last executing test programs: 7m2.898251477s ago: executing program 2 (id=482): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000240)='./file1\x00', 0x0, &(0x7f00000000c0)=ANY=[], 0x1, 0x1513, &(0x7f0000002d00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) write$FUSE_WRITE(r0, &(0x7f00000000c0)={0x18}, 0xfffffdef) 7m0.681983236s ago: executing program 2 (id=488): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4000}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) gettid() r3 = socket(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000013c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x398, 0x0, 0x178, 0x394, 0x0, 0x178, 0x2c8, 0x258, 0x258, 0x2c8, 0x258, 0x3, 0x0, {[{{@ipv6={@loopback={0x1f0}, @mcast2, [], [], 'team_slave_0\x00', 'netpci0\x00'}, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "fc6b061134c5d5c8465af5f5caa5bd6c0dde77ff83daa984c0d76167e0608dcaa2caff7bd9c5923cccd5b483df8124249f91b8c3c2cea9bed64dc935a975401a68e34a04c1f15e50050729ba985e8c1576994e350d93a782668d4d51a1bc76bba1fde09794922ae65a804c56f092e430ebb8fa892d671c8c8035cae06810f8c6", 0x20}}, @common=@unspec=@addrtype1={{0x28}, {0xa}}]}, @common=@inet=@SET2={0x30}}, {{@ipv6={@private1, @mcast1, [], [], 'wg2\x00', 'hsr0\x00'}, 0x0, 0xd0, 0x108, 0x0, {}, [@common=@icmp6={{0x28}, {0x0, "08db"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) 6m59.382828372s ago: executing program 2 (id=492): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, 0x0, 0x7, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x95}, 0x800) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000030701"], 0x28}, 0x1, 0x0, 0x0, 0xcb5d58d386348ea6}, 0x80810) 6m58.091094596s ago: executing program 2 (id=494): prlimit64(0x0, 0xc, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0x800000000000001) 6m57.630893983s ago: executing program 2 (id=498): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="ffffffffffff000000fe8800"/21], 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r2}, &(0x7f0000000000), &(0x7f00000005c0)=r3}, 0x20) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x40000000, 0x1000, 0x2, 0x0, 0x0, 0x8000002, 0x0, 0x7e150a0b, 0x0, 0x5, 0x80000000, 0x0, 0x0, 0x3, 0x0, 0x100000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x10000, 0x5d2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x1007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x40000000, 0x0, 0x3, 0x0, 0x1, 0x8, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, 0x9, 0x0, 0x0, 0x7, 0xfbfffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x4fd, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x7e98263b, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2d1, 0x0, 0x0, 0xb2e, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xff, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0xc3f3, 0x1, 0x0, 0x800, 0x9, 0x800, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xfffffffd, 0x0, 0x0, 0xd819ac9, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x10, 0x20, 0x4, 0x400000b2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1000, 0x100, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x1, 0x4, 0xfffffffe, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x20000040, 0xffffffff, 0x400, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x20, 0xaaf0]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x3, 0x0, 0x0, 0x0, 0xc0000001}, {0x3, 0x0, 0xb, 0x0, 0x0, 0xffffffff}, 0x7, 0x10, 0x2000000}}]}}]}, 0x45c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r6, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 6m55.131138706s ago: executing program 2 (id=507): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x400a8, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x88000, 0x0) mount$9p_unix(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12d7498, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 6m54.116389918s ago: executing program 32 (id=507): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x400a8, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x88000, 0x0) mount$9p_unix(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12d7498, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 3m53.574218455s ago: executing program 4 (id=1049): openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000440)="ea", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="140000"], 0x18}, 0xc800) recvmmsg(r4, &(0x7f0000001140), 0x700, 0x2, 0x0) 3m52.789931758s ago: executing program 4 (id=1052): socket$inet_sctp(0x2, 0x5, 0x84) r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r1, 0xa, 0x12) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'\x00', 0x1}) io_setup(0x1ff, &(0x7f0000001540)=0x0) io_submit(r4, 0x1, &(0x7f00000007c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x401, r3, &(0x7f0000000440)="96", 0x1}]) ppoll(&(0x7f0000000100)=[{r2, 0x30e0}], 0x1, 0x0, 0x0, 0x0) dup2(r1, r2) fcntl$setown(r2, 0x8, r0) tkill(r0, 0x13) 3m47.972114668s ago: executing program 4 (id=1061): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000006c0)={0x18, r4, 0xffffffffffffffff, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x44811}, 0x80) 3m47.883455525s ago: executing program 5 (id=1062): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xffeff024}, {0x6, 0x0, 0x4}]}, 0x10) sendmmsg(r3, &(0x7f0000001c00), 0x400000000000159, 0x40840) 3m46.901433395s ago: executing program 4 (id=1065): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@nodelalloc}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@minixdf}]}, 0x3, 0x43a, &(0x7f0000000340)="$eJzs28tvG0UYAPBv13FKXySU8ugDCBRExCNp0gI9cAGBxAEkJDiUY0jSqtRtUBMkWlUQECpHVIk74ojEX8AJLgg4IXGFO6pUoVxaOBmtvZs4jp0mwY5L/ftJm8zsjjPzeXbs2Z1sAH1rJPuRROyJiN8jYqieXV1gpP7r5tLl6b+XLk8nUa2+9VdSK3dj6fJ0UbR43e48M5pGpJ8lcahFvfMXL52dqlRmL+T58YVz74/PX7z07JlzU6dnT8+enzxx4vixiReen3yuI3Fmbbpx8KO5wwdee+fqG9Mnr77787dJEX9THB0yst7BJ6rVDlfXW3sb0slADxvCppQiIuuucm38D0UpVjpvKF79tKeNA7qqWq1Wd7c/vFgF7mBJbLTk2fzzArgzFF/02fVvsW3T1OO2cP2l+gVQFvfNfKsfGYg0L1Nuur7tpJGIOLn4z1fZFt25DwEAsMr32fznmVbzvzTubyh3d742NBwR90TEvoi4NyL2R8R9EbWyD0TEg5usv3mRZO38J722pcA2KJv/vZivba2e/xWzvxgu5bm9tfjLyakzldmj+XsyGuUdWX5inTp+eOW3L9oda5z/ZVtWfzEXzNtxbWDH6tfMTC1M/ZeYG13/JOLgQKv4k+WVgCQiDkTEwS3Wceapbw63O9Yu/vJG/nAH1pmqX0c8We//xWiKv5Csvz45fldUZo+OF2fFWr/8euXNdvXfuv+7K+v/XS3P/+X4h5PG9dr5zddx5Y/P217TbPX8H0zerqUH830fTi0sXJiIGExerze6cf/kymuLfFE+i3/0SOvxvy9W3olDEZGdxA9FxMMR8Uje9kcj4rGIOLJO/D+9/Ph7W4+/u7L4ZzbV/yuJwWje0zpROvvjd6sqHd5M/Fn/H6+lRvM9G/n820i7tnY2AwAAwP9PGhF7IknHltNpOjZW/3/5/bErrczNLzx9au6D8zP1ZwSGo5wWd7qGGu6HTuSX9UV+sil/LL9v/GVpZy0/Nj1Xmel18NDndrcZ/5k/S71uHdB1nteC/mX8Q/8y/qF/Gf/Qv1qM/529aAew/Vp9/3/cg3YA269p/Fv2gz7i+h/6l/EP/cv4h740vzNu/ZC8hMSaRKS3RTMkupTo9ScTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAZ/wbAAD//9E940M=") syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x10040d0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_create_resource$binfmt(&(0x7f0000000380)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) write$binfmt_script(r1, &(0x7f00000002c0)={'#! ', './file1'}, 0xb) openat$binfmt(0xffffffffffffff9c, r0, 0x2, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, 0x0, 0x0, 0x0) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x382, 0x0) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0xeaff) 3m46.883629726s ago: executing program 5 (id=1066): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x43}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) 3m46.738751838s ago: executing program 5 (id=1067): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x4, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@fallback=r1, 0xe, 0x1, 0x6, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240), 0x0}, 0x40) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_devices(r3, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@cgroup=r3, r1, 0x1, 0x0, 0xffffffffffffffff, @void, @value=r1, @void, @void, r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) 3m46.420953884s ago: executing program 5 (id=1069): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000001180)=ANY=[], 0x1, 0x185, &(0x7f0000000500)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) lseek(r0, 0xfffffffffffffffc, 0x2) getdents(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e20, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc8c}}, 0x4, 0x0, 0x3, 0x8, 0x1}, &(0x7f0000000140)=0x98) sendmsg$IPSET_CMD_RENAME(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x28, 0x5, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000080)='./file0\x00', 0x40, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRESOCT=r1, @ANYRESOCT=0x0], 0x4, 0xf82, &(0x7f0000000f00)="$eJzs3U9sHNX9APA36/W/2MRr4AcGfoQUWhEo2CGJ1PQWBOqlEuLSOygkNMJQ1NBKREBMD4hKiCIhThUHEBdKpRSpSKBKFeqp7alVb+0F9UKlKpWCemgjJa5iv1nvPu9k12N7dtf7+UjffX7zZuf7HXsTz4xn3wZgZNXWHo8dW8hCeOeztx99+ansk2vL7mqucXDtMYu9RghhvKWfJdv7Ii64cumlk53aLBxZe8z74bGLzefOhBBWwsHweWiEj5aWv/rw3UcOffza1C1vnnvmlV3a/aZ0PwAAYC+68Mflv973jz88MH/5woETYbK5PD8+b8T+TDzuPxwPlPPj5Vpo72ct0WoiWW8sRi1ZbyxZr57kqRfkG0+2M16w3kSXfGMtyzrtJwAAAAyj/Ly2EbLaYlu/VltcXD/vv+aLuYls8bkzy6fP9qlQAAAAoLR/n1+76XaIY2oAahBpTOcvsK0976Pvbv0524paxfnqFecbmSj3ehNCCCGE2LlwPCKGIFbnKrzYAAAAANBhvrBNVnZ2pq7m1hq95b/4cK3z82EHJK+/zdNO7PDr//r5pzavUGn+DnY//3if8193/z941f84AACUt1ePJvP9yo+j83kM0nkEx9qeNTO21fOPWrKd+hbrLJpXcFjmGyyqc6ziOsoqqn+rP8d+Kao/nQ9zUBXVn87TOaiK6p+suI6yiurvcOUnDOI/66L6pyuuo6yi+vdVXEdZRfXPVFxHWUX1z1ZcR1lF9d9QcR1lFdW/v+I6yiqqf1huqy2qv1FxHWUV1T+/3gz8YURR/TdWXEdZRfXfVHEdZRXVf3PFdfTLnbHNvw8HCtab6XDwN3AHgwAAAEBH/x36+f9GNOoDUIMQQgx9vLr+y7B9+VSHZWJbURuAGnYrpju9hoQQQoiBjPN9vPYAAAAADIb8fQH5u95Xo3x8bNP4396/9piP11vHpzY2kI+Pd9n+RJfxyS7jAAAAQAi/ef30bW9lG/Pdpe/p3+p8ePm8UdPhk6uhxDxG6XyEW82/3XnPtpu/84QjwzIbGwAAAHtV9p3Pr97/6HsvzF++cOBEy9nv1Xi+m88DWo/XBj6N/fy+gNmkn+Xn0Cfa89QK1kuvD9xQtL3Ht7mjAAAAMMLy8/dGyGqLLefdjVCrLS5unI8vhPHs9JnlU4djP/98lt/PjU9eW/5QxXUDAAAAvds43+98/p9/ju9CmMgWnzuzfPrsen+2uXy81npdYG5jedZ6XaCRLD9SsPxo7MfP7wzfn5teW7548gfLT+30zgMAAMCIOPviuWeeXF4+9cPR+aIeQtjWdsIg7IUvfLGrX/T7fyYAAGCnffnl2+M/Ojr72/X3/2/Mf3c1fnEw9htxbr8/xeX5fQL5+wA2vV//ifY8c0XrPd++XiNZbyzGZFL3VMt2wtp8g+3Pmy/K12jfzkRBvpkk32ySL52noJ6sn3WYSzB0mAkwX28uWZ7Ow1hPcmRJ/rs75AIAAIDc0gvPPr909sVzD5559smnTz196rmjR45/+/jxww9966Gltfv6l1rv7gcAAACG0cZNv/2uBAAAAAAAAAAAAAAAAAAAAEZXFR8n1u99BAAAgFH3r/MhhBUhCiL/gMF+1zHskQ1ADbsXq5P9r2FvR/DvUAghhBDbjP6e9005lhmMWF1NP2keAAAAYHddufTSydZ2k5VsR/M1t9ZYb67GvHk7++Bf5q9FvtrFh9uvl+zb0WoYdVW//uUf1PyTHcc/eHVn869diG9s9Lv//1dr38CJtcd67E33mvfepV8sNPOHEG6v95g/3f/He83Y7lCS/97QW/7V95L8T7T1ar3mvy/Jv6/H/Jv2//miDFPXzX9/zL8Q+4fu6TV/+y5OJtl6fQF8M9n/p0Kv+ZP9b/SYMPFAzA8Ao6j523z1fH8L2WH5UUJ+PD0T+/n+5ges6d0PWz3+ryXbqW+78vbt5sdBt8Z+86hupT1vbqv159+X2djeULLO1LDcVVJU/079HHdbUf3jFddRVlH9ExXXUVZR/Z3P3gdPUf3XP3scHEX193whos+K6h+W68pF9c9UXEdZRfXPVlxHWUX1b/X3eL8U1b+/4jrKKqp/ruI6yiqqv+RltcoV1T9fcR1lFdV/Y8V1lFVU/00V11FWUf03V1xHv9wR26Lz4fz8cy6O5f1G0p/s8L3s+Y8hAAAAwK7650DO/9dy5aDvtQghhBBiGGJsAGoQYpjjP6vr+l2HEGL3YnW1n1cf6LdsiO4VB2Dn7O5sFgw6P//R5uc/2vz8uZ78L/FZ0s+NdRmvdxkf7zI+kYxnyRMni8ajm5LtrubXNaObu4z/X9yDovH9yfN/nIzf2mX7C13Gb+syfnuX8Tu6jAMAADAabomt80MAAADYu17+5adv/PreJy7NX75w4ESY2DTv/OHYn4x/W3899tN573Pj8W/+P4n992P7u9j+PVnf/ScAAACw+/LPifH3fwAAANi78s8pdf4PAAAAe9d8bJ3/AwAAwN51Y2yd/wMAAMAelk11Xhzb/LrA3bHtdV4/AGDw/X9s74ztgdjeFduvxTY/Drgntl+vqD4AYOf8/Hs/Pf5WtjHf/9Fk/EpcnrebrKxfKchq7TP5T8d2X2y/0WM96ecB9Jo/t7/HPLuVf26b+QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAvaO29njs2EIWwjufvf3ozybe+PO1ZXc11zi49pjFXiOEMN58Xj660f9VXPHKpZdOtrZXY5uFIyELWXN5eOxiM9NMCGElHAyfh0b4aGn5qw/ffeTQx69N3fLmuWde2cVvQdv+AQAAwF70vwAAAP//7lUWHg==") r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r3, 0x6, 0x9, &(0x7f0000000100)=0x8000, 0x4) syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) 3m45.316135183s ago: executing program 4 (id=1075): mkdir(&(0x7f0000000100)='./file0\x00', 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x1, 0x0) sendmsg$nl_xfrm(r0, 0x0, 0x800) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) getpgrp(0xffffffffffffffff) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x3000005, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x40000002) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00'}, 0x94) chroot(&(0x7f0000000200)='./file0\x00') umount2(&(0x7f0000000000)='./file0\x00', 0x0) 3m44.007224979s ago: executing program 4 (id=1081): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r2, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) write$cgroup_devices(r1, &(0x7f0000000840)=ANY=[], 0xffdd) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000180)={0x20, 0xb, 0x0, {0x400, 0x4, 0x2, 0x4}}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 3m44.004981599s ago: executing program 5 (id=1082): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, 0x0, 0x0) bind$bt_hci(r2, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}, @TCA_FLOWER_KEY_SCTP_DST={0x6}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x24004000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3m43.427362346s ago: executing program 33 (id=1081): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r2, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) write$cgroup_devices(r1, &(0x7f0000000840)=ANY=[], 0xffdd) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000180)={0x20, 0xb, 0x0, {0x400, 0x4, 0x2, 0x4}}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 3m43.290756927s ago: executing program 5 (id=1086): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x4, 0x2}, 0x10) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) sendmsg$tipc(r4, &(0x7f0000000180)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0}, 0x0) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44010}, 0x0) 3m41.921540708s ago: executing program 34 (id=1086): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x4, 0x2}, 0x10) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) sendmsg$tipc(r4, &(0x7f0000000180)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0}, 0x0) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44010}, 0x0) 9.480638472s ago: executing program 6 (id=1672): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff038}, {0xb1, 0x0, 0x0, 0xfffff024}, {0x6}]}, 0x10) sendmmsg(r3, &(0x7f0000001c00), 0x400000000000159, 0x40840) 9.391496229s ago: executing program 7 (id=1673): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00'}, 0x80) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r0, r2, 0x1, 0x0, @void}, 0x10) timer_create(0x2, &(0x7f0000000240)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x7fffffffffffffff]}, 0x8, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x18a}, {r3}, {r3, 0x2004}], 0x3, 0x0, 0x0, 0x0) r5 = socket(0x8000000010, 0x2, 0x0) write(r5, &(0x7f00000002c0)="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", 0xfc) 8.133946791s ago: executing program 6 (id=1676): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./bus\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) mknodat(r0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000640)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) linkat(r1, &(0x7f0000000100)='./file1\x00', r2, &(0x7f0000000240)='./bus\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r3, &(0x7f00000001c0)=@file={0x1, './bus\x00'}, 0x6e) 8.018869091s ago: executing program 7 (id=1678): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r3, 0x0, 0x12, &(0x7f0000000300)=0x1, 0x4) sendto$inet(r3, &(0x7f0000000000)="f461c5bbd75c3583", 0x8, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r3, &(0x7f000000e280), 0x58a, 0x42, 0x0) 7.960427125s ago: executing program 3 (id=1679): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 7.6561853s ago: executing program 6 (id=1680): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x85) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r3 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r2}, 0x8) close(r3) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 6.871874314s ago: executing program 7 (id=1682): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x22301, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000080)=0x100) 6.871595644s ago: executing program 3 (id=1683): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x15, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r1}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x804) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x40084503, 0x0) syz_pidfd_open(0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x10, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x1840, 0x42c04}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x2}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x24) 6.753165233s ago: executing program 0 (id=1684): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/96, 0x128000, 0x800}, 0x20) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000240)=0x4, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000140)=0x20, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000003c0)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000100)=0x20, 0x4) bind$xdp(r0, &(0x7f00000002c0)={0x2c, 0x0, r2}, 0x10) socket$inet(0xa, 0x801, 0x84) socket$inet(0xa, 0x801, 0x84) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 6.675554719s ago: executing program 3 (id=1685): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1}, &(0x7f0000000380), &(0x7f00000003c0)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r3}, 0x18) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x4008, 0x2, 0x7, 0xefffffffffffffff, 0x0, 0x81, 0x2000000, 0x0, 0x1001c, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 6.617355184s ago: executing program 1 (id=1686): r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) r2 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000"], 0x3c}}, 0x40000) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r7 = socket$inet(0x2, 0x2, 0x0) sendmmsg$inet(r7, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @empty, @loopback}}}], 0x20}}], 0x1, 0x4040880) 6.615900974s ago: executing program 6 (id=1687): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback, 0x5}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, 0x32) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x8) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) sendto$inet6(r1, 0x0, 0x0, 0x400401c, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x21, 0x800000}, 0x28) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r2, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) 5.839052687s ago: executing program 3 (id=1688): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000000000000000000000071123b000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r5, 0xc4fc9e906872338b, 0x24, 0x0, {{0x15}, {@void, @val={0xc, 0x99, {0x8, 0x2}}}}, [@NL80211_ATTR_TID_CONFIG={0x8, 0x11d, 0x0, 0x1, [{0x4}]}]}, 0x28}}, 0x0) 5.81249537s ago: executing program 7 (id=1689): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) fsopen(&(0x7f0000000040)='jfs\x00', 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') bpf$ENABLE_STATS(0x20, 0x0, 0x0) preadv(r3, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/85, 0x55}], 0x1, 0xfffffffa, 0x0) 5.516564663s ago: executing program 0 (id=1690): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000000)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) openat$sndseq(0xffffffffffffff9c, 0x0, 0x400000) bind$alg(0xffffffffffffffff, 0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x6, 0xffff81a4, 0x40, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 4.795241751s ago: executing program 0 (id=1691): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0xfffffffd) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0xfffffffd) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) r4 = socket$inet(0xa, 0x801, 0x84) listen(r4, 0x8) r5 = socket$inet(0xa, 0x801, 0x84) listen(r5, 0x1) r6 = socket$netlink(0x10, 0x3, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r6) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 4.677547721s ago: executing program 7 (id=1692): symlink(0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt(0xffffffffffffffff, 0x200000000114, 0x5, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x20400, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/58, 0x328000, 0xc00, 0xb, 0x1}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 4.4431659s ago: executing program 6 (id=1693): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) waitid(0x0, 0x0, &(0x7f0000002ff9), 0x0, 0x0) 4.44110287s ago: executing program 1 (id=1703): socket(0x10, 0x803, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0xa, 0x5, 0x0, 0x0, 0x2004cb, 0x200000000000, 0x0, 0x10000000000016, 0xfffffffffffffffd, 0x0, 0x5, 0x0, 0x0, 0x2000000000], 0x0, 0x200}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.43563143s ago: executing program 3 (id=1694): r0 = socket$netlink(0x10, 0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) 4.272805764s ago: executing program 1 (id=1695): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) writev(r0, &(0x7f0000000940)=[{&(0x7f0000000440)="5f09082c116eb688fb5d786f53", 0xd}], 0x1) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x7ffffffe, 0x7, 0x4, 0x1000000, 0x800, 0x8, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x1, 0x8, 0x5, 0x0, 0x208000000010001, 0x3}, 0x0, 0x0) close(r1) 2.244380258s ago: executing program 0 (id=1696): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x42, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) mount$fuse(0x0, &(0x7f0000000a40)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000001000)={0x2020, 0x0, 0x0}, 0xffffff55) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x8000, 0x0, 0x0, 0xbf5}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x18}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20d01, 0x0) syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000003440)={&(0x7f0000000240)={0xfffffffffffffee5, 0x0, 0xfffffffffffffffc, {0x7, 0x2b, 0x401, 0x2408000, 0x2, 0xffff, 0x9, 0x1, 0x0, 0x0, 0x84, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsync(r3) 2.243459118s ago: executing program 1 (id=1697): getpid() r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="800000000001010400000000141a000002fff500240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000011c00108008000140000000000800024000000000080003"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$dri(0x0, 0xfa, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) 1.982391419s ago: executing program 3 (id=1698): r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x5]}, 0x8) madvise(&(0x7f0000514000/0x2000)=nil, 0x2000, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sigaltstack(&(0x7f0000000480)={&(0x7f0000004000)=""/4126, 0x80000001, 0x101e}, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_settime(r3, 0x1, &(0x7f0000000100)={{}, {0x0, 0x989680}}, 0x0) signalfd4(r0, &(0x7f0000000140)={[0x8000000000000000]}, 0x8, 0x0) 1.933068973s ago: executing program 6 (id=1699): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffff7, 0x8000}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.932621333s ago: executing program 0 (id=1700): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) open(0x0, 0x14927e, 0xa0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=@ipv6_deladdrlabel={0x1c, 0x48, 0x1, 0x70bd29, 0x25dfdbff, {0xa, 0x0, 0x80, 0x0, 0x0, 0xfffffff9}}, 0x1c}}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1f2) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0x1218088, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0xa, 0x2c2, &(0x7f00000008c0)="$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") 139.242438ms ago: executing program 1 (id=1701): syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a0101004414050300000000000000000a010101000000008903ce070200000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='\\'], 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f10", 0x8, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000050400"/18, @ANYBLOB="ebffffffffffffff280012800b00010065"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x41) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 33.159797ms ago: executing program 1 (id=1702): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x5) r1 = open(&(0x7f00000002c0)='./file1\x00', 0x113000, 0xb) mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r5 = fanotify_init(0xf00, 0x0) fanotify_mark(r5, 0x1, 0x5000003a, r4, 0x0) mkdirat(r3, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r6 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', r6, &(0x7f00000002c0)='./file0\x00', 0x2) renameat2(r1, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000001c0)='./file1/../file0\x00', 0x2) 30.949527ms ago: executing program 0 (id=1704): mkdir(&(0x7f0000000000)='./file0\x00', 0x2) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006840)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x88b}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x81, 0x0, 0x0, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x10b}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) open(&(0x7f00000001c0)='./file0/file0\x00', 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x40000000015, 0x5, 0x0) syz_open_dev$cec(&(0x7f00000000c0), 0xffffffffffffffff, 0x8802) syz_open_dev$sndpcmp(&(0x7f0000000100), 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) 0s ago: executing program 7 (id=1705): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) recvmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) kernel console output (not intermixed with test programs): ] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by udevd (4324) [ 211.470581][ T4405] hfsplus: b-tree write err: -5, ino 4 [ 212.019090][ T6005] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 212.377489][ T5965] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 212.847621][ T5965] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 212.884036][ T5965] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 212.935415][ T5965] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 212.950454][ T5965] System zones: 1-12 [ 212.970526][ T5965] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2228: inode #15: comm syz.4.462: corrupted in-inode xattr [ 212.997419][ T5965] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.462: couldn't read orphan inode 15 (err -117) [ 213.060663][ T5965] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,grpid,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000009,stripe=0x0000000000000cc5,usrjquota=,nogrpid,mblk_io_submit,,errors=continue. Quota mode: none. [ 213.187093][ T6018] loop2: detected capacity change from 0 to 1024 [ 213.242614][ T5965] EXT4-fs warning (device loop4): __ext4fs_dirhash:283: invalid/unsupported hash tree version 11 [ 213.284301][ T6025] kvm: pic: non byte write [ 213.341698][ T6018] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 213.434895][ T26] kauditd_printk_skb: 58 callbacks suppressed [ 213.434911][ T26] audit: type=1800 audit(1756431011.840:104): pid=6018 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.470" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 214.329245][ T6038] kAFS: unparsable volume name [ 215.804637][ T6057] loop2: detected capacity change from 0 to 256 [ 215.926378][ T6057] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 215.964749][ T6057] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 215.989406][ T6057] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 216.473653][ T6066] exFAT-fs (loop2): hint_cluster is invalid (17) [ 216.492168][ T6066] exFAT-fs (loop2): error, invalid access to FAT (entry 0xffffffff) [ 216.502155][ T6066] exFAT-fs (loop2): Filesystem has been set read-only [ 217.640146][ T6080] xt_addrtype: ipv6 does not support BROADCAST matching [ 218.612494][ T6082] netlink: 4 bytes leftover after parsing attributes in process `syz.4.489'. [ 219.109905][ T6090] netlink: 20 bytes leftover after parsing attributes in process `syz.2.492'. [ 220.193385][ T5390] wlan1: Trigger new scan to find an IBSS to join [ 223.017992][ T6128] loop4: detected capacity change from 0 to 32768 [ 223.135270][ T6128] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.504 (6128) [ 223.204724][ T6130] ptrace attach of "./syz-executor exec"[4193] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ  "[6130] [ 223.805439][ T6128] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 223.815496][ T6128] BTRFS info (device loop4): enabling auto defrag [ 223.822820][ T6128] BTRFS info (device loop4): max_inline at 0 [ 223.829205][ T6128] BTRFS info (device loop4): force clearing of disk cache [ 223.838111][ T6128] BTRFS info (device loop4): turning on sync discard [ 223.845834][ T6128] BTRFS info (device loop4): using free space tree [ 223.852861][ T6128] BTRFS info (device loop4): has skinny extents [ 224.180841][ T6144] netlink: 28 bytes leftover after parsing attributes in process `syz.0.510'. [ 224.868436][ T6144] netlink: 8 bytes leftover after parsing attributes in process `syz.0.510'. [ 225.160216][ T5390] wlan1: Trigger new scan to find an IBSS to join [ 225.240988][ T6149] netlink: 'syz.0.510': attribute type 10 has an invalid length. [ 225.265130][ T6149] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 225.473398][ T6128] BTRFS info (device loop4): enabling ssd optimizations [ 225.491744][ T6128] BTRFS info (device loop4): clearing free space tree [ 225.499990][ T6128] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 225.511051][ T6128] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 225.588369][ T6128] BTRFS info (device loop4): creating free space tree [ 225.599925][ T6128] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 225.610598][ T6128] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 226.312308][ T6179] loop3: detected capacity change from 0 to 4096 [ 226.668221][ T6179] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 227.063170][ T5372] wlan1: Creating new IBSS network, BSSID d6:0c:57:a5:4d:1f [ 227.075325][ T6174] device vlan2 entered promiscuous mode [ 227.240762][ T6179] ntfs3: loop3: Failed to load $Extend. [ 227.405008][ T6180] netlink: 4 bytes leftover after parsing attributes in process `syz.0.516'. [ 227.731807][ T5986] Bluetooth: hci2: command 0x0409 tx timeout [ 229.771852][ T5986] Bluetooth: hci2: command 0x041b tx timeout [ 231.761644][ T6163] chnl_net:caif_netlink_parms(): no params data found [ 231.990592][ T5989] Bluetooth: hci2: command 0x040f tx timeout [ 232.339487][ T4263] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 233.112939][ T26] audit: type=1326 audit(1756431031.520:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6227 comm="syz.4.529" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2a02175be9 code=0x0 [ 233.250548][ T6163] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.284178][ T6163] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.310883][ T6163] device bridge_slave_0 entered promiscuous mode [ 233.394045][ T6163] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.419804][ T6163] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.429379][ T6163] device bridge_slave_1 entered promiscuous mode [ 233.459266][ T6163] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.070541][ T6163] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.256420][ T5986] Bluetooth: hci2: command 0x0419 tx timeout [ 234.366300][ T6253] netlink: 12 bytes leftover after parsing attributes in process `syz.4.535'. [ 234.440890][ T6262] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 234.499181][ T6163] team0: Port device team_slave_0 added [ 234.509724][ T6268] syz.1.537[6268] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 234.509811][ T6268] syz.1.537[6268] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 234.552749][ T6163] team0: Port device team_slave_1 added [ 235.624790][ T6163] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 235.683507][ T6163] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.711014][ T6163] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 235.724908][ T6163] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 235.732331][ T6163] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.763053][ T6163] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 236.628145][ T6290] netlink: 596 bytes leftover after parsing attributes in process `syz.4.542'. [ 236.733365][ T6163] device hsr_slave_0 entered promiscuous mode [ 236.771912][ T6163] device hsr_slave_1 entered promiscuous mode [ 236.803512][ T6163] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 236.837185][ T6163] Cannot create hsr debugfs directory [ 236.978378][ T6295] device syzkaller1 entered promiscuous mode [ 238.284579][ T6163] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 238.401553][ T6163] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 238.454320][ T6163] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 238.476420][ T6163] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 239.766929][ T6163] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.808342][ T5379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 239.846992][ T5379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 239.881029][ T6163] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.942598][ T26] audit: type=1326 audit(1756431038.340:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6346 comm="syz.1.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bcc824be9 code=0x7ffc0000 [ 239.974943][ T6343] loop3: detected capacity change from 0 to 40427 [ 239.987687][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 240.040203][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 240.073503][ T4405] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.081264][ T4405] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.107638][ T6343] F2FS-fs (loop3): invalid crc value [ 240.123111][ T6343] F2FS-fs (loop3): Found nat_bits in checkpoint [ 240.168081][ T6343] F2FS-fs (loop3): Start checkpoint disabled! [ 240.197654][ T26] audit: type=1326 audit(1756431038.420:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6346 comm="syz.1.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1bcc824be9 code=0x7ffc0000 [ 240.207358][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 240.260183][ T6343] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 240.835083][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 240.845653][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 240.855458][ T4405] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.863474][ T4405] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.874739][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 240.898068][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 241.131550][ T26] audit: type=1326 audit(1756431038.420:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6346 comm="syz.1.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bcc824be9 code=0x7ffc0000 [ 241.142677][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 241.245530][ T26] audit: type=1326 audit(1756431038.420:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6346 comm="syz.1.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f1bcc824be9 code=0x7ffc0000 [ 241.284383][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 241.323506][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 241.354617][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 241.361957][ T26] audit: type=1326 audit(1756431038.420:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6346 comm="syz.1.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bcc824be9 code=0x7ffc0000 [ 241.432626][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 241.460865][ T26] audit: type=1326 audit(1756431038.420:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6346 comm="syz.1.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7f1bcc824be9 code=0x7ffc0000 [ 241.556026][ T26] audit: type=1326 audit(1756431038.420:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6346 comm="syz.1.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bcc824be9 code=0x7ffc0000 [ 241.556520][ T6370] netlink: 'syz.0.560': attribute type 4 has an invalid length. [ 241.612972][ T26] audit: type=1326 audit(1756431038.420:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6346 comm="syz.1.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7f1bcc824be9 code=0x7ffc0000 [ 241.678746][ T26] audit: type=1326 audit(1756431038.420:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6346 comm="syz.1.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bcc824be9 code=0x7ffc0000 [ 241.759271][ T26] audit: type=1326 audit(1756431038.460:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6346 comm="syz.1.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=104 compat=0 ip=0x7f1bcc824be9 code=0x7ffc0000 [ 241.792652][ T5377] attempt to access beyond end of device [ 241.792652][ T5377] loop3: rw=2049, want=40968, limit=40427 [ 241.820835][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 241.851965][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 241.962362][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 241.999347][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 242.052592][ T6163] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 242.190834][ T5387] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.494700][ T5387] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.694469][ T5387] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.921066][ T5387] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.300798][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 245.405235][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 245.817470][ T6163] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.081946][ T6416] rdma_rxe: rxe_register_device failed with error -23 [ 246.089441][ T6416] rdma_rxe: failed to add syz_tun [ 247.272569][ T6428] capability: warning: `syz.0.578' uses 32-bit capabilities (legacy support in use) [ 247.634849][ T6438] loop4: detected capacity change from 0 to 512 [ 247.687555][ T6438] EXT4-fs error (device loop4): ext4_fill_super:4841: inode #2: comm syz.4.580: iget: bad i_size value: -1 [ 247.705534][ T6438] EXT4-fs (loop4): get root inode failed [ 247.711622][ T6438] EXT4-fs (loop4): mount failed [ 248.628433][ T6454] loop4: detected capacity change from 0 to 128 [ 249.336334][ T6454] ADFS-fs (loop4): error: can't find an ADFS filesystem on dev loop4. [ 250.953542][ T6466] loop3: detected capacity change from 0 to 2048 [ 251.001150][ T6468] netlink: 24 bytes leftover after parsing attributes in process `syz.4.587'. [ 251.053174][ T5379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 251.072352][ T5379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 251.287607][ T6478] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 251.610534][ T6481] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 252.263729][ T6466] NILFS error (device loop3): nilfs_lookup: deleted inode referenced: 12 [ 252.292287][ T5385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 252.314686][ T6484] loop4: detected capacity change from 0 to 128 [ 252.344847][ T5385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 252.451357][ T6466] Remounting filesystem read-only [ 252.452678][ T6486] netlink: 8 bytes leftover after parsing attributes in process `syz.0.591'. [ 252.492382][ T6466] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 252.582181][ T6163] device veth0_vlan entered promiscuous mode [ 252.601670][ T5385] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 252.631910][ T5385] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 252.720843][ T6163] device veth1_vlan entered promiscuous mode [ 252.764933][ T6484] EXT4-fs (loop4): mounted filesystem without journal. Opts: sysvgroups,inode_readahead_blks=0x0000000000004000,usrjquota=,acl,grpjquota=,,errors=continue. Quota mode: none. [ 252.808189][ T6492] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 252.812014][ T6484] ext4 filesystem being mounted at /122/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 253.056093][ T5372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 253.099497][ T5372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 253.182852][ T6163] device veth0_macvtap entered promiscuous mode [ 253.260491][ T6163] device veth1_macvtap entered promiscuous mode [ 253.279868][ T6163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.294200][ T6163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.307497][ T6163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.507073][ T6163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.799016][ T6163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.262029][ T6163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.276777][ T6163] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 254.327871][ T5379] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 254.382592][ T5379] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 254.721595][ T5379] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 254.773387][ T5379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 255.609228][ T6163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.673900][ T6163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.748241][ T6163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.829340][ T6163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.880183][ T6163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.918748][ T6163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.955086][ T6163] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 256.014768][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.022373][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.212945][ T5385] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 256.379657][ T5385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 256.425160][ T6163] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.177813][ T4405] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 257.245422][ T6163] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.291827][ T6163] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.370187][ T6163] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.942960][ T5387] device hsr_slave_0 left promiscuous mode [ 258.001732][ T5387] device hsr_slave_1 left promiscuous mode [ 258.039801][ T5387] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 258.086679][ T5387] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 258.162711][ T5387] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 258.191807][ T5387] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 258.248845][ T5387] device bridge_slave_1 left promiscuous mode [ 258.311839][ T5387] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.470922][ T5387] device bridge_slave_0 left promiscuous mode [ 258.516353][ T5387] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.872480][ T5387] device veth1_macvtap left promiscuous mode [ 258.924030][ T5387] device veth0_macvtap left promiscuous mode [ 258.997567][ T5387] device veth1_vlan left promiscuous mode [ 259.077827][ T5387] device veth0_vlan left promiscuous mode [ 261.189766][ T5387] team0 (unregistering): Port device team_slave_1 removed [ 261.220149][ T5387] team0 (unregistering): Port device team_slave_0 removed [ 261.436143][ T527] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.482028][ T527] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.562016][ T5393] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 261.625877][ T5385] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.685701][ T5385] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.702820][ T6624] atomic_op ffff88807ac50198 conn xmit_atomic 0000000000000000 [ 261.733351][ T6627] netlink: 8 bytes leftover after parsing attributes in process `syz.3.623'. [ 262.005058][ T6623] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 262.852171][ T6623] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 263.055068][ T6623] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 263.091783][ T6623] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 263.131918][ T6623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.163928][ T6623] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.212445][ T6623] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 263.265962][ T5385] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 268.160827][ T6687] loop3: detected capacity change from 0 to 1024 [ 269.228088][ T6687] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,bsddf,nombcache,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 269.571844][ T6904] netlink: 88 bytes leftover after parsing attributes in process `syz.4.636'. [ 270.929146][ T6931] netlink: 4 bytes leftover after parsing attributes in process `syz.4.640'. [ 271.541718][ T6936] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 271.552280][ T6936] openvswitch: netlink: Actions may not be safe on all matching packets [ 272.138281][ T6938] netlink: 4 bytes leftover after parsing attributes in process `syz.3.644'. [ 272.833565][ T6966] netlink: 36 bytes leftover after parsing attributes in process `syz.1.650'. [ 273.108307][ T6974] loop5: detected capacity change from 0 to 1024 [ 273.229331][ T6974] EXT4-fs (loop5): Ignoring removed orlov option [ 273.279882][ T6974] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 273.394901][ T6974] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsv1,min_batch_time=0x00000000000000c0,user_xattr,orlov,debug_want_extra_isize=0x0000000000000080,nouid32,resgid=0x0000000000000000,nomblk_io_submit,noquota,,errors=continue. Quota mode: none. [ 274.303681][ T6974] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2825: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 274.373938][ T6992] bridge0: port 3(vxlan0) entered blocking state [ 274.402513][ T6992] bridge0: port 3(vxlan0) entered disabled state [ 274.419986][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 274.420002][ T26] audit: type=1326 audit(1756431072.820:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6994 comm="syz.4.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a02175be9 code=0x7ffc0000 [ 274.488154][ T6992] device vxlan0 entered promiscuous mode [ 274.643169][ T26] audit: type=1326 audit(1756431072.870:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6994 comm="syz.4.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a02175be9 code=0x7ffc0000 [ 274.684666][ T26] audit: type=1326 audit(1756431072.870:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6994 comm="syz.4.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f2a02175be9 code=0x7ffc0000 [ 274.828875][ T26] audit: type=1326 audit(1756431072.870:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6994 comm="syz.4.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a02175be9 code=0x7ffc0000 [ 274.996573][ T26] audit: type=1326 audit(1756431072.870:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6994 comm="syz.4.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a02175be9 code=0x7ffc0000 [ 275.177765][ T26] audit: type=1326 audit(1756431072.870:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6994 comm="syz.4.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f2a02175be9 code=0x7ffc0000 [ 275.338987][ T26] audit: type=1326 audit(1756431072.870:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6994 comm="syz.4.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a02175be9 code=0x7ffc0000 [ 275.460510][ T26] audit: type=1326 audit(1756431072.870:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6994 comm="syz.4.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a02175be9 code=0x7ffc0000 [ 275.487117][ T26] audit: type=1326 audit(1756431072.880:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6994 comm="syz.4.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2a02175be9 code=0x7ffc0000 [ 275.744507][ T26] audit: type=1326 audit(1756431072.880:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6994 comm="syz.4.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a02175be9 code=0x7ffc0000 [ 283.977382][ T7134] loop4: detected capacity change from 0 to 64 [ 284.057485][ T7136] netlink: 24 bytes leftover after parsing attributes in process `syz.5.691'. [ 284.244207][ T7142] netlink: 4 bytes leftover after parsing attributes in process `syz.1.693'. [ 284.473832][ T7134] device vlan3 entered promiscuous mode [ 284.482104][ T7134] device bond0 entered promiscuous mode [ 284.488372][ T7134] device bond_slave_0 entered promiscuous mode [ 284.498943][ T7134] device bond_slave_1 entered promiscuous mode [ 285.333046][ T7150] netlink: 'syz.3.689': attribute type 8 has an invalid length. [ 285.547244][ T7159] binder: 7156:7159 ioctl c0306201 200000000080 returned -14 [ 285.612610][ T7161] device vlan0 entered promiscuous mode [ 285.618309][ T7161] device bond0 entered promiscuous mode [ 285.687015][ T7161] device bond_slave_0 entered promiscuous mode [ 285.701756][ T7161] device bond_slave_1 entered promiscuous mode [ 285.842667][ T7159] loop5: detected capacity change from 0 to 256 [ 285.887398][ T7159] FAT-fs (loop5): Unrecognized mount option "roir" or missing value [ 286.120895][ T7176] siw: device registration error -23 [ 286.255441][ T7183] loop3: detected capacity change from 0 to 2048 [ 286.381607][ T7186] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 286.430418][ T7183] NILFS error (device loop3): nilfs_lookup: deleted inode referenced: 12 [ 286.483314][ T7189] bridge0: port 3(vxlan0) entered blocking state [ 286.516857][ T7183] Remounting filesystem read-only [ 286.531686][ T7189] bridge0: port 3(vxlan0) entered disabled state [ 286.582983][ T7189] device vxlan0 entered promiscuous mode [ 286.636859][ T7183] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 290.611766][ T6891] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 291.827301][ T7236] netlink: 4 bytes leftover after parsing attributes in process `syz.1.714'. [ 292.602382][ T7252] loop4: detected capacity change from 0 to 2048 [ 292.770419][ T7252] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 292.851513][ T7256] netlink: 4 bytes leftover after parsing attributes in process `syz.1.720'. [ 292.925947][ T26] kauditd_printk_skb: 22 callbacks suppressed [ 292.925964][ T26] audit: type=1326 audit(1756431091.330:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7257 comm="syz.5.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f821bfb5be9 code=0x7ffc0000 [ 293.080408][ T26] audit: type=1326 audit(1756431091.330:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7257 comm="syz.5.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f821bfb5be9 code=0x7ffc0000 [ 293.262726][ T26] audit: type=1326 audit(1756431091.330:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7257 comm="syz.5.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f821bfb5be9 code=0x7ffc0000 [ 293.391622][ T26] audit: type=1326 audit(1756431091.330:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7257 comm="syz.5.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f821bfb5be9 code=0x7ffc0000 [ 293.529535][ T26] audit: type=1326 audit(1756431091.330:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7257 comm="syz.5.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f821bfb5be9 code=0x7ffc0000 [ 294.639352][ T26] audit: type=1326 audit(1756431091.330:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7257 comm="syz.5.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f821bfb5be9 code=0x7ffc0000 [ 294.786432][ T26] audit: type=1326 audit(1756431091.330:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7257 comm="syz.5.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f821bfb5be9 code=0x7ffc0000 [ 294.979363][ T26] audit: type=1326 audit(1756431091.330:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7257 comm="syz.5.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f821bfb5be9 code=0x7ffc0000 [ 295.101312][ T26] audit: type=1326 audit(1756431091.390:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7257 comm="syz.5.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f821bfb5be9 code=0x7ffc0000 [ 295.258521][ T26] audit: type=1326 audit(1756431091.390:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7257 comm="syz.5.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f821bfb5be9 code=0x7ffc0000 [ 296.694102][ T7349] loop4: detected capacity change from 0 to 512 [ 296.907969][ T7349] EXT4-fs (loop4): Ignoring removed orlov option [ 297.013634][ T7349] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 298.043850][ T7349] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 298.118820][ T7349] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2228: inode #15: comm syz.4.736: corrupted in-inode xattr [ 298.252134][ T7349] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.736: couldn't read orphan inode 15 (err -117) [ 298.315976][ T7349] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,orlov,debug,noload,nombcache,noblock_validity,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000008000,,errors=continue. Quota mode: none. [ 300.288643][ T5986] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 300.672016][ T5986] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 300.745566][ T5986] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 300.889039][ T5986] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 301.112397][ T5986] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 301.168339][ T5986] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 301.260711][ T5986] usb 6-1: Manufacturer: syz [ 301.384896][ T5986] usb 6-1: config 0 descriptor?? [ 301.585467][ T5988] usb 6-1: USB disconnect, device number 2 [ 302.003379][ T7415] netlink: 4 bytes leftover after parsing attributes in process `syz.5.744'. [ 302.676481][ T7431] netlink: 4 bytes leftover after parsing attributes in process `syz.0.747'. [ 306.333770][ T7444] syz.4.750 invoked oom-killer: gfp_mask=0x442dc0(GFP_KERNEL_ACCOUNT|__GFP_NOWARN|__GFP_COMP|__GFP_ZERO), order=3, oom_score_adj=1000 [ 306.349018][ T7444] CPU: 0 PID: 7444 Comm: syz.4.750 Not tainted syzkaller #0 [ 306.356878][ T7444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 306.368127][ T7444] Call Trace: [ 306.371510][ T7444] [ 306.374533][ T7444] dump_stack_lvl+0x168/0x230 [ 306.379686][ T7444] ? show_regs_print_info+0x20/0x20 [ 306.385672][ T7444] ? load_image+0x3b0/0x3b0 [ 306.390294][ T7444] ? local_lock_release+0x170/0x170 [ 306.395613][ T7444] ? __rwlock_init+0x140/0x140 [ 306.400839][ T7444] dump_header+0xd4/0x770 [ 306.405411][ T7444] oom_kill_process+0x20e/0x3d0 [ 306.410944][ T7444] out_of_memory+0xe43/0x11e0 [ 306.417256][ T7444] ? asm_sysvec_irq_work+0x16/0x20 [ 306.422915][ T7444] ? mutex_lock_io_nested+0x60/0x60 [ 306.428387][ T7444] ? unregister_oom_notifier+0x20/0x20 [ 306.434372][ T7444] mem_cgroup_out_of_memory+0x277/0x370 [ 306.440403][ T7444] ? mem_cgroup_oom_trylock+0x210/0x210 [ 306.446662][ T7444] ? do_raw_spin_unlock+0x11d/0x230 [ 306.452412][ T7444] try_charge_memcg+0xf79/0x14a0 [ 306.457721][ T7444] ? get_mem_cgroup_from_objcg+0x120/0x120 [ 306.463883][ T7444] ? rcu_lock_acquire+0x30/0x30 [ 306.468760][ T7444] obj_cgroup_charge_pages+0x87/0x190 [ 306.474140][ T7444] ? __lock_acquire+0x7c60/0x7c60 [ 306.479515][ T7444] ? __memcg_kmem_charge_page+0x380/0x380 [ 306.485460][ T7444] __memcg_kmem_charge_page+0x2fe/0x380 [ 306.491215][ T7444] __alloc_pages+0x218/0x470 [ 306.496238][ T7444] ? zone_statistics+0x170/0x170 [ 306.501372][ T7444] __get_free_pages+0x8/0x30 [ 306.507310][ T7444] __se_sys_io_uring_setup+0x112d/0x2850 [ 306.514124][ T7444] ? __lock_acquire+0x7c60/0x7c60 [ 306.520162][ T7444] ? __x64_sys_io_uring_setup+0x60/0x60 [ 306.526383][ T7444] ? lockdep_hardirqs_on+0x94/0x140 [ 306.532127][ T7444] do_syscall_64+0x4c/0xa0 [ 306.536760][ T7444] ? clear_bhb_loop+0x30/0x80 [ 306.541882][ T7444] ? clear_bhb_loop+0x30/0x80 [ 306.546935][ T7444] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 306.553015][ T7444] RIP: 0033:0x7f2a02175be9 [ 306.557880][ T7444] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 306.578185][ T7444] RSP: 002b:00007f2a0039afc8 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 306.586804][ T7444] RAX: ffffffffffffffda RBX: 00007f2a0239d180 RCX: 00007f2a02175be9 [ 306.595461][ T7444] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000111 [ 306.604550][ T7444] RBP: 0000200000000340 R08: 0000000000000000 R09: 0000000000000000 [ 306.613341][ T7444] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 306.621690][ T7444] R13: 0000000000000000 R14: 0000000000000111 R15: 0000000000000000 [ 306.630056][ T7444] [ 306.633282][ T7444] memory: usage 307196kB, limit 307200kB, failcnt 117 [ 306.640747][ T7444] memory+swap: usage 310016kB, limit 9007199254740988kB, failcnt 0 [ 306.648992][ T7444] kmem: usage 307064kB, limit 9007199254740988kB, failcnt 0 [ 306.656522][ T7444] Memory cgroup stats for /syz4: [ 306.657536][ T7444] anon 0 [ 306.657536][ T7444] file 114688 [ 306.657536][ T7444] kernel_stack 131072 [ 306.657536][ T7444] pagetables 131072 [ 306.657536][ T7444] percpu 144 [ 306.657536][ T7444] sock 0 [ 306.657536][ T7444] shmem 0 [ 306.657536][ T7444] file_mapped 0 [ 306.657536][ T7444] file_dirty 114688 [ 306.657536][ T7444] file_writeback 0 [ 306.657536][ T7444] swapcached 3072000 [ 306.657536][ T7444] anon_thp 0 [ 306.657536][ T7444] file_thp 0 [ 306.657536][ T7444] shmem_thp 0 [ 306.657536][ T7444] inactive_anon 0 [ 306.657536][ T7444] active_anon 0 [ 306.657536][ T7444] inactive_file 49152 [ 306.657536][ T7444] active_file 69632 [ 306.657536][ T7444] unevictable 0 [ 306.657536][ T7444] slab_reclaimable 457752 [ 306.657536][ T7444] slab_unreclaimable 1285072 [ 306.657536][ T7444] slab 1742824 [ 306.657536][ T7444] workingset_refault_anon 40 [ 306.657536][ T7444] workingset_refault_file 0 [ 306.657536][ T7444] workingset_activate_anon 38 [ 306.756633][ T7444] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.750,pid=7435,uid=0 [ 306.775205][ T7444] Memory cgroup out of memory: Killed process 7435 (syz.4.750) total-vm:104132kB, anon-rss:816kB, file-rss:22060kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 307.357298][ T7454] rdma_rxe: rxe_register_device failed with error -23 [ 307.469582][ T7454] rdma_rxe: failed to add syz_tun [ 317.934475][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.942725][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.553254][ T6777] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 327.333543][ T7703] netlink: 4 bytes leftover after parsing attributes in process `syz.1.814'. [ 327.388648][ T7703] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 327.413674][ T7703] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 327.436787][ T7703] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 327.452212][ T7703] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 332.731953][ T4185] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 333.021627][ T4185] usb 5-1: Using ep0 maxpacket: 8 [ 333.164072][ T4185] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 333.296529][ T4185] usb 5-1: New USB device found, idVendor=2801, idProduct=0201, bcdDevice=2a.d5 [ 333.473436][ T4185] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.628202][ T4185] usb 5-1: config 0 descriptor?? [ 335.049372][ T7798] xt_addrtype: ipv6 does not support BROADCAST matching [ 335.346488][ T4281] usb 5-1: USB disconnect, device number 4 [ 338.535985][ T7826] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 338.960408][ T7833] netlink: 4 bytes leftover after parsing attributes in process `syz.1.841'. [ 346.658582][ T26] kauditd_printk_skb: 58 callbacks suppressed [ 346.658600][ T26] audit: type=1326 audit(1756431145.060:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7900 comm="syz.1.860" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1bcc824be9 code=0x0 [ 346.962607][ T7918] syz.5.864[7918] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 346.962721][ T7918] syz.5.864[7918] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 347.992859][ T7928] kAFS: unparsable volume name [ 350.791251][ T5993] Bluetooth: hci2: command 0x0406 tx timeout [ 351.866092][ T7975] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 351.916152][ T7975] netlink: 4 bytes leftover after parsing attributes in process `syz.0.888'. [ 352.939336][ T5993] Process accounting resumed [ 354.839037][ T6825] wlan1: Trigger new scan to find an IBSS to join [ 355.676558][ T8013] netlink: 4 bytes leftover after parsing attributes in process `syz.1.898'. [ 356.797842][ T8020] ptrace attach of "./syz-executor exec"[4191] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ  "[8020] [ 356.910967][ T6710] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 357.392259][ T8022] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 357.527442][ T8027] overlayfs: failed to clone upperpath [ 358.690978][ T8040] kAFS: unparsable volume name [ 359.131792][ T7459] wlan1: Trigger new scan to find an IBSS to join [ 360.775528][ T8046] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.823674][ T6825] wlan1: Creating new IBSS network, BSSID fe:3a:74:72:9c:83 [ 361.070666][ T8066] ptrace attach of "./syz-executor exec"[4183] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ  "[8066] [ 361.387678][ T8065] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 362.055362][ T8046] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.081588][ T8065] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 362.161980][ T8072] syz.4.907[8072] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 362.162090][ T8072] syz.4.907[8072] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 362.197216][ T8046] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.227049][ T8074] netlink: 596 bytes leftover after parsing attributes in process `syz.0.908'. [ 362.316581][ T8046] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.449637][ T8046] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.479258][ T8046] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.505833][ T8046] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.527979][ T8046] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.562506][ T7459] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.623962][ T7459] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.676538][ T8078] chnl_net:caif_netlink_parms(): no params data found [ 362.709251][ T7459] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.749966][ T8078] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.758820][ T8078] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.767672][ T8078] device bridge_slave_0 entered promiscuous mode [ 362.776736][ T8078] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.790301][ T8078] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.799907][ T8078] device bridge_slave_1 entered promiscuous mode [ 362.813992][ T8091] netlink: 4 bytes leftover after parsing attributes in process `syz.3.909'. [ 362.874130][ T8094] syz.0.922[8094] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 362.874236][ T8094] syz.0.922[8094] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 362.923226][ T7459] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.993840][ T8078] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 363.016851][ T8078] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 363.072285][ T8101] kAFS: unparsable volume name [ 364.023944][ T8078] team0: Port device team_slave_0 added [ 364.044922][ T8078] team0: Port device team_slave_1 added [ 364.087565][ T8113] netlink: 'syz.1.914': attribute type 4 has an invalid length. [ 364.223574][ T8078] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 364.230992][ T8078] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 364.317674][ T8078] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 364.366977][ T8078] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 364.376645][ T8078] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 364.437114][ T8078] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 364.498418][ T5988] Bluetooth: hci2: command 0x0409 tx timeout [ 364.517680][ T8078] device hsr_slave_0 entered promiscuous mode [ 364.537160][ T8078] device hsr_slave_1 entered promiscuous mode [ 364.593565][ T8078] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 364.630936][ T8078] Cannot create hsr debugfs directory [ 365.844704][ T8136] ptrace attach of "./syz-executor exec"[4182] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ  "[8136] [ 366.573023][ T5990] Bluetooth: hci2: command 0x041b tx timeout [ 366.614353][ T8143] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 366.632386][ T8145] netlink: 596 bytes leftover after parsing attributes in process `syz.1.923'. [ 368.147913][ T8078] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 368.174462][ T8078] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 368.190815][ T8078] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 368.208931][ T8078] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 368.329946][ T8078] 8021q: adding VLAN 0 to HW filter on device bond0 [ 368.342894][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 368.351835][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 368.364681][ T8078] 8021q: adding VLAN 0 to HW filter on device team0 [ 368.393322][ T6825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 368.408257][ T6825] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 368.419642][ T6825] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.427304][ T6825] bridge0: port 1(bridge_slave_0) entered forwarding state [ 368.440448][ T6825] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 368.450853][ T6825] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 368.462132][ T6825] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.470348][ T6825] bridge0: port 2(bridge_slave_1) entered forwarding state [ 368.479083][ T6825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 368.488325][ T6825] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 368.498745][ T6825] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 368.514280][ T7459] device hsr_slave_0 left promiscuous mode [ 368.522642][ T7459] device hsr_slave_1 left promiscuous mode [ 368.533412][ T7459] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 368.543668][ T7459] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 368.553407][ T7459] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 368.563420][ T7459] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 368.574355][ T7459] device vxlan0 left promiscuous mode [ 368.580554][ T7459] bridge0: port 3(vxlan0) entered disabled state [ 368.590719][ T7459] device bridge_slave_1 left promiscuous mode [ 368.598134][ T7459] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.609938][ T7459] device bridge_slave_0 left promiscuous mode [ 368.618154][ T7459] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.636166][ T7459] device veth1_macvtap left promiscuous mode [ 368.643179][ T7459] device veth0_macvtap left promiscuous mode [ 368.649647][ T7459] device veth1_vlan left promiscuous mode [ 368.656676][ T5989] Bluetooth: hci2: command 0x040f tx timeout [ 368.656823][ T7459] device veth0_vlan left promiscuous mode [ 368.859476][ T7459] team0 (unregistering): Port device team_slave_1 removed [ 368.877498][ T7459] team0 (unregistering): Port device team_slave_0 removed [ 368.897761][ T7459] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 368.916989][ T7459] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 368.989151][ T7459] bond0 (unregistering): Released all slaves [ 369.052566][ T6825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 369.068454][ T6825] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 369.080305][ T6825] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 369.106851][ T6710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 369.124773][ T6710] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 369.146027][ T6825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 369.164657][ T6825] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 369.180672][ T8078] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 369.206593][ T8078] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 369.223848][ T6710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 369.234725][ T6710] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 369.375202][ T6825] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 369.384988][ T6825] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 369.405206][ T8078] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 369.574052][ T6825] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 369.590075][ T6825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 369.625085][ T6825] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 369.642575][ T6825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 369.655657][ T8078] device veth0_vlan entered promiscuous mode [ 369.664209][ T6825] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 369.677139][ T6825] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 369.692251][ T8078] device veth1_vlan entered promiscuous mode [ 369.731298][ T6825] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 369.747004][ T6825] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 369.756274][ T6825] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 369.769959][ T6825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 369.783249][ T8078] device veth0_macvtap entered promiscuous mode [ 369.799166][ T8078] device veth1_macvtap entered promiscuous mode [ 369.824504][ T8078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.840919][ T8078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.865729][ T8078] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 369.874379][ T6825] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 369.884520][ T6825] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 369.893800][ T6825] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 369.904256][ T6825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 369.916484][ T8078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 369.928262][ T8078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.945423][ T8078] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 369.954630][ T6710] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 369.967464][ T6710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 369.983231][ T8078] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.996103][ T8078] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.006392][ T8078] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.016027][ T8078] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.124322][ T6710] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.158025][ T6710] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.190098][ T6825] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 370.210672][ T6710] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.223758][ T6710] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.239602][ T7456] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 372.322094][ T5993] Bluetooth: hci2: command 0x0419 tx timeout [ 372.476443][ T8207] netlink: 28 bytes leftover after parsing attributes in process `syz.4.926'. [ 372.501945][ T8207] netlink: 8 bytes leftover after parsing attributes in process `syz.4.926'. [ 372.533439][ T8210] kAFS: unparsable volume name [ 373.065780][ T8211] netlink: 'syz.4.926': attribute type 10 has an invalid length. [ 373.372120][ T8211] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.379913][ T8211] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.614446][ T8219] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 373.778117][ T8211] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.785598][ T8211] bridge0: port 2(bridge_slave_1) entered forwarding state [ 373.795815][ T8211] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.803539][ T8211] bridge0: port 1(bridge_slave_0) entered forwarding state [ 374.055270][ T8211] device bridge0 entered promiscuous mode [ 374.151123][ T8211] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 374.523174][ T8213] netlink: 24 bytes leftover after parsing attributes in process `syz.5.927'. [ 374.761047][ T8230] netlink: 'syz.5.931': attribute type 4 has an invalid length. [ 375.820486][ T8245] netlink: 28 bytes leftover after parsing attributes in process `syz.1.952'. [ 375.850530][ T8245] netlink: 8 bytes leftover after parsing attributes in process `syz.1.952'. [ 375.899931][ T8247] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 375.917513][ T8247] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 375.970739][ T8247] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 376.063471][ T8251] netlink: 'syz.1.952': attribute type 10 has an invalid length. [ 376.074094][ T8251] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.084382][ T8251] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.082511][ T8251] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.090703][ T8251] bridge0: port 2(bridge_slave_1) entered forwarding state [ 377.098610][ T8251] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.106377][ T8251] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.312175][ T8251] device bridge0 entered promiscuous mode [ 377.319733][ T8251] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 378.115763][ T8272] netlink: 24 bytes leftover after parsing attributes in process `syz.0.947'. [ 378.202963][ T8273] device syzkaller0 entered promiscuous mode [ 378.903069][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.910442][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.404624][ T8294] netlink: 'syz.4.954': attribute type 4 has an invalid length. [ 382.010621][ T26] audit: type=1326 audit(1756431180.400:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8310 comm="syz.3.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff0986dbe9 code=0x7ffc0000 [ 382.074875][ T26] audit: type=1326 audit(1756431180.400:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8310 comm="syz.3.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff0986dbe9 code=0x7ffc0000 [ 382.139901][ T26] audit: type=1326 audit(1756431180.400:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8310 comm="syz.3.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7eff0986dbe9 code=0x7ffc0000 [ 382.294356][ T26] audit: type=1326 audit(1756431180.400:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8310 comm="syz.3.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff0986dbe9 code=0x7ffc0000 [ 382.434303][ T26] audit: type=1326 audit(1756431180.400:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8310 comm="syz.3.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7eff0986dbe9 code=0x7ffc0000 [ 382.509090][ T8318] netlink: 4 bytes leftover after parsing attributes in process `syz.4.974'. [ 382.618913][ T26] audit: type=1326 audit(1756431180.400:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8310 comm="syz.3.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff0986dbe9 code=0x7ffc0000 [ 382.679873][ T8318] netlink: 12 bytes leftover after parsing attributes in process `syz.4.974'. [ 382.844149][ T26] audit: type=1326 audit(1756431180.400:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8310 comm="syz.3.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff0986dbe9 code=0x7ffc0000 [ 382.965948][ T8328] netlink: 28 bytes leftover after parsing attributes in process `syz.5.963'. [ 383.007972][ T8328] netlink: 8 bytes leftover after parsing attributes in process `syz.5.963'. [ 383.045226][ T8332] loop4: detected capacity change from 0 to 512 [ 383.062759][ T26] audit: type=1326 audit(1756431180.400:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8310 comm="syz.3.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7eff0986dbe9 code=0x7ffc0000 [ 383.106866][ T8333] netlink: 'syz.5.963': attribute type 10 has an invalid length. [ 383.146381][ T26] audit: type=1326 audit(1756431180.400:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8310 comm="syz.3.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff0986dbe9 code=0x7ffc0000 [ 383.193982][ T26] audit: type=1326 audit(1756431180.400:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8310 comm="syz.3.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff0986dbe9 code=0x7ffc0000 [ 383.225322][ T8333] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.233073][ T8333] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.325807][ T8333] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.333761][ T8333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 383.341675][ T8333] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.349666][ T8333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 383.440777][ T8333] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 383.721294][ T8332] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 383.752131][ T8332] EXT4-fs (loop4): orphan cleanup on readonly fs [ 383.873027][ T8332] EXT4-fs warning (device loop4): ext4_enable_quotas:6461: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 384.391634][ T8347] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 384.400686][ T8347] openvswitch: netlink: Actions may not be safe on all matching packets [ 385.107540][ T8332] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 385.144718][ T8332] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.967: bg 0: block 40: padding at end of block bitmap is not set [ 385.169535][ T8332] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 385.448645][ T8332] EXT4-fs (loop4): 1 truncate cleaned up [ 385.943957][ T8360] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 385.954140][ T8360] openvswitch: netlink: Actions may not be safe on all matching packets [ 386.311680][ T8332] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 387.183272][ T8356] netlink: 4 bytes leftover after parsing attributes in process `syz.5.973'. [ 388.557815][ T7459] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 389.722111][ T8400] device syzkaller0 entered promiscuous mode [ 389.769511][ T8401] netlink: 28 bytes leftover after parsing attributes in process `syz.3.985'. [ 389.792909][ T8401] netlink: 8 bytes leftover after parsing attributes in process `syz.3.985'. [ 389.806800][ T8404] netlink: 'syz.3.985': attribute type 10 has an invalid length. [ 389.826570][ T8404] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.835094][ T8404] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.947213][ T8404] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.955162][ T8404] bridge0: port 2(bridge_slave_1) entered forwarding state [ 389.963085][ T8404] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.970379][ T8404] bridge0: port 1(bridge_slave_0) entered forwarding state [ 390.043315][ T8411] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 390.052434][ T8411] openvswitch: netlink: Actions may not be safe on all matching packets [ 390.791508][ T8404] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 390.800980][ T8407] netlink: 4 bytes leftover after parsing attributes in process `syz.1.989'. [ 390.983860][ T8407] device hsr_slave_0 left promiscuous mode [ 391.203039][ T8419] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 391.231941][ T8419] CIFS mount error: No usable UNC path provided in device string! [ 391.231941][ T8419] [ 391.242973][ T8419] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 391.257923][ T5988] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 391.682213][ T5988] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 391.809942][ T5988] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 391.892859][ T5988] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 391.961549][ T5988] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.016847][ T5988] usb 6-1: config 0 descriptor?? [ 392.090796][ T8430] netlink: 12 bytes leftover after parsing attributes in process `syz.0.999'. [ 393.801549][ T7480] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 395.711588][ T5988] usbhid 6-1:0.0: can't add hid device: -71 [ 395.719443][ T5988] usbhid: probe of 6-1:0.0 failed with error -71 [ 395.764031][ T5988] usb 6-1: USB disconnect, device number 3 [ 396.564059][ T8467] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1008'. [ 396.594375][ T8467] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1008'. [ 396.689518][ T8472] netlink: 'syz.3.1008': attribute type 10 has an invalid length. [ 396.728723][ T8472] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.736580][ T8472] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.869579][ T8473] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 397.882469][ T8473] openvswitch: netlink: Actions may not be safe on all matching packets [ 398.067921][ T8492] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1023'. [ 398.598762][ T8504] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1018'. [ 398.852232][ T8522] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 398.989635][ T8522] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 404.156917][ T8593] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1045'. [ 408.471633][ T23] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 408.971904][ T23] usb 6-1: device descriptor read/all, error -71 [ 411.196786][ T8668] loop4: detected capacity change from 0 to 512 [ 411.254135][ T8668] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 411.364457][ T8668] EXT4-fs (loop4): 1 truncate cleaned up [ 411.401648][ T8668] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,nodelalloc,stripe=0x0000000000004000,errors=remount-ro,minixdf,. Quota mode: none. [ 411.602323][ T8686] loop5: detected capacity change from 0 to 8 [ 412.532418][ T8686] SQUASHFS error: Unable to read directory block [249:c] [ 412.691230][ T4183] EXT4-fs error (device loop4): ext4_lookup:1858: inode #11: comm syz-executor: iget: bad extra_isize 46 (inode size 256) [ 413.154739][ T4183] EXT4-fs (loop4): Remounting filesystem read-only [ 413.195235][ T4183] EXT4-fs error (device loop4): ext4_lookup:1858: inode #11: comm syz-executor: iget: bad extra_isize 46 (inode size 256) [ 413.199565][ T4183] EXT4-fs (loop4): Remounting filesystem read-only [ 413.558304][ T8706] netlink: zone id is out of range [ 413.565720][ T8706] netlink: zone id is out of range [ 413.571985][ T8706] netlink: zone id is out of range [ 413.577608][ T8706] netlink: zone id is out of range [ 413.586952][ T8706] netlink: zone id is out of range [ 413.599685][ T8706] netlink: zone id is out of range [ 413.613648][ T8706] netlink: zone id is out of range [ 413.635169][ T8706] netlink: zone id is out of range [ 413.650724][ T8706] netlink: zone id is out of range [ 413.667183][ T8706] netlink: zone id is out of range [ 413.686209][ T8698] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1074'. [ 413.704155][ T8698] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1074'. [ 413.883541][ T7456] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.980667][ T8078] SQUASHFS error: Unable to read directory block [249:c] [ 414.124001][ T7456] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.150606][ T8078] SQUASHFS error: Unable to read inode 0x0 [ 414.179348][ T8078] SQUASHFS error: Unable to read inode 0x0 [ 414.245309][ T7456] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.489098][ T7456] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.108867][ T8721] bond0: (slave bridge0): Error: Slave device does not support XDP [ 418.059235][ T7456] tipc: Left network mode [ 418.101532][ T4263] Bluetooth: hci0: command 0x0409 tx timeout [ 418.490457][ T8723] chnl_net:caif_netlink_parms(): no params data found [ 418.986810][ T8723] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.994943][ T8723] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.018969][ T8723] device bridge_slave_0 entered promiscuous mode [ 419.074668][ T8723] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.120582][ T8723] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.180560][ T8723] device bridge_slave_1 entered promiscuous mode [ 419.396048][ T8723] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 419.468903][ T8723] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 419.567432][ T6777] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 419.736901][ T8723] team0: Port device team_slave_0 added [ 419.806639][ T8723] team0: Port device team_slave_1 added [ 419.855708][ T8775] netlink: 'syz.1.1095': attribute type 10 has an invalid length. [ 419.906946][ T8775] device wlan1 entered promiscuous mode [ 419.923415][ T8775] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 420.025687][ T8752] chnl_net:caif_netlink_parms(): no params data found [ 420.073546][ T8723] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 420.088358][ T8723] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.125070][ T8723] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 420.155472][ T8787] netlink: 'syz.3.1098': attribute type 4 has an invalid length. [ 420.171836][ T4281] Bluetooth: hci0: command 0x041b tx timeout [ 420.208927][ T8723] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 420.238147][ T8723] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.280595][ T8723] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 420.306428][ T8790] netlink: 'syz.3.1098': attribute type 17 has an invalid length. [ 420.340798][ T8790] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 420.489765][ T8752] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.499414][ T8752] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.508140][ T8752] device bridge_slave_0 entered promiscuous mode [ 420.517697][ T8752] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.525419][ T8752] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.553223][ T8752] device bridge_slave_1 entered promiscuous mode [ 420.609713][ T8723] device hsr_slave_0 entered promiscuous mode [ 420.635555][ T8723] device hsr_slave_1 entered promiscuous mode [ 420.670043][ T8723] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 420.707574][ T8723] Cannot create hsr debugfs directory [ 420.731445][ T4185] Bluetooth: hci2: command 0x0409 tx timeout [ 420.934831][ T8752] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 421.046800][ T8752] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 421.214891][ T8752] team0: Port device team_slave_0 added [ 421.257832][ T8752] team0: Port device team_slave_1 added [ 421.479419][ T8752] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 421.499879][ T8752] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 421.552623][ T8752] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 421.639859][ T8752] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 421.665212][ T8752] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 421.788000][ T8752] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 421.846704][ T8818] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1105'. [ 421.879784][ T8723] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 421.945572][ T8723] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 422.087039][ T8723] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 422.360165][ T6710] wlan1: Trigger new scan to find an IBSS to join [ 422.379151][ T4185] Bluetooth: hci0: command 0x040f tx timeout [ 423.190063][ T23] Bluetooth: hci2: command 0x041b tx timeout [ 423.207189][ T8752] device hsr_slave_0 entered promiscuous mode [ 423.242087][ T8752] device hsr_slave_1 entered promiscuous mode [ 423.277238][ T8752] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 423.349025][ T8752] Cannot create hsr debugfs directory [ 423.400491][ T7456] device hsr_slave_1 left promiscuous mode [ 423.432331][ T7456] device bridge_slave_1 left promiscuous mode [ 423.441726][ T7456] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.727094][ T7456] device bridge_slave_0 left promiscuous mode [ 423.738388][ T7456] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.793935][ T7456] device veth1_macvtap left promiscuous mode [ 423.807946][ T7456] device veth0_macvtap left promiscuous mode [ 423.816291][ T7456] device veth1_vlan left promiscuous mode [ 423.823008][ T7456] device veth0_vlan left promiscuous mode [ 424.421706][ T4263] Bluetooth: hci0: command 0x0419 tx timeout [ 425.156491][ T7456] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 425.168011][ T7456] device bond_slave_1 left promiscuous mode [ 425.240014][ T7456] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 425.356383][ T7456] device bond_slave_0 left promiscuous mode [ 425.966701][ T4281] Bluetooth: hci2: command 0x040f tx timeout [ 426.010246][ T7456] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 426.036162][ T7456] device bridge0 left promiscuous mode [ 426.050486][ T7456] bond0 (unregistering): Released all slaves [ 426.188791][ T8723] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 426.373007][ T8864] netlink: 'syz.1.1116': attribute type 4 has an invalid length. [ 426.387106][ T8865] netlink: 'syz.1.1116': attribute type 4 has an invalid length. [ 426.765005][ T8723] 8021q: adding VLAN 0 to HW filter on device bond0 [ 426.973205][ T8723] 8021q: adding VLAN 0 to HW filter on device team0 [ 427.091219][ T7459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 427.142426][ T7480] wlan1: Trigger new scan to find an IBSS to join [ 427.178675][ T7459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 427.568969][ T7459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 427.592277][ T7459] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 427.607941][ T8884] Cannot find add_set index 4 as target [ 427.647940][ T7459] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.655733][ T7459] bridge0: port 1(bridge_slave_0) entered forwarding state [ 427.717403][ T7459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 427.729064][ T7459] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 427.738926][ T7459] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.746367][ T7459] bridge0: port 2(bridge_slave_1) entered forwarding state [ 427.871763][ T7459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 427.892620][ T7459] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 427.929087][ T6710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 428.022937][ T4298] Bluetooth: hci2: command 0x0419 tx timeout [ 428.033934][ T6710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 428.074731][ T6710] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 428.133101][ T6710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 428.414368][ T6710] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 428.602950][ T7480] wlan1: Creating new IBSS network, BSSID 9e:32:10:9f:d9:1a [ 428.621109][ T8752] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 428.683960][ T8752] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 428.736383][ T8752] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 428.784136][ T8752] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 428.844981][ T6710] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 428.858563][ T6710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 428.917039][ T6710] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 428.976407][ T8723] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 429.205542][ T8723] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 429.314758][ T6710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 429.373264][ T6710] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 430.982614][ T8752] 8021q: adding VLAN 0 to HW filter on device bond0 [ 431.014693][ T8752] 8021q: adding VLAN 0 to HW filter on device team0 [ 431.056131][ T6710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 431.085934][ T6710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 431.128312][ T6710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 431.182952][ T6710] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 431.236434][ T6710] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.244245][ T6710] bridge0: port 1(bridge_slave_0) entered forwarding state [ 431.253273][ T6710] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 431.282185][ T6828] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 431.312371][ T6828] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 431.350194][ T6828] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.357815][ T6828] bridge0: port 2(bridge_slave_1) entered forwarding state [ 431.697384][ T6710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 431.833342][ T6710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 433.335802][ T6710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 433.388676][ T6710] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 433.469573][ T6710] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 433.668330][ T6710] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 433.704782][ T6710] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 433.749193][ T6710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 433.761824][ T6710] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 433.780128][ T8752] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 433.794501][ T8752] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 433.972509][ T8723] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 434.566866][ T6710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 434.610603][ T6710] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 434.765802][ T6710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 434.874774][ T6710] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 435.009756][ T6710] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 435.877278][ T8752] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 435.919005][ T7459] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 435.983946][ T7459] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 436.762613][ T9009] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1138'. [ 436.903057][ T6710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 436.984055][ T6710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 437.162455][ T7459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 437.202551][ T7459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 437.259645][ T7459] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 437.270049][ T7459] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 437.280746][ T8723] device veth0_vlan entered promiscuous mode [ 437.551886][ T8723] device veth1_vlan entered promiscuous mode [ 438.175396][ T8723] device veth0_macvtap entered promiscuous mode [ 438.238253][ T6710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 438.257951][ T6710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 438.303974][ T6710] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 438.446809][ T9035] bond0: (slave bridge0): Releasing backup interface [ 438.588213][ T9035] device bridge0 left promiscuous mode [ 438.698385][ T9035] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.707573][ T9035] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.528928][ T9035] device bridge_slave_0 left promiscuous mode [ 439.554158][ T9035] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.575431][ T9035] device bridge_slave_1 left promiscuous mode [ 439.591641][ T9035] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.613222][ T9035] bond0: (slave bond_slave_0): Releasing backup interface [ 439.634244][ T9035] device bond_slave_0 left promiscuous mode [ 439.661984][ T9035] bond0: (slave bond_slave_1): Releasing backup interface [ 439.682477][ T9035] device bond_slave_1 left promiscuous mode [ 439.738911][ T9035] bond0: (slave wlan1): Releasing backup interface [ 439.760565][ T9035] device wlan1 left promiscuous mode [ 439.804256][ T9035] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 439.843346][ T8723] device veth1_macvtap entered promiscuous mode [ 439.962969][ T9054] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 439.986364][ T8723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 440.036020][ T8723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.050753][ T8723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 440.065056][ T8723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.078793][ T8723] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 440.109498][ T8723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 440.139585][ T8723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.160337][ T8723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 440.179241][ T8723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.200162][ T8723] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 440.210216][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 440.222479][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 440.240583][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 440.258576][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 440.270273][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 440.288372][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 440.317761][ T8723] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.330603][ T8723] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.341155][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.351647][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.363356][ T8723] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.384977][ T8723] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.423670][ T6825] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 440.472635][ T6825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 440.523994][ T6825] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 440.559329][ T6825] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 440.662683][ T8752] device veth0_vlan entered promiscuous mode [ 440.729741][ T8752] device veth1_vlan entered promiscuous mode [ 440.928762][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 441.152549][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 441.499161][ T9083] MPTCP: kernel_bind error, err=-99 [ 441.585675][ T9087] siw: device registration error -23 [ 442.017987][ T8752] device veth0_macvtap entered promiscuous mode [ 442.027488][ T6825] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 442.051762][ T6825] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 442.062210][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 442.076804][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 442.092041][ T9095] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 442.097495][ T8752] device veth1_macvtap entered promiscuous mode [ 442.137003][ T9095] Error parsing options; rc = [-22] [ 442.204246][ T7456] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.240215][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 442.258075][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 442.270608][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 442.300827][ T7456] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.388724][ T8752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 442.393621][ T6828] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 442.434074][ T8752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.691548][ T6828] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.223321][ T8752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 446.454747][ T8752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.471443][ T8752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 446.490998][ T8752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.625831][ T8752] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 446.674547][ T8752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 447.455881][ T9130] syz.1.1160 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 447.637202][ T8752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.648869][ T8752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 447.667460][ T8752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.678728][ T8752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 447.699544][ T8752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.727455][ T8752] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 448.775953][ T6710] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 448.818708][ T6710] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 448.888894][ T6710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 448.915135][ T6710] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 448.930723][ T6710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 448.946656][ T9138] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1163'. [ 448.971133][ T8752] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.009589][ T8752] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.024065][ T8752] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.040188][ T8752] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.080074][ T7456] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.208132][ T7456] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.402328][ T6777] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 449.488281][ T6777] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 449.545036][ T6825] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 449.622343][ T6825] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 449.730629][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 449.747805][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 451.332394][ T9183] loop7: detected capacity change from 0 to 256 [ 452.615635][ T9194] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 452.615635][ T9194] The task syz.6.1172 (9194) triggered the difference, watch for misbehavior. [ 456.254126][ T9237] loop6: detected capacity change from 0 to 1764 [ 464.409875][ T9310] netlink: 'syz.1.1199': attribute type 10 has an invalid length. [ 464.480256][ T9310] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1199'. [ 464.744196][ T9296] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1196'. [ 464.813922][ T9310] netlink: 'syz.1.1199': attribute type 10 has an invalid length. [ 464.833272][ T9310] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1199'. [ 466.677793][ T7456] device hsr_slave_0 left promiscuous mode [ 466.698733][ T7456] device hsr_slave_1 left promiscuous mode [ 466.725638][ T7456] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 466.783672][ T7456] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 466.833242][ T7456] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 466.887960][ T7456] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 467.135182][ T7456] device bridge_slave_1 left promiscuous mode [ 467.202627][ T7456] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.580227][ T7456] device bridge_slave_0 left promiscuous mode [ 467.822178][ T7456] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.927778][ T7456] device veth1_macvtap left promiscuous mode [ 467.953067][ T7456] device veth0_macvtap left promiscuous mode [ 467.966757][ T7456] device veth1_vlan left promiscuous mode [ 467.980189][ T7456] device veth0_vlan left promiscuous mode [ 471.215033][ T9398] loop6: detected capacity change from 0 to 512 [ 471.463634][ T9398] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 471.488470][ T9398] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c11c, mo2=0102] [ 472.575472][ T9398] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2228: inode #15: comm syz.6.1217: corrupted in-inode xattr [ 472.650542][ T9398] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.1217: couldn't read orphan inode 15 (err -117) [ 472.723421][ T9398] EXT4-fs (loop6): mounted filesystem without journal. Opts: jqfmt=vfsold,abort,debug,noload,grpid,noblock_validity,noquota,lazytime,usrjquota=,,errors=continue. Quota mode: none. [ 473.039877][ T9416] loop7: detected capacity change from 0 to 256 [ 473.968226][ T7456] team0 (unregistering): Port device team_slave_1 removed [ 474.119246][ T7456] team0 (unregistering): Port device team_slave_0 removed [ 474.149314][ T7456] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 474.297867][ T7456] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 474.590764][ T7456] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 474.746482][ T7456] bond0 (unregistering): Released all slaves [ 484.911673][ T9487] netlink: 'syz.0.1234': attribute type 10 has an invalid length. [ 485.195224][ T9487] 8021q: adding VLAN 0 to HW filter on device team0 [ 485.280417][ T9487] bond0: (slave team0): Enslaving as an active interface with an up link [ 485.688313][ T9535] netlink: 'syz.7.1241': attribute type 1 has an invalid length. [ 485.791582][ T4281] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 485.956508][ T9547] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 486.021680][ T4281] usb 8-1: device descriptor read/64, error -71 [ 487.089753][ T9559] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1247'. [ 487.305763][ T9559] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1247'. [ 487.409274][ T4281] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 488.212042][ T4281] usb 8-1: device descriptor read/64, error -71 [ 489.337987][ T4281] usb usb8-port1: attempt power cycle [ 491.107773][ T26] kauditd_printk_skb: 20 callbacks suppressed [ 491.107791][ T26] audit: type=1804 audit(1756431290.504:253): pid=9606 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.1255" name="file1" dev="ramfs" ino=48688 res=1 errno=0 [ 491.314741][ T9615] syzkaller0: create flow: hash 1463019689 index 1 [ 491.372806][ T5993] syzkaller0: tun_net_xmit 76 [ 491.381069][ T5993] syzkaller0: tun_net_xmit 48 [ 491.466273][ T5988] syzkaller0: tun_net_xmit 76 [ 491.607211][ T9610] syzkaller0: delete flow: hash 1463019689 index 1 [ 494.882762][ T9665] syz.0.1274[9665] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 494.900797][ T9665] syz.0.1274[9665] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 495.274524][ T9669] tmpfs: Bad value for 'mpol' [ 498.349484][ T9694] overlayfs: failed to clone upperpath [ 498.453996][ T9700] nftables ruleset with unbound chain [ 499.086761][ T9719] ODEBUG: Out of memory. ODEBUG disabled [ 500.319822][ T9738] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1294'. [ 500.393666][ T9726] SET target dimension over the limit! [ 501.349932][ T9751] syz.7.1297 (9751) used greatest stack depth: 18592 bytes left [ 501.849525][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.865331][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.385215][ T9765] MTD: Couldn't look up './file0': -15 [ 502.897252][ T9763] overlayfs: failed to resolve './file1': -2 [ 503.260843][ T9781] loop6: detected capacity change from 0 to 128 [ 504.348832][ T9793] xt_time: unknown flags 0xc [ 507.793105][ T9823] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1316'. [ 507.868233][ T9825] lo speed is unknown, defaulting to 1000 [ 507.874630][ T9825] lo speed is unknown, defaulting to 1000 [ 507.881254][ T9825] lo speed is unknown, defaulting to 1000 [ 507.904957][ T9825] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 509.332917][ T9825] lo speed is unknown, defaulting to 1000 [ 509.915684][ T9825] lo speed is unknown, defaulting to 1000 [ 509.924104][ T9825] lo speed is unknown, defaulting to 1000 [ 509.931856][ T9825] lo speed is unknown, defaulting to 1000 [ 509.939089][ T9825] lo speed is unknown, defaulting to 1000 [ 510.159538][ T9825] lo speed is unknown, defaulting to 1000 [ 510.998484][ T9844] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1321'. [ 514.842160][ T9867] loop7: detected capacity change from 0 to 4096 [ 515.793152][ T26] audit: type=1326 audit(1756431315.194:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9903 comm="syz.7.1333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7056e4fbe9 code=0x7ffc0000 [ 515.880602][ T9904] tipc: Started in network mode [ 515.927226][ T9904] tipc: Node identity ac14140f, cluster identity 4711 [ 515.967382][ T26] audit: type=1326 audit(1756431315.224:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9903 comm="syz.7.1333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7056e4fbe9 code=0x7ffc0000 [ 515.972486][ T9904] tipc: New replicast peer: 255.255.255.255 [ 516.033702][ T9904] tipc: Enabled bearer , priority 10 [ 516.040781][ T26] audit: type=1326 audit(1756431315.234:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9903 comm="syz.7.1333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f7056e4fbe9 code=0x7ffc0000 [ 516.157634][ T26] audit: type=1326 audit(1756431315.234:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9903 comm="syz.7.1333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7056e4fbe9 code=0x7ffc0000 [ 516.288855][ T26] audit: type=1326 audit(1756431315.234:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9903 comm="syz.7.1333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7056e4fbe9 code=0x7ffc0000 [ 516.400943][ T26] audit: type=1326 audit(1756431315.234:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9903 comm="syz.7.1333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7056e4fbe9 code=0x7ffc0000 [ 516.561428][ T26] audit: type=1326 audit(1756431315.234:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9903 comm="syz.7.1333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7056e4fbe9 code=0x7ffc0000 [ 517.271487][ T26] audit: type=1326 audit(1756431315.234:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9903 comm="syz.7.1333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7056e4fbe9 code=0x7ffc0000 [ 517.376636][ T5986] tipc: Node number set to 2886997007 [ 517.476811][ T26] audit: type=1326 audit(1756431315.234:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9903 comm="syz.7.1333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f7056e4fbe9 code=0x7ffc0000 [ 517.571395][ T26] audit: type=1326 audit(1756431315.234:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9903 comm="syz.7.1333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7056e4fbe9 code=0x7ffc0000 [ 517.901170][ T9934] bridge0: port 3(batadv1) entered blocking state [ 517.977928][ T9934] bridge0: port 3(batadv1) entered disabled state [ 518.040419][ T9934] device batadv1 entered promiscuous mode [ 518.079595][ T9938] netlink: 'syz.3.1341': attribute type 10 has an invalid length. [ 518.111496][ T9938] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1341'. [ 518.541135][ T9938] team0: Failed to send port change of device geneve0 via netlink (err -105) [ 518.660527][ T9938] team0: Failed to send options change via netlink (err -105) [ 518.928444][ T6828] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 518.941497][ T6828] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 519.223369][ T9938] team0: Port device geneve0 added [ 519.465707][ T9959] netlink: 'syz.6.1346': attribute type 32 has an invalid length. [ 520.479627][ T9972] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1350'. [ 524.545089][ T26] kauditd_printk_skb: 55 callbacks suppressed [ 524.545107][ T26] audit: type=1326 audit(1756431323.944:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10008 comm="syz.3.1361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff0986dbe9 code=0x7ffc0000 [ 524.840853][ T26] audit: type=1326 audit(1756433901.991:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10008 comm="syz.3.1361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7eff0986dbe9 code=0x7ffc0000 [ 525.631321][ T26] audit: type=1326 audit(1756433901.991:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10008 comm="syz.3.1361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff0986dbe9 code=0x7ffc0000 [ 525.802416][ T26] audit: type=1326 audit(1756433901.991:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10008 comm="syz.3.1361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff0986dbe9 code=0x7ffc0000 [ 527.203884][T10031] net_ratelimit: 23 callbacks suppressed [ 527.203905][T10031] netlink: zone id is out of range [ 527.509056][T10041] loop7: detected capacity change from 0 to 4096 [ 528.026259][T10041] ntfs: (device loop7): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 528.048107][T10053] loop6: detected capacity change from 0 to 512 [ 528.078647][T10041] ntfs: (device loop7): ntfs_read_locked_inode(): $DATA attribute is missing. [ 528.150995][T10041] ntfs: (device loop7): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 528.216204][T10053] EXT4-fs error (device loop6): ext4_orphan_get:1401: inode #15: comm syz.6.1373: casefold flag without casefold feature [ 528.231153][T10041] ntfs: (device loop7): load_system_files(): Failed to load $MFTMirr. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 528.250229][T10053] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.1373: couldn't read orphan inode 15 (err -117) [ 528.309454][T10041] ntfs: volume version 3.1. [ 528.411984][T10053] EXT4-fs (loop6): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 529.908790][T10077] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 529.961621][T10077] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 529.991066][T10080] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1377'. [ 530.480135][T10097] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1382'. [ 533.895231][T10130] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 533.906784][T10130] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 533.918209][T10130] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 535.039112][T10156] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1397'. [ 535.064771][T10165] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20000 [ 535.180666][T10166] netlink: 'syz.6.1401': attribute type 16 has an invalid length. [ 535.319177][T10166] netlink: 'syz.6.1401': attribute type 3 has an invalid length. [ 535.335512][T10180] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 535.365972][T10166] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1401'. [ 535.425392][T10180] bond0: (slave bridge0): Releasing backup interface [ 535.781827][T10180] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 535.806679][T10180] device bridge_slave_0 left promiscuous mode [ 535.821750][T10180] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.853515][T10180] device bridge_slave_1 left promiscuous mode [ 535.868549][T10180] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.906168][T10180] bond0: (slave bond_slave_0): Releasing backup interface [ 535.947750][T10180] bond0: (slave bond_slave_1): Releasing backup interface [ 535.994468][T10180] team0: Port device team_slave_0 removed [ 536.028268][T10180] team0: Port device team_slave_1 removed [ 536.043358][T10180] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 536.075021][T10180] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 536.141525][T10180] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 536.160080][T10180] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 536.245814][T10180] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 536.319797][T10180] batman_adv: batadv0: Removing interface: virt_wifi0 [ 536.721786][T10180] team0: Port device geneve0 removed [ 536.870910][T10180] team0: Port device ip6gretap1 removed [ 536.890510][T10180] device vxlan0 left promiscuous mode [ 536.896356][T10180] bridge0: port 3(vxlan0) entered disabled state [ 536.949646][T10193] netlink: 92 bytes leftover after parsing attributes in process `syz.7.1404'. [ 538.989051][T10241] overlayfs: failed to clone upperpath [ 539.424966][T10254] syz.1.1417 sent an empty control message without MSG_MORE. [ 540.329867][ T5986] Bluetooth: hci0: command 0x0406 tx timeout [ 542.300861][T10270] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1422'. [ 542.411500][T10270] netlink: 'syz.6.1422': attribute type 1 has an invalid length. [ 542.459385][T10270] netlink: 'syz.6.1422': attribute type 2 has an invalid length. [ 542.470234][T10277] netlink: 200 bytes leftover after parsing attributes in process `syz.3.1424'. [ 542.519901][T10275] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1424'. [ 542.593893][T10279] lo speed is unknown, defaulting to 1000 [ 543.842504][T10290] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 543.889178][T10290] FAT-fs (loop7): unable to read boot sector [ 544.291425][T10319] netlink: 'syz.0.1436': attribute type 29 has an invalid length. [ 544.347288][T10319] netlink: 'syz.0.1436': attribute type 29 has an invalid length. [ 544.408789][T10324] netlink: 'syz.0.1436': attribute type 29 has an invalid length. [ 544.496238][T10328] netlink: 'syz.0.1436': attribute type 29 has an invalid length. [ 544.549341][T10328] netlink: 'syz.0.1436': attribute type 29 has an invalid length. [ 544.580018][ T5988] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 544.603242][T10328] netlink: 'syz.0.1436': attribute type 29 has an invalid length. [ 544.632925][T10328] netlink: 'syz.0.1436': attribute type 29 has an invalid length. [ 544.654324][T10328] netlink: 'syz.0.1436': attribute type 29 has an invalid length. [ 544.969073][ T5988] usb 7-1: Using ep0 maxpacket: 16 [ 546.070290][T10355] overlayfs: failed to clone upperpath [ 546.200327][T10360] overlayfs: failed to clone upperpath [ 547.178734][T10375] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1447'. [ 547.758728][ T5988] usb 7-1: unable to read config index 0 descriptor/all [ 547.776611][ T5988] usb 7-1: can't read configurations, error -71 [ 548.418069][T10412] netlink: 6 bytes leftover after parsing attributes in process `syz.7.1459'. [ 548.520692][T10412] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 548.593391][T10412] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 550.090226][ T4263] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 550.134369][ T4263] Bluetooth: hci2: Injecting HCI hardware error event [ 550.171011][ T4192] Bluetooth: hci2: hardware error 0x00 [ 550.515697][T10445] loop7: detected capacity change from 0 to 512 [ 550.650119][T10448] overlayfs: failed to clone upperpath [ 550.688041][T10445] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 550.959580][T10445] EXT4-fs (loop7): couldn't mount as ext2 due to feature incompatibilities [ 551.961283][T10466] ÿÿÿÿÿÿ: renamed from vlan1 [ 552.213475][T10443] loop7: detected capacity change from 0 to 128 [ 552.370050][T10443] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 552.410382][T10443] System zones: 1-3, 19-19, 35-36 [ 552.508941][T10443] EXT4-fs (loop7): mounted filesystem without journal. Opts: quota,debug,,errors=continue. Quota mode: writeback. [ 552.629239][T10443] ext4 filesystem being mounted at /52/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 552.867039][T10495] 9pnet: Insufficient options for proto=fd [ 554.698480][ T26] audit: type=1326 audit(1756433932.105:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10516 comm="syz.3.1482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff0986dbe9 code=0x7ffc0000 [ 554.929777][ T26] audit: type=1326 audit(1756433932.155:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10516 comm="syz.3.1482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7eff0986dbe9 code=0x7ffc0000 [ 556.247514][ T26] audit: type=1326 audit(1756433932.165:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10516 comm="syz.3.1482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff0986dbe9 code=0x7ffc0000 [ 556.382606][ T26] audit: type=1326 audit(1756433932.165:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10516 comm="syz.3.1482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff0986dbe9 code=0x7ffc0000 [ 556.458663][ T26] audit: type=1326 audit(1756433932.165:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10516 comm="syz.3.1482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7eff0986dbe9 code=0x7ffc0000 [ 557.375210][ T26] audit: type=1326 audit(1756433932.165:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10516 comm="syz.3.1482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff0986dbe9 code=0x7ffc0000 [ 557.658128][ T26] audit: type=1326 audit(1756433932.165:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10516 comm="syz.3.1482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff0986dbe9 code=0x7ffc0000 [ 558.680993][ T26] audit: type=1326 audit(1756433932.165:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10516 comm="syz.3.1482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7eff0986dbe9 code=0x7ffc0000 [ 558.817762][ T13] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 558.857226][ T13] Bluetooth: hci4: Injecting HCI hardware error event [ 558.905855][ T26] audit: type=1326 audit(1756433932.165:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10516 comm="syz.3.1482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff0986dbe9 code=0x7ffc0000 [ 558.938775][ C1] vkms_vblank_simulate: vblank timer overrun [ 558.945403][ T146] Bluetooth: hci4: hardware error 0x00 [ 558.997283][ T26] audit: type=1326 audit(1756433932.165:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10516 comm="syz.3.1482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff0986dbe9 code=0x7ffc0000 [ 559.082720][T10574] loop7: detected capacity change from 0 to 256 [ 559.974526][ T26] audit: type=1326 audit(1756433932.165:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10516 comm="syz.3.1482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7eff0986fa7c code=0x7ffc0000 [ 560.003091][ C1] vkms_vblank_simulate: vblank timer overrun [ 560.101461][ T26] audit: type=1326 audit(1756433932.165:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10516 comm="syz.3.1482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7eff0986f9b4 code=0x7ffc0000 [ 560.137441][ T26] audit: type=1326 audit(1756433932.165:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10516 comm="syz.3.1482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7eff0986f9b4 code=0x7ffc0000 [ 560.181104][ T26] audit: type=1326 audit(1756433932.165:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10516 comm="syz.3.1482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff0986dbe9 code=0x7ffc0000 [ 560.234955][ T26] audit: type=1326 audit(1756433932.195:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10516 comm="syz.3.1482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7eff0986dbe9 code=0x7ffc0000 [ 560.334514][ T26] audit: type=1326 audit(1756433932.195:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10516 comm="syz.3.1482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff0986dbe9 code=0x7ffc0000 [ 560.404727][ T26] audit: type=1326 audit(1756433932.195:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10516 comm="syz.3.1482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff0986dbe9 code=0x7ffc0000 [ 560.447305][ T26] audit: type=1326 audit(1756433932.195:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10516 comm="syz.3.1482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7eff0986dbe9 code=0x7ffc0000 [ 560.513590][ T26] audit: type=1326 audit(1756433932.195:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10516 comm="syz.3.1482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff0986dbe9 code=0x7ffc0000 [ 560.573456][ T26] audit: type=1326 audit(1756433932.195:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10516 comm="syz.3.1482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff0986dbe9 code=0x7ffc0000 [ 561.239200][T10535] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.248822][T10535] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.259115][T10535] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.268324][T10535] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.363881][T10535] device vlan0 left promiscuous mode [ 561.377079][T10535] device bond0 left promiscuous mode [ 561.814454][T10590] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1498'. [ 563.440906][T10607] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1501'. [ 564.530275][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 564.530324][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.259818][T10627] ÿÿÿÿÿÿ: renamed from vlan1 [ 565.384321][T10636] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1508'. [ 565.461292][T10636] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 565.641559][T10646] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1510'. [ 569.270667][T10642] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.278894][T10642] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.775819][ T26] kauditd_printk_skb: 19 callbacks suppressed [ 571.775838][ T26] audit: type=1326 audit(1756433949.107:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10700 comm="syz.1.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bcc824be9 code=0x7ffc0000 [ 571.871819][ T26] audit: type=1326 audit(1756433949.107:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10700 comm="syz.1.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bcc824be9 code=0x7ffc0000 [ 571.952896][ T26] audit: type=1326 audit(1756433949.107:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10700 comm="syz.1.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1bcc824be9 code=0x7ffc0000 [ 572.026920][ T26] audit: type=1326 audit(1756433949.107:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10700 comm="syz.1.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bcc824be9 code=0x7ffc0000 [ 572.108868][ T26] audit: type=1326 audit(1756433949.107:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10700 comm="syz.1.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bcc824be9 code=0x7ffc0000 [ 572.179506][ T26] audit: type=1326 audit(1756433949.107:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10700 comm="syz.1.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f1bcc824be9 code=0x7ffc0000 [ 572.232859][T10642] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 572.272156][ T26] audit: type=1326 audit(1756433949.107:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10700 comm="syz.1.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bcc824be9 code=0x7ffc0000 [ 572.337985][T10642] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 572.352199][ T26] audit: type=1326 audit(1756433949.107:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10700 comm="syz.1.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bcc824be9 code=0x7ffc0000 [ 572.413274][ T26] audit: type=1326 audit(1756433949.107:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10700 comm="syz.1.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f1bcc824be9 code=0x7ffc0000 [ 572.473219][ T26] audit: type=1326 audit(1756433949.107:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10700 comm="syz.1.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bcc824be9 code=0x7ffc0000 [ 576.743905][T10642] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.770407][T10642] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.805313][T10642] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.814686][T10642] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.136547][T10645] netlink: 'syz.6.1509': attribute type 4 has an invalid length. [ 577.559261][T10733] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1527'. [ 585.032041][T10800] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 585.085676][T10803] siw: device registration error -23 [ 585.092296][T10805] tipc: Failed to remove unknown binding: 66,1,1/1293924093:1086760965/1086760967 [ 585.170857][T10805] tipc: Failed to remove unknown binding: 66,1,1/1293924093:1086760965/1086760967 [ 585.232515][T10805] tipc: Failed to remove unknown binding: 66,1,1/1293924093:1086760965/1086760967 [ 586.245090][ T23] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 586.884662][ T23] usb 7-1: not running at top speed; connect to a high speed hub [ 588.076520][ T23] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 588.128617][ T23] usb 7-1: config 1 has no interface number 1 [ 588.313889][ T23] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 588.337117][T10853] bridge0: port 3(vlan2) entered blocking state [ 588.355726][ T23] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.387367][T10853] bridge0: port 3(vlan2) entered disabled state [ 588.439772][ T23] usb 7-1: Product: syz [ 588.464948][ T23] usb 7-1: Manufacturer: syz [ 588.731154][ T23] usb 7-1: SerialNumber: syz [ 589.403614][ T23] usb 7-1: can't set config #1, error -71 [ 589.428418][ T23] usb 7-1: USB disconnect, device number 4 [ 592.102609][T10912] syz.6.1572[10912] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 592.102777][T10912] syz.6.1572[10912] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 592.193883][T10921] overlayfs: failed to clone upperpath [ 596.118195][ T5990] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 596.169301][ T5990] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 601.806258][T11031] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 601.817349][T11031] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 601.828563][T11031] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 606.034937][T11082] siw: device registration error -23 [ 608.518517][T11090] bridge0: port 3(batadv1) entered blocking state [ 608.598510][T11090] bridge0: port 3(batadv1) entered disabled state [ 608.657138][T11090] device batadv1 entered promiscuous mode [ 609.108978][ T6777] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 609.120645][ T6777] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 616.668793][T11192] loop6: detected capacity change from 0 to 32768 [ 616.733769][T11192] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.1629 (11192) [ 616.776146][T11192] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 616.786131][T11192] BTRFS info (device loop6): enabling disk space caching [ 616.793874][T11192] BTRFS info (device loop6): disabling tree log [ 616.804606][T11192] BTRFS info (device loop6): setting nodatasum [ 616.811161][T11192] BTRFS info (device loop6): turning off barriers [ 616.818773][T11192] BTRFS info (device loop6): turning on flush-on-commit [ 616.827670][T11192] BTRFS info (device loop6): doing ref verification [ 616.835758][T11192] BTRFS info (device loop6): force clearing of disk cache [ 616.844076][T11192] BTRFS info (device loop6): enabling ssd optimizations [ 616.851554][T11192] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_LZO (0x8) [ 616.863451][T11192] BTRFS info (device loop6): use lzo compression, level 0 [ 616.872400][T11192] BTRFS info (device loop6): disk space caching is enabled [ 616.880940][T11192] BTRFS info (device loop6): has skinny extents [ 617.261238][T11192] BTRFS info (device loop6): clearing free space tree [ 617.270802][T11192] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 617.282223][T11192] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 618.005703][T11252] pit: kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 618.119737][T11252] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 618.257796][T11252] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 618.319044][T11252] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 618.408205][T11252] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 618.470689][T11252] pit: kvm: requested 160914 ns i8254 timer period limited to 200000 ns [ 618.550713][T11252] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 619.274351][T11252] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 622.109682][T11300] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 622.982009][T11337] loop6: detected capacity change from 0 to 128 [ 623.111293][T11337] FAT-fs (loop6): Unrecognized mount option "s(öƒYg7>-#̘n•¤hortname=winnt" or missing value [ 623.169525][T11300] usb 8-1: Using ep0 maxpacket: 8 [ 623.299660][T11300] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 623.500110][T11300] usb 8-1: config 0 has no interfaces? [ 623.660323][T11300] usb 8-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 623.697819][T11300] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.753670][T11300] usb 8-1: Product: syz [ 623.783064][T11300] usb 8-1: Manufacturer: syz [ 623.789071][T11300] usb 8-1: SerialNumber: syz [ 623.850228][T11300] usb 8-1: config 0 descriptor?? [ 623.969491][ T4263] usb 8-1: USB disconnect, device number 5 [ 624.295012][T11351] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1656'. [ 624.305685][T11351] device vlan0 entered promiscuous mode [ 624.383639][T11353] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 624.646814][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.658483][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.007342][T11372] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1660'. [ 627.249206][T11389] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 627.420692][T11396] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1669'. [ 628.806176][T11414] netlink: 'syz.7.1673': attribute type 12 has an invalid length. [ 629.981383][T11422] overlayfs: failed to get inode (-116) [ 630.012077][T11422] overlayfs: failed to get inode (-116) [ 630.045008][T11430] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1677'. [ 632.107262][T11467] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1686'. [ 633.259571][T11470] 8021q: adding VLAN 0 to HW filter on device bond2 [ 633.270316][T11470] bond1: (slave bond2): Enslaving as an active interface with an up link [ 633.292972][T11473] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1686'. [ 633.368681][T11473] 8021q: adding VLAN 0 to HW filter on device bond1 [ 633.403593][T11464] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 636.438871][ T6777] wlan1: Trigger new scan to find an IBSS to join [ 742.985287][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 742.996567][ C1] (detected by 1, t=10502 jiffies, g=41673, q=95) [ 743.004272][ C1] rcu: All QSes seen, last rcu_preempt kthread activity 10502 (4295011388-4295000886), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 743.019581][ C1] rcu: rcu_preempt kthread starved for 10502 jiffies! g41673 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 743.031863][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 743.043117][ C1] rcu: RCU grace-period kthread stack dump: [ 743.049898][ C1] task:rcu_preempt state:R running task stack:27008 pid: 15 ppid: 2 flags:0x00004000 [ 743.062442][ C1] Call Trace: [ 743.066214][ C1] [ 743.069960][ C1] __schedule+0x11bb/0x4390 [ 743.075412][ C1] ? release_firmware_map_entry+0x190/0x190 [ 743.081707][ C1] schedule+0x11b/0x1e0 [ 743.086318][ C1] schedule_timeout+0x15c/0x280 [ 743.091894][ C1] ? console_conditional_schedule+0x40/0x40 [ 743.098519][ C1] ? update_process_times+0x200/0x200 [ 743.104197][ C1] ? prepare_to_swait_event+0x331/0x350 [ 743.110212][ C1] rcu_gp_fqs_loop+0x29e/0x11b0 [ 743.116830][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 743.122989][ C1] ? rcu_gp_init+0xd58/0x10e0 [ 743.128804][ C1] ? rcu_gp_init+0x10e0/0x10e0 [ 743.134869][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 743.140614][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 743.146188][ C1] rcu_gp_kthread+0x98/0x350 [ 743.151085][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 743.156691][ C1] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 743.163387][ C1] ? __kthread_parkme+0x157/0x1b0 [ 743.169013][ C1] kthread+0x436/0x520 [ 743.173553][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 743.178859][ C1] ? kthread_blkcg+0xd0/0xd0 [ 743.183589][ C1] ret_from_fork+0x1f/0x30 [ 743.188316][ C1] [ 743.191533][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 743.198220][ C1] NMI backtrace for cpu 1 [ 743.202912][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 743.210624][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 743.221283][ C1] Call Trace: [ 743.224868][ C1] [ 743.227898][ C1] dump_stack_lvl+0x168/0x230 [ 743.232775][ C1] ? show_regs_print_info+0x20/0x20 [ 743.238674][ C1] ? load_image+0x3b0/0x3b0 [ 743.243571][ C1] ? irq_work_queue+0xbf/0x140 [ 743.248464][ C1] nmi_cpu_backtrace+0x397/0x3d0 [ 743.253696][ C1] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 743.260144][ C1] ? _printk+0xcc/0x110 [ 743.264951][ C1] ? cpu_online+0x1d/0x30 [ 743.269993][ C1] ? load_image+0x3b0/0x3b0 [ 743.274736][ C1] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 743.281082][ C1] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 743.287695][ C1] rcu_check_gp_kthread_starvation+0x1cd/0x250 [ 743.295088][ C1] print_other_cpu_stall+0x10c8/0x1220 [ 743.301008][ C1] ? print_cpu_stall+0x5f0/0x5f0 [ 743.306398][ C1] ? timekeeping_advance+0x7f6/0xac0 [ 743.311997][ C1] ? __lock_acquire+0x7c60/0x7c60 [ 743.317173][ C1] rcu_sched_clock_irq+0x831/0x1110 [ 743.322598][ C1] ? rcutree_dead_cpu+0x20/0x20 [ 743.327812][ C1] ? account_process_tick+0x227/0x3a0 [ 743.333390][ C1] update_process_times+0x193/0x200 [ 743.338968][ C1] tick_sched_timer+0x37d/0x560 [ 743.344122][ C1] __hrtimer_run_queues+0x4fe/0xc40 [ 743.349625][ C1] ? tick_setup_sched_timer+0x2c0/0x2c0 [ 743.355638][ C1] ? hrtimer_interrupt+0x8d0/0x8d0 [ 743.360785][ C1] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 743.367268][ C1] hrtimer_interrupt+0x3bb/0x8d0 [ 743.373568][ C1] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 743.380116][ C1] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 743.386119][ C1] [ 743.389254][ C1] [ 743.392294][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 743.398772][ C1] RIP: 0010:default_idle+0xb/0x10 [ 743.405579][ C1] Code: bf 48 89 df e8 b6 f3 09 f8 eb b5 e8 3f b0 f6 ff 00 00 cc cc 00 00 cc cc 00 00 cc cc 00 00 cc 66 90 0f 00 2d 77 84 53 00 fb f4 0f 1f 40 00 41 57 41 56 53 49 be 00 00 00 00 00 fc ff df 65 48 [ 743.428443][ C1] RSP: 0018:ffffc90000d67d48 EFLAGS: 000002c2 [ 743.434985][ C1] RAX: 5599c56b89199700 RBX: ffff88813fe48000 RCX: 5599c56b89199700 [ 743.443950][ C1] RDX: 0000000000000001 RSI: ffffffff8a0b1620 RDI: ffffffff8a59a240 [ 743.452721][ C1] RBP: ffffc90000d67e80 R08: dffffc0000000000 R09: ffffed101722765a [ 743.461081][ C1] R10: ffffed101722765a R11: 1ffff11017227659 R12: ffffffff8d698ca8 [ 743.470107][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11027fc9000 [ 743.478792][ C1] default_idle_call+0x81/0xc0 [ 743.483778][ C1] do_idle+0x21b/0x5b0 [ 743.488212][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 743.493926][ C1] ? asm_common_interrupt+0x22/0x40 [ 743.499977][ C1] cpu_startup_entry+0x14/0x20 [ 743.505344][ C1] start_secondary+0x31f/0x430 [ 743.510333][ C1] ? arch_scale_freq_tick+0x120/0x120 [ 743.515828][ C1] secondary_startup_64_no_verify+0xb1/0xbb [ 743.521985][ C1]