team0 (unregistering): Port device team_slave_1 removed [ 243.207648][ T155] team0 (unregistering): Port device team_slave_0 removed [ 243.222982][ T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 243.239842][ T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 243.318226][ T155] bond0 (unregistering): Released all slaves [ 243.472485][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 243.482376][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 243.541109][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 243.582173][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 243.607596][ T7988] device veth0_vlan entered promiscuous mode [ 243.618067][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 243.636809][ T8364] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 243.650350][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 243.726447][ T8365] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1069'. [ 243.796499][ T8373] loop7: detected capacity change from 0 to 512 [ 243.847879][ T7988] device veth1_vlan entered promiscuous mode [ 243.925632][ T8373] EXT4-fs error (device loop7): ext4_xattr_inode_iget:401: inode #2: comm syz.7.1071: missing EA_INODE flag [ 243.943098][ T4664] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 243.958945][ T4664] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 243.990519][ T4664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 244.009338][ T8373] EXT4-fs error (device loop7): ext4_xattr_inode_iget:406: comm syz.7.1071: error while reading EA inode 2 err=-117 [ 244.031606][ T4664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 244.041635][ T4664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 244.060320][ T8373] EXT4-fs (loop7): 1 orphan inode deleted [ 244.071199][ T4664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 244.083969][ T8373] EXT4-fs (loop7): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback. [ 244.138781][ T7988] device veth0_macvtap entered promiscuous mode [ 244.175703][ T4664] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 244.189515][ T4664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 244.218839][ T4664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 244.257674][ T7988] device veth1_macvtap entered promiscuous mode [ 244.265433][ T8373] syz.7.1071 (pid 8373) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 244.286942][ T4664] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 244.313050][ T4664] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 244.329693][ T4664] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 244.361687][ T8068] device veth0_vlan entered promiscuous mode [ 244.398670][ T7988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.424930][ T7988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.444577][ T8373] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 244.470724][ T7988] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 244.490661][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 244.506777][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 244.554628][ T8068] device veth1_vlan entered promiscuous mode [ 244.562296][ T7988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.600376][ T7988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.648654][ T7988] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 244.694961][ T4664] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 244.714956][ T4664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 244.763847][ T7988] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.772610][ T7988] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.789714][ T7988] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.798626][ T7988] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.944559][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 244.964932][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 244.973910][ T8399] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1074'. [ 245.014663][ T8068] device veth0_macvtap entered promiscuous mode [ 245.079188][ T8068] device veth1_macvtap entered promiscuous mode [ 245.180098][ T4664] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.198693][ T4664] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.218502][ T8068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.249028][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805f8d3800: rx timeout, send abort [ 245.252616][ T8068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.268487][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805f8d3800: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 245.293935][ T8068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.322382][ T8068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.350128][ T8068] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 245.377203][ T6103] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 245.388818][ T6103] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 245.423180][ T6103] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 245.449684][ T6103] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 245.518386][ T6103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 245.549100][ T8068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.569668][ T8068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.582920][ T8068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.596145][ T8068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.608178][ T8068] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.673308][ T6103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.697631][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 245.722502][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 245.731859][ T6103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.741467][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 245.752562][ T8068] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.793625][ T8068] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.802420][ T8068] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.816042][ T8068] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.175950][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.193586][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.245123][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 246.325119][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.388680][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.427147][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 246.546060][ T8450] loop8: detected capacity change from 0 to 1024 [ 247.228468][ T8477] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1094'. [ 247.944000][ T8494] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1098'. [ 248.244237][ T8506] lo speed is unknown, defaulting to 1000 [ 248.250120][ T8506] lo speed is unknown, defaulting to 1000 [ 248.305276][ T8506] lo speed is unknown, defaulting to 1000 [ 248.347781][ T8506] infiniband syú2: RDMA CMA: cma_listen_on_dev, error -98 [ 248.430665][ T8506] lo speed is unknown, defaulting to 1000 [ 248.446827][ T8506] lo speed is unknown, defaulting to 1000 [ 248.475453][ T8506] lo speed is unknown, defaulting to 1000 [ 248.502733][ T8506] lo speed is unknown, defaulting to 1000 [ 248.520131][ T8506] lo speed is unknown, defaulting to 1000 [ 249.012952][ T8533] overlayfs: failed to clone upperpath [ 249.065490][ T8535] overlayfs: failed to clone upperpath [ 249.070125][ T4988] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 249.287257][ T8539] netlink: 'syz.4.1111': attribute type 1 has an invalid length. [ 249.335853][ T4988] usb 9-1: Using ep0 maxpacket: 32 [ 249.385288][ T8539] device bond2 entered promiscuous mode [ 249.418120][ T8539] 8021q: adding VLAN 0 to HW filter on device bond2 [ 249.479982][ T4988] usb 9-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.550688][ T4988] usb 9-1: config 0 interface 0 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 249.628542][ T4988] usb 9-1: config 0 interface 0 has no altsetting 0 [ 249.659110][ T4988] usb 9-1: New USB device found, idVendor=0458, idProduct=5014, bcdDevice= 0.00 [ 249.692145][ T4988] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.746429][ T4988] usb 9-1: config 0 descriptor?? [ 249.766861][ T8548] device veth5 entered promiscuous mode [ 249.813761][ T8548] bond2: (slave veth5): making interface the new active one [ 249.870506][ T8548] bond2: (slave veth5): Enslaving as an active interface with an up link [ 249.929601][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 250.058829][ T8530] loop9: detected capacity change from 0 to 32768 [ 250.117820][ T8530] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop9 scanned by syz.9.1108 (8530) [ 250.202218][ T8530] BTRFS info (device loop9): using crc32c (crc32c-intel) checksum algorithm [ 250.254207][ T8530] BTRFS info (device loop9): using free space tree [ 250.267333][ T4988] hid-generic 0003:0458:5014.0005: item fetching failed at offset 5/39 [ 250.276762][ T8530] BTRFS info (device loop9): has skinny extents [ 250.327301][ T4988] hid-generic: probe of 0003:0458:5014.0005 failed with error -22 [ 250.519056][ T8525] udc-core: couldn't find an available UDC or it's busy [ 250.633746][ T8530] BTRFS info (device loop9): enabling ssd optimizations [ 250.652170][ T8525] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 250.708428][ T4378] usb 9-1: USB disconnect, device number 2 [ 252.966050][ T4271] libceph: connect (1)[c::]:6789 error -101 [ 252.972141][ T4271] libceph: mon0 (1)[c::]:6789 connect error [ 253.016962][ T8633] ceph: No mds server is up or the cluster is laggy [ 253.148325][ T8621] ODEBUG: Out of memory. ODEBUG disabled [ 253.274861][ T4271] libceph: connect (1)[c::]:6789 error -101 [ 253.280924][ T4271] libceph: mon0 (1)[c::]:6789 connect error [ 253.813926][ T4271] libceph: connect (1)[c::]:6789 error -101 [ 253.824365][ T4271] libceph: mon0 (1)[c::]:6789 connect error [ 253.917376][ T4271] kernel read not supported for file [userfaultfd] (pid: 4271 comm: kworker/0:8) [ 255.174616][ T4988] libceph: connect (1)[c::]:6789 error -101 [ 255.185627][ T4988] libceph: mon0 (1)[c::]:6789 connect error [ 256.024413][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.037233][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.205167][ T8725] netlink: 'syz.8.1140': attribute type 1 has an invalid length. [ 256.429230][ T8734] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 256.482971][ T8734] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 256.682610][ T8753] loop8: detected capacity change from 0 to 512 [ 256.735418][ T8753] EXT4-fs (loop8): Ignoring removed bh option [ 256.785473][ T8753] EXT4-fs error (device loop8): ext4_iget_extra_inode:4573: inode #15: comm syz.8.1150: corrupted in-inode xattr [ 256.871469][ T8753] EXT4-fs error (device loop8): ext4_orphan_get:1411: comm syz.8.1150: couldn't read orphan inode 15 (err -117) [ 256.957102][ T8753] EXT4-fs (loop8): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000002,grpid,bh,grpid,noauto_da_alloc,max_dir_size_kb=0x0000000000000005,init_itable=0x0000000000000009,init_itable,usrjquota=,nolazytime,norecovery,resgid=0x0000000000000000,,errors=continue. Quota mode: none. [ 257.161156][ T8780] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 258.455561][ T8806] IPVS: sh: FWM 3 0x00000003 - no destination available [ 258.465347][ C1] IPVS: sh: FWM 3 0x00000003 - no destination available [ 258.944325][ T8828] xt_hashlimit: size too large, truncated to 1048576 [ 260.094177][ T8859] lo speed is unknown, defaulting to 1000 [ 260.894221][ T8883] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 261.212928][ T8895] loop7: detected capacity change from 0 to 512 [ 261.345448][ T8895] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.1182: invalid indirect mapped block 4294967295 (level 1) [ 261.489571][ T8895] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.1182: invalid indirect mapped block 4294967295 (level 1) [ 261.540427][ T8895] EXT4-fs (loop7): 2 truncates cleaned up [ 261.553690][ T8895] EXT4-fs (loop7): mounted filesystem without journal. Opts: noauto_da_alloc,init_itable=0x0000000000004004,barrier=0x0000000000000005,,errors=continue. Quota mode: writeback. [ 261.758793][ T4271] libceph: connect (1)[c::]:6789 error -101 [ 261.776042][ T4271] libceph: mon0 (1)[c::]:6789 connect error [ 261.802409][ T8909] ceph: No mds server is up or the cluster is laggy [ 261.913720][ T1108] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 262.283779][ T1108] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 262.343626][ T1108] usb 8-1: New USB device found, idVendor=18d1, idProduct=503c, bcdDevice= 0.00 [ 262.373146][ T1108] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.423406][ T1108] usb 8-1: config 0 descriptor?? [ 262.466324][ T1108] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 262.694984][ T1108] usb 8-1: USB disconnect, device number 5 [ 263.014971][ T8938] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.022583][ T8938] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.119114][ T8941] device bridge_slave_1 left promiscuous mode [ 263.148635][ T8941] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.200384][ T8941] device bridge_slave_0 left promiscuous mode [ 263.246569][ T8941] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.927908][ T8984] bond1: option mode: unable to set because the bond device has slaves [ 265.048693][ T8984] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 265.148418][ T8984] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 265.770722][ T9004] loop8: detected capacity change from 0 to 256 [ 266.064954][ T9008] [ 267.921406][ T9061] netlink: 'syz.4.1222': attribute type 1 has an invalid length. [ 267.990658][ T9061] 8021q: adding VLAN 0 to HW filter on device bond3 [ 269.983445][ T9121] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 270.819202][ T9128] loop9: detected capacity change from 0 to 512 [ 270.903348][ T9128] EXT4-fs (loop9): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 270.958077][ T9128] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 271.030926][ T9128] EXT4-fs (loop9): 1 truncate cleaned up [ 271.043383][ T9128] EXT4-fs (loop9): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,dioread_nolock,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,bsdgroups,grpjquota=,,errors=continue. Quota mode: none. [ 272.504980][ T9161] IPVS: Error connecting to the multicast addr [ 272.810630][ T9171] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 273.604837][ T9200] sch_fq: defrate 0 ignored. [ 274.080534][ T9212] IPVS: Error connecting to the multicast addr [ 274.258975][ T9165] loop9: detected capacity change from 0 to 40427 [ 274.531664][ T9165] F2FS-fs (loop9): invalid crc value [ 274.570333][ T9165] F2FS-fs (loop9): Found nat_bits in checkpoint [ 275.642614][ T9165] F2FS-fs (loop9): Inconsistent segment (8) type [1, 0] in SSA and SIT [ 276.273518][ C0] sched: RT throttling activated [ 278.024465][ T9280] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1283'. [ 278.147132][ T9278] loop9: detected capacity change from 0 to 8192 [ 278.220180][ T9278] vfat filesystem being mounted at /28/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 278.531773][ T9293] sctp: [Deprecated]: syz.7.1285 (pid 9293) Use of struct sctp_assoc_value in delayed_ack socket option. [ 278.531773][ T9293] Use struct sctp_sack_info instead [ 279.164983][ T9325] sch_fq: defrate 0 ignored. [ 279.473656][ T4199] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 279.723636][ T4199] usb 10-1: Using ep0 maxpacket: 8 [ 279.843882][ T4199] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 279.875491][ T4199] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 279.902567][ T4199] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 279.941472][ T4199] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 280.002770][ T4199] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 280.047128][ T4199] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.240219][ T9348] netlink: 'syz.7.1299': attribute type 10 has an invalid length. [ 280.273135][ T9348] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.280546][ T9348] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.343917][ T4199] usb 10-1: GET_CAPABILITIES returned 0 [ 280.350040][ T4199] usbtmc 10-1:16.0: can't read capabilities [ 280.381097][ T9348] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.388324][ T9348] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.395974][ T9348] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.403128][ T9348] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.512133][ T9348] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 280.603588][ C1] usbtmc 10-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 280.613071][ C1] usbtmc 10-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 280.622456][ C1] usbtmc 10-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 280.631842][ C1] usbtmc 10-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 280.641243][ C1] usbtmc 10-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 280.650664][ C1] usbtmc 10-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 280.660061][ C1] usbtmc 10-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 280.669856][ C1] usbtmc 10-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 280.679283][ C1] usbtmc 10-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 280.688931][ C1] usbtmc 10-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 280.698433][ C1] usbtmc 10-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 280.707953][ C1] usbtmc 10-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 280.717625][ C1] usbtmc 10-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 280.727012][ C1] usbtmc 10-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 280.736489][ C1] usbtmc 10-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 280.745884][ C1] usbtmc 10-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 280.771029][ T4199] usb 10-1: USB disconnect, device number 2 [ 280.933546][ T9357] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1300'. [ 280.958542][ T9359] loop8: detected capacity change from 0 to 8 [ 281.205762][ T9359] SQUASHFS error: Failed to read block 0x2d7: -5 [ 281.214708][ T9359] SQUASHFS error: Unable to read metadata cache entry [2d5] [ 281.227962][ T9359] SQUASHFS error: Unable to read metadata cache entry [2d5] [ 281.692286][ T9391] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 283.425544][ T9447] overlayfs: failed to clone lowerpath [ 283.491801][ T9450] overlayfs: failed to clone lowerpath [ 284.012843][ T9470] device wg1 entered promiscuous mode [ 285.123612][ T4199] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 285.254437][ T9494] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 285.272713][ T9494] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 285.296108][ T9494] bond0: (slave bond_slave_0): Releasing backup interface [ 285.314795][ T9494] bond0: (slave bond_slave_1): Releasing backup interface [ 285.350251][ T9494] team0: Port device team_slave_0 removed [ 285.366781][ T4199] usb 8-1: Using ep0 maxpacket: 16 [ 285.372874][ T9494] team0: Port device team_slave_1 removed [ 285.382833][ T9494] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 285.410310][ T9494] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 285.434100][ T9494] bond1: (slave ip6erspan0): Releasing active interface [ 285.463461][ T9494] bond1: (slave ip6erspan0): the permanent HWaddr of slave - 4e:89:3d:b5:15:ed - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 285.483848][ T4199] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 285.494002][ T9494] bond1: (slave macvlan2): making interface the new active one [ 285.520564][ T9494] batman_adv: batadv0: Interface deactivated: gretap1 [ 285.538099][ T9494] batman_adv: batadv0: Removing interface: gretap1 [ 285.569079][ T9494] bond1: (slave macvlan2): Releasing active interface [ 285.628588][ T9497] team0: Mode changed to "loadbalance" [ 285.653838][ T4199] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 285.669786][ T4199] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.698500][ T4199] usb 8-1: Product: syz [ 285.712122][ T4199] usb 8-1: Manufacturer: syz [ 285.725943][ T4199] usb 8-1: SerialNumber: syz [ 285.747702][ T4199] usb 8-1: config 0 descriptor?? [ 285.798057][ T4199] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 285.818799][ T4199] em28xx 8-1:0.0: DVB interface 0 found: bulk [ 285.955125][ T9516] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 286.664069][ T4199] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 287.453768][ T4199] em28xx 8-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 287.483566][ T4199] em28xx 8-1:0.0: board has no eeprom [ 287.873913][ T4199] em28xx 8-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 287.903871][ T4199] em28xx 8-1:0.0: dvb set to bulk mode. [ 287.960850][ T4199] usb 8-1: USB disconnect, device number 6 [ 288.051177][ T4199] em28xx 8-1:0.0: Disconnecting em28xx [ 288.100028][ T4378] em28xx 8-1:0.0: Binding DVB extension [ 288.335203][ T4378] em28xx 8-1:0.0: Registering input extension [ 288.374001][ T4199] em28xx 8-1:0.0: Closing input extension [ 288.503064][ T4199] em28xx 8-1:0.0: Freeing device [ 288.527073][ T9556] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 288.534521][ T9556] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 288.609120][ T9560] device wg1 entered promiscuous mode [ 288.928816][ T9580] netlink: 104 bytes leftover after parsing attributes in process `syz.9.1352'. [ 289.571418][ T9532] loop8: detected capacity change from 0 to 32768 [ 291.534620][ T9618] gfs2: gfs2 mount does not exist [ 292.276340][ T9647] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1368'. [ 292.491203][ T9648] bond2: (slave ip6gretap1): making interface the new active one [ 292.555553][ T9648] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 292.820705][ T9648] syz.8.1365 (9648) used greatest stack depth: 19168 bytes left [ 295.370079][ T9707] netlink: 156 bytes leftover after parsing attributes in process `syz.9.1382'. [ 295.418820][ T9707] netlink: 156 bytes leftover after parsing attributes in process `syz.9.1382'. [ 295.438255][ T9707] netlink: 48 bytes leftover after parsing attributes in process `syz.9.1382'. [ 297.764054][ T9745] 9p filesystem being mounted at /352/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 298.822392][ T9803] sch_tbf: burst 21990 is lower than device lo mtu (65550) ! [ 300.813665][ T4271] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 301.093611][ T4271] usb 8-1: Using ep0 maxpacket: 8 [ 301.443782][ T4271] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 301.461207][ T4271] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.480085][ T4271] usb 8-1: Product: syz [ 301.501775][ T4271] usb 8-1: Manufacturer: syz [ 301.520179][ T4271] usb 8-1: SerialNumber: syz [ 301.555621][ T4271] usb 8-1: config 0 descriptor?? [ 301.562547][ T9884] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1414'. [ 301.818326][ T9901] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1420'. [ 301.853863][ T4271] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 302.237958][ T9916] loop8: detected capacity change from 0 to 32768 [ 302.295290][ T9916] (syz.8.1424,9916,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 302.311720][ T9916] (syz.8.1424,9916,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 302.347882][ T9916] JBD2: Ignoring recovery information on journal [ 302.389879][ T9916] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 302.915555][ T7988] ocfs2: Unmounting device (7,8) on (node local) [ 303.438997][ T4271] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 303.465913][ T4271] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick) [ 303.519204][ T4271] usb 8-1: media controller created [ 303.554168][ T9951] binder: BINDER_SET_CONTEXT_MGR already set [ 303.560223][ T9951] binder: 9950:9951 ioctl 4018620d 200000000040 returned -16 [ 303.578260][ T4271] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 303.849708][ T4271] i2c i2c-1: Added multiplexed i2c bus 2 [ 303.908715][ T4271] rtl2832 1-0010: Realtek RTL2832 successfully attached [ 304.086057][ T4271] usb 8-1: DVB: registering adapter 1 frontend 0 (Realtek RTL2832 (DVB-T))... [ 304.097171][ T4271] dvbdev: dvb_create_media_entity: media entity 'Realtek RTL2832 (DVB-T)' registered. [ 305.969895][ T4271] DVB: Unable to find symbol fc0012_attach() [ 306.220336][ T4271] usb 8-1: USB disconnect, device number 7 [ 306.348214][ T9984] binder: BINDER_SET_CONTEXT_MGR already set [ 306.370836][ T9984] binder: 9982:9984 ioctl 4018620d 200000000240 returned -16 [ 306.412130][ T9987] netlink: 76 bytes leftover after parsing attributes in process `syz.9.1444'. [ 307.019026][T10013] loop9: detected capacity change from 0 to 136 [ 307.780211][T10032] loop8: detected capacity change from 0 to 128 [ 307.895840][T10032] msdos filesystem being mounted at /78/file1 supports timestamps until 2107-12-31 (0x10391447e) [ 309.253782][ T4199] Bluetooth: hci4: command 0x0406 tx timeout [ 309.679944][T10053] tipc: Failed to remove unknown binding: 66,0,0/0:1148742456/1148742457 [ 309.711367][T10053] tipc: Failed to remove unknown binding: 66,0,0/0:1148742456/1148742457 [ 309.742083][T10055] tipc: Failed to remove unknown binding: 66,0,0/0:791146150/791146152 [ 309.763336][T10055] tipc: Failed to remove unknown binding: 66,0,0/0:791146150/791146151 [ 309.994052][T10069] overlayfs: upper fs does not support file handles, falling back to index=off. [ 311.743732][ T1346] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 311.851218][T10103] bond1: (slave ip6gretap1): no link monitoring support [ 311.861783][T10103] bond1: (slave ip6gretap1): MII and ETHTOOL support not available for slave, and arp_interval/arp_ip_target module parameters not specified, thus bonding will not detect link failures! see bonding.txt for details [ 311.891260][T10103] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 312.180203][ T1346] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 312.190635][ T1346] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 312.200195][ T1346] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.210642][ T1346] usb 8-1: config 0 descriptor?? [ 313.385715][ T1346] pwc: Askey VC010 type 2 USB webcam detected. [ 314.373652][ T1346] pwc: recv_control_msg error -32 req 02 val 2b00 [ 314.449540][ T1346] pwc: recv_control_msg error -32 req 02 val 2700 [ 314.503778][ T1346] pwc: recv_control_msg error -32 req 02 val 2c00 [ 314.546261][ T1346] pwc: recv_control_msg error -32 req 04 val 1000 [ 314.605529][ T1346] pwc: recv_control_msg error -32 req 04 val 1300 [ 314.646911][T10138] mmap: syz.9.1494 (10138) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 314.663930][ T1346] pwc: recv_control_msg error -32 req 04 val 1400 [ 314.934461][ T1346] pwc: recv_control_msg error -71 req 02 val 2100 [ 314.975572][ T1346] pwc: recv_control_msg error -71 req 04 val 1500 [ 314.993708][ T1346] pwc: recv_control_msg error -71 req 02 val 2500 [ 315.016391][ T1346] pwc: recv_control_msg error -71 req 02 val 2400 [ 315.053701][ T1346] pwc: recv_control_msg error -71 req 02 val 2600 [ 315.083742][ T1346] pwc: recv_control_msg error -71 req 02 val 2900 [ 315.104864][ T1346] pwc: recv_control_msg error -71 req 02 val 2800 [ 315.143739][ T1346] pwc: recv_control_msg error -71 req 04 val 1100 [ 315.163648][ T1346] pwc: recv_control_msg error -71 req 04 val 1200 [ 315.199350][ T1346] pwc: Registered as video103. [ 315.221936][ T1346] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input8 [ 315.300963][ T1346] usb 8-1: USB disconnect, device number 8 [ 315.733650][T10161] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1502'. [ 315.762842][T10161] loop8: detected capacity change from 0 to 1024 [ 315.874893][T10161] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 316.258947][ T26] audit: type=1326 audit(3930997882.791:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10181 comm="syz.8.1509" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468e550e59 code=0x7ffc0000 [ 316.307023][ T26] audit: type=1326 audit(3930997882.831:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10181 comm="syz.8.1509" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468e550e59 code=0x7ffc0000 [ 316.331952][ T26] audit: type=1326 audit(3930997882.831:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10181 comm="syz.8.1509" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468e550e59 code=0x7ffc0000 [ 316.357350][ T26] audit: type=1326 audit(3930997882.831:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10181 comm="syz.8.1509" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f468e550e59 code=0x7ffc0000 [ 316.382071][ T26] audit: type=1326 audit(3930997882.831:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10181 comm="syz.8.1509" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468e550e59 code=0x7ffc0000 [ 316.411504][ T26] audit: type=1326 audit(3930997882.831:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10181 comm="syz.8.1509" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468e550e59 code=0x7ffc0000 [ 316.437396][ T26] audit: type=1326 audit(3930997882.831:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10181 comm="syz.8.1509" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468e550e59 code=0x7ffc0000 [ 316.471752][ T26] audit: type=1326 audit(3930997882.831:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10181 comm="syz.8.1509" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f468e550e59 code=0x7ffc0000 [ 316.496471][ T26] audit: type=1326 audit(3930997882.831:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10181 comm="syz.8.1509" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f468e54abd7 code=0x7ffc0000 [ 316.525493][T10159] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 316.536665][ T26] audit: type=1326 audit(3930997882.831:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10181 comm="syz.8.1509" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f468e4f21d9 code=0x7ffc0000 [ 316.790782][T10197] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1513'. [ 316.824728][T10197] bond0: (slave bond_slave_0): Releasing backup interface [ 317.420861][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.427458][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.647410][T10203] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.654899][T10203] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.411829][T10203] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 318.483054][T10203] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 319.260282][T10203] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.270678][T10203] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.290911][T10203] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.303664][T10203] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.480577][T10229] block device autoloading is deprecated and will be removed. [ 319.530154][T10228] md: superblock version 12389 not known [ 319.548113][T10228] md: couldn't set array info. -22 [ 319.562849][T10228] md: superblock version 12389 not known [ 319.574502][T10228] md: couldn't set array info. -22 [ 320.062109][T10238] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1528'. [ 321.797823][T10270] Set syz0 is full, maxelem 0 reached [ 322.203611][ T4755] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 322.573897][ T4755] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 322.604858][ T4755] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 322.793771][ T4755] usb 10-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 322.829900][ T4755] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.839042][ T4755] usb 10-1: Product: syz [ 322.843455][ T4755] usb 10-1: Manufacturer: syz [ 322.855604][ T4755] usb 10-1: SerialNumber: syz [ 322.862441][ T4755] usb 10-1: config 0 descriptor?? [ 322.951035][T10280] loop7: detected capacity change from 0 to 1024 [ 323.028846][T10280] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 323.086881][T10273] device wg1 left promiscuous mode [ 323.111842][T10270] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 323.172469][T10273] device team1 left promiscuous mode [ 323.193129][T10273] device team2 left promiscuous mode [ 323.392320][T10278] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1540'. [ 324.093669][T10323] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1556'. [ 325.148543][ T4232] usb 10-1: USB disconnect, device number 3 [ 325.297895][T10336] loop7: detected capacity change from 0 to 164 [ 325.312027][T10334] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1557'. [ 325.684806][T10342] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 325.812380][T10344] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1561'. [ 326.364376][T10356] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4252604744 (544333407232 ns) > initial count (412347679616 ns). Using initial count to start timer. [ 326.599150][T10370] overlayfs: failed to clone upperpath [ 326.818692][T10382] 9p filesystem being mounted at /393/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 326.973178][T10387] loop7: detected capacity change from 0 to 512 [ 327.053630][T10387] EXT4-fs (loop7): Ignoring removed bh option [ 327.112260][T10387] EXT4-fs (loop7): mounted filesystem without journal. Opts: i_version,nogrpid,bh,,errors=continue. Quota mode: writeback. [ 327.133845][T10387] ext4 filesystem being mounted at /140/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 327.566730][T10387] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:476: comm syz.7.1580: Invalid block bitmap block 3639385208 in block_group 0 [ 327.676471][T10396] netlink: 168 bytes leftover after parsing attributes in process `syz.9.1583'. [ 327.694352][T10387] EXT4-fs error (device loop7): ext4_discard_preallocations:5142: comm syz.7.1580: Error -117 reading block bitmap for 0 [ 327.735074][T10387] EXT4-fs error (device loop7): __ext4_get_inode_loc:4334: comm syz.7.1580: Invalid inode table block 3757049630 in block_group 0 [ 327.790490][T10387] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 327.855686][T10387] EXT4-fs error (device loop7): ext4_ext_truncate:4487: inode #15: comm syz.7.1580: mark_inode_dirty error [ 327.898367][T10387] EXT4-fs error (device loop7): __ext4_get_inode_loc:4334: comm syz.7.1580: Invalid inode table block 3757049630 in block_group 0 [ 327.918785][T10387] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 327.929439][T10387] EXT4-fs error (device loop7): ext4_truncate:4286: inode #15: comm syz.7.1580: mark_inode_dirty error [ 327.941643][T10387] EXT4-fs error (device loop7) in ext4_setattr:5645: Corrupt filesystem [ 327.994359][T10397] lo speed is unknown, defaulting to 1000 [ 328.094190][T10404] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 328.117140][T10404] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 328.356992][T10397] chnl_net:caif_netlink_parms(): no params data found [ 328.527025][T10412] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 328.559390][T10412] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 328.606286][T10397] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.629117][T10397] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.689504][T10397] device bridge_slave_0 entered promiscuous mode [ 328.736576][T10397] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.754604][T10397] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.763114][T10397] device bridge_slave_1 entered promiscuous mode [ 328.781338][T10431] device syz_tun entered promiscuous mode [ 328.788075][T10431] device vlan2 entered promiscuous mode [ 328.844260][ T4377] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 328.857163][T10397] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 328.876384][T10397] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 328.947188][T10397] team0: Port device team_slave_0 added [ 328.965967][T10397] team0: Port device team_slave_1 added [ 329.006927][T10397] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 329.020558][T10397] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 329.055991][T10397] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 329.069823][T10397] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 329.077918][T10397] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 329.105072][ T4377] usb 10-1: Using ep0 maxpacket: 16 [ 329.110490][T10397] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 329.122702][T10434] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1594'. [ 329.168368][T10397] device hsr_slave_0 entered promiscuous mode [ 329.184700][T10397] device hsr_slave_1 entered promiscuous mode [ 329.191851][T10397] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 329.200158][T10397] Cannot create hsr debugfs directory [ 329.224186][ T4377] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 329.257553][ T4377] usb 10-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 329.273612][ T4377] usb 10-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 329.304150][ T4377] usb 10-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid maxpacket 12336, setting to 1024 [ 329.324187][ T4377] usb 10-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 1024 [ 329.350552][ T4377] usb 10-1: config 1 interface 0 has no altsetting 0 [ 329.374436][ T4377] usb 10-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 329.433331][ T4377] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.537183][ T4377] ums-sddr09 10-1:1.0: USB Mass Storage device detected [ 329.736813][T10453] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 329.771888][ T4377] scsi host1: usb-storage 10-1:1.0 [ 329.899415][ T4377] Bluetooth: hci2: command 0x0409 tx timeout [ 329.970051][ T4377] usb 10-1: USB disconnect, device number 4 [ 330.346176][T10397] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 330.385298][T10397] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 330.399004][T10397] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 330.424484][T10397] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 330.602393][T10397] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.644537][T10474] loop9: detected capacity change from 0 to 128 [ 330.657651][ T6103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 330.668135][ T6103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 330.726279][T10474] FAT-fs (loop9): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 330.726724][T10397] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.758730][ T6103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 330.781386][ T6103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 330.790694][T10474] vfat filesystem being mounted at /99/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2107-12-31 (0x10391447e) [ 330.821921][ T6103] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.829801][ T6103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.854036][ T6103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 330.882642][ T6103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 330.909171][ T6103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 330.920468][ T6103] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.927631][ T6103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.973148][ T6103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 330.995187][ T6103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 331.016635][ T6103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 331.026683][ T6103] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 331.036231][ T6103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 331.055309][ T6103] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 331.071720][T10397] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 331.092967][T10397] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 331.120656][ T6103] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 331.130706][ T6103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 331.146929][ T6103] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 331.166372][ T6103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 331.188706][ T6103] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 331.203330][ T6103] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 331.267820][ T9] FAT-fs (loop9): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 331.526918][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 331.544427][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 331.557639][T10494] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1612'. [ 331.569787][T10397] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 331.923189][T10512] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1615'. [ 331.952352][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 331.974205][ T4377] Bluetooth: hci2: command 0x041b tx timeout [ 331.982623][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 332.024696][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 332.035709][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 332.050778][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 332.083423][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 332.182578][T10397] device veth0_vlan entered promiscuous mode [ 332.214028][T10397] device veth1_vlan entered promiscuous mode [ 332.248436][T10397] device veth0_macvtap entered promiscuous mode [ 332.278088][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 332.298501][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 332.329357][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 332.351428][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 332.369571][T10397] device veth1_macvtap entered promiscuous mode [ 332.381237][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 332.391723][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 332.412606][T10397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 332.441174][T10397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.460344][T10397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 332.471441][T10397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.487882][T10397] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 332.510001][ T6103] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 332.528312][ T6103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 332.560743][T10397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 332.577038][T10397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.592169][T10397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 332.624730][T10397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.652621][T10397] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 332.671268][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 332.686293][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 332.701676][T10397] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.712229][T10397] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.725072][T10397] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.734760][T10397] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.951886][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.001176][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.031756][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 333.091012][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.119900][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.157058][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 333.563746][ T4232] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 333.651857][T10520] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1617'. [ 333.683565][T10520] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1617'. [ 333.824480][ T4232] usb 9-1: Using ep0 maxpacket: 16 [ 333.933464][T10532] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1623'. [ 333.966235][ T4232] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 333.984859][ T4232] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 334.059263][ T4377] Bluetooth: hci2: command 0x040f tx timeout [ 334.143838][ T4378] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 334.175928][ T4232] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 334.199941][ T4232] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.224811][ T4232] usb 9-1: Product: syz [ 334.233324][ T4232] usb 9-1: Manufacturer: syz [ 334.262261][ T4232] usb 9-1: SerialNumber: syz [ 334.322471][T10550] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1629'. [ 334.508240][ T4378] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 334.527985][ T4378] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 334.582008][ T4378] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.641519][ T4378] usb 10-1: config 0 descriptor?? [ 334.644633][ T4232] usb 9-1: 0:2 : does not exist [ 334.706740][ T4378] pwc: Askey VC010 type 2 USB webcam detected. [ 334.741791][ T4232] usb 9-1: USB disconnect, device number 3 [ 334.871910][T10575] binder: 10572:10575 ioctl c0306201 200000000680 returned -14 [ 334.883848][T10578] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1638'. [ 335.144433][ T4378] pwc: recv_control_msg error -32 req 02 val 2b00 [ 335.184255][ T4378] pwc: recv_control_msg error -32 req 02 val 2700 [ 335.224611][ T4378] pwc: recv_control_msg error -32 req 02 val 2c00 [ 335.274157][ T4378] pwc: recv_control_msg error -32 req 04 val 1000 [ 335.314199][ T4378] pwc: recv_control_msg error -32 req 04 val 1300 [ 335.354202][ T4378] pwc: recv_control_msg error -32 req 04 val 1400 [ 335.404379][ T4378] pwc: recv_control_msg error -32 req 02 val 2000 [ 335.636312][T10605] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 335.636312][T10605] The task syz.7.1647 (10605) triggered the difference, watch for misbehavior. [ 335.664467][ T4378] pwc: recv_control_msg error -71 req 04 val 1500 [ 335.684204][ T4378] pwc: recv_control_msg error -71 req 02 val 2500 [ 335.719067][ T4378] pwc: recv_control_msg error -71 req 02 val 2400 [ 335.743775][ T4378] pwc: recv_control_msg error -71 req 02 val 2600 [ 335.764476][ T4378] pwc: recv_control_msg error -71 req 02 val 2900 [ 335.794517][ T4378] pwc: recv_control_msg error -71 req 02 val 2800 [ 335.824454][ T4378] pwc: recv_control_msg error -71 req 04 val 1100 [ 335.847393][ T4378] pwc: recv_control_msg error -71 req 04 val 1200 [ 335.905714][ T4378] pwc: Registered as video103. [ 335.911764][ T4378] input: PWC snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/input/input9 [ 335.961913][ T4378] usb 10-1: USB disconnect, device number 5 [ 336.134234][ T23] Bluetooth: hci2: command 0x0419 tx timeout [ 336.456455][T10630] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1655'. [ 336.665420][ T26] kauditd_printk_skb: 157 callbacks suppressed [ 336.665436][ T26] audit: type=1326 audit(3930998159.199:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10640 comm="syz.8.1660" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa88b46fe59 code=0x0 [ 336.835637][T10649] fuse: Bad value for 'fd' [ 337.131944][T10658] Set syz0 is full, maxelem 0 reached [ 337.152082][T10658] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 337.582177][T10672] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1675'. [ 337.663672][T10672] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1675'. [ 338.483351][T10696] netlink: 76 bytes leftover after parsing attributes in process `syz.7.1683'. [ 338.670536][T10709] netlink: 'syz.7.1687': attribute type 39 has an invalid length. [ 339.083252][T10723] Bluetooth: (null): Invalid header checksum [ 339.217691][T10732] overlayfs: failed to clone upperpath [ 339.447081][T10748] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1704'. [ 339.463374][T10748] 0ªX¹¦À: renamed from caif0 [ 339.470324][T10748] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 339.643738][ T4232] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 339.723570][ T4265] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 339.933598][ T4232] usb 10-1: Using ep0 maxpacket: 32 [ 340.003745][ T4265] usb 8-1: Using ep0 maxpacket: 32 [ 340.064647][ T4232] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 340.082119][ T4232] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1040, setting to 1024 [ 340.094369][ T4232] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 340.104596][ T4232] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.116568][ T4232] usb 10-1: config 0 descriptor?? [ 340.135576][T10741] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 340.153902][ T4265] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 340.165395][ T4232] hub 10-1:0.0: USB hub found [ 340.358577][ T4265] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 340.374138][ T4265] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 340.384066][ T4232] hub 10-1:0.0: 1 port detected [ 340.392781][ T4265] usb 8-1: Product: syz [ 340.402968][ T4265] usb 8-1: Manufacturer: syz [ 340.413134][ T4265] usb 8-1: SerialNumber: syz [ 340.445451][ T4265] usb 8-1: config 0 descriptor?? [ 340.484105][T10745] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 340.699576][T10793] loop8: detected capacity change from 0 to 1024 [ 341.467135][ T23] usb 10-1: USB disconnect, device number 6 [ 341.474051][ T4232] usb 10-1-port1: cannot reset (err = -71) [ 341.481026][ T4232] usb 10-1-port1: attempt power cycle [ 342.158948][ T23] usb 8-1: USB disconnect, device number 9 [ 342.462189][T10838] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 342.471467][T10838] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 342.480609][T10838] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 342.491317][T10838] device bridge_slave_0 left promiscuous mode [ 342.498689][T10838] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.512329][T10838] device bridge_slave_1 left promiscuous mode [ 342.519887][T10838] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.530916][T10838] bond0: (slave bond_slave_0): Releasing backup interface [ 342.549814][T10838] bond0: (slave bond_slave_1): Releasing backup interface [ 342.610308][T10838] team0: Port device team_slave_0 removed [ 342.629932][T10838] team0: Port device team_slave_1 removed [ 342.643973][T10838] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 342.651457][T10838] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 342.663138][T10838] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 342.675407][T10838] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 342.752528][T10839] team0: Port device xfrm0 added [ 342.767853][T10840] tipc: Started in network mode [ 342.772877][T10840] tipc: Node identity 6a06cc88b851, cluster identity 4711 [ 343.026102][T10840] tipc: Enabled bearer , priority 0 [ 343.992195][T10863] loop9: detected capacity change from 0 to 1024 [ 344.042400][T10863] EXT4-fs (loop9): Ignoring removed bh option [ 344.098837][T10863] EXT4-fs (loop9): mounted filesystem without journal. Opts: nobarrier,dioread_lock,noquota,nolazytime,inode_readahead_blks=0x0000000000000100,nodioread_nolock,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none. [ 344.137136][ T4377] tipc: Node number set to 3528969352 [ 345.996907][T10902] netlink: 'syz.3.1754': attribute type 1 has an invalid length. [ 346.015948][T10879] loop9: detected capacity change from 0 to 32768 [ 346.190164][T10902] 8021q: adding VLAN 0 to HW filter on device bond3 [ 346.251782][T10879] jfs filesystem being mounted at /116/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2106-02-07 (0xffffffff) [ 346.309223][T10906] bond3: (slave dummy0): Enslaving as a backup interface with an up link [ 346.320031][ T154] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 346.347921][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 346.381132][T10907] netlink: 'syz.3.1754': attribute type 10 has an invalid length. [ 346.414286][T10907] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1754'. [ 346.453884][ T4265] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 346.459729][ T154] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 346.490345][T10907] device dummy0 entered promiscuous mode [ 346.506009][T10907] bond3: (slave dummy0): Removing an active aggregator [ 346.533625][T10907] bond3: (slave dummy0): Releasing backup interface [ 346.627974][ T26] audit: type=1800 audit(3930998169.159:235): pid=10879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1745" name="file1" dev="loop9" ino=13 res=0 errno=0 [ 346.709183][T10915] device wg1 left promiscuous mode [ 346.717121][T10915] device bridge2 left promiscuous mode [ 346.748176][T10915] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 346.757488][T10915] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 346.768135][T10915] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 346.844047][ T4265] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 346.869048][ T4265] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 346.892028][ T4265] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 346.932093][ T4265] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 347.079627][T10915] device bond2 left promiscuous mode [ 347.136315][T10915] device veth5 left promiscuous mode [ 347.148764][ T4265] usb 9-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 347.161464][ T4265] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.180928][ T4265] usb 9-1: Product: syz [ 347.192775][ T4265] usb 9-1: Manufacturer: syz [ 347.203114][ T4265] usb 9-1: SerialNumber: syz [ 347.219005][ T4265] usb 9-1: config 0 descriptor?? [ 347.237997][T10918] 9p filesystem being mounted at /117/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 347.407957][T10927] netlink: 156 bytes leftover after parsing attributes in process `syz.7.1773'. [ 347.429262][T10927] netlink: 156 bytes leftover after parsing attributes in process `syz.7.1773'. [ 348.328166][ T4265] adutux 9-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 348.339409][T10931] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1773'. [ 348.601891][ T4377] usb 9-1: USB disconnect, device number 4 [ 348.686055][T10938] lo speed is unknown, defaulting to 1000 [ 349.320633][T10972] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1778'. [ 350.058873][T11008] device dummy0 left promiscuous mode [ 350.064608][ T4232] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 350.307923][ T4232] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 350.341925][T11011] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 350.353744][ T4232] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 351.414873][ T4265] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 351.432775][ T4265] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 352.055161][ T4232] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 352.761965][T11065] device vlan2 entered promiscuous mode [ 352.801895][T11066] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1812'. [ 353.690896][T11082] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1828'. [ 353.776145][T11082] device bond0 entered promiscuous mode [ 353.808333][T11082] device batadv0 entered promiscuous mode [ 353.881757][T11082] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 353.916877][T11082] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 353.953731][T11085] netlink: 14 bytes leftover after parsing attributes in process `syz.8.1828'. [ 354.165359][T11085] device bond0 left promiscuous mode [ 354.183225][T11085] bond0 (unregistering): Released all slaves [ 354.220661][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 355.343752][ T4265] Bluetooth: hci0: command 0x0406 tx timeout [ 355.743640][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 356.164025][T11126] overlayfs: failed to clone upperpath [ 357.048123][T11143] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 357.237427][T11146] device syzkaller0 entered promiscuous mode [ 357.255875][T11146] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 366.462714][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 366.563053][T11194] loop8: detected capacity change from 0 to 512 [ 366.756210][T11194] EXT4-fs (loop8): mounted filesystem without journal. Opts: errors=remount-ro,usrquota,minixdf,nombcache,. Quota mode: writeback. [ 366.858749][T11194] ext4 filesystem being mounted at /43/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 367.415426][T11217] delete_channel: no stack [ 367.423456][T11217] delete_channel: no stack [ 368.578501][T11247] bond0: (slave bridge0): Releasing backup interface [ 368.599177][T11247] device bridge_slave_0 left promiscuous mode [ 368.612334][T11247] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.642079][T11247] device bridge_slave_1 left promiscuous mode [ 368.654763][T11247] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.678269][T11247] bond0: (slave bond_slave_1): Releasing backup interface [ 368.716941][T11247] team0: Port device team_slave_0 removed [ 368.748460][T11247] team0: Port device team_slave_1 removed [ 368.769697][T11247] team0: Port device netdevsim0 removed [ 368.788912][T11247] bond2: (slave veth5): Releasing backup interface [ 370.336034][T11287] batman_adv: batadv0: Adding interface: dummy0 [ 370.342434][T11287] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 370.467530][T11287] batman_adv: batadv0: Interface activated: dummy0 [ 373.240593][T11331] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 373.250098][T11331] bond0: (slave bridge0): Releasing backup interface [ 373.258871][T11331] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.266274][T11331] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.292541][T11331] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 373.311379][T11331] device bridge_slave_0 left promiscuous mode [ 373.320582][T11331] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.340663][T11331] device bridge_slave_1 left promiscuous mode [ 373.357197][T11331] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.381225][T11331] bond0: (slave bond_slave_0): Releasing backup interface [ 373.432325][T11331] bond0: (slave bond_slave_1): Releasing backup interface [ 373.560110][T11331] team0: Port device team_slave_0 removed [ 373.610474][T11331] team0: Port device team_slave_1 removed [ 373.634225][T11331] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 373.641865][T11331] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 373.653244][T11331] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 373.661494][T11331] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 373.699412][T11344] netlink: 'syz.4.1903': attribute type 1 has an invalid length. [ 373.737537][T11344] 8021q: adding VLAN 0 to HW filter on device bond4 [ 373.757364][T11345] bond4: (slave dummy0): Enslaving as a backup interface with an up link [ 373.771840][T11347] netlink: 'syz.4.1903': attribute type 10 has an invalid length. [ 373.796723][T11347] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1903'. [ 373.839300][T11347] device dummy0 entered promiscuous mode [ 373.845301][ T154] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 373.875920][T11351] sctp: [Deprecated]: syz.3.1905 (pid 11351) Use of struct sctp_assoc_value in delayed_ack socket option. [ 373.875920][T11351] Use struct sctp_sack_info instead [ 373.905098][T11347] bond4: (slave dummy0): Removing an active aggregator [ 373.912429][T11347] bond4: (slave dummy0): Releasing backup interface [ 373.999016][T11352] sctp: [Deprecated]: syz.3.1905 (pid 11352) Use of int in maxseg socket option. [ 373.999016][T11352] Use struct sctp_assoc_value instead [ 374.070611][T11360] tipc: Failed to remove unknown binding: 66,0,0/0:802492448/802492450 [ 374.079323][T11360] tipc: Failed to remove unknown binding: 66,0,0/0:802492448/802492449 [ 374.105927][T11360] tipc: Failed to remove unknown binding: 66,0,0/0:802492448/802492450 [ 374.172059][T11360] tipc: Failed to remove unknown binding: 66,0,0/0:802492448/802492449 [ 375.050433][T11364] lo speed is unknown, defaulting to 1000 [ 375.110414][T11376] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1913'. [ 375.286442][T11378] 9pnet: p9_errstr2errno: server reported unknown error Àñ'IÓ$íÛ·=¼¼ [ 375.713028][T11401] netlink: 'syz.4.1923': attribute type 1 has an invalid length. [ 375.789156][T11401] device bond5 entered promiscuous mode [ 375.819283][T11401] 8021q: adding VLAN 0 to HW filter on device bond5 [ 375.919891][T11407] bond5: (slave bridge7): making interface the new active one [ 375.958770][T11407] device bridge7 entered promiscuous mode [ 376.105999][T11407] bond5: (slave bridge7): Enslaving as an active interface with an up link [ 376.167535][ T4214] IPv6: ADDRCONF(NETDEV_CHANGE): bond5: link becomes ready [ 377.244472][T11418] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1929'. [ 378.380166][T11437] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1935'. [ 378.423267][T11437] device bond0 entered promiscuous mode [ 378.458779][T11437] device batadv0 entered promiscuous mode [ 378.478726][T11437] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 378.508321][T11437] Cannot create hsr debugfs directory [ 378.758169][T11437] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 378.857343][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.865842][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.993859][T11437] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 379.216070][T11440] netlink: 14 bytes leftover after parsing attributes in process `syz.7.1935'. [ 379.639532][T11440] device bond0 left promiscuous mode [ 379.668844][T11440] bond0 (unregistering): Released all slaves [ 379.743806][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 380.654121][T11458] xt_TPROXY: Can be used only with -p tcp or -p udp [ 381.153411][T11460] loop8: detected capacity change from 0 to 16 [ 383.057164][T11483] tipc: Resetting bearer [ 383.114954][T11483] tipc: Resetting bearer [ 383.699658][T11484] netlink: 'syz.8.1951': attribute type 16 has an invalid length. [ 383.707751][T11484] netlink: 'syz.8.1951': attribute type 17 has an invalid length. [ 383.716986][T11481] netlink: 'syz.3.1950': attribute type 28 has an invalid length. [ 383.725644][T11481] netlink: 'syz.3.1950': attribute type 3 has an invalid length. [ 383.733413][T11481] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1950'. [ 383.876793][T11484] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 383.896348][T11489] 9pnet: p9_errstr2errno: server reported unknown error Àñ'IÓ$íÛ·=¼ [ 383.970737][T11484] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 384.021174][T11484] tipc: Resetting bearer [ 384.065014][T11484] tipc: Resetting bearer [ 384.071217][T11484] tipc: Resetting bearer [ 384.106356][T11484] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 384.192597][ T154] tipc: Resetting bearer [ 384.207223][T11495] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1955'. [ 384.613640][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 384.902848][T11512] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1960'. [ 385.046822][T11501] loop8: detected capacity change from 0 to 32768 [ 385.081180][T11501] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 scanned by syz.8.1957 (11501) [ 385.161155][T11501] BTRFS info (device loop8): using sha256 (sha256-avx2) checksum algorithm [ 385.200036][T11501] BTRFS info (device loop8): using free space tree [ 385.231119][T11501] BTRFS info (device loop8): has skinny extents [ 386.919559][T11501] BTRFS info (device loop8): enabling ssd optimizations [ 388.972700][T11603] xt_TPROXY: Can be used only with -p tcp or -p udp [ 389.940957][T11611] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.994834][T11611] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.026049][T11611] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.056760][T11611] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.092087][T11611] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.121705][T11611] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.659366][T11628] loop8: detected capacity change from 0 to 256 [ 390.819769][T11628] exfat filesystem being mounted at /66/bus supports timestamps until 2107-12-31 (0x10391447f) [ 392.018682][T11628] exFAT-fs (loop8): hint_cluster is invalid (17) [ 393.253732][T11639] xt_TPROXY: Can be used only with -p tcp or -p udp [ 393.775718][T11641] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1996'. [ 393.962723][T11641] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1996'. [ 394.122346][T11654] netlink: 'syz.4.2002': attribute type 1 has an invalid length. [ 394.188201][T11662] bond6: (slave gretap1): making interface the new active one [ 394.197804][T11662] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 394.224506][T11661] overlayfs: failed to clone upperpath [ 394.260171][T11654] bond6: (slave vlan5): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 394.540530][T11668] tipc: Failed to remove unknown binding: 66,0,0/0:4007054470/4007054472 [ 394.576458][T11668] tipc: Failed to remove unknown binding: 66,0,0/0:4007054470/4007054471 [ 394.608924][T11671] tipc: Failed to remove unknown binding: 66,0,0/0:4007054470/4007054472 [ 394.637471][T11671] tipc: Failed to remove unknown binding: 66,0,0/0:4007054470/4007054471 [ 395.283649][T11582] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 395.534851][T11582] usb 9-1: Using ep0 maxpacket: 32 [ 395.621946][T11696] netlink: 16402 bytes leftover after parsing attributes in process `syz.9.2016'. [ 395.680444][T11701] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2018'. [ 395.699240][T11582] usb 9-1: config 0 has an invalid interface number: 12 but max is 0 [ 395.707851][T11582] usb 9-1: config 0 has no interface number 0 [ 395.718922][T11582] usb 9-1: config 0 interface 12 has no altsetting 0 [ 395.894371][T11706] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2020'. [ 395.910363][T11582] usb 9-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 395.919811][T11582] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.928535][T11582] usb 9-1: Product: syz [ 395.933053][T11582] usb 9-1: Manufacturer: syz [ 395.938131][T11582] usb 9-1: SerialNumber: syz [ 395.960141][T11582] usb 9-1: config 0 descriptor?? [ 396.583837][T11582] f81534 9-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71 [ 396.592348][T11582] f81534 9-1:0.12: f81534_find_config_idx: read failed: -71 [ 396.628523][T11582] f81534 9-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 396.640323][T11582] f81534: probe of 9-1:0.12 failed with error -71 [ 396.661236][T11582] usb 9-1: USB disconnect, device number 5 [ 398.693376][T11781] sch_fq: defrate 53322 ignored. [ 400.587310][T11792] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2049'. [ 400.633609][T11792] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2049'. [ 400.718132][T11792] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2049'. [ 400.775670][T11792] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2049'. [ 402.112122][T11811] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2056'. [ 403.743350][T11841] fuse: Bad value for 'fd' [ 403.789610][T11845] netlink: 'syz.7.2068': attribute type 1 has an invalid length. [ 403.811601][T11845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 403.843145][T11845] bond0: (slave geneve2): making interface the new active one [ 403.860182][T11845] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 403.871925][ T6103] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 403.882486][T11850] netlink: 'syz.3.2070': attribute type 11 has an invalid length. [ 404.066116][T11863] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2076'. [ 404.248657][T11877] netlink: 'syz.4.2081': attribute type 4 has an invalid length. [ 404.258728][T11877] netlink: 'syz.4.2081': attribute type 4 has an invalid length. [ 404.500952][ T26] audit: type=1326 audit(3930998227.029:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11834 comm="syz.9.2064" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04f098be59 code=0x7fc00000 [ 404.702526][T11895] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2088'. [ 404.725858][T11891] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 404.780612][T11895] unsupported nlmsg_type 40 [ 404.802124][T11891] bond7: (slave macvlan2): Enslaving as a backup interface with a down link [ 405.944221][T11911] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2103'. [ 406.015566][T11911] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2103'. [ 408.501241][T11943] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2104'. [ 408.617602][T11915] loop8: detected capacity change from 0 to 40427 [ 408.734816][T11915] F2FS-fs (loop8): Invalid SB checksum offset: 0 [ 408.778211][T11915] F2FS-fs (loop8): Can't find valid F2FS filesystem in 2th superblock [ 408.856294][ T26] audit: type=1326 audit(3930998231.389:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11952 comm="syz.4.2110" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe2227d7e59 code=0x0 [ 408.862169][T11915] F2FS-fs (loop8): invalid crc_offset: 1 [ 409.326259][T11915] F2FS-fs (loop8): Failed to start F2FS issue_checkpoint_thread (-12) [ 411.233281][T11991] overlayfs: failed to clone upperpath [ 411.949724][T12008] fuse: root generation should be zero [ 412.559413][T12004] netlink: 10 bytes leftover after parsing attributes in process `syz.7.2125'. [ 412.628043][T12005] device macvlan2 entered promiscuous mode [ 412.646069][T12005] device bond2 entered promiscuous mode [ 412.652094][T12005] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 412.725940][T12005] device bond2 left promiscuous mode [ 412.961877][T12023] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2132'. [ 413.009216][T12023] device ip6gre1 entered promiscuous mode [ 413.057113][T12025] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2134'. [ 413.090279][T12023] netlink: 'syz.8.2132': attribute type 6 has an invalid length. [ 413.109170][T12023] netlink: 72 bytes leftover after parsing attributes in process `syz.8.2132'. [ 413.943860][ T26] audit: type=1326 audit(3930998236.469:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12039 comm="syz.9.2138" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f04f098be59 code=0x0 [ 414.170829][T12047] mmap: syz.4.2141 (12047): VmData 175874048 exceed data ulimit 9. Update limits or use boot option ignore_rlimit_data. [ 416.858554][ T7881] IPVS: ip_vs_send_async error -101 [ 416.963042][T12087] MPTCP: kernel_bind error, err=-99 [ 416.994489][T12087] device dummy0 left promiscuous mode [ 417.066191][T12087] device bond5 left promiscuous mode [ 417.078418][T12087] device bridge7 left promiscuous mode [ 417.342628][T12095] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 419.492638][T12115] 9p filesystem being mounted at /86/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 419.538347][T12125] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2166'. [ 420.926809][T12159] netlink: 44 bytes leftover after parsing attributes in process `syz.9.2179'. [ 421.733683][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 424.271890][T12199] netlink: 'syz.3.2191': attribute type 4 has an invalid length. [ 424.298375][T12199] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2191'. [ 424.311442][T12199] .`: renamed from bond0 [ 424.391781][ T26] audit: type=1804 audit(3930998246.919:239): pid=12205 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2193" name="bus" dev="ramfs" ino=73349 res=1 errno=0 [ 424.629247][ T26] audit: type=1804 audit(3930998247.149:240): pid=12205 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.2193" name="bus" dev="ramfs" ino=73349 res=1 errno=0 [ 426.563815][ T26] audit: type=1326 audit(3930998248.399:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12226 comm="syz.7.2203" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6e0b5a9e59 code=0x0 [ 427.932088][T12263] 9p filesystem being mounted at /275/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 428.156108][T12266] fuse: Bad value for 'fd' [ 431.194917][T12305] team0: Device ipip0 is up. Set it down before adding it as a team port [ 432.550990][T12326] lo speed is unknown, defaulting to 1000 [ 432.558578][T12329] 9p filesystem being mounted at /223/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 432.732511][T12337] netlink: 628 bytes leftover after parsing attributes in process `syz.7.2241'. [ 432.760733][T12340] tipc: Started in network mode [ 432.774254][T12340] tipc: Node identity 2003, cluster identity 4711 [ 432.938373][T12340] tipc: Node number set to 8195 [ 435.561941][T12357] netlink: 3 bytes leftover after parsing attributes in process `syz.9.2246'. [ 435.633122][T12357] 0ªX¹¦À: renamed from caif0 [ 435.656785][T12357] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 435.709574][T12356] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2245'. [ 435.712861][T12366] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2249'. [ 435.765808][T12360] mac80211_hwsim hwsim8 »»»»»»: renamed from wlan0 [ 437.805203][T12407] xt_NFQUEUE: number of queues (8) out of range (got 65537) [ 438.123721][T12425] netlink: 'syz.7.2268': attribute type 1 has an invalid length. [ 438.417140][T12429] 8021q: adding VLAN 0 to HW filter on device bond2 [ 438.443944][T12429] bond1: (slave bond2): making interface the new active one [ 438.473339][T12429] bond1: (slave bond2): Enslaving as an active interface with an up link [ 438.564718][T12431] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 438.583569][T11575] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 438.630877][T12425] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2268'. [ 438.680445][T12425] 8021q: adding VLAN 0 to HW filter on device bond1 [ 438.809775][T12444] netlink: 168 bytes leftover after parsing attributes in process `syz.7.2274'. [ 438.828038][T11575] usb 9-1: Using ep0 maxpacket: 32 [ 438.988455][T11575] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 439.010179][T11575] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 439.047858][T11575] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 439.063101][T11575] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.118027][T11575] usb 9-1: config 0 descriptor?? [ 439.158153][T11575] hub 9-1:0.0: USB hub found [ 439.317808][ T26] audit: type=1804 audit(3930998261.849:242): pid=12463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.2290" name="bus" dev="ramfs" ino=74565 res=1 errno=0 [ 439.373634][T11575] hub 9-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 439.389198][ T26] audit: type=1804 audit(3930998261.849:243): pid=12463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.2290" name="bus" dev="ramfs" ino=74565 res=1 errno=0 [ 440.297254][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.303938][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.357460][T11575] hid-generic 0003:046D:C31C.0006: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.8-1/input0 [ 440.982017][T11575] usb 9-1: reset high-speed USB device number 6 using dummy_hcd [ 441.779898][T12491] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2291'. [ 442.274891][T12505] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2295'. [ 442.873631][T11575] usb 9-1: USB disconnect, device number 6 [ 443.772554][T12537] 8021q: adding VLAN 0 to HW filter on device bond3 [ 443.788306][T12537] bond0: (slave bond3): Enslaving as an active interface with an up link [ 444.665205][T12552] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2307'. [ 444.726675][ T26] audit: type=1804 audit(3930998267.259:244): pid=12554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2306" name="bus" dev="ramfs" ino=74671 res=1 errno=0 [ 444.777623][ T26] audit: type=1804 audit(3930998267.259:245): pid=12554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.2306" name="bus" dev="ramfs" ino=74671 res=1 errno=0 [ 445.025403][T12564] pit: kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 445.549426][T12573] netlink: 'syz.8.2314': attribute type 27 has an invalid length. [ 445.570791][T12573] netlink: 'syz.8.2314': attribute type 4 has an invalid length. [ 445.602982][T12573] netlink: 144 bytes leftover after parsing attributes in process `syz.8.2314'. [ 446.179725][T12588] netlink: 'syz.4.2320': attribute type 1 has an invalid length. [ 446.229002][T12588] 8021q: adding VLAN 0 to HW filter on device bond8 [ 446.288310][T12588] bond8: (slave veth9): Enslaving as an active interface with a down link [ 446.329359][T12588] bond8: (slave veth11): Enslaving as an active interface with a down link [ 446.394124][T12594] tipc: Enabled bearer , priority 0 [ 446.442403][T12594] device syzkaller0 entered promiscuous mode [ 446.452020][T12591] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2321'. [ 446.487270][T12588] device veth0_virt_wifi entered promiscuous mode [ 446.511874][T12588] bond8: (slave veth0_virt_wifi): Enslaving as an active interface with a down link [ 446.553343][T12593] tipc: Resetting bearer [ 446.659699][T12593] tipc: Disabling bearer [ 447.766740][T12614] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2328'. [ 448.071754][T12633] loop8: detected capacity change from 0 to 256 [ 448.137620][T12633] msdos filesystem being mounted at /117/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 448.545560][ T26] audit: type=1326 audit(3930998271.079:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12646 comm="syz.3.2341" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f310a6b2e59 code=0x7ffc0000 [ 448.615620][ T26] audit: type=1326 audit(3930998271.119:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12646 comm="syz.3.2341" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f310a6b2e59 code=0x7ffc0000 [ 448.665638][ T26] audit: type=1326 audit(3930998271.119:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12646 comm="syz.3.2341" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f310a6b2e59 code=0x7ffc0000 [ 448.760401][ T26] audit: type=1326 audit(3930998271.119:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12646 comm="syz.3.2341" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f310a6b2e59 code=0x7ffc0000 [ 448.926937][ T26] audit: type=1326 audit(3930998271.119:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12646 comm="syz.3.2341" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f310a6b2e59 code=0x7ffc0000 [ 449.863918][ T26] audit: type=1326 audit(3930998271.169:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12646 comm="syz.3.2341" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f310a6b2e59 code=0x7ffc0000 [ 449.904229][ T26] audit: type=1326 audit(3930998271.169:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12646 comm="syz.3.2341" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f310a6b2e59 code=0x7ffc0000 [ 450.016614][ T26] audit: type=1326 audit(3930998271.169:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12646 comm="syz.3.2341" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f310a6b2e59 code=0x7ffc0000 [ 450.041614][T12660] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3897524436 (7795048872 ns) > initial count (2759807172 ns). Using initial count to start timer. [ 450.095448][ T26] audit: type=1326 audit(3930998271.169:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12646 comm="syz.3.2341" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f310a6b2e59 code=0x7ffc0000 [ 450.122124][T12672] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3996681224 (15986724896 ns) > initial count (3709615788 ns). Using initial count to start timer. [ 450.169406][ T26] audit: type=1326 audit(3930998271.179:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12646 comm="syz.3.2341" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f310a6b2e59 code=0x7ffc0000 [ 450.211861][ T26] audit: type=1326 audit(3930998271.179:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12646 comm="syz.3.2341" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f310a6b2bc2 code=0x7ffc0000 [ 450.278630][ T26] audit: type=1326 audit(3930998271.179:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12646 comm="syz.3.2341" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f310a6b2c57 code=0x7ffc0000 [ 450.361401][ T26] audit: type=1326 audit(3930998271.179:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12646 comm="syz.3.2341" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f310a66fb51 code=0x7ffc0000 [ 450.667477][ T26] audit: type=1326 audit(3930998271.179:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12646 comm="syz.3.2341" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f310a6b3c49 code=0x7ffc0000 [ 450.732122][ T26] audit: type=1326 audit(3930998271.179:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12646 comm="syz.3.2341" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f310a66fbbb code=0x7ffc0000 [ 453.023548][T11575] Bluetooth: hci2: command 0x0406 tx timeout [ 453.339436][T12718] netlink: 'syz.4.2363': attribute type 1 has an invalid length. [ 453.366031][T12719] tipc: Enabling of bearer rejected, failed to enable media [ 453.397803][T12718] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 453.445970][T12718] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 453.455368][T12718] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 453.467152][T12718] bond9: (slave geneve2): making interface the new active one [ 453.476520][T12718] bond9: (slave geneve2): Enslaving as an active interface with an up link [ 453.604245][T12729] netlink: 'syz.3.2368': attribute type 1 has an invalid length. [ 453.640359][T12733] overlayfs: failed to clone upperpath [ 453.869006][T12732] process 'newroot/563/bus/file0' started with executable stack [ 453.885516][T12729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 454.530394][T12735] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.578662][T12735] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.641929][T12735] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.694448][T12735] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.726122][T12735] bond0: (slave geneve2): making interface the new active one [ 454.783849][T12735] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 454.843636][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 458.630185][T12787] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2386'. [ 458.763059][T12789] tipc: Enabled bearer , priority 0 [ 458.868385][T12795] device syzkaller0 entered promiscuous mode [ 459.071458][T12788] tipc: Resetting bearer [ 459.166389][T12788] tipc: Disabling bearer [ 459.767982][T12814] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2397'. [ 459.791789][T12814] device ip6gre1 entered promiscuous mode [ 459.867379][T12814] netlink: 'syz.4.2397': attribute type 6 has an invalid length. [ 459.891942][T12814] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2397'. [ 459.911052][T12823] netlink: 16166 bytes leftover after parsing attributes in process `syz.3.2399'. [ 459.950450][T12827] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2401'. [ 459.994529][T12827] 8021q: adding VLAN 0 to HW filter on device bond4 [ 460.833648][T11582] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 461.213536][T11582] usb 9-1: Using ep0 maxpacket: 32 [ 462.013619][T11582] usb 9-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 462.022739][T11582] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.212658][T11582] usb 9-1: config 0 descriptor?? [ 462.255922][T11582] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 462.523775][T11582] gspca_vc032x: reg_r err -32 [ 462.530572][T11582] gspca_vc032x: I2c Bus Busy Wait 00 [ 462.626183][T11582] gspca_vc032x: I2c Bus Busy Wait 00 [ 462.727847][T11582] gspca_vc032x: I2c Bus Busy Wait 00 [ 462.833168][T11582] gspca_vc032x: I2c Bus Busy Wait 00 [ 462.966719][T12871] tipc: Enabling of bearer rejected, failed to enable media [ 462.989129][T11582] gspca_vc032x: I2c Bus Busy Wait 00 [ 463.018388][T11582] gspca_vc032x: I2c Bus Busy Wait 00 [ 463.051664][T11582] gspca_vc032x: I2c Bus Busy Wait 00 [ 463.086937][T11582] gspca_vc032x: I2c Bus Busy Wait 00 [ 463.122424][T11582] gspca_vc032x: I2c Bus Busy Wait 00 [ 463.164806][T11582] gspca_vc032x: I2c Bus Busy Wait 00 [ 463.200754][T11582] gspca_vc032x: I2c Bus Busy Wait 00 [ 463.225361][T11582] gspca_vc032x: I2c Bus Busy Wait 00 [ 463.241005][T11582] gspca_vc032x: I2c Bus Busy Wait 00 [ 463.253834][T11582] gspca_vc032x: I2c Bus Busy Wait 00 [ 463.270592][T11582] gspca_vc032x: I2c Bus Busy Wait 00 [ 463.291138][T12884] tipc: Started in network mode [ 463.303239][T11582] gspca_vc032x: I2c Bus Busy Wait 00 [ 463.322865][T12884] tipc: Node identity 080211000001, cluster identity 4711 [ 463.341293][T11582] gspca_vc032x: I2c Bus Busy Wait 00 [ 463.388509][T12884] tipc: Enabled bearer , priority 0 [ 463.395616][T11582] gspca_vc032x: I2c Bus Busy Wait 00 [ 463.430324][T11582] gspca_vc032x: Unknown sensor... [ 463.483837][T11582] vc032x: probe of 9-1:0.0 failed with error -22 [ 464.348676][ T4378] usb 9-1: USB disconnect, device number 7 [ 464.516308][T11582] tipc: Node number set to 134418688 [ 464.767928][T12858] syz.3.2409 sent an empty control message without MSG_MORE. [ 465.325391][ T26] kauditd_printk_skb: 37 callbacks suppressed [ 465.325489][ T26] audit: type=1800 audit(3930998287.859:298): pid=12895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.2419" name="bus" dev="ramfs" ino=76274 res=0 errno=0 [ 465.869749][T12922] netlink: 'syz.7.2428': attribute type 4 has an invalid length. [ 466.388929][T11582] lo speed is unknown, defaulting to 1000 [ 466.410042][T12922] netlink: 'syz.7.2428': attribute type 4 has an invalid length. [ 466.427766][ T4378] lo speed is unknown, defaulting to 1000 [ 468.081467][T12952] netlink: 'syz.8.2436': attribute type 13 has an invalid length. [ 468.095358][T12952] netlink: 'syz.8.2436': attribute type 17 has an invalid length. [ 468.182798][T12952] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 468.196556][T12952] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 468.208068][T12952] tipc: Resetting bearer [ 468.218725][T12952] tipc: Resetting bearer [ 468.230968][T12952] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 468.668700][ T26] audit: type=1326 audit(3930998291.199:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12964 comm="syz.7.2441" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6e0b5a9e59 code=0x0 [ 469.105083][T12982] 8021q: adding VLAN 0 to HW filter on device bond5 [ 469.144394][T12982] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2446'. [ 469.163733][T12982] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2446'. [ 469.217656][T12982] 8021q: adding VLAN 0 to HW filter on device bond0 [ 469.252276][T12982] bond5: (slave bond0): making interface the new active one [ 469.367394][T12982] bond5: (slave bond0): Enslaving as an active interface with an up link [ 469.544474][ T4664] IPv6: ADDRCONF(NETDEV_CHANGE): bond5: link becomes ready [ 469.632283][T12991] netlink: 'syz.7.2448': attribute type 1 has an invalid length. [ 469.684437][T12991] netlink: 168864 bytes leftover after parsing attributes in process `syz.7.2448'. [ 470.658484][T12997] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2450'. [ 474.104697][ T26] audit: type=1326 audit(3930998296.639:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13018 comm="syz.8.2457" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa88b46fe59 code=0x0 [ 478.585482][T13084] netlink: 'syz.8.2477': attribute type 1 has an invalid length. [ 479.133581][ T7881] IPVS: ip_vs_send_async error -101 [ 479.531370][T13084] 8021q: adding VLAN 0 to HW filter on device bond0 [ 479.688887][T13093] bond0: (slave veth3): Enslaving as an active interface with a down link [ 479.712826][T13095] batman_adv: batadv0: Interface deactivated: dummy0 [ 479.735381][T13109] overlayfs: failed to clone lowerpath [ 479.745457][T13095] batman_adv: batadv0: Removing interface: dummy0 [ 479.781233][T13111] overlayfs: failed to clone upperpath [ 479.813142][T13095] bond0: (slave dummy0): making interface the new active one [ 479.845770][T13095] device dummy0 entered promiscuous mode [ 479.864757][T13095] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 479.884605][ T4663] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 480.007352][T13117] netlink: 'syz.4.2488': attribute type 10 has an invalid length. [ 480.055831][T13117] 8021q: adding VLAN 0 to HW filter on device team0 [ 480.085396][T13117] bond0: (slave team0): Enslaving as an active interface with an up link [ 480.121387][T13123] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2490'. [ 480.174902][T13121] loop8: detected capacity change from 0 to 512 [ 480.223395][T13121] EXT4-fs (loop8): external journal device major/minor numbers have changed [ 480.341669][T13121] block device autoloading is deprecated and will be removed. [ 480.364374][T13121] EXT4-fs (loop8): external journal has bad superblock [ 483.931955][T13173] netlink: 'syz.9.2505': attribute type 1 has an invalid length. [ 484.196701][T13173] netdevsim netdevsim9 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 484.258087][T13173] netdevsim netdevsim9 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 484.284555][T13173] netdevsim netdevsim9 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 484.301384][T13173] netdevsim netdevsim9 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 484.317051][T13184] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 484.349119][T13173] bond6: (slave geneve2): making interface the new active one [ 485.043927][T13173] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 485.112530][T13186] bond6 (unregistering): (slave geneve2): Releasing active interface [ 485.136246][T13186] netdevsim netdevsim9 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 485.171130][T13186] netdevsim netdevsim9 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 485.201469][T13186] netdevsim netdevsim9 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 485.225409][T13186] netdevsim netdevsim9 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 485.278511][T13186] bond6 (unregistering): Released all slaves [ 488.584661][T13212] netlink: 'syz.4.2517': attribute type 1 has an invalid length. [ 488.632211][T13212] netlink: 'syz.4.2517': attribute type 4 has an invalid length. [ 488.681369][T13212] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.2517'. [ 488.740470][T13213] netlink: 'syz.4.2517': attribute type 1 has an invalid length. [ 488.800264][T13213] netlink: 'syz.4.2517': attribute type 4 has an invalid length. [ 488.860286][T13213] netlink: 9491 bytes leftover after parsing attributes in process `syz.4.2517'. [ 490.014693][T13233] netlink: 140 bytes leftover after parsing attributes in process `syz.7.2523'. [ 490.215933][T13233] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2523'. [ 492.583170][T13277] netlink: 196 bytes leftover after parsing attributes in process `syz.9.2541'. [ 495.110471][T13303] bond0: Device is already in use. [ 495.127049][T13306] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2549'. [ 495.328823][T13309] bond3: (slave gretap0): Enslaving as an active interface with an up link [ 495.462044][T13306] bond3 (unregistering): (slave gretap0): Releasing backup interface [ 495.540011][T13306] bond3 (unregistering): Released all slaves [ 496.613601][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 496.647003][ T4663] device dummy0 left promiscuous mode [ 498.360493][T13354] loop8: detected capacity change from 0 to 1024 [ 498.399974][T13354] EXT4-fs (loop8): Ignoring removed mblk_io_submit option [ 498.426237][T13354] EXT4-fs (loop8): bad geometry: bigalloc file system with non-zero first_data_block [ 498.426237][T13354] [ 499.600141][T13360] overlayfs: failed to clone upperpath [ 501.754803][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.761199][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.845507][T13421] netlink: 'syz.4.2581': attribute type 10 has an invalid length. [ 502.874972][T13421] team0: Port device dummy0 added [ 502.996295][T13421] netlink: 'syz.4.2581': attribute type 10 has an invalid length. [ 503.049312][T13421] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 503.131991][T13421] team0: Failed to send options change via netlink (err -105) [ 503.143814][T13421] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 503.156497][T13421] team0: Port device dummy0 removed [ 503.168563][T13421] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 506.578988][T13451] team0: Port device bridge0 added [ 507.103122][T13459] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2594'. [ 509.135228][T13476] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2609'. [ 513.933213][T13516] lo speed is unknown, defaulting to 1000 [ 514.011909][T13517] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2612'. [ 514.125660][ T4755] Bluetooth: hci0: command 0x0409 tx timeout [ 514.150252][T13518] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2612'. [ 514.525368][T13526] loop8: detected capacity change from 0 to 128 [ 515.292600][T13526] EXT4-fs (loop8): mounted filesystem without journal. Opts: nodiscard,,errors=continue. Quota mode: none. [ 515.329981][T13526] ext4 filesystem being mounted at /161/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 515.414471][T13534] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2616'. [ 515.846451][T13526] fscrypt (loop8, inode 12): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 515.921038][T13538] fscrypt (loop8, inode 12): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 518.245469][T13584] device syzkaller0 entered promiscuous mode [ 521.316544][T13619] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 1, id = 0 [ 521.350872][T13617] device macvtap1 entered promiscuous mode [ 521.401562][T13617] device macvtap2 entered promiscuous mode [ 523.922942][T13648] 9pnet: Insufficient options for proto=fd [ 532.879818][T13707] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2664'. [ 532.971863][T13712] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2665'. [ 533.112794][T13712] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2665'. [ 533.150094][T13723] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2667'. [ 533.360344][T13723] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 533.545775][T13736] xt_hashlimit: max too large, truncated to 1048576 [ 538.268132][T13812] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 538.300040][T13812] tipc: Enabled bearer , priority 10 [ 538.404862][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 538.674237][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 539.204366][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 539.326782][T13849] netlink: 'syz.7.2707': attribute type 10 has an invalid length. [ 539.356466][T13849] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2707'. [ 540.213579][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 541.253585][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 542.293590][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 543.363243][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 543.480249][T13875] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2716'. [ 543.525844][T13877] device batadv0 entered promiscuous mode [ 544.373648][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 546.635978][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 546.661506][T13891] netlink: 'syz.3.2721': attribute type 4 has an invalid length. [ 547.656458][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 551.561689][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 552.644565][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 553.339378][T13948] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2734'. [ 553.653635][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 554.696148][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 554.748164][T13955] overlayfs: failed to clone lowerpath [ 556.223695][T13964] xt_CT: No such helper "snmp_trap" [ 556.594252][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 557.656361][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 558.693783][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 559.454400][T14009] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2755'. [ 559.694439][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880606b8400: rx timeout, send abort [ 559.736406][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 560.195053][T14012] 9p filesystem being mounted at /649/file0 (deleted) supports timestamps until 2106-02-07 (0xffffffff) [ 560.465776][T14022] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 560.773573][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 561.679077][T14043] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 561.700530][T14044] VFS: Mount too revealing [ 561.739015][T14043] bond5: (slave bond0): Releasing active interface [ 561.816232][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 561.862903][T14043] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 561.955093][T14043] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 562.406295][T14043] bond0: (slave bond_slave_0): Releasing backup interface [ 562.797198][T14043] bond0: (slave bond_slave_1): Releasing backup interface [ 562.853544][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 563.181393][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.203092][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.379991][T14043] team0: Port device team_slave_0 removed [ 563.449310][T14043] team0: Port device team_slave_1 removed [ 563.494461][T14043] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 563.501979][T14043] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 563.510788][T14043] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 563.524329][T14043] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 563.599350][T14043] bond1: (slave ip6gretap1): Releasing backup interface [ 563.668809][T14060] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 563.700544][T14043] bond0: (slave bond3): Releasing backup interface [ 563.802198][T14048] team0: Mode changed to "roundrobin" [ 563.861823][T14051] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2765'. [ 563.896283][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 564.658387][T14083] loop8: detected capacity change from 0 to 128 [ 564.721035][T14083] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 564.749069][T14065] ±ÿþ€: renamed from team_slave_1 [ 564.810667][T14083] FAT-fs (loop8): bogus number of reserved sectors [ 564.836847][T14083] FAT-fs (loop8): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 564.847614][T14089] netlink: 'syz.3.2777': attribute type 1 has an invalid length. [ 564.865246][T14083] FAT-fs (loop8): Can't find a valid FAT filesystem [ 564.893164][T14089] device bond4 entered promiscuous mode [ 564.901612][T14089] 8021q: adding VLAN 0 to HW filter on device bond4 [ 564.916665][T14095] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2779'. [ 564.933202][T14094] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 564.934152][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 564.958143][T14094] bond4: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 564.981446][T14094] bond4: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 565.123266][T14095] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2779'. [ 565.594397][T14113] virt_wifi0 speed is unknown, defaulting to 1000 [ 565.604596][T14113] virt_wifi0 speed is unknown, defaulting to 1000 [ 565.620416][T14113] virt_wifi0 speed is unknown, defaulting to 1000 [ 565.688754][T14113] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 565.890475][T14113] virt_wifi0 speed is unknown, defaulting to 1000 [ 565.907744][T14113] virt_wifi0 speed is unknown, defaulting to 1000 [ 565.920039][T14113] virt_wifi0 speed is unknown, defaulting to 1000 [ 565.935579][T14113] virt_wifi0 speed is unknown, defaulting to 1000 [ 565.950091][T14113] virt_wifi0 speed is unknown, defaulting to 1000 [ 565.962803][T14113] virt_wifi0 speed is unknown, defaulting to 1000 [ 565.977559][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 566.335716][T14123] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2787'. [ 567.013650][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 568.056083][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 568.457485][T14164] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2795'. [ 568.467079][T14164] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2795'. [ 568.478013][T14164] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2795'. [ 568.487223][T14164] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2795'. [ 568.496535][T14164] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2795'. [ 568.505692][T14164] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2795'. [ 568.514809][T14164] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2795'. [ 569.093639][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 570.136418][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 570.548287][T14202] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[8068] was attempted by ""[14202] [ 571.173541][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 571.303065][ T4204] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 571.314384][ T4204] CPU: 1 PID: 4204 Comm: kworker/u5:8 Not tainted syzkaller #0 [ 571.322090][ T4204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 571.332178][ T4204] Workqueue: hci0 hci_rx_work [ 571.336995][ T4204] Call Trace: [ 571.340355][ T4204] [ 571.343361][ T4204] dump_stack_lvl+0x188/0x250 [ 571.348139][ T4204] ? show_regs_print_info+0x20/0x20 [ 571.353428][ T4204] ? load_image+0x410/0x410 [ 571.358005][ T4204] sysfs_create_dir_ns+0x26a/0x290 [ 571.363241][ T4204] ? sysfs_warn_dup+0xa0/0xa0 [ 571.367950][ T4204] ? kthread+0x42e/0x520 [ 571.372313][ T4204] ? do_raw_spin_unlock+0x11d/0x230 [ 571.377606][ T4204] kobject_add_internal+0x5ba/0xcd0 [ 571.382958][ T4204] kobject_add+0x160/0x230 [ 571.387414][ T4204] ? kobject_init+0x1c0/0x1c0 [ 571.392127][ T4204] ? __raw_spin_lock_init+0x41/0x100 [ 571.397445][ T4204] ? klist_children_get+0x50/0x50 [ 571.402620][ T4204] ? get_device_parent+0x121/0x3e0 [ 571.407792][ T4204] device_add+0x470/0x1050 [ 571.412248][ T4204] ? device_initialize+0x2a5/0x4d0 [ 571.417402][ T4204] hci_conn_add_sysfs+0xd1/0x1e0 [ 571.422446][ T4204] le_conn_complete_evt+0xc2e/0x14d0 [ 571.427811][ T4204] ? cs_le_create_conn+0x5e0/0x5e0 [ 571.432971][ T4204] ? __mutex_trylock_common+0x15c/0x260 [ 571.438670][ T4204] hci_le_meta_evt+0x285/0x3ca0 [ 571.443576][ T4204] ? hci_event_packet+0x363/0x1310 [ 571.448732][ T4204] ? __lock_acquire+0x7b50/0x7b50 [ 571.453820][ T4204] ? hci_remote_host_features_evt+0x240/0x240 [ 571.459933][ T4204] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 571.465793][ T4204] ? mark_lock+0x94/0x320 [ 571.470151][ T4204] ? mutex_unlock+0x10/0x10 [ 571.474689][ T4204] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 571.480749][ T4204] ? lock_chain_count+0x20/0x20 [ 571.485638][ T4204] ? __rwlock_init+0x140/0x140 [ 571.490434][ T4204] hci_event_packet+0xe0b/0x1310 [ 571.495414][ T4204] ? _raw_spin_unlock+0x40/0x40 [ 571.500301][ T4204] ? rcu_lock_release+0x20/0x20 [ 571.505280][ T4204] ? hci_send_to_monitor+0x9c/0x4a0 [ 571.510750][ T4204] hci_rx_work+0x255/0xa10 [ 571.515219][ T4204] process_one_work+0x867/0xff0 [ 571.520210][ T4204] ? worker_detach_from_pool+0x240/0x240 [ 571.525874][ T4204] ? lockdep_hardirqs_off+0x70/0x100 [ 571.531274][ T4204] ? _raw_spin_lock_irq+0xb7/0xf0 [ 571.536353][ T4204] ? _raw_spin_lock_irqsave+0x100/0x100 [ 571.541950][ T4204] ? wq_worker_running+0x97/0x170 [ 571.547015][ T4204] worker_thread+0xad7/0x12a0 [ 571.551761][ T4204] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 571.557714][ T4204] kthread+0x42e/0x520 [ 571.561827][ T4204] ? rcu_lock_release+0x20/0x20 [ 571.566714][ T4204] ? kthread_blkcg+0xd0/0xd0 [ 571.571344][ T4204] ret_from_fork+0x1f/0x30 [ 571.575893][ T4204] [ 571.586024][ T4204] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 571.599913][ T4204] Bluetooth: hci0: failed to register connection device [ 572.216395][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 573.253559][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 574.077149][T14232] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 574.296201][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 574.373231][T14250] __nla_validate_parse: 41 callbacks suppressed [ 574.373287][T14250] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2827'. [ 574.452105][T14250] bridge6: port 1(veth9) entered blocking state [ 574.468286][T14250] bridge6: port 1(veth9) entered disabled state [ 574.480800][T14250] device veth9 entered promiscuous mode [ 574.489803][T14250] bridge6: port 1(veth9) entered blocking state [ 574.496217][T14250] bridge6: port 1(veth9) entered forwarding state [ 574.550229][ T6103] bridge6: port 1(veth9) entered disabled state [ 574.684364][T14254] bridge6: port 2(veth11) entered blocking state [ 574.694305][T14254] bridge6: port 2(veth11) entered disabled state [ 574.709544][T14254] device veth11 entered promiscuous mode [ 574.744869][T14254] bridge6: port 2(veth11) entered blocking state [ 574.751344][T14254] bridge6: port 2(veth11) entered forwarding state [ 575.232721][ T6103] bridge6: port 2(veth11) entered disabled state [ 575.333642][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 575.845855][T14276] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 576.377933][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 577.990266][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 578.762455][T14298] siw: device registration error -23 [ 579.016440][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 580.449706][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 580.871811][T14314] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2845'. [ 581.496143][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 582.583758][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 583.546425][T14353] tipc: Enabling of bearer rejected, already enabled [ 583.646910][T14360] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2856'. [ 583.659135][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 583.667691][T14360] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2856'. [ 583.697328][T14360] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2856'. [ 583.707565][T14360] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2856'. [ 583.717387][T14360] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2856'. [ 583.727171][T14360] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2856'. [ 583.736855][T14360] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2856'. [ 583.746791][T14360] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2856'. [ 583.756679][T14360] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2856'. [ 585.670670][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 586.488573][T14387] loop8: detected capacity change from 0 to 2048 [ 586.696258][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 587.733553][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 587.790830][T14387] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 587.859223][T14410] __nla_validate_parse: 41 callbacks suppressed [ 587.859267][T14410] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2873'. [ 587.875051][T14410] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2873'. [ 587.917562][T14410] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2873'. [ 587.928346][T14410] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2873'. [ 587.938631][T14410] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2873'. [ 587.948951][T14410] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2873'. [ 587.959396][T14410] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2873'. [ 587.969725][T14410] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2873'. [ 587.979988][T14410] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2873'. [ 587.990516][T14410] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2873'. [ 588.776528][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 589.105916][T14431] device syzkaller0 entered promiscuous mode [ 589.680058][T14444] [ 589.682472][T14444] ====================================================== [ 589.689522][T14444] WARNING: possible circular locking dependency detected [ 589.696590][T14444] syzkaller #0 Not tainted [ 589.701034][T14444] ------------------------------------------------------ [ 589.708090][T14444] syz.7.2887/14444 is trying to acquire lock: [ 589.714191][T14444] ffff888056f5ea28 (&mm->mmap_lock){++++}-{3:3}, at: mmap_read_lock+0x1c/0x50 [ 589.723218][T14444] [ 589.723218][T14444] but task is already holding lock: [ 589.730612][T14444] ffff8880560a3438 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: iterate_dir+0x10d/0x550 [ 589.740404][T14444] [ 589.740404][T14444] which lock already depends on the new lock. [ 589.740404][T14444] [ 589.750838][T14444] [ 589.750838][T14444] the existing dependency chain (in reverse order) is: [ 589.759881][T14444] [ 589.759881][T14444] -> #3 (&type->i_mutex_dir_key#3){++++}-{3:3}: [ 589.768374][T14444] down_read+0x44/0x2e0 [ 589.773122][T14444] lookup_slow+0x46/0x70 [ 589.777997][T14444] walk_component+0x314/0x460 [ 589.783243][T14444] path_lookupat+0x148/0x420 [ 589.788398][T14444] filename_lookup+0x21e/0x550 [ 589.793725][T14444] kern_path+0x37/0x190 [ 589.798435][T14444] lookup_bdev+0xc5/0x280 [ 589.803438][T14444] btrfs_free_stale_devices+0x6d9/0xa60 [ 589.809592][T14444] btrfs_forget_devices+0x52/0x80 [ 589.813929][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 589.815170][T14444] btrfs_control_ioctl+0x10a/0x220 [ 589.827763][T14444] __se_sys_ioctl+0xfa/0x170 [ 589.832902][T14444] do_syscall_64+0x4c/0xa0 [ 589.837876][T14444] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 589.844324][T14444] [ 589.844324][T14444] -> #2 (&fs_devs->device_list_mutex){+.+.}-{3:3}: [ 589.853044][T14444] __mutex_lock_common+0x1e5/0x2400 [ 589.858814][T14444] mutex_lock_nested+0x17/0x20 [ 589.864141][T14444] btrfs_create_pending_block_groups+0x4e7/0xee0 [ 589.871159][T14444] __btrfs_end_transaction+0x154/0x640 [ 589.877214][T14444] flush_space+0x452/0xc90 [ 589.882202][T14444] btrfs_async_reclaim_data_space+0xff/0x430 [ 589.888836][T14444] process_one_work+0x867/0xff0 [ 589.894246][T14444] worker_thread+0xad7/0x12a0 [ 589.899483][T14444] kthread+0x42e/0x520 [ 589.904102][T14444] ret_from_fork+0x1f/0x30 [ 589.909069][T14444] [ 589.909069][T14444] -> #1 (sb_internal#2){.+.+}-{0:0}: [ 589.916574][T14444] start_transaction+0x5e7/0x11f0 [ 589.922153][T14444] btrfs_dirty_inode+0xc5/0x1c0 [ 589.927558][T14444] touch_atime+0x2f8/0x640 [ 589.932577][T14444] btrfs_file_mmap+0xc1/0x120 [ 589.937878][T14444] mmap_file+0x5d/0xb0 [ 589.942573][T14444] mmap_region+0x1048/0x1730 [ 589.947765][T14444] do_mmap+0x801/0xe30 [ 589.952389][T14444] vm_mmap_pgoff+0x1c1/0x2d0 [ 589.957530][T14444] ksys_mmap_pgoff+0x4e2/0x790 [ 589.962855][T14444] do_syscall_64+0x4c/0xa0 [ 589.967823][T14444] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 589.974280][T14444] [ 589.974280][T14444] -> #0 (&mm->mmap_lock){++++}-{3:3}: [ 589.981898][T14444] __lock_acquire+0x2c66/0x7b50 [ 589.987340][T14444] lock_acquire+0x19e/0x400 [ 589.992424][T14444] down_read+0x44/0x2e0 [ 589.997157][T14444] mmap_read_lock+0x1c/0x50 [ 590.002232][T14444] do_user_addr_fault+0xc3f/0xc90 [ 590.007829][T14444] exc_page_fault+0x60/0x100 [ 590.012996][T14444] asm_exc_page_fault+0x22/0x30 [ 590.018418][T14444] filldir64+0x30e/0x6e0 [ 590.023221][T14444] dcache_readdir+0x173/0x7c0 [ 590.028551][T14444] iterate_dir+0x213/0x550 [ 590.033533][T14444] __se_sys_getdents64+0xf2/0x270 [ 590.039123][T14444] do_syscall_64+0x4c/0xa0 [ 590.044101][T14444] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 590.050556][T14444] [ 590.050556][T14444] other info that might help us debug this: [ 590.050556][T14444] [ 590.060814][T14444] Chain exists of: [ 590.060814][T14444] &mm->mmap_lock --> &fs_devs->device_list_mutex --> &type->i_mutex_dir_key#3 [ 590.060814][T14444] [ 590.075696][T14444] Possible unsafe locking scenario: [ 590.075696][T14444] [ 590.083187][T14444] CPU0 CPU1 [ 590.088592][T14444] ---- ---- [ 590.093989][T14444] lock(&type->i_mutex_dir_key#3); [ 590.099236][T14444] lock(&fs_devs->device_list_mutex); [ 590.107257][T14444] lock(&type->i_mutex_dir_key#3); [ 590.115040][T14444] lock(&mm->mmap_lock); [ 590.119415][T14444] [ 590.119415][T14444] *** DEADLOCK *** [ 590.119415][T14444] [ 590.127593][T14444] 2 locks held by syz.7.2887/14444: [ 590.132826][T14444] #0: ffff88805f5db770 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2bf/0x370 [ 590.142131][T14444] #1: ffff8880560a3438 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: iterate_dir+0x10d/0x550 [ 590.152304][T14444] [ 590.152304][T14444] stack backtrace: [ 590.158233][T14444] CPU: 0 PID: 14444 Comm: syz.7.2887 Not tainted syzkaller #0 [ 590.165747][T14444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 590.175946][T14444] Call Trace: [ 590.179461][T14444] [ 590.182425][T14444] dump_stack_lvl+0x188/0x250 [ 590.187149][T14444] ? load_image+0x410/0x410 [ 590.191692][T14444] ? show_regs_print_info+0x20/0x20 [ 590.196936][T14444] ? print_circular_bug+0x12b/0x1a0 [ 590.202178][T14444] check_noncircular+0x296/0x330 [ 590.207157][T14444] ? add_chain_block+0x9b0/0x9b0 [ 590.212132][T14444] ? lockdep_lock+0xf1/0x1f0 [ 590.216762][T14444] ? mark_lock+0x94/0x320 [ 590.221125][T14444] ? _find_first_zero_bit+0xd1/0xf0 [ 590.226394][T14444] __lock_acquire+0x2c66/0x7b50 [ 590.231298][T14444] ? __up_read+0x2b4/0x6b0 [ 590.235755][T14444] ? verify_lock_unused+0x140/0x140 [ 590.241118][T14444] ? up_read+0x20/0x20 [ 590.245233][T14444] ? fput_many+0x155/0x1a0 [ 590.249682][T14444] ? fault_dirty_shared_page+0x282/0x310 [ 590.255361][T14444] lock_acquire+0x19e/0x400 [ 590.259910][T14444] ? mmap_read_lock+0x1c/0x50 [ 590.264732][T14444] ? __might_sleep+0xf0/0xf0 [ 590.269456][T14444] ? mark_lock+0x94/0x320 [ 590.273824][T14444] ? read_lock_is_recursive+0x10/0x10 [ 590.279235][T14444] ? memset+0x1e/0x40 [ 590.283351][T14444] down_read+0x44/0x2e0 [ 590.287538][T14444] ? mmap_read_lock+0x1c/0x50 [ 590.292374][T14444] mmap_read_lock+0x1c/0x50 [ 590.296933][T14444] do_user_addr_fault+0xc3f/0xc90 [ 590.302003][T14444] exc_page_fault+0x60/0x100 [ 590.306640][T14444] asm_exc_page_fault+0x22/0x30 [ 590.311548][T14444] RIP: 0010:filldir64+0x30e/0x6e0 [ 590.316618][T14444] Code: 5a ab ff 4c 01 fd 0f 82 11 02 00 00 48 b8 00 f0 ff ff ff 7f 00 00 48 39 c5 0f 87 fe 01 00 00 0f 01 cb 0f ae e8 48 8b 44 24 60 <49> 89 47 08 48 8b 04 24 48 8b 4c 24 18 48 8b 54 24 58 48 bd 00 00 [ 590.336358][T14444] RSP: 0018:ffffc90003defcb8 EFLAGS: 00050283 [ 590.342459][T14444] RAX: 0000000000000000 RBX: ffffc90003defe70 RCX: ffff888023b03b80 [ 590.350565][T14444] RDX: 0000000000000002 RSI: 0000200000000158 RDI: 00007ffffffff000 [ 590.358855][T14444] RBP: 0000200000000158 R08: 0000000000000902 R09: 0000000000000004 [ 590.366872][T14444] R10: 0000000000000002 R11: 0000000000000002 R12: 0000200000000158 [ 590.374886][T14444] R13: ffffffff8a371680 R14: 0000000000000001 R15: 0000200000000140 [ 590.382907][T14444] ? filldir64+0x2e7/0x6e0 [ 590.387374][T14444] ? filldir+0x700/0x700 [ 590.391659][T14444] dcache_readdir+0x173/0x7c0 [ 590.396380][T14444] iterate_dir+0x213/0x550 [ 590.400834][T14444] ? scan_positives+0x460/0x460 [ 590.405796][T14444] __se_sys_getdents64+0xf2/0x270 [ 590.410867][T14444] ? __x64_sys_getdents64+0x80/0x80 [ 590.416103][T14444] ? filldir+0x700/0x700 [ 590.420393][T14444] ? lockdep_hardirqs_on+0x94/0x140 [ 590.425638][T14444] do_syscall_64+0x4c/0xa0 [ 590.430097][T14444] ? clear_bhb_loop+0x30/0x80 [ 590.435022][T14444] ? clear_bhb_loop+0x30/0x80 [ 590.439738][T14444] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 590.445679][T14444] RIP: 0033:0x7f6e0b5a9e59 [ 590.450122][T14444] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 590.469779][T14444] RSP: 002b:00007f6e09802028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 590.478242][T14444] RAX: ffffffffffffffda RBX: 00007f6e0b831fa0 RCX: 00007f6e0b5a9e59 [ 590.486254][T14444] RDX: 0000000000000020 RSI: 0000200000000140 RDI: 0000000000000003 [ 590.494384][T14444] RBP: 00007f6e0b63fe6f R08: 0000000000000000 R09: 0000000000000000 [ 590.502402][T14444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 590.510408][T14444] R13: 00007f6e0b832038 R14: 00007f6e0b831fa0 R15: 00007ffd213b9288 [ 590.518433][T14444] [ 590.856481][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 591.893605][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 592.936538][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 593.983544][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 595.025663][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 596.053532][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 597.096406][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 598.133641][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 599.175583][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available