last executing test programs:

19m53.351046422s ago: executing program 32 (id=39):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000a80))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000001440)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x58, 0x0, &(0x7f0000000040)=[@decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @dead_binder_done], 0x0, 0x0, 0x0})

19m41.065528329s ago: executing program 33 (id=173):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000000)=0x6, 0x4)

18m42.558074444s ago: executing program 34 (id=941):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x10, 0x16, 0x0, 0x0, 0x5}, 0x94)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r0 = semget$private(0x0, 0x7, 0x191)
semtimedop(r0, &(0x7f0000000200)=[{0x4, 0xffff, 0x2000}, {0x4, 0x3, 0x1800}], 0x2, 0x0)
semop(r0, &(0x7f0000000180)=[{0x2, 0x2, 0x800}], 0x1)
semop(r0, &(0x7f0000000140)=[{0x2, 0xce97, 0x800}, {0x1, 0x5, 0x1000}], 0x2)
semctl$GETZCNT(r0, 0x0, 0xf, 0x0)

17m4.558590428s ago: executing program 35 (id=2063):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x111}}, 0x20)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3)

17m1.192245409s ago: executing program 36 (id=2082):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710439000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)

15m51.394633819s ago: executing program 37 (id=2856):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7)
r1 = fanotify_init(0x200, 0x0)
setuid(0xee01)
fanotify_mark(r1, 0x201, 0x4800003e, r0, 0x0)

14m37.670231205s ago: executing program 38 (id=3717):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000040)=0x38)

14m23.210810245s ago: executing program 8 (id=3882):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000240)='./bus\x00', 0x2008042, &(0x7f0000000040), 0x1, 0x571, &(0x7f0000000780)="$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")
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000))
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

14m23.001914427s ago: executing program 8 (id=3883):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc, 0x6, 0xc934, 0x0, 0x10001, 0x3, 0x0, 0x42b, 0x8001}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x4004010)

14m22.877573693s ago: executing program 8 (id=3884):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000004400000000b0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d10300002c0000000e0a010200000000000000000a0000000900010073797a31000000000900020073797a31"], 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

14m22.830761656s ago: executing program 8 (id=3885):
r0 = socket$packet(0x11, 0x3, 0x300)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'xfrm0\x00', <r2=>0x0})
setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000000)=0x5, 0x4)
sendto$packet(r0, &(0x7f0000000080)='3', 0x1, 0x40008c1, &(0x7f00000000c0)={0x11, 0x86dd, r2, 0x1, 0x62}, 0x14)

14m22.753826111s ago: executing program 8 (id=3886):
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000180)=0x5)
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
syz_mount_image$udf(&(0x7f0000000a40), &(0x7f0000000100)='./file0\x00', 0x2004400, &(0x7f0000000740)=ANY=[@ANYBLOB="73686f72746164001000006d653d30303030303030303030303030303030307569643d0000400000000000000000000000003de0ec1508bb8f2a1f1601aeda124934677b06979d48833908fd570738d3bc9113d9cfebb48ddfc76262e6004074f35fa54feb05ddada3ec41f71771ca8d8fe742dd535804de31a8bcc767ae7225d5f67397c04e605a3a512f705d72dc3f91243cef3c65a89a9429490dc4c312fa3190068268e99a0c3ffd411f5945c70e93ebf0b31d06ac5fc6", @ANYBLOB="a85f0dc3446ae0c36ba4848c770920cd9addace5c10dee3a96f810395203ae3bd777155e0b6764a2fd6da6853696460e4dc9849661ef1979cffa16b5bf59dabf336f10c3c559e5e6957f06f8cc8dc9d87dce1e2fe00f1a9e839df7923f50ee737985bd9b461e751d8f2be497d8651d589f890f61b87b83f3c7ad3ba191fa8e9a0ea1b14157305d0891f22ea0bbafcc5044e7177fcb08366d582b977b1847305408f72d19577993c4f746315483175fd218fe2194c2e6c97f561184a4f7c739d2ae93ba3016354f0d2ed26e6b810ebbbd0d1f93e7251bd3b5ed60ea3c840a2bbe7fc0", @ANYRES32], 0x1, 0xa1b, &(0x7f0000001540)="$eJzs209sm+d9B/Dfw1dyaKdrFbdzkzbLWLQIMqUN5P9KvAH2rApt5iZGZWXzZTBlyQ4RiVIluXC6ofWwAUWAHowC62EDhlx2GLCDd9hlp2CHYcCwwdhhKFa009I1S28sNiCnTcP78qFEyXKsxbElO5+PYX/Jl7+XfP7Q5Es+fAMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAiPjNL58aOZh2uhUAwP300sTXRw57/weAj5RzPv8DAAAAAAAAAAAAAMBul6KIP40Ur/64ky5U17vqZ1rtK1cnx8a33m1vihS1KKr68m/94KHDR44eOz7ay/ff/8P2RLw8ce5U4/T83MLizNLSzHRjst26OD89s+17uNv9NxuuBqAx99qV6UuXlhqHnju84earQ+888uiBoRPHXzy/v1c7OTY+PtFXMzD4gR/9Frc7w2NPFPHTSFH/7rupGRG1uPuxuMNz517bW3ViuOrE5Nh41ZHZVrO9XN6YarmqFjHUt9PJ3hjdh7m4K42Ia2XzywYPl92bWGguNqdmZxpnm4vLreXWfDvVuq0t+zMUtRhNEQsR0SluvbvBKOLfIsX33uukqYgoeuPwbHVi8J3bU7sHfdyGgbJvRcTNeADmbBd7JIp4I1J8//xIXMzjWg3b0xFfK/OpiG+UuRJxPV9P5RPkyYhfbPF84sEyEEX8Y6SYT5003Zv76nXlzCuNr7YvzffV9l5XHvj3h/tpl7821aOIqeoVv5M++MEOAAAAAAC7TxF/EyluzD2TFqJ/TbHVvtw415ya7X4r3Pvuv5H3Wl1dXR1K3WzkHMl5MufZnBdyLuS8lvN6zjdz3sj5Vs6bOVdydnJGLT9+zkbOkZwnc57NeSHnQs5rOa/nfDPnjZxv5byZcyVnJ2dY9wIAAAAAAABgl9kbRfwoUnz+r79ZnVcc1Xnpnzgx+sxXvtB/zvin73A/Ze1zEXEjtndO7mA+dTjVyj8ffr/YnnoU8e18/t8f7HRjAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAHVWLIj4dKX7wRidFiohGxIXo5kqx060DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPoh6KuJ0pPj5l+vV9ZsR8ZmI+N/V8k9ErKxustMtBgAAAAAAAABukYoYiRSPPdFJQxFxdeidRx49MHTi+Ivn9xdRRCpL+utfnjh3qnF6fm5hcWZpaWa6MdluXZyfntnuw9XPtNpXrk6Ojd+TztzR3nvc/r310/MLry+2Lr+6vOXt++qnppaWF5sXt7459kYtYqR/y3DV4Mmx8arRs61mu9o11W7TwFpEY7udAQAAAAAAAOChsS8VcTRSvNo6knrrxgPdNf9f6l4r1mr//PfXfwswuyl7+n8/sJ3LabsNHa4W3huTY+PjE32bBwZvLS3blFIRfxUpPvs7j1fr4Sn2bbk2XtbtiRTHvnkk1w19tqw7uaGqPjw5Nt54ab79pVOzs/MXm8vNqdmZxsRC8+K2fzgAAAAAAAAAAPfQvlTEn0WK3x25mXrnnef1/4Hutb71/1+vltAr9bQx11Rr+x+v1va7lz9xYrQx/qu3234v1v/LNqVUxL9Gisd+7/HqfPre+v/Iptqy7r8ixb/8w5O5rranrDvY6073Hi+1ZmdGUh6rzz3bq42q9niu/eR67cGy9nOR4i+e3lg7mms/tV57qKz9o0jxP0e3rv3l9drDZe0fRorfervRq91X1p7JtQfWa5+7OD87fadhLef/byPF2Z9/JfX6fNv57/v9x7VNueaWOX//yx/W/A/1bbuW5/VHef4P3mH+/y5S/PFPnsx13bE/lG9/rPp3ff5/O1L8569srD2Wa/ev1x7cbrd2Wjn/X4wUJ374w7U+5/nPI7s+Q/3z/5mBjbn2LNmh+X+sb9tQbtfh/+dYfBQtvf6t15qzszOLLrjgggtrF3b6lYn7oXz//6dI8cKZWuodx+T3/491r60f/7337fX3/xc25Zodev/f37fthXzUMjgQUV+eWxg8EFFfev1bX2rNNS/PXJ5pjx47euT50WPHnh/c0zu2W7+07aF7KJTzfyZSvPKTf177HLPx+G/r4/99m3LNDs3/J/v7tOG4ZttD8ZFUzv/1SPGdt99d+7z5fsf/vc//z3x+Y679/9uh+f9U37bqN/4fj3i+b9ueiDi13ccCAACAh8y+vE7+J7/292vnvG/8/B9f6NX2f/9zO7vh/H8AAAAAAPio25eK+MtI8d8jX0y9c8i28/vP6U25Zod+/3egb9v0fTqvZduDDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwC6Uo4qlI8eqPO2mlKK931c+02leuTo6Nb73b3hQpalFU9eXf+sFDh48cPXZ8tJfvv/+H7Yl4eeLcqcbp+bmFxZmlpZnpxmS7dXF+embb93C3+282XA1AY+61K9OXLi01Dj13eMPNV4feeeTRA0Mnjr94fn+vdnJsfHyir2Zg8AM/+i3SbbbviSIuRYr6d99N/15E1OLux+IOz517bW/VieGqE5Nj41VHZlvN9nJ5Y6rlqlrEUN9OJ3tjdB/m4q40Iq6VzS8bPFx2b2Khudicmp1pnG0uLreWW/PtVOu2tuzPUNRiNEUsRESnuPXuBqOIqUjxvfc66e0iouiNw7MvTXx95PCd21O7B33st/qdLTcPlH0rIm7GAzBnu9gjUcTHIsX3z4/ET4vuuFbD9nTE18p8KuIbZa5EXM/XU/kEeTLiF1s8n3iwDEQRZyPFfOqk/yjy3FevK2deaXy1fWm+r7b3uvLAvz/cT7v8takeRfysesXvpJ/5/wwAAAAA8BAp4jcixY25Z1K1Pri2pthqX26ca07Ndr/W733338h7ra6urg6lbjZyjuQ8mfNszgs5F3Jey3k955s5b+R8K+fNnCs5Ozmjlh8/ZyPnSM6TOc/mvJBzIee1nNdzvpnzRs63ct7MuZKzkzN8Tw4AAAAAAADsQrUo4vFI8YM3Omm16C7wXohurljnfOj9XwAAAP//dBg+9w==")
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180))

14m21.901096496s ago: executing program 8 (id=3890):
r0 = socket$phonet(0x23, 0x2, 0x1)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'hsr0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x503, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf115}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x8}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x5c}}, 0x0)

14m6.609977379s ago: executing program 39 (id=3890):
r0 = socket$phonet(0x23, 0x2, 0x1)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'hsr0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x503, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf115}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x8}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x5c}}, 0x0)

12m40.264081816s ago: executing program 1 (id=5323):
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x20044080, &(0x7f0000000200)={0x11, 0x2, 0x0, 0x1, 0xfe, 0x6, @random="7483ccb17b06"}, 0x14)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x83, &(0x7f0000000140), &(0x7f0000000100)=0x10)

12m40.263724342s ago: executing program 1 (id=5324):
r0 = socket$alg(0x26, 0x5, 0x0)
getsockopt$sock_int(r0, 0x1, 0x10, 0x0, &(0x7f0000000140))

12m40.10452256s ago: executing program 1 (id=5328):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=@newtaction={0x48, 0x31, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x34, 0x1, [@m_mirred={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4, 0xa}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008001}, 0x0)

12m39.978137658s ago: executing program 1 (id=5330):
syz_mount_image$minix(&(0x7f0000000680), &(0x7f00000001c0)='./bus\x00', 0x1804002, &(0x7f0000000080)=ANY=[@ANYRES8=0x0, @ANYRESHEX=0x0, @ANYRES16, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYBLOB="8e7bf099b50610f9b90386fcad5cf65dc7e4309c76698d025637fd42cd2c1d9378e6212cfe715e5d3f5cfa60dad844a8ad9992f586604853e9352ec7277d8514b9150dcef6"], 0x1, 0x1af, &(0x7f0000000480)="$eJzs20+u0lAUx/FfCxTFP/h34oSBJjqRgiZWZ7IUAgUJRYk4gZgYF+Ai3IE7cgOQ6AassWClFaTIa/t4fD8J6b1tD/cUuJfTQQXgZN2QZMhQSZLv+x9ePTBVyzspAJnw9cMHcKr07a9d5WUxAOBiW7QKQR0wlvT1+/vOfPUqhRVC4Z/1w6JlBtuXkuZr8VbC+mPx0Qi294rR+F9L0KUk9cvnZfzD2PiX9xy/EouvJI5fXv+j+9H4K5KuSrom6bqk6upe66akWxvG78bGvxueYSbMBNifoXq8H9lhqjfw3EbYLwX95tr5UVZw/GnYLwf9eueN1z375AEcxNwx/wux+V+MzX8Ax2synQ3bnue+3dz4sv1Qxg1zV6o08m1Yu35RtSzz+V2X5v6xpNsYHfo+5Y3flzVse9tWjGI2CxOA1NnvRmN7Mp09Hozafbfvvn7ivHCc5vPmM8cOKn+7N5AaeacJIAV//vSTx/jVNDMCAAAAAAAAAAAAAAD7ui3pzn/E+fEHfwAAAACce1k8qBQO9inXSwUAAAAAAAAAAAAAAAAAAACO3s8AAAD//7UkQ7A=")
open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x100000000001, 0x8005, 0x0, 0x0, 0x19, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f283e6d60200000000000000000000000100", [0x208, 0xfffffffffffffffc]})
setxattr$security_ima(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x0)

12m39.747549699s ago: executing program 1 (id=5336):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000140)=@generic={0x1, 0xfffffffffffffffe})

12m39.199528082s ago: executing program 1 (id=5344):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req={0x4, 0x9, 0x5, 0x5f2bd3d0}, 0x10)

12m38.980816101s ago: executing program 40 (id=5344):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req={0x4, 0x9, 0x5, 0x5f2bd3d0}, 0x10)

12m31.736603473s ago: executing program 0 (id=5379):
r0 = socket$inet(0x2, 0x2, 0x1)
shutdown(r0, 0x0)
recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0)

12m31.675403806s ago: executing program 0 (id=5381):
r0 = syz_mount_image$nilfs2(&(0x7f00000008c0), &(0x7f0000000e00)='./file0\x00', 0x10000, &(0x7f0000000940)=ANY=[], 0x0, 0xdab, &(0x7f0000000e80)="$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")
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x40106e80, &(0x7f0000000480)={@desc={0x1, 0x0, @auto="00000000000100"}})

12m31.378570889s ago: executing program 0 (id=5384):
r0 = fsopen(&(0x7f00000000c0)='sysfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x1)
unshare(0x24020400)
writev(r1, 0x0, 0x0)

12m31.249545945s ago: executing program 0 (id=5385):
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000480)={[{@test_dummy_encryption}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@stripe={'stripe', 0x3d, 0x7}}, {@commit={'commit', 0x3d, 0x5}}, {@orlov}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@quota}]}, 0xd, 0x5ed, &(0x7f0000000600)="$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")
syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x104880, 0x0, 0x1, 0x0, &(0x7f0000000200))
chdir(&(0x7f00000003c0)='./bus\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000400)='./file1\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
creat(&(0x7f0000000440)='./file0/file0\x00', 0x188)
chdir(&(0x7f0000000140)='./bus\x00')
lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r4 = socket(0x2a, 0x2, 0xfffffffc)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x2f, 0x0, 0x80, 0x0, 0xc, @ipv4={'\x00', '\xff\xff', @loopback}, @loopback, 0x10, 0x0, 0x27, 0xfffffffd}})
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000005c0)={'ip_vti0\x00', 0x0})

12m30.012187846s ago: executing program 0 (id=5392):
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f00000004c0)='./file0\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0xfd, 0x1bf, &(0x7f0000000300)="$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")
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000100)="8000102e", 0x3}], 0x1}}], 0x1, 0x4c0c0)
mount$nfs(&(0x7f0000000100)='.5.', 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff)

12m29.028006808s ago: executing program 0 (id=5393):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xb, 0x7, 0x2, 0xff22, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x7, &(0x7f0000000380)=@framed={{0x18, 0x2}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xd3}}]}, &(0x7f00000005c0)='GPL\x00'}, 0x90)

12m28.535625429s ago: executing program 41 (id=5393):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xb, 0x7, 0x2, 0xff22, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x7, &(0x7f0000000380)=@framed={{0x18, 0x2}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xd3}}]}, &(0x7f00000005c0)='GPL\x00'}, 0x90)

9m32.768002518s ago: executing program 4 (id=7876):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000200)=ANY=[], 0x8)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10)
sendto$inet6(r0, &(0x7f0000000140)="8369b66f", 0x18, 0x0, 0x0, 0x0)

9m32.760565553s ago: executing program 4 (id=7878):
syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="1201000038ff4f40d3131932677a010203010902120001000000000904ab01"], 0x0)

9m31.457276676s ago: executing program 4 (id=7905):
r0 = syz_open_procfs(0x0, &(0x7f0000000780)='net/softnet_stat\x00')
read$FUSE(r0, &(0x7f00000042c0)={0x2020}, 0x2020)
pread64(r0, &(0x7f0000000180)=""/246, 0xf6, 0x20d5)

9m31.362922705s ago: executing program 4 (id=7908):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@noinit_itable}, {@dax_inode}, {@nolazytime}, {@abort}, {@dax_inode}, {@lazytime}, {@noload}, {}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$eJzs3U1rG0cfAPD/ynbenOeJAyG0PRRDDk1JI8d2X1LoIT2WNjTQ3lNhb0ywHAVLDrEbaHJoLr2UUCilgdIP0HuPoV+gnyLQBkIJpj30orLyylFsyZZtpVaq3w82mdldaXY0+x/PaCQUwMAaz/4pRLwcEV8nEcdajg1HfnB87bzVJ7dmsi2Jev2TP5JI8n3N85P8/9E881JE/PJlxJnC5nKryyvzpXI5XczzE7WF6xPV5ZWzVxdKc+lcem1qevr8W9NT777zds/q+vqlv777+MEH5786tfrtT4+O30viQhzNj7XWYw9ut2bGYzx/TUbiwoYTJ3tQWD9J9vsC2JWhPM5HIusDjsVQHvXAf98XEVEHBlQi/mFANccBzbl9j+bBL4zH769NgDbXf3jtvZE41JgbHVlNnpkZZfPdsR6Un5Xx8+/372Vb9O59CIBt3b4TEeeGhzf3f0ne/+3euS7O2VjGDvu/+g4vCWjxIBv/vNFu/FNYH/9Em/HPaJvY3Y3t47/wqAfFdJSN/95rO/5dX7QaG8pz/2uM+UaSK1fLada3/T8iTsfIwSy/1XrO+dWHHfup1vFftmXlN8eC+XU8Gj747GNmS7XSXurc6vGdiFfajn+T9fZP2rR/9npc6rKMk+n9Vzsd277+z1f9x4jX2rb/0xWtZOv1yYnG/TDRvCs2+/PuyV87lb/f9c/a/8jW9R9LWtdrqzsv44dDf6edju32/j+QfNpIH8j33SzVaouTEQeSjzbvn3r62Ga+eX5W/9Ontu7/2t3/hyPisy7rf/fE3Y6n9kP7z+6o/XeeePjh5993Kr+79n+zkTqd7+mm/+v2Avfy2gEAAAAAAEC/KUTE0UgKxfV0oVAsrn2+40QcKZQr1dqZK5Wla7PR+K7sWIwUmivdoy2fh5jMPw/bzE9tyE9HxPGI+GbocCNfnKmUZ/e78gAAAAAAAAAAAAAAAAAAANAnRjt8/z/z29B+Xx3w3PnJbxhc28Z/L37pCehL/v7D4BL/MLjEPwwu8Q+DS/zD4BL/MLjEPwwu8Q8AAAAAAAAAAAAAAAAAAAAAAAAAAAA9denixWyrrz65NZPlZ28sL81XbpydTavzxYWlmeJMZfF6ca5SmSunxZnKwnbPV65Urk9OxdLNiVparU1Ul1cuL1SWrtUuX10ozaWX05F/pVYAAAAAAAAAAAAAAAAAAADwYqkur8yXyuV0UUJiV4nh/rgMibVEM7D3/IT72y8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQKt/AgAA//+jgjYy")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0)
r1 = fanotify_init(0x200, 0x0)
fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0)
mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c})

9m31.20447171s ago: executing program 4 (id=7910):
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
pipe2(&(0x7f0000000040), 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
socket(0x10, 0x3, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
syz_emit_vhci(&(0x7f0000001fc0)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x6, 0xc9}}}, 0x7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4)
recvmmsg(r1, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)=""/70, 0x46}], 0x1}}, {{0x0, 0x0, 0x0}, 0xc9a}], 0x2, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00'})

9m30.97420318s ago: executing program 4 (id=7916):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000040)={0x3, 0x0, 0xfffffffc, 0x0, 0x7ffffefe})

9m30.822242819s ago: executing program 42 (id=7916):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000040)={0x3, 0x0, 0xfffffffc, 0x0, 0x7ffffefe})

8m34.164742811s ago: executing program 5 (id=8782):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='debugfs\x00', 0x0, 0x0)
r0 = inotify_init1(0x0)
inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0x60004ce)
syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x80}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x81, 0x8}}}}}}}]}}, 0x0)

8m32.893087654s ago: executing program 5 (id=8802):
syz_emit_ethernet(0x92, &(0x7f0000000440)={@local, @random, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xd}, {[@lsrr={0x83, 0x7, 0xd7, [@multicast2]}, @timestamp={0x44, 0xc, 0x5, 0x3, 0x0, [0x7, 0x0]}, @cipso={0x86, 0x6}]}}, {{0x200, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0)

8m32.829075287s ago: executing program 5 (id=8804):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3100}, [@RTA_MARK={0x8}, @RTA_UID={0x8}]}, 0x2c}}, 0x0)

8m32.731863349s ago: executing program 5 (id=8805):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000180)={[{@min_batch_time={'min_batch_time', 0x3d, 0x83}}, {@init_itable}, {@mblk_io_submit}]}, 0x3, 0x470, &(0x7f0000001240)="$eJzs3MtvG1UXAPAzkzj98qUloZRXyyNQEBWPpGkLdMECEEgsioQEC1haSVqVpi1qjESrSKQsygohJPaIJf8CK9ggxAqJLexRpQp1Q8vKaOyZxHZsp2nsuMW/n+T23Hn43uOZa9+ZayeAoTWd/ZNE7I6I3yNisl5s3mC6/t+N6yvzN6+vzCdRrb77V1Lb7u/rK/PFpsV+E42FSOJAm3qXL146U15aWryQl2crZz+aXb546YXTZ8unFk8tnjty/Pixo3Mvv3TkxZ7kORFpHr31wVdvn/iiKf+WPHpkutvKp6vVHlc3WHsa4tEBtoOtGcmPV6nW/ydjpOHoTcabn60VPh1QA4G+qVar1YnOq1erwH9YEs1lXR6GRfFBX1z/trsOfrVvo4/Bu/Za/QIoy/tG/qivGV27Y1Bqub7tpemIeH/1n2+yR/TnPgQAQJMfsvHP89loZ2U+G3usjz/SeKBhu3vyuaGpiLg3IvZGxH1xLvZFxP0RtW0fjIiHtlh/6yTJxvFPevW2ErtF2fjvlXxuq3n8V4z+YmokL+2p5V9KTp5eWjycvyaHorQrK891qePHN377stO6xvFf9sjqL8aCeTuuju5q3mehXClvJ+dG1y5H7B9tl3+yNhOQRMTDEbG/3ROkm9dx+tnvHum0bvP8u+jBRFP124hn6sd/NVryLyTd5ydn/xdLi4dni7Nio19+vfJOp/q3lX8PZMf//23P/7X8p5LG+drlrddx5Y/PO17TTJfyYAvn/2q5Uh5L3qvFY/myT8qVyoW5iLHkRL3RjcuPrO9blIvts/wPHWzf//fG+itxICKyk/jRiHgsIh7Pj90TEfFkRBzskv/Prz/1Yeuy8SL/O+D4L2zp+K8HY9G6pH0wcuan75sqnVoP8/xvdn//O1aLDuVLbuX971badXtnMwAAANx90ojYHUk6sxan6cxM/Tv8+yLSpfPLledOnv/43EL9NwJTUUqLO12TDfdD5/LL+nr5ckTUv1pQrD8aae2+8dcj47XyzPz5pYVBJw9DbqJD/8/8OTLo1gF95wdbMLz0fxheXft/aefaAey8Df2/a5/f1de2ADurzef/+CDaAey8duN/f+8HhkNL/zftB0PE/X8YXvo/DC/9H4bS8nhs/iP5rkHxTLe5+2bBZMR2WziYIEp3RDP6FkTa9yrG+ntq9S1I7sI2bwgG954EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQS/8GAAD//3hZ0MA=")
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2081413, 0x0, 0x1, 0x0, &(0x7f0000000080))
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x10000, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0)

8m32.482129036s ago: executing program 5 (id=8811):
r0 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000100)={'fscrypt:', @desc4}, &(0x7f0000000140)={0x0, "c2dd5d4fb5e5f1c9ca1a962a1e33d739b441cfc616fcc649c82437d31ad53a8c0d77207bf5cf3a6789d44f9a8e70d671dc42fb06138e67c34b316a6916c7b44c", 0x18}, 0x48, 0xfffffffffffffffe)
request_key(&(0x7f00000022c0)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000100)='\x00', r0)

8m32.122594673s ago: executing program 5 (id=8823):
syz_usb_connect(0x0, 0x1a2, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b6a57e4086805b0bc5e1010203010902900102000000000904"], 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0)
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
r1 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc)
setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101"], 0x57)
setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc)

8m31.942338568s ago: executing program 43 (id=8823):
syz_usb_connect(0x0, 0x1a2, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b6a57e4086805b0bc5e1010203010902900102000000000904"], 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0)
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
r1 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc)
setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101"], 0x57)
setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc)

2m14.981946625s ago: executing program 2 (id=15456):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000880)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x473}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x9}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8}, 0x0)

2m14.886861011s ago: executing program 2 (id=15457):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%(:2', 0x0)

2m14.886552141s ago: executing program 2 (id=15459):
r0 = socket$netlink(0x10, 0x3, 0x9)
ppoll(&(0x7f0000000100)=[{r0, 0x4000}, {r0, 0x2}], 0x2, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={{0x14, 0x3ec, 0x1, 0x0, 0xfff0}, [], {0x14, 0x3e8, 0x1, 0x0, 0x0, {0xa}}}, 0x28}, 0x1, 0x0, 0x0, 0x200000e5}, 0x10)

2m13.979098459s ago: executing program 2 (id=15478):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x25, 0x55a8, &(0x7f00000014c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8})
statx(0xffffffffffffff9c, 0x0, 0x1000, 0x114cb8255d191d04, &(0x7f0000002500))

2m13.548569936s ago: executing program 2 (id=15489):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000001900010000000000000000001d0109004d000f80b6aa883c187282c63edaa1b302338fad461472d9973f4b9006980268bcd4d2c4f146ba798bb88410e2247554e77adbc729a361e05fb3477db89e064fa08f0bc31e9d7cb387e35f346f"], 0x64}}, 0x0)

2m13.230560757s ago: executing program 2 (id=15494):
syz_usb_connect(0x3, 0x1c, 0x0, 0x0)
r0 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x2, {0x3}}, 0x18)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r0)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x14, r2, 0x800, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x10)

2m13.134546526s ago: executing program 44 (id=15494):
syz_usb_connect(0x3, 0x1c, 0x0, 0x0)
r0 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x2, {0x3}}, 0x18)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r0)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x14, r2, 0x800, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x10)

1m14.55802495s ago: executing program 7 (id=16235):
r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000080)="01", 0x1, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000140), &(0x7f0000002840)={'syz', 0x0}, &(0x7f0000000180)="f40fc24077021c9b084c60ffc26f26db12b9e78d629870bb26edb4a5e1cc0942ed8c58ca4fe84b94a0e31ea64089ee9ca1efb52945ffebbfea11dd3d0df936a10285eccab940ab5c96cb5d81dac1ad2243d878dde6cfd6ea08d5abcb00bb35436929ddabce530b63fab525337057438cf64a506d54d5c83e3e593d1d53ad0e6a44168fe8cfc6ad98b653d80636e4ddc1f2ab58762b3494250b9557f5b606a43e50874c90143034142cd5f7bd9b4dd876b97b7feb75b9138dde818a3c6b96dd80", 0xc0, 0xfffffffffffffffb)
keyctl$dh_compute(0x17, &(0x7f0000001340)={r1, r1, r0}, &(0x7f0000001380)=""/4108, 0x100c, 0x0)

1m14.483005163s ago: executing program 7 (id=16236):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe7, 0xcc, 0x61, 0x20, 0x10c4, 0x818a, 0x7d8f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0xc0, 0x5, [{{0x9, 0x4, 0x23, 0x0, 0x0, 0x3}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000dc0)={0x44, &(0x7f0000000bc0)=ANY=[@ANYBLOB="001503"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

1m11.255183018s ago: executing program 7 (id=16273):
futex(&(0x7f0000004000)=0x8, 0x4, 0x2, 0x0, &(0x7f0000004000)=0xfffffffe, 0x2)

1m11.254988282s ago: executing program 7 (id=16274):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x8)

1m11.254663746s ago: executing program 7 (id=16275):
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000800)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2040d0, &(0x7f0000000c40)={[{@jqfmt_vfsv0}, {@nojournal_checksum}, {@barrier}, {@barrier}, {@test_dummy_encryption}, {@nomblk_io_submit}]}, 0xff, 0x4ab, &(0x7f0000000080)="$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")
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000500)=@ready={0x0, 0x0, 0x8, "72918f72", {0x1, 0x1, 0x1000, 0x2, 0x5}})
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x20, &(0x7f0000000100)=ANY=[@ANYBLOB="0c00004e1560254722cb66187f3b68d00c08004e15"])

1m10.975697941s ago: executing program 7 (id=16281):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000100001005d790000000000000500000a60000000060a0b0400000000000000000200000234000480300001800b00010074617267657400002000028008000240000000030800030002b511120c0001004e465155455545000900010073797a30000000000900020073797a32"], 0x88}}, 0x0)

1m10.824594187s ago: executing program 45 (id=16281):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000100001005d790000000000000500000a60000000060a0b0400000000000000000200000234000480300001800b00010074617267657400002000028008000240000000030800030002b511120c0001004e465155455545000900010073797a30000000000900020073797a32"], 0x88}}, 0x0)

1.742843387s ago: executing program 3 (id=17283):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x4000, &(0x7f0000000380)={[{@coherency_buffered}, {@heartbeat_none}, {@coherency_full}, {@err_cont}, {@data_writeback}, {@localflocks}, {@localflocks}, {@data_ordered}]}, 0x89, 0x4430, &(0x7f00000088c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x101442, 0x0)
pwrite64(r0, &(0x7f0000000140)="16eb", 0x2, 0x3)
ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000000)={0x0, 0x1, 0x8, 0x9})

1.464388712s ago: executing program 3 (id=17284):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x3}, {0x0, 0xffff}}}, 0x24}}, 0x0)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

1.464181596s ago: executing program 3 (id=17285):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [<r2=>0x0]}, &(0x7f0000000240)=0x8)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000100)={r2, 0x7}, &(0x7f0000000140)=0x8)

895.756455ms ago: executing program 6 (id=17286):
syz_mount_image$btrfs(&(0x7f0000000100), &(0x7f0000005140)='./file0\x00', 0x0, &(0x7f0000000200)={[{@compress}]}, 0x1, 0x50ed, &(0x7f0000005180)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000000)='./file1\x00', 0x1000801, &(0x7f0000001640)=ANY=[], 0x2, 0x218, &(0x7f00000001c0)="$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")
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0x40789440, &(0x7f00000001c0)={"00d0500000000009e51511194d2e45df", 0x0, 0x0, {}, {0x3}})

619.506416ms ago: executing program 9 (id=17289):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10)
syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @inquiry_info={{0x2, 0xf}, {0x1, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xb, 0x0, 0x5, "8d98c3", 0x8}]}}}, 0x12)
syz_io_uring_submit(0x0, 0x0, 0x0)

553.809492ms ago: executing program 9 (id=17290):
r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
pipe2$watch_queue(&(0x7f0000000540)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
ioctl$IOC_WATCH_QUEUE_SET_FILTER(r1, 0x5761, &(0x7f0000000840)=ANY=[@ANYBLOB="06"])
keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x40)
add_key$keyring(&(0x7f0000000300), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r0)

553.466454ms ago: executing program 3 (id=17291):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000040)='sys_enter\x00', r0}, 0x18)
chmod(0x0, 0x0)

475.524312ms ago: executing program 9 (id=17292):
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg(r1, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0xd64}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r0, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0)

468.794636ms ago: executing program 6 (id=17293):
syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_AUTH_ENABLE={{0x1}, 0x8}}}, 0x7)

348.303757ms ago: executing program 9 (id=17294):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x34, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0xfffd}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x1}]}]}, 0x34}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4)

348.121936ms ago: executing program 3 (id=17295):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0xa0000)
ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f)
ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e)

255.050468ms ago: executing program 6 (id=17296):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0)
r4 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0xd8000)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x50, 0x0, &(0x7f0000000740)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @free_buffer={0x40086303, r4}], 0x0, 0x0, 0x0})

191.274492ms ago: executing program 9 (id=17297):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x80)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]})
linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000)
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x2014000, &(0x7f0000000100)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c6368650900000000000000742c73686f72746e616d653d77696e6e742c73686f72746e616d653d77696e39352c636f6465706167653d3935302c726f6469722c616c6c6f775f7574696d653d30303030303030303030303030303030303137373737372c73686f72746e616d653d6d697865642c73686f72746e616d653d6c6f7765722c696f636861727365743d00000000000080016f72746e616d653d6d69587b642c757466383d302c00"], 0x23, 0x34c, &(0x7f0000001740)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f00000063c0)=""/1024, 0x400)
getdents64(r0, 0x0, 0x0)

191.030627ms ago: executing program 3 (id=17298):
socket$packet(0x11, 0x2, 0x300)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0xffffffffffffffff)
sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c)
socket(0x28, 0x5, 0x0)
socket(0x28, 0x5, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
pselect6(0x40, &(0x7f00000001c0)={0x1, 0x9a8, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000000)={0x3ff, 0xfffffffffffffffe, 0x0, 0xa, 0x2, 0x1, 0x7fffffff}, 0x0, 0x0)

190.527828ms ago: executing program 6 (id=17299):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000480), r0)
sendmsg$NFC_CMD_LLC_SET_PARAMS(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x14, r1, 0x101}, 0x14}}, 0x0)

91.095816ms ago: executing program 9 (id=17300):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x25, 0x55a8, &(0x7f00000014c0)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
lsetxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x1)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

90.826896ms ago: executing program 6 (id=17301):
write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000100)=@other={'decodes', ' ', 'io+mem'}, 0xf)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc)
futimesat(0xffffffffffffffff, 0x0, &(0x7f0000000100)={{0x0, 0x2710}, {0x77359400}})

0s ago: executing program 6 (id=17302):
rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0)
prlimit64(0x0, 0x9, &(0x7f0000000000)={0xfffffffffffffffb, 0xfffffffffffffffb}, 0x0)
brk(0x689d80000000)

kernel console output (not intermixed with test programs):

lid length.
[  893.007966][  T715] netlink: 'syz.3.11099': attribute type 5 has an invalid length.
[  893.120396][  T721] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  893.217955][  T727] tipc: Cannot configure node identity twice
[  893.770887][  T753] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  894.568288][  T775] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11123'.
[  894.571307][  T775] netlink: 32 bytes leftover after parsing attributes in process `syz.3.11123'.
[  894.794918][  T796] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  894.845999][  T800] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11133'.
[  894.862375][  T800] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11133'.
[  895.545322][  T827] netlink: 'syz.2.11144': attribute type 21 has an invalid length.
[  895.548930][  T827] IPv6: NLM_F_CREATE should be specified when creating new route
[  896.045947][  T833] tipc: Invalid UDP bearer configuration
[  896.045991][  T833] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  897.933418][  T923] overlayfs: failed to clone upperpath
[  898.058976][  T943] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  898.233799][  T956] sock: sock_timestamping_bind_phc: sock not bind to device
[  898.587202][  T965] netlink: 4 bytes leftover after parsing attributes in process `syz.9.11200'.
[  900.232307][ T1000] lo speed is unknown, defaulting to 1000
[  901.201204][  T791] libceph: connect (1)[c::]:6789 error -101
[  901.203951][  T791] libceph: mon0 (1)[c::]:6789 connect error
[  901.246233][  T791] libceph: connect (1)[c::]:6789 error -101
[  901.248728][  T791] libceph: mon0 (1)[c::]:6789 connect error
[  901.490313][  T791] libceph: connect (1)[c::]:6789 error -101
[  901.493164][  T791] libceph: mon0 (1)[c::]:6789 connect error
[  901.532965][  T791] libceph: connect (1)[c::]:6789 error -101
[  901.535594][  T791] libceph: mon0 (1)[c::]:6789 connect error
[  902.025318][ T1049] netlink: 'syz.2.11227': attribute type 32 has an invalid length.
[  902.215304][ T1026] ceph: No mds server is up or the cluster is laggy
[  902.215655][ T1030] ceph: No mds server is up or the cluster is laggy
[  902.292559][  T791] libceph: connect (1)[c::]:6789 error -101
[  902.295263][  T791] libceph: mon0 (1)[c::]:6789 connect error
[  902.298364][  T791] libceph: connect (1)[c::]:6789 error -101
[  902.301005][  T791] libceph: mon0 (1)[c::]:6789 connect error
[  902.463872][ T1056] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  902.473842][ T1056] team0: Device ipvlan2 is already an upper device of the team interface
[  902.658281][ T1075] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11235'.
[  903.691514][ T1151] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11267'.
[  903.694732][ T1151] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11267'.
[  903.697807][ T1151] netlink: 'syz.3.11267': attribute type 5 has an invalid length.
[  904.043695][ T1163] overlayfs: failed to clone upperpath
[  904.451083][T15672] Bluetooth: hci1: unexpected subevent 0x0e length: 30 > 15
[  904.453890][T15672] Bluetooth: hci1: Unable to find connection for dst 00:00:00:00:00:20 sid 0x00
[  905.467841][ T1230] bridge5: entered promiscuous mode
[  905.470268][ T1230] bridge5: entered allmulticast mode
[  905.746057][ T1257] netlink: 4 bytes leftover after parsing attributes in process `syz.9.11317'.
[  905.749182][ T1257] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  905.753266][ T1257] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  906.099900][ T1271] MTD: Couldn't look up '/dev/nullb0': -15
[  906.101934][ T1271] /dev/nullb0: Can't lookup blockdev
[  906.221844][ T1275] netlink: 'syz.9.11325': attribute type 3 has an invalid length.
[  909.740520][ T1408] overlayfs: failed to clone upperpath
[  912.027701][   T33] kauditd_printk_skb: 34 callbacks suppressed
[  912.027792][   T33] audit: type=1326 audit(2000000021.130:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1501 comm="syz.2.11422" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f02d278ebe9 code=0x0
[  912.354268][ T1533] netlink: 108 bytes leftover after parsing attributes in process `syz.3.11435'.
[  912.500847][ T1549] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  912.574080][ T1557] netlink: 'syz.3.11448': attribute type 10 has an invalid length.
[  913.486062][ T1579] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  913.486062][ T1579] The task syz.9.11455 (1579) triggered the difference, watch for misbehavior.
[  914.365956][ T1606] openvswitch: netlink: Tunnel attr 5 has unexpected len 4 expected 0
[  914.614890][ T1624] team0: Device gtp0 is of different type
[  914.896408][ T1644] overlayfs: failed to clone upperpath
[  915.039608][ T1663] netlink: 20 bytes leftover after parsing attributes in process `syz.9.11496'.
[  915.370259][ T1674] netlink: 52 bytes leftover after parsing attributes in process `syz.2.11501'.
[  915.374531][ T1674] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11501'.
[  915.378046][ T1674] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11501'.
[  915.968487][ T1719] openvswitch: netlink: Multiple metadata blocks provided
[  916.354909][T15672] Bluetooth: Wrong link type (-71)
[  916.690024][ T1763] netlink: 4 bytes leftover after parsing attributes in process `syz.9.11542'.
[  916.720814][ T1763] vxlan0: entered promiscuous mode
[  916.723801][ T5888] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  916.727902][ T5888] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  916.731923][ T5888] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  916.865580][ T1779] overlayfs: failed to clone upperpath
[  917.002734][ T1783] lo speed is unknown, defaulting to 1000
[  917.006550][ T1784] smc: removing ib device syz!
[  919.258045][ T1849] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11582'.
[  919.261574][ T1849] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11582'.
[  919.266862][ T1849] netlink: 156 bytes leftover after parsing attributes in process `syz.3.11582'.
[  919.400997][ T1861] netlink: 'syz.3.11588': attribute type 2 has an invalid length.
[  919.404519][ T1861] netlink: 1184 bytes leftover after parsing attributes in process `syz.3.11588'.
[  919.529261][ T1865] 9pnet_fd: Insufficient options for proto=fd
[  920.175213][ T1899] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  920.754885][ T1914] netlink: 4 bytes leftover after parsing attributes in process `syz.9.11612'.
[  920.999813][ T1931] netlink: 16178 bytes leftover after parsing attributes in process `syz.9.11621'.
[  921.184499][ T1953] libceph: resolve '00' (ret=-3): failed
[  921.243075][ T1959] overlayfs: failed to clone upperpath
[  921.654093][ T2001] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  921.658281][ T2001] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  921.937701][ T2014] netlink: 'syz.3.11656': attribute type 10 has an invalid length.
[  921.941523][ T2014] veth0_macvtap: left promiscuous mode
[  921.948802][ T2014] batman_adv: batadv0: Adding interface: macvtap0
[  921.951580][ T2014] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  921.963936][ T2014] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active
[  922.705104][ T2044] 9pnet_fd: Insufficient options for proto=fd
[  923.107035][ T2065] tipc: Started in network mode
[  923.109229][ T2065] tipc: Node identity ac14140f, cluster identity 4711
[  923.112521][ T2065] tipc: New replicast peer: 255.255.255.83
[  923.115133][ T2065] tipc: Enabled bearer <udp:>, priority 10
[  923.257639][ T2070] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11682'.
[  923.472163][ T2083] overlayfs: failed to clone upperpath
[  924.182293][T28237] tipc: Node number set to 2886997007
[  924.196118][ T2111] overlayfs: failed to clone upperpath
[  924.956079][ T2143] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11713'.
[  927.788831][ T2250] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  927.794202][ T2250] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  927.890032][ T2260] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  928.670577][ T2273] overlayfs: failed to clone upperpath
[  929.045918][    C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  929.727904][ T2297] netlink: 'syz.9.11783': attribute type 13 has an invalid length.
[  929.835777][   T13] netdevsim netdevsim9 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  929.841058][   T13] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  929.844853][   T13] netdevsim netdevsim9 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  929.850444][   T13] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  929.854365][   T13] netdevsim netdevsim9 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  929.868645][   T13] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  930.157583][    C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  931.279900][    C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  933.174323][ T2419] libceph: resolve '0.0' (ret=-3): failed
[  933.486274][ T2426] netlink: 36 bytes leftover after parsing attributes in process `syz.3.11839'.
[  933.817373][ T2429] tmpfs: Bad value for 'size'
[  933.878275][ T2431] bridge_slave_0: left allmulticast mode
[  933.880489][ T2431] bridge_slave_0: left promiscuous mode
[  933.883018][ T2431] bridge0: port 1(bridge_slave_0) entered disabled state
[  933.890816][ T2431] bridge_slave_1: left allmulticast mode
[  933.893092][ T2431] bridge_slave_1: left promiscuous mode
[  933.895462][ T2431] bridge0: port 2(bridge_slave_1) entered disabled state
[  933.902098][ T2431] bond0: (slave bond_slave_1): Releasing backup interface
[  933.926519][ T2431] bond1: (slave gretap1): Releasing active interface
[  933.936390][ T2431] bond3: (slave ip6gretap2): Releasing backup interface
[  933.939169][ T2431] bond3: (slave ip6gretap2): the permanent HWaddr of slave - f2:81:2a:2d:98:b1 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  933.958893][ T2431] bond3: (slave veth5): Releasing backup interface
[  935.080082][ T2473] siw: device registration error -23
[  935.533936][   T33] audit: type=1326 audit(2000000043.112:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2518 comm="syz.3.11874" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efc8b98ebe9 code=0x0
[  936.613143][ T2571] netlink: 'syz.9.11893': attribute type 1 has an invalid length.
[  936.617977][ T2571] netlink: 'syz.9.11893': attribute type 1 has an invalid length.
[  936.668788][ T2575] netlink: 'syz.9.11895': attribute type 10 has an invalid length.
[  936.672023][ T2575] macvlan1: entered allmulticast mode
[  937.094827][   T33] audit: type=1326 audit(2000000044.571:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2624 comm="syz.2.11914" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f02d278ebe9 code=0x0
[  937.827651][ T2668] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.11930'.
[  937.952225][ T2674] netlink: 8 bytes leftover after parsing attributes in process `syz.9.11933'.
[  938.216437][ T2706] netlink: 36 bytes leftover after parsing attributes in process `syz.9.11946'.
[  938.224798][ T2706] netlink: 24 bytes leftover after parsing attributes in process `syz.9.11946'.
[  938.596837][   T33] audit: type=1326 audit(2000000045.984:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2721 comm="syz.3.11952" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc8b98ebe9 code=0x7ffc0000
[  938.607116][   T33] audit: type=1326 audit(2000000045.984:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2721 comm="syz.3.11952" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc8b98ebe9 code=0x7ffc0000
[  938.616939][   T33] audit: type=1326 audit(2000000045.984:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2721 comm="syz.3.11952" exe="/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7efc8b98ebe9 code=0x7ffc0000
[  938.629951][   T33] audit: type=1326 audit(2000000045.984:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2721 comm="syz.3.11952" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc8b98ebe9 code=0x7ffc0000
[  938.639597][   T33] audit: type=1326 audit(2000000045.984:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2721 comm="syz.3.11952" exe="/syz-executor" sig=0 arch=c000003e syscall=52 compat=0 ip=0x7efc8b98ebe9 code=0x7ffc0000
[  938.656389][   T33] audit: type=1326 audit(2000000045.984:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2721 comm="syz.3.11952" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc8b98ebe9 code=0x7ffc0000
[  939.346310][ T2754] netlink: 'syz.3.11965': attribute type 49 has an invalid length.
[  939.350049][ T2754] netlink: 'syz.3.11965': attribute type 49 has an invalid length.
[  939.437068][ T2765] netlink: 'syz.2.11969': attribute type 1 has an invalid length.
[  939.440240][ T2765] netlink: 'syz.2.11969': attribute type 4 has an invalid length.
[  939.443104][ T2765] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.11969'.
[  939.454814][ T2765] netlink: 'syz.2.11969': attribute type 1 has an invalid length.
[  939.459782][ T2765] netlink: 'syz.2.11969': attribute type 4 has an invalid length.
[  939.462782][ T2765] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.11969'.
[  939.822323][ T2809] overlayfs: missing 'lowerdir'
[  942.153915][ T2878] netlink: 12 bytes leftover after parsing attributes in process `syz.9.12003'.
[  942.850250][ T2894] netlink: 348 bytes leftover after parsing attributes in process `syz.3.12013'.
[  943.737486][ T2943] netlink: 20 bytes leftover after parsing attributes in process `syz.9.12030'.
[  944.842516][ T2962] netlink: 8 bytes leftover after parsing attributes in process `syz.9.12039'.
[  945.798501][ T3008] team0: left allmulticast mode
[  945.800383][ T3008] C: left allmulticast mode
[  945.802170][ T3008] team_slave_1: left allmulticast mode
[  945.804263][ T3008] team0: left promiscuous mode
[  945.806218][ T3008] C: left promiscuous mode
[  945.808242][ T3008] team_slave_1: left promiscuous mode
[  945.812528][ T3008] netdevsim netdevsim9 netdevsim0: left promiscuous mode
[  945.816007][ T3008] bridge0: port 4(team0) entered disabled state
[  945.820896][ T3008] bridge_slave_0: left allmulticast mode
[  945.823058][ T3008] bridge_slave_0: left promiscuous mode
[  945.824890][ T3008] bridge0: port 1(bridge_slave_0) entered disabled state
[  945.829058][ T3008] bridge_slave_1: left allmulticast mode
[  945.831786][ T3008] bridge_slave_1: left promiscuous mode
[  945.834046][ T3008] bridge0: port 2(bridge_slave_1) entered disabled state
[  945.838570][ T3008] bond0: (slave bond_slave_0): Releasing backup interface
[  945.842337][ T3008] bond_slave_0: left allmulticast mode
[  945.845604][ T3008] bond0: (slave bond_slave_1): Releasing backup interface
[  945.848390][ T3008] bond_slave_1: left allmulticast mode
[  945.854867][ T3008] team0: Port device C removed
[  945.859184][ T3008] team0: Port device team_slave_1 removed
[  945.862243][ T3008] batman_adv: batadv0: Removing interface: batadv_slave_0
[  945.865592][ T3008] batman_adv: batadv0: Removing interface: batadv_slave_1
[  945.869796][ T3008] team0: Port device netdevsim0 removed
[  945.872346][ T3008] bond3: left promiscuous mode
[  945.876690][ T3008] bridge0: port 3(bond3) entered disabled state
[  946.506599][ T3018] netlink: 12 bytes leftover after parsing attributes in process `syz.9.12064'.
[  946.510406][ T3018] netlink: 12 bytes leftover after parsing attributes in process `syz.9.12064'.
[  946.515226][ T3018] netlink: 50 bytes leftover after parsing attributes in process `syz.9.12064'.
[  946.576447][ T3022] pimreg: entered allmulticast mode
[  946.581568][ T3022] pimreg: left allmulticast mode
[  946.756572][ T3033] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12071'.
[  946.763941][ T3033] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12071'.
[  947.467518][ T3044] netlink: 64 bytes leftover after parsing attributes in process `syz.9.12074'.
[  948.369036][ T3076] netlink: 'syz.3.12088': attribute type 83 has an invalid length.
[  951.563859][ T3170] netlink: 120 bytes leftover after parsing attributes in process `syz.2.12133'.
[  951.567875][ T3170] netlink: 120 bytes leftover after parsing attributes in process `syz.2.12133'.
[  952.062686][ T3206] netlink: 'syz.3.12149': attribute type 3 has an invalid length.
[  952.068214][ T3206] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12149'.
[  953.253907][ T3237] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12161'.
[  953.257631][ T3237] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12161'.
[  955.474767][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  955.477223][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  956.115893][ T3318] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12191'.
[  956.307234][ T3328] libceph: resolve '400' (ret=-3): failed
[  958.643065][ T3372] netlink: 'syz.2.12214': attribute type 1 has an invalid length.
[  958.646451][ T3372] netlink: 'syz.2.12214': attribute type 1 has an invalid length.
[  959.073245][ T3386] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12221'.
[  959.164409][ T3394] overlayfs: failed to clone upperpath
[  959.448690][ T3417] IPVS: length: 139 != 8
[  959.681063][ T3437] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12246'.
[  959.687643][ T3437] bridge_slave_0: default FDB implementation only supports local addresses
[  962.706847][ T3509] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12274'.
[  962.730753][ T3510] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12273'.
[  963.114431][ T3560] netlink: 4 bytes leftover after parsing attributes in process `syz.9.12298'.
[  963.489106][ T3594] 9pnet_fd: Insufficient options for proto=fd
[  964.163472][ T3618] tmpfs: Bad value for 'mpol'
[  966.621198][ T3748] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.12383'.
[  966.626187][ T3748] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  966.629751][ T3748] openvswitch: netlink: Duplicate key (type 0).
[  966.666869][ T3752] Invalid ELF header type: 0 != 1
[  966.863679][ T3761] 9pnet_fd: Insufficient options for proto=fd
[  967.326205][ T3784] netlink: 'syz.9.12400': attribute type 4 has an invalid length.
[  967.333777][ T3784] netlink: 'syz.9.12400': attribute type 4 has an invalid length.
[  967.354754][T11459] lo speed is unknown, defaulting to 1000
[  967.360325][T11459] syz1: Port: 1 Link ACTIVE
[  968.665344][ T3804] netlink: 64 bytes leftover after parsing attributes in process `syz.2.12408'.
[  970.404423][ T3880] netlink: 12 bytes leftover after parsing attributes in process `syz.9.12439'.
[  970.412795][ T3880] netlink: 12 bytes leftover after parsing attributes in process `syz.9.12439'.
[  970.883054][ T3892] af_packet: tpacket_rcv: packet too big, clamped from 65232 to 3944. macoff=96
[  971.424344][   T33] audit: type=1800 audit(946.022:334): pid=3923 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.12462" name="nullb0" dev="tmpfs" ino=1752 res=0 errno=0
[  971.622626][ T3938] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  971.761637][ T3940] bridge0: port 2(bridge_slave_1) entered disabled state
[  971.764662][ T3940] bridge0: port 1(bridge_slave_0) entered disabled state
[  971.870877][ T3940] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  971.880025][ T3940] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  971.935648][ T3940] veth1_macvtap: left allmulticast mode
[  972.032415][ T5888] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  972.036279][ T5888] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  972.040046][ T5888] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  972.044547][ T5888] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  972.072237][   T33] audit: type=1326 audit(946.620:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3944 comm="syz.9.12471" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2718ebe9 code=0x7ffc0000
[  972.092295][   T33] audit: type=1326 audit(946.639:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3944 comm="syz.9.12471" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2718ebe9 code=0x7ffc0000
[  972.115983][   T33] audit: type=1326 audit(946.639:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3944 comm="syz.9.12471" exe="/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7f7c2718ebe9 code=0x7ffc0000
[  972.123992][   T33] audit: type=1326 audit(946.639:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3944 comm="syz.9.12471" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2718ebe9 code=0x7ffc0000
[  972.131482][   T33] audit: type=1326 audit(946.639:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3944 comm="syz.9.12471" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2718ebe9 code=0x7ffc0000
[  972.585480][ T3993] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  974.324076][ T4056] netlink: 830 bytes leftover after parsing attributes in process `syz.3.12521'.
[  974.383767][ T4060] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12523'.
[  974.390964][ T4060] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12523'.
[  977.659382][ T4213] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  978.131598][ T4226] wg1 speed is unknown, defaulting to 1000
[  978.173932][ T4226] wg1 speed is unknown, defaulting to 1000
[  978.182268][ T4226] wg1 speed is unknown, defaulting to 1000
[  978.203082][ T4226] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  978.223742][ T4226] wg1 speed is unknown, defaulting to 1000
[  978.226772][ T4226] wg1 speed is unknown, defaulting to 1000
[  978.229547][ T4226] wg1 speed is unknown, defaulting to 1000
[  978.232592][ T4226] wg1 speed is unknown, defaulting to 1000
[  980.794035][ T4332] 8021q: adding VLAN 0 to HW filter on device bond3
[  980.890276][T11459] libceph: connect (1)[c::]:6789 error -101
[  980.892997][T11459] libceph: mon0 (1)[c::]:6789 connect error
[  980.936808][   T33] audit: type=1326 audit(954.917:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4335 comm="syz.9.12641" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7c2718ebe9 code=0x0
[  981.042880][ T4336] ceph: No mds server is up or the cluster is laggy
[  981.104642][ T4354] netlink: 40 bytes leftover after parsing attributes in process `syz.2.12648'.
[  983.055737][ T4407] netlink: 64 bytes leftover after parsing attributes in process `syz.9.12672'.
[  984.105275][   T33] audit: type=1326 audit(957.947:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4444 comm="syz.2.12690" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02d278ebe9 code=0x7ffc0000
[  984.140364][   T33] audit: type=1326 audit(957.966:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4444 comm="syz.2.12690" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f02d278ebe9 code=0x7ffc0000
[  984.165806][   T33] audit: type=1326 audit(957.966:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4444 comm="syz.2.12690" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02d278ebe9 code=0x7ffc0000
[  984.182947][   T33] audit: type=1326 audit(957.966:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4444 comm="syz.2.12690" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02d278ebe9 code=0x7ffc0000
[  984.191513][   T33] audit: type=1326 audit(957.966:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4444 comm="syz.2.12690" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f02d278ebe9 code=0x7ffc0000
[  984.209183][   T33] audit: type=1326 audit(957.966:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4444 comm="syz.2.12690" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02d278ebe9 code=0x7ffc0000
[  984.225292][   T33] audit: type=1326 audit(957.966:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4444 comm="syz.2.12690" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02d278ebe9 code=0x7ffc0000
[  984.236500][   T33] audit: type=1326 audit(957.966:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4444 comm="syz.2.12690" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f02d278ebe9 code=0x7ffc0000
[  984.245958][   T33] audit: type=1326 audit(957.966:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4444 comm="syz.2.12690" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02d278ebe9 code=0x7ffc0000
[  984.608975][ T4461] overlayfs: failed to clone upperpath
[  985.548041][ T4509] netlink: 40 bytes leftover after parsing attributes in process `syz.2.12720'.
[  985.888630][ T4515] : renamed from batadv_slave_1
[  987.975547][ T4617] netlink: 68 bytes leftover after parsing attributes in process `syz.3.12773'.
[  988.797864][ T4649] bridge0: port 1(macvlan5) entered blocking state
[  988.801001][ T4649] bridge0: port 1(macvlan5) entered disabled state
[  988.803953][ T4649] macvlan5: entered allmulticast mode
[  988.808655][ T4649] bridge0: entered allmulticast mode
[  988.813058][ T4649] macvlan5: left allmulticast mode
[  988.815395][ T4649] bridge0: left allmulticast mode
[  989.069388][ T4659] 9pnet_fd: Insufficient options for proto=fd
[  990.487403][ T4737] netlink: 116 bytes leftover after parsing attributes in process `syz.3.12830'.
[  990.487652][ T4736] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  990.718980][ T4755] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12836'.
[  990.943862][ T4769] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12843'.
[  992.610020][ T5889] wg1 speed is unknown, defaulting to 1000
[  992.895492][ T4866] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.12889'.
[  993.763414][ T4894] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  994.370133][ T4918] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  995.280689][ T4966] overlayfs: failed to clone upperpath
[  999.212131][ T5076] batman_adv: batadv0: Adding interface: dummy0
[  999.214855][ T5076] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[ 1000.600740][ T5139] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13010'.
[ 1000.743168][ T5156] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13020'.
[ 1000.838144][ T5165] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13024'.
[ 1001.480885][ T5185] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13033'.
[ 1001.484634][ T5185] netlink: 'syz.3.13033': attribute type 7 has an invalid length.
[ 1001.840644][ T5212] PKCS8: Unsupported PKCS#8 version
[ 1001.906537][ T5219] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.13048'.
[ 1001.989784][ T5226] CIFS mount error: No usable UNC path provided in device string!
[ 1001.989784][ T5226] 
[ 1001.994205][ T5226] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[ 1002.146418][ T5234] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13055'.
[ 1002.349844][ T5255] netlink: 104 bytes leftover after parsing attributes in process `syz.3.13064'.
[ 1002.666949][ T5289] netlink: 4 bytes leftover after parsing attributes in process `syz.9.13078'.
[ 1003.011733][ T5306] netlink: 20 bytes leftover after parsing attributes in process `syz.9.13084'.
[ 1005.012071][ T5362] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 1005.074996][ T5889] libceph: connect (1)[c::]:6789 error -22
[ 1005.077865][ T5889] libceph: mon0 (1)[c::]:6789 connect error
[ 1005.227511][ T5364] ceph: No mds server is up or the cluster is laggy
[ 1005.636986][ T5374] overlayfs: failed to resolve './file0': -2
[ 1005.774199][ T5392] netlink: 'syz.3.13120': attribute type 1 has an invalid length.
[ 1005.777901][ T5392] netlink: 'syz.3.13120': attribute type 1 has an invalid length.
[ 1006.957412][ T5425] 8021q: adding VLAN 0 to HW filter on device bond4
[ 1007.380515][ T5442] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13142'.
[ 1008.096792][ T5484] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[ 1010.163772][ T5537] syz.2.13185(5537): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored.
[ 1011.547188][ T5591] netlink: 4 bytes leftover after parsing attributes in process `syz.9.13203'.
[ 1012.610613][ T5636] netlink: 20 bytes leftover after parsing attributes in process `syz.9.13230'.
[ 1012.634161][T15672] Bluetooth: hci1: unexpected event for opcode 0x0c05
[ 1013.129390][ T5650] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13237'.
[ 1013.500183][ T5686] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13253'.
[ 1015.454331][ T5801] overlayfs: failed to clone upperpath
[ 1017.593355][ T5910] overlayfs: failed to clone upperpath
[ 1017.885671][ T5940] netlink: 830 bytes leftover after parsing attributes in process `syz.2.13361'.
[ 1018.374182][ T5955] overlayfs: failed to clone upperpath
[ 1019.335274][ T5982] fuse: Bad value for 'fd'
[ 1020.570514][ T6023] tipc: Enabling of bearer <udp:s> rejected, already enabled
[ 1021.157549][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[ 1021.160498][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[ 1024.122502][ T6230] IPv6: sit2: Disabled Multicast RS
[ 1024.125297][ T6230] sit2: entered allmulticast mode
[ 1024.477035][ T6255] netlink: 60 bytes leftover after parsing attributes in process `syz.3.13504'.
[ 1024.483400][ T6255] netlink: 60 bytes leftover after parsing attributes in process `syz.3.13504'.
[ 1024.488944][ T6255] netlink: 60 bytes leftover after parsing attributes in process `syz.3.13504'.
[ 1024.729183][ T6268] macvlan3: entered promiscuous mode
[ 1024.734744][ T6268] bond0: (slave macvlan3): Enslaving as an active interface with an up link
[ 1025.913591][ T6336] netlink: 40 bytes leftover after parsing attributes in process `syz.3.13542'.
[ 1026.573054][ T6378] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[ 1026.986150][   T33] kauditd_printk_skb: 11 callbacks suppressed
[ 1026.986164][   T33] audit: type=1800 audit(998.050:361): pid=6383 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.13564" name="bus" dev="tmpfs" ino=17726 res=0 errno=0
[ 1027.294971][   T33] audit: type=1800 audit(998.340:362): pid=6405 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.13575" name="SYSV00000000" dev="hugetlbfs" ino=6 res=0 errno=0
[ 1031.124866][ T6575] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13646'.
[ 1033.645799][ T6624] netlink: 'syz.9.13667': attribute type 39 has an invalid length.
[ 1034.056471][ T6642] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1034.497105][ T6662] overlayfs: failed to clone upperpath
[ 1034.530895][ T6664] netlink: 20 bytes leftover after parsing attributes in process `syz.9.13687'.
[ 1034.663480][   T33] audit: type=1326 audit(1005.235:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6672 comm="syz.9.13691" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7c2718ebe9 code=0x0
[ 1035.064814][ T6703] tunl0: entered promiscuous mode
[ 1035.067255][ T6703] netlink: 'syz.3.13703': attribute type 4 has an invalid length.
[ 1035.070528][ T6703] netlink: 9 bytes leftover after parsing attributes in process `syz.3.13703'.
[ 1035.923463][ T6746] netlink: 9280 bytes leftover after parsing attributes in process `syz.2.13723'.
[ 1035.968666][ T6751] netlink: 129704 bytes leftover after parsing attributes in process `syz.3.13724'.
[ 1036.201767][ T6768] lo speed is unknown, defaulting to 1000
[ 1036.205095][ T6768] wg1 speed is unknown, defaulting to 1000
[ 1036.346564][ T6776] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13736'.
[ 1036.350447][ T6776] netem: change failed
[ 1036.433865][ T6780] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13738'.
[ 1036.960873][ T6760] orangefs_mount: mount request failed with -4
[ 1038.511229][ T6872] 9pnet_virtio: no channels available for device 127.0.0.1
[ 1038.850143][ T6888] vlan0: entered promiscuous mode
[ 1038.969065][ T6893] netlink: 'syz.9.13786': attribute type 4 has an invalid length.
[ 1039.140741][ T6909] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13793'.
[ 1039.144870][ T6909] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13793'.
[ 1039.148892][ T6909] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13793'.
[ 1039.154888][ T6909] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13793'.
[ 1041.225543][ T6971] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13820'.
[ 1042.253214][ T6986] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13825'.
[ 1043.241428][ T7031] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13847'.
[ 1043.270239][ T7031] bridge_slave_1: left allmulticast mode
[ 1043.272165][ T7031] bridge_slave_1: left promiscuous mode
[ 1043.274057][ T7031] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1043.304297][   T33] audit: type=1326 audit(1013.318:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7034 comm="syz.9.13848" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7c2718ebe9 code=0x0
[ 1043.984461][ T7057] netlink: 60 bytes leftover after parsing attributes in process `syz.9.13857'.
[ 1043.998132][ T7057] unsupported nlmsg_type 40
[ 1044.242427][ T7076] overlayfs: upper fs does not support RENAME_WHITEOUT.
[ 1044.252918][ T7076] overlayfs: failed to set xattr on upper
[ 1044.258286][ T7076] overlayfs: ...falling back to redirect_dir=nofollow.
[ 1044.261242][ T7076] overlayfs: ...falling back to metacopy=off.
[ 1044.263891][ T7076] overlayfs: ...falling back to uuid=null.
[ 1044.373849][ T7080] lo speed is unknown, defaulting to 1000
[ 1044.380437][ T7081] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13869'.
[ 1044.382434][ T7080] wg1 speed is unknown, defaulting to 1000
[ 1044.731862][ T7097] Invalid ELF header magic: != ELF
[ 1045.391306][T15672] Bluetooth: hci1: unexpected event for opcode 0x2024
[ 1045.641221][ T7158] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13904'.
[ 1046.336422][ T7171] netlink: 348 bytes leftover after parsing attributes in process `syz.3.13910'.
[ 1046.704654][ T7192] geneve3: entered promiscuous mode
[ 1046.706895][ T7192] geneve3: entered allmulticast mode
[ 1047.231592][ T7209] netlink: 8 bytes leftover after parsing attributes in process `syz.9.13927'.
[ 1047.235275][ T7209] netlink: 8 bytes leftover after parsing attributes in process `syz.9.13927'.
[ 1047.277478][ T7211] netlink: 16 bytes leftover after parsing attributes in process `syz.9.13928'.
[ 1047.364996][ T7215] macsec1: entered promiscuous mode
[ 1047.367450][ T7215] macsec1: entered allmulticast mode
[ 1047.527082][ T7227] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13936'.
[ 1047.578131][ T7235] netlink: 'syz.2.13940': attribute type 21 has an invalid length.
[ 1047.580926][ T7235] netlink: 128 bytes leftover after parsing attributes in process `syz.2.13940'.
[ 1047.583950][ T7235] netlink: 'syz.2.13940': attribute type 4 has an invalid length.
[ 1047.586516][ T7235] netlink: 3 bytes leftover after parsing attributes in process `syz.2.13940'.
[ 1048.341223][ T7273] lo speed is unknown, defaulting to 1000
[ 1048.346132][ T7273] wg1 speed is unknown, defaulting to 1000
[ 1048.772548][ T7296] netlink: 'syz.9.13968': attribute type 5 has an invalid length.
[ 1048.847420][ T7299] netlink: 12 bytes leftover after parsing attributes in process `syz.9.13970'.
[ 1050.093098][ T7359] ip6tnl3: entered promiscuous mode
[ 1050.095291][ T7359] ip6tnl3: entered allmulticast mode
[ 1050.834141][ T7380] netlink: 96 bytes leftover after parsing attributes in process `syz.3.14007'.
[ 1050.882278][ T7383] lo speed is unknown, defaulting to 1000
[ 1050.885804][ T7385] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[ 1050.896422][ T7383] wg1 speed is unknown, defaulting to 1000
[ 1053.244424][ T7439] netlink: 'syz.2.14034': attribute type 1 has an invalid length.
[ 1053.247911][ T7439] __nla_validate_parse: 2 callbacks suppressed
[ 1053.247923][ T7439] netlink: 56 bytes leftover after parsing attributes in process `syz.2.14034'.
[ 1053.332497][ T7449] 9pnet_fd: Insufficient options for proto=fd
[ 1054.290215][ T7494] Device name not specified.
[ 1054.290215][ T7494] 
[ 1055.646192][ T7542] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[ 1055.898423][   T33] audit: type=1326 audit(1025.106:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7551 comm="syz.3.14088" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efc8b98ebe9 code=0x0
[ 1056.512066][ T7563] netlink: 24 bytes leftover after parsing attributes in process `syz.9.14092'.
[ 1056.665043][ T7565] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[ 1057.092016][ T7592] netlink: 'syz.3.14105': attribute type 2 has an invalid length.
[ 1057.095449][ T7592] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.14105'.
[ 1058.556152][ T7657] netlink: 104 bytes leftover after parsing attributes in process `syz.3.14135'.
[ 1059.124631][ T7686] tmpfs: Bad value for 'mpol'
[ 1059.750908][ T7697] overlayfs: failed to clone upperpath
[ 1060.399483][ T7725] 9pnet_fd: Insufficient options for proto=fd
[ 1060.551943][ T7729] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.14168'.
[ 1060.566436][ T7729] openvswitch: netlink: Port -8 exceeds max allowable 65535
[ 1061.010188][ T7739] MPI: mpi too large (107144 bits)
[ 1063.876713][   T33] audit: type=1326 audit(1032.562:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7804 comm="syz.3.14202" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efc8b98ebe9 code=0x0
[ 1070.272050][ T8061] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1071.019063][ T8086] 9pnet_fd: Insufficient options for proto=fd
[ 1071.021939][ T8087] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14330'.
[ 1072.496165][ T8142] overlayfs: failed to clone upperpath
[ 1072.773999][ T8144] overlayfs: failed to clone upperpath
[ 1073.474069][   T33] audit: type=1326 audit(1041.543:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8171 comm="syz.3.14369" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efc8b98ebe9 code=0x0
[ 1073.902939][ T8176] afs: Unknown parameter 'dynquota'
[ 1074.625223][ T8216] netlink: 'syz.3.14387': attribute type 2 has an invalid length.
[ 1074.628514][ T8216] netlink: 'syz.3.14387': attribute type 1 has an invalid length.
[ 1074.631540][ T8216] netlink: 'syz.3.14387': attribute type 1 has an invalid length.
[ 1074.957029][ T8226] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14392'.
[ 1076.626202][ T8294] netlink: 4 bytes leftover after parsing attributes in process `syz.9.14422'.
[ 1076.659047][ T8298] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14423'.
[ 1076.818816][ T8312] netlink: 52 bytes leftover after parsing attributes in process `syz.9.14430'.
[ 1076.871738][ T8314] netlink: 495 bytes leftover after parsing attributes in process `syz.9.14431'.
[ 1076.923153][ T8318] netlink: 'syz.9.14433': attribute type 2 has an invalid length.
[ 1077.098215][ T8335] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1077.820798][ T8346] overlayfs: failed to clone upperpath
[ 1078.270658][ T8366] overlayfs: failed to clone upperpath
[ 1078.837550][ T8388] netlink: 4 bytes leftover after parsing attributes in process `syz.9.14463'.
[ 1079.177518][ T8402] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.14469'.
[ 1079.620101][ T8424] ip_vti0: Master is either lo or non-ether device
[ 1082.455888][   T33] audit: type=1326 audit(1049.944:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8507 comm="syz.9.14518" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7c2718ebe9 code=0x0
[ 1082.896368][ T8519] fuse: Bad value for 'fd'
[ 1084.085253][ T8550] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14536'.
[ 1084.951601][ T8569] overlayfs: failed to clone upperpath
[ 1085.000616][ T8575] overlayfs: failed to resolve './file0': -2
[ 1085.061961][ T8583] overlayfs: failed to clone upperpath
[ 1085.374279][ T8613] unknown channel width for channel at 909000KHz?
[ 1086.002154][ T8659] overlayfs: upper fs does not support RENAME_WHITEOUT.
[ 1086.004807][ T8659] overlayfs: failed to set xattr on upper
[ 1086.016707][ T8659] overlayfs: ...falling back to redirect_dir=nofollow.
[ 1086.269269][ T8675] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[ 1086.272583][ T8675] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[ 1086.836575][   T51] kworker/1:1 (51) used greatest stack depth: 15376 bytes left
[ 1086.840445][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[ 1086.843353][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[ 1087.650084][ T8720] veth1_macvtap: entered allmulticast mode
[ 1087.659062][ T8720] batman_adv: batadv0: Adding interface: macsec0
[ 1087.661989][ T8720] batman_adv: batadv0: The MTU of interface macsec0 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1087.672695][ T8720] batman_adv: batadv0: Interface activated: macsec0
[ 1088.529796][ T8790] netlink: 'syz.3.14646': attribute type 2 has an invalid length.
[ 1089.016023][ T8808] netlink: 8 bytes leftover after parsing attributes in process `syz.9.14657'.
[ 1089.928050][ T8856] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1089.931148][ T8856] IPv6: NLM_F_CREATE should be set when creating new route
[ 1090.110234][ T8872] netlink: 'syz.2.14685': attribute type 11 has an invalid length.
[ 1090.268623][ T8883] overlayfs: missing 'workdir'
[ 1090.849991][ T8924] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14710'.
[ 1091.013256][ T8930] overlayfs: failed to clone upperpath
[ 1092.273252][ T5679] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1092.276908][ T5679] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1092.293202][ T5679] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1092.567421][ T8991] netlink: 20 bytes leftover after parsing attributes in process `syz.2.14741'.
[ 1092.589802][ T8991] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14741'.
[ 1092.598921][ T8993] 9pnet: p9_errstr2errno: server reported unknown error 6G)Do')=0O]|[
[ 1092.781608][ T8999] 9pnet_fd: Insufficient options for proto=fd
[ 1093.941089][ T9040] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14765'.
[ 1094.025801][ T9044] netem: unknown loss type 0
[ 1094.028106][ T9044] netem: change failed
[ 1096.201321][   T33] audit: type=1326 audit(1062.807:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9122 comm="syz.9.14803" exe="/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f7c27185ba7 code=0x0
[ 1096.231174][ T9125] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14804'.
[ 1096.234944][ T9125] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14804'.
[ 1096.432029][ T9129] tc_dump_action: action bad kind
[ 1096.964934][ T9145] 0{X: hsr_addr_subst_dest: Unknown node
[ 1096.968705][ T9145] batadv_slave_1: hsr_addr_subst_dest: Unknown node
[ 1096.971638][ T9145] erspan0: hsr_addr_subst_dest: Unknown node
[ 1096.975649][ T9145] 0{X: left promiscuous mode
[ 1096.978448][ T9145] batadv_slave_1: left promiscuous mode
[ 1096.981406][ T9145] erspan0: left promiscuous mode
[ 1097.184589][ T9156] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.14819'.
[ 1097.391442][ T9169] overlayfs: failed to clone upperpath
[ 1099.799028][ T9237] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14855'.
[ 1100.466191][ T9273] netlink: 'syz.3.14873': attribute type 1 has an invalid length.
[ 1101.563120][ T9290] virtio-fs: tag </dev/md0> not found
[ 1102.385455][ T9312] netlink: 209836 bytes leftover after parsing attributes in process `syz.9.14889'.
[ 1104.345426][ T9400] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14927'.
[ 1104.355940][ T9400] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14927'.
[ 1104.964650][ T9451] overlayfs: failed to clone upperpath
[ 1105.054980][ T9457] netlink: 56 bytes leftover after parsing attributes in process `syz.9.14953'.
[ 1105.141744][ T9466] vlan1: entered promiscuous mode
[ 1105.143608][ T9466] bridge0: entered promiscuous mode
[ 1105.145709][ T9466] vlan1: entered allmulticast mode
[ 1105.147636][ T9466] bridge0: entered allmulticast mode
[ 1105.177259][ T9466] bridge_slave_0: left allmulticast mode
[ 1105.179416][ T9466] bridge_slave_0: left promiscuous mode
[ 1105.181904][ T9466] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1105.201336][ T9466] bond0: (slave bond_slave_0): Releasing backup interface
[ 1105.207053][ T9466] bond0: (slave bond_slave_1): Releasing backup interface
[ 1105.217599][ T9466] team0: Port device team_slave_0 removed
[ 1105.226300][ T9466] team0: Port device team_slave_1 removed
[ 1105.229043][ T9466] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1105.233309][ T9466] batman_adv: batadv0: Removing interface: 26
[ 1105.249916][ T9466] batman_adv: batadv0: Removing interface: macvtap0
[ 1105.253579][ T9466] batman_adv: batadv0: Interface deactivated: macsec0
[ 1105.256564][ T9466] batman_adv: batadv0: Removing interface: macsec0
[ 1105.265917][ T9466] bond1: (slave ip6gretap1): Releasing active interface
[ 1105.270389][ T9466] bond1: (slave ip6gretap1): the permanent HWaddr of slave - 02:fa:9a:5a:27:93 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[ 1105.282415][ T9466] bond1: (slave veth3): Releasing active interface
[ 1105.288551][ T9466] bond0: (slave macvlan3): Releasing backup interface
[ 1105.786557][ T9496] lo speed is unknown, defaulting to 1000
[ 1105.790483][ T9496] wg1 speed is unknown, defaulting to 1000
[ 1106.137003][ T9509] x_tables: ip_tables: udp match: only valid for protocol 17
[ 1106.211283][ T9517] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14980'.
[ 1106.214480][ T9517] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14980'.
[ 1106.224760][ T9517] erspan0: entered promiscuous mode
[ 1106.227215][ T9517] 0{X: entered promiscuous mode
[ 1106.240500][ T9517] debugfs: 'hsr0' already exists in 'hsr'
[ 1106.242661][ T9517] Cannot create hsr debugfs directory
[ 1106.888089][ T9551] tmpfs: Bad value for 'mpol'
[ 1110.854076][ T9679] netlink: 24 bytes leftover after parsing attributes in process `syz.2.15052'.
[ 1111.088972][ T9700] netlink: 'syz.2.15062': attribute type 23 has an invalid length.
[ 1111.354713][ T9722] netlink: 'syz.2.15071': attribute type 11 has an invalid length.
[ 1112.796633][ T9763] x_tables: ip_tables: SNAT target: only valid in nat table, not syz0
[ 1113.116268][ T9783] netlink: 52 bytes leftover after parsing attributes in process `syz.2.15096'.
[ 1113.120155][ T9783] netlink: 16 bytes leftover after parsing attributes in process `syz.2.15096'.
[ 1113.124024][ T9783] netlink: 52 bytes leftover after parsing attributes in process `syz.2.15096'.
[ 1113.340444][ T9797] netlink: 'syz.3.15105': attribute type 7 has an invalid length.
[ 1113.374383][ T9797] : entered promiscuous mode
[ 1113.820926][   T33] audit: type=1326 audit(1079.291:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9819 comm="syz.9.15116" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2718ebe9 code=0x7ffc0000
[ 1113.831261][   T33] audit: type=1326 audit(1079.291:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9819 comm="syz.9.15116" exe="/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f7c2718ebe9 code=0x7ffc0000
[ 1113.838256][   T33] audit: type=1326 audit(1079.291:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9819 comm="syz.9.15116" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2718ebe9 code=0x7ffc0000
[ 1113.846840][   T33] audit: type=1326 audit(1079.291:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9819 comm="syz.9.15116" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2718ebe9 code=0x7ffc0000
[ 1114.084221][ T9838] netlink: 28 bytes leftover after parsing attributes in process `syz.2.15125'.
[ 1114.305514][ T9860] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6erspan0, syncid = 0, id = 0
[ 1115.357861][ T9901] netlink: 'syz.3.15142': attribute type 1 has an invalid length.
[ 1115.361407][ T9901] netlink: 'syz.3.15142': attribute type 2 has an invalid length.
[ 1115.438355][ T9907] netlink: 132 bytes leftover after parsing attributes in process `syz.9.15144'.
[ 1115.661779][ T9933] 9pnet_fd: Insufficient options for proto=fd
[ 1116.046181][ T9958] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[ 1116.182166][ T9962] netlink: 24 bytes leftover after parsing attributes in process `syz.2.15170'.
[ 1116.852757][ T9977] netlink: 8 bytes leftover after parsing attributes in process `syz.9.15176'.
[ 1117.451867][T10000] netlink: 28 bytes leftover after parsing attributes in process `syz.9.15188'.
[ 1117.456683][T10000] netlink: 28 bytes leftover after parsing attributes in process `syz.9.15188'.
[ 1118.289388][T10051] overlayfs: failed to clone upperpath
[ 1119.831825][   T33] audit: type=1326 audit(1084.913:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10098 comm="syz.3.15235" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efc8b98ebe9 code=0x0
[ 1120.550585][T10127] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15246'.
[ 1120.755705][T10135] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15249'.
[ 1121.903961][T10159] overlayfs: failed to clone upperpath
[ 1122.649356][T10193] CIFS mount error: No usable UNC path provided in device string!
[ 1122.649356][T10193] 
[ 1122.653579][T10193] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[ 1123.609782][T10207] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1123.787617][T10217] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15284'.
[ 1124.355393][T10262] autofs: Bad value for 'fd'
[ 1124.777306][T10282] netlink: 'syz.2.15315': attribute type 2 has an invalid length.
[ 1125.373426][T10313] UBIFS error (pid: 10313): cannot open "c:::", error -22
[ 1126.273543][T10359] netlink: 'syz.9.15350': attribute type 6 has an invalid length.
[ 1126.522935][T10380] netlink: 12 bytes leftover after parsing attributes in process `syz.9.15361'.
[ 1126.590552][   T33] audit: type=1326 audit(1091.237:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10384 comm="syz.9.15363" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2718ebe9 code=0x7ff00000
[ 1126.599706][   T33] audit: type=1326 audit(1091.237:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10384 comm="syz.9.15363" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2718ebe9 code=0x7ff00000
[ 1126.609146][   T33] audit: type=1326 audit(1091.237:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10384 comm="syz.9.15363" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2718ebe9 code=0x7ff00000
[ 1126.618266][   T33] audit: type=1326 audit(1091.237:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10384 comm="syz.9.15363" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2718ebe9 code=0x7ff00000
[ 1126.627210][   T33] audit: type=1326 audit(1091.237:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10384 comm="syz.9.15363" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2718ebe9 code=0x7ff00000
[ 1126.636263][   T33] audit: type=1326 audit(1091.237:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10384 comm="syz.9.15363" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2718ebe9 code=0x7ff00000
[ 1126.986737][T10387] delete_channel: no stack
[ 1127.432853][T10392] overlayfs: failed to clone lowerpath
[ 1127.457566][   T33] audit: type=1326 audit(1091.237:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10384 comm="syz.9.15363" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2718ebe9 code=0x7ff00000
[ 1127.467035][   T33] audit: type=1326 audit(1091.237:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10384 comm="syz.9.15363" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2718ebe9 code=0x7ff00000
[ 1127.475961][   T33] audit: type=1326 audit(1091.237:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10384 comm="syz.9.15363" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2718ebe9 code=0x7ff00000
[ 1127.484332][   T33] audit: type=1326 audit(1091.237:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10384 comm="syz.9.15363" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2718ebe9 code=0x7ff00000
[ 1127.592727][T10406] 9pnet_fd: Insufficient options for proto=fd
[ 1127.775420][T10419] netlink: 24 bytes leftover after parsing attributes in process `syz.9.15372'.
[ 1127.825125][T10423] netlink: 'syz.9.15378': attribute type 1 has an invalid length.
[ 1127.846121][T10423] 8021q: adding VLAN 0 to HW filter on device bond5
[ 1127.884024][T10426] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15379'.
[ 1130.422687][T10539] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15428'.
[ 1132.690320][T10657] IPv6: Can't replace route, no match found
[ 1132.783624][T10665] netlink: 40 bytes leftover after parsing attributes in process `syz.9.15487'.
[ 1133.260928][ T3329] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1133.397459][ T3329] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1133.439062][T10684] netlink: 'syz.3.15499': attribute type 21 has an invalid length.
[ 1133.446912][T10684] netlink: 'syz.3.15499': attribute type 6 has an invalid length.
[ 1133.455294][T10684] netlink: 64 bytes leftover after parsing attributes in process `syz.3.15499'.
[ 1133.480427][ T5853] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1133.498434][ T5853] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1133.504334][ T5853] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1133.512311][ T5853] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1133.517884][ T5853] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1133.664235][ T3329] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1133.721874][T10685] lo speed is unknown, defaulting to 1000
[ 1133.732385][T10685] wg1 speed is unknown, defaulting to 1000
[ 1134.013222][ T3329] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1134.152938][ T2072] wg1 speed is unknown, defaulting to 1000
[ 1134.236593][ T2072] syz0: Port: 1 Link DOWN
[ 1135.040462][ T3329] erspan0 (unregistering): left promiscuous mode
[ 1135.075591][ T3329] 0{X (unregistering): left promiscuous mode
[ 1135.742741][T15672] Bluetooth: hci2: command tx timeout
[ 1135.924989][ T3329] bond0 (unregistering): Released all slaves
[ 1136.100097][ T3329] bond1 (unregistering): Released all slaves
[ 1136.252880][ T3329] bond2 (unregistering): Released all slaves
[ 1136.262936][ T3329] bond3 (unregistering): Released all slaves
[ 1136.437646][ T3329] bond4 (unregistering): Released all slaves
[ 1136.629330][ T3329] bond5 (unregistering): Released all slaves
[ 1136.642944][ T3329] bond6 (unregistering): Released all slaves
[ 1136.658884][T10685] chnl_net:caif_netlink_parms(): no params data found
[ 1136.862952][T10746] netlink: 'syz.3.15519': attribute type 21 has an invalid length.
[ 1136.894679][ T3329] k*]: left promiscuous mode
[ 1136.933726][T10746] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15519'.
[ 1136.995181][T10685] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1136.998130][T10685] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1137.001203][T10685] bridge_slave_0: entered allmulticast mode
[ 1137.043273][T10685] bridge_slave_0: entered promiscuous mode
[ 1137.046231][ T3329] tipc: Disabling bearer <udp:s>
[ 1137.048910][ T3329] tipc: Left network mode
[ 1137.058487][T10685] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1137.060892][T10685] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1137.063840][T10685] bridge_slave_1: entered allmulticast mode
[ 1137.066983][T10685] bridge_slave_1: entered promiscuous mode
[ 1137.122963][ T3329] IPVS: stopping master sync thread 27625 ...
[ 1137.127792][ T3329] IPVS: stopping backup sync thread 9860 ...
[ 1137.141585][T10685] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1137.148631][T10685] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1137.189612][T10685] team0: Port device team_slave_0 added
[ 1137.201897][T10685] team0: Port device team_slave_1 added
[ 1137.315243][T10685] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1137.320868][T10685] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1137.332079][T10685] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1137.370827][T10685] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1137.373473][T10685] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1137.387270][T10685] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1137.446293][T10685] hsr_slave_0: entered promiscuous mode
[ 1137.448715][T10685] hsr_slave_1: entered promiscuous mode
[ 1137.461247][T10685] debugfs: 'hsr0' already exists in 'hsr'
[ 1137.463210][T10685] Cannot create hsr debugfs directory
[ 1137.681584][T10780] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15530'.
[ 1137.734599][ T3329] hsr_slave_0: left promiscuous mode
[ 1137.736963][ T3329] hsr_slave_1: left promiscuous mode
[ 1137.746536][ T3329] veth1_macvtap: left promiscuous mode
[ 1137.748340][ T3329] veth0_macvtap: left promiscuous mode
[ 1137.750109][ T3329] veth1_vlan: left promiscuous mode
[ 1137.751858][ T3329] veth0_vlan: left promiscuous mode
[ 1137.977097][T15672] Bluetooth: hci2: command tx timeout
[ 1138.209369][T10800] overlayfs: failed to clone upperpath
[ 1139.310689][T10798] netlink: 'syz.3.15536': attribute type 5 has an invalid length.
[ 1139.442872][T10829] overlayfs: failed to clone upperpath
[ 1139.955719][ T3329] IPVS: stop unused estimator thread 0...
[ 1140.164021][T10685] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1140.175198][T10685] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1140.184990][T10685] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1140.199170][T15672] Bluetooth: hci2: command tx timeout
[ 1140.205723][T10685] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1140.380546][T10685] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1140.406569][T10685] 8021q: adding VLAN 0 to HW filter on device team0
[ 1140.415026][ T6485] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1140.418458][ T6485] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1140.490317][ T6485] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1140.493351][ T6485] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1141.134812][T10685] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1141.610722][T10685] veth0_vlan: entered promiscuous mode
[ 1141.626042][T10685] veth1_vlan: entered promiscuous mode
[ 1141.657467][T10685] veth0_macvtap: entered promiscuous mode
[ 1141.661857][T10685] veth1_macvtap: entered promiscuous mode
[ 1141.671315][T10685] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1141.684163][T10685] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1141.695482][   T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1141.714326][   T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1141.717266][   T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1141.744427][   T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1141.835123][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1141.838385][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1141.867076][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1141.870386][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1142.295071][T10950] tmpfs: Group quota block hardlimit too large.
[ 1142.348954][T10957] loop7: detected capacity change from 0 to 128
[ 1142.351978][T10957] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1142.367448][T10957] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[ 1142.413113][T15672] Bluetooth: hci2: command tx timeout
[ 1142.434894][ T6455] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[ 1143.256471][T11013] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode balance-xor(2)
[ 1143.527361][T11020] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1144.404366][   T33] kauditd_printk_skb: 58 callbacks suppressed
[ 1144.404382][   T33] audit: type=1326 audit(1107.908:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11033 comm="syz.3.15601" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc8b98ebe9 code=0x7ffc0000
[ 1144.433096][   T33] audit: type=1326 audit(1107.908:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11033 comm="syz.3.15601" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc8b98ebe9 code=0x7ffc0000
[ 1144.452898][   T33] audit: type=1326 audit(1107.908:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11033 comm="syz.3.15601" exe="/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7efc8b98ebe9 code=0x7ffc0000
[ 1144.462937][   T33] audit: type=1326 audit(1107.908:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11033 comm="syz.3.15601" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc8b98ebe9 code=0x7ffc0000
[ 1145.455417][T11070] netlink: 4 bytes leftover after parsing attributes in process `syz.9.15619'.
[ 1145.531954][T11079] overlayfs: failed to clone upperpath
[ 1145.623193][T11084] overlayfs: failed to clone upperpath
[ 1146.533817][T11117] loop7: detected capacity change from 0 to 40427
[ 1146.578648][T11117] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1146.582699][T11117] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[ 1146.609915][T10685] syz-executor: attempt to access beyond end of device
[ 1146.609915][T10685] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[ 1146.615440][T10685] CPU: 1 UID: 0 PID: 10685 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[ 1146.615459][T10685] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1146.615467][T10685] Call Trace:
[ 1146.615473][T10685]  <TASK>
[ 1146.615506][T10685]  dump_stack_lvl+0x189/0x250
[ 1146.615533][T10685]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1146.615548][T10685]  ? __pfx_queue_work_on+0x10/0x10
[ 1146.615562][T10685]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 1146.615579][T10685]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1146.615605][T10685]  f2fs_handle_critical_error+0x37c/0x540
[ 1146.615635][T10685]  f2fs_write_end_io+0x886/0xb60
[ 1146.615663][T10685]  __submit_merged_bio+0x27a/0x6a0
[ 1146.615686][T10685]  __submit_merged_write_cond+0x255/0x530
[ 1146.615710][T10685]  f2fs_write_data_pages+0x261d/0x3000
[ 1146.615758][T10685]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1146.615825][T10685]  ? folios_put_refs+0x559/0x640
[ 1146.615851][T10685]  ? __lock_acquire+0xab9/0xd20
[ 1146.615877][T10685]  ? do_raw_spin_lock+0x121/0x290
[ 1146.615902][T10685]  ? do_raw_spin_unlock+0x4d/0x240
[ 1146.615917][T10685]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1146.615935][T10685]  do_writepages+0x32e/0x550
[ 1146.615961][T10685]  ? do_raw_spin_unlock+0x4d/0x240
[ 1146.615981][T10685]  filemap_fdatawrite+0x199/0x240
[ 1146.615998][T10685]  ? __pfx_filemap_fdatawrite+0x10/0x10
[ 1146.616057][T10685]  ? do_raw_spin_unlock+0x4d/0x240
[ 1146.616076][T10685]  f2fs_sync_dirty_inodes+0x31f/0x830
[ 1146.616102][T10685]  f2fs_write_checkpoint+0x95a/0x1df0
[ 1146.616135][T10685]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[ 1146.616190][T10685]  ? kill_f2fs_super+0x298/0x6c0
[ 1146.616236][T10685]  kill_f2fs_super+0x2c3/0x6c0
[ 1146.616256][T10685]  ? __pfx_kill_f2fs_super+0x10/0x10
[ 1146.616266][T10685]  ? radix_tree_delete_item+0x2b6/0x400
[ 1146.616289][T10685]  ? shrinker_free+0x2ce/0x3e0
[ 1146.616305][T10685]  deactivate_locked_super+0xbc/0x130
[ 1146.616322][T10685]  cleanup_mnt+0x425/0x4c0
[ 1146.616337][T10685]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1146.616357][T10685]  task_work_run+0x1d4/0x260
[ 1146.616376][T10685]  ? __pfx_task_work_run+0x10/0x10
[ 1146.616389][T10685]  ? __x64_sys_umount+0x122/0x160
[ 1146.616409][T10685]  ? exit_to_user_mode_loop+0x40/0x110
[ 1146.616430][T10685]  exit_to_user_mode_loop+0xec/0x110
[ 1146.616447][T10685]  do_syscall_64+0x2bd/0x3b0
[ 1146.616463][T10685]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1146.616504][T10685]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1146.616519][T10685]  ? exc_page_fault+0x9f/0xf0
[ 1146.616537][T10685]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1146.616549][T10685] RIP: 0033:0x7f835158ff17
[ 1146.616563][T10685] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[ 1146.616574][T10685] RSP: 002b:00007ffe847dd858 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 1146.616588][T10685] RAX: 0000000000000000 RBX: 00007f8351611c05 RCX: 00007f835158ff17
[ 1146.616596][T10685] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe847dd910
[ 1146.616605][T10685] RBP: 00007ffe847dd910 R08: 0000000000000000 R09: 0000000000000000
[ 1146.616612][T10685] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe847de9a0
[ 1146.616621][T10685] R13: 00007f8351611c05 R14: 000000000010ef8b R15: 00007ffe847de9e0
[ 1146.616652][T10685]  </TASK>
[ 1146.617668][T10685] F2FS-fs (loop7): Stopped filesystem due to reason: 3
[ 1146.779095][T11137] netlink: 60 bytes leftover after parsing attributes in process `syz.3.15647'.
[ 1146.783217][T11137] netlink: 60 bytes leftover after parsing attributes in process `syz.3.15647'.
[ 1147.098898][T11149] loop7: detected capacity change from 0 to 8
[ 1147.114555][T11149] SQUASHFS error: xz decompression failed, data probably corrupt
[ 1147.125719][T11149] SQUASHFS error: Failed to read block 0x108: -5
[ 1147.129191][T11149] SQUASHFS error: Unable to read metadata cache entry [106]
[ 1147.132268][T11149] SQUASHFS error: Unable to read inode 0x0
[ 1147.519734][T11179] loop7: detected capacity change from 0 to 1024
[ 1147.536986][T11179] EXT4-fs: Ignoring removed nobh option
[ 1147.545373][T11179] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[ 1147.574145][T11179] EXT4-fs error (device loop7): ext4_ext_check_inode:523: inode #11: comm syz.7.15666: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[ 1147.590332][T11179] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.15666: couldn't read orphan inode 11 (err -117)
[ 1147.596978][T11179] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1147.635103][T10685] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1147.932377][T11189] loop7: detected capacity change from 0 to 40427
[ 1147.944273][T11189] F2FS-fs (loop7): Image doesn't support compression
[ 1147.947085][T11189] F2FS-fs (loop7): build fault injection rate: 690
[ 1147.951623][T11189] F2FS-fs (loop7): invalid crc value
[ 1148.006911][T11189] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1148.011006][T11189] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[ 1149.039551][T11215] netlink: 1347 bytes leftover after parsing attributes in process `syz.9.15680'.
[ 1151.928579][T11308] netlink: 'syz.3.15718': attribute type 11 has an invalid length.
[ 1152.509317][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[ 1152.511694][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[ 1152.845031][T11362] netlink: 'syz.3.15743': attribute type 10 has an invalid length.
[ 1152.848724][T11362] netlink: 40 bytes leftover after parsing attributes in process `syz.3.15743'.
[ 1152.854826][T11362] team0: Port device geneve0 added
[ 1152.857380][ T5679] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1152.861149][ T5679] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1153.081197][ T5679] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1153.105695][ T5679] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1153.238332][T11365] IPVS: Scheduler module ip_vs_sip not found
[ 1153.242610][T11365] IPVS: length: 146 != 8
[ 1153.283688][T11368] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method
[ 1153.437149][T11376] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15749'.
[ 1153.515897][T11380] netlink: 28 bytes leftover after parsing attributes in process `syz.3.15751'.
[ 1154.900073][T11443] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15770'.
[ 1156.569441][T11483] loop7: detected capacity change from 0 to 256
[ 1160.502391][T11573] netlink: set zone limit has 4 unknown bytes
[ 1160.865977][T11585] loop7: detected capacity change from 0 to 512
[ 1160.913632][T11585] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1160.952546][T11585] EXT4-fs (loop7): Test dummy encryption mode enabled
[ 1160.978056][T11585] EXT4-fs (loop7): 1 truncate cleaned up
[ 1160.998016][T11585] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1161.286212][T11604] bridge_slave_0: entered promiscuous mode
[ 1161.288955][T11604] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[ 1161.560188][T11610] : entered promiscuous mode
[ 1161.575225][T11610] : left promiscuous mode
[ 1161.711692][T10685] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1161.997251][T11623] netlink: 'syz.7.15845': attribute type 10 has an invalid length.
[ 1162.008879][T11623] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1162.020869][T11623] bond0: (slave batadv0): Enslaving as an active interface with an up link
[ 1162.043989][T11623] netlink: 28 bytes leftover after parsing attributes in process `syz.7.15845'.
[ 1162.047934][T11623] netlink: 32 bytes leftover after parsing attributes in process `syz.7.15845'.
[ 1163.602395][T11641] netlink: 'syz.7.15854': attribute type 178 has an invalid length.
[ 1163.675547][T11645] input: syz0 as /devices/virtual/input/input24
[ 1163.823197][T11649] loop7: detected capacity change from 0 to 2048
[ 1163.845204][T11649] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1164.285032][T11668] netlink: 92 bytes leftover after parsing attributes in process `syz.9.15867'.
[ 1164.469289][T11666] loop7: detected capacity change from 0 to 32768
[ 1164.537049][T11666] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1164.605209][T11666] XFS (loop7): Ending clean mount
[ 1164.611443][T11666] XFS (loop7): Quotacheck needed: Please wait.
[ 1164.688015][T11666] XFS (loop7): Quotacheck: Done.
[ 1164.710708][   T33] audit: type=1800 audit(1126.890:447): pid=11666 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.15866" name="file1" dev="loop7" ino=9286 res=0 errno=0
[ 1164.736517][T10685] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1165.150814][T11725] loop7: detected capacity change from 0 to 8192
[ 1165.393792][T11755] netlink: 68 bytes leftover after parsing attributes in process `syz.7.15904'.
[ 1166.092809][T11765] netlink: 16 bytes leftover after parsing attributes in process `syz.3.15909'.
[ 1166.168775][T11769] syzkaller1: entered promiscuous mode
[ 1166.171332][T11769] syzkaller1: entered allmulticast mode
[ 1166.346161][T11773] netlink: 8 bytes leftover after parsing attributes in process `syz.9.15907'.
[ 1167.513086][T11804] 9pnet_fd: Insufficient options for proto=fd
[ 1168.725394][T11843] dummy0: entered promiscuous mode
[ 1168.738849][T11843] hsr1: Slave A (dummy0) is not up; please bring it up to get a fully working HSR network
[ 1168.745154][T11843] hsr1: Slave B (netdevsim0) is not up; please bring it up to get a fully working HSR network
[ 1168.749822][T11843] hsr1: entered allmulticast mode
[ 1168.752201][T11843] dummy0: entered allmulticast mode
[ 1169.755262][T11864] loop7: detected capacity change from 0 to 8192
[ 1170.080036][T11892] netlink: 8 bytes leftover after parsing attributes in process `syz.7.15963'.
[ 1170.139545][T11898] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1170.256676][T11910] loop7: detected capacity change from 0 to 1764
[ 1170.268834][T11910] ISOFS: Bad logical zone size 23846
[ 1170.744198][T11933] loop7: detected capacity change from 0 to 2048
[ 1170.748016][T11933] EXT4-fs: Ignoring removed bh option
[ 1170.787631][T11933] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1170.834237][T10685] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1171.177602][   T33] audit: type=1326 audit(1132.943:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11949 comm="syz.9.15989" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2718ebe9 code=0x7ffc0000
[ 1171.180818][T11948] loop7: detected capacity change from 0 to 4096
[ 1171.193134][T11948] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512).
[ 1171.208630][   T33] audit: type=1326 audit(1132.943:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11949 comm="syz.9.15989" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2718ebe9 code=0x7ffc0000
[ 1171.215516][T11948] ntfs3(loop7): Mark volume as dirty due to NTFS errors
[ 1171.231390][T11948] ntfs3(loop7): Failed to load $Extend (-22).
[ 1171.234045][T11948] ntfs3(loop7): Failed to initialize $Extend.
[ 1171.240631][   T33] audit: type=1326 audit(1132.962:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11949 comm="syz.9.15989" exe="/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7f7c2718ebe9 code=0x7ffc0000
[ 1171.260905][   T33] audit: type=1326 audit(1132.962:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11949 comm="syz.9.15989" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2718ebe9 code=0x7ffc0000
[ 1171.309632][   T33] audit: type=1326 audit(1132.962:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11949 comm="syz.9.15989" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2718ebe9 code=0x7ffc0000
[ 1174.243711][T12028] loop7: detected capacity change from 0 to 512
[ 1174.263536][T12028] UDF-fs: warning (device loop7): udf_load_vrs: No VRS found
[ 1174.268623][T12028] UDF-fs: Scanning with blocksize 512 failed
[ 1174.273226][T12028] UDF-fs: warning (device loop7): udf_load_vrs: No VRS found
[ 1174.276413][T12028] UDF-fs: Scanning with blocksize 1024 failed
[ 1174.279689][T12028] UDF-fs: warning (device loop7): udf_load_vrs: No VRS found
[ 1174.282701][T12028] UDF-fs: Scanning with blocksize 2048 failed
[ 1174.285869][T12028] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256
[ 1174.292850][T12028] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1174.316106][T12028] [syz.7.16024/12028] FS: loop7 File: /blkio.bfq.io_service_bytes would truncate fibmap result
[ 1174.415486][T12030] loop7: detected capacity change from 0 to 1764
[ 1174.632978][T12042] tipc: Cannot configure node identity twice
[ 1174.635834][T12042] tipc: Cannot configure node identity twice
[ 1174.698722][T12044] loop7: detected capacity change from 0 to 64
[ 1177.016249][T12115] ubi7: attaching mtd0
[ 1177.023333][T12115] ubi7: scanning is finished
[ 1177.028970][T12115] ubi7: empty MTD device detected
[ 1177.104808][T12115] ubi7: attached mtd0 (name "mtdram test device", size 0 MiB)
[ 1177.110027][T12115] ubi7: PEB size: 4096 bytes (4 KiB), LEB size: 3519 bytes
[ 1177.114180][T12115] ubi7: min./max. I/O unit sizes: 1/64, sub-page size 1
[ 1177.117275][T12115] ubi7: VID header offset: 513 (aligned 513), data offset: 577
[ 1177.123909][T12115] ubi7: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[ 1177.126124][T12115] ubi7: user volume: 0, internal volumes: 1, max. volumes count: 20
[ 1177.130353][T12115] ubi7: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1895797411
[ 1177.134978][T12115] ubi7: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[ 1177.145935][T12121] ubi7: background thread "ubi_bgt7d" started, PID 12121
[ 1177.305983][T12129] loop7: detected capacity change from 0 to 8192
[ 1177.347951][T12129] NILFS (loop7): unsupported revision (superblock rev.=0.0, current rev.=2.0). Please check the version of mkfs.nilfs(2).
[ 1177.947951][T12150] sp0: Synchronizing with TNC
[ 1179.219530][T12167] [U] 
[ 1179.564792][T12233] loop7: detected capacity change from 0 to 512
[ 1179.568304][T12233] EXT4-fs: Ignoring removed bh option
[ 1179.573652][T12233] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem
[ 1179.595273][T12233] EXT4-fs (loop7): 1 truncate cleaned up
[ 1179.609181][T12233] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1180.183867][T12253] futex_wake_op: syz.3.16125 tries to shift op by 32; fix this program
[ 1180.538701][T10685] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1180.686185][T12273] autofs: Bad value for 'fd'
[ 1180.985659][T12272] loop7: detected capacity change from 0 to 40427
[ 1181.011431][T12272] F2FS-fs (loop7): invalid crc value
[ 1181.067063][T12272] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1181.071410][T12272] F2FS-fs (loop7): Start checkpoint disabled!
[ 1181.079089][T12272] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6
[ 1181.132040][T12272] syz.7.16134: attempt to access beyond end of device
[ 1181.132040][T12272] loop7: rw=2049, sector=77824, nr_sectors = 136 limit=40427
[ 1181.157806][T12272] syz.7.16134: attempt to access beyond end of device
[ 1181.157806][T12272] loop7: rw=2049, sector=45096, nr_sectors = 128 limit=40427
[ 1181.180288][T12272] syz.7.16134: attempt to access beyond end of device
[ 1181.180288][T12272] loop7: rw=2049, sector=45224, nr_sectors = 128 limit=40427
[ 1181.189011][T12272] syz.7.16134: attempt to access beyond end of device
[ 1181.189011][T12272] loop7: rw=2049, sector=45352, nr_sectors = 128 limit=40427
[ 1181.201804][T12272] syz.7.16134: attempt to access beyond end of device
[ 1181.201804][T12272] loop7: rw=2049, sector=45480, nr_sectors = 128 limit=40427
[ 1181.213562][T12272] syz.7.16134: attempt to access beyond end of device
[ 1181.213562][T12272] loop7: rw=2049, sector=45608, nr_sectors = 128 limit=40427
[ 1181.228875][T12272] syz.7.16134: attempt to access beyond end of device
[ 1181.228875][T12272] loop7: rw=2049, sector=45736, nr_sectors = 128 limit=40427
[ 1181.782741][T12272] syz.7.16134: attempt to access beyond end of device
[ 1181.782741][T12272] loop7: rw=2049, sector=45864, nr_sectors = 128 limit=40427
[ 1181.795495][T12272] syz.7.16134: attempt to access beyond end of device
[ 1181.795495][T12272] loop7: rw=2049, sector=45992, nr_sectors = 128 limit=40427
[ 1181.804538][T12272] syz.7.16134: attempt to access beyond end of device
[ 1181.804538][T12272] loop7: rw=2049, sector=46120, nr_sectors = 128 limit=40427
[ 1182.330296][ T6410] CPU: 1 UID: 0 PID: 6410 Comm: kworker/u10:11 Not tainted syzkaller #0 PREEMPT(full) 
[ 1182.330318][ T6410] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1182.330324][ T6410] Workqueue: writeback wb_workfn (flush-7:7)
[ 1182.330340][ T6410] Call Trace:
[ 1182.330344][ T6410]  <TASK>
[ 1182.330349][ T6410]  dump_stack_lvl+0x189/0x250
[ 1182.330363][ T6410]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1182.330371][ T6410]  ? __pfx_queue_work_on+0x10/0x10
[ 1182.330380][ T6410]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 1182.330391][ T6410]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1182.330406][ T6410]  f2fs_handle_critical_error+0x37c/0x540
[ 1182.330420][ T6410]  f2fs_write_end_io+0x886/0xb60
[ 1182.330436][ T6410]  __submit_merged_bio+0x27a/0x6a0
[ 1182.330474][ T6410]  __submit_merged_write_cond+0x255/0x530
[ 1182.330487][ T6410]  f2fs_write_data_pages+0x261d/0x3000
[ 1182.330513][ T6410]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1182.330530][ T6410]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[ 1182.330553][ T6410]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[ 1182.330569][ T6410]  ? trace_f2fs_writepages+0x7f/0x200
[ 1182.330580][ T6410]  ? f2fs_write_node_pages+0x478/0x6e0
[ 1182.330592][ T6410]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[ 1182.330607][ T6410]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1182.330618][ T6410]  do_writepages+0x32e/0x550
[ 1182.330631][ T6410]  ? reacquire_held_locks+0x127/0x1d0
[ 1182.330639][ T6410]  ? writeback_sb_inodes+0x384/0x1010
[ 1182.330652][ T6410]  __writeback_single_inode+0x145/0xff0
[ 1182.330661][ T6410]  ? do_raw_spin_unlock+0x4d/0x240
[ 1182.330672][ T6410]  writeback_sb_inodes+0x6c7/0x1010
[ 1182.330693][ T6410]  ? __pfx_writeback_sb_inodes+0x10/0x10
[ 1182.330721][ T6410]  ? rcu_is_watching+0x15/0xb0
[ 1182.330734][ T6410]  wb_writeback+0x43b/0xaf0
[ 1182.330746][ T6410]  ? queue_io+0x361/0x590
[ 1182.330757][ T6410]  ? __pfx_wb_writeback+0x10/0x10
[ 1182.330769][ T6410]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1182.330781][ T6410]  wb_workfn+0x409/0xef0
[ 1182.330796][ T6410]  ? __pfx_wb_workfn+0x10/0x10
[ 1182.330806][ T6410]  ? __lock_acquire+0xab9/0xd20
[ 1182.330822][ T6410]  ? process_scheduled_works+0x9ef/0x17b0
[ 1182.330832][ T6410]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1182.330840][ T6410]  ? process_scheduled_works+0x9ef/0x17b0
[ 1182.330847][ T6410]  ? process_scheduled_works+0x9ef/0x17b0
[ 1182.330855][ T6410]  process_scheduled_works+0xae1/0x17b0
[ 1182.330875][ T6410]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1182.330890][ T6410]  worker_thread+0x8a0/0xda0
[ 1182.330910][ T6410]  kthread+0x711/0x8a0
[ 1182.330921][ T6410]  ? __pfx_worker_thread+0x10/0x10
[ 1182.330928][ T6410]  ? __pfx_kthread+0x10/0x10
[ 1182.330942][ T6410]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1182.330950][ T6410]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1182.330961][ T6410]  ? __pfx_kthread+0x10/0x10
[ 1182.330970][ T6410]  ret_from_fork+0x3fc/0x770
[ 1182.330980][ T6410]  ? __pfx_ret_from_fork+0x10/0x10
[ 1182.330990][ T6410]  ? __switch_to_asm+0x39/0x70
[ 1182.330999][ T6410]  ? __switch_to_asm+0x33/0x70
[ 1182.331007][ T6410]  ? __pfx_kthread+0x10/0x10
[ 1182.331015][ T6410]  ret_from_fork_asm+0x1a/0x30
[ 1182.331032][ T6410]  </TASK>
[ 1182.331036][ T6410] F2FS-fs (loop7): Stopped filesystem due to reason: 3
[ 1182.758302][T12316] netlink: 24 bytes leftover after parsing attributes in process `syz.9.16151'.
[ 1183.143485][T12324] loop7: detected capacity change from 0 to 32768
[ 1183.294016][T12324] bcachefs (loop7): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[ 1183.294040][T12324]   allowing incompatible features above 0.0: (unknown version)
[ 1183.294050][T12324]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[ 1183.310358][T12324] bcachefs (loop7): Using encoding defined by superblock: utf8-12.1.0
[ 1183.313731][T12324] bcachefs (loop7): initializing new filesystem
[ 1183.323420][T12324] bcachefs (loop7): going read-write
[ 1183.371831][T12324] bcachefs (loop7): marking superblocks
[ 1183.379507][T12324] bcachefs (loop7): initializing freespace
[ 1183.385403][T12324] bcachefs (loop7): done initializing freespace
[ 1183.389883][T12324] bcachefs (loop7): reading snapshots table
[ 1183.392491][T12324] bcachefs (loop7): reading snapshots done
[ 1183.455945][T12324] bcachefs (loop7): done starting filesystem
[ 1184.139963][T12349] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1184.513916][T10685] bcachefs (loop7): shutting down
[ 1184.516405][T10685] bcachefs (loop7): going read-only
[ 1184.524105][T10685] bcachefs (loop7): finished waiting for writes to stop
[ 1184.534622][T10685] bcachefs (loop7): flushing journal and stopping allocators, journal seq 3
[ 1184.674055][T10685] bcachefs (loop7): flushing journal and stopping allocators complete, journal seq 4
[ 1184.682116][T10685] bcachefs (loop7): clean shutdown complete, journal seq 5
[ 1184.686037][T10685] bcachefs (loop7): marking filesystem clean
[ 1184.715305][T10685] bcachefs (loop7): shutdown complete
[ 1185.586774][   T33] audit: type=1326 audit(1146.424:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12367 comm="syz.9.16165" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2718ebe9 code=0x7ffc0000
[ 1185.630127][   T33] audit: type=1326 audit(1146.424:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12367 comm="syz.9.16165" exe="/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f7c2718ebe9 code=0x7ffc0000
[ 1185.672552][   T33] audit: type=1326 audit(1146.461:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12367 comm="syz.9.16165" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2718ebe9 code=0x7ffc0000
[ 1185.697600][   T33] audit: type=1326 audit(1146.461:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12370 comm="syz.9.16165" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7c271c14a5 code=0x7ffc0000
[ 1185.709007][   T33] audit: type=1326 audit(1146.461:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12367 comm="syz.9.16165" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2718ebe9 code=0x7ffc0000
[ 1185.718259][   T33] audit: type=1326 audit(1146.517:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12367 comm="syz.9.16165" exe="/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f7c2718ebe9 code=0x7ffc0000
[ 1185.737592][   T33] audit: type=1326 audit(1146.517:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12367 comm="syz.9.16165" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2718ebe9 code=0x7ffc0000
[ 1185.749965][   T33] audit: type=1326 audit(1146.517:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12367 comm="syz.9.16165" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2718ebe9 code=0x7ffc0000
[ 1185.760329][   T33] audit: type=1326 audit(1146.517:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12367 comm="syz.9.16165" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7c2718ebe9 code=0x7ffc0000
[ 1185.771413][   T33] audit: type=1326 audit(1146.517:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12367 comm="syz.9.16165" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2718ebe9 code=0x7ffc0000
[ 1186.532609][T12401] netlink: 277 bytes leftover after parsing attributes in process `syz.9.16179'.
[ 1187.121072][T12437] netlink: 148 bytes leftover after parsing attributes in process `syz.9.16196'.
[ 1187.145195][T12437] netlink: 148 bytes leftover after parsing attributes in process `syz.9.16196'.
[ 1187.222043][T12442] netlink: 24 bytes leftover after parsing attributes in process `syz.9.16198'.
[ 1187.226035][T12442] netlink: 24 bytes leftover after parsing attributes in process `syz.9.16198'.
[ 1188.543602][T12476] netlink: 'syz.9.16214': attribute type 10 has an invalid length.
[ 1188.547006][T12476] hsr0: entered promiscuous mode
[ 1188.551425][T12476] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[ 1188.555889][T12476] hsr0: mtu greater than device maximum
[ 1188.559634][T12476] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[ 1188.666655][T12477] netlink: 28 bytes leftover after parsing attributes in process `syz.3.16213'.
[ 1189.545223][T12487] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1192.987549][T12561] netlink: 88 bytes leftover after parsing attributes in process `syz.3.16252'.
[ 1193.538338][T12569] IPv6: NLM_F_CREATE should be specified when creating new route
[ 1194.086235][T12581] netlink: 'syz.9.16262': attribute type 10 has an invalid length.
[ 1194.092393][T12581] 8021q: adding VLAN 0 to HW filter on device team0
[ 1194.098865][T12581] team0: entered allmulticast mode
[ 1194.101548][T12581] bond0: (slave team0): Enslaving as an active interface with an up link
[ 1194.226584][T12587] netlink: 'syz.9.16265': attribute type 1 has an invalid length.
[ 1194.664719][T12592] overlayfs: failed to clone upperpath
[ 1194.989138][T12600] can: request_module (can-proto-0) failed.
[ 1195.492720][   T13] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1195.598251][   T13] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1195.764481][   T13] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1195.816103][T12638] netlink: 4 bytes leftover after parsing attributes in process `syz.9.16289'.
[ 1195.832769][T12638] geneve3: entered promiscuous mode
[ 1195.835005][T12638] geneve3: entered allmulticast mode
[ 1195.933047][ T5853] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1195.950173][   T13] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1195.954071][ T5853] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1195.959137][ T5853] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1195.964711][ T5853] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1195.969954][ T5853] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1195.983515][ T5888] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 48452 - 0
[ 1195.987257][ T5888] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 48452 - 0
[ 1196.010646][ T5888] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 48452 - 0
[ 1196.032805][T12641] lo speed is unknown, defaulting to 1000
[ 1196.208385][   T13] bridge_slave_1: left allmulticast mode
[ 1196.210463][   T13] bridge_slave_1: left promiscuous mode
[ 1196.223450][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1196.227489][   T13] bridge_slave_0: left allmulticast mode
[ 1196.229862][   T13] bridge_slave_0: left promiscuous mode
[ 1196.233018][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1196.907512][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1196.913705][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1196.920664][   T13] bond0 (unregistering): (slave batadv0): Releasing backup interface
[ 1196.928832][   T13] bond0 (unregistering): Released all slaves
[ 1196.946882][T12641] chnl_net:caif_netlink_parms(): no params data found
[ 1197.213724][T12641] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1197.217165][T12641] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1197.219849][T12641] bridge_slave_0: entered allmulticast mode
[ 1197.223566][T12641] bridge_slave_0: entered promiscuous mode
[ 1197.226921][T12641] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1197.232735][T12641] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1197.235595][T12641] bridge_slave_1: entered allmulticast mode
[ 1197.239721][T12641] bridge_slave_1: entered promiscuous mode
[ 1197.291068][T12641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1197.299022][T12641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1197.309790][   T13] hsr_slave_0: left promiscuous mode
[ 1197.312462][   T13] hsr_slave_1: left promiscuous mode
[ 1197.317855][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1197.320521][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1197.324323][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1197.327227][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1197.350613][   T13] veth1_macvtap: left promiscuous mode
[ 1197.352668][   T13] veth0_macvtap: left promiscuous mode
[ 1197.354613][   T13] veth1_vlan: left promiscuous mode
[ 1197.356987][   T13] veth0_vlan: left promiscuous mode
[ 1197.537127][T12678] netlink: 248 bytes leftover after parsing attributes in process `syz.3.16302'.
[ 1197.541042][T12678] netlink: 156 bytes leftover after parsing attributes in process `syz.3.16302'.
[ 1198.168048][ T5853] Bluetooth: hci2: command tx timeout
[ 1198.259146][T28237] kernel write not supported for file bpf-prog (pid: 28237 comm: kworker/1:4)
[ 1198.365488][   T13] team0 (unregistering): Port device team_slave_1 removed
[ 1198.459923][   T13] team0 (unregistering): Port device team_slave_0 removed
[ 1199.861737][T12641] team0: Port device team_slave_0 added
[ 1199.866210][T12641] team0: Port device team_slave_1 added
[ 1199.997410][T12641] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1200.004069][T12641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1200.026109][T12641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1200.059605][T12641] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1200.066721][T12641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1200.092685][T12641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1200.299085][T12641] hsr_slave_0: entered promiscuous mode
[ 1200.302245][T12641] hsr_slave_1: entered promiscuous mode
[ 1200.305185][T12641] debugfs: 'hsr0' already exists in 'hsr'
[ 1200.316877][T12641] Cannot create hsr debugfs directory
[ 1200.393894][ T5853] Bluetooth: hci2: command tx timeout
[ 1201.365950][   T33] kauditd_printk_skb: 28 callbacks suppressed
[ 1201.365963][   T33] audit: type=1326 audit(1161.186:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12810 comm="syz.3.16354" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efc8b98ebe9 code=0x0
[ 1201.421444][T12641] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 1201.430413][T12641] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 1201.436518][T12641] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 1201.454385][T12641] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 1201.815701][T12641] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1201.837984][T12641] 8021q: adding VLAN 0 to HW filter on device team0
[ 1201.844835][T20756] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1201.847551][T20756] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1201.864498][T20756] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1201.867120][T20756] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1202.022163][T12641] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1202.283945][T12853] netlink: 36 bytes leftover after parsing attributes in process `syz.3.16356'.
[ 1202.286998][T12853] netlink: 16 bytes leftover after parsing attributes in process `syz.3.16356'.
[ 1202.302729][T12641] veth0_vlan: entered promiscuous mode
[ 1202.314842][T12641] veth1_vlan: entered promiscuous mode
[ 1202.367516][T12641] veth0_macvtap: entered promiscuous mode
[ 1202.381487][T12641] veth1_macvtap: entered promiscuous mode
[ 1202.414192][T12641] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1202.419237][T12641] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1202.436161][ T5888] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1202.439071][ T5888] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1202.442086][ T5888] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1202.466920][ T5888] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1202.583175][ T6445] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1202.586638][ T6445] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1202.614976][ T5853] Bluetooth: hci2: command tx timeout
[ 1202.644637][ T6445] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1202.657670][ T6445] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1203.183613][T12920] netlink: 'syz.3.16376': attribute type 8 has an invalid length.
[ 1204.839331][ T5853] Bluetooth: hci2: command tx timeout
[ 1205.639170][T12999] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16400'.
[ 1205.643261][T12999] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16400'.
[ 1206.252503][T13014] loop6: detected capacity change from 0 to 32768
[ 1206.255930][T13014] XFS: ikeep mount option is deprecated.
[ 1206.268641][T13014] XFS: ikeep mount option is deprecated.
[ 1206.279006][T13014] XFS: noikeep mount option is deprecated.
[ 1206.309502][T13014] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1206.334239][T13014] XFS (loop6): Ending clean mount
[ 1206.350372][   T33] audit: type=1800 audit(1165.854:492): pid=13014 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.16407" name="file1" dev="loop6" ino=9286 res=0 errno=0
[ 1206.408313][T12641] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1206.533785][T13038] IPv6: NLM_F_CREATE should be specified when creating new route
[ 1210.960114][T13169] loop6: detected capacity change from 0 to 40427
[ 1210.975769][T13169] F2FS-fs (loop6): build fault injection rate: 771
[ 1210.999525][T13169] F2FS-fs (loop6): invalid crc value
[ 1211.065224][T13169] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1211.072779][T13169] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[ 1211.123481][T12641] bio_check_eod: 9 callbacks suppressed
[ 1211.123504][T12641] syz-executor: attempt to access beyond end of device
[ 1211.123504][T12641] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[ 1211.131925][T12641] CPU: 0 UID: 0 PID: 12641 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[ 1211.131943][T12641] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1211.131951][T12641] Call Trace:
[ 1211.131957][T12641]  <TASK>
[ 1211.131963][T12641]  dump_stack_lvl+0x189/0x250
[ 1211.131986][T12641]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1211.132000][T12641]  ? __pfx_queue_work_on+0x10/0x10
[ 1211.132013][T12641]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 1211.132028][T12641]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1211.132051][T12641]  f2fs_handle_critical_error+0x37c/0x540
[ 1211.132073][T12641]  f2fs_write_end_io+0x886/0xb60
[ 1211.132097][T12641]  __submit_merged_bio+0x27a/0x6a0
[ 1211.132111][T12641]  __submit_merged_write_cond+0x255/0x530
[ 1211.132123][T12641]  f2fs_write_data_pages+0x261d/0x3000
[ 1211.132149][T12641]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1211.132166][T12641]  ? kernel_text_address+0xa5/0xe0
[ 1211.132190][T12641]  ? stack_depot_save_flags+0x40/0x860
[ 1211.132210][T12641]  ? __lock_acquire+0xab9/0xd20
[ 1211.132225][T12641]  ? do_raw_spin_lock+0x121/0x290
[ 1211.132244][T12641]  ? do_raw_spin_unlock+0x4d/0x240
[ 1211.132257][T12641]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1211.132272][T12641]  do_writepages+0x32e/0x550
[ 1211.132298][T12641]  ? do_raw_spin_unlock+0x4d/0x240
[ 1211.132315][T12641]  filemap_fdatawrite+0x199/0x240
[ 1211.132332][T12641]  ? __pfx_filemap_fdatawrite+0x10/0x10
[ 1211.132382][T12641]  ? do_raw_spin_unlock+0x4d/0x240
[ 1211.132400][T12641]  f2fs_sync_dirty_inodes+0x31f/0x830
[ 1211.132451][T12641]  f2fs_write_checkpoint+0x95a/0x1df0
[ 1211.132485][T12641]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[ 1211.132541][T12641]  ? f2fs_stop_gc_thread+0x7f/0xb0
[ 1211.132554][T12641]  ? kfree+0x18e/0x440
[ 1211.132570][T12641]  ? kill_f2fs_super+0x298/0x6c0
[ 1211.132588][T12641]  kill_f2fs_super+0x2c3/0x6c0
[ 1211.132606][T12641]  ? __pfx_kill_f2fs_super+0x10/0x10
[ 1211.132617][T12641]  ? radix_tree_delete_item+0x2b6/0x400
[ 1211.132639][T12641]  ? shrinker_free+0x2ce/0x3e0
[ 1211.132655][T12641]  deactivate_locked_super+0xbc/0x130
[ 1211.132671][T12641]  cleanup_mnt+0x425/0x4c0
[ 1211.132684][T12641]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1211.132701][T12641]  task_work_run+0x1d4/0x260
[ 1211.132719][T12641]  ? __pfx_task_work_run+0x10/0x10
[ 1211.132733][T12641]  ? __x64_sys_umount+0x122/0x160
[ 1211.132753][T12641]  ? exit_to_user_mode_loop+0x40/0x110
[ 1211.132775][T12641]  exit_to_user_mode_loop+0xec/0x110
[ 1211.132793][T12641]  do_syscall_64+0x2bd/0x3b0
[ 1211.132811][T12641]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1211.132827][T12641]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1211.132839][T12641]  ? exc_page_fault+0x9f/0xf0
[ 1211.132858][T12641]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1211.132870][T12641] RIP: 0033:0x7fa2f9b8ff17
[ 1211.132904][T12641] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[ 1211.132915][T12641] RSP: 002b:00007ffd65bc4e18 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 1211.132929][T12641] RAX: 0000000000000000 RBX: 00007fa2f9c11c05 RCX: 00007fa2f9b8ff17
[ 1211.132937][T12641] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd65bc4ed0
[ 1211.132945][T12641] RBP: 00007ffd65bc4ed0 R08: 0000000000000000 R09: 0000000000000000
[ 1211.132953][T12641] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd65bc5f60
[ 1211.132961][T12641] R13: 00007fa2f9c11c05 R14: 000000000011db46 R15: 00007ffd65bc5fa0
[ 1211.132986][T12641]  </TASK>
[ 1211.272239][T12641] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[ 1212.399700][T13229] loop6: detected capacity change from 0 to 512
[ 1212.428365][T13229] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1212.494740][T12641] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1214.238628][T13275] loop6: detected capacity change from 0 to 40427
[ 1214.243636][T13275] F2FS-fs (loop6): invalid crc value
[ 1214.339044][T13275] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1214.348581][T13275] F2FS-fs (loop6): Start checkpoint disabled!
[ 1214.357947][T13275] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6
[ 1214.548876][ T6410] kworker/u10:11: attempt to access beyond end of device
[ 1214.548876][ T6410] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[ 1214.576143][ T6410] CPU: 1 UID: 0 PID: 6410 Comm: kworker/u10:11 Not tainted syzkaller #0 PREEMPT(full) 
[ 1214.576167][ T6410] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1214.576176][ T6410] Workqueue: writeback wb_workfn (flush-7:6)
[ 1214.576201][ T6410] Call Trace:
[ 1214.576207][ T6410]  <TASK>
[ 1214.576214][ T6410]  dump_stack_lvl+0x189/0x250
[ 1214.576236][ T6410]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1214.576251][ T6410]  ? __pfx_queue_work_on+0x10/0x10
[ 1214.576263][ T6410]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 1214.576282][ T6410]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1214.576308][ T6410]  f2fs_handle_critical_error+0x37c/0x540
[ 1214.576332][ T6410]  f2fs_write_end_io+0x886/0xb60
[ 1214.576366][ T6410]  __submit_merged_bio+0x27a/0x6a0
[ 1214.576390][ T6410]  __submit_merged_write_cond+0x255/0x530
[ 1214.576442][ T6410]  f2fs_write_data_pages+0x261d/0x3000
[ 1214.576490][ T6410]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1214.576520][ T6410]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[ 1214.576561][ T6410]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[ 1214.576579][ T6410]  ? look_up_lock_class+0x74/0x170
[ 1214.576604][ T6410]  ? trace_f2fs_writepages+0x7f/0x200
[ 1214.576623][ T6410]  ? f2fs_write_node_pages+0x478/0x6e0
[ 1214.576642][ T6410]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[ 1214.576670][ T6410]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1214.576687][ T6410]  do_writepages+0x32e/0x550
[ 1214.576710][ T6410]  ? reacquire_held_locks+0x127/0x1d0
[ 1214.576723][ T6410]  ? writeback_sb_inodes+0x384/0x1010
[ 1214.576746][ T6410]  __writeback_single_inode+0x145/0xff0
[ 1214.576762][ T6410]  ? do_raw_spin_unlock+0x4d/0x240
[ 1214.576780][ T6410]  writeback_sb_inodes+0x6c7/0x1010
[ 1214.576816][ T6410]  ? __pfx_writeback_sb_inodes+0x10/0x10
[ 1214.576866][ T6410]  ? rcu_is_watching+0x15/0xb0
[ 1214.576890][ T6410]  wb_writeback+0x43b/0xaf0
[ 1214.576910][ T6410]  ? queue_io+0x361/0x590
[ 1214.576927][ T6410]  ? __pfx_wb_writeback+0x10/0x10
[ 1214.576950][ T6410]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1214.576969][ T6410]  wb_workfn+0x409/0xef0
[ 1214.576994][ T6410]  ? __pfx_wb_workfn+0x10/0x10
[ 1214.577012][ T6410]  ? __lock_acquire+0xab9/0xd20
[ 1214.577038][ T6410]  ? process_scheduled_works+0x9ef/0x17b0
[ 1214.577057][ T6410]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1214.577071][ T6410]  ? process_scheduled_works+0x9ef/0x17b0
[ 1214.577081][ T6410]  ? process_scheduled_works+0x9ef/0x17b0
[ 1214.577094][ T6410]  process_scheduled_works+0xae1/0x17b0
[ 1214.577130][ T6410]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1214.577157][ T6410]  worker_thread+0x8a0/0xda0
[ 1214.577195][ T6410]  kthread+0x711/0x8a0
[ 1214.577214][ T6410]  ? __pfx_worker_thread+0x10/0x10
[ 1214.577226][ T6410]  ? __pfx_kthread+0x10/0x10
[ 1214.577241][ T6410]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1214.577255][ T6410]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1214.577270][ T6410]  ? __pfx_kthread+0x10/0x10
[ 1214.577284][ T6410]  ret_from_fork+0x3fc/0x770
[ 1214.577301][ T6410]  ? __pfx_ret_from_fork+0x10/0x10
[ 1214.577318][ T6410]  ? __switch_to_asm+0x39/0x70
[ 1214.577333][ T6410]  ? __switch_to_asm+0x33/0x70
[ 1214.577352][ T6410]  ? __pfx_kthread+0x10/0x10
[ 1214.577367][ T6410]  ret_from_fork_asm+0x1a/0x30
[ 1214.577396][ T6410]  </TASK>
[ 1214.577426][ T6410] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[ 1214.795324][T13311] netlink: 'syz.9.16531': attribute type 3 has an invalid length.
[ 1214.798774][T13311] netlink: 'syz.9.16531': attribute type 1 has an invalid length.
[ 1214.802224][T13311] netlink: 193500 bytes leftover after parsing attributes in process `syz.9.16531'.
[ 1215.461181][T13317] loop6: detected capacity change from 0 to 32768
[ 1215.476688][T13329] netlink: 'syz.3.16540': attribute type 6 has an invalid length.
[ 1215.479434][T13329] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.16540'.
[ 1215.507908][T13317] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1215.536467][T13339] tmpfs: Bad value for 'mpol'
[ 1215.539237][T13317] XFS (loop6): Ending clean mount
[ 1215.543608][T13317] XFS (loop6): Quotacheck needed: Please wait.
[ 1215.618482][T13317] XFS (loop6): Quotacheck: Done.
[ 1215.727905][T12641] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1216.111237][T11344] tipc: Subscription rejected, illegal request
[ 1216.208488][T13380] overlayfs: failed to clone upperpath
[ 1216.211045][T13382] lo: entered promiscuous mode
[ 1216.213802][T13382] lo: entered allmulticast mode
[ 1216.218144][T13378] loop6: detected capacity change from 0 to 4096
[ 1216.246543][T13378] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[ 1216.266766][T13378] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1216.280993][T13378] EXT4-fs (loop6): shut down requested (2)
[ 1216.314766][T12641] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1216.968601][T13414] smb3: Unexpected value for 'rdma'
[ 1217.493752][T13431] loop6: detected capacity change from 0 to 512
[ 1217.500661][T13431] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 1217.554367][T13431] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1217.598764][T12641] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1218.181253][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[ 1218.183535][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[ 1218.656955][T13437] loop6: detected capacity change from 0 to 262144
[ 1218.680841][T13437] F2FS-fs (loop6): invalid crc value
[ 1218.737210][T13437] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1218.742327][T13437] F2FS-fs (loop6): Start checkpoint disabled!
[ 1218.746957][T13437] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[ 1218.770264][   T33] audit: type=1800 audit(1177.473:493): pid=13437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.16580" name="file1" dev="loop6" ino=7 res=0 errno=0
[ 1219.410362][T13477] netlink: 28 bytes leftover after parsing attributes in process `syz.9.16597'.
[ 1220.087922][T13507] netlink: 96 bytes leftover after parsing attributes in process `syz.9.16610'.
[ 1220.242703][T13499] loop6: detected capacity change from 0 to 32768
[ 1220.367334][T13499] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1220.432257][T13499] XFS (loop6): Ending clean mount
[ 1220.451102][   T33] audit: type=1800 audit(1179.045:494): pid=13499 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.16606" name="file1" dev="loop6" ino=6150 res=0 errno=0
[ 1220.494297][T13499] Direct I/O collision with buffered writes! File: /file1 Comm: syz.6.16606
[ 1220.572019][T12641] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1220.903907][T13530] netlink: 'syz.3.16615': attribute type 3 has an invalid length.
[ 1220.909227][T13530] netlink: 'syz.3.16615': attribute type 3 has an invalid length.
[ 1220.964733][T13533] netlink: 16 bytes leftover after parsing attributes in process `syz.3.16617'.
[ 1221.162688][T13525] overlay: ./file0 is not a directory
[ 1221.869001][T13591] fuse: Bad value for 'fd'
[ 1222.489519][T13609] netlink: 96 bytes leftover after parsing attributes in process `syz.3.16650'.
[ 1222.683963][T13624] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16657'.
[ 1223.101299][T13630] loop6: detected capacity change from 0 to 32768
[ 1223.110644][T13630] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.16660 (13630)
[ 1223.138770][T13630] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1223.149774][T13630] BTRFS info (device loop6): using sha256 (sha256-lib) checksum algorithm
[ 1223.234572][T13630] BTRFS info (device loop6): enabling ssd optimizations
[ 1223.237269][T13630] BTRFS info (device loop6): enabling free space tree
[ 1223.260360][T12641] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1227.054317][T13747] loop6: detected capacity change from 0 to 1024
[ 1227.652967][ T6445] hfsplus: b-tree write err: -5, ino 4
[ 1227.952754][T13794] 9pnet_fd: Insufficient options for proto=fd
[ 1228.265421][T13804] usb usb8: usbfs: process 13804 (syz.6.16734) did not claim interface 0 before use
[ 1228.639640][T13816] loop6: detected capacity change from 0 to 32768
[ 1228.658159][T13816] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1228.682363][T13816] XFS (loop6): Ending clean mount
[ 1228.691481][T13816] XFS (loop6): Quotacheck needed: Please wait.
[ 1228.748675][T13816] XFS (loop6): Quotacheck: Done.
[ 1228.788994][T12641] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1230.031908][T13846] netlink: 20 bytes leftover after parsing attributes in process `syz.6.16749'.
[ 1230.842888][T13863] loop6: detected capacity change from 0 to 32768
[ 1230.857065][T13863] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1230.879195][T13863] XFS (loop6): Ending clean mount
[ 1230.883901][T13863] XFS (loop6): Quotacheck needed: Please wait.
[ 1230.931677][T13863] XFS (loop6): Quotacheck: Done.
[ 1230.993233][T12641] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1234.174476][T13991] netlink: 24 bytes leftover after parsing attributes in process `syz.9.16810'.
[ 1234.179811][T13993] netlink: 432 bytes leftover after parsing attributes in process `syz.3.16811'.
[ 1234.280895][T13999] netlink: 28 bytes leftover after parsing attributes in process `syz.9.16814'.
[ 1234.283784][T13999] netlink: 'syz.9.16814': attribute type 7 has an invalid length.
[ 1234.286843][T13999] netlink: 'syz.9.16814': attribute type 8 has an invalid length.
[ 1234.295531][T13999] netlink: 4 bytes leftover after parsing attributes in process `syz.9.16814'.
[ 1234.347563][T14009] netlink: 'syz.3.16817': attribute type 10 has an invalid length.
[ 1234.373824][T14009] team0: Device dummy0 failed to register rx_handler
[ 1234.387480][T14009] netlink: 'syz.3.16817': attribute type 10 has an invalid length.
[ 1234.429881][T14014] netlink: 40 bytes leftover after parsing attributes in process `syz.9.16820'.
[ 1235.231341][T14033] netlink: 40 bytes leftover after parsing attributes in process `syz.3.16830'.
[ 1236.240042][T14077] loop6: detected capacity change from 0 to 32768
[ 1236.263145][T14077] ERROR: (device loop6): dbAlloc: the hint is outside the map
[ 1236.263145][T14077] 
[ 1236.273022][T14077] ERROR: (device loop6): remounting filesystem as read-only
[ 1236.428758][T14085] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard
[ 1236.433211][T14085] exFAT-fs (nullb0): invalid boot record signature
[ 1236.443341][T14085] exFAT-fs (nullb0): failed to read boot sector
[ 1236.450608][T14085] exFAT-fs (nullb0): failed to recognize exfat type
[ 1237.507319][T14115] loop6: detected capacity change from 0 to 4096
[ 1237.535083][T14117] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1237.543116][   T33] audit: type=1800 audit(1195.033:495): pid=14115 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.16868" name="file1" dev="loop6" ino=15 res=0 errno=0
[ 1237.555016][   T33] audit: type=1800 audit(1195.042:496): pid=14115 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.16868" name="file1" dev="loop6" ino=15 res=0 errno=0
[ 1237.597197][T14118] netlink: 124 bytes leftover after parsing attributes in process `syz.3.16869'.
[ 1237.600728][T14118] netlink: 'syz.3.16869': attribute type 3 has an invalid length.
[ 1237.615979][T14118] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1237.936584][T14129] loop6: detected capacity change from 0 to 256
[ 1238.052936][T14133] loop6: detected capacity change from 0 to 128
[ 1238.063029][T14133] EXT4-fs: Ignoring removed nobh option
[ 1238.088062][T14133] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1238.107998][T14133] fscrypt (loop6, inode 12): Sub-block data units not yet supported with IV_INO_LBLK_32
[ 1238.134998][T12641] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1238.309137][T14141] loop6: detected capacity change from 0 to 4096
[ 1238.316117][T14141] ntfs3(loop6): Different NTFS sector size (1024) and media sector size (512).
[ 1238.342973][T14141] ntfs3(loop6): Mark volume as dirty due to NTFS errors
[ 1238.378648][T14141] ntfs3(loop6): ino=1f, "file2" failed to open parent directory r=5 to update
[ 1238.414063][ T6448] ntfs3(loop6): ino=1f, failed to open parent directory r=5 to update
[ 1238.496160][T14149] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1239.492203][T14177] loop6: detected capacity change from 0 to 2048
[ 1239.544062][T14177] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1239.591958][T14071] udevd[14071]: incorrect nilfs2 checksum on /dev/loop6
[ 1239.608330][T14180] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1239.615765][T14071] udevd[14071]: incorrect nilfs2 checksum on /dev/loop6
[ 1239.711502][T14188] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16900'.
[ 1241.882451][T14230] nft_compat: unsupported protocol 0
[ 1242.000293][T14238] Invalid ELF header len 8
[ 1242.099743][T14244] openvswitch: : Dropping previously announced user features
[ 1242.151948][T14246] sctp: [Deprecated]: syz.3.16926 (pid 14246) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1242.151948][T14246] Use struct sctp_sack_info instead
[ 1244.214596][T14307] loop6: detected capacity change from 0 to 8
[ 1244.246980][T14307] SQUASHFS error: Corrupted symlink
[ 1244.598731][T14331] netlink: 288 bytes leftover after parsing attributes in process `syz.6.16966'.
[ 1244.987394][T14363] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[ 1245.574047][ T5853] Bluetooth: hci2: unexpected cc 0x2039 length: 9 > 1
[ 1246.113835][T14421] ufs: You didn't specify the type of your ufs filesystem
[ 1246.113835][T14421] 
[ 1246.113835][T14421] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[ 1246.113835][T14421] 
[ 1246.113835][T14421] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[ 1246.126932][T14421] ufs: ufstype=old is supported read-only
[ 1246.137485][T14421] I/O error, dev loop7, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[ 1246.485112][T14423] 9pnet_fd: Insufficient options for proto=fd
[ 1246.707008][T14439] netlink: 'syz.9.17016': attribute type 2 has an invalid length.
[ 1246.724925][T14439] netlink: 'syz.9.17016': attribute type 11 has an invalid length.
[ 1246.736480][T14439] netlink: 132 bytes leftover after parsing attributes in process `syz.9.17016'.
[ 1246.966147][T14453] loop6: detected capacity change from 0 to 4096
[ 1247.459850][T14487] loop6: detected capacity change from 0 to 32768
[ 1247.463525][T14487] bcachefs (/dev/loop6): error validating superblock: Invalid superblock section ext: field too small (8 < 88)
[ 1247.463525][T14487] ext (size 8):
[ 1247.463525][T14487] Recovery passes required:      
[ 1247.463525][T14487] Errors to silently fix:        
[ 1247.463525][T14487] Btrees with missing data:      
[ 1247.463525][T14487] 
[ 1247.477318][T14487] bcachefs: bch2_fs_get_tree() error: invalid_sb_ext
[ 1247.844348][T14515] netlink: 304 bytes leftover after parsing attributes in process `syz.6.17053'.
[ 1249.904500][ T5853] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[ 1249.911988][ T5853] Bluetooth: hci2: Injecting HCI hardware error event
[ 1249.923898][T15672] Bluetooth: hci2: hardware error 0x00
[ 1250.901096][T14633] netlink: 12 bytes leftover after parsing attributes in process `syz.9.17109'.
[ 1251.544229][   T33] audit: type=1326 audit(1208.121:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14690 comm="syz.6.17137" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2f9b8ebe9 code=0x7ffc0000
[ 1251.565529][   T33] audit: type=1326 audit(1208.130:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14690 comm="syz.6.17137" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2f9b8ebe9 code=0x7ffc0000
[ 1251.575516][   T33] audit: type=1326 audit(1208.158:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14690 comm="syz.6.17137" exe="/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7fa2f9b8ebe9 code=0x7ffc0000
[ 1251.586411][   T33] audit: type=1326 audit(1208.158:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14690 comm="syz.6.17137" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2f9b8ebe9 code=0x7ffc0000
[ 1251.595958][   T33] audit: type=1326 audit(1208.158:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14690 comm="syz.6.17137" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2f9b8ebe9 code=0x7ffc0000
[ 1251.875291][T14701] loop6: detected capacity change from 0 to 40427
[ 1251.879017][T14701] F2FS-fs (loop6): Fix alignment : done, start(4096) end(16896) block(12288)
[ 1251.883466][T14701] F2FS-fs (loop6): build fault injection rate: 771
[ 1251.888852][T14701] F2FS-fs (loop6): invalid crc value
[ 1251.926438][T14701] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1251.930972][T14701] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[ 1252.128600][T15672] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[ 1252.671063][   T33] audit: type=1326 audit(1209.187:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14714 comm="syz.9.17149" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2718ebe9 code=0x7fc00000
[ 1253.298552][T14774] loop6: detected capacity change from 0 to 256
[ 1253.304307][T14774] exfat: Deprecated parameter 'utf8'
[ 1253.319165][T14774] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d)
[ 1253.319427][T14776] 8021q: VLANs not supported on lo
[ 1253.537448][T14780] loop6: detected capacity change from 0 to 32768
[ 1253.553780][T14780] XFS (loop6): DAX unsupported by block device. Turning off DAX.
[ 1253.693867][T14780] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1253.832471][T14780] XFS (loop6): Ending clean mount
[ 1253.836942][T14780] XFS (loop6): Quotacheck needed: Please wait.
[ 1253.901296][T14780] XFS (loop6): Quotacheck: Done.
[ 1253.937615][T12641] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1253.945602][T14798] netlink: 140 bytes leftover after parsing attributes in process `syz.9.17182'.
[ 1256.661248][T14872] netlink: 'syz.3.17217': attribute type 1 has an invalid length.
[ 1257.618238][T14896] IPv6: addrconf: prefix option has invalid lifetime
[ 1261.361649][T14934] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17244'.
[ 1262.438330][T14955] netlink: 16222 bytes leftover after parsing attributes in process `syz.9.17255'.
[ 1262.522477][T14961] netlink: 360 bytes leftover after parsing attributes in process `syz.3.17258'.
[ 1263.604737][T14983] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[ 1264.278146][T14993] overlayfs: failed to clone upperpath
[ 1264.450294][T15010] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[ 1264.578384][T15016] 8021q: adding VLAN 0 to HW filter on device bond5
[ 1264.587606][T15016] bond0: (slave bond5): Enslaving as an active interface with an up link
[ 1265.738171][T15028] loop6: detected capacity change from 0 to 32768
[ 1265.755241][T15028] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.17286 (15028)
[ 1265.769782][T15028] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1265.775733][T15028] BTRFS info (device loop6): using crc32c (crc32c-lib) checksum algorithm
[ 1265.832545][T15028] BTRFS info (device loop6): enabling ssd optimizations
[ 1265.835234][T15028] BTRFS info (device loop6): enabling free space tree
[ 1265.837563][T15028] BTRFS info (device loop6): use zlib compression, level 3
[ 1265.967127][T12641] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1266.229598][T15068] overlayfs: failed to clone upperpath
[ 1266.427448][T15080] __vm_enough_memory: pid: 15080, comm: syz.6.17302, bytes: 21200020058112 not enough memory for the allocation
[ 1266.502048][    C0] ==================================================================
[ 1266.505455][    C0] BUG: KASAN: slab-use-after-free in __xfrm_state_delete+0x696/0xca0
[ 1266.508868][    C0] Write of size 8 at addr ffff88803a6644b0 by task syz-executor/12641
[ 1266.513157][    C0] 
[ 1266.514170][    C0] CPU: 0 UID: 0 PID: 12641 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[ 1266.514186][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1266.514194][    C0] Call Trace:
[ 1266.514199][    C0]  <IRQ>
[ 1266.514205][    C0]  dump_stack_lvl+0x189/0x250
[ 1266.514226][    C0]  ? __virt_addr_valid+0x1c8/0x5c0
[ 1266.514241][    C0]  ? rcu_is_watching+0x15/0xb0
[ 1266.514255][    C0]  ? __kasan_check_byte+0x12/0x40
[ 1266.514272][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1266.514285][    C0]  ? rcu_is_watching+0x15/0xb0
[ 1266.514297][    C0]  ? lock_release+0x4b/0x3e0
[ 1266.514315][    C0]  ? __virt_addr_valid+0x1c8/0x5c0
[ 1266.514327][    C0]  ? __virt_addr_valid+0x4a5/0x5c0
[ 1266.514370][    C0]  print_report+0xca/0x240
[ 1266.514383][    C0]  ? __xfrm_state_delete+0x696/0xca0
[ 1266.514400][    C0]  kasan_report+0x118/0x150
[ 1266.514415][    C0]  ? __xfrm_state_delete+0x696/0xca0
[ 1266.514433][    C0]  __xfrm_state_delete+0x696/0xca0
[ 1266.514459][    C0]  xfrm_timer_handler+0x18f/0xa00
[ 1266.514477][    C0]  ? __pfx_xfrm_timer_handler+0x10/0x10
[ 1266.514492][    C0]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[ 1266.514509][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1266.514527][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 1266.514541][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1266.514557][    C0]  ? __pfx_xfrm_timer_handler+0x10/0x10
[ 1266.514573][    C0]  ? __pfx_xfrm_timer_handler+0x10/0x10
[ 1266.514588][    C0]  __hrtimer_run_queues+0x52c/0xc60
[ 1266.514606][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[ 1266.514617][    C0]  ? __pfx___local_bh_disable_ip+0x10/0x10
[ 1266.514632][    C0]  hrtimer_run_softirq+0x187/0x2b0
[ 1266.514645][    C0]  handle_softirqs+0x286/0x870
[ 1266.514657][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[ 1266.514670][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[ 1266.514682][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[ 1266.514698][    C0]  __irq_exit_rcu+0xca/0x1f0
[ 1266.514708][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[ 1266.514721][    C0]  irq_exit_rcu+0x9/0x30
[ 1266.514732][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[ 1266.514747][    C0]  </IRQ>
[ 1266.514752][    C0]  <TASK>
[ 1266.514757][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1266.514770][    C0] RIP: 0010:lock_acquire+0x175/0x360
[ 1266.514787][    C0] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 3b f4 02 11 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e
[ 1266.514797][    C0] RSP: 0018:ffffc9000a667270 EFLAGS: 00000206
[ 1266.514811][    C0] RAX: 7fa24ba9f9bb7600 RBX: 0000000000000000 RCX: 7fa24ba9f9bb7600
[ 1266.514820][    C0] RDX: 0000000000000000 RSI: ffffffff8dba6ce2 RDI: ffffffff8be33680
[ 1266.514828][    C0] RBP: ffffffff822e666a R08: 0000000000000000 R09: ffffffff822e666a
[ 1266.514837][    C0] R10: dffffc0000000000 R11: fffff9400091bc61 R12: 0000000000000002
[ 1266.514845][    C0] R13: ffffffff8e139fa0 R14: 0000000000000000 R15: 0000000000000246
[ 1266.514855][    C0]  ? pfn_valid+0xba/0x490
[ 1266.514871][    C0]  ? pfn_valid+0xba/0x490
[ 1266.514891][    C0]  ? pfn_valid+0xba/0x490
[ 1266.514905][    C0]  pfn_valid+0xd6/0x490
[ 1266.514919][    C0]  ? pfn_valid+0xba/0x490
[ 1266.514934][    C0]  page_table_check_set+0x25/0x730
[ 1266.514949][    C0]  ? __page_table_check_ptes_set+0x290/0x2f0
[ 1266.514964][    C0]  copy_pmd_range+0x4439/0x71d0
[ 1266.514985][    C0]  ? stack_depot_save_flags+0x40/0x860
[ 1266.515003][    C0]  ? __pfx_copy_pmd_range+0x10/0x10
[ 1266.515023][    C0]  copy_page_range+0xc14/0x1270
[ 1266.515035][    C0]  ? __lock_acquire+0xab9/0xd20
[ 1266.515056][    C0]  ? __pfx_copy_page_range+0x10/0x10
[ 1266.515069][    C0]  ? up_write+0x1c4/0x420
[ 1266.515081][    C0]  ? __pfx_vma_interval_tree_augment_rotate+0x10/0x10
[ 1266.515095][    C0]  dup_mmap+0xf57/0x1ac0
[ 1266.515115][    C0]  ? __pfx_dup_mmap+0x10/0x10
[ 1266.515133][    C0]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[ 1266.515146][    C0]  ? mm_init+0xcc3/0xef0
[ 1266.515159][    C0]  copy_mm+0x13c/0x4b0
[ 1266.515172][    C0]  copy_process+0x1706/0x3c00
[ 1266.515189][    C0]  ? copy_process+0x97f/0x3c00
[ 1266.515201][    C0]  ? __pfx_copy_process+0x10/0x10
[ 1266.515214][    C0]  kernel_clone+0x21e/0x840
[ 1266.515225][    C0]  ? css_rstat_updated+0x23a/0x4f0
[ 1266.515238][    C0]  ? __pfx_kernel_clone+0x10/0x10
[ 1266.515253][    C0]  __x64_sys_clone+0x18b/0x1e0
[ 1266.515265][    C0]  ? count_memcg_event_mm+0x21/0x260
[ 1266.515278][    C0]  ? __pfx___x64_sys_clone+0x10/0x10
[ 1266.515295][    C0]  ? do_user_addr_fault+0xc8a/0x1390
[ 1266.515313][    C0]  ? do_syscall_64+0xbe/0x3b0
[ 1266.515328][    C0]  do_syscall_64+0xfa/0x3b0
[ 1266.515371][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1266.515385][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1266.515396][    C0]  ? exc_page_fault+0x9f/0xf0
[ 1266.515410][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1266.515420][    C0] RIP: 0033:0x7fa2f9b85453
[ 1266.515432][    C0] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00
[ 1266.515448][    C0] RSP: 002b:00007ffd65bc5e08 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 1266.515461][    C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa2f9b85453
[ 1266.515469][    C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[ 1266.515476][    C0] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001
[ 1266.515483][    C0] R10: 000055557c5297d0 R11: 0000000000000246 R12: 0000000000000000
[ 1266.515490][    C0] R13: 00000000000927c0 R14: 000000000012a588 R15: 00007ffd65bc5fa0
[ 1266.515503][    C0]  </TASK>
[ 1266.515508][    C0] 
[ 1266.736916][    C0] Allocated by task 13587:
[ 1266.738818][    C0]  kasan_save_track+0x3e/0x80
[ 1266.740849][    C0]  __kasan_slab_alloc+0x6c/0x80
[ 1266.742892][    C0]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[ 1266.745155][    C0]  xfrm_state_alloc+0x24/0x2f0
[ 1266.747134][    C0]  __find_acq_core+0x8a7/0x1c00
[ 1266.749111][    C0]  xfrm_find_acq+0x78/0xa0
[ 1266.750961][    C0]  xfrm_alloc_userspi+0x6b3/0xc90
[ 1266.753072][    C0]  xfrm_user_rcv_msg+0x7a3/0xab0
[ 1266.755087][    C0]  netlink_rcv_skb+0x208/0x470
[ 1266.757137][    C0]  xfrm_netlink_rcv+0x79/0x90
[ 1266.759151][    C0]  netlink_unicast+0x82f/0x9e0
[ 1266.761164][    C0]  netlink_sendmsg+0x805/0xb30
[ 1266.763230][    C0]  __sock_sendmsg+0x21c/0x270
[ 1266.765277][    C0]  ____sys_sendmsg+0x505/0x830
[ 1266.767364][    C0]  ___sys_sendmsg+0x21f/0x2a0
[ 1266.769398][    C0]  __x64_sys_sendmsg+0x19b/0x260
[ 1266.771547][    C0]  do_syscall_64+0xfa/0x3b0
[ 1266.773460][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1266.775850][    C0] 
[ 1266.776866][    C0] Freed by task 15861:
[ 1266.778571][    C0]  kasan_save_track+0x3e/0x80
[ 1266.780486][    C0]  kasan_save_free_info+0x46/0x50
[ 1266.782576][    C0]  __kasan_slab_free+0x5b/0x80
[ 1266.784548][    C0]  kmem_cache_free+0x18f/0x400
[ 1266.786495][    C0]  xfrm_state_gc_task+0x52d/0x6b0
[ 1266.788559][    C0]  process_scheduled_works+0xae1/0x17b0
[ 1266.790838][    C0]  worker_thread+0x8a0/0xda0
[ 1266.792848][    C0]  kthread+0x711/0x8a0
[ 1266.794545][    C0]  ret_from_fork+0x3fc/0x770
[ 1266.796611][    C0]  ret_from_fork_asm+0x1a/0x30
[ 1266.798654][    C0] 
[ 1266.799747][    C0] The buggy address belongs to the object at ffff88803a664480
[ 1266.799747][    C0]  which belongs to the cache xfrm_state of size 928
[ 1266.805297][    C0] The buggy address is located 48 bytes inside of
[ 1266.805297][    C0]  freed 928-byte region [ffff88803a664480, ffff88803a664820)
[ 1266.810836][    C0] 
[ 1266.811876][    C0] The buggy address belongs to the physical page:
[ 1266.814504][    C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88803a664480 pfn:0x3a664
[ 1266.818543][    C0] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 1266.821909][    C0] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 1266.824956][    C0] page_type: f5(slab)
[ 1266.826612][    C0] raw: 00fff00000000040 ffff88801bb1ac80 dead000000000122 0000000000000000
[ 1266.830098][    C0] raw: ffff88803a664480 00000000800e0009 00000000f5000000 0000000000000000
[ 1266.833590][    C0] head: 00fff00000000040 ffff88801bb1ac80 dead000000000122 0000000000000000
[ 1266.837118][    C0] head: ffff88803a664480 00000000800e0009 00000000f5000000 0000000000000000
[ 1266.840616][    C0] head: 00fff00000000002 ffffea0000e99901 00000000ffffffff 00000000ffffffff
[ 1266.844140][    C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[ 1266.847635][    C0] page dumped because: kasan: bad access detected
[ 1266.850267][    C0] page_owner tracks the page as allocated
[ 1266.852572][    C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 7528, tgid 7525 (syz.2.577), ts 114367197838, free_ts 114103096794
[ 1266.860173][    C0]  post_alloc_hook+0x240/0x2a0
[ 1266.862162][    C0]  get_page_from_freelist+0x21e4/0x22c0
[ 1266.864444][    C0]  __alloc_frozen_pages_noprof+0x181/0x370
[ 1266.866853][    C0]  alloc_pages_mpol+0x232/0x4a0
[ 1266.868888][    C0]  allocate_slab+0x8a/0x370
[ 1266.870819][    C0]  ___slab_alloc+0xbeb/0x1410
[ 1266.872817][    C0]  kmem_cache_alloc_noprof+0x283/0x3c0
[ 1266.875035][    C0]  xfrm_state_alloc+0x24/0x2f0
[ 1266.877049][    C0]  xfrm_state_find+0x37d4/0x5400
[ 1266.879029][    C0]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[ 1266.881555][    C0]  xfrm_lookup_with_ifid+0x2a7/0x1a70
[ 1266.883771][    C0]  xfrm_lookup_route+0x3c/0x1c0
[ 1266.885800][    C0]  __ip4_datagram_connect+0x9a5/0x1270
[ 1266.888018][    C0]  __ip6_datagram_connect+0x9f0/0x1150
[ 1266.890280][    C0]  ip6_datagram_connect_v6_only+0x63/0xa0
[ 1266.892606][    C0]  __sys_connect+0x316/0x440
[ 1266.894524][    C0] page last free pid 10 tgid 10 stack trace:
[ 1266.896997][    C0]  __free_frozen_pages+0xbc4/0xd30
[ 1266.899160][    C0]  stack_depot_save_flags+0x436/0x860
[ 1266.901531][    C0]  ref_tracker_free+0xfe/0x7d0
[ 1266.903517][    C0]  __sk_destruct+0x3c3/0x660
[ 1266.905426][    C0]  __mptcp_close_ssk+0x768/0xfd0
[ 1266.907487][    C0]  mptcp_worker+0x69c/0x1160
[ 1266.909361][    C0]  process_scheduled_works+0xae1/0x17b0
[ 1266.911619][    C0]  worker_thread+0x8a0/0xda0
[ 1266.913539][    C0]  kthread+0x711/0x8a0
[ 1266.915215][    C0]  ret_from_fork+0x3fc/0x770
[ 1266.917103][    C0]  ret_from_fork_asm+0x1a/0x30
[ 1266.919060][    C0] 
[ 1266.920058][    C0] Memory state around the buggy address:
[ 1266.922366][    C0]  ffff88803a664380: 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc
[ 1266.925618][    C0]  ffff88803a664400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 1266.928835][    C0] >ffff88803a664480: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1266.932139][    C0]                                      ^
[ 1266.934379][    C0]  ffff88803a664500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1266.937621][    C0]  ffff88803a664580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1266.940825][    C0] ==================================================================
[ 1266.944323][    C0] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 1266.947268][    C0] CPU: 0 UID: 0 PID: 12641 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[ 1266.951116][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1266.955299][    C0] Call Trace:
[ 1266.956791][    C0]  <IRQ>
[ 1266.958018][    C0]  dump_stack_lvl+0x99/0x250
[ 1266.959952][    C0]  ? __asan_memcpy+0x40/0x70
[ 1266.961847][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1266.964053][    C0]  ? __pfx__printk+0x10/0x10
[ 1266.965986][    C0]  vpanic+0x281/0x750
[ 1266.967714][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[ 1266.969949][    C0]  ? __pfx_vpanic+0x10/0x10
[ 1266.971898][    C0]  ? irqentry_exit+0x74/0x90
[ 1266.973899][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1266.976099][    C0]  panic+0xb9/0xc0
[ 1266.977699][    C0]  ? __pfx_panic+0x10/0x10
[ 1266.979556][    C0]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[ 1266.981980][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1266.984592][    C0]  ? __xfrm_state_delete+0x696/0xca0
[ 1266.986509][    C0]  check_panic_on_warn+0x89/0xb0
[ 1266.988093][    C0]  ? __xfrm_state_delete+0x696/0xca0
[ 1266.989869][    C0]  end_report+0x78/0x160
[ 1266.991366][    C0]  kasan_report+0x129/0x150
[ 1266.992892][    C0]  ? __xfrm_state_delete+0x696/0xca0
[ 1266.994730][    C0]  __xfrm_state_delete+0x696/0xca0
[ 1266.996581][    C0]  xfrm_timer_handler+0x18f/0xa00
[ 1266.998467][    C0]  ? __pfx_xfrm_timer_handler+0x10/0x10
[ 1267.000605][    C0]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[ 1267.003009][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1267.005026][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 1267.007185][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1267.009538][    C0]  ? __pfx_xfrm_timer_handler+0x10/0x10
[ 1267.011434][    C0]  ? __pfx_xfrm_timer_handler+0x10/0x10
[ 1267.013391][    C0]  __hrtimer_run_queues+0x52c/0xc60
[ 1267.015306][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[ 1267.017586][    C0]  ? __pfx___local_bh_disable_ip+0x10/0x10
[ 1267.019760][    C0]  hrtimer_run_softirq+0x187/0x2b0
[ 1267.021786][    C0]  handle_softirqs+0x286/0x870
[ 1267.023711][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[ 1267.025640][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[ 1267.027686][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[ 1267.029581][    C0]  __irq_exit_rcu+0xca/0x1f0
[ 1267.031368][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[ 1267.033483][    C0]  irq_exit_rcu+0x9/0x30
[ 1267.035177][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[ 1267.037319][    C0]  </IRQ>
[ 1267.038484][    C0]  <TASK>
[ 1267.039638][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1267.041676][    C0] RIP: 0010:lock_acquire+0x175/0x360
[ 1267.043517][    C0] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 3b f4 02 11 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e
[ 1267.050698][    C0] RSP: 0018:ffffc9000a667270 EFLAGS: 00000206
[ 1267.052813][    C0] RAX: 7fa24ba9f9bb7600 RBX: 0000000000000000 RCX: 7fa24ba9f9bb7600
[ 1267.055393][    C0] RDX: 0000000000000000 RSI: ffffffff8dba6ce2 RDI: ffffffff8be33680
[ 1267.058149][    C0] RBP: ffffffff822e666a R08: 0000000000000000 R09: ffffffff822e666a
[ 1267.061233][    C0] R10: dffffc0000000000 R11: fffff9400091bc61 R12: 0000000000000002
[ 1267.064236][    C0] R13: ffffffff8e139fa0 R14: 0000000000000000 R15: 0000000000000246
[ 1267.067256][    C0]  ? pfn_valid+0xba/0x490
[ 1267.068907][    C0]  ? pfn_valid+0xba/0x490
[ 1267.070539][    C0]  ? pfn_valid+0xba/0x490
[ 1267.071939][    C0]  pfn_valid+0xd6/0x490
[ 1267.073487][    C0]  ? pfn_valid+0xba/0x490
[ 1267.075213][    C0]  page_table_check_set+0x25/0x730
[ 1267.077129][    C0]  ? __page_table_check_ptes_set+0x290/0x2f0
[ 1267.079095][    C0]  copy_pmd_range+0x4439/0x71d0
[ 1267.080995][    C0]  ? stack_depot_save_flags+0x40/0x860
[ 1267.083294][    C0]  ? __pfx_copy_pmd_range+0x10/0x10
[ 1267.085497][    C0]  copy_page_range+0xc14/0x1270
[ 1267.087524][    C0]  ? __lock_acquire+0xab9/0xd20
[ 1267.089524][    C0]  ? __pfx_copy_page_range+0x10/0x10
[ 1267.091400][    C0]  ? up_write+0x1c4/0x420
[ 1267.092848][    C0]  ? __pfx_vma_interval_tree_augment_rotate+0x10/0x10
[ 1267.095160][    C0]  dup_mmap+0xf57/0x1ac0
[ 1267.096700][    C0]  ? __pfx_dup_mmap+0x10/0x10
[ 1267.098228][    C0]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[ 1267.100190][    C0]  ? mm_init+0xcc3/0xef0
[ 1267.101954][    C0]  copy_mm+0x13c/0x4b0
[ 1267.103572][    C0]  copy_process+0x1706/0x3c00
[ 1267.105177][    C0]  ? copy_process+0x97f/0x3c00
[ 1267.106838][    C0]  ? __pfx_copy_process+0x10/0x10
[ 1267.108704][    C0]  kernel_clone+0x21e/0x840
[ 1267.110230][    C0]  ? css_rstat_updated+0x23a/0x4f0
[ 1267.112280][    C0]  ? __pfx_kernel_clone+0x10/0x10
[ 1267.113992][    C0]  __x64_sys_clone+0x18b/0x1e0
[ 1267.115590][    C0]  ? count_memcg_event_mm+0x21/0x260
[ 1267.117448][    C0]  ? __pfx___x64_sys_clone+0x10/0x10
[ 1267.119243][    C0]  ? do_user_addr_fault+0xc8a/0x1390
[ 1267.121262][    C0]  ? do_syscall_64+0xbe/0x3b0
[ 1267.123180][    C0]  do_syscall_64+0xfa/0x3b0
[ 1267.124903][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1267.126775][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1267.128808][    C0]  ? exc_page_fault+0x9f/0xf0
[ 1267.130530][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1267.132839][    C0] RIP: 0033:0x7fa2f9b85453
[ 1267.134419][    C0] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00
[ 1267.141247][    C0] RSP: 002b:00007ffd65bc5e08 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 1267.144405][    C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa2f9b85453
[ 1267.147315][    C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[ 1267.150326][    C0] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001
[ 1267.153519][    C0] R10: 000055557c5297d0 R11: 0000000000000246 R12: 0000000000000000
[ 1267.156332][    C0] R13: 00000000000927c0 R14: 000000000012a588 R15: 00007ffd65bc5fa0
[ 1267.158992][    C0]  </TASK>
[ 1267.160785][    C0] Kernel Offset: disabled
[ 1267.162442][    C0] Rebooting in 86400 seconds..

VM DIAGNOSIS:
22:49:55  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000033 RBX=0000000000000033 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900000073b0
R8 =ffff88801fc48237 R9 =1ffff11003f89046 R10=dffffc0000000000 R11=ffffffff854f3ac0
R12=dffffc0000000000 R13=ffffffff99afa8f8 R14=ffffffff99def420 R15=0000000000000000
RIP=ffffffff854f3b3c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055557c529500 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fa2fa8e56c0 CR3=0000000130b96000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffff8187a567 ffffffff8187a50b
XMM02=ffffffff820b7cf2 ffffffff820b7c72 XMM03=ffffffff8187a567 ffffffff8187a50b
XMM04=00007efc8c6ed100 00007efc8bb87460 XMM05=00007efc8bb87478 00007efc8bb874c0
XMM06=00007efc8bb874b8 00007efc8bb874b0 XMM07=00007efc8bb874a8 00007efc8bb874a0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007efc8ba12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000000a RBX=ffffffff8e139ee0 RCX=0000000000000007 RDX=00000000ffffe000
RSI=0000000000000007 RDI=ffff88801f700000 RBP=0000000000000000 RSP=ffffc90003dbef08
R8 =0000000000000000 R9 =ffffffff8172c195 R10=ffffc90003dbf158 R11=ffffffff81ac3820
R12=0000000000000002 R13=0000000000000002 R14=0000000000000000 R15=ffff88801f700af0
RIP=ffffffff819d6102 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f7c27f876c0 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f7c1e1bd000 CR3=000000012cc38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=00007f7c27f865a0 00007f7c27f86580
XMM02=00007f7c27f866e0 00007f7c27f86560 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00007f7c27f865a0 XMM05=0000000000000000 00007f7c27f866e0
XMM06=00007f7c27f866e0 00007f7c27f86560 XMM07=00007f7c27f865a0 00007f7c27f86580
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f7c27212fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
