last executing test programs: 11m55.515808604s ago: executing program 3 (id=45): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x3c, r4, 0x1, 0x0, 0x40000002, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x3c}}, 0x440a4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r6, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48050}, 0x0) 11m55.228437738s ago: executing program 3 (id=49): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x20, 0x1410, 0x1, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x24044836}, 0xc094) 11m54.217475624s ago: executing program 3 (id=53): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f00000000c0)=@ethtool_ringparam={0x11, 0x8, 0xffffffd6, 0x6, 0x80000001, 0xfffffff7, 0x6, 0x4, 0x8000}}) 11m53.191429519s ago: executing program 3 (id=58): r0 = syz_mount_image$udf(&(0x7f0000000a40), &(0x7f0000000100)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2004402, &(0x7f0000004a80)=ANY=[@ANYBLOB="73686f72746164000000006d653d3030303030303030303030303030303030b030342c6e6f6164696e6963622c7569643d00", @ANYBLOB="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", @ANYRES64], 0x1, 0xa1b, &(0x7f0000001f80)="$eJzs209sm+d9B/Dfw1dyaKdrFbdzkzbLWLQIMqUN5P9KvAH2rApt5iZGZWXzZTBlyQ4RiVIluXC6ofWwAUWAHowC62EDhlx2GLCDd9hlp2CHYcCwwdhhKFa009I1S28sNiCnTcP78qFEyXKsxbElO5+PYX/Jl7+XfP7Q5Es+fAMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAiPjNL58aOZh2uhUAwP300sTXRw57/weAj5RzPv8DAAAAAAAAAAAAAMBul6KIP40Ur/64ky5U17vqZ1rtK1cnx8a33m1vihS1KKr68m/94KHDR44eOz7ay/ff/8P2RLw8ce5U4/T83MLizNLSzHRjst26OD89s+17uNv9NxuuBqAx99qV6UuXlhqHnju84earQ+888uiBoRPHXzy/v1c7OTY+PtFXMzD4gR/9Frc7w2NPFPHTSFH/7rupGRG1uPuxuMNz517bW3ViuOrE5Nh41ZHZVrO9XN6YarmqFjHUt9PJ3hjdh7m4K42Ia2XzywYPl92bWGguNqdmZxpnm4vLreXWfDvVuq0t+zMUtRhNEQsR0SluvbvBKOLfIsX33uukqYgoeuPwbHVi8J3bU7sHfdyGgbJvRcTNeADmbBd7JIp4I1J8//xIXMzjWg3b0xFfK/OpiG+UuRJxPV9P5RPkyYhfbPF84sEyEEX8Y6SYT5003Zv76nXlzCuNr7YvzffV9l5XHvj3h/tpl7821aOIqeoVv5M++MEOAAAAAAC7TxF/EyluzD2TFqJ/TbHVvtw415ya7X4r3Pvuv5H3Wl1dXR1K3WzkHMl5MufZnBdyLuS8lvN6zjdz3sj5Vs6bOVdydnJGLT9+zkbOkZwnc57NeSHnQs5rOa/nfDPnjZxv5byZcyVnJ2dY9wIAAAAAAABgl9kbRfwoUnz+r79ZnVcc1Xnpnzgx+sxXvtB/zvin73A/Ze1zEXEjtndO7mA+dTjVyj8ffr/YnnoU8e18/t8f7HRjAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAHVWLIj4dKX7wRidFiohGxIXo5kqx060DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPoh6KuJ0pPj5l+vV9ZsR8ZmI+N/V8k9ErKxustMtBgAAAAAAAABukYoYiRSPPdFJQxFxdeidRx49MHTi+Ivn9xdRRCpL+utfnjh3qnF6fm5hcWZpaWa6MdluXZyfntnuw9XPtNpXrk6Ojd+TztzR3nvc/r310/MLry+2Lr+6vOXt++qnppaWF5sXt7459kYtYqR/y3DV4Mmx8arRs61mu9o11W7TwFpEY7udAQAAAAAAAOChsS8VcTRSvNo6knrrxgPdNf9f6l4r1mr//PfXfwswuyl7+n8/sJ3LabsNHa4W3huTY+PjE32bBwZvLS3blFIRfxUpPvs7j1fr4Sn2bbk2XtbtiRTHvnkk1w19tqw7uaGqPjw5Nt54ab79pVOzs/MXm8vNqdmZxsRC8+K2fzgAAAAAAAAAAPfQvlTEn0WK3x25mXrnnef1/4Hutb71/1+vltAr9bQx11Rr+x+v1va7lz9xYrQx/qu3234v1v/LNqVUxL9Gisd+7/HqfPre+v/Iptqy7r8ixb/8w5O5rranrDvY6073Hi+1ZmdGUh6rzz3bq42q9niu/eR67cGy9nOR4i+e3lg7mms/tV57qKz9o0jxP0e3rv3l9drDZe0fRorfervRq91X1p7JtQfWa5+7OD87fadhLef/byPF2Z9/JfX6fNv57/v9x7VNueaWOX//yx/W/A/1bbuW5/VHef4P3mH+/y5S/PFPnsx13bE/lG9/rPp3ff5/O1L8569srD2Wa/ev1x7cbrd2Wjn/X4wUJ374w7U+5/nPI7s+Q/3z/5mBjbn2LNmh+X+sb9tQbtfh/+dYfBQtvf6t15qzszOLLrjgggtrF3b6lYn7oXz//6dI8cKZWuodx+T3/491r60f/7337fX3/xc25Zodev/f37fthXzUMjgQUV+eWxg8EFFfev1bX2rNNS/PXJ5pjx47euT50WPHnh/c0zu2W7+07aF7KJTzfyZSvPKTf177HLPx+G/r4/99m3LNDs3/J/v7tOG4ZttD8ZFUzv/1SPGdt99d+7z5fsf/vc//z3x+Y679/9uh+f9U37bqN/4fj3i+b9ueiDi13ccCAACAh8y+vE7+J7/292vnvG/8/B9f6NX2f/9zO7vh/H8AAAAAAPio25eK+MtI8d8jX0y9c8i28/vP6U25Zod+/3egb9v0fTqvZduDDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwC6Uo4qlI8eqPO2mlKK931c+02leuTo6Nb73b3hQpalFU9eXf+sFDh48cPXZ8tJfvv/+H7Yl4eeLcqcbp+bmFxZmlpZnpxmS7dXF+embb93C3+282XA1AY+61K9OXLi01Dj13eMPNV4feeeTRA0Mnjr94fn+vdnJsfHyir2Zg8AM/+i3SbbbviSIuRYr6d99N/15E1OLux+IOz517bW/VieGqE5Nj41VHZlvN9nJ5Y6rlqlrEUN9OJ3tjdB/m4q40Iq6VzS8bPFx2b2Khudicmp1pnG0uLreWW/PtVOu2tuzPUNRiNEUsRESnuPXuBqOIqUjxvfc66e0iouiNw7MvTXx95PCd21O7B33st/qdLTcPlH0rIm7GAzBnu9gjUcTHIsX3z4/ET4vuuFbD9nTE18p8KuIbZa5EXM/XU/kEeTLiF1s8n3iwDEQRZyPFfOqk/yjy3FevK2deaXy1fWm+r7b3uvLAvz/cT7v8takeRfysesXvpJ/5/wwAAAAA8BAp4jcixY25Z1K1Pri2pthqX26ca07Ndr/W733338h7ra6urg6lbjZyjuQ8mfNszgs5F3Jey3k955s5b+R8K+fNnCs5Ozmjlh8/ZyPnSM6TOc/mvJBzIee1nNdzvpnzRs63ct7MuZKzkzN8Tw4AAAAAAADsQrUo4vFI8YM3Omm16C7wXohurljnfOj9XwAAAP//dBg+9w==") r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002480)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000004bc0)='./bus\x00', 0x180000c, &(0x7f0000004c00)=ANY=[@ANYBLOB='nls=ascii,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c706172743d3078303030303030303030303030303062622c6e6f626172726965722c6e6f626172726965722c63726561746f723d7fcfb5b72c706172743d3078303030303030303030303030303130312c6769643d", @ANYRESHEX=0x0, @ANYRES32=r0, @ANYRESDEC=r2, @ANYBLOB="2c747970653d0b3cbf82440a104ab956f2ba5e36e41ccb1b040fa8b829b0b87078de654c66ac22aebaa2ef127e38e0aa2229f9cf6a850300"/71, @ANYRESDEC=0x0, @ANYRES8, @ANYBLOB="3e816e39ee5f8cbe3c8e3fdab31cf7dfc47a5c42fb519460cfe4131faaa01534ce3808634dc4d24648d83673a21e24b001fbbe1a9b7a9ac0f5403a76884709c1096a3a", @ANYRES8=0x0], 0x1, 0x6e6, &(0x7f0000001640)="$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") pselect6(0x40, &(0x7f0000000040)={0xc}, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x40004, 0xfffffffa, 0x0, 0x6, 0x15, "0017bc6600000000a1a712203a88f9c68000"}) read$FUSE(r1, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000002200)={0x50, 0x0, r4, {0x7, 0x27, 0x0, 0x14a4014}}, 0x50) read$FUSE(r1, &(0x7f0000002900)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000002140)={0x10, 0xffffffffffffffda, r5}, 0x10) syz_fuse_handle_req(r1, &(0x7f0000009040)="c9b6cf40d6a9928c6a8c0fdaba1e7bbd4ee597917b02ec4e8ff3bec8d7d8c08f8813039f40175e54e3d66ec19388ed788cf69c0c5b560f0401f1adb4b1f5198fe0bd7627cb9dc384db5b44495ba6094046fb2c8c7d0af7d67dbc3f5ef4aef8ec6bb01c52b6a10d4f9473987d0809b6a84f2ff8aae19a082abcb68b41c291add3ca2204a38c59e28c7c910aaa5a075676e541b6bb91de3854d2f97d3f80dc56c0705e74624a947f2c21ff936c6ba827742a24fd6d9e10b470ceb73a23fc57f5fa27cf073f2d0235e6fa4d1c29f9d0b6509c890ce0e7c3a2a4dd8b6336f02b9d7cc4c8e37f5f5a57f63aeec3228bd15b6d041eab97bccb14ee1ca6fbf7f7ed2e4dd0a32d41cc41c1031424b94621edcea1bddd40f3ad905202dfba3b912efd3468d2ad42b8a01bcb13b288afdc00b7e5857425d7919651160ec15447a26758f20653e69559f0892efc8f0715d8d79f52a44c79aba8ac58dc726ed721eeab3480eaacc2655d4b8831c9aff049c32709ab7adfb24ae767d45468dc0e42bc34b3568ce95e850eaabbf3a1be4d0f9b3e8781a2a9dc06374fe496a755b48abce67fd56de43816d64e883d9db51489ab8a81d1af3a180b6772d2bdac6313d3c183239d4c0bbbe76173f011f144ba71ac8043107f6533b3ef2f44924039b8587485749647315eb7bfe1e412e94f8cdaa937480fdd23769a69e14ea82d741484c99dd1ddd1edfb4faa51431f15531b61e59d68f9d189b27d0bf925970ac66fc35dbe1e430893cc60b28ca6d8e34931bf02154aee6f1fc58d0c0d8e48eaf8079ded67fdd9f19ebfa85d1ab6ec7f54e1963be353b34a6cb7fa35ddb60a9fc6bd1c6f11bf981b5a1bba81513fe447ff7eb2db0d27f1cfd04353e05f37d6c1bd6eb8219ce799338de3518bfec529373e4acfd644212be283856be064bac0f4926c02c0915816615f1f04d1d5136872029afee663f0bf1b6811c594e1465fba59f5727e5a826e3c60576bc2087f21521ffc90dcca39cbec7c0466c8fb7b1bcea7cffb333d2d16daa269d63f4911d10ed24462b37cdceb7c88e819489e1939e5e3cdcc5a858d09803c98d9e5fd617bc92c0880f072c54608f6ea69edba05b4edcd8d3f5e3c926220a191f2aa0d2f0c9158e298bc2e756ee091a0ac48752e4bb56fac67b02eb2c7b3380244ed66648482d8bc2a29bfc26ade0f4a5665282ea408254fd88e2812a184ee9af9c7769fba1ec380043d5cdf6056f89b0e6812a441c3013b0fe0d8418fc47c13fbf4fc2b4a89496d4ab9d9826d0e586574e8dd15d4eb8b86ed372e37287fc818df5b6993b650fba844d960e3fd62db0bc7b12ab286d6492388a91ae4da6bdece6e101c13100eaba3b9998706fd4defaa3ed2965ce7fe6062b8c58f20c6b44b01121184ee1dda1cb66b3ababecfc0b7a9a12624e0b826c35d0149335149cfb49fbe68d1dbb7eef96d7956dc573d449847ff4bb7ba0ededd00c904130f1252c3dd4bdcdeccf6f8a83e3abfa14d12c753558022efa0704549b0571e31c4bc9f3e485f8d2d88189b4149569ef83e8feb2ad26c263b0f91f8975c86c8fa9c9457da5ef4a8a94844f824873576f722e32b376ba5f3ed0ea9818d86ddc35ba0e7f322594d9a0fea878af5c03d242bc7b0af89091f088245154391e75ab1b6b2730ccd01c28e9ec99428cc22c2d08ae2829537c34ebd1273327d0d18175698f9fe587e968d19f00ff98555fcfe95d00cb3abae32afcd48f3d4cd7c63c45581203a8a3040363d98bf9426493039fce7bb03493ab6e176cb45e2af461e77fc93d1202fe0bc7b77398c52bbc1c1436439f26cb2e17933a0ae309611e46bebd4d84a939d9b040a08cad90c2eda6ddc933edffc8e562aa64658f99a9ec8a47278edb828b5312a95ca34c0af428aac64d3fa1c4045885891fda7666dfb680da4dc2c02becb8303b76987b6d9be01174df88e41a48a42444caeae5e36118564e57209594285bc2915b222f99f016326430c38c9807994cfa1c3c85aa0f6375c716cd7f27be9b2cef6866d07c8ed00bc101a74219182562467ebbd43d2ba78a4b0eae22c67702f318bc55ccd92f5fd11557335f94ff6f38cfe9fbe31d3fac064dcd7d660d02fbeaa26acf8927c1e3bc71d9ed8ef2e93f0a42813526daa1fad36676734103bcc621a114b098295de578bf8d7df9034fb3ba86ea529bf639cde496b5e48145e4a814f894fb3bf3f41b49d0572dad5988348dad7a064b2d76d9092336cb404934790683b2b3576d3b75534df2c36bc78e05ed250b9aaede772a08bf5972444ecf4e447c062d95e556768e264813369465713834f6e239695b6bfca1b6108a09368688e212b7ba556df50c02486bf1b2196da3d4c0553923fe9b1bb4474d0f569bec1f35dce4be0f5e2408efa69aa66dda6bb1ef43295fe005f4a86840bb608796ce14bcc1134013bf741ad1aa70cc6579edbd42478d3054e1f7bdbd5b1131ded725041270e8a46bcc8bbfe89089f87105939deb2a9f10dd60d059679d4514bfbfc94b333c7dde79576426f07f24ab6a57290b0d723bf3bffa2f66fe191d0dee8b292c8c15eb42245b899ddde3c6afbbf0d7c301dd142878dbca579f387931460c8c37e186f60f8d9209dc98f1a27b84ecefd71de077017261ad6cc3072fe57ec589cd9498946fda8a834e3f02e8a91f7ce6e18e76f936f6f39d354b63dccc706e25b1d8b1a4830c46f249b5e5a40042fea920ed57a2415431f83c238113ee7d152c16f0780c502d5c995168e3f91113af11752f10434b8dc5ef0e46a276c683261aa73877ce96ebd0176977e124c5b93bbb02ef97a6f6a13c15c261f23014f4b13c8f18746727206b245bee70d7b94968141f104f0682a3df4242c6a60fa1b70c227306520b1b9fbd6c916b0edf5e2ce5220fc9ef10ab0a10e1bf259e91eb127d5a31b7633f15130fdb44ce2178a20d5dc3f91688090881c061d75b4b59c3b2b7eb7a3dd1564bfa6c883c217cb76c2a7516dec926add0a1886570531c32b6284b1e80fbde88905f67ea5cea41003325327000a7f7249a99986f19f423843e8dc791df8679a2ed2b024d7d8c79112644a4fbd32bef0cd1f9d55025708135ed34cbf52ce3a0af0f8cd985362ef6fceb6c72f241128b16dad7575559badb3847e051f38d7b5ca638a1f454054659d90b2c046e4f9e2ab127f257ccc92f887b3e0c4fb49d159741fc649638180addf3f23e5265015f6dad9b25cb86d8a33b802e55258749ec050d15d0d7d821f9615c7d8c12ce11c63fb1eb118455c4e2167f66e4eaf9dec0dd2f345a7e2bb369a66b0755003a9c89449393f71acd98afdf6347792251d669ff3c64c50d705a67e543cad95655d6a4cce233acdac5ffc96681772be3c04a1b36f5273815af65ef87c7ad0d51462bf337c2389a8eded875f75eeebe5e5efc26933948e623364d0dbad3402f659a93acaaa21bc8f559dca605aa6732d0eced5a21ee8a6403b1f91722fcbada24a3031d6aa221612a36584d5edc6ba0f64096e9b6eae1555a95945b937457c4c74371f474939d3c3f299f691316497951c646f142adbd6ee49182aec388ce2ca560a1f4b7d8a63e5cd25ba91ebc61175a6955895bcddae7bf1cefccac5c93dd669ab65a2f508adbcfd62ec46027efa396b9f69984d6adcb38fdddb616ec38929fedd97677c3d06060309db5a9cb5fc8919f4310f06bb40f1b76bc197798acbf8d3162257071e034174047006796fac6fbc95c28afd881e1197c20fea8b4be5c5de39a292bd1ff3819d4d4f48162ea1a57930d8f324ce54875d3ad09eea95c4c825765842f9bbb1957fa8188578e86081adfc87502e69c8841218b596d71c4ec49afa60408028012d974051559d924f5f8a59ee195fb01994b8710994d8201ae10f6e88e0e418489c47499b7efd2021f56a6c9fba761beaf79acb6087a496afe7524f2260e14a792cf1a1203d4b0cd8a11d2544293b7657fc393014295fa28e409ab8be0a02695223d17d7caf4f44cf5d0f416130067f28f3fc51c88ad7b53e401e658214abcc8f597f22d662144f878573d0370c874287698784b6ba9abf9b22da2eeb0ce8b817f85e429e799a5edd246d72d77228652b80c4949a85cd5131d851d9f9bda9afa0646de5e477e0fa999562cb46758502c7d63dd3e8b6f88c7ea44f41c4212d633f0160e738c6d36128e9e58c154b08460c899a26276dc1257dc5de18495573693674e40faf1dad49db8ac83baecf92f3aa5c23f639cdcf6e6864c14a8d6a3de95906813fd17f83c406ffd1d2d7bc75737b7b00172448b2ff167b9fa43649db32ab4094652cbb2e18c3bdb527f24049878bb44b82135009f9af22d24ffbee4b5289fa61bd0502f019b2f24a08542db818bffb7c1637b4f4cb9043952f88aa69d9431b8df2e3f9ef6e4a5ba58e79acf082bbd871aa0f0feef71ade8f921bb597ea28548f4116a281ab3542b732c4a8e9973409c75a0c6443d83547d0d314cc7bd62128e3b0db9c03c78b9d78ba714627866230414947523a6a239873f932c2b28c09cbdf182e856bf41598998150cbdd6d54f76c227fb1519f5afb0008e31d6a0b87818d0a2ca0dd6e953a5ba1a347dd927acd36f3fa3a68920eb9c36bce6cef857447aa733e4ffb7014e194993eb1399270b64151ddbb15478c2b762a14d1782608fb24199d9d311281c47726f565b3a3b7be584afb03d87cdc5eb8156772694ab422f59cd7b1e359583a7cc0695b9f64e6416c6b52de230afbc160d2e9384501b40645189434d416c0fbb034e9ffc654d0dee7ee7a878f9e559daac7ee5af769aeac7a92e85b1bc7983803d3bb572befe76184a46b76450feccffa753cc6123cba0686440a5ba81236458831031a4ba4c91d7aab3bb2514208a902face1c12b7dfe25318ab5ca2c1ef9769aa06ba0539f6904f95d3c8440617efc7858d3984f566b3390b9b1a0f2ec3c86dd77a0b82958c4b15278ffaf10e47e613545f4cf67ef7e8b31a6bda35022871840ae1536fb65bb11b932936db7a15642359bb6b157893d19e7918b11d3d3072b78c761c1784afa2214c865fc2aed860dcc17b69cfe9189bcd0767a84cb306a59966e5f96514a7d7182e6aa7204bbd1a84092ba645f86b68813debd5a2290acc93388e5eacc17db51d69604733ea9160a0e77ec5317194654313a9a8a0535c0bc49d0837e2821df92e8ee2f154cbea6b87ffc207aab4ea491e8aa75b90f70136d84ea2f5dfd138371dbdf8fe273956cb7411db6df48ebf56105da42b219b9dad387ca7be9ecd90508c62279a53bc9f7e2a845f9da42d8e85d2653854737948ce228b2d76d1b9fe2e0e456fdff24575939b82a3f6e1a4be6ffcf1c493c17dabbfa0859a87d259ae3931fb6da544589b9b6bb7cc93e078813ac94918942bf113aee5742498d86a70fff31d2a69507739317a9aa9e0289f053dad4eec63cd58e833027f0859fb4ab74e8fc742d03b5b6dca1168d3d47fd95b514a567e6518342d52b3c3bb6438b5aeacb95ff9001d2f5480f6a80a0685b5bda2ceba06925ab5ae0986954c3169e92fedaf3f1681247cb114202c0f728296a51396063fc64aad05662bf05a626b90f656b47069ca668bb96208c287e8f793d77d4fb1f1cc14e73406005e11a2c1c46ca7448be534c97738487527d79e284d7a0ae275bd4361ecf4a352e6dc8b8c8c8e132a3edb7d645f4943445f523fb28bbf857218a117f1288afec49f9def9aabc2381b38a315d5c927aeb96fa1ad3eb13b0151dd570f6734f004467171d2cdd609d1d09d115c9b42e1da3472ada98d3e1da90a8f373a98133fa708f5a62c75b5eb1b643c48de72143ffc8761ccffd7f3336b69faa277d364cdf2d4f2bc428bda8b76e4748d5ae02d9850ac6f2ed0ddcb874c25d210163d4da10c0d6cc5218a3558deee5519c94032158bca02fe1c1b8184fdf417e863352b224b7b06267486296ebd4100ad5f1108c78a7056979f5ad6f97794a0460bf371584d9b962034aa7449f4e6b0f925b7a648d4ed7f2442135629b0baee3385882682fde57e5eb9204647a898c566120e4b577ba215ed863f76d5ad9ed19a6b7465952292e7543110eac3dc436a16c85047f3ff10a00c917d5902d296c063c4b173775f2b612e407bce02c8647877abcc07b21b89a60e16ff5c5cdc3708f285d6e411036661e97f628c6c2bef7a6e297f0ea7db2aaceb87d13425e80c28cf095b1dd4e08122e89f58862c6466d79fe7d06e0038a9a1869cba0d1554bffc08b94bf3dc7ec4d108073a4dcb7a6a503b608e777f1ca6b64deec19072052cdab8e7222966170bd35cfa66d3d013c537e723bfa2f634b34edba64ee27ab814bf66c5943e5b7b4d2cbad0550982b2d68ea0633a48f24ef5a59da6e9671717afed4253db66afce693ab08e2b4343d9efd1705802393ba22af5f0e04fc559ddafd78bb1c013b2826cfd77591736cd8a1e079c00f72dc89ee419cf4cc5e867138e35372bb0854df45d2142ce56ea01465d7cf42d3beabbed8602ff568df5d8e53d22bbd897c0aa050165319ba28d6f861a128556e420275562b8a19c0a2112df4490925f52090c6c7ac79b8533936d4020af3ea5d383cc8e4f23cf275194887d42bde7061bc17246a91b735472c4dee6f2d159a4fb2cce10f0727ace1e88114ce3c2a3acabd74175b82afc6126ed79d8d333ed993e3a0d67afba888c94cb266f906681d9595f2ca21946f32d8f07eb7cfc979cdd56a885e6a5deb1dc54ffbbbac728db4145056cc9b78386f1f17ad16856cc10b04038f0d835a5842584b6a9516a770abd839ade5d379db9889d22d9049dd13010ad612a64128f724f7a6435054e79c10edc4ec4875beed2f8593b7382645625809bbc3591027d53bde8a16be5bb209cd49e71aaa435c923ef3c4d1aefec7111773b0d58b47efabc7a43b93cb7eab287cefe554a5b59e2a746081d0d875919df356504008374ef184be2f7ef7e644bf5535dedf5b969b30dcedcfbecb83173b0cea015efe45630880c303472daf1dc22b384e65078cb0ae21baa4834fcd4b4f7c995b700117e1448d041a71062772bba19fea512ad4e802988c43e6cad0b4b74962e195b355b653acfab53d9f38337e46758c0f8c147335530f8fbb508a889b84d4672e025b0d9adec09fd4e2d62bda0e0c40570d8fcf5487a59380584f7b85a8576985a4423cbdb1503ea4f93d4f3dbb2c384efcac84dd8649e6f09d2ac37e1d8268c3c07db365581c7c3752410909968598b8ea5ea05b68e6013965cc60be6f6b24e493655f5ddd572a84a924803a7df025914f4b57527841928d30c03b09aeee28c8b81860968f53a663f4f56b004e07cc380f5b0b0dad43869faeed5f240d4011f55ba28743a3b51af6293ed1376fcfe3592c877e2d81d14ee882410cf8207476409b5673eb65297155e91cbe089c8c043964063f9b469419bce6e59e0017e0f527d20eab5d9579208df9cc65389ca8fdb3d62618395bb0274b8094799cb4c36632488e79950ac3bd3d982d521614f56df1bd16c1f928481dd4580a796eb7892b3e4a33b748b16f96b1def674c3e70d0315b486a94a979292d635a2ad1fa877927de9355f38a612747fb982bccf12040d9a14a63c34b6f2b3b450a6401d4d0c96a9090ab80d30f7e7af84bade864791455402cbd278427c5a1e84e2e2286c4bf773da614e6705802c130ade8a3a67b309f9db1558372046ec276a34fb50f72c7df40e33f447ab5f0af05eece4e8f654b3c2dad6ea76ef6b694699f4ad8c6fdcbfd8bdc23d0c580631d0c95ac6ae9613dad680939db2ecf9e7a0d4d0f2f2b7f1c1d308cfaccacc2381e97bb278a53b14daf686c0541e56264c33d5176b830ac7d13c28edb2d8e77d7acbced061c4ec315cb1a259966ad997c7c7beae44d4d1b6955842d7fbba0bb0c461bb22db3e15f0fc1cd3fd997dac5e6a4bff6e2eb8310d828f15309b2c8feaa21281963d35ab2d5c099beb806cd384d304449c58d89910105df11225fb893e984734a8e5cba2e553f03ebd5ce4cae24826547df81db3f2bd7d930f785755c8b6311f221da59679ce50479adef1cc5dac984a5d2f9343fe4892b2b5640892892cfd50d0015c1f568792d8919943a578b62585081175237444d9542a2241c967bcfbc3dab4e8961ecad89165eaada2d759e844be5021aed42b971e9ffea8c08a3d6e4073ce4226b4e54b83f3d8ccd207a0cfcf9da7b5e55d1a26a90e03f7c3611c6562b65edb42fe110dc3970b44aa36660d1cdbc882495271f80816350b945aedb0d46ca6d160d5f0096e8263325e257dbb574932e32f1b28ce2b7f5b3ee6ccec64085496bb513ec168b53d79e6ecb72622a70b22e1f9116fa48815709b2080b27b31a6b26dde0701cd74c31b4e33a702f051ae07ad54ce23ae33e6060e5451a4171cc930af2ab70862044c5a0ff9e8aeebd3cc41c62d38e7b79596d3851430dd661b071c319751985d48eeea2afb463d7d9390ed4e68a60f90ad80aeca4b8d283ae0538e590668c857a526a264be238641eeb5f321248d829539efccf03dcefa54c6def8b7d4a8cdf6bc76d71eefaca1a7a33bd4b56e94b8e38f784b742bdd080faca4769e1aa91ff50d9374f3632cb7b669f042beb802c6cedff0a3634aec072f57d38a6ea61439029ba5d921f57bfbc281d75f5ec322b8f8c90b4d3f65d00ef97dcffe7e07fa01af8e7f8da15532f0c18b73d7a183327aea46680651645782f4f318c00f2355c301fe2e805a22f8586119768b8424735f5495607d170f0818be232cec1d9e40daf79bcd63a26cbead93753b7171bcad462da2af68e9ea9c0b207200f1fcf3793283931603a719e745120273efb541a7af896f6eea7359939d7226896c8023cc963e4e0a7579bc83a37cb8d871324bb3e66b671d8df83d645495740c5b99aaf2edda3018e1895dda6744b1e6623cb62d4b80ac208f69a81caa0277a497e41bf637817518cbe0fcd2028d07be199a126f82641f2fd54e6b20287b912ee8d8dd72db5824ca9e464a94d45beda7f52932d1bb57a28a4e99ac32ea4c3650197613a87e4cec91d82f37069fde871575d3cb2220aaad9277511271a86377da5f2a9f94303e7151acb087ca549fd0cb9b1961954ddb28333a24b510b92cddc057ec5a147ccdd708a2db3c8cb3600756100b38b71f0676f6fc5a7f5912b5e81bf6d2b07e15fb5b1c96459110ceb22ba4f2fb0e531dcaa913a13437cc6276c8b4e1bdbc5365144c7abd2e2a6c93ef102e26b14e576ada244408d9db50aab045f9879bf95425eaa7b11d77e0dc503851c5c278c282aa736103adf5ca2b30724bde27f98e4e7a947f964b7abfe58a3da354e3008a2b86d50223d3077e151ce2e086172002eab7279ac1948361e172073184401d5650181547f1bacc1534f9ab2ad66fd9d200d867de79a92e465dda8d781b15881acc9bfdc53815f3fc3f064c830db3908cdb173e3e1295ea7dca280273ca99073d5663003f14c4f7ac9ef9bc735b2a413daaa7d97101553f90a0d33b043d1f2b0f131d35c9244808bb4b76213ff5c418053a569d760498518d701aae39cfbd7a052b586c53617dfaad1415c1cafbb41640d1650be9297dd42c803d8bfd443916310bb80a74c991cc26331ab70c0c4bc4f2295f069787f6759878e42ffbc76b34493f71d88a109b0813ebfcd24953b2b5f1f5164d9974bab7ed1f4d42f62b8379912dd7e9f35a19951e4d57b0c70fe516cd2059c4ef879d9f9b1191d5bb51b852d3e9462e4528b9c1f7c676e6039d1deb00442a482e297b08a67c79bb818d0316072d8174885de3413ae0505232100f217e424e0106811902d60ecc0e0aaca7c5f00f4f365e1360f10aa645b9215c93668a08be97cacd6b0f9c80ead76478846d12e8f24a53bfab01628afd199b2db332d38d5009d7a1437f0f5b2a0d36b5c98f3a35e5043ffd55bac325d3927888fa5d0e3569d9be002205b501b3e68d661515bb9eac9d4f234e22e4e5bd0b4c4530933aadd99f132794ce48e9a3220d2c17748c012fc5fd93d265cebb3edc3be29a1ba26f2adcf510663c28d29e28774c4ec1190fbfbf614aa8e2745f8605f7d7e94fdd06322454a08833f1a22c77deedb1337e380a8e18f85168e045d1e7cf32fda1a709d3eddf62909a9e580ed8abd605e07dbab79b5bcc2f4533e6fec589b976816471b1f11ac3c89336c52e03b72520995d05275024e9988727f2e1ac9421ccaaa0b736e9f7f296c2d27cbd774d7179f9c6921df68985998034862c15adc452666deb40c0c40cedf16f4d187524a0a5cdff6f7b2531eda54fbe15a7ad1aea46466a51642326c5d7d374fb38475d119027a3714598fe7307de94bece2741b7a742b053682dae9452eed3b820b1386b604fa647e392b35b205019cf1ad317d1441cbee2aea5ca95e56fd5e959689bf96c9f470acb8e4e630b13403e9459242b629fa28e1ba8e8df1ed572b1db735a20ee1a5b8500b6edf66cbe671c5938741ab2b36ccd4e92160f6df9e1d465cdaf3a7746e128e26e0e7a7aa4869b2a482c6e9bf7e58408411016740c547129e4f11d2317af3c5bb55b2468e6d08e75e5039c3bfdc9b6da06e7c27933a8c9d8ad0e4c74a093e6d57c02b1b49e995962c1046b5c8a3df0ea4c20049e300cbe41bd92a0ea5993ef6fd92ea74e28e1cfaf4a8533c224104d6081b64ae08b4e7a23a259b2b03655b987c230881a30620910566982945f8f86229fd614ca2bb2adcbdd49a5c579c0d1bbdefb9e33cd0641bb43f6ca3fab33dc4188e1508e4293e6de932040b895a97bc1f196467ad4a0d4899e6078c014f42521cf39411e2e4f1b5adc26f1f3bb2fcd27b89ac418c8251423de82c4b5980a4e66649b9f3ec48c833c35f8653ca510a0a1b0495619a60bf5d77e64a6938714c3a1946b3fa5079533698bb8f8f85bea8711ccda5cf01de150b055d3586a890d0654d2b4cfba25c434e2ff492b69798aa197dffbfe2bba77d4b4eea35c42e698221e971a4bca34e59c46084f49c2170b83db6719324ecb55e07a9cf74a84ee0fc3567fa5cd2f3937ad956b4ed2187e2026b7d4166d50fd9c937fb4dd5aa96f2731f1db1dda4eac4e589295ffe9b72a7b9533f6e23c82b57c8361c8cb3b15128235f65c84b99d93383b7398e936884542d0e73bdf37cadfb6c70da47af3c5a3cde0d8e381cdf9ec1a39d2fc963f0d8ee31b76d9668c0171967cb9ef2f15d5bbdbd1058328da7a60bbc7d77efed2de74a2ed5637a8a84e1163325dd22b584b15fe894c9b1ce89d24619a344a8987f6d21b7de7ccf6fad223134e1c389a8e6baa375dd142baf4a8852e984eb6c281cf86e2457a7f85782c7764564af26d331d3ddf4850d24742ef449cd5e32f5957d2ee10e05e7d3312215e4d36ac5c8c4bae3340f074f88a20e18b270b3baf05de1b0363f4c6f2ab9386d6034e8567e4828ad256cd250448c70147c318a621697be402c1e8365d2798084f968a8897242ff6756c2937e4d1300", 0x2000, &(0x7f0000002340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002700)={0x90, 0x0, 0x0, {0x6, 0x1000000, 0x80000000, 0x20000000009, 0x8001, 0x8, {0xfffffffffffffffd, 0x0, 0x1, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4000, 0x0, r6, 0x0, 0x7fff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) open_by_handle_at(r2, &(0x7f00000021c0)=ANY=[@ANYBLOB="1c0000008100000000000000"], 0x0) 11m48.704479558s ago: executing program 3 (id=69): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x10000042}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x2042, 0xfffffffd}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) close(0x3) r3 = fsopen(&(0x7f0000000180)='cgroup2\x00', 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) symlink(&(0x7f0000000000)='.\x00', &(0x7f00000000c0)='./file0\x00') fsconfig$FSCONFIG_SET_STRING(r3, 0x3, &(0x7f0000000000)='source', &(0x7f00000001c0)='[\x8b\xa4[\x13\x9b\x04\x00#\x9b\x94\xb6@\x874L\xf5U\xd7\xcb+3,\x999\xa9\":|\x98\xc5\x93\xba\x8d\xff\x14\x8ag+\xcd\xb1\x96d&\x8dn\x00\xdb\xd2\r!A\x1dZ\x16\xa3\x84\xa1\f\\%$\xd3\x9f\xf4a\xdb\x10\xd1&\x95\xba\x9d\x01O\xc8\t\xd2\xceZ\x8a\x7f\xbc\x92\xfb}\x91\x8d\xbav5{\xe4M;\xa2:\xe0\xfc\xa2G\xd3b2m\xe3i\xfc\x01\xc2\xa1|\x90\xd5\x8d;U\xe2', 0x0) 11m47.113018592s ago: executing program 3 (id=80): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x48, 0x3b, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x18, 0x2, 0x0, 0x1, [@typed={0x14, 0x138, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}]}, @typed={0xc, 0x9, 0x0, 0x0, @u64=0x6}]}, 0x48}}, 0xc000) 11m46.946960285s ago: executing program 32 (id=80): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x48, 0x3b, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x18, 0x2, 0x0, 0x1, [@typed={0x14, 0x138, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}]}, @typed={0xc, 0x9, 0x0, 0x0, @u64=0x6}]}, 0x48}}, 0xc000) 8m54.821290964s ago: executing program 5 (id=674): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x5) r1 = open(&(0x7f00000002c0)='./file1\x00', 0x113000, 0xb) mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r5 = fanotify_init(0xf00, 0x0) fanotify_mark(r5, 0x1, 0x5000003a, r4, 0x0) mkdirat(r3, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r6 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', r6, &(0x7f00000002c0)='./file0\x00', 0x2) renameat2(r1, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000001c0)='./file1/../file0\x00', 0x2) 8m53.929591518s ago: executing program 5 (id=679): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace(0x8, r3) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) process_mrelease(r4, 0x700000000000000) 8m51.368765617s ago: executing program 5 (id=684): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) readahead(0xffffffffffffffff, 0x0, 0x101) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000001c0)={'lo\x00', 0x20}) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x2, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = dup3(r1, r0, 0x0) recvmmsg(r3, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/8, 0x8}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) 8m48.177356135s ago: executing program 5 (id=691): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) 8m46.849268926s ago: executing program 5 (id=698): openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) fsopen(0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x44, r4, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback=0xac1414aa}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}]}, 0x44}}, 0x0) 8m45.033153743s ago: executing program 5 (id=707): r0 = fsopen(&(0x7f0000000400)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000540)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf1\xf9\x9c\x83@\x1e\x99\xcah\x85\xb8\xbeSAk\xf4\xb6 \xdf\xa0P\x18\x19\xae\x8c\x9a\x19mm\r<|\xe8\x9e\xa0x\x84p2\xf9\xe2\xed\xb0\f\x7f;\xf6J18G\x84c\x88\x9d{\xf4~\xdby\xe1\xdf\x1a\xae\xd6ez\xe5\xa8\xe1\'', 0x0, r0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000a00)='wsync', &(0x7f0000000b40)="b2", 0x1) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000840)='\x00\x9b~\xd7\xde\x91d\r\xa3e\xec=Z\xce\xb0\xdfr\xbfQ\x85n4\xf5T\xc2\x86;\x03K\x80pF\xeaK\xb4t\xef\'\n\x05\xc9\xcfc\x92\bE\xf9\xf9\xcf\x96\x99\xde\x1e3\xcdA\xf9\x1bj\xc3\x8b\xbe\xee\xb3e\xd8Mk\xf1+\xbf\xd5\x98\x8c\x13\xdc\x85\x17\xcd\xf8\xf5\a\xde9\xd1\x8b\xf0&P\x92\x99u8\xb6,#\x0f\x89\xd9ic\xb5\xba\xe7\x03\x8d-\v\xd3S\x98\x89@\x8aWLU\xb1\xc4i6\xa5\xb7\x1d\xf3s\xaf\x7f\xb16\xa2\xbe\xfa\xfa~2\x1d\xeb\xd0G\xdc\a\xa3\x93n\x82\xa7h\xd7\x83N\x8aW\xaa\xc1\xc7\xec\xea\x13\xbe\xf3fQ\xfa\x8cP\xa7\xc1O,\x83\xec\xa9\xeb\xb2 u\x15A\xde\f8T\x81\xccces\xfa\xef\xf4 =z\xfc\xef]~tY \xef8\r,x~\xa0,\xc7@\xc0\xef\xc1`\xec}\xa2\x8d\x95\xff0c\xcd\x02~\xb7\x1a\x93\xff\xcd\xadB7\x13\x84BPC\xa4\xa2O\xf0\xdd\xde\xc5H.y\xfc\xe9$\xf6\xa6t\xa3\xdbr\x00+\x01{\xfb-\x1f\x1b\xeb\xd9b\xf0\n\x99\x0f4\xfa_\x10\xd0%\xe7o\xc9\bO\xfe\xfb\xca\xf8\x9d]\xa1\x98(Nw\x87\xd15', &(0x7f0000000100)="8d", 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000a40)='\xcfD\xbc\xbf\xff\xdc\x83\xc5$\xb3\xecr\xe4G:\x93\xdfj\x96\x7f\x03\xe5\x94\xec\xe6\x04T\xcbn\xa5\xc3\x04[\x02\xa9[=\xf9\x8b\xf7\xc1\x9c\x83@\x1e\x99\xca\xc3\x85\xb8\xbeSAk\xf4\xb6 \xdf\xa0P\x18\x19\xae\x8c\x9a\x19mm\r<|\xe8\x9e\xa0x\x84p2\xf9\xe2\xed\xb0\f\x7f;\xf6J18G\x84c\x88\x9d{\xf4~\xdby:\xd8\xc5\xccrun4\xe0\xca\xc1\x0f\xc3\x03D\xe1\f\xb3O\xa4\x1c\x04]8)}\x83:\x9e\xc0X\xdb\xd9\x89\x94\x9b(\x19\\\xf5!w\xbafo\xea\xe4\xb5Xe\x84\xbc\xcdw\x802\xb4\xb8\x1f\xc2\x97\xbfi\xe8\xf8\xbd\x1d,\xffUX\xbeA\x00{\"\xdbya#I\x03\xec\xed\x8b\x97\xff\x1eiq\xd1n\xf99\xc6\a\a\xed\x0f\x15x\x91\xdc\x05P\xf7\xf3\xad\xa3\xbc\xe4[\xa2\xc7\xfa\x9e\xad\xa2\xad\x86\xc4\aD\xc9\xdf\xf8\xf7\xc1\xc5\xc5.\x8a&:\x90\xb2\x8c\x86\xb2\\\xa8%!\x98TQ\x91\x00\x00\x00\x00$\x99\xbf', &(0x7f00000006c0)='\x01\x8dik\xc2\xed\xf9\x8a\xae\x86\xae)Dn<(\x02:cU\xa0d\xd4\x1f\xd4\x95\x93\xb7\xc1\xcc\x84\x8c\xdd\xbf^]~\xcf\xcb6w\xb3\xfa0b\x88\x04\x10\x9d_\x97\x9f\x89\xb7\xe35C\xf3\x1b\xafV\\wGU\xaf\xa4\f&\xe7m\xf0\xaa{\xb2\xe5\xe2\xeb\x9bN#\x99\xdc\x9f\"\xab&\x8f\x01\x17Y\xaf\xb7\xdc`r\x9c6\\\x0e\x94\xc0a\xf7\xd4u\xdf\xf0\x9b\xb0p\v\xa1\x8a\x145\x9b\xd95\xc8U\xe4V\x81-1\xb0K\x9a\xa3+\x03\xc1\xf0\xeb\xafYI&\x9e\xd0\xe1\x148\xfe\x10\x0f\xbd\xa2\xed}\xe6\x1asT\x1f\x92\xdb\xa1&\'\xc7\xe9\xa5\xd0\x89\x8d\xf1$\"\xdc\xe5\xfcT\xad\fj\xfe\'t', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000180)='$\x00', &(0x7f0000000340)='{)+}@@!}\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000200)='\x00', 0x0, r0) read(r0, 0x0, 0x0) close(r0) 8m44.831936146s ago: executing program 33 (id=707): r0 = fsopen(&(0x7f0000000400)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000540)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf1\xf9\x9c\x83@\x1e\x99\xcah\x85\xb8\xbeSAk\xf4\xb6 \xdf\xa0P\x18\x19\xae\x8c\x9a\x19mm\r<|\xe8\x9e\xa0x\x84p2\xf9\xe2\xed\xb0\f\x7f;\xf6J18G\x84c\x88\x9d{\xf4~\xdby\xe1\xdf\x1a\xae\xd6ez\xe5\xa8\xe1\'', 0x0, r0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000a00)='wsync', &(0x7f0000000b40)="b2", 0x1) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000840)='\x00\x9b~\xd7\xde\x91d\r\xa3e\xec=Z\xce\xb0\xdfr\xbfQ\x85n4\xf5T\xc2\x86;\x03K\x80pF\xeaK\xb4t\xef\'\n\x05\xc9\xcfc\x92\bE\xf9\xf9\xcf\x96\x99\xde\x1e3\xcdA\xf9\x1bj\xc3\x8b\xbe\xee\xb3e\xd8Mk\xf1+\xbf\xd5\x98\x8c\x13\xdc\x85\x17\xcd\xf8\xf5\a\xde9\xd1\x8b\xf0&P\x92\x99u8\xb6,#\x0f\x89\xd9ic\xb5\xba\xe7\x03\x8d-\v\xd3S\x98\x89@\x8aWLU\xb1\xc4i6\xa5\xb7\x1d\xf3s\xaf\x7f\xb16\xa2\xbe\xfa\xfa~2\x1d\xeb\xd0G\xdc\a\xa3\x93n\x82\xa7h\xd7\x83N\x8aW\xaa\xc1\xc7\xec\xea\x13\xbe\xf3fQ\xfa\x8cP\xa7\xc1O,\x83\xec\xa9\xeb\xb2 u\x15A\xde\f8T\x81\xccces\xfa\xef\xf4 =z\xfc\xef]~tY \xef8\r,x~\xa0,\xc7@\xc0\xef\xc1`\xec}\xa2\x8d\x95\xff0c\xcd\x02~\xb7\x1a\x93\xff\xcd\xadB7\x13\x84BPC\xa4\xa2O\xf0\xdd\xde\xc5H.y\xfc\xe9$\xf6\xa6t\xa3\xdbr\x00+\x01{\xfb-\x1f\x1b\xeb\xd9b\xf0\n\x99\x0f4\xfa_\x10\xd0%\xe7o\xc9\bO\xfe\xfb\xca\xf8\x9d]\xa1\x98(Nw\x87\xd15', &(0x7f0000000100)="8d", 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000a40)='\xcfD\xbc\xbf\xff\xdc\x83\xc5$\xb3\xecr\xe4G:\x93\xdfj\x96\x7f\x03\xe5\x94\xec\xe6\x04T\xcbn\xa5\xc3\x04[\x02\xa9[=\xf9\x8b\xf7\xc1\x9c\x83@\x1e\x99\xca\xc3\x85\xb8\xbeSAk\xf4\xb6 \xdf\xa0P\x18\x19\xae\x8c\x9a\x19mm\r<|\xe8\x9e\xa0x\x84p2\xf9\xe2\xed\xb0\f\x7f;\xf6J18G\x84c\x88\x9d{\xf4~\xdby:\xd8\xc5\xccrun4\xe0\xca\xc1\x0f\xc3\x03D\xe1\f\xb3O\xa4\x1c\x04]8)}\x83:\x9e\xc0X\xdb\xd9\x89\x94\x9b(\x19\\\xf5!w\xbafo\xea\xe4\xb5Xe\x84\xbc\xcdw\x802\xb4\xb8\x1f\xc2\x97\xbfi\xe8\xf8\xbd\x1d,\xffUX\xbeA\x00{\"\xdbya#I\x03\xec\xed\x8b\x97\xff\x1eiq\xd1n\xf99\xc6\a\a\xed\x0f\x15x\x91\xdc\x05P\xf7\xf3\xad\xa3\xbc\xe4[\xa2\xc7\xfa\x9e\xad\xa2\xad\x86\xc4\aD\xc9\xdf\xf8\xf7\xc1\xc5\xc5.\x8a&:\x90\xb2\x8c\x86\xb2\\\xa8%!\x98TQ\x91\x00\x00\x00\x00$\x99\xbf', &(0x7f00000006c0)='\x01\x8dik\xc2\xed\xf9\x8a\xae\x86\xae)Dn<(\x02:cU\xa0d\xd4\x1f\xd4\x95\x93\xb7\xc1\xcc\x84\x8c\xdd\xbf^]~\xcf\xcb6w\xb3\xfa0b\x88\x04\x10\x9d_\x97\x9f\x89\xb7\xe35C\xf3\x1b\xafV\\wGU\xaf\xa4\f&\xe7m\xf0\xaa{\xb2\xe5\xe2\xeb\x9bN#\x99\xdc\x9f\"\xab&\x8f\x01\x17Y\xaf\xb7\xdc`r\x9c6\\\x0e\x94\xc0a\xf7\xd4u\xdf\xf0\x9b\xb0p\v\xa1\x8a\x145\x9b\xd95\xc8U\xe4V\x81-1\xb0K\x9a\xa3+\x03\xc1\xf0\xeb\xafYI&\x9e\xd0\xe1\x148\xfe\x10\x0f\xbd\xa2\xed}\xe6\x1asT\x1f\x92\xdb\xa1&\'\xc7\xe9\xa5\xd0\x89\x8d\xf1$\"\xdc\xe5\xfcT\xad\fj\xfe\'t', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000180)='$\x00', &(0x7f0000000340)='{)+}@@!}\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000200)='\x00', 0x0, r0) read(r0, 0x0, 0x0) close(r0) 7.065842202s ago: executing program 2 (id=2356): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, '.\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) fchdir(r4) r5 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x4, 0x1, 0x5, 0x6, 0x3, 0x1, {0x2, 0x180, 0x8, 0x5, 0x100, 0x9, 0x9, 0x7ffffffd, 0xfffffffe, 0x6000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) sendfile(r5, r5, &(0x7f0000000080)=0x2, 0x7f03) 6.981471583s ago: executing program 4 (id=2358): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r2 = accept(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r2, &(0x7f000000b680)={0x0, 0x10400004, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb59}], 0x2}, 0x0) 6.763547167s ago: executing program 4 (id=2359): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24040040) mmap(&(0x7f0000967000/0x1000)=nil, 0x1000, 0x2000004, 0x2010, 0xffffffffffffffff, 0xf0149000) socket$xdp(0x2c, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x0, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000140), 0x0) connect$netlink(0xffffffffffffffff, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x78}) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20004004) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, r2, 0x0, 0x0, 0x0}, 0x30) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}, {0x2, 0x0, @broadcast}, 0xc0}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) 6.712620577s ago: executing program 4 (id=2361): sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, '.\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) fchdir(r4) r5 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x4, 0x1, 0x5, 0x6, 0x3, 0x1, {0x2, 0x180, 0x8, 0x5, 0x100, 0x9, 0x9, 0x7ffffffd, 0xfffffffe, 0x6000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) sendfile(r5, r5, &(0x7f0000000080)=0x2, 0x7f03) 4.989912874s ago: executing program 1 (id=2368): socket$netlink(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket(0x1e, 0x805, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f000080000000140012800a000100", @ANYRES64=r0], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) 4.56166297s ago: executing program 2 (id=2369): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r2 = accept(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r2, &(0x7f000000b680)={0x0, 0x10400004, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb59}], 0x2}, 0x0) 4.135878227s ago: executing program 2 (id=2371): openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x3c, r1, 0x6ae3e61d32b8160b, 0x0, 0x0, {0x4a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0xa8, 0x36}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x240000c0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r3 = socket$inet6(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0xfffffefffffbffaf, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$sock_inet_SIOCSIFBRDADDR(r3, 0x891a, &(0x7f0000000000)={'tunl0\x00', {0x2, 0x4e20, @local}}) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 4.106702347s ago: executing program 1 (id=2372): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='children\x00') socket$netlink(0x10, 0x3, 0x10) syz_open_procfs(0x0, &(0x7f0000000000)='statm\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x2000000, 0x0, 0xfffffffd, 0xc0}, &(0x7f00000002c0)=0x0, &(0x7f0000000640)=0x0) syz_io_uring_setup(0x110, &(0x7f0000000340)={0x0, 0x810c, 0x8, 0x40000, 0x100000f0}, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000200)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @loopback}, 0xffffffffffffffff, 0xfffffffc}}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 4.001531999s ago: executing program 1 (id=2373): openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x3c, r1, 0x6ae3e61d32b8160b, 0x0, 0x0, {0x4a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0xa8, 0x36}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x148, r1, 0x200, 0x70bd28, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x800}, {0x6, 0x16, 0x40}, {0x5}, {0x6}, {0x8, 0xb, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0x2}, {0x5}, {0x6, 0x11, 0xb}, {0x8, 0xb, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x14}, {0x6, 0x16, 0x8}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x4}, {0x8, 0xb, 0x101}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xd}, {0x6}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x6}, {0x8, 0xb, 0xf}}]}, 0x148}, 0x1, 0x0, 0x0, 0x4000}, 0x240000c0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r3 = socket$inet6(0xa, 0x1, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @random="c5f9772bb146", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x10}}}}}}}, 0x0) sendto$inet6(r3, 0x0, 0x0, 0xfffffefffffbffaf, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$sock_inet_SIOCSIFBRDADDR(r3, 0x891a, &(0x7f0000000000)={'tunl0\x00', {0x2, 0x4e20, @local}}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0xd, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 3.612319225s ago: executing program 4 (id=2374): bpf$ENABLE_STATS(0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) capset(0x0, &(0x7f0000000140)) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x20, 0x0, 0xa1a}]}, 0x10) sendmmsg(r2, &(0x7f0000000180), 0x4000190, 0x0) 3.399899328s ago: executing program 6 (id=2377): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r2 = accept(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r2, &(0x7f000000b680)={0x0, 0x10400004, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb59}], 0x2}, 0x0) 3.228516231s ago: executing program 6 (id=2378): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = fsmount(0xffffffffffffffff, 0x1, 0x70) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000340)=0x80) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="640000000206050000000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a300000000005000400004000000500050002000000050001000600000014000780080006400000000008001340"], 0x64}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x28, 0x3, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x8800) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000000)={[{@huge_advise}]}) listxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000300)=""/36, 0x24) chdir(&(0x7f0000000100)='./file0\x00') writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000200)}], 0x1) 3.203812871s ago: executing program 2 (id=2379): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) modify_ldt$write(0x1, 0x0, 0xfffffffffffffe8a) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYRESDEC=0x0, @ANYRESDEC=0x0, @ANYBLOB=',default_per'], 0x0, 0x0, 0x0) syz_fuse_handle_req(r2, 0x0, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000002080)="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", 0x2050, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x78, 0x0, 0xfffffffffffffc25, {0x3, 0x0, 0x0, {0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xe}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x2000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x0) close(r3) add_key(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, 0x0) syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000500)='./bus\x00', 0x18418, &(0x7f0000000200)=ANY=[@ANYRES8=0x0, @ANYRES8], 0xfe, 0x4b1, &(0x7f0000001d00)="$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") 2.677933839s ago: executing program 4 (id=2380): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, '.\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) fchdir(r4) r5 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x4, 0x1, 0x5, 0x6, 0x3, 0x1, {0x2, 0x180, 0x8, 0x5, 0x100, 0x9, 0x9, 0x7ffffffd, 0xfffffffe, 0x6000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) sendfile(r5, r5, &(0x7f0000000080)=0x2, 0x7f03) 2.606077871s ago: executing program 1 (id=2382): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01dfffffff9a26000000210000000c00018008000100", @ANYRES32=r5], 0x20}}, 0x0) 2.301865765s ago: executing program 6 (id=2383): socket$netlink(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket(0x1e, 0x805, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f000080000000140012800a000100", @ANYRES64=r0], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) 2.301276915s ago: executing program 0 (id=2384): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='children\x00') socket$netlink(0x10, 0x3, 0x10) syz_open_procfs(0x0, &(0x7f0000000000)='statm\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x2000000, 0x0, 0xfffffffd, 0xc0}, &(0x7f00000002c0)=0x0, &(0x7f0000000640)=0x0) syz_io_uring_setup(0x110, &(0x7f0000000340)={0x0, 0x810c, 0x8, 0x40000, 0x100000f0}, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000200)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @loopback}, 0xffffffffffffffff, 0xfffffffc}}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 2.237433006s ago: executing program 2 (id=2385): sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, '.\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) fchdir(r4) r5 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x4, 0x1, 0x5, 0x6, 0x3, 0x1, {0x2, 0x180, 0x8, 0x5, 0x100, 0x9, 0x9, 0x7ffffffd, 0xfffffffe, 0x6000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) sendfile(r5, r5, &(0x7f0000000080)=0x2, 0x7f03) 2.236898446s ago: executing program 0 (id=2386): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, '.\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x4, 0x1, 0x5, 0x6, 0x3, 0x1, {0x2, 0x180, 0x8, 0x5, 0x100, 0x9, 0x9, 0x7ffffffd, 0xfffffffe, 0x6000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) sendfile(r3, r3, &(0x7f0000000080)=0x2, 0x7f03) 2.070290639s ago: executing program 6 (id=2387): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, '.\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) fchdir(r4) 1.552527397s ago: executing program 0 (id=2388): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r2 = accept(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r2, &(0x7f000000b680)={0x0, 0x10400004, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb59}], 0x2}, 0x0) 1.205335552s ago: executing program 0 (id=2389): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24040040) mmap(&(0x7f0000967000/0x1000)=nil, 0x1000, 0x2000004, 0x2010, 0xffffffffffffffff, 0xf0149000) socket$xdp(0x2c, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x0, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000140), 0x0) connect$netlink(0xffffffffffffffff, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x78}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20004004) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}, {0x2, 0x0, @broadcast}, 0xc0}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) 1.095796384s ago: executing program 0 (id=2390): openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x3c, r1, 0x6ae3e61d32b8160b, 0x0, 0x0, {0x4a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0xa8, 0x36}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f00000004c0)={0x14, r1, 0x200, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x240000c0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r3 = socket$inet6(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0xfffffefffffbffaf, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$sock_inet_SIOCSIFBRDADDR(r3, 0x891a, &(0x7f0000000000)={'tunl0\x00', {0x2, 0x4e20, @local}}) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 1.084781264s ago: executing program 1 (id=2391): bpf$ENABLE_STATS(0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) capset(0x0, &(0x7f0000000140)) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x20, 0x0, 0xa1a}]}, 0x10) sendmmsg(r4, &(0x7f0000000180), 0x4000190, 0x0) 375.917685ms ago: executing program 6 (id=2392): openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x3c, r1, 0x6ae3e61d32b8160b, 0x0, 0x0, {0x4a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0xa8, 0x36}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x240000c0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r3 = socket$inet6(0xa, 0x1, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @random="c5f9772bb146", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x10}}}}}}}, 0x0) sendto$inet6(r3, 0x0, 0x0, 0xfffffefffffbffaf, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$sock_inet_SIOCSIFBRDADDR(r3, 0x891a, &(0x7f0000000000)={'tunl0\x00', {0x2, 0x4e20, @local}}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0xd, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 375.136285ms ago: executing program 6 (id=2393): bpf$ENABLE_STATS(0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) capset(0x0, &(0x7f0000000140)) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x20, 0x0, 0xa1a}]}, 0x10) sendmmsg(r4, &(0x7f0000000180), 0x4000190, 0x0) 340.162985ms ago: executing program 4 (id=2394): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000380)='cpuacct.usage_percpu\x00', 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101c0ca, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x6, 0x2c0, &(0x7f0000000900)="$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") r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r1, 0x81fd) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0xfffffffffffffffc}}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000640)=0x1, 0x4) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x4000, 0xa00}]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xfffe}}}}}}, 0x0) 270.254816ms ago: executing program 2 (id=2395): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r4 = accept(r3, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r4, &(0x7f000000b680)={0x0, 0x10400004, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb59}], 0x2}, 0x0) 27.51663ms ago: executing program 0 (id=2396): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000000)={0x2, @sdr={0x0, 0xfff}}) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000100)={0x3, 0x1, 0x1, 0x0, 0xf8}) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, 0x8}, 0x28) semctl$GETALL(0x0, 0x0, 0xd, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) dup3(r1, r0, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000680), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f0000000000)={"a0453822", 0x0, 0x6, 0x2, 0xb19f, 0x0, "3377f877c734c40400", "000100", '\x00', "be4d0400", ["c3d452871700", "51f3ffcb3a1000", "e100"]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r5, 0x80286722, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xd}) 0s ago: executing program 1 (id=2397): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='children\x00') socket$netlink(0x10, 0x3, 0x10) syz_open_procfs(0x0, &(0x7f0000000000)='statm\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x2000000, 0x0, 0xfffffffd, 0xc0}, &(0x7f00000002c0)=0x0, &(0x7f0000000640)=0x0) syz_io_uring_setup(0x110, &(0x7f0000000340)={0x0, 0x810c, 0x8, 0x40000, 0x100000f0}, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000200)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @loopback}, 0xffffffffffffffff, 0xfffffffc}}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, 0x0) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): r): interface not active [ 85.645283][ T4606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.652240][ T4606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.702637][ T4606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.949210][ T4733] device lo entered promiscuous mode [ 85.989730][ T4733] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 86.169888][ T4606] device hsr_slave_0 entered promiscuous mode [ 86.218025][ T4606] device hsr_slave_1 entered promiscuous mode [ 86.235478][ T4606] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.251438][ T4606] Cannot create hsr debugfs directory [ 87.423768][ T7] Bluetooth: hci4: command 0x0419 tx timeout [ 90.464011][ T4793] capability: warning: `syz.0.122' uses deprecated v2 capabilities in a way that may be insecure [ 91.851873][ T4606] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 91.919663][ T4606] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 91.999684][ T4606] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 92.101492][ T4606] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 92.585447][ T4554] device hsr_slave_0 left promiscuous mode [ 92.780531][ T4554] device hsr_slave_1 left promiscuous mode [ 92.879601][ T4554] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.887179][ T4554] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.895741][ T4554] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.903167][ T4554] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.928942][ T4554] device bridge_slave_1 left promiscuous mode [ 92.993479][ T4554] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.032594][ T4554] device bridge_slave_0 left promiscuous mode [ 93.042500][ T4554] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.112540][ T4554] device veth1_macvtap left promiscuous mode [ 93.135804][ T4554] device veth0_macvtap left promiscuous mode [ 93.141985][ T4554] device veth1_vlan left promiscuous mode [ 93.160611][ T4554] device veth0_vlan left promiscuous mode [ 93.390025][ T4838] loop2: detected capacity change from 0 to 1024 [ 93.489294][ T4839] ipt_REJECT: ECHOREPLY no longer supported. [ 93.661335][ T4554] team0 (unregistering): Port device team_slave_1 removed [ 93.685321][ T4554] team0 (unregistering): Port device team_slave_0 removed [ 93.707943][ T4554] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 93.724984][ T4554] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 93.820085][ T4554] bond0 (unregistering): Released all slaves [ 94.106268][ T4828] netlink: 16 bytes leftover after parsing attributes in process `syz.0.129'. [ 95.435451][ T4606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.472658][ T4606] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.479624][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 95.496731][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 95.516693][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 95.556344][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 95.569616][ T4281] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.576765][ T4281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.553117][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 96.783471][ C1] sched: RT throttling activated [ 96.790933][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 96.833223][ T4281] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.840351][ T4281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.289931][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 97.503863][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 98.129273][ T4606] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 98.155460][ T4606] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 98.211850][ T1130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 98.221483][ T1130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 98.952474][ T1130] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 98.992321][ T1130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 99.016078][ T1130] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 99.032402][ T1130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 99.057899][ T1130] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 99.089416][ T1130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 99.231268][ T1130] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 99.243215][ T1130] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 99.251522][ T1130] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 100.298109][ T4923] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.243901][ T4606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.251030][ T4933] netlink: 24 bytes leftover after parsing attributes in process `syz.4.152'. [ 101.272744][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 101.282618][ T4565] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 101.353017][ T4923] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.494210][ T4923] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.521410][ T4948] netlink: 'syz.4.154': attribute type 1 has an invalid length. [ 101.582087][ T4948] 8021q: adding VLAN 0 to HW filter on device bond2 [ 101.621558][ T4956] bond2: (slave gretap1): making interface the new active one [ 101.635242][ T4956] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 101.674918][ T4953] device vlan2 entered promiscuous mode [ 101.680858][ T4953] device bond2 entered promiscuous mode [ 101.693385][ T4953] device gretap1 entered promiscuous mode [ 101.740067][ T4956] syz.4.154 (4956) used greatest stack depth: 20016 bytes left [ 101.755366][ T4923] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.791950][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 101.995740][ T4923] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.044354][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 102.064886][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 102.121575][ T4923] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.183279][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 102.193170][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 102.221697][ T4934] chnl_net:caif_netlink_parms(): no params data found [ 102.239963][ T4974] loop2: detected capacity change from 0 to 2048 [ 102.268014][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 102.284629][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 102.297178][ T4606] device veth0_vlan entered promiscuous mode [ 102.329787][ T4923] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.330314][ T4974] loop2: p1 < > p4 [ 102.343893][ T4923] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.361404][ T4974] loop2: p4 size 8388608 extends beyond EOD, truncated [ 102.395986][ T4975] netlink: 4 bytes leftover after parsing attributes in process `syz.4.155'. [ 102.527419][ T4606] device veth1_vlan entered promiscuous mode [ 102.624493][ T4974] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 102.644748][ T4982] syz.1.157[4982] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 102.644846][ T4982] syz.1.157[4982] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 102.687807][ T4974] isofs_fill_super: bread failed, dev=loop2p1, iso_blknum=16, block=32 [ 102.712495][ T4934] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.721349][ T4934] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.729528][ T4934] device bridge_slave_0 entered promiscuous mode [ 102.748616][ T4606] device veth0_macvtap entered promiscuous mode [ 102.777014][ T4934] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.794383][ T4934] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.816001][ T4934] device bridge_slave_1 entered promiscuous mode [ 102.860463][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 102.891718][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 102.911210][ T4606] device veth1_macvtap entered promiscuous mode [ 102.986798][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 103.004472][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 103.026924][ T4934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.057292][ T4606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.076741][ T4606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.086962][ T4606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.098346][ T4606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.109391][ T4606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.120240][ T4606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.130733][ T4606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.141539][ T4606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.162742][ T4606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.170321][ T4989] netlink: 'syz.1.160': attribute type 10 has an invalid length. [ 103.216911][ T4989] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 103.236531][ T4934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.283581][ T4242] Bluetooth: hci3: command 0x0409 tx timeout [ 103.349872][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 103.351350][ T5006] loop2: detected capacity change from 0 to 512 [ 103.374347][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 103.470223][ T5006] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 103.542442][ T4606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.553355][ T5006] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 103.564253][ T4606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.574658][ T4606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.598439][ T4606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.696834][ T4606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.732749][ T4606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.799950][ T4606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.814265][ T5006] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 103.838735][ T5006] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 103.893704][ T4606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.908029][ T5006] System zones: 0-1, 15-15, 18-18, 34-34 [ 103.962238][ T4606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.969788][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 103.979323][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 104.026894][ T5006] EXT4-fs (loop2): orphan cleanup on readonly fs [ 104.039705][ T5006] __quota_error: 14 callbacks suppressed [ 104.039721][ T5006] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 104.105782][ T4606] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.115082][ T5006] EXT4-fs warning (device loop2): ext4_enable_quotas:6459: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 104.155473][ T4606] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.180399][ T5006] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 104.191708][ T4606] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.215659][ T5006] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.161: bg 0: block 40: padding at end of block bitmap is not set [ 104.251143][ T4606] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.260948][ T5020] 9pnet: Insufficient options for proto=fd [ 104.281592][ T4934] team0: Port device team_slave_0 added [ 104.292609][ T5006] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 104.336194][ T4554] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.358113][ T5006] EXT4-fs (loop2): 1 truncate cleaned up [ 104.378125][ T5006] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv1,nouid32,jqfmt=vfsv0,norecovery,nogrpid,dioread_lock,,errors=continue. Quota mode: writeback. [ 104.416581][ T4934] team0: Port device team_slave_1 added [ 104.485889][ T4554] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.489012][ T5006] fscrypt (loop2, inode 16): Error -61 getting encryption context [ 104.560922][ T4934] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.592810][ T4934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.624369][ T5028] fscrypt (loop2, inode 16): Error -61 getting encryption context [ 104.690260][ T4934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.701034][ T5006] fscrypt (loop2, inode 16): Error -61 getting encryption context [ 104.776907][ T4554] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.816399][ T4934] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.827600][ T4934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.860795][ T4934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.903847][ T4554] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.999203][ T25] audit: type=1326 audit(1751078570.022:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5036 comm="syz.2.170" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0147017929 code=0x0 [ 105.022012][ T4552] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.043214][ T4552] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.088795][ T4934] device hsr_slave_0 entered promiscuous mode [ 105.104839][ T4934] device hsr_slave_1 entered promiscuous mode [ 105.132100][ T4934] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 105.150048][ T4934] Cannot create hsr debugfs directory [ 105.173695][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 105.265089][ T5045] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 105.385439][ T13] Bluetooth: hci3: command 0x041b tx timeout [ 105.725283][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.774820][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.969868][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 107.751165][ T7] Bluetooth: hci3: command 0x040f tx timeout [ 107.841141][ T25] audit: type=1326 audit(1751078572.862:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5068 comm="syz.2.178" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0147017929 code=0x0 [ 107.928216][ T5077] loop5: detected capacity change from 0 to 256 [ 107.981757][ T5081] xt_TCPMSS: Only works on TCP SYN packets [ 108.023712][ T5077] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 108.097938][ T5077] exFAT-fs (loop5): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 108.469783][ T4934] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 108.479263][ T4934] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 108.502411][ T4934] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 109.116820][ T4934] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 109.352130][ T5112] netlink: 8 bytes leftover after parsing attributes in process `syz.1.187'. [ 109.437235][ T5112] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 109.581060][ T5112] netlink: 'syz.1.187': attribute type 2 has an invalid length. [ 110.159298][ T4227] Bluetooth: hci3: command 0x0419 tx timeout [ 110.319598][ T4934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.414621][ T4934] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.467780][ T4934] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 110.501708][ T4934] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 110.550048][ T5132] netlink: 'syz.4.191': attribute type 3 has an invalid length. [ 110.577483][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 110.594383][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 110.682516][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 111.086729][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 111.188695][ T4785] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 111.200313][ T4281] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.207447][ T4281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.290227][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 111.322032][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 111.339737][ T4281] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.346883][ T4281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.372651][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 111.381775][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 111.398533][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 111.408681][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 111.419055][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 111.431748][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 111.440865][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 111.449650][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 111.458692][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 111.467417][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 111.476424][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 111.488518][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 111.498081][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 111.509222][ T5129] netlink: 'syz.5.189': attribute type 24 has an invalid length. [ 111.536087][ T5127] netlink: 8 bytes leftover after parsing attributes in process `syz.4.191'. [ 111.677680][ T4785] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 111.689191][ T4785] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 111.699461][ T4785] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 111.709259][ T4785] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.755048][ T5124] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 113.634617][ T25] audit: type=1326 audit(1751078578.662:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5162 comm="syz.1.195" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1695699929 code=0x0 [ 113.712803][ T5161] netlink: 24 bytes leftover after parsing attributes in process `syz.5.197'. [ 114.353265][ T5161] netlink: 'syz.5.197': attribute type 1 has an invalid length. [ 114.369151][ T5161] netlink: 'syz.5.197': attribute type 2 has an invalid length. [ 114.416465][ T5172] netlink: 4 bytes leftover after parsing attributes in process `syz.4.198'. [ 114.456673][ T5172] device ipvlan2 entered promiscuous mode [ 114.531106][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 114.548526][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 114.575913][ T4934] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.634325][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 114.644575][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 114.654864][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 114.663078][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 114.677719][ T4554] device hsr_slave_0 left promiscuous mode [ 114.684369][ T4554] device hsr_slave_1 left promiscuous mode [ 114.690767][ T4554] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.371514][ T4554] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.390425][ T4554] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.404792][ T4554] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.412707][ T4554] device bridge_slave_1 left promiscuous mode [ 115.516677][ T1106] usb 3-1: USB disconnect, device number 2 [ 115.554051][ T4554] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.604289][ T4554] device bridge_slave_0 left promiscuous mode [ 115.628079][ T4554] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.691114][ T4554] device veth1_macvtap left promiscuous mode [ 115.708285][ T4554] device veth0_macvtap left promiscuous mode [ 115.786264][ T4554] device veth1_vlan left promiscuous mode [ 115.792452][ T4554] device veth0_vlan left promiscuous mode [ 116.854619][ T4554] team0 (unregistering): Port device team_slave_1 removed [ 116.871872][ T4554] team0 (unregistering): Port device team_slave_0 removed [ 116.883886][ T4554] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 116.900827][ T4554] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 117.581267][ T4554] bond0 (unregistering): Released all slaves [ 117.646047][ T4934] device veth0_vlan entered promiscuous mode [ 117.653293][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 117.663351][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 117.683016][ T5181] netlink: 4 bytes leftover after parsing attributes in process `syz.5.200'. [ 117.714958][ T5192] netlink: 'syz.1.204': attribute type 1 has an invalid length. [ 117.876773][ T4934] device veth1_vlan entered promiscuous mode [ 117.933207][ T5204] netlink: 28 bytes leftover after parsing attributes in process `syz.5.208'. [ 117.999601][ T1130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 118.009038][ T1130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 118.100841][ T5213] netlink: 'syz.4.210': attribute type 1 has an invalid length. [ 118.183814][ T5214] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 118.235485][ T5213] 8021q: adding VLAN 0 to HW filter on device bond3 [ 118.245425][ T5205] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 118.246642][ T4934] device veth0_macvtap entered promiscuous mode [ 118.336138][ T4934] device veth1_macvtap entered promiscuous mode [ 118.412524][ T4934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.541858][ T4934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.610097][ T4934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.801393][ T4934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.817347][ T5230] loop5: detected capacity change from 0 to 512 [ 119.825669][ T4934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.853546][ T4934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.865974][ T4934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.876591][ T4934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.902358][ T4934] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.915645][ T4934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.931670][ T4934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.942165][ T4934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.958270][ T4934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.969457][ T4934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.979945][ T4934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.989877][ T4934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.023560][ T4934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.044803][ T4934] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.053716][ T1130] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 120.061752][ T1130] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 120.092346][ T1130] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 120.098630][ T5240] loop2: detected capacity change from 0 to 164 [ 120.115388][ T5230] EXT4-fs (loop5): Ignoring removed nobh option [ 120.133277][ T1130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 120.150116][ T1130] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 120.159830][ T1130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 120.163928][ T5230] EXT4-fs error (device loop5): ext4_orphan_get:1401: inode #15: comm syz.5.212: iget: bad i_size value: 38620345925642 [ 120.186074][ T5230] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.212: couldn't read orphan inode 15 (err -117) [ 120.216009][ T4934] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.243535][ T5240] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 120.295160][ T4934] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.334931][ T5230] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,,errors=continue. Quota mode: writeback. [ 120.365650][ T4934] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.374478][ T4934] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.695683][ T5243] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 121.211112][ T4355] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.276006][ T5240] loop2: detected capacity change from 0 to 512 [ 121.291291][ T4355] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.333692][ T5240] EXT4-fs (loop2): Ignoring removed oldalloc option [ 121.510619][ T1130] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 121.531551][ T5240] EXT4-fs error (device loop2): ext4_xattr_inode_iget:400: comm syz.2.214: Parent and EA inode have the same ino 15 [ 121.566377][ T1130] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.577008][ T1130] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.598285][ T1130] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 122.210816][ T5240] EXT4-fs (loop2): Remounting filesystem read-only [ 122.225340][ T5240] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2825: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 122.243360][ T5240] EXT4-fs error (device loop2): ext4_xattr_inode_iget:400: comm syz.2.214: Parent and EA inode have the same ino 15 [ 122.272290][ T5240] EXT4-fs (loop2): Remounting filesystem read-only [ 122.413044][ T5240] EXT4-fs (loop2): 1 orphan inode deleted [ 122.427210][ T5240] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,abort,debug_want_extra_isize=0x000000000000005e,noauto_da_alloc,block_validity,oldalloc,mb_optimize_scan=0x0000000000000001,. Quota mode: none. [ 122.641487][ T5268] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 124.560115][ T5273] netlink: 'syz.4.222': attribute type 4 has an invalid length. [ 124.594244][ T5273] netlink: 17 bytes leftover after parsing attributes in process `syz.4.222'. [ 124.642271][ T5282] loop2: detected capacity change from 0 to 512 [ 125.256856][ T5287] loop5: detected capacity change from 0 to 256 [ 125.287211][ T5282] EXT4-fs (loop2): Ignoring removed nobh option [ 125.295280][ T5288] syz.1.225[5288] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 125.295369][ T5288] syz.1.225[5288] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 125.956005][ T5282] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 126.016700][ T5287] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 126.027435][ T5287] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 126.045674][ T5287] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 126.059653][ T5291] 9pnet: Insufficient options for proto=fd [ 126.500929][ T5282] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.224: iget: bad i_size value: 38620345925642 [ 127.317520][ T5282] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.224: couldn't read orphan inode 15 (err -117) [ 127.424916][ T5282] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,nojournal_checksum,dioread_nolock,bsdgroups,,errors=continue. Quota mode: writeback. [ 127.505560][ T5308] netlink: 28 bytes leftover after parsing attributes in process `syz.1.229'. [ 127.557922][ T5309] netlink: 28 bytes leftover after parsing attributes in process `syz.1.229'. [ 127.579814][ T5306] loop0: detected capacity change from 0 to 64 [ 127.645369][ T5306] hfs: unable to parse mount options [ 128.953343][ T5330] lo speed is unknown, defaulting to 1000 [ 128.963514][ T5330] lo speed is unknown, defaulting to 1000 [ 128.972733][ T5330] lo speed is unknown, defaulting to 1000 [ 129.018482][ T5330] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 129.131197][ T5330] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 129.951233][ T5330] lo speed is unknown, defaulting to 1000 [ 129.998565][ T5338] loop2: detected capacity change from 0 to 512 [ 130.015438][ T5338] EXT4-fs (loop2): Ignoring removed bh option [ 130.021680][ T5338] EXT4-fs (loop2): Ignoring removed orlov option [ 130.036355][ T5338] EXT4-fs (loop2): Test dummy encryption mode enabled [ 130.203823][ T5338] EXT4-fs (loop2): Ignoring removed bh option [ 130.604310][ T5330] lo speed is unknown, defaulting to 1000 [ 130.611437][ T5330] lo speed is unknown, defaulting to 1000 [ 130.618733][ T5330] lo speed is unknown, defaulting to 1000 [ 130.644664][ T5330] lo speed is unknown, defaulting to 1000 [ 130.696749][ T5338] EXT4-fs (loop2): 1 truncate cleaned up [ 130.702422][ T5338] EXT4-fs (loop2): mounted filesystem without journal. Opts: bh,norecovery,orlov,test_dummy_encryption,bh,lazytime,,errors=continue. Quota mode: none. [ 130.727047][ T5347] netlink: 41326 bytes leftover after parsing attributes in process `syz.4.239'. [ 130.757265][ T5330] lo speed is unknown, defaulting to 1000 [ 130.779718][ T5350] loop5: detected capacity change from 0 to 1024 [ 130.796862][ T5350] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 130.860848][ T5350] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,bsddf,max_dir_size_kb=0x0000000000000002,norecovery,debug_want_extra_isize=0x0000000000000080,block_validity,nodiscard,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 130.950902][ T5338] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.237: invalid indirect mapped block 16744704 (level 1) [ 132.396819][ T5372] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 132.427008][ T5373] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 132.636295][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.642605][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.492279][ T5397] x_tables: ip_tables: socket match: used from hooks FORWARD, but only valid from PREROUTING/INPUT [ 135.100185][ T5417] netlink: 8 bytes leftover after parsing attributes in process `syz.1.255'. [ 135.411658][ T5417] netlink: 28 bytes leftover after parsing attributes in process `syz.1.255'. [ 135.521691][ T5417] device geneve2 entered promiscuous mode [ 138.377161][ T5451] loop0: detected capacity change from 0 to 256 [ 138.759703][ T25] audit: type=1326 audit(1751078603.782:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5452 comm="syz.1.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1695699929 code=0x7ffc0000 [ 138.944955][ T25] audit: type=1326 audit(1751078603.822:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5452 comm="syz.1.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1695699929 code=0x7ffc0000 [ 138.970913][ T5451] FAT-fs (loop0): Directory bread(block 64) failed [ 138.977875][ T5451] FAT-fs (loop0): Directory bread(block 65) failed [ 138.984516][ T5451] FAT-fs (loop0): Directory bread(block 66) failed [ 138.991042][ T5451] FAT-fs (loop0): Directory bread(block 67) failed [ 138.997690][ T5451] FAT-fs (loop0): Directory bread(block 68) failed [ 139.004269][ T5451] FAT-fs (loop0): Directory bread(block 69) failed [ 139.010837][ T5451] FAT-fs (loop0): Directory bread(block 70) failed [ 139.018610][ T5451] FAT-fs (loop0): Directory bread(block 71) failed [ 139.025600][ T5451] FAT-fs (loop0): Directory bread(block 72) failed [ 139.032388][ T5451] FAT-fs (loop0): Directory bread(block 73) failed [ 139.047317][ T25] audit: type=1326 audit(1751078603.912:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5452 comm="syz.1.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f1695699929 code=0x7ffc0000 [ 139.200804][ T25] audit: type=1326 audit(1751078603.912:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5452 comm="syz.1.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1695699929 code=0x7ffc0000 [ 139.950410][ T25] audit: type=1326 audit(1751078603.912:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5452 comm="syz.1.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1695699929 code=0x7ffc0000 [ 140.276749][ T5481] nfs: Unknown parameter 'ntext' [ 140.790095][ T25] audit: type=1326 audit(1751078603.922:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5452 comm="syz.1.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f1695699929 code=0x7ffc0000 [ 140.812302][ T25] audit: type=1326 audit(1751078603.922:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5452 comm="syz.1.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1695699929 code=0x7ffc0000 [ 140.856812][ T25] audit: type=1326 audit(1751078603.922:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5452 comm="syz.1.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1695699929 code=0x7ffc0000 [ 141.045690][ T25] audit: type=1326 audit(1751078603.922:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5452 comm="syz.1.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f1695699929 code=0x7ffc0000 [ 141.075779][ T5468] loop0: detected capacity change from 0 to 4096 [ 141.122876][ T25] audit: type=1326 audit(1751078603.922:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5452 comm="syz.1.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1695699929 code=0x7ffc0000 [ 141.152280][ T5492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 141.215265][ T5468] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 141.268686][ T5468] ntfs3: loop0: Failed to load $Extend. [ 142.282785][ T5499] netlink: 4 bytes leftover after parsing attributes in process `syz.2.276'. [ 144.374806][ T5538] loop2: detected capacity change from 0 to 128 [ 144.386083][ T5538] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 144.416182][ T5538] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 144.471389][ T5543] netlink: 'syz.4.289': attribute type 32 has an invalid length. [ 144.546876][ T5546] netlink: 'syz.0.290': attribute type 12 has an invalid length. [ 144.586912][ T5538] netlink: 24 bytes leftover after parsing attributes in process `syz.2.288'. [ 144.610043][ T4560] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 145.232476][ T5556] xt_HMARK: proto mask must be zero with L3 mode [ 146.443597][ T5580] xt_hashlimit: Unknown mode mask 258, kernel too old? [ 147.561961][ T5601] netlink: zone id is out of range [ 147.641384][ T5607] siw: device registration error -23 [ 147.772998][ T5615] netlink: 'syz.0.308': attribute type 21 has an invalid length. [ 147.780900][ T5615] netlink: 4 bytes leftover after parsing attributes in process `syz.0.308'. [ 150.345443][ T5644] netlink: 12 bytes leftover after parsing attributes in process `syz.2.312'. [ 151.195864][ T5656] netlink: zone id is out of range [ 154.846831][ T5726] x_tables: ip_tables: socket match: used from hooks FORWARD, but only valid from PREROUTING/INPUT [ 155.652073][ T5728] netlink: 136 bytes leftover after parsing attributes in process `syz.1.336'. [ 155.840126][ T5738] overlayfs: failed to clone upperpath [ 157.060396][ T5759] wlan0 speed is unknown, defaulting to 1000 [ 157.147737][ T5759] wlan0 speed is unknown, defaulting to 1000 [ 157.157393][ T5759] wlan0 speed is unknown, defaulting to 1000 [ 157.194720][ T5759] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 157.229993][ T5765] loop5: detected capacity change from 0 to 512 [ 157.237883][ T5718] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 157.382812][ T5759] wlan0 speed is unknown, defaulting to 1000 [ 157.421655][ T5765] EXT4-fs error (device loop5): ext4_xattr_inode_iget:404: comm syz.5.343: inode #1: comm syz.5.343: iget: illegal inode # [ 157.439550][ T5759] wlan0 speed is unknown, defaulting to 1000 [ 157.470413][ T5759] wlan0 speed is unknown, defaulting to 1000 [ 157.487560][ T5765] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.343: error while reading EA inode 1 err=-117 [ 157.534762][ T5759] wlan0 speed is unknown, defaulting to 1000 [ 157.568520][ T5759] wlan0 speed is unknown, defaulting to 1000 [ 157.575936][ T5765] EXT4-fs (loop5): 1 orphan inode deleted [ 157.605304][ T5765] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 157.724925][ T5775] team0: Failed to send port change of device macvlan3 via netlink (err -105) [ 157.794329][ T5775] team0: Failed to send options change via netlink (err -105) [ 157.847883][ T5775] team0: Port device macvlan3 added [ 158.232557][ T5784] netlink: 8 bytes leftover after parsing attributes in process `syz.4.349'. [ 158.246788][ T5787] nftables ruleset with unbound chain [ 164.147363][ T25] kauditd_printk_skb: 28 callbacks suppressed [ 164.147376][ T25] audit: type=1326 audit(1751078629.172:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5835 comm="syz.2.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0147017929 code=0x7ffc0000 [ 164.243501][ T5842] loop5: detected capacity change from 0 to 8 [ 164.356323][ T5838] netlink: 'syz.1.359': attribute type 1 has an invalid length. [ 165.283121][ T25] audit: type=1326 audit(1751078629.182:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5835 comm="syz.2.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0147017929 code=0x7ffc0000 [ 165.349802][ T25] audit: type=1326 audit(1751078629.182:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5835 comm="syz.2.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0147017929 code=0x7ffc0000 [ 165.425238][ T5849] dns_resolver: Unsupported server list version (0) [ 165.673641][ T13] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 165.684554][ T5838] 8021q: adding VLAN 0 to HW filter on device bond2 [ 165.713110][ T25] audit: type=1326 audit(1751078629.182:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5835 comm="syz.2.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0147017929 code=0x7ffc0000 [ 165.833212][ T25] audit: type=1326 audit(1751078629.182:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5835 comm="syz.2.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0147017929 code=0x7ffc0000 [ 165.855766][ T5848] 8021q: adding VLAN 0 to HW filter on device bond2 [ 165.858657][ T25] audit: type=1326 audit(1751078629.182:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5835 comm="syz.2.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f0147017929 code=0x7ffc0000 [ 165.900264][ T5848] bond2: (slave vti0): The slave device specified does not support setting the MAC address [ 165.912245][ T5848] bond2: (slave vti0): Error -95 calling set_mac_address [ 166.039344][ T25] audit: type=1326 audit(1751078629.182:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5835 comm="syz.2.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0147017929 code=0x7ffc0000 [ 166.066661][ T25] audit: type=1326 audit(1751078629.182:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5835 comm="syz.2.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0147017929 code=0x7ffc0000 [ 166.084788][ T5850] bond2: (slave gretap1): making interface the new active one [ 166.092745][ T13] usb 3-1: Using ep0 maxpacket: 32 [ 166.099473][ T5850] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 166.744306][ T25] audit: type=1326 audit(1751078629.182:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5835 comm="syz.2.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f0147017929 code=0x7ffc0000 [ 166.773016][ T25] audit: type=1326 audit(1751078629.182:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5835 comm="syz.2.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0147017929 code=0x7ffc0000 [ 166.876366][ T13] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 166.885280][ T5850] syz.1.359 (5850) used greatest stack depth: 19792 bytes left [ 166.906535][ T13] usb 3-1: config 0 has no interface number 0 [ 166.912758][ T13] usb 3-1: config 0 interface 2 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 166.947758][ T5866] netlink: 'syz.1.368': attribute type 10 has an invalid length. [ 166.958592][ T5866] netlink: 40 bytes leftover after parsing attributes in process `syz.1.368'. [ 166.983558][ T5866] netlink: 'syz.1.368': attribute type 10 has an invalid length. [ 166.991620][ T13] usb 3-1: config 0 interface 2 has no altsetting 0 [ 167.024247][ T5866] netlink: 40 bytes leftover after parsing attributes in process `syz.1.368'. [ 167.042370][ T13] usb 3-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 167.062635][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.110063][ T13] usb 3-1: config 0 descriptor?? [ 169.672712][ T13] uclogic 0003:5543:0781.0001: unknown main item tag 0x0 [ 169.689834][ T13] uclogic 0003:5543:0781.0001: unknown main item tag 0x0 [ 169.706528][ T13] uclogic 0003:5543:0781.0001: unknown main item tag 0x0 [ 169.730648][ T13] uclogic 0003:5543:0781.0001: item fetching failed at offset 6/7 [ 170.223786][ T13] uclogic 0003:5543:0781.0001: parse failed [ 170.229733][ T13] uclogic: probe of 0003:5543:0781.0001 failed with error -22 [ 170.242364][ T5897] netlink: 24 bytes leftover after parsing attributes in process `syz.5.374'. [ 170.328681][ T13] usb 3-1: USB disconnect, device number 3 [ 170.719964][ T5932] netlink: 64 bytes leftover after parsing attributes in process `syz.2.383'. [ 170.755782][ T5917] loop5: detected capacity change from 0 to 8192 [ 172.828057][ T5948] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 172.835893][ T5948] IPv6: NLM_F_CREATE should be set when creating new route [ 175.100282][ T5975] overlayfs: failed to clone upperpath [ 175.157666][ T5978] netlink: 'syz.5.394': attribute type 10 has an invalid length. [ 176.000070][ T4785] Bluetooth: hci1: command 0x0406 tx timeout [ 176.042839][ T4785] Bluetooth: hci2: command 0x0406 tx timeout [ 176.061450][ T5978] team0: Port device dummy0 added [ 176.082593][ T4785] Bluetooth: hci0: command 0x0406 tx timeout [ 176.091502][ T5988] netlink: 'syz.5.394': attribute type 10 has an invalid length. [ 176.284167][ T5988] team0: Port device dummy0 removed [ 176.312359][ T5988] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 177.359548][ T6008] netlink: 'syz.1.399': attribute type 12 has an invalid length. [ 178.897954][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805fb7c000: rx timeout, send abort [ 178.899718][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805fb7ec00: rx timeout, send abort [ 179.491476][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805fb7ec00: abort rx timeout. Force session deactivation [ 179.577854][ T6029] loop5: detected capacity change from 0 to 512 [ 179.652780][ T6034] siw: device registration error -23 [ 180.347254][ T6029] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 180.363080][ T6029] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 180.421277][ T6029] EXT4-fs (loop5): 1 truncate cleaned up [ 180.430765][ T6029] EXT4-fs (loop5): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000004,debug_want_extra_isize=0x0000000000000066,nobarrier,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 181.092430][ T6045] netlink: 'syz.1.410': attribute type 4 has an invalid length. [ 182.020891][ T6077] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 182.094620][ T6077] bond0: (slave dummy0): Releasing backup interface [ 182.119447][ T6077] device bridge_slave_0 left promiscuous mode [ 182.131711][ T6077] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.142446][ T6077] device bridge_slave_1 left promiscuous mode [ 182.163820][ T6077] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.219897][ T6083] syz.4.421 uses obsolete (PF_INET,SOCK_PACKET) [ 182.284267][ T6077] bond0: (slave bond_slave_0): Releasing backup interface [ 182.322031][ T6077] bond0: (slave bond_slave_1): Releasing backup interface [ 182.428122][ T6095] xt_CT: You must specify a L4 protocol and not use inversions on it [ 182.941868][ T6077] team0: Port device team_slave_0 removed [ 183.060562][ T6077] team0: Port device team_slave_1 removed [ 183.085924][ T6077] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.097208][ T6077] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 183.118876][ T6077] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 183.126644][ T6077] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 183.167118][ T6083] tipc: Started in network mode [ 183.172380][ T6083] tipc: Node identity 7f000001, cluster identity 4711 [ 183.191374][ T6083] tipc: Enabled bearer , priority 10 [ 183.208824][ T6094] netlink: 'syz.1.424': attribute type 10 has an invalid length. [ 183.360860][ T6094] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.920754][ T6094] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 183.929991][ T6096] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.939425][ T6096] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 183.959073][ T6096] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 183.970872][ T6096] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 184.185303][ T4279] tipc: Node number set to 2130706433 [ 184.297173][ T6096] bond0: (slave batadv0): Releasing backup interface [ 184.336917][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805f43a400: rx timeout, send abort [ 184.584182][ T6114] netlink: 4 bytes leftover after parsing attributes in process `syz.0.429'. [ 184.855077][ T6115] netlink: 'syz.5.428': attribute type 4 has an invalid length. [ 185.180598][ T6122] netlink: 4 bytes leftover after parsing attributes in process `syz.4.431'. [ 185.370482][ T6126] bridge0: port 1(batadv1) entered blocking state [ 185.377515][ T6126] bridge0: port 1(batadv1) entered disabled state [ 185.388937][ T6126] device batadv1 entered promiscuous mode [ 185.963265][ T6142] xt_CT: You must specify a L4 protocol and not use inversions on it [ 186.547610][ T1276] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 186.557599][ T1276] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 186.858263][ T6161] netlink: 8 bytes leftover after parsing attributes in process `syz.0.443'. [ 186.888174][ T6161] netlink: 8 bytes leftover after parsing attributes in process `syz.0.443'. [ 187.994236][ T6173] overlayfs: failed to clone upperpath [ 188.087900][ T6178] loop5: detected capacity change from 0 to 2048 [ 188.505900][ T6181] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20000 [ 188.716830][ T6181] netlink: 'syz.1.452': attribute type 16 has an invalid length. [ 188.733213][ T6181] netlink: 'syz.1.452': attribute type 3 has an invalid length. [ 188.740989][ T6181] netlink: 132 bytes leftover after parsing attributes in process `syz.1.452'. [ 188.892232][ T6178] EXT4-fs (loop5): mounted filesystem without journal. Opts: min_batch_time=0x000000000000000d,mb_optimize_scan=0x0000000000000001,noblock_validity,,errors=continue. Quota mode: none. [ 189.902891][ T6206] netlink: 28 bytes leftover after parsing attributes in process `syz.4.462'. [ 190.992461][ T6205] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 191.411111][ T6231] netlink: 4 bytes leftover after parsing attributes in process `syz.4.470'. [ 191.440630][ C0] Unknown status report in ack skb [ 191.467443][ T6227] syz.5.469 (6227) used greatest stack depth: 18592 bytes left [ 191.523620][ T6233] loop5: detected capacity change from 0 to 512 [ 191.558143][ T6235] netlink: 4 bytes leftover after parsing attributes in process `syz.4.472'. [ 191.559832][ T6233] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 191.605739][ T6233] EXT4-fs (loop5): 1 truncate cleaned up [ 191.611609][ T6233] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 191.811824][ T6233] netlink: 24 bytes leftover after parsing attributes in process `syz.5.471'. [ 191.863304][ T6233] netlink: 16 bytes leftover after parsing attributes in process `syz.5.471'. [ 191.884057][ T25] kauditd_printk_skb: 35 callbacks suppressed [ 191.884071][ T25] audit: type=1326 audit(1751081234.906:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6243 comm="syz.0.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85c6c43929 code=0x7ffc0000 [ 191.978403][ T25] audit: type=1326 audit(1751081234.976:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6243 comm="syz.0.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f85c6c43929 code=0x7ffc0000 [ 192.016276][ T25] audit: type=1326 audit(1751081234.976:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6243 comm="syz.0.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85c6c43929 code=0x7ffc0000 [ 192.027248][ T6248] netlink: 28 bytes leftover after parsing attributes in process `syz.2.476'. [ 192.038654][ T25] audit: type=1326 audit(1751081234.976:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6243 comm="syz.0.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f85c6c43929 code=0x7ffc0000 [ 192.085960][ T25] audit: type=1326 audit(1751081234.976:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6243 comm="syz.0.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85c6c43929 code=0x7ffc0000 [ 192.140125][ T25] audit: type=1326 audit(1751081234.976:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6243 comm="syz.0.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f85c6c43929 code=0x7ffc0000 [ 192.173998][ T25] audit: type=1326 audit(1751081234.976:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6243 comm="syz.0.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85c6c43929 code=0x7ffc0000 [ 192.207990][ T25] audit: type=1326 audit(1751081234.976:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6243 comm="syz.0.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f85c6c43929 code=0x7ffc0000 [ 192.237301][ T25] audit: type=1326 audit(1751081234.976:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6243 comm="syz.0.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85c6c43929 code=0x7ffc0000 [ 192.266830][ T25] audit: type=1326 audit(1751081234.976:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6243 comm="syz.0.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f85c6c43929 code=0x7ffc0000 [ 193.219652][ T6266] netlink: 'syz.5.491': attribute type 1 has an invalid length. [ 194.396640][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.403000][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.506416][ T6280] netlink: 8 bytes leftover after parsing attributes in process `syz.2.484'. [ 195.526127][ T6280] netlink: 8 bytes leftover after parsing attributes in process `syz.2.484'. [ 196.877523][ T6286] loop5: detected capacity change from 0 to 32768 [ 197.198157][ T6286] XFS (loop5): Mounting V5 Filesystem [ 198.023319][ T6286] XFS (loop5): AIL initialisation failed: error -12 [ 198.158274][ T6286] XFS (loop5): log mount failed [ 200.543679][ T6350] netlink: 104 bytes leftover after parsing attributes in process `syz.1.504'. [ 201.823585][ T1106] Bluetooth: hci4: command 0x0406 tx timeout [ 202.184283][ T6362] ªªªªªª: renamed from vlan0 [ 202.387181][ T6366] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 202.420459][ T6366] device bridge_slave_0 left promiscuous mode [ 202.467851][ T6366] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.492143][ T6366] device bridge_slave_1 left promiscuous mode [ 203.532202][ T6366] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.661213][ T6366] bond0: (slave bond_slave_0): Releasing backup interface [ 203.748163][ T6366] bond0: (slave bond_slave_1): Releasing backup interface [ 203.889920][ T6366] team0: Port device team_slave_0 removed [ 204.068751][ T6366] team0: Port device team_slave_1 removed [ 204.242893][ T6366] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.342745][ T6366] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 204.521996][ T6366] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 204.535647][ T6366] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 204.569729][ T6366] bond2: (slave gretap1): Releasing active interface [ 204.586242][ T6366] device gretap1 left promiscuous mode [ 204.601849][ T6367] team0: Mode changed to "loadbalance" [ 204.938426][ T6387] tipc: Started in network mode [ 206.392178][ T6387] tipc: Node identity 4, cluster identity 4711 [ 206.844033][ T6387] tipc: Node number set to 4 [ 207.155691][ T6405] fuse: Unknown parameter '' [ 207.905713][ T6411] xt_TPROXY: Can be used only with -p tcp or -p udp [ 207.950550][ T25] kauditd_printk_skb: 12 callbacks suppressed [ 207.950563][ T25] audit: type=1326 audit(1751081250.976:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6416 comm="syz.0.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85c6c43929 code=0x7ffc0000 [ 208.197595][ T25] audit: type=1326 audit(1751081251.146:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6416 comm="syz.0.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85c6c43929 code=0x7ffc0000 [ 208.220192][ T25] audit: type=1326 audit(1751081251.226:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6416 comm="syz.0.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=269 compat=0 ip=0x7f85c6c43929 code=0x7ffc0000 [ 208.242699][ T25] audit: type=1326 audit(1751081251.226:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6416 comm="syz.0.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85c6c43929 code=0x7ffc0000 [ 210.012360][ T6454] loop2: detected capacity change from 0 to 2048 [ 210.088941][ T6454] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 210.925583][ T6459] netlink: 24 bytes leftover after parsing attributes in process `syz.0.536'. [ 210.934810][ T6459] netlink: 16 bytes leftover after parsing attributes in process `syz.0.536'. [ 215.754484][ T25] audit: type=1326 audit(1751081258.786:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6517 comm="syz.4.553" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0ad828e929 code=0x0 [ 219.815694][ T6565] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 219.892474][ T6565] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 219.980691][ T6565] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 220.010556][ T6565] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 220.021177][ T6565] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 220.038387][ T6565] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 221.783373][ T6601] netlink: 'syz.2.579': attribute type 10 has an invalid length. [ 221.814770][ T6599] io-wq is not configured for unbound workers [ 221.835516][ T6601] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.858310][ T6601] device batadv0 entered promiscuous mode [ 221.865543][ T6601] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 221.876016][ T6612] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.883594][ T6612] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 221.902176][ T6612] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.912476][ T6612] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 222.853364][ T6612] bond0: (slave batadv0): Releasing backup interface [ 223.135265][ T6629] loop5: detected capacity change from 0 to 2048 [ 223.594198][ T6629] UDF-fs: bad mount option "gid=f0lÑ°ÙÂ/ëƘ:²orget" or missing value [ 227.234225][ T26] Bluetooth: hci3: command 0x0406 tx timeout [ 230.831925][ T6710] netlink: 16 bytes leftover after parsing attributes in process `syz.2.608'. [ 231.188774][ T6715] netlink: 16 bytes leftover after parsing attributes in process `syz.2.608'. [ 236.590317][ T6778] Device name cannot be null; rc = [-22] [ 236.633700][ T6778] loop2: detected capacity change from 0 to 128 [ 236.705657][ T6778] affs: Unrecognized mount option "verb" or missing value [ 236.713314][ T6778] affs: Error parsing options [ 238.325114][ T6794] netlink: zone id is out of range [ 238.330315][ T6794] netlink: zone id is out of range [ 238.344696][ T6794] netlink: zone id is out of range [ 238.365326][ T6794] netlink: set zone limit has 4 unknown bytes [ 240.840907][ T6816] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 241.775786][ T6816] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 242.365331][ T6839] virtio-fs: tag not found [ 243.178445][ T6850] netlink: 'syz.1.653': attribute type 1 has an invalid length. [ 244.212798][ T6854] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 244.301282][ T6855] device veth3 entered promiscuous mode [ 244.328047][ T6855] bond3: (slave veth3): Enslaving as a backup interface with a down link [ 245.255302][ T6874] tipc: Started in network mode [ 245.289731][ T6874] tipc: Node identity 4, cluster identity 4711 [ 245.341083][ T6874] tipc: Node number set to 4 [ 248.284544][ T6913] loop5: detected capacity change from 0 to 256 [ 248.578489][ T6913] loop5: detected capacity change from 0 to 512 [ 248.605950][ T6913] EXT4-fs (loop5): Unrecognized mount option "smackfsroot=/dev/kvM" or missing value [ 249.515756][ T6930] [U] ¦ [ 250.365345][ T6953] xt_time: unknown flags 0xc [ 250.476382][ T6953] loop2: detected capacity change from 0 to 2048 [ 250.824042][ T6566] GPT:first_usable_lbas don't match. [ 250.829362][ T6566] GPT:34 != 290 [ 250.834160][ T6566] GPT: Use GNU Parted to correct GPT errors. [ 250.840249][ T6566] loop2: p1 p2 p3 [ 252.414158][ T6953] GPT:first_usable_lbas don't match. [ 252.419518][ T6953] GPT:34 != 290 [ 252.423268][ T6953] GPT: Use GNU Parted to correct GPT errors. [ 252.429341][ T6953] loop2: p1 p2 p3 [ 253.170942][ T6977] ptrace attach of "./syz-executor exec"[6980] was attempted by "./syz-executor exec"[6977] [ 254.845262][ T6707] udevd[6707]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 254.867417][ T6566] udevd[6566]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 255.495986][ T6986] udevd[6986]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 255.508586][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.508686][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.011044][ T7004] tipc: Failed to remove unknown binding: 66,1,1/0:1050284468/1050284470 [ 256.032981][ T7004] tipc: Failed to remove unknown binding: 66,1,1/0:1050284468/1050284470 [ 256.051438][ T6707] udevd[6707]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 256.051539][ T6986] udevd[6986]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 256.665441][ T6566] udevd[6566]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 257.681993][ T7014] device batadv_slave_0 entered promiscuous mode [ 257.819288][ T7025] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 257.921876][ T7033] delete_channel: no stack [ 261.504260][ T7079] lo speed is unknown, defaulting to 1000 [ 261.512579][ T7079] wlan0 speed is unknown, defaulting to 1000 [ 261.745586][ T7079] chnl_net:caif_netlink_parms(): no params data found [ 261.761230][ T7093] overlayfs: failed to clone upperpath [ 261.860281][ T7079] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.868273][ T7079] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.889513][ T7079] device bridge_slave_0 entered promiscuous mode [ 261.922313][ T7079] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.941370][ T7079] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.949718][ T7079] device bridge_slave_1 entered promiscuous mode [ 262.635800][ T7079] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.678247][ T7079] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.547528][ T4227] Bluetooth: hci4: command 0x0409 tx timeout [ 263.598475][ T7079] team0: Port device team_slave_0 added [ 263.652018][ T7079] team0: Port device team_slave_1 added [ 264.845002][ T7079] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.399845][ T7128] xt_socket: unknown flags 0x8 [ 265.427358][ T7079] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.472109][ T7079] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.499817][ T7079] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.519412][ T7079] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.663503][ T4241] Bluetooth: hci4: command 0x041b tx timeout [ 266.045936][ T7079] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 266.163648][ T7079] device hsr_slave_0 entered promiscuous mode [ 266.172383][ T7079] device hsr_slave_1 entered promiscuous mode [ 266.226250][ T7144] netlink: 8 bytes leftover after parsing attributes in process `syz.1.736'. [ 266.279857][ T7079] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 266.295828][ T7079] Cannot create hsr debugfs directory [ 266.302024][ T7144] netlink: 'syz.1.736': attribute type 10 has an invalid length. [ 266.315569][ T7144] netlink: 40 bytes leftover after parsing attributes in process `syz.1.736'. [ 266.367388][ T7144] team0: Port device geneve0 added [ 267.799936][ T5188] Bluetooth: hci4: command 0x040f tx timeout [ 269.930728][ T5188] Bluetooth: hci4: command 0x0419 tx timeout [ 270.597165][ T7195] netlink: 8 bytes leftover after parsing attributes in process `syz.2.748'. [ 270.669538][ T7079] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 270.729365][ T7079] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 270.784900][ T7079] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 270.825024][ T7079] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 271.178055][ T7221] Cannot find add_set index 0 as target [ 274.898339][ T7079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.929059][ T6343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 274.956010][ T6343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 274.967044][ T7079] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.192887][ T7079] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 275.203809][ T7079] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 275.425227][ T6343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 275.443894][ T6343] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 275.452345][ T6343] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.459568][ T6343] bridge0: port 1(bridge_slave_0) entered forwarding state [ 276.128547][ T6343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 276.192189][ T6343] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 276.213466][ T6343] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.220574][ T6343] bridge0: port 2(bridge_slave_1) entered forwarding state [ 276.238916][ T6343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 276.248753][ T6343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 276.261346][ T6343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 276.271783][ T6343] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 276.317056][ T6343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 276.399812][ T6343] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 276.432524][ T6343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 276.458879][ T6343] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 276.487719][ T6343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 276.923634][ T7283] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 277.924216][ T6343] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 277.932615][ T6343] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 277.941333][ T6343] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 277.949277][ T6343] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 278.013122][ T7266] tipc: Enabling of bearer rejected, failed to enable media [ 278.024861][ T25] audit: type=1326 audit(1751081322.055:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7287 comm="syz.1.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1695699929 code=0x7ffc0000 [ 278.057960][ T25] audit: type=1326 audit(1751081322.055:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7287 comm="syz.1.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1695699929 code=0x7ffc0000 [ 279.068065][ T25] audit: type=1326 audit(1751081322.075:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7287 comm="syz.1.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f1695699929 code=0x7ffc0000 [ 279.103872][ T25] audit: type=1326 audit(1751081322.085:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7287 comm="syz.1.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1695699929 code=0x7ffc0000 [ 279.177842][ T25] audit: type=1326 audit(1751081322.085:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7287 comm="syz.1.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1695699929 code=0x7ffc0000 [ 279.202435][ T6345] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 279.210908][ T25] audit: type=1326 audit(1751081323.085:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7287 comm="syz.1.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f1695699929 code=0x7ffc0000 [ 279.235673][ T6345] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 279.243581][ T25] audit: type=1326 audit(1751081323.085:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7287 comm="syz.1.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1695699929 code=0x7ffc0000 [ 279.280098][ T25] audit: type=1326 audit(1751081323.085:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7287 comm="syz.1.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1695699929 code=0x7ffc0000 [ 279.333681][ T25] audit: type=1326 audit(1751081323.095:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7287 comm="syz.1.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7f1695699929 code=0x7ffc0000 [ 279.362976][ T25] audit: type=1326 audit(1751081323.095:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7287 comm="syz.1.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1695699929 code=0x7ffc0000 [ 279.372596][ T7079] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 280.063712][ T7303] device wg2 entered promiscuous mode [ 281.617228][ T7328] Device name cannot be null; rc = [-22] [ 287.218717][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 287.268453][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 287.382850][ T7385] netlink: 8 bytes leftover after parsing attributes in process `syz.2.791'. [ 287.401493][ T7385] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 287.412806][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 287.428474][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 288.180249][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 288.230290][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 288.449482][ T7079] device veth0_vlan entered promiscuous mode [ 289.335358][ T7079] device veth1_vlan entered promiscuous mode [ 289.538714][ T6343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 290.821266][ T6343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 290.846345][ T7079] device veth0_macvtap entered promiscuous mode [ 290.917886][ T7425] loop2: detected capacity change from 0 to 128 [ 290.962685][ T7079] device veth1_macvtap entered promiscuous mode [ 291.228888][ T7425] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 291.240066][ T7425] ext4 filesystem being mounted at /146/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 293.222225][ T7079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.283168][ T7079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.294511][ T7079] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 293.306296][ T7079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.523150][ T7079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.453170][ T7449] netlink: 12 bytes leftover after parsing attributes in process `syz.2.802'. [ 294.575953][ T7079] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 295.209060][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 295.221702][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 295.231189][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 295.410420][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 296.355182][ T7464] netlink: 4 bytes leftover after parsing attributes in process `syz.1.813'. [ 296.814797][ T7079] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.842404][ T7079] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.979858][ T7079] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.988788][ T7079] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.015603][ T4562] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.632761][ T4562] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.794213][ T6343] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 299.975057][ T6343] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.983943][ T6343] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.997028][ T6343] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 300.225882][ T7504] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 303.847357][ T7540] loop6: detected capacity change from 0 to 512 [ 305.979781][ T7540] EXT4-fs error (device loop6): ext4_orphan_get:1401: inode #15: comm syz.6.830: casefold flag without casefold feature [ 306.017840][ T7540] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.830: couldn't read orphan inode 15 (err -117) [ 306.051011][ T7540] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 306.133218][ T7591] netlink: 'syz.4.835': attribute type 10 has an invalid length. [ 306.850486][ T7591] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 307.150591][ T7612] xt_hashlimit: size too large, truncated to 1048576 [ 307.157333][ T7612] xt_hashlimit: Unknown mode mask 80FF, kernel too old? [ 307.911035][ T7618] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.920411][ T7618] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.929215][ T7618] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.938194][ T7618] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.960760][ T7618] team0: Port device vxlan0 added [ 316.910750][ T7685] loop2: detected capacity change from 0 to 40427 [ 316.963887][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.973717][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.356058][ T7685] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 317.364789][ T7685] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 317.379373][ T7685] F2FS-fs (loop2): invalid crc value [ 317.507895][ T7685] F2FS-fs (loop2): Found nat_bits in checkpoint [ 318.042222][ T7685] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 318.049889][ T7685] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 327.143817][ T7765] vivid-001: ================= START STATUS ================= [ 327.152084][ T7765] vivid-001: Generate PTS: true [ 327.157617][ T7765] vivid-001: Generate SCR: true [ 327.162500][ T7765] tpg source WxH: 640x360 (Y'CbCr) [ 327.167656][ T7765] tpg field: 1 [ 327.171020][ T7765] tpg crop: 640x360@0x0 [ 327.175187][ T7765] tpg compose: 640x360@0x0 [ 327.179599][ T7765] tpg colorspace: 8 [ 327.185389][ T7765] tpg transfer function: 0/2 [ 327.189994][ T7765] tpg Y'CbCr encoding: 0/1 [ 327.377080][ T7765] tpg quantization: 0/2 [ 327.381402][ T7765] tpg RGB range: 0/2 [ 327.385498][ T7765] vivid-001: ================== END STATUS ================== [ 327.806724][ T7771] delete_channel: no stack [ 331.891227][ T7808] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 335.927605][ T7848] kvm [7847]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x60 [ 341.070572][ T7905] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 341.074862][ T7899] ceph: No mds server is up or the cluster is laggy [ 341.097931][ T7905] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 341.135287][ T7905] device bridge_slave_0 left promiscuous mode [ 341.141691][ T7905] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.200148][ T7905] device bridge_slave_1 left promiscuous mode [ 341.222377][ T7905] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.274836][ T7905] bond0: (slave bond_slave_0): Releasing backup interface [ 341.318861][ T7905] bond0: (slave bond_slave_1): Releasing backup interface [ 341.386574][ T7905] team0: Port device team_slave_0 removed [ 341.398794][ T7905] team0: Port device team_slave_1 removed [ 341.405902][ T7905] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 341.419026][ T7905] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 342.104750][ T7905] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 342.187284][ T7905] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 343.323099][ T7905] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 343.332012][ T7905] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 343.341322][ T7905] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 343.350329][ T7905] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 343.985631][ T7905] team0: Port device vxlan0 removed [ 344.059243][ T7937] netlink: 28 bytes leftover after parsing attributes in process `syz.2.928'. [ 344.075644][ T7937] netlink: 8 bytes leftover after parsing attributes in process `syz.2.928'. [ 347.801047][ T7980] overlayfs: failed to clone upperpath [ 354.420254][ T8045] loop6: detected capacity change from 0 to 1024 [ 354.467437][ T8045] hfsplus: bad catalog file entry [ 354.473107][ T8045] hfsplus: failed to load root directory [ 355.621606][ T8053] netlink: 36 bytes leftover after parsing attributes in process `syz.1.959'. [ 356.352537][ T8066] netlink: 200 bytes leftover after parsing attributes in process `syz.4.961'. [ 357.878872][ T8071] loop6: detected capacity change from 0 to 512 [ 358.060075][ T8071] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled [ 358.440449][ T8087] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 358.457007][ T8087] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 359.086914][ T8071] EXT4-fs (loop6): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000008,jqfmt=vfsold,nojournal_checksum,,errors=continue. Quota mode: writeback. [ 359.112597][ T8071] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 360.877784][ T8113] loop2: detected capacity change from 0 to 40427 [ 360.879281][ T8117] netlink: 'syz.4.975': attribute type 4 has an invalid length. [ 360.879318][ T8117] netlink: 17 bytes leftover after parsing attributes in process `syz.4.975'. [ 362.250133][ T8123] netlink: 28 bytes leftover after parsing attributes in process `syz.0.977'. [ 362.566512][ T8113] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 362.574595][ T8113] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 362.585851][ T8113] F2FS-fs (loop2): invalid crc value [ 363.084701][ T8113] F2FS-fs (loop2): Found nat_bits in checkpoint [ 363.329788][ T8139] loop6: detected capacity change from 0 to 16 [ 363.383433][ T4552] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.566092][ T8113] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 363.573278][ T8113] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 364.586442][ T8139] erofs: (device loop6): mounted with root inode @ nid 36. [ 365.488126][ T4552] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.600496][ T8161] attempt to access beyond end of device [ 365.600496][ T8161] loop6: rw=524288, want=34359740336, limit=16 [ 366.930242][ T8173] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 366.984439][ T8173] CIFS: Unable to determine destination address [ 367.007039][ T4552] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.724702][ T4552] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.393608][ T8202] tipc: Started in network mode [ 369.398480][ T8202] tipc: Node identity ffffa848, cluster identity 4711 [ 369.405316][ T8202] tipc: Node number set to 4294944840 [ 375.899114][ T8292] xt_connbytes: Forcing CT accounting to be enabled [ 375.906602][ T8292] Cannot find add_set index 0 as target [ 378.413592][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.419899][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.930196][ T4552] device hsr_slave_0 left promiscuous mode [ 380.961451][ T4552] device hsr_slave_1 left promiscuous mode [ 380.973940][ T4552] device batadv1 left promiscuous mode [ 380.984370][ T4552] bridge0: port 1(batadv1) entered disabled state [ 381.022527][ T4552] device veth1_macvtap left promiscuous mode [ 381.090088][ T4552] device veth0_macvtap left promiscuous mode [ 381.125310][ T4552] device veth1_vlan left promiscuous mode [ 381.157358][ T4552] device veth0_vlan left promiscuous mode [ 381.912679][ T144] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 382.093164][ T5188] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 382.363587][ T5188] usb 7-1: Using ep0 maxpacket: 16 [ 382.579956][ T5188] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 382.703722][ T5188] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 383.023609][ T5188] usb 7-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=8b.57 [ 383.173881][ T5188] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.182796][ T5188] usb 7-1: Product: syz [ 383.187528][ T5188] usb 7-1: Manufacturer: syz [ 383.200121][ T5188] usb 7-1: SerialNumber: syz [ 383.217358][ T5188] usb 7-1: config 0 descriptor?? [ 383.633293][ T5188] port100 7-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 384.008443][ T4552] bond0 (unregistering): Released all slaves [ 384.430399][ T8341] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1029'. [ 384.446666][ T8354] netlink: 'syz.4.1032': attribute type 9 has an invalid length. [ 384.502839][ T26] usb 7-1: USB disconnect, device number 2 [ 384.712035][ T8381] loop2: detected capacity change from 0 to 8192 [ 385.633898][ T8381] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 385.693117][ T8381] REISERFS (device loop2): using ordered data mode [ 385.700341][ T8381] reiserfs: using flush barriers [ 385.773234][ T8381] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 385.844347][ T8381] REISERFS (device loop2): checking transaction log (loop2) [ 386.044964][ T8381] REISERFS (device loop2): Using r5 hash to sort names [ 386.058697][ T8402] loop6: detected capacity change from 0 to 164 [ 386.648826][ T8381] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 387.386085][ T8415] rock: directory entry would overflow storage [ 387.393122][ T8415] rock: sig=0x4f50, size=4, remaining=3 [ 387.398834][ T8415] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 387.494224][ T25] kauditd_printk_skb: 11 callbacks suppressed [ 387.494238][ T25] audit: type=1326 audit(1751081431.525:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8412 comm="syz.0.1048" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f85c6c43929 code=0x0 [ 390.708068][ T8466] loop6: detected capacity change from 0 to 512 [ 391.292364][ T8466] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 391.335593][ T8466] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 392.391838][ T8499] loop6: detected capacity change from 0 to 512 [ 392.415429][ T8499] EXT4-fs (loop6): couldn't mount as ext2 due to feature incompatibilities [ 393.723943][ T8528] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1063'. [ 394.415678][ T8523] Device name cannot be null; rc = [-22] [ 397.194113][ T8561] overlayfs: failed to clone lowerpath [ 399.697891][ T8589] netlink: zone id is out of range [ 399.713513][ T8589] netlink: zone id is out of range [ 399.745274][ T8589] netlink: zone id is out of range [ 399.877681][ T8589] netlink: set zone limit has 4 unknown bytes [ 400.122489][ T8609] netlink: 'syz.4.1095': attribute type 1 has an invalid length. [ 400.809630][ T8598] [U] ¦ [ 400.959877][ T8609] bond4: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 400.973409][ T13] Bluetooth: hci4: command 0x0406 tx timeout [ 402.333152][ T8609] device veth5 entered promiscuous mode [ 402.341112][ T8609] bond4: (slave veth5): Enslaving as a backup interface with a down link [ 402.397411][ T8634] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 402.409710][ T8635] SET target dimension over the limit! [ 402.578607][ T8634] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 403.457588][ T8634] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 403.512073][ T8634] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 403.522429][ T8634] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 403.530644][ T8634] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 403.664583][ T8634] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 403.672768][ T8634] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 404.590712][ T8634] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 404.602386][ T8634] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 404.613774][ T8634] device bridge_slave_1 left promiscuous mode [ 404.620233][ T8634] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.646036][ T8658] loop2: detected capacity change from 0 to 512 [ 404.688889][ T8634] bond0: (slave bond_slave_0): Releasing backup interface [ 404.856423][ T8658] EXT4-fs (loop2): Ignoring removed nobh option [ 404.878631][ T8658] EXT4-fs (loop2): Unrecognized mount option "" or missing value [ 404.981262][ T8634] bond0: (slave bond_slave_1): Releasing backup interface [ 405.048040][ T8634] team0: Port device team_slave_0 removed [ 405.081872][ T8634] team0: Port device team_slave_1 removed [ 405.115497][ T8634] team0: Port device geneve0 removed [ 405.122513][ T8634] bond0: (slave wlan1): Releasing backup interface [ 405.140354][ T8634] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 405.151169][ T8634] bond2: (slave gretap1): Releasing active interface [ 405.165246][ T8634] bond3: (slave ip6gretap1): Releasing backup interface [ 405.172242][ T8634] bond3: (slave ip6gretap1): the permanent HWaddr of slave - 8e:f1:f0:58:00:c7 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 405.853126][ T8634] bond3: (slave veth3): Releasing backup interface [ 405.935355][ T8660] netlink: 'syz.4.1105': attribute type 1 has an invalid length. [ 408.811880][ T8714] tipc: Failed to remove unknown binding: 66,1,1/4:1050978146/1050978148 [ 409.843557][ T8714] tipc: Failed to remove unknown binding: 66,1,1/4:1050978146/1050978148 [ 409.879965][ T8718] loop2: detected capacity change from 0 to 16 [ 410.392919][ T8718] erofs: (device loop2): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 66300) [ 410.989504][ T8748] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1126'. [ 411.483044][ T8750] netlink: 'syz.4.1126': attribute type 10 has an invalid length. [ 411.538151][ T8750] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1126'. [ 412.207149][ T8750] team0: Port device geneve0 added [ 414.809275][ T8793] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 415.538675][ T8822] loop2: detected capacity change from 0 to 16 [ 415.670652][ T8793] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 415.689422][ T8823] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1143'. [ 415.710998][ T8793] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 415.720427][ T8822] erofs: (device loop2): mounted with root inode @ nid 36. [ 417.977496][ T8793] device bridge_slave_0 left promiscuous mode [ 417.990699][ T8793] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.006177][ T8793] device bridge_slave_1 left promiscuous mode [ 418.012562][ T8793] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.036974][ T8793] bond0: (slave bond_slave_0): Releasing backup interface [ 418.109702][ T8833] Device name cannot be null; rc = [-22] [ 418.889048][ T8793] bond0: (slave bond_slave_1): Releasing backup interface [ 418.984905][ T8793] team0: Port device team_slave_0 removed [ 419.008217][ T8793] team0: Port device team_slave_1 removed [ 419.020895][ T8793] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 419.028730][ T8793] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 419.038572][ T8793] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 419.051900][ T8793] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 419.120802][ T8820] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1144'. [ 419.132909][ T8820] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan2: link becomes ready [ 420.048948][ T6339] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan2: link becomes ready [ 423.333066][ T8892] netlink: 'syz.6.1161': attribute type 9 has an invalid length. [ 423.382052][ T8892] loop6: detected capacity change from 0 to 1024 [ 423.581161][ T8892] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 423.611304][ T8905] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 423.746153][ T8906] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 423.758301][ T8906] FAT-fs (loop1): unable to read boot sector [ 423.801071][ T25] audit: type=1326 audit(1751081467.725:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8899 comm="syz.0.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85c6c43929 code=0x7ffc0000 [ 424.177759][ T25] audit: type=1326 audit(1751081467.735:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8899 comm="syz.0.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85c6c43929 code=0x7ffc0000 [ 424.200378][ T25] audit: type=1326 audit(1751081467.735:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8899 comm="syz.0.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f85c6c43929 code=0x7ffc0000 [ 424.246586][ T25] audit: type=1326 audit(1751081467.735:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8899 comm="syz.0.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85c6c43929 code=0x7ffc0000 [ 424.336560][ T8905] team0: Port device geneve0 removed [ 424.400210][ T25] audit: type=1326 audit(1751081467.735:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8899 comm="syz.0.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85c6c43929 code=0x7ffc0000 [ 424.519870][ T25] audit: type=1326 audit(1751081467.745:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8899 comm="syz.0.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f85c6c43929 code=0x7ffc0000 [ 424.930140][ T8905] bond0: (slave wlan1): Releasing backup interface [ 424.930441][ T8916] xt_CT: You must specify a L4 protocol and not use inversions on it [ 424.958674][ T25] audit: type=1326 audit(1751081467.745:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8899 comm="syz.0.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85c6c43929 code=0x7ffc0000 [ 424.999012][ T25] audit: type=1326 audit(1751081467.745:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8899 comm="syz.0.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85c6c43929 code=0x7ffc0000 [ 425.045128][ T25] audit: type=1326 audit(1751081467.745:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8899 comm="syz.0.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f85c6c43929 code=0x7ffc0000 [ 425.068625][ T8905] bond4: (slave ip6gretap1): Releasing backup interface [ 425.081403][ T25] audit: type=1326 audit(1751081467.745:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8899 comm="syz.0.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85c6c43929 code=0x7ffc0000 [ 425.106580][ T8905] bond4: (slave ip6gretap1): the permanent HWaddr of slave - 0a:68:2f:0d:09:d8 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 426.838177][ T8905] bond4: (slave veth5): Releasing backup interface [ 427.200031][ T8970] loop2: detected capacity change from 0 to 512 [ 428.507164][ T8970] EXT4-fs warning (device loop2): ext4_enable_quotas:6459: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 428.627647][ T8970] EXT4-fs (loop2): mount failed [ 431.296170][ T9031] loop6: detected capacity change from 0 to 256 [ 431.621422][ T9031] FAT-fs (loop6): Directory bread(block 64) failed [ 431.628427][ T9031] FAT-fs (loop6): Directory bread(block 65) failed [ 431.635724][ T9031] FAT-fs (loop6): Directory bread(block 66) failed [ 431.642488][ T9031] FAT-fs (loop6): Directory bread(block 67) failed [ 431.649598][ T9031] FAT-fs (loop6): Directory bread(block 68) failed [ 431.656472][ T9031] FAT-fs (loop6): Directory bread(block 69) failed [ 431.663902][ T9031] FAT-fs (loop6): Directory bread(block 70) failed [ 431.670556][ T9031] FAT-fs (loop6): Directory bread(block 71) failed [ 431.677784][ T9031] FAT-fs (loop6): Directory bread(block 72) failed [ 431.684637][ T9031] FAT-fs (loop6): Directory bread(block 73) failed [ 433.701003][ T9036] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 433.710154][ T9036] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 433.717980][ T9036] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 433.954457][ T9036] bond0: (slave bond_slave_0): Releasing backup interface [ 434.955822][ T9036] device bond_slave_0 left promiscuous mode [ 436.734603][ T9036] bond0: (slave bond_slave_1): Releasing backup interface [ 436.824791][ T9036] device bond_slave_1 left promiscuous mode [ 437.297190][ T9036] team0: Port device team_slave_0 removed [ 438.734005][ T9100] ODEBUG: Out of memory. ODEBUG disabled [ 438.879964][ T9036] team0: Port device team_slave_1 removed [ 438.910897][ T9036] bond0: (slave vxlan0): Releasing backup interface [ 438.927437][ T9036] device vxlan0 left promiscuous mode [ 438.968305][ T9036] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 438.977804][ T9036] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 438.986750][ T9036] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 438.995682][ T9036] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 439.030412][ T9036] team0: Port device macvlan3 removed [ 439.069919][ T9088] bridge0: port 1(vlan2) entered blocking state [ 439.083541][ T9107] loop6: detected capacity change from 0 to 1024 [ 439.087760][ T9088] bridge0: port 1(vlan2) entered disabled state [ 440.748339][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.937030][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 444.447777][ T9126] loop6: detected capacity change from 0 to 32768 [ 445.744462][ T9141] netlink: 'syz.1.1215': attribute type 9 has an invalid length. [ 447.543071][ T9168] loop2: detected capacity change from 0 to 512 [ 447.842812][ T9168] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 447.948357][ T9168] EXT4-fs (loop2): 1 truncate cleaned up [ 447.955137][ T9168] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 452.502545][ T9222] syz.2.1227 (9222): drop_caches: 2 [ 453.045768][ T9232] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1233'. [ 453.055993][ T9232] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1233'. [ 453.065260][ T9232] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1233'. [ 453.075087][ T9232] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1233'. [ 453.084142][ T9232] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1233'. [ 458.003219][ T9300] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 458.011505][ T9300] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 458.019870][ T9300] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 458.028328][ T9300] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 458.217051][ T9300] device vxlan0 entered promiscuous mode [ 458.254346][ T9300] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 458.276559][ T1130] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 458.286287][ T1130] bridge0: port 1(vlan2) entered blocking state [ 458.292606][ T1130] bridge0: port 1(vlan2) entered forwarding state [ 458.704313][ T9315] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1255'. [ 458.713462][ T9315] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1255'. [ 458.723962][ T9315] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1255'. [ 461.709904][ T9359] overlayfs: failed to clone upperpath [ 462.096742][ T9374] loop6: detected capacity change from 0 to 8192 [ 462.156427][ T9374] REISERFS (device loop6): found reiserfs format "3.5" with non-standard journal [ 462.182356][ T9374] REISERFS (device loop6): using ordered data mode [ 462.205462][ T9374] reiserfs: using flush barriers [ 462.226933][ T9374] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 462.348714][ T9374] REISERFS (device loop6): checking transaction log (loop6) [ 462.369501][ T9374] REISERFS (device loop6): Using r5 hash to sort names [ 462.385221][ T9374] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 463.881106][ T9413] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 463.892140][ T9413] FAT-fs (loop5): unable to read boot sector [ 465.773799][ T25] kauditd_printk_skb: 4 callbacks suppressed [ 465.780086][ T25] audit: type=1326 audit(1751081763.889:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9402 comm="syz.2.1277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0147017929 code=0x7ffc0000 [ 466.259366][ T25] audit: type=1326 audit(1751081763.899:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9402 comm="syz.2.1277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0147017929 code=0x7ffc0000 [ 466.298266][ T25] audit: type=1326 audit(1751081763.909:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9402 comm="syz.2.1277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0147017929 code=0x7ffc0000 [ 466.415892][ T25] audit: type=1326 audit(1751081763.909:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9402 comm="syz.2.1277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0147017929 code=0x7ffc0000 [ 466.445009][ T25] audit: type=1326 audit(1751081763.909:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9402 comm="syz.2.1277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0147017929 code=0x7ffc0000 [ 467.056065][ T25] audit: type=1326 audit(1751081763.909:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9402 comm="syz.2.1277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0147017929 code=0x7ffc0000 [ 467.260202][ T9429] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1279'. [ 467.342921][ T25] audit: type=1326 audit(1751081763.909:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9402 comm="syz.2.1277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0147017929 code=0x7ffc0000 [ 468.819385][ T25] audit: type=1326 audit(1751081763.909:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9402 comm="syz.2.1277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0147017929 code=0x7ffc0000 [ 469.014697][ T25] audit: type=1326 audit(1751081763.909:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9402 comm="syz.2.1277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f0147017929 code=0x7ffc0000 [ 469.037238][ T25] audit: type=1326 audit(1751081763.909:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9402 comm="syz.2.1277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0147017929 code=0x7ffc0000 [ 469.171161][ T9449] loop6: detected capacity change from 0 to 40427 [ 469.285489][ T9449] F2FS-fs (loop6): invalid crc value [ 469.736444][ T9449] F2FS-fs (loop6): Found nat_bits in checkpoint [ 469.791313][ T9449] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 470.816816][ T9437] lo speed is unknown, defaulting to 1000 [ 471.184790][ T9483] xt_NFQUEUE: number of total queues is 0 [ 472.550871][ T9497] MPTCP: kernel_bind error, err=-98 [ 472.874024][ T9506] loop6: detected capacity change from 0 to 512 [ 473.571887][ T9485] kvm [9482]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 473.578134][ T9506] EXT4-fs error (device loop6): ext4_init_orphan_info:586: comm syz.6.1300: inode #0: comm syz.6.1300: iget: illegal inode # [ 473.602544][ T9506] EXT4-fs (loop6): get orphan inode failed [ 473.609330][ T9506] EXT4-fs (loop6): mount failed [ 477.682685][ T9560] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 477.691706][ T9560] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 477.700482][ T9560] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 477.709394][ T9560] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 478.475723][ T9560] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 479.600836][ T9577] trusted_key: encrypted_key: key user:syz not found [ 482.687183][ T9623] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 482.810416][ T9623] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 486.792767][ T9665] loop6: detected capacity change from 0 to 512 [ 486.869849][ T9665] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 486.904744][ T9673] netlink: 'syz.4.1341': attribute type 10 has an invalid length. [ 486.918630][ T9673] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 486.995295][ T9678] overlayfs: failed to clone lowerpath [ 487.021085][ T9678] overlayfs: failed to clone upperpath [ 492.633800][ T4279] libceph: connect (1)[c::]:6789 error -13 [ 492.645648][ T4279] libceph: mon0 (1)[c::]:6789 connect error [ 493.318824][ T9760] ceph: No mds server is up or the cluster is laggy [ 493.730239][ T13] libceph: connect (1)[c::]:6789 error -13 [ 493.737452][ T13] libceph: mon0 (1)[c::]:6789 connect error [ 494.692040][ T9794] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1374'. [ 494.748141][ T9796] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1374'. [ 494.884654][ T9811] loop6: detected capacity change from 0 to 1024 [ 496.002466][ T9835] loop6: detected capacity change from 0 to 128 [ 496.045594][ T9835] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 496.169975][ T9835] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 499.575100][ T1272] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 500.380866][ T9892] loop6: detected capacity change from 0 to 2048 [ 500.464770][ T9892] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=3932051, location=3932051 [ 500.602640][ T9892] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 501.295139][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.295182][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.826412][ T9927] delete_channel: no stack [ 503.875275][ T9925] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1393'. [ 505.019438][ T9948] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 508.057046][ T9956] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 508.065840][ T9956] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 508.074703][ T9956] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 508.083435][ T9956] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 508.322505][ T9956] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 511.258452][ T9980] loop6: detected capacity change from 0 to 512 [ 511.277898][ T9980] EXT4-fs (loop6): Ignoring removed mblk_io_submit option [ 511.301781][ T9980] EXT4-fs (loop6): Ignoring removed bh option [ 511.354188][ T9980] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 513.268805][ T9980] EXT4-fs: failed to create workqueue [ 513.312981][ T9980] EXT4-fs (loop6): mount failed [ 518.426603][T10075] SET target dimension over the limit! [ 519.283836][T10097] loop6: detected capacity change from 0 to 512 [ 519.313841][T10097] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 519.454336][T10097] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c118, mo2=0002] [ 519.482447][T10097] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2228: inode #15: comm syz.6.1440: corrupted in-inode xattr [ 519.508875][T10097] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.1440: couldn't read orphan inode 15 (err -117) [ 519.521591][T10097] EXT4-fs (loop6): mounted filesystem without journal. Opts: jqfmt=vfsold,max_batch_time=0x0000000000000001,debug,noload,jqfmt=vfsv1,noblock_validity,init_itable=0x0000000000000601,max_dir_size_kb=0x0000000000000002,usrjquota=,,errors=continue. Quota mode: none. [ 525.081189][T10152] loop6: detected capacity change from 0 to 40427 [ 525.787712][T10152] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 525.795569][T10152] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 525.811112][T10152] F2FS-fs (loop6): invalid crc value [ 527.072485][T10152] F2FS-fs (loop6): Found nat_bits in checkpoint [ 531.031724][T10229] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 531.039462][T10229] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 531.046959][T10229] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 531.054614][T10229] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 531.062188][T10229] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 531.069917][T10229] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 531.080121][T10229] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 531.089071][T10229] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 531.097017][T10229] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 531.104732][T10229] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 531.123176][T10229] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 531.131140][T10229] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan2: link becomes ready [ 546.004958][T10394] loop2: detected capacity change from 0 to 16 [ 546.122356][T10394] erofs: (device loop2): mounted with root inode @ nid 36. [ 546.191630][T10394] attempt to access beyond end of device [ 546.191630][T10394] loop2: rw=0, want=24, limit=16 [ 547.092637][T10411] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 549.306910][T10420] gfs2: gfs2 mount does not exist [ 552.336331][T10438] loop2: detected capacity change from 0 to 4096 [ 558.334522][T10507] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 560.757199][T10523] xt_CT: You must specify a L4 protocol and not use inversions on it [ 562.306118][T10549] loop6: detected capacity change from 0 to 32768 [ 563.230916][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.237261][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.303643][T10549] XFS: ikeep mount option is deprecated. [ 563.339070][T10549] XFS (loop6): Mounting V5 Filesystem [ 563.555574][T10549] XFS (loop6): Ending clean mount [ 563.569988][T10549] XFS (loop6): Quotacheck needed: Please wait. [ 564.406321][T10574] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1559'. [ 567.516634][T10549] XFS (loop6): Quotacheck: Done. [ 567.556544][ T7079] XFS (loop6): Unmounting Filesystem [ 569.165602][T10613] 9pnet: Insufficient options for proto=fd [ 571.827833][T10638] netlink: 'syz.2.1582': attribute type 1 has an invalid length. [ 572.728715][T10638] 8021q: adding VLAN 0 to HW filter on device bond2 [ 572.909933][T10644] bond2: (slave vlan2): making interface the new active one [ 572.924775][T10644] bond2: (slave vlan2): Enslaving as an active interface with an up link [ 573.333585][ T6339] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 576.136875][T10682] loop6: detected capacity change from 0 to 2048 [ 576.301067][T10686] input: syz1 as /devices/virtual/input/input7 [ 576.331303][T10682] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 576.497677][T10682] EXT4-fs (loop6): Unrecognized mount option "" or missing value [ 580.317655][T10732] overlayfs: failed to resolve './file0': -2 [ 582.906721][T10765] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1610'. [ 584.394714][T10793] hub 6-0:1.0: USB hub found [ 584.400041][T10793] hub 6-0:1.0: 1 port detected [ 584.504819][T10792] netlink: 'syz.4.1618': attribute type 11 has an invalid length. [ 586.577590][T10812] ipt_REJECT: ECHOREPLY no longer supported. [ 591.301632][T10861] ipt_REJECT: ECHOREPLY no longer supported. [ 602.431401][T10920] loop6: detected capacity change from 0 to 256 [ 603.163111][T10920] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 603.240246][T10942] loop2: detected capacity change from 0 to 512 [ 603.281179][T10942] EXT4-fs (loop2): Unrecognized mount option "dont_hash" or missing value [ 606.620099][T10993] loop6: detected capacity change from 0 to 256 [ 607.854343][ C1] Unknown status report in ack skb [ 608.630393][T11008] loop2: detected capacity change from 0 to 8192 [ 612.989208][T11054] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1695'. [ 613.018445][T11054] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1695'. [ 615.952642][T11082] netlink: 'syz.4.1703': attribute type 1 has an invalid length. [ 617.819746][T11082] 8021q: adding VLAN 0 to HW filter on device bond5 [ 618.023842][T11091] bond5: (slave vlan0): making interface the new active one [ 618.066311][T11091] bond5: (slave vlan0): Enslaving as an active interface with an up link [ 619.816390][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bond5: link becomes ready [ 623.256916][T11148] loop6: detected capacity change from 0 to 256 [ 624.299052][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.305432][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.582626][T11148] exfat: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ0xffffffffffffffffÿÿÿÿ' [ 628.630276][T11199] loop6: detected capacity change from 0 to 256 [ 629.755616][T11199] FAT-fs (loop6): Directory bread(block 64) failed [ 629.762211][T11199] FAT-fs (loop6): Directory bread(block 65) failed [ 629.768836][T11199] FAT-fs (loop6): Directory bread(block 66) failed [ 629.775462][T11199] FAT-fs (loop6): Directory bread(block 67) failed [ 629.782000][T11199] FAT-fs (loop6): Directory bread(block 68) failed [ 629.788557][T11199] FAT-fs (loop6): Directory bread(block 69) failed [ 629.795123][T11199] FAT-fs (loop6): Directory bread(block 70) failed [ 629.801618][T11199] FAT-fs (loop6): Directory bread(block 71) failed [ 629.808220][T11199] FAT-fs (loop6): Directory bread(block 72) failed [ 629.814770][T11199] FAT-fs (loop6): Directory bread(block 73) failed [ 631.029261][T11243] loop2: detected capacity change from 0 to 1024 [ 632.340883][T11242] hfsplus: bad catalog entry type [ 634.617320][T11276] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1754'. [ 639.840040][T11316] loop6: detected capacity change from 0 to 2048 [ 640.779757][T11316] Alternate GPT is invalid, using primary GPT. [ 640.786714][T11316] loop6: p1 p2 p3 [ 640.847458][T11299] hugetlbfs: syz.4.1763 (11299): Using mlock ulimits for SHM_HUGETLB is deprecated [ 643.886167][ T8960] udevd[8960]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 643.906021][ T8888] udevd[8888]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 644.382189][T11342] udevd[11342]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 644.537710][T11354] loop6: detected capacity change from 0 to 256 [ 644.639058][T11354] FAT-fs (loop6): Directory bread(block 64) failed [ 644.645864][T11354] FAT-fs (loop6): Directory bread(block 65) failed [ 644.652453][T11354] FAT-fs (loop6): Directory bread(block 66) failed [ 644.659122][T11354] FAT-fs (loop6): Directory bread(block 67) failed [ 644.666006][T11354] FAT-fs (loop6): Directory bread(block 68) failed [ 644.672501][T11354] FAT-fs (loop6): Directory bread(block 69) failed [ 644.679046][T11354] FAT-fs (loop6): Directory bread(block 70) failed [ 644.685574][T11354] FAT-fs (loop6): Directory bread(block 71) failed [ 644.692121][T11354] FAT-fs (loop6): Directory bread(block 72) failed [ 644.698766][T11354] FAT-fs (loop6): Directory bread(block 73) failed [ 648.418230][T11377] overlayfs: failed to clone upperpath [ 650.969261][T11416] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 650.980526][T11416] FAT-fs (loop9): unable to read boot sector [ 651.444697][ T25] kauditd_printk_skb: 4 callbacks suppressed [ 651.451105][ T25] audit: type=1326 audit(1751081950.990:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11404 comm="syz.4.1795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ad828e929 code=0x7ffc0000 [ 651.620409][T11414] loop2: detected capacity change from 0 to 512 [ 651.739823][ T25] audit: type=1326 audit(1751081951.000:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11404 comm="syz.4.1795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ad828e929 code=0x7ffc0000 [ 651.768939][ T25] audit: type=1326 audit(1751081951.000:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11404 comm="syz.4.1795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0ad828e929 code=0x7ffc0000 [ 652.433276][ T25] audit: type=1326 audit(1751081951.000:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11404 comm="syz.4.1795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ad828e929 code=0x7ffc0000 [ 652.437800][T11414] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 652.472818][T11414] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 652.478495][ T25] audit: type=1326 audit(1751081951.000:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11404 comm="syz.4.1795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ad828e929 code=0x7ffc0000 [ 652.589503][ T25] audit: type=1326 audit(1751081951.000:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11404 comm="syz.4.1795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0ad828e929 code=0x7ffc0000 [ 652.612193][T11414] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 652.620812][ T25] audit: type=1326 audit(1751081951.000:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11404 comm="syz.4.1795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ad828e929 code=0x7ffc0000 [ 652.658487][T11414] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c11c, mo2=0002] [ 652.672863][T11414] System zones: 1-12 [ 652.852854][ T25] audit: type=1326 audit(1751081951.000:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11404 comm="syz.4.1795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ad828e929 code=0x7ffc0000 [ 652.883072][ T25] audit: type=1326 audit(1751081951.000:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11404 comm="syz.4.1795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f0ad828e929 code=0x7ffc0000 [ 652.884193][T11414] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2228: inode #15: comm syz.2.1798: corrupted in-inode xattr [ 653.321284][T11414] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.1798: couldn't read orphan inode 15 (err -117) [ 653.368217][ T25] audit: type=1326 audit(1751081951.000:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11404 comm="syz.4.1795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ad828e929 code=0x7ffc0000 [ 653.398870][T11414] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,grpid,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000009,debug,usrjquota=,nolazytime,mblk_io_submit,,errors=continue. Quota mode: none. [ 653.659793][T11448] loop6: detected capacity change from 0 to 32768 [ 669.692922][T11634] lo speed is unknown, defaulting to 1000 [ 669.699647][T11634] wlan0 speed is unknown, defaulting to 1000 [ 669.735912][T11633] overlayfs: failed to resolve './file1': -2 [ 675.413598][T11703] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1874'. [ 679.582791][T11753] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1888'. [ 686.323388][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.329709][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 688.056038][T11845] SET target dimension over the limit! [ 717.441383][T12349] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2076'. [ 718.125104][T12362] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2083'. [ 723.525121][T12456] overlayfs: failed to clone upperpath [ 729.123889][T12558] loop2: detected capacity change from 0 to 256 [ 732.869057][T12605] loop2: detected capacity change from 0 to 1024 [ 733.059368][T12605] EXT4-fs (loop2): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 733.078584][T12605] EXT4-fs (loop2): Cannot use DAX on a filesystem that may contain inline data [ 738.572680][ T4183] Bluetooth: hci0: unexpected event for opcode 0x203d [ 743.362153][T12755] loop2: detected capacity change from 0 to 128 [ 747.026027][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.032390][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.501602][T12804] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 747.513435][T12804] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 754.885333][T12908] ubi31: attaching mtd0 [ 754.921684][T12908] ubi31: scanning is finished [ 754.926548][T12908] ubi31: empty MTD device detected [ 755.367654][T12908] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 755.375514][T12908] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 755.382918][T12908] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 755.390155][T12908] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 755.397723][T12908] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 755.404600][T12908] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 755.412730][T12908] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3546746451 [ 755.422888][T12908] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 755.435074][T12909] ubi31: background thread "ubi_bgt31d" started, PID 12909 [ 764.515931][T13051] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2299'. [ 766.562747][T13092] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2310'. [ 766.679311][T13095] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2311'. [ 769.146259][T13128] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2322'. [ 771.774953][T13167] loop6: detected capacity change from 0 to 128 [ 771.824124][T13167] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 771.907383][T13169] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2335'. [ 773.468126][T13198] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2346'. [ 776.663893][T13233] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2357'. [ 777.405041][T13250] loop6: detected capacity change from 0 to 4096 [ 777.487101][T13250] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 778.846187][T13267] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2368'. [ 778.938401][T13267] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2368'. [ 780.677068][T13296] loop2: detected capacity change from 0 to 128 [ 781.340176][T13296] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 781.447686][T13306] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2383'. [ 781.485834][T13306] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2383'. [ 888.602586][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 888.609216][ C0] rcu: 0-...!: (10499 ticks this GP) idle=e5f/1/0x4000000000000000 softirq=31654/31663 fqs=3 [ 888.621366][ C0] (t=10500 jiffies g=37205 q=232) [ 888.626483][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10492 jiffies! g37205 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 888.638797][ C0] rcu: Possible timer handling issue on cpu=1 timer-softirq=31495 [ 888.646672][ C0] rcu: rcu_preempt kthread starved for 10493 jiffies! g37205 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 888.658043][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 888.668000][ C0] rcu: RCU grace-period kthread stack dump: [ 888.673872][ C0] task:rcu_preempt state:I stack:27464 pid: 15 ppid: 2 flags:0x00004000 [ 888.683086][ C0] Call Trace: [ 888.686358][ C0] [ 888.689285][ C0] __schedule+0x11b8/0x43b0 [ 888.693793][ C0] ? _raw_spin_lock_irqsave+0x7f/0xf0 [ 888.699166][ C0] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 888.705053][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 888.710939][ C0] ? _raw_spin_unlock+0x40/0x40 [ 888.715783][ C0] ? rcu_is_watching+0x11/0xa0 [ 888.720536][ C0] ? release_firmware_map_entry+0x190/0x190 [ 888.726433][ C0] schedule+0x11b/0x1e0 [ 888.730581][ C0] schedule_timeout+0x15c/0x280 [ 888.735432][ C0] ? console_conditional_schedule+0x40/0x40 [ 888.741315][ C0] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 888.747201][ C0] ? update_process_times+0x200/0x200 [ 888.752659][ C0] ? prepare_to_swait_event+0x331/0x350 [ 888.758202][ C0] rcu_gp_fqs_loop+0x29e/0x11b0 [ 888.763047][ C0] ? preempt_schedule_thunk+0x16/0x18 [ 888.768425][ C0] ? dyntick_save_progress_counter+0x230/0x230 [ 888.774577][ C0] ? rcu_gp_init+0x10e0/0x10e0 [ 888.779341][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 888.784538][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 888.789734][ C0] rcu_gp_kthread+0x98/0x350 [ 888.794322][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 888.799426][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 888.805313][ C0] ? __kthread_parkme+0x157/0x1b0 [ 888.810364][ C0] kthread+0x436/0x520 [ 888.814423][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 888.819526][ C0] ? kthread_blkcg+0xd0/0xd0 [ 888.824110][ C0] ret_from_fork+0x1f/0x30 [ 888.828544][ C0] [ 888.831562][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 888.837874][ C0] Sending NMI from CPU 0 to CPUs 1: [ 888.843082][ C1] NMI backtrace for cpu 1 [ 888.843092][ C1] CPU: 1 PID: 13351 Comm: syz.1.2397 Not tainted 5.15.186-syzkaller #0 [ 888.843106][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 888.843119][ C1] RIP: 0010:kasan_check_range+0x10/0x290 [ 888.843139][ C1] Code: b8 ea ff ff ff c3 0f 0b b8 ea ff ff ff c3 00 00 cc cc 00 00 cc cc 00 00 cc cc b0 01 48 85 f6 0f 84 a4 01 00 00 41 57 41 56 53 <49> 89 f8 49 01 f0 0f 82 57 02 00 00 49 89 f8 49 c1 e8 2f 41 81 f8 [ 888.843150][ C1] RSP: 0018:ffffc90000dd08a0 EFLAGS: 00000002 [ 888.843163][ C1] RAX: 0000000000000001 RBX: 0000000000000015 RCX: ffffffff815bfd89 [ 888.843172][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff8ff9b0c0 [ 888.843181][ C1] RBP: ffffc90000dd0b10 R08: dffffc0000000000 R09: fffffbfff1ff3619 [ 888.843191][ C1] R10: fffffbfff1ff3619 R11: 1ffffffff1ff3618 R12: 000000009be2421a [ 888.843201][ C1] R13: ffff88801dd53b80 R14: 0000000050ef4013 R15: ffff88801dd546e0 [ 888.843211][ C1] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 888.843223][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 888.843233][ C1] CR2: 0000000000000000 CR3: 0000000052f31000 CR4: 00000000003506e0 [ 888.843245][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 888.843253][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 888.843262][ C1] Call Trace: [ 888.843266][ C1] [ 888.843273][ C1] __lock_acquire+0x12d9/0x7c60 [ 888.843296][ C1] ? try_to_wake_up+0x69d/0x1050 [ 888.843312][ C1] ? verify_lock_unused+0x140/0x140 [ 888.843326][ C1] ? verify_lock_unused+0x140/0x140 [ 888.843351][ C1] ? __queue_work+0x9e2/0xd50 [ 888.843362][ C1] ? trace_sched_wakeup+0x37/0xe0 [ 888.843377][ C1] lock_acquire+0x197/0x3f0 [ 888.843390][ C1] ? rcu_lock_acquire+0x5/0x30 [ 888.843410][ C1] ? read_lock_is_recursive+0x10/0x10 [ 888.843424][ C1] ? do_raw_spin_lock+0x11d/0x280 [ 888.843437][ C1] ? __rwlock_init+0x140/0x140 [ 888.843450][ C1] ? do_raw_spin_unlock+0x11d/0x230 [ 888.843463][ C1] rcu_lock_acquire+0x2a/0x30 [ 888.843477][ C1] ? rcu_lock_acquire+0x5/0x30 [ 888.843491][ C1] advance_sched+0x6ca/0x940 [ 888.843509][ C1] __hrtimer_run_queues+0x53d/0xc40 [ 888.843527][ C1] ? taprio_free_sched_cb+0x190/0x190 [ 888.843545][ C1] ? hrtimer_interrupt+0x8d0/0x8d0 [ 888.843559][ C1] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 888.843575][ C1] hrtimer_interrupt+0x3bb/0x8d0 [ 888.843597][ C1] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 888.843611][ C1] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 888.843627][ C1] [ 888.843631][ C1] [ 888.843636][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 888.843650][ C1] RIP: 0010:__sanitizer_cov_trace_const_cmp1+0xc/0x80 [ 888.843665][ C1] Code: 00 00 00 4a 89 7c 02 10 4a 89 74 02 18 4a 89 44 02 20 48 ff c1 48 89 0a c3 0f 1f 44 00 00 48 8b 04 24 65 48 8b 0d 44 aa 8a 7e <65> 8b 15 45 aa 8a 7e 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 [ 888.843676][ C1] RSP: 0018:ffffc900034bf500 EFLAGS: 00000213 [ 888.843687][ C1] RAX: ffffffff81b12ff0 RBX: 0000000000000000 RCX: ffff88801dd53b80 [ 888.843696][ C1] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000002 [ 888.843704][ C1] RBP: 0000000000000000 R08: dffffc0000000000 R09: fffff940003314b7 [ 888.843713][ C1] R10: fffff940003314b7 R11: 1ffffd40003314b6 R12: ffffea000198a588 [ 888.843723][ C1] R13: ffffea000198a580 R14: dffffc0000000000 R15: ffffea000198a598 [ 888.843736][ C1] ? page_remove_rmap+0x660/0x10f0 [ 888.843753][ C1] page_remove_rmap+0x660/0x10f0 [ 888.843768][ C1] unmap_page_range+0xfbc/0x2520 [ 888.843787][ C1] ? uprobe_munmap+0x165/0x3f0 [ 888.843806][ C1] unmap_vmas+0x11b/0x230 [ 888.843818][ C1] ? uprobe_clear_state+0x4f/0x460 [ 888.843831][ C1] ? unmap_page_range+0x2520/0x2520 [ 888.843843][ C1] ? __mutex_lock_common+0x431/0x2390 [ 888.843858][ C1] ? exit_mm_release+0x16/0x30 [ 888.843872][ C1] ? memset+0x1e/0x40 [ 888.843885][ C1] exit_mmap+0x38f/0x5f0 [ 888.843901][ C1] ? vm_brk+0x20/0x20 [ 888.843919][ C1] ? uprobe_clear_state+0x2f6/0x460 [ 888.843932][ C1] ? mm_update_next_owner+0x522/0x640 [ 888.843948][ C1] __mmput+0x115/0x3b0 [ 888.843960][ C1] exit_mm+0x567/0x6c0 [ 888.843974][ C1] ? xacct_add_tsk+0x4b0/0x4b0 [ 888.843989][ C1] ? do_exit+0x20a0/0x20a0 [ 888.844003][ C1] ? taskstats_exit+0x439/0xab0 [ 888.844017][ C1] ? tty_audit_exit+0x14e/0x1f0 [ 888.844034][ C1] do_exit+0x5a1/0x20a0 [ 888.844050][ C1] ? put_task_struct+0x80/0x80 [ 888.844064][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 888.844080][ C1] ? lock_chain_count+0x20/0x20 [ 888.844094][ C1] ? _raw_spin_lock_irq+0xab/0xe0 [ 888.844109][ C1] do_group_exit+0x12e/0x300 [ 888.844123][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 888.844137][ C1] get_signal+0x6ca/0x12c0 [ 888.844156][ C1] arch_do_signal_or_restart+0xc1/0x1300 [ 888.844177][ C1] ? futex_exit_release+0x1c0/0x1c0 [ 888.844192][ C1] ? get_sigframe_size+0x10/0x10 [ 888.844212][ C1] ? exit_to_user_mode_loop+0x3b/0x130 [ 888.844229][ C1] exit_to_user_mode_loop+0x9e/0x130 [ 888.844244][ C1] exit_to_user_mode_prepare+0xb1/0x140 [ 888.844259][ C1] syscall_exit_to_user_mode+0x16/0x40 [ 888.844274][ C1] do_syscall_64+0x58/0xa0 [ 888.844286][ C1] ? clear_bhb_loop+0x30/0x80 [ 888.844299][ C1] ? clear_bhb_loop+0x30/0x80 [ 888.844311][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 888.844324][ C1] RIP: 0033:0x7f1695699929 [ 888.844340][ C1] Code: Unable to access opcode bytes at RIP 0x7f16956998ff. [ 888.844347][ C1] RSP: 002b:00007f16935010e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 888.844360][ C1] RAX: 0000000000000001 RBX: 00007f16958c0fa8 RCX: 00007f1695699929 [ 888.844369][ C1] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f16958c0fac [ 888.844379][ C1] RBP: 00007f16958c0fa0 R08: 0025103b34310df6 R09: 0000000000000000 [ 888.844388][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f16958c0fac [ 888.844396][ C1] R13: 0000000000000000 R14: 00007ffd138a7220 R15: 00007ffd138a7308 [ 888.844410][ C1] [ 888.845108][ C0] NMI backtrace for cpu 0 [ 889.436336][ C0] CPU: 0 PID: 13344 Comm: syz.6.2393 Not tainted 5.15.186-syzkaller #0 [ 889.444582][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 889.454635][ C0] Call Trace: [ 889.457911][ C0] [ 889.460750][ C0] dump_stack_lvl+0x168/0x230 [ 889.465428][ C0] ? show_regs_print_info+0x20/0x20 [ 889.470618][ C0] ? load_image+0x3b0/0x3b0 [ 889.475114][ C0] ? try_to_wake_up+0x69d/0x1050 [ 889.480056][ C0] nmi_cpu_backtrace+0x397/0x3d0 [ 889.484997][ C0] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 889.491159][ C0] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 889.496532][ C0] ? _raw_spin_lock+0x40/0x40 [ 889.501214][ C0] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 889.507279][ C0] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 889.513267][ C0] rcu_dump_cpu_stacks+0x22f/0x380 [ 889.518376][ C0] print_cpu_stall+0x31d/0x5f0 [ 889.523136][ C0] rcu_sched_clock_irq+0x6d8/0x1110 [ 889.528335][ C0] ? rcutree_dead_cpu+0x20/0x20 [ 889.533182][ C0] ? account_process_tick+0x227/0x3a0 [ 889.538557][ C0] update_process_times+0x193/0x200 [ 889.543843][ C0] tick_sched_timer+0x37d/0x560 [ 889.548694][ C0] __hrtimer_run_queues+0x4fe/0xc40 [ 889.553893][ C0] ? tick_setup_sched_timer+0x2c0/0x2c0 [ 889.559439][ C0] ? hrtimer_interrupt+0x8d0/0x8d0 [ 889.564548][ C0] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 889.570621][ C0] hrtimer_interrupt+0x3bb/0x8d0 [ 889.575672][ C0] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 889.581645][ C0] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 889.587276][ C0] [ 889.590197][ C0] [ 889.593118][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 889.599104][ C0] RIP: 0010:smp_call_function_many_cond+0xb88/0xd70 [ 889.605687][ C0] Code: b6 44 05 00 84 c0 0f 85 9d 00 00 00 41 8b 1c 24 89 de 83 e6 01 31 ff e8 a6 55 0b 00 83 e3 01 75 07 e8 3c 52 0b 00 eb 43 f3 90 <48> b8 00 00 00 00 00 fc ff df 41 0f b6 44 05 00 84 c0 75 11 41 f7 [ 889.625285][ C0] RSP: 0018:ffffc9000305f660 EFLAGS: 00000293 [ 889.631345][ C0] RAX: ffffffff816c70fb RBX: 0000000000000001 RCX: ffff888077100000 [ 889.639311][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 889.647270][ C0] RBP: ffffc9000305f7a0 R08: dffffc0000000000 R09: fffffbfff1ff3619 [ 889.655234][ C0] R10: fffffbfff1ff3619 R11: 1ffffffff1ff3618 R12: ffff8880b9140588 [ 889.663200][ C0] R13: 1ffff110172280b1 R14: ffff8880b903b380 R15: 0000000000000001 [ 889.671172][ C0] ? smp_call_function_many_cond+0xbab/0xd70 [ 889.677159][ C0] ? text_poke_sync+0x20/0x20 [ 889.681836][ C0] ? smp_call_function_many+0x30/0x30 [ 889.687202][ C0] ? kcm_parse_func_strparser+0x55/0x160 [ 889.692847][ C0] ? text_poke+0x90/0x90 [ 889.697087][ C0] ? arch_jump_label_transform_apply+0xe/0x20 [ 889.703156][ C0] ? text_poke_sync+0x20/0x20 [ 889.707827][ C0] on_each_cpu_cond_mask+0x3b/0x80 [ 889.712932][ C0] ? kcm_parse_func_strparser+0x55/0x160 [ 889.718564][ C0] text_poke_bp_batch+0x2a9/0x7c0 [ 889.723582][ C0] ? mutex_unlock+0x10/0x10 [ 889.728086][ C0] ? text_poke_loc_init+0x570/0x570 [ 889.733284][ C0] ? arch_jump_label_transform_queue+0x76/0xd0 [ 889.739520][ C0] ? __jump_label_update+0x36c/0x390 [ 889.744807][ C0] ? bpf_perf_link_dealloc+0x20/0x20 [ 889.750088][ C0] text_poke_finish+0x16/0x30 [ 889.754761][ C0] arch_jump_label_transform_apply+0x13/0x20 [ 889.760736][ C0] __static_key_slow_dec_cpuslocked+0xf0/0x150 [ 889.766989][ C0] ? bpf_perf_link_dealloc+0x20/0x20 [ 889.772268][ C0] static_key_slow_dec+0x41/0x90 [ 889.777200][ C0] bpf_stats_release+0x1f/0x30 [ 889.781959][ C0] __fput+0x234/0x930 [ 889.785945][ C0] task_work_run+0x125/0x1a0 [ 889.790541][ C0] do_exit+0x61e/0x20a0 [ 889.794699][ C0] ? put_task_struct+0x80/0x80 [ 889.799460][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 889.805437][ C0] ? lock_chain_count+0x20/0x20 [ 889.810282][ C0] ? _raw_spin_lock_irq+0xab/0xe0 [ 889.815308][ C0] do_group_exit+0x12e/0x300 [ 889.819894][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 889.825090][ C0] get_signal+0x6ca/0x12c0 [ 889.829517][ C0] arch_do_signal_or_restart+0xc1/0x1300 [ 889.835152][ C0] ? __sys_recvmmsg+0x280/0x280 [ 889.840006][ C0] ? get_sigframe_size+0x10/0x10 [ 889.844953][ C0] ? __x64_sys_recvmmsg+0x18d/0x240 [ 889.850144][ C0] ? exit_to_user_mode_loop+0x3b/0x130 [ 889.855600][ C0] exit_to_user_mode_loop+0x9e/0x130 [ 889.860881][ C0] exit_to_user_mode_prepare+0xb1/0x140 [ 889.866424][ C0] syscall_exit_to_user_mode+0x16/0x40 [ 889.871883][ C0] do_syscall_64+0x58/0xa0 [ 889.876293][ C0] ? clear_bhb_loop+0x30/0x80 [ 889.880960][ C0] ? clear_bhb_loop+0x30/0x80 [ 889.885633][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 889.891517][ C0] RIP: 0033:0x7fd2cf89c929 [ 889.895930][ C0] Code: Unable to access opcode bytes at RIP 0x7fd2cf89c8ff. [ 889.903279][ C0] RSP: 002b:00007fd2cd6e3038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 889.911690][ C0] RAX: 0000000000010106 RBX: 00007fd2cfac4080 RCX: 00007fd2cf89c929 [ 889.919654][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000004 [ 889.927617][ C0] RBP: 00007fd2cf91eb39 R08: 0000000000000000 R09: 0000000000000000 [ 889.935577][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 889.943540][ C0] R13: 0000000000000001 R14: 00007fd2cfac4080 R15: 00007ffeb73dfc88 [ 889.951518][ C0]