last executing test programs: 7m18.262385061s ago: executing program 0 (id=4972): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r2, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40040) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) openat2$dir(0xffffff9c, &(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000140)={0x40, 0x110, 0x2}, 0x18) 7m18.089543808s ago: executing program 0 (id=4976): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, 0x0, &(0x7f00000007c0)) 7m17.7711487s ago: executing program 0 (id=4980): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r2, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40040) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x400e, &(0x7f0000000640), 0x1, 0x451, &(0x7f00000001c0)="$eJzs28tvG0UYAPBv7SQlfZBQlUcfQKAgyitp0lJ64AICiQNISHAox5CkVanboCZItKqgRagcUSVOvSAuSEj8BZzggoATEle4I6QK5dLCyWhtb2O7thOnjhfq30/adGZ30vk+7449uxMHMLAm0h9JxPaI+C0ixqrVxgYT1X9urFyY+3vlwlwS5fKbfyWVdtdXLsxlTbPf25ZVhiIKnySxt0W/S+fOn5otlRbO1upTy6ffm1o6d/7Zk6dnTyycWDgzc/To4UPTzx+Zea4neaZ5Xd/z4eK+3a++feX1uWNX3vnpmyTLvymPHpnodPDxcrnH3eVrR105GcoxELpSrA7TGK6M/7EoxurJG4tXPs41OGBTlcvl8n3tD18sA3ewJPKOAMhH9kGf3v9mW5+mHv8J116s3gCled+obdUjQ1GotRluur/tpYmIOHbxny/SLTbnOQQAQIPv0vnPM63mf4Wofy50d20NZTwi7omInRFxJCJ2RcS9EZW290fEA13237xIcuv8pzC8ocTWKZ3/vVBb22qc/2Wzvxgv1mo7KvkPJ8dPlhYO1l6TAzG8Ja1Pd+jj+5d//azdsfr5X7ql/WdzwUvVOP4c2tL4O/Ozy7O3m3fm2qWIPUOt8k9urgQkEbE7IvZssI+TT329r92xTvmvqQfrTOUvI56onv+L0ZR/Jum8Pjl1V5QWDk5lV8Wtfv7l8hvt+r+t/HsgPf9bW17/N/MfT+rXa5e6+d+vPpn+vPz7p23vadbOv/X1P5K81bDvg9nl5bPTESPJa9Wg6/fPNLWbWW2f5n9gf+vxvzNWX4m9EZFexA9GxEMR8XAt9kci4tGI2N/hVfjxpcfe3Xj+myvNf76r879aGInmPa0LxVM/fNvQ6Xg3+afn/3CldKC2Zz3vf+uJq9urGQAAAP6vChGxPZLC5M1yoTA5Wf0b/l2xtVBaXFp++vji+2fmq98RGI/hQvaka6zueeh07bY+q8801Q/Vnht/Xhyt1CfnFkvzeScPA25bm/Gf+qOYtbqaY4TApvJ9LRhcxj8MLuMfBtZXC3lHAORkZbTF5/9oHpEA/ddq/v9RDnEA/dc0/ot5xQH0n+d/MLg2Mv69Z8CdoeNYHulfHEBfLY3G2l+SVxigwmjEui6JKOQeqsImFvJ+ZwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiNfwMAAP//0YXoCg==") 7m15.561494312s ago: executing program 0 (id=5005): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x12c5008, 0x0) mount$bind(0x0, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x80000, 0x0) 7m14.337723755s ago: executing program 0 (id=5021): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="340000001d00210000000000000000000700000005000000090000000a0002"], 0x34}, 0x1, 0x0, 0x0, 0x24040090}, 0x20000000) 7m13.226052916s ago: executing program 0 (id=5024): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) write(r3, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000005c0)={'sit0\x00', 0x0}) 7m13.027383116s ago: executing program 32 (id=5024): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) write(r3, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000005c0)={'sit0\x00', 0x0}) 1m23.065462793s ago: executing program 5 (id=11147): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_clone(0xa5102000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m22.866195293s ago: executing program 5 (id=11151): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r4, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_clone3(&(0x7f0000000380)={0x200000000, 0x0, 0x0, 0x0, {0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58) 1m22.522399077s ago: executing program 5 (id=11161): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setuid(0xee00) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="b700000012edfffebfa30000000000000703000028feffff620af0fff8ffffff61a4f0ff000000001d040000000000007f000000000000005504000001ed0a002500000017ffffffdd40000000000000730a00fe000000007704000000000000c6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be361917adef6ee1c8a2b4f8ef1e50b91f32050e436fe275daf51efd601b6482a0800000098efefb202ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff0c710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9ec21ead2ed51b104d4d91af25b8123deda8a3658d42ecbf1dbf6d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800d9b3a69b37caa964e4b7000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040bef29b66e3858d051c096e37c4f46010400000000c3da29faf75ddd1aa96960bca97af13382cb881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f13792292cb949b3aab06b1e042ff2164d80c605532b18ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fcd7071b53ac29df826f8ae6d6e18c1eacf5bf870768d5217e9bb5a05d9e22ce67f1231bd236486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee63300000000000000000000000000000000000040000000000000000386000000b854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325a904514d8e90131bfc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885769754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8269b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8288e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347932a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd23834a50d7eb8e327fb5db12cbd6a9efe8e671c4f251fe3bf440cabdfe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb6c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa2c910fb8de24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f49e4dcc1b7af0b51b9cafeda067b6bbf3aa4371f5e76ab3f60afea80bb066aafb7517f787b090f419a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f8089322d84ac523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe91c921ac1476027772c87d1767e38ba49e3e57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c828c02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007f00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d05d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cfe56557a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b530500d8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2ccb1decb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400098abb860600911480a876fbba698801937e8b4264eb6f5137bd9b075f1488d22230592a79000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b30e55ac1275e938706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3ae49f88c462aa2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783fefb0a5ef0b41e14a6fe6ba306206670b84894e901a523fcbadfeff0492df6b53002514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9f0284405e3127dde7e41285fbe0bdd37220e316f2297743dd4731614a50c16c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd6d6ab7e0e843591d2618e2d2cdc7081c8fafffe9c350a5c554a387de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa250bc93b233a2291b5b10eebc49b6882f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119dcf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8a9d3374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753446de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000010000009231feef3117197c7963c2ba910969f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a9201bc4b73b431df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21d24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a4ee271e35ed9eed636338f1835fc957729d63dc1bfc7b772cbe536c2d3aff27c22f9a2f876512616a5bdaf22a16e19d1b5f52abb40b433983d0cf50234de659c1a397ce901000000caae1bcfdce33dae6adc260321702f239c25ab181390e7dc8c1e5b1cf3b4fef1cd5c44a89b5e5d8314e02f4673ded90bce9a4025b0232eec970f7aa17f175a14e8dc8de9bac0006b98a8283eee5665f3aede28228e0468db"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) 1m21.467560303s ago: executing program 5 (id=11170): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x40, 0x20}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000006c0), r0) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fcdbdf251800000018000180140002"], 0x2c}}, 0x4040) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x13, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x4000, &(0x7f0000000580)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000102,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000011,fileset=00000000000000000011,uid=', @ANYBLOB="d6d84c0df937ed4a0cd30000f2e9ea9568eab74a46c525dc386983eade0b0ce5f1dd911706cf7d32d7d508d1823b8871e001000000eb4ce0a008f5cdea622fc6675e5486860a752ed0298a948efa72b2c8d8525181644a3124f3544a50f192b98f055ad125fd4674534413c6044136ea5aefac5267e43739626ea9391d8f346c4694f70400000000000000cee1f628d1cec3462830606bb612bfed91181cdc107bb91a2e86de2ad5", @ANYBLOB="2c000100000000000030303030003030303030303030303030303030352c00d745dcab34ff634099d402406184d688f81f99d01ce1164bfd68777e4bdfe2e9fae18a6c91c70bc34f974b265a58d1889c9c38e7e32895b1921f8e4b4b41f3ef0debac34b19aa687221a6b942eb396159ef6de9645e4b33865d6b62e564277ed35923544b6379822861ec79f423c1b0372e2b26bdba81fcea8c4d1eb657869c87c4d7cf2b187c387d632e58f44956d2d7b16ba93153514087b38676f72cab9f62f53f331bb7f952ef5ab05e9403afa22e65743c583ba30683ac5e30173cdb5c216d879ead8b3ee56d602a39e33c63ba2754ccfe231c2e1b660f2a68cc14a9186ee2e834be5f10b09"], 0x12, 0xc49, &(0x7f0000001cc0)="$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") syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}, {@jqfmt_vfsold}]}, 0x4, 0x4fc, &(0x7f0000000fc0)="$eJzs3b9vW1sdAPDvdeImL8996YM3AAJeeRQKqur8aBtVZaBdQKiqhKiYGNqQuFEUu47ipDShQzqyI1GJCf4ENgakTgxsbLCxlAGpQAVqkBiM7vVt6iZxYl5+uLU/H+nm3nOu4+85ds85vqe5PgEMrLMRsRkRpyLibkSM5/lJvsX11pY+7uWLR3NbLx7NJdFs3v5Hkp1P86Ltd1Lv5885GhE/+G7Ej5PdcRvrG0uz1WplJU9PrNaWJxrrGxcXC3nO9MzUzOTVS1emj6yuH9d+8/w7izd/+LvffunZHze/+dO0WKWfnc7OtdfjKLWqXoxSW95wRNw8jmA9Mpz/++Hdk7a2z0TEJ1n7H4+h7N0EAPpZszkezfH2NADQ79Lr/1IkhXI+F1CKQqFcbs3hfRRjhWq9sXphvL52fz6yOawzUSzcW6xWJvO5wjNRTNL0VHb8Oj0dm2+kL0XEhxHx85H3snR5rl6d7+UHHwAYYO/vGP//PdIa/wGAPjfa6wIAACfO+A8Ag8f4DwCD5/8Y/90dCAB9wvU/AAwe4z8ADJ4Dx//HJ1MOAOBEfP/WrXRrbuXffz3/YH3tW6UHF+crjaVybW2uPFdfWS4v1OsL1Up5rtnMf63j1z1X6/Xlqcvbycb6xp1afe3+6p3F2uxC5U6leAJ1AgD29+HHT/+cRMTmtfeyLdoGd2M19LdCrwsA9MxQrwsA9Iz7eWBwdXGNbxoA+tweS/S+oeOfCD2x+Cu8q85/3vw/DKpu5//dIgT959PN/3/7yMsBnDzz/zC4ms3Emv8AMGDM8QOH+v9/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGFClbEsK5Wwt8M30Z6FcjjgdEWeimNxbrFYmI+KDiPjTSHEkTU/1utAAwCEV/pbk63+dHz9X2nn2VPKfkWwfET/55e1fPJxdXV2ZSvP/uZ2/+iTPnz7ViwoAAO2u785qjdP5vu1C/uWLR3OvtpMs4vMbrcVF07hb+dY6MxzD2X40ihEx9q8kT7ekn1eGjiD+5uOI+Nzr+j9si1DK5kBaK5/ujJ/GPn0M8V+//jvjF96IX8jOpfti9lp89gjKAoPm6Y1WP5m3vbSJ5e2vEGez/d7tfzTroQ7vVf+3tav/K2z3f0O74idZmz+7nd6/JM8v//57uzKb461zjyO+MLxX/GQ7ftKh/z3XZR3/8sUvf9LpXPNXEedj7/gttaybnVitLU801jcuLtZmFyoLlfvT0zNTM5NXL12ZnsjmqFs//7BXjL9fu/BBp/hp/cc6xB89oP5f67L+v/7v3R99ZZ/43/jq3u//R/vET8fEr3cZf3bsesflu9P48x3qf9D7f6HL+M/+ujHf5UMBgBPQWN9Ymq1WKysHHKSfNQ96jIOeHEQc8nliM6LntejLg2LX7evtO+h1zwQct/ZhBAAAAAAAAAAAAAAAeDs11jeWRqLDbUClo7pBDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI7H/wIAAP//L93NTg==") creat(&(0x7f0000000580)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14113e, 0x6ceac77f206eabb9) semctl$SEM_STAT_ANY(0x0, 0x0, 0x14, &(0x7f00000001c0)=""/51) write$binfmt_script(r2, &(0x7f0000000080), 0x208e24b) unlink(&(0x7f0000000180)='./file1\x00') 1m19.858895854s ago: executing program 5 (id=11189): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) fsmount(0xffffffffffffffff, 0x1, 0x1) 1m19.211809849s ago: executing program 5 (id=11198): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x1a) 1m19.055356895s ago: executing program 33 (id=11198): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x1a) 20.535949421s ago: executing program 6 (id=12293): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) sendmmsg$inet6(r3, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40804) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) 19.987834126s ago: executing program 6 (id=12309): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r3, &(0x7f00000000c0)={&(0x7f0000000180)={0xa, 0x4e21, 0x4080000, @dev={0xfe, 0x80, '\x00', 0x1a}}, 0x1c, 0x0}, 0x40c0) 19.890469886s ago: executing program 6 (id=12313): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0xc, 0x9, 0x0, 0x1, 0x2000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xc, 0x9, 0x0, 0x0, 0x80ffffff}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x5}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 18.599058605s ago: executing program 6 (id=12325): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r2, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40040) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./bus\x00', 0x280008a, &(0x7f0000000180)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95,shortname=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00', @ANYRES8, @ANYRES16=0x0, @ANYRESHEX=0x0], 0x1, 0x2c3, &(0x7f00000002c0)="$eJzs3b1ra2UYAPDnpPlCh0RwEsEDOjhdbu/qkiK9cDGTkkEd9OK9F6QJQgsFPzDt5Oqim6uLILj5T7j4HwiugpsdCkdOzjn5Mo2JNK16f7+lb973efI+7zmnLR3y9P0XR0eP0nhy/tkv0W4nUetFLy6S6EYtKmexoPdlAAD/ZRdZFr9nhW3ykoho764sAGCHtv79/8POSwIAduytt99546DfP3wzTdtxf/TF6SD/yz7/WqwfPIkPYxiP42504jIimyrG97MsG9fTXDdeGY1PB3nm6L2fyvc/+C1ikr8fnehOphbzH/QP99PCXP44r+OZcv9enn8vOvH8iv0f9A/vrciPQTNefXmu/jvRiZ8/iI9iGI8mRRT5UYv4fD9NX8+++uPTd/Py8vxkfDpoTeJmsr0bvjUAAAAAAAAAAAAAAAAAAAAAAPyP3Sl757Ri0r8nnyr77+xd5i8akVa6i/15ivykeqOl/kDjLL6p+vPcTdM0KwNn+fV4oR712zk1AAAAAAAAAAAAAAAAAAAA/LucfPzJ0cPh8PHxtQyqbgDVx/r/6fv05mZeivXBrYhGuVet3HYh5utWxCwr9qqYJGJtGfkhNii12rNoe7A++OyKpeeWa64G332/8aX7dnr2xt8EN6Z7ZZ1ruu/Lg+rpOnqYrL6Grahm2tVD8uN8TDM23Kt51VK21ePXXLnU2frszWcng/GamEjWFfbar8WVK2eS5VM0J1d1ZXp13+fSF2PamzzPs++Uv0im3TqSa/0ZBAAAAAAAAAAAAAAAAAAAFGYf+l2xeL480Zh/UctaOy0NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG7M7P//bzEYl8kbBDfj+OSWjwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBT4M8AAAD//zAXXTM=") syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 18.435957652s ago: executing program 6 (id=12318): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8000) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) write(r2, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000680)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x493, &(0x7f0000000740)="$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") 17.86000249s ago: executing program 6 (id=12322): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r2, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) syz_open_procfs(0x0, 0x0) 17.712994234s ago: executing program 34 (id=12322): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r2, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) syz_open_procfs(0x0, 0x0) 1.774549782s ago: executing program 4 (id=12526): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)={0x24, 0x16, 0xa01, 0x0, 0x0, {0x3}, [@typed={0x4}, @typed={0xc, 0xa, 0x0, 0x0, @u64}]}, 0x24}}, 0x0) 1.563717253s ago: executing program 4 (id=12532): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000000, &(0x7f0000003cc0)) 1.39921895s ago: executing program 4 (id=12537): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100"], 0x34}}, 0x0) 1.316428028s ago: executing program 7 (id=12539): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) recvfrom(r4, &(0x7f00000001c0)=""/62, 0x40000, 0x14100, 0x0, 0x0) 1.235110696s ago: executing program 1 (id=12542): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mremap(&(0x7f000046d000/0x4000)=nil, 0x4000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) 1.212237189s ago: executing program 4 (id=12543): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x2]}, 0x8, 0x0) socket$tipc(0x1e, 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x7d, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x2, 0x9, 0x5, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0xb, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xe, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x0, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x401, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf8, 0xd, 0x2bf, 0x5, 0xffe, 0xfffffffc, 0x334000, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0xbcf5, 0x1, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1085, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x1, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x3, 0xfffffff6, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xb8d, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x5, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x5, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1.152484774s ago: executing program 7 (id=12544): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0xb, 0x84) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r5, &(0x7f0000000040), 0x10) 1.090500541s ago: executing program 2 (id=12546): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x7, r5}, 0x38) 1.023566747s ago: executing program 4 (id=12547): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) 1.023083647s ago: executing program 7 (id=12548): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000180)={r5, 0x1, 0x6, @local}, 0x10) 924.362927ms ago: executing program 2 (id=12550): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1f0}}], 0x1, 0x80) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001"], 0x13c}}, 0x20040880) 901.5828ms ago: executing program 4 (id=12551): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x4) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r3, 0x6, 0x3, &(0x7f0000000040)=0x24, 0x4) setsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000000000)=0x1001, 0x4) 754.420705ms ago: executing program 7 (id=12553): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) write(r0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) request_key(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000140)='\x00', 0xfffffffffffffffb) 743.364645ms ago: executing program 2 (id=12554): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r4, 0x1) 737.988556ms ago: executing program 3 (id=12555): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) rt_sigprocmask(0x0, &(0x7f0000000040)={[0x3]}, &(0x7f0000000100), 0x8) 654.812615ms ago: executing program 7 (id=12556): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x24000]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) fsetxattr(r1, 0x0, 0x0, 0x0, 0x1) 595.619781ms ago: executing program 1 (id=12557): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) write(r4, &(0x7f0000000040)="240000001a005f0014f9f507000909000aff8000000000000000000008001e0000000000", 0x24) 595.19329ms ago: executing program 3 (id=12558): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$igmp(0x2, 0x3, 0x2) sendmsg$inet(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000a00)="d32d1ff9", 0x4}], 0x2, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x38}, @dev={0xac, 0x14, 0x14, 0x2b}}}}], 0x20}, 0x0) 571.173143ms ago: executing program 2 (id=12559): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg$inet6(r2, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) 527.682647ms ago: executing program 7 (id=12560): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mlock(&(0x7f00007fe000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x15) 500.31314ms ago: executing program 1 (id=12561): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)={0x24, 0x16, 0xa01, 0x0, 0x0, {0x3}, [@typed={0x4}, @typed={0xc, 0xa, 0x0, 0x0, @u64}]}, 0x24}}, 0x0) 483.685162ms ago: executing program 3 (id=12562): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) sendmmsg$inet6(r2, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40804) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg$inet6(r3, &(0x7f0000003480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x14) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) 373.768663ms ago: executing program 3 (id=12563): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) sendmmsg$inet6(r2, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40804) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg$inet6(r3, &(0x7f0000003480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x14) socket$xdp(0x2c, 0x3, 0x0) 372.892053ms ago: executing program 2 (id=12564): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000180)={r5, 0x1, 0x6, @local}, 0x10) 324.947458ms ago: executing program 1 (id=12565): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) sendmmsg$inet6(r3, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40804) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f0000000200)='.\x00', 0x1000020) 240.650606ms ago: executing program 3 (id=12566): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg$inet6(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, 0x0, 0x0, 0x40008c1, &(0x7f00000000c0)={0x11, 0x86dd, 0x0, 0x1, 0x62}, 0x14) 157.512154ms ago: executing program 2 (id=12567): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40081) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000000)='.\x00', 0x400017e) r3 = socket$nl_route(0x10, 0x3, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) inotify_add_watch(r2, &(0x7f0000000240)='./file0\x00', 0x480) unlink(&(0x7f0000000000)='./file0\x00') close_range(r3, 0xffffffffffffffff, 0x0) 142.083976ms ago: executing program 1 (id=12568): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r2, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40040) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) clock_adjtime(0x0, &(0x7f0000000680)={0x4000019b1, 0x0, 0x0, 0xe1, 0x0, 0x9, 0xffffffffbfffffff, 0x0, 0xfffffffffffffff9, 0x10000e5, 0x0, 0x200, 0x400000, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfde, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x6, 0x253}) 112.889359ms ago: executing program 3 (id=12569): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = dup(r0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x10000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r3, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40040) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) 0s ago: executing program 1 (id=12570): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = fsopen(&(0x7f00000000c0)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) kernel console output (not intermixed with test programs): ="syz.2.6620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33d64b96c9 code=0x7ffc0000 [ 614.479879][ T26] audit: type=1326 audit(2000000016.849:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19702 comm="syz.2.6620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f33d64b96c9 code=0x7ffc0000 [ 614.969999][ T26] audit: type=1326 audit(2000000016.849:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19702 comm="syz.2.6620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33d64b96c9 code=0x7ffc0000 [ 614.992471][ T26] audit: type=1326 audit(2000000016.849:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19702 comm="syz.2.6620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33d64b96c9 code=0x7ffc0000 [ 615.034861][ T26] audit: type=1326 audit(2000000016.849:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19702 comm="syz.2.6620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f33d64b96c9 code=0x7ffc0000 [ 615.086663][ T26] audit: type=1326 audit(2000000016.859:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19702 comm="syz.2.6620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33d64b96c9 code=0x7ffc0000 [ 615.109136][ T26] audit: type=1326 audit(2000000016.859:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19702 comm="syz.2.6620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f33d64b96c9 code=0x7ffc0000 [ 615.131738][ T26] audit: type=1326 audit(2000000016.859:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19702 comm="syz.2.6620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33d64b96c9 code=0x7ffc0000 [ 615.156175][ T26] audit: type=1326 audit(2000000016.859:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19702 comm="syz.2.6620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f33d64b96c9 code=0x7ffc0000 [ 615.271771][ T26] audit: type=1326 audit(2000000016.859:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19702 comm="syz.2.6620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f33d64b9703 code=0x7ffc0000 [ 617.199129][T19765] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6643'. [ 617.394196][T19773] netlink: 'syz.3.6650': attribute type 4 has an invalid length. [ 617.403431][T19773] netlink: 17 bytes leftover after parsing attributes in process `syz.3.6650'. [ 617.561407][T19788] netlink: 'syz.2.6656': attribute type 4 has an invalid length. [ 619.531782][T19889] kvm [19887]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0x187 data 0xc0010002c0010001 [ 619.593131][T19889] kvm [19887]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc0010003 data 0xc0010006c0010005 [ 619.610250][T19889] kvm [19887]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc0010007 data 0x4b564d0100000011 [ 620.421695][ T26] kauditd_printk_skb: 22 callbacks suppressed [ 620.421709][ T26] audit: type=1804 audit(2000000022.949:558): pid=19949 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.6730" name="bus" dev="ramfs" ino=98986 res=1 errno=0 [ 621.021386][T19979] netlink: 'syz.5.6743': attribute type 10 has an invalid length. [ 621.068133][T19979] device veth1_macvtap left promiscuous mode [ 621.698084][T20005] loop5: detected capacity change from 0 to 1024 [ 621.825089][T20005] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 621.861855][T20005] ext4 filesystem being mounted at /250/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 621.942244][T20005] EXT4-fs error (device loop5): ext4_lookup:1858: inode #15: comm syz.5.6753: inode has both inline data and extents flags [ 623.415180][T20050] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6773'. [ 624.069618][T20088] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6791'. [ 624.432451][ T26] audit: type=1326 audit(2000000026.959:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20102 comm="syz.1.6799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6118c4b6c9 code=0x7fc00000 [ 624.558383][T20119] netlink: 'syz.2.6806': attribute type 6 has an invalid length. [ 624.684679][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.690991][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.765992][T20128] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6808'. [ 625.107597][ T26] audit: type=1326 audit(2000000027.639:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20102 comm="syz.1.6799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6118c4b6c9 code=0x7fc00000 [ 626.028803][ T26] audit: type=1326 audit(2000000028.559:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20201 comm="syz.1.6846" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6118c4b6c9 code=0x0 [ 628.562403][T20307] Cannot find add_set index 4 as target [ 629.259258][T20314] netlink: 368 bytes leftover after parsing attributes in process `syz.2.6898'. [ 629.404833][T20325] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6910'. [ 629.645556][T20330] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6902'. [ 630.798949][T20361] 9pnet: Insufficient options for proto=fd [ 631.864318][T20396] overlayfs: missing 'workdir' [ 632.092463][T20410] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6937'. [ 632.125974][T20410] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6937'. [ 632.145230][T20410] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6937'. [ 632.180541][T20410] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6937'. [ 632.390629][T20435] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6949'. [ 632.580732][T20447] netlink: 136 bytes leftover after parsing attributes in process `syz.2.6956'. [ 634.016362][T20506] tmpfs: Unknown parameter 'noswap' [ 634.219206][T20522] netlink: 628 bytes leftover after parsing attributes in process `syz.1.6991'. [ 634.964616][T20570] netlink: 64 bytes leftover after parsing attributes in process `syz.5.7012'. [ 635.250873][T20592] netem: change failed [ 636.491785][T20675] netlink: 188 bytes leftover after parsing attributes in process `syz.5.7060'. [ 636.615504][T20682] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7064'. [ 637.569625][T20745] netem: change failed [ 637.616276][T20750] netlink: 72 bytes leftover after parsing attributes in process `syz.3.7096'. [ 637.918080][T20772] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7107'. [ 638.052232][T11955] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 638.243445][T20790] netlink: 96 bytes leftover after parsing attributes in process `syz.1.7115'. [ 638.324766][T20798] netlink: 72 bytes leftover after parsing attributes in process `syz.1.7119'. [ 638.412282][T11955] usb 6-1: config 0 has no interfaces? [ 638.572410][T11955] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 638.584044][T11955] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.604000][T11955] usb 6-1: Product: syz [ 638.613837][T11955] usb 6-1: Manufacturer: syz [ 638.625104][T11955] usb 6-1: SerialNumber: syz [ 638.640935][T11955] usb 6-1: config 0 descriptor?? [ 638.688280][T20823] netlink: 108 bytes leftover after parsing attributes in process `syz.2.7127'. [ 638.763643][ T4428] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 638.983619][ T7306] usb 6-1: USB disconnect, device number 5 [ 639.206864][T20846] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7135'. [ 640.086126][T20859] Invalid ELF header type: 3 != 1 [ 640.730187][ T26] audit: type=1326 audit(2000000043.259:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20895 comm="syz.3.7162" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f606e5876c9 code=0x0 [ 641.276102][T20923] x_tables: duplicate underflow at hook 1 [ 642.412229][T20971] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7186'. [ 643.293783][T20979] tipc: Started in network mode [ 643.319077][T20979] tipc: Node identity c29f6230ca3e, cluster identity 4711 [ 643.348201][T20979] tipc: Enabled bearer , priority 0 [ 643.503504][T20986] device syzkaller0 entered promiscuous mode [ 643.744037][T20975] tipc: Resetting bearer [ 643.805076][T20975] tipc: Disabling bearer [ 644.600939][T21041] overlayfs: unrecognized mount option "?´Z‰ugø=ãÊ2Áƒê£DtÀ.ú›ÚþÙµnÏý í1öîˆéÃëÄGÕíùßE-Ôû"èófhÇ!%TáêÉ äΰåºø•¯8ì™Y¯ŒPÑ9)-¼N5\þ\»–ÖÏ°–µx¦˜=mjYÉp1ÁkïW‡'ø<Ém™ì—Ã{îÁû¼¦À©Ñ¥µ¶™{‚¸îwгáQßýÞKSóm«@Y†Q™ÔKÔ8?rØÄœ˜jjØ 1±\È{>1Qµ!@dRN«‹ðö ;+!sõ¿×‚‰Þ3~öÿ&±RÍÁ½÷~5†tfG¶Õ MY!K0¢ò«Xl—÷l”~¥¨Ú" or missing value [ 646.463226][T21104] tmpfs: Unknown parameter 'noswap' [ 646.559142][T21112] fuse: Bad value for 'fd' [ 646.853732][T21133] net_ratelimit: 4025 callbacks suppressed [ 646.853748][T21133] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 647.120049][T21147] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7272'. [ 647.130007][T21152] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7274'. [ 647.244384][T21159] netlink: 312 bytes leftover after parsing attributes in process `syz.1.7279'. [ 647.556594][T21181] loop5: detected capacity change from 0 to 512 [ 647.639291][T21181] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 647.643437][T21191] overlayfs: missing 'lowerdir' [ 647.696237][T21181] EXT4-fs (loop5): inline encryption not supported [ 647.742057][T21181] EXT4-fs (loop5): Test dummy encryption mode enabled [ 647.787339][T21181] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 647.838380][T21181] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 647.886793][T21181] EXT4-fs (loop5): 1 truncate cleaned up [ 647.892859][T21181] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 648.574586][T21233] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7311'. [ 648.718664][T21240] overlayfs: failed to clone upperpath [ 649.395018][T21304] netlink: 312 bytes leftover after parsing attributes in process `syz.4.7346'. [ 649.881473][T21338] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7362'. [ 650.567064][T21381] binder: 21379:21381 ioctl 4018620d 0 returned -22 [ 650.599281][T21383] netlink: zone id is out of range [ 650.616403][T21383] netlink: zone id is out of range [ 650.621554][T21383] netlink: zone id is out of range [ 650.657298][T21383] netlink: zone id is out of range [ 650.679419][T21383] netlink: zone id is out of range [ 650.692177][T21383] netlink: zone id is out of range [ 650.703142][T21383] netlink: zone id is out of range [ 650.721364][T21383] netlink: zone id is out of range [ 650.752273][T21383] netlink: zone id is out of range [ 650.903370][T21401] 9pnet: Insufficient options for proto=fd [ 651.123642][T21415] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7398'. [ 651.473157][T21443] netlink: 'syz.4.7414': attribute type 1 has an invalid length. [ 651.553358][T21443] 8021q: adding VLAN 0 to HW filter on device bond1 [ 651.599212][T21449] bond1 (unregistering): Released all slaves [ 651.690976][T21455] fuse: Unknown parameter 'g' [ 651.777418][T21459] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7420'. [ 651.824363][T21459] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7420'. [ 652.322836][T21505] 9p: Unknown access argument a [ 654.061722][T21549] netlink: 156 bytes leftover after parsing attributes in process `syz.5.7457'. [ 656.342813][T21645] netlink: 72 bytes leftover after parsing attributes in process `syz.5.7501'. [ 656.924512][T21677] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7518'. [ 656.952336][T21678] binder: Unknown parameter 'co' [ 657.333181][T21706] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7531'. [ 657.375300][T21710] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7533'. [ 657.600026][T21721] tipc: Started in network mode [ 657.637317][T21721] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 657.684816][T21721] tipc: Enabled bearer , priority 0 [ 658.706459][ T6334] tipc: Node number set to 11578026 [ 660.124751][T21818] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7580'. [ 660.137248][T21818] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 660.166073][T21818] netlink: 1032 bytes leftover after parsing attributes in process `syz.4.7580'. [ 660.315356][T21831] netlink: 128 bytes leftover after parsing attributes in process `syz.4.7585'. [ 660.337764][T21831] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7585'. [ 660.357258][T21831] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7585'. [ 660.369131][T21838] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7583'. [ 663.710112][T22009] fuse: Bad value for 'fd' [ 666.453161][T22104] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 666.502031][T22104] overlayfs: missing 'lowerdir' [ 668.816424][T22215] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7761'. [ 669.047000][T22230] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7766'. [ 669.401797][ T26] audit: type=1326 audit(2000000025.219:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22248 comm="syz.1.7773" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6118c4b6c9 code=0x0 [ 669.605512][T22261] overlayfs: failed to clone lowerpath [ 670.779068][ T4427] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 671.366232][T22317] ip6gre0: Caught tx_queue_len zero misconfig [ 671.376560][T22317] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 672.384697][T22404] netlink: 'syz.5.7843': attribute type 21 has an invalid length. [ 672.419516][T22395] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 672.706088][T22425] loop5: detected capacity change from 0 to 512 [ 672.762596][T22425] EXT4-fs (loop5): Ignoring removed bh option [ 672.845403][T22425] EXT4-fs (loop5): mounted filesystem without journal. Opts: i_version,nogrpid,bh,,errors=continue. Quota mode: writeback. [ 672.872183][T22425] ext4 filesystem being mounted at /422/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 673.419502][T22487] loop5: detected capacity change from 0 to 256 [ 673.423287][T22488] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 673.435260][T22488] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 673.444144][T22488] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 673.452900][T22488] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 673.511127][T22488] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 673.520299][T22488] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 673.529364][T22488] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 673.538277][T22488] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 673.556162][T22487] attempt to access beyond end of device [ 673.556162][T22487] loop5: rw=2049, want=260, limit=256 [ 674.086718][T22537] device batadv_slave_1 entered promiscuous mode [ 674.097749][T22536] device batadv_slave_1 left promiscuous mode [ 674.304557][T22553] 9pnet: Could not find request transport: f [ 674.361310][T22559] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7914'. [ 674.375787][T22559] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7914'. [ 675.716738][ T4197] Bluetooth: hci4: link tx timeout [ 675.721782][T22621] overlayfs: missing 'lowerdir' [ 675.722744][ T4197] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 675.737391][ T4197] Bluetooth: hci4: link tx timeout [ 675.742660][ T4197] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 676.649438][T22646] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7952'. [ 676.742801][T22652] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7954'. [ 676.867794][T22663] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 677.320196][T22714] x_tables: duplicate underflow at hook 1 [ 679.393873][T22829] xt_TCPMSS: Only works on TCP SYN packets [ 679.761173][ T26] audit: type=1326 audit(2000000035.579:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22797 comm="syz.2.8014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33d64b96c9 code=0x7fc00000 [ 683.667131][T23024] overlayfs: missing 'lowerdir' [ 683.819856][T23036] netlink: 56 bytes leftover after parsing attributes in process `syz.3.8121'. [ 685.458312][T23092] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8145'. [ 686.125584][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.131962][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.381455][ T26] audit: type=1326 audit(2000000042.199:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23149 comm="syz.5.8172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2245a726c9 code=0x7fc00000 [ 686.441626][ T26] audit: type=1326 audit(2000000042.259:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23149 comm="syz.5.8172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2245a726c9 code=0x7fc00000 [ 686.512461][ T26] audit: type=1326 audit(2000000042.319:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23149 comm="syz.5.8172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2245a726c9 code=0x7fc00000 [ 686.577526][ T26] audit: type=1326 audit(2000000042.379:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23149 comm="syz.5.8172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2245a726c9 code=0x7fc00000 [ 686.628904][ T26] audit: type=1326 audit(2000000042.439:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23149 comm="syz.5.8172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2245a726c9 code=0x7fc00000 [ 686.685682][ T26] audit: type=1326 audit(2000000042.499:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23149 comm="syz.5.8172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2245a726c9 code=0x7fc00000 [ 686.751670][ T26] audit: type=1326 audit(2000000042.559:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23149 comm="syz.5.8172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2245a726c9 code=0x7fc00000 [ 686.802216][ T26] audit: type=1326 audit(2000000042.619:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23149 comm="syz.5.8172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2245a726c9 code=0x7fc00000 [ 686.863635][ T26] audit: type=1326 audit(2000000042.689:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23149 comm="syz.5.8172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2245a726c9 code=0x7fc00000 [ 686.921514][ T26] audit: type=1326 audit(2000000042.739:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23149 comm="syz.5.8172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2245a726c9 code=0x7fc00000 [ 687.226411][T23187] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8191'. [ 691.349045][T23359] netlink: 132 bytes leftover after parsing attributes in process `syz.5.8269'. [ 691.919236][T23402] netlink: 1004 bytes leftover after parsing attributes in process `syz.2.8292'. [ 692.288148][T23418] tipc: Enabled bearer , priority 0 [ 692.300261][T23418] device syzkaller0 entered promiscuous mode [ 692.689758][T23415] tipc: Resetting bearer [ 693.093303][T23415] tipc: Disabling bearer [ 693.357248][T23445] netlink: 132 bytes leftover after parsing attributes in process `syz.5.8311'. [ 693.642407][T23459] loop5: detected capacity change from 0 to 512 [ 693.710441][T23459] EXT4-fs (loop5): Ignoring removed bh option [ 693.813613][T23459] EXT4-fs (loop5): mounted filesystem without journal. Opts: i_version,nogrpid,bh,,errors=continue. Quota mode: writeback. [ 693.845622][T23459] ext4 filesystem being mounted at /477/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 694.002086][T23487] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8329'. [ 694.379393][T23512] Invalid ELF header magic: != ELF [ 694.939866][T23550] netlink: 68 bytes leftover after parsing attributes in process `syz.1.8359'. [ 695.080854][T23556] binder: Unknown parameter 'context' [ 695.364938][T23578] binder: 23574:23578 ioctl c0306201 0 returned -14 [ 695.761167][T23610] netlink: 'syz.3.8389': attribute type 4 has an invalid length. [ 696.309430][T23648] netlink: 96 bytes leftover after parsing attributes in process `syz.2.8407'. [ 698.185040][T23730] netlink: 'syz.1.8443': attribute type 4 has an invalid length. [ 698.203357][T23730] netlink: 17 bytes leftover after parsing attributes in process `syz.1.8443'. [ 698.361837][T23739] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8449'. [ 698.609803][T23750] netlink: 'syz.5.8454': attribute type 27 has an invalid length. [ 699.688483][ T154] tipc: Subscription rejected, illegal request [ 699.819857][T23804] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8477'. [ 699.867024][T23804] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8477'. [ 699.873412][T23806] netlink: 68 bytes leftover after parsing attributes in process `syz.3.8480'. [ 700.036584][T23813] netlink: 'syz.3.8484': attribute type 4 has an invalid length. [ 700.056264][T23813] netlink: 17 bytes leftover after parsing attributes in process `syz.3.8484'. [ 701.103977][T23868] netlink: 68 bytes leftover after parsing attributes in process `syz.5.8509'. [ 701.480733][T23886] netlink: 140 bytes leftover after parsing attributes in process `syz.3.8516'. [ 701.544562][T23888] netlink: 152 bytes leftover after parsing attributes in process `syz.4.8517'. [ 701.646410][T23899] netlink: 68 bytes leftover after parsing attributes in process `syz.2.8522'. [ 702.773544][ T4428] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 704.408628][T24036] netlink: 'syz.4.8577': attribute type 1 has an invalid length. [ 704.506663][T24041] bond1: (slave gretap1): making interface the new active one [ 704.556483][T24041] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 704.620325][T24036] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8577'. [ 704.639014][T24036] 8021q: adding VLAN 0 to HW filter on device bond1 [ 704.996163][T24069] overlayfs: missing 'lowerdir' [ 705.249981][T24087] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8602'. [ 705.482581][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 705.696362][T24117] netlink: 76 bytes leftover after parsing attributes in process `syz.2.8616'. [ 705.708306][T24117] netlink: 56 bytes leftover after parsing attributes in process `syz.2.8616'. [ 706.788211][T24159] overlayfs: missing 'lowerdir' [ 707.925233][T24188] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8645'. [ 708.137238][T24188] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 708.347711][T24188] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 708.585331][T24188] bond0 (unregistering): Released all slaves [ 708.615097][T24184] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 708.643027][T24184] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 708.766101][T24184] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 710.086230][T24257] netlink: 'syz.4.8677': attribute type 4 has an invalid length. [ 710.103153][T24257] netlink: 'syz.4.8677': attribute type 5 has an invalid length. [ 710.113276][T24257] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.8677'. [ 710.408644][T24266] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8683'. [ 711.681852][T24298] netlink: 140 bytes leftover after parsing attributes in process `syz.4.8698'. [ 713.091543][T24352] overlayfs: missing 'lowerdir' [ 714.752630][T24427] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8758'. [ 715.547888][T24493] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8790'. [ 715.596531][T24493] net_ratelimit: 24 callbacks suppressed [ 715.596542][T24493] netlink: set zone limit has 8 unknown bytes [ 718.270447][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 718.270461][ T26] audit: type=1326 audit(2000000074.088:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24593 comm="syz.1.8838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6118c4b6c9 code=0x7ffc0000 [ 718.276298][T24596] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8839'. [ 718.287343][ T26] audit: type=1326 audit(2000000074.098:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24593 comm="syz.1.8838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6118c4b6c9 code=0x7ffc0000 [ 718.350187][ T26] audit: type=1326 audit(2000000074.148:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24593 comm="syz.1.8838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6118c4b6c9 code=0x7ffc0000 [ 718.436944][ T26] audit: type=1326 audit(2000000074.148:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24593 comm="syz.1.8838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6118c4b6c9 code=0x7ffc0000 [ 718.503203][ T26] audit: type=1326 audit(2000000074.148:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24593 comm="syz.1.8838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f6118c4b6c9 code=0x7ffc0000 [ 718.548807][T24612] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 718.572490][ T26] audit: type=1326 audit(2000000074.148:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24593 comm="syz.1.8838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6118c4b6c9 code=0x7ffc0000 [ 718.601715][ T26] audit: type=1326 audit(2000000074.148:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24593 comm="syz.1.8838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7f6118c4b6c9 code=0x7ffc0000 [ 718.626604][T24622] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8851'. [ 718.669312][ T26] audit: type=1326 audit(2000000074.148:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24593 comm="syz.1.8838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6118c4b6c9 code=0x7ffc0000 [ 718.741693][ T26] audit: type=1326 audit(2000000074.148:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24593 comm="syz.1.8838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7f6118c4b6c9 code=0x7ffc0000 [ 718.802054][ T26] audit: type=1326 audit(2000000074.148:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24593 comm="syz.1.8838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6118c4b6c9 code=0x7ffc0000 [ 719.186821][T24659] x_tables: duplicate underflow at hook 1 [ 719.247673][T24664] netlink: 'syz.4.8871': attribute type 4 has an invalid length. [ 719.269578][T24666] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8872'. [ 720.778713][T24688] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8878'. [ 720.807014][T24707] overlayfs: missing 'workdir' [ 720.864968][T24714] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8892'. [ 720.877606][T24714] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8892'. [ 720.889696][T24714] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8892'. [ 720.900990][T24714] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8892'. [ 721.106064][T24682] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8879'. [ 722.705527][T24856] netlink: 'syz.1.8956': attribute type 1 has an invalid length. [ 722.722048][T24856] netlink: 76 bytes leftover after parsing attributes in process `syz.1.8956'. [ 724.160878][T24917] IPv6: sit1: Disabled Multicast RS [ 724.178807][T24921] hugetlbfs: syz.4.8988 (24921): Using mlock ulimits for SHM_HUGETLB is deprecated [ 724.729255][T24960] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9000'. [ 726.768483][T25004] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 726.873077][T25007] netlink: 'syz.2.9028': attribute type 1 has an invalid length. [ 726.940440][T25013] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9030'. [ 727.253358][T25045] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9046'. [ 727.263126][T25045] device ip6_vti0 entered promiscuous mode [ 728.817975][T25167] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9105'. [ 729.272394][T25198] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9119'. [ 729.300406][ T26] kauditd_printk_skb: 33 callbacks suppressed [ 729.300419][ T26] audit: type=1326 audit(2000000085.118:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25182 comm="syz.3.9111" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f606e5876c9 code=0x0 [ 729.798616][ T26] audit: type=1326 audit(2000000085.618:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25229 comm="syz.2.9133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33d64b96c9 code=0x50000 [ 729.829853][ T26] audit: type=1326 audit(2000000085.648:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25229 comm="syz.2.9133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33d64b96c9 code=0x50000 [ 729.864490][ T26] audit: type=1326 audit(2000000085.648:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25229 comm="syz.2.9133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33d64b96c9 code=0x50000 [ 729.893158][ T26] audit: type=1326 audit(2000000085.648:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25229 comm="syz.2.9133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33d64b96c9 code=0x50000 [ 729.916040][ T26] audit: type=1326 audit(2000000085.648:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25229 comm="syz.2.9133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33d64b96c9 code=0x50000 [ 729.940228][ T26] audit: type=1326 audit(2000000085.648:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25229 comm="syz.2.9133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33d64b96c9 code=0x50000 [ 729.992321][ T26] audit: type=1326 audit(2000000085.648:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25229 comm="syz.2.9133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33d64b96c9 code=0x50000 [ 730.053915][ T26] audit: type=1326 audit(2000000085.648:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25229 comm="syz.2.9133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33d64b96c9 code=0x50000 [ 730.106570][ T26] audit: type=1326 audit(2000000085.648:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25229 comm="syz.2.9133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33d64b96c9 code=0x50000 [ 730.869264][T25280] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9151'. [ 731.883675][T25317] netlink: 44 bytes leftover after parsing attributes in process `syz.4.9172'. [ 732.178184][T25337] netlink: 'syz.1.9182': attribute type 10 has an invalid length. [ 732.213506][T25337] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 733.919829][T25396] loop5: detected capacity change from 0 to 2048 [ 734.796124][T25396] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 734.807037][T25396] ext4 filesystem being mounted at /617/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 734.884590][T25420] overlayfs: failed to clone lowerpath [ 736.124216][T25508] netlink: 165 bytes leftover after parsing attributes in process `syz.1.9254'. [ 736.599279][ T26] kauditd_printk_skb: 61 callbacks suppressed [ 736.599581][ T26] audit: type=1326 audit(2000000093.418:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25522 comm="syz.1.9262" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6118c4b6c9 code=0x0 [ 737.693963][T25540] netlink: 165 bytes leftover after parsing attributes in process `syz.5.9267'. [ 737.703398][T25539] netlink: 388 bytes leftover after parsing attributes in process `syz.1.9268'. [ 738.150907][T25580] overlayfs: failed to clone upperpath [ 738.604164][T25616] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9299'. [ 739.877758][ T4197] Bluetooth: hci4: link tx timeout [ 739.883057][ T4197] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 739.890733][ T4197] Bluetooth: hci4: link tx timeout [ 739.896001][ T4197] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 739.973213][T25654] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9316'. [ 740.592267][T25655] netlink: 'syz.2.9315': attribute type 13 has an invalid length. [ 740.687553][T25661] overlayfs: failed to clone upperpath [ 740.766833][T25665] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9321'. [ 740.860801][T25678] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9325'. [ 740.935133][T25684] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 741.012632][T25691] overlayfs: failed to clone lowerpath [ 741.522729][T25736] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9361'. [ 742.671868][T25772] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9368'. [ 744.004042][T25855] netlink: 92 bytes leftover after parsing attributes in process `syz.2.9410'. [ 744.917780][ T4427] tipc: Subscription rejected, illegal request [ 745.423803][ T26] audit: type=1326 audit(2000000103.242:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25950 comm="syz.2.9457" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f33d64b96c9 code=0x0 [ 745.530592][T25959] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 745.569218][T25959] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 745.616626][T25959] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 745.885945][T25983] netlink: 64 bytes leftover after parsing attributes in process `syz.4.9472'. [ 746.529432][ T26] audit: type=1326 audit(2000000104.342:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26002 comm="syz.4.9480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcffb4c56c9 code=0x7ffc0000 [ 746.596245][ T26] audit: type=1326 audit(2000000104.342:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26002 comm="syz.4.9480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcffb4c56c9 code=0x7ffc0000 [ 747.276117][T26040] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9497'. [ 747.564587][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.570934][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.601307][T26064] netlink: 56 bytes leftover after parsing attributes in process `syz.3.9509'. [ 747.706995][T26075] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9513'. [ 747.769031][ T26] audit: type=1326 audit(2000000105.582:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26082 comm="syz.3.9514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f606e5876c9 code=0x7ffc0000 [ 747.817751][ T26] audit: type=1326 audit(2000000105.582:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26082 comm="syz.3.9514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f606e5876c9 code=0x7ffc0000 [ 747.841803][ T26] audit: type=1326 audit(2000000105.632:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26082 comm="syz.3.9514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f606e5876c9 code=0x7ffc0000 [ 747.869469][ T26] audit: type=1326 audit(2000000105.632:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26082 comm="syz.3.9514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f606e5876c9 code=0x7ffc0000 [ 747.928703][ T26] audit: type=1326 audit(2000000105.632:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26082 comm="syz.3.9514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f606e5876c9 code=0x7ffc0000 [ 747.958848][ T26] audit: type=1326 audit(2000000105.632:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26082 comm="syz.3.9514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f606e5876c9 code=0x7ffc0000 [ 747.983157][ T26] audit: type=1326 audit(2000000105.632:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26082 comm="syz.3.9514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f606e5876c9 code=0x7ffc0000 [ 750.608477][ T26] kauditd_printk_skb: 35 callbacks suppressed [ 750.608491][ T26] audit: type=1326 audit(2000000108.422:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26152 comm="syz.1.9549" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6118c4b6c9 code=0x0 [ 750.710946][T26158] overlayfs: failed to clone upperpath [ 750.787801][T26163] netlink: 'syz.1.9553': attribute type 4 has an invalid length. [ 750.836411][T26163] netlink: 'syz.1.9553': attribute type 4 has an invalid length. [ 751.688321][T26213] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9576'. [ 751.901879][ T26] audit: type=1326 audit(2000000109.712:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26229 comm="syz.4.9583" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcffb4c56c9 code=0x0 [ 754.656050][T26274] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9602'. [ 755.487510][T26303] netlink: 52 bytes leftover after parsing attributes in process `syz.2.9615'. [ 757.284254][T26379] netlink: 104 bytes leftover after parsing attributes in process `syz.1.9648'. [ 762.124254][T26523] overlayfs: missing 'lowerdir' [ 762.227731][T26535] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9720'. [ 762.329598][T26541] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9723'. [ 762.549616][T26560] netlink: 152 bytes leftover after parsing attributes in process `syz.5.9731'. [ 763.071784][T26611] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9753'. [ 763.701272][T26661] overlayfs: missing 'lowerdir' [ 763.797413][T26668] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9780'. [ 764.835144][T26697] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 765.129336][T26712] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9801'. [ 766.664849][ T26] audit: type=1326 audit(2000000124.482:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26757 comm="syz.1.9823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6118c4b6c9 code=0x7ffc0000 [ 766.708237][T26759] overlayfs: unrecognized mount option "verity=on" or missing value [ 766.716516][T26761] device wg2 entered promiscuous mode [ 766.757592][ T26] audit: type=1326 audit(2000000124.512:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26757 comm="syz.1.9823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6118c4b6c9 code=0x7ffc0000 [ 766.867959][ T26] audit: type=1326 audit(2000000124.512:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26757 comm="syz.1.9823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6118c4b6c9 code=0x7ffc0000 [ 766.967993][ T26] audit: type=1326 audit(2000000124.512:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26757 comm="syz.1.9823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6118c4b6c9 code=0x7ffc0000 [ 767.027625][T26781] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9832'. [ 767.052079][ T26] audit: type=1326 audit(2000000124.512:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26757 comm="syz.1.9823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6118c4b6c9 code=0x7ffc0000 [ 767.072420][T26782] loop5: detected capacity change from 0 to 512 [ 767.115935][ T26] audit: type=1326 audit(2000000124.512:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26757 comm="syz.1.9823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f6118c4b6c9 code=0x7ffc0000 [ 767.188021][ T26] audit: type=1326 audit(2000000124.512:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26757 comm="syz.1.9823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6118c4b6c9 code=0x7ffc0000 [ 767.213933][ T26] audit: type=1326 audit(2000000124.512:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26757 comm="syz.1.9823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f6118c4b6c9 code=0x7ffc0000 [ 767.243807][ T26] audit: type=1326 audit(2000000124.512:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26757 comm="syz.1.9823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6118c4b703 code=0x7ffc0000 [ 767.266501][ T26] audit: type=1326 audit(2000000124.512:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26757 comm="syz.1.9823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6118c4a17f code=0x7ffc0000 [ 767.383965][T26782] EXT4-fs error (device loop5): ext4_acquire_dquot:6209: comm syz.5.9831: Failed to acquire dquot type 1 [ 767.554035][T26802] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 767.767223][T26782] EXT4-fs (loop5): 1 truncate cleaned up [ 767.932519][T26782] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpid,resuid=0x0000000000000000,nodelalloc,dioread_nolock,quota,,errors=continue. Quota mode: writeback. [ 768.052482][T26782] ext4 filesystem being mounted at /730/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 771.055321][T26912] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9883'. [ 771.237830][T26925] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9890'. [ 771.564514][T26950] netlink: 104 bytes leftover after parsing attributes in process `syz.4.9899'. [ 771.672574][T26958] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9903'. [ 772.813299][T26998] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9925'. [ 772.829881][T26998] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9925'. [ 772.889890][T27005] loop5: detected capacity change from 0 to 7 [ 772.913744][T27005] Dev loop5: unable to read RDB block 7 [ 772.919389][T27005] loop5: unable to read partition table [ 772.935911][T27005] loop5: partition table beyond EOD, truncated [ 772.956652][T27005] loop_reread_partitions: partition scan of loop5 (úù) failed (rc=-5) [ 773.004126][ T3562] Dev loop5: unable to read RDB block 7 [ 773.009903][ T3562] loop5: unable to read partition table [ 773.025578][ T3562] loop5: partition table beyond EOD, truncated [ 773.716662][T27065] binder: 27063:27065 ioctl 4018620d 0 returned -22 [ 774.996568][T27091] netlink: 104 bytes leftover after parsing attributes in process `syz.2.9966'. [ 776.521675][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 776.521688][ T26] audit: type=1326 audit(2000000134.332:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27165 comm="syz.4.9999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcffb4c56c9 code=0x7ffc0000 [ 776.611634][ T26] audit: type=1326 audit(2000000134.332:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27165 comm="syz.4.9999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcffb4c56c9 code=0x7ffc0000 [ 776.700330][ T26] audit: type=1326 audit(2000000134.332:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27165 comm="syz.4.9999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcffb4c56c9 code=0x7ffc0000 [ 776.771985][ T26] audit: type=1326 audit(2000000134.332:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27165 comm="syz.4.9999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcffb4c56c9 code=0x7ffc0000 [ 776.842250][ T26] audit: type=1326 audit(2000000134.332:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27165 comm="syz.4.9999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcffb4c56c9 code=0x7ffc0000 [ 776.883512][ T26] audit: type=1326 audit(2000000134.332:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27165 comm="syz.4.9999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcffb4c56c9 code=0x7ffc0000 [ 776.976289][ T26] audit: type=1326 audit(2000000134.352:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27165 comm="syz.4.9999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcffb4c56c9 code=0x7ffc0000 [ 777.067093][T27190] overlayfs: missing 'lowerdir' [ 777.078169][ T26] audit: type=1326 audit(2000000134.352:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27165 comm="syz.4.9999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcffb4c56c9 code=0x7ffc0000 [ 777.156611][ T26] audit: type=1326 audit(2000000134.352:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27165 comm="syz.4.9999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcffb4c56c9 code=0x7ffc0000 [ 777.246253][ T26] audit: type=1326 audit(2000000134.352:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27165 comm="syz.4.9999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcffb4c56c9 code=0x7ffc0000 [ 777.596799][T27221] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10028'. [ 777.648673][T27221] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10028'. [ 777.698944][T27221] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10028'. [ 777.718097][T27221] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10028'. [ 777.732505][T27227] netlink: 140 bytes leftover after parsing attributes in process `syz.1.10031'. [ 777.985521][T27240] futex_wake_op: syz.5.10037 tries to shift op by 32; fix this program [ 778.495769][T27230] fuse: Unknown parameter 'r' [ 780.233937][T27360] binder: Binderfs stats mode cannot be changed during a remount [ 780.610201][T27367] netlink: 'syz.2.10096': attribute type 16 has an invalid length. [ 780.679090][T27367] netlink: 64122 bytes leftover after parsing attributes in process `syz.2.10096'. [ 781.594508][T27421] netlink: 224 bytes leftover after parsing attributes in process `syz.5.10128'. [ 781.929533][T27439] netlink: 56 bytes leftover after parsing attributes in process `syz.1.10125'. [ 783.566443][T27484] loop5: detected capacity change from 0 to 512 [ 783.704409][T27484] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 783.718657][T27488] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10148'. [ 783.796460][T27484] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #16: comm syz.5.10146: invalid indirect mapped block 4294967295 (level 0) [ 783.869769][T27484] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #16: comm syz.5.10146: invalid indirect mapped block 4294967295 (level 1) [ 783.929244][T27484] EXT4-fs (loop5): 1 orphan inode deleted [ 783.941995][T27484] EXT4-fs (loop5): 1 truncate cleaned up [ 783.947671][T27484] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 784.007746][T27500] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10153'. [ 784.020568][T27504] 9pnet: Insufficient options for proto=fd [ 784.452978][T27532] overlayfs: failed to clone upperpath [ 784.601870][T27547] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10172'. [ 784.675640][T27550] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10173'. [ 785.587530][T27604] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10200'. [ 785.970105][T27627] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10211'. [ 786.544586][T27650] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10220'. [ 789.370605][ T26] kauditd_printk_skb: 44 callbacks suppressed [ 789.370619][ T26] audit: type=1326 audit(2000000147.182:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27726 comm="syz.1.10254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6118c4b6c9 code=0x7ffc0000 [ 789.411798][ T26] audit: type=1326 audit(2000000147.182:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27726 comm="syz.1.10254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6118c4b6c9 code=0x7ffc0000 [ 789.472872][ T26] audit: type=1326 audit(2000000147.212:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27726 comm="syz.1.10254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f6118c4b6c9 code=0x7ffc0000 [ 789.546972][T27735] netlink: 'syz.4.10257': attribute type 13 has an invalid length. [ 789.568142][ T26] audit: type=1326 audit(2000000147.212:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27726 comm="syz.1.10254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6118c4b703 code=0x7ffc0000 [ 789.692883][ T26] audit: type=1326 audit(2000000147.512:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27726 comm="syz.1.10254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6118c4a17f code=0x7ffc0000 [ 789.803644][T27744] netlink: 56 bytes leftover after parsing attributes in process `syz.4.10260'. [ 790.149965][ T26] audit: type=1326 audit(2000000147.962:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27726 comm="syz.1.10254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f6118c4b757 code=0x7ffc0000 [ 790.218588][ T26] audit: type=1326 audit(2000000147.962:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27726 comm="syz.1.10254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6118c49f10 code=0x7ffc0000 [ 790.235927][T27765] netlink: 172 bytes leftover after parsing attributes in process `syz.3.10271'. [ 790.288627][ T26] audit: type=1326 audit(2000000147.962:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27726 comm="syz.1.10254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6118c4b2cb code=0x7ffc0000 [ 790.356003][ T26] audit: type=1326 audit(2000000147.962:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27726 comm="syz.1.10254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f6118c4a32a code=0x7ffc0000 [ 790.402568][ T26] audit: type=1326 audit(2000000147.962:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27726 comm="syz.1.10254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f6118c4a32a code=0x7ffc0000 [ 794.005664][T27894] overlayfs: failed to set xattr on upper [ 794.029804][T27894] overlayfs: ...falling back to index=off,metacopy=off. [ 795.026896][T27940] lo speed is unknown, defaulting to 1000 [ 795.049352][T27940] lo speed is unknown, defaulting to 1000 [ 795.066193][T27940] lo speed is unknown, defaulting to 1000 [ 795.488926][T27940] infiniband syz2: set down [ 795.493954][T27940] infiniband syz2: added lo [ 795.556397][ T7] lo speed is unknown, defaulting to 1000 [ 795.596291][T27940] infiniband syz2: Couldn't open port 1 [ 795.635506][T27940] RDS/IB: syz2: added [ 795.640045][T27940] smc: adding ib device syz2 with port count 1 [ 795.646646][T27940] smc: ib device syz2 port 1 has pnetid [ 795.712124][T27943] overlayfs: missing 'lowerdir' [ 795.717184][T27938] lo speed is unknown, defaulting to 1000 [ 795.760127][T19399] lo speed is unknown, defaulting to 1000 [ 796.786170][T27940] lo speed is unknown, defaulting to 1000 [ 796.875776][T27940] lo speed is unknown, defaulting to 1000 [ 796.972763][T27940] lo speed is unknown, defaulting to 1000 [ 797.212459][T27940] lo speed is unknown, defaulting to 1000 [ 797.304108][T27940] lo speed is unknown, defaulting to 1000 [ 797.392565][T27940] lo speed is unknown, defaulting to 1000 [ 797.481249][T27940] lo speed is unknown, defaulting to 1000 [ 797.569953][T27940] lo speed is unknown, defaulting to 1000 [ 797.680643][T27940] lo speed is unknown, defaulting to 1000 [ 798.079255][T27991] lo speed is unknown, defaulting to 1000 [ 798.260350][T27997] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10367'. [ 798.470743][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 798.470758][ T26] audit: type=1326 audit(2000000156.282:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28005 comm="syz.4.10373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcffb4c56c9 code=0x7ffc0000 [ 798.540968][ T26] audit: type=1326 audit(2000000156.282:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28005 comm="syz.4.10373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcffb4c56c9 code=0x7ffc0000 [ 798.631320][ T26] audit: type=1326 audit(2000000156.282:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28005 comm="syz.4.10373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcffb4c56c9 code=0x7ffc0000 [ 798.726112][ T26] audit: type=1326 audit(2000000156.282:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28005 comm="syz.4.10373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fcffb4c56c9 code=0x7ffc0000 [ 798.734896][T28018] netlink: 72 bytes leftover after parsing attributes in process `syz.5.10378'. [ 798.818455][ T26] audit: type=1326 audit(2000000156.282:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28005 comm="syz.4.10373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcffb4c56c9 code=0x7ffc0000 [ 798.912001][ T26] audit: type=1326 audit(2000000156.282:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28005 comm="syz.4.10373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcffb4c56c9 code=0x7ffc0000 [ 798.992254][ T26] audit: type=1326 audit(2000000156.282:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28005 comm="syz.4.10373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcffb4c56c9 code=0x7ffc0000 [ 799.084998][ T26] audit: type=1326 audit(2000000156.282:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28005 comm="syz.4.10373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fcffb4c56c9 code=0x7ffc0000 [ 799.138178][ T26] audit: type=1326 audit(2000000156.282:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28005 comm="syz.4.10373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcffb4c56c9 code=0x7ffc0000 [ 799.253884][T28035] lo speed is unknown, defaulting to 1000 [ 801.280296][T28087] lo speed is unknown, defaulting to 1000 [ 802.238826][T28100] lo speed is unknown, defaulting to 1000 [ 802.330817][T28112] netlink: 'syz.4.10417': attribute type 4 has an invalid length. [ 802.630262][T28105] lo speed is unknown, defaulting to 1000 [ 802.643886][T28129] overlayfs: missing 'lowerdir' [ 803.293444][T28176] lo speed is unknown, defaulting to 1000 [ 803.570904][T28190] lo speed is unknown, defaulting to 1000 [ 803.965758][ T4197] Bluetooth: hci4: link tx timeout [ 803.973123][ T4197] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 803.980814][ T4197] Bluetooth: hci4: link tx timeout [ 803.986524][ T4197] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 805.022667][T28233] lo speed is unknown, defaulting to 1000 [ 805.935969][T28281] netlink: 'syz.2.10496': attribute type 4 has an invalid length. [ 805.978464][T28281] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.10496'. [ 806.237087][T28302] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10515'. [ 807.171846][T28359] overlayfs: failed to clone upperpath [ 807.325320][T28368] overlayfs: failed to clone lowerpath [ 807.337993][T28368] overlayfs: failed to clone lowerpath [ 807.515376][ T26] audit: type=1326 audit(2000000165.332:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28377 comm="syz.5.10541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2245a726c9 code=0x7ffc0000 [ 808.251742][ T26] audit: type=1326 audit(2000000165.332:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28377 comm="syz.5.10541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2245a726c9 code=0x7ffc0000 [ 808.294603][ T26] audit: type=1326 audit(2000000166.052:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28377 comm="syz.5.10541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f2245a726c9 code=0x7ffc0000 [ 808.329851][T28384] overlayfs: failed to clone lowerpath [ 808.366199][ T26] audit: type=1326 audit(2000000166.052:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28377 comm="syz.5.10541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2245a72703 code=0x7ffc0000 [ 808.467410][T28391] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10545'. [ 808.579339][ T26] audit: type=1326 audit(2000000166.392:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28377 comm="syz.5.10541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2245a7117f code=0x7ffc0000 [ 808.687667][T28401] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 809.004870][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.011203][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.039271][T28423] lo speed is unknown, defaulting to 1000 [ 809.070090][ T26] audit: type=1326 audit(2000000166.872:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28377 comm="syz.5.10541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f2245a72757 code=0x7ffc0000 [ 809.076342][T28378] loop5: detected capacity change from 0 to 40427 [ 809.093342][ T26] audit: type=1326 audit(2000000166.872:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28377 comm="syz.5.10541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2245a70f10 code=0x7ffc0000 [ 809.206700][ T26] audit: type=1326 audit(2000000166.872:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28377 comm="syz.5.10541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2245a722cb code=0x7ffc0000 [ 809.267979][T28378] F2FS-fs (loop5): Found nat_bits in checkpoint [ 809.278773][ T26] audit: type=1326 audit(2000000166.962:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28377 comm="syz.5.10541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f2245a7132a code=0x7ffc0000 [ 809.356660][ T26] audit: type=1326 audit(2000000166.962:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28377 comm="syz.5.10541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f2245a7132a code=0x7ffc0000 [ 809.431391][T28378] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 809.678861][T28451] lo speed is unknown, defaulting to 1000 [ 809.930204][T28465] overlayfs: failed to clone lowerpath [ 809.970679][T28465] overlayfs: failed to clone lowerpath [ 810.330598][T28484] lo speed is unknown, defaulting to 1000 [ 810.514673][T28501] netlink: 1347 bytes leftover after parsing attributes in process `syz.1.10595'. [ 811.002732][T28538] netlink: 64 bytes leftover after parsing attributes in process `syz.1.10624'. [ 811.114409][T28545] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10616'. [ 811.442758][T28565] lo speed is unknown, defaulting to 1000 [ 811.976417][T28587] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10635'. [ 812.191625][T28602] lo speed is unknown, defaulting to 1000 [ 812.442174][T19399] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 812.802045][T19399] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 812.832133][T19399] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 812.865820][T19399] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 812.885154][T19399] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 812.911577][T19399] usb 6-1: config 0 descriptor?? [ 812.928454][T28654] device sit0 entered promiscuous mode [ 812.960222][T28654] netlink: 'syz.4.10665': attribute type 1 has an invalid length. [ 812.974074][T19399] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 813.010506][T28654] netlink: 1 bytes leftover after parsing attributes in process `syz.4.10665'. [ 813.106305][ T26] kauditd_printk_skb: 38 callbacks suppressed [ 813.106318][ T26] audit: type=1326 audit(2000000170.922:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28665 comm="syz.4.10672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcffb4c56c9 code=0x7ffc0000 [ 813.702525][T13722] usb 6-1: USB disconnect, device number 6 [ 813.801106][ T26] audit: type=1326 audit(2000000171.182:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28665 comm="syz.4.10672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fcffb4c56c9 code=0x7ffc0000 [ 813.852076][ T26] audit: type=1326 audit(2000000171.192:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28665 comm="syz.4.10672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fcffb4c5703 code=0x7ffc0000 [ 814.022848][T28676] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10675'. [ 814.077424][ T26] audit: type=1326 audit(2000000171.892:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28665 comm="syz.4.10672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fcffb4c417f code=0x7ffc0000 [ 814.700835][ T26] audit: type=1326 audit(2000000172.512:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28665 comm="syz.4.10672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fcffb4c5757 code=0x7ffc0000 [ 814.802963][ T26] audit: type=1326 audit(2000000172.532:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28665 comm="syz.4.10672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcffb4c3f10 code=0x7ffc0000 [ 814.905298][ T26] audit: type=1326 audit(2000000172.532:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28665 comm="syz.4.10672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fcffb4c432a code=0x7ffc0000 [ 815.011644][T28727] overlayfs: missing 'workdir' [ 815.088901][ T26] audit: type=1326 audit(2000000172.902:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28665 comm="syz.4.10672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcffb4c56c9 code=0x7ffc0000 [ 815.176368][ T26] audit: type=1326 audit(2000000172.922:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28665 comm="syz.4.10672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcffb4c56c9 code=0x7ffc0000 [ 816.270022][T28775] lo speed is unknown, defaulting to 1000 [ 816.807945][T28809] netlink: 'syz.3.10736': attribute type 6 has an invalid length. [ 817.086628][T28827] lo speed is unknown, defaulting to 1000 [ 817.480752][T28849] overlayfs: failed to clone upperpath [ 817.857691][ T26] audit: type=1326 audit(2000000175.672:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28865 comm="syz.5.10773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2245a726c9 code=0x7ffc0000 [ 818.068315][T28879] lo speed is unknown, defaulting to 1000 [ 821.679285][T28927] netlink: 'syz.2.10789': attribute type 10 has an invalid length. [ 821.727893][T28927] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10789'. [ 821.826445][T28927] device dummy0 entered promiscuous mode [ 822.082728][T28934] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10793'. [ 822.598146][T28954] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10803'. [ 825.223800][T29075] netlink: 44 bytes leftover after parsing attributes in process `syz.5.10858'. [ 825.289314][T29083] device sit0 entered promiscuous mode [ 825.330111][T29083] netlink: 'syz.3.10862': attribute type 1 has an invalid length. [ 825.370942][T29083] netlink: 1 bytes leftover after parsing attributes in process `syz.3.10862'. [ 825.392824][T29089] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10864'. [ 825.653253][T29112] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10877'. [ 825.933379][T29135] IPv6: NLM_F_CREATE should be specified when creating new route [ 826.177131][T29149] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10894'. [ 826.192695][T29152] netlink: 188 bytes leftover after parsing attributes in process `syz.1.10903'. [ 826.223637][T29153] lo speed is unknown, defaulting to 1000 [ 826.542193][T29165] netlink: 104 bytes leftover after parsing attributes in process `syz.1.10900'. [ 826.874088][T29184] mmap: syz.4.10909 (29184): VmData 49209344 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 829.466211][T29268] lo speed is unknown, defaulting to 1000 [ 829.682095][T29283] netlink: 'syz.4.10956': attribute type 1 has an invalid length. [ 829.716198][T29283] netlink: 'syz.4.10956': attribute type 2 has an invalid length. [ 829.739377][T29283] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10956'. [ 830.027228][T29304] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10967'. [ 830.477842][T29331] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10979'. [ 831.302300][T29343] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10983'. [ 831.547941][T29356] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10991'. [ 831.699714][T29369] sch_tbf: burst 0 is lower than device lo mtu (1550) ! [ 831.721062][T29370] netlink: 188 bytes leftover after parsing attributes in process `syz.4.10997'. [ 831.986098][T29388] loop5: detected capacity change from 0 to 2048 [ 832.093233][T29388] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 832.112289][T29388] ext4 filesystem being mounted at /936/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 832.261452][T29401] netem: change failed [ 832.503520][T29412] netlink: 188 bytes leftover after parsing attributes in process `syz.5.11015'. [ 832.579861][T29417] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11019'. [ 832.776338][T29425] lo speed is unknown, defaulting to 1000 [ 833.303776][T29454] netlink: 'syz.3.11035': attribute type 1 has an invalid length. [ 833.330971][T29454] netlink: 'syz.3.11035': attribute type 2 has an invalid length. [ 834.034021][T29454] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11035'. [ 835.214231][ T1334] kernel write not supported for file [eventfd] (pid: 1334 comm: kworker/1:2) [ 835.838011][T29526] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11067'. [ 836.052584][T29539] overlayfs: failed to clone upperpath [ 836.384081][T29559] lo speed is unknown, defaulting to 1000 [ 837.626582][T29594] 9pnet: Could not find request transport: 0xffffffffffffffff [ 837.950333][T29624] lo speed is unknown, defaulting to 1000 [ 841.821425][T29691] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11139'. [ 841.852220][T29693] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11140'. [ 841.871626][T29691] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11139'. [ 841.902659][T29691] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11139'. [ 841.925987][T29691] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11139'. [ 842.049255][T29699] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 842.067597][T29702] netlink: 212 bytes leftover after parsing attributes in process `syz.2.11144'. [ 842.080178][T29703] netlink: 'syz.5.11143': attribute type 4 has an invalid length. [ 842.103008][T29703] netlink: 17 bytes leftover after parsing attributes in process `syz.5.11143'. [ 842.213003][T29705] netlink: 388 bytes leftover after parsing attributes in process `syz.2.11145'. [ 843.938854][T29761] loop5: detected capacity change from 0 to 2048 [ 844.023790][T29761] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 844.078202][T29761] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 844.453698][T29786] netlink: 200 bytes leftover after parsing attributes in process `syz.2.11176'. [ 844.682265][ T1334] Bluetooth: hci1: command 0x2016 tx timeout [ 845.421276][T15825] UDF-fs: error (device loop5): udf_verify_fi: directory (ino 1376) has entry at pos 0 with incorrect tag 0 [ 845.462789][T15825] UDF-fs: error (device loop5): udf_verify_fi: directory (ino 1376) has entry at pos 0 with incorrect tag 0 [ 845.709195][T29810] overlayfs: missing 'lowerdir' [ 845.836842][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 845.836855][ T26] audit: type=1326 audit(2000000203.652:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29813 comm="syz.3.11194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f606e5876c9 code=0x7ffc0000 [ 845.880534][ T26] audit: type=1326 audit(2000000203.682:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29813 comm="syz.3.11194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f606e5876c9 code=0x7ffc0000 [ 845.943151][ T26] audit: type=1326 audit(2000000203.682:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29813 comm="syz.3.11194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f606e5876c9 code=0x7ffc0000 [ 845.988477][ T26] audit: type=1326 audit(2000000203.682:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29813 comm="syz.3.11194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f606e5876c9 code=0x7ffc0000 [ 846.077176][ T26] audit: type=1326 audit(2000000203.682:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29813 comm="syz.3.11194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f606e5876c9 code=0x7ffc0000 [ 846.162885][ T26] audit: type=1326 audit(2000000203.682:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29813 comm="syz.3.11194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f606e5876c9 code=0x7ffc0000 [ 846.232045][ T26] audit: type=1326 audit(2000000203.682:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29813 comm="syz.3.11194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f606e5876c9 code=0x7ffc0000 [ 846.262932][ T26] audit: type=1326 audit(2000000203.702:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29813 comm="syz.3.11194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f606e5876c9 code=0x7ffc0000 [ 846.321579][ T26] audit: type=1326 audit(2000000203.702:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29813 comm="syz.3.11194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f606e5876c9 code=0x7ffc0000 [ 846.740232][T29850] lo speed is unknown, defaulting to 1000 [ 847.137301][ T26] audit: type=1326 audit(2000000204.952:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29877 comm="syz.2.11223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33d64b96c9 code=0x7ffc0000 [ 847.324914][T29850] chnl_net:caif_netlink_parms(): no params data found [ 847.588500][T29850] bridge0: port 1(bridge_slave_0) entered blocking state [ 847.602033][T29850] bridge0: port 1(bridge_slave_0) entered disabled state [ 847.643093][T29850] device bridge_slave_0 entered promiscuous mode [ 847.673363][T29850] bridge0: port 2(bridge_slave_1) entered blocking state [ 847.680539][T29850] bridge0: port 2(bridge_slave_1) entered disabled state [ 847.712006][T29850] device bridge_slave_1 entered promiscuous mode [ 847.738571][T29884] lo speed is unknown, defaulting to 1000 [ 847.780031][T29903] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11232'. [ 847.793300][T29850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 847.835944][T29850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 847.926394][T29850] team0: Port device team_slave_0 added [ 847.955493][T29850] team0: Port device team_slave_1 added [ 848.047481][T29850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 848.062233][T29850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 848.155220][T29850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 848.197054][T29850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 848.211977][T29850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 848.302235][T29850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 848.340818][T29912] netlink: 44 bytes leftover after parsing attributes in process `syz.1.11236'. [ 848.430463][T29850] device hsr_slave_0 entered promiscuous mode [ 848.467500][T29850] device hsr_slave_1 entered promiscuous mode [ 848.520085][T29850] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 848.535779][T29850] Cannot create hsr debugfs directory [ 848.666949][T29922] netlink: 84 bytes leftover after parsing attributes in process `syz.3.11240'. [ 848.692168][T19392] Bluetooth: hci0: command 0x0409 tx timeout [ 849.007899][T29850] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 849.067561][T29850] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 849.094307][T29850] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 849.119145][T29940] 9pnet: Insufficient options for proto=fd [ 849.123632][T29850] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 849.457823][T29850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 849.501776][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 849.520520][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 849.544819][T29850] 8021q: adding VLAN 0 to HW filter on device team0 [ 849.569365][T20336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 849.621988][T20336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 849.652109][T20336] bridge0: port 1(bridge_slave_0) entered blocking state [ 849.659186][T20336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 849.695246][T20336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 849.743377][T29967] netlink: 140 bytes leftover after parsing attributes in process `syz.1.11260'. [ 849.763056][ T5017] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 849.802464][ T5017] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 849.841760][ T5017] bridge0: port 2(bridge_slave_1) entered blocking state [ 849.848868][ T5017] bridge0: port 2(bridge_slave_1) entered forwarding state [ 849.876171][ T5017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 849.951479][T29850] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 849.991126][T29850] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 850.018790][ T5017] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 850.036459][ T5017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 850.056816][ T5017] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 850.076563][ T5017] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 850.096281][ T5017] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 850.116900][ T5017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 850.138439][ T5017] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 850.157047][ T5017] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 850.174569][ T5017] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 850.183397][ T5017] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 850.191430][ T5017] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 850.481165][T20336] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 850.499317][T20336] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 850.532208][T29850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 850.772234][T19392] Bluetooth: hci0: command 0x041b tx timeout [ 850.912497][ T5017] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 850.934202][ T5017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 850.969709][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 850.991497][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 851.018826][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 851.044952][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 851.069628][T29850] device veth0_vlan entered promiscuous mode [ 851.108215][T29850] device veth1_vlan entered promiscuous mode [ 851.139956][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 851.149001][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 851.164761][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 851.182690][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 851.198852][T29850] device veth0_macvtap entered promiscuous mode [ 851.210369][T29850] device veth1_macvtap entered promiscuous mode [ 851.269193][T29850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 851.301242][T29850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 851.317505][T29850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 851.347131][T29850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 851.374197][T29850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 851.397896][T29850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 851.429919][T29850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 851.458606][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 851.471535][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 851.498472][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 851.517546][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 851.555860][T29850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 851.578963][T29850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 851.610422][T29850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 851.635113][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 851.654643][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 851.683282][T29850] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.698144][T29850] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.707688][T29850] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.722559][T29850] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.893707][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 851.918904][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 851.960078][ T5017] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 851.991867][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 852.004533][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 852.048229][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 852.469959][T30062] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11300'. [ 852.509890][T30062] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11300'. [ 852.528670][T30062] netlink: 40 bytes leftover after parsing attributes in process `syz.6.11300'. [ 852.548623][T30065] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11300'. [ 852.612635][T30062] netlink: 40 bytes leftover after parsing attributes in process `syz.6.11300'. [ 852.668071][T30065] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11300'. [ 853.520106][T19392] Bluetooth: hci0: command 0x040f tx timeout [ 855.572589][ T1334] Bluetooth: hci0: command 0x0419 tx timeout [ 855.688250][T30148] __nla_validate_parse: 2 callbacks suppressed [ 855.688266][T30148] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11339'. [ 857.851573][T30222] lo speed is unknown, defaulting to 1000 [ 859.828231][T30299] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11404'. [ 860.220567][T30329] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11419'. [ 860.261062][T30331] loop6: detected capacity change from 0 to 512 [ 860.310191][T30331] EXT4-fs (loop6): Ignoring removed mblk_io_submit option [ 860.340396][T30331] EXT4-fs (loop6): inline encryption not supported [ 860.355098][T30331] EXT4-fs (loop6): Test dummy encryption mode enabled [ 860.387450][T30331] EXT4-fs (loop6): Ignoring removed mblk_io_submit option [ 860.435050][T30331] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 860.506464][T30331] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 860.569726][T30331] System zones: 1-12 [ 860.611505][T30331] EXT4-fs (loop6): 1 truncate cleaned up [ 860.618784][T30331] EXT4-fs (loop6): mounted filesystem without journal. Opts: debug,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,,errors=continue. Quota mode: none. [ 860.923849][T30359] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11431'. [ 862.342852][T30440] device  entered promiscuous mode [ 863.013936][T30452] fuse: Bad value for 'group_id' [ 863.116963][T30460] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11475'. [ 863.391806][T30482] tipc: Enabling of bearer rejected, failed to enable media [ 863.443790][T30486] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11489'. [ 863.947854][T30531] netlink: 'syz.4.11510': attribute type 4 has an invalid length. [ 864.558820][T30591] netlink: 84 bytes leftover after parsing attributes in process `syz.1.11538'. [ 864.576338][T30591] netlink: 64 bytes leftover after parsing attributes in process `syz.1.11538'. [ 864.848241][T30615] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11548'. [ 865.299647][T30645] loop6: detected capacity change from 0 to 512 [ 865.449998][T30645] __quota_error: 15 callbacks suppressed [ 865.450014][T30645] Quota error (device loop6): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 865.506385][T30645] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 865.521017][T30645] EXT4-fs error (device loop6): ext4_acquire_dquot:6209: comm syz.6.11561: Failed to acquire dquot type 1 [ 865.544588][T30645] EXT4-fs (loop6): 1 truncate cleaned up [ 865.568898][T30645] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpid,resuid=0x0000000000000000,nodelalloc,dioread_nolock,quota,,errors=continue. Quota mode: writeback. [ 865.616376][T30645] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 865.643752][T30657] lo speed is unknown, defaulting to 1000 [ 865.905018][T30674] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11574'. [ 866.081420][T30684] overlayfs: failed to clone upperpath [ 866.448983][T30707] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 866.478501][T30707] overlayfs: missing 'lowerdir' [ 867.407528][ T4197] Bluetooth: hci4: link tx timeout [ 867.412744][ T4197] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 867.420558][ T4197] Bluetooth: hci4: link tx timeout [ 867.426210][ T4197] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 867.540762][T30754] netlink: 'syz.2.11609': attribute type 4 has an invalid length. [ 867.587372][T30754] rdma_rxe: ignoring netdev event = 23 for lo [ 867.614506][T30754] rdma_rxe: lo changed mtu to 11337732 [ 867.634332][T30754] rdma_rxe: ignoring netdev event = 14 for lo [ 867.660519][T30754] infiniband syz2: set active [ 867.675728][T16052] lo speed is unknown, defaulting to 1000 [ 867.686756][T16052] lo speed is unknown, defaulting to 1000 [ 869.729721][T30824] loop6: detected capacity change from 0 to 256 [ 869.773348][T30824] FAT-fs (loop6): Unrecognized mount option "0x000000000000000800000000000000000000000" or missing value [ 870.445803][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.445992][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.201287][T30840] device  entered promiscuous mode [ 872.184140][T30854] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11655'. [ 872.621798][ T26] audit: type=1326 audit(2000000230.432:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30879 comm="syz.3.11666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f606e5876c9 code=0x7ffc0000 [ 872.691803][ T26] audit: type=1326 audit(2000000230.462:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30879 comm="syz.3.11666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f606e5876c9 code=0x7ffc0000 [ 872.781171][ T26] audit: type=1326 audit(2000000230.462:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30879 comm="syz.3.11666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f606e5876c9 code=0x7ffc0000 [ 872.859890][ T26] audit: type=1326 audit(2000000230.462:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30879 comm="syz.3.11666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f606e5876c9 code=0x7ffc0000 [ 872.915088][T30897] netlink: 'syz.2.11674': attribute type 15 has an invalid length. [ 872.947111][T30897] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11674'. [ 872.984273][ T26] audit: type=1326 audit(2000000230.472:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30879 comm="syz.3.11666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f606e5876c9 code=0x7ffc0000 [ 873.092142][ T26] audit: type=1326 audit(2000000230.472:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30879 comm="syz.3.11666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f606e5876c9 code=0x7ffc0000 [ 873.187710][ T26] audit: type=1326 audit(2000000230.472:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30879 comm="syz.3.11666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f606e5876c9 code=0x7ffc0000 [ 873.263863][T30912] fuse: Bad value for 'fd' [ 873.305289][ T26] audit: type=1326 audit(2000000230.472:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30879 comm="syz.3.11666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f606e5876c9 code=0x7ffc0000 [ 873.374759][ T26] audit: type=1326 audit(2000000230.472:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30879 comm="syz.3.11666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f606e5876c9 code=0x7ffc0000 [ 873.437671][ T26] audit: type=1326 audit(2000000230.472:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30879 comm="syz.3.11666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f606e5876c9 code=0x7ffc0000 [ 875.233021][T30969] overlayfs: failed to clone upperpath [ 875.279215][T30971] netlink: 'syz.6.11707': attribute type 4 has an invalid length. [ 875.538879][T30990] 9p: Unknown uid 00000000004294967295 [ 875.666728][T30997] lo speed is unknown, defaulting to 1000 [ 875.757271][T31007] netlink: 84 bytes leftover after parsing attributes in process `syz.4.11725'. [ 875.767450][T31007] netlink: 64 bytes leftover after parsing attributes in process `syz.4.11725'. [ 876.278638][T31033] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 876.392759][T31035] lo speed is unknown, defaulting to 1000 [ 876.711168][T31055] netlink: 68 bytes leftover after parsing attributes in process `syz.1.11749'. [ 876.894384][T31063] netlink: 'syz.1.11752': attribute type 16 has an invalid length. [ 876.937604][T31063] netlink: 64130 bytes leftover after parsing attributes in process `syz.1.11752'. [ 876.943132][T31065] netlink: 28 bytes leftover after parsing attributes in process `syz.6.11753'. [ 877.092316][T31071] device syzkaller0 entered promiscuous mode [ 877.441135][T31092] device  entered promiscuous mode [ 878.046620][T31091] netlink: 'syz.1.11763': attribute type 15 has an invalid length. [ 878.069424][T31091] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11763'. [ 878.370863][T31114] lo speed is unknown, defaulting to 1000 [ 878.609183][T31122] netlink: 'syz.4.11778': attribute type 15 has an invalid length. [ 878.637525][T31122] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11778'. [ 879.819604][T31153] netlink: 'syz.3.11790': attribute type 15 has an invalid length. [ 879.859266][T31153] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11790'. [ 880.041344][T31162] lo speed is unknown, defaulting to 1000 [ 880.422177][T31169] lo speed is unknown, defaulting to 1000 [ 880.477938][T31189] netlink: 'syz.6.11809': attribute type 15 has an invalid length. [ 880.498842][T31189] netlink: 24 bytes leftover after parsing attributes in process `syz.6.11809'. [ 881.274555][T31205] netlink: 92 bytes leftover after parsing attributes in process `syz.4.11817'. [ 881.756491][T31230] lo speed is unknown, defaulting to 1000 [ 881.811039][T31233] netlink: 68 bytes leftover after parsing attributes in process `syz.6.11831'. [ 882.832600][T31287] loop6: detected capacity change from 0 to 1024 [ 882.866014][T31290] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11859'. [ 882.901234][T31287] EXT4-fs (loop6): Ignoring removed nobh option [ 882.932759][T31287] EXT4-fs (loop6): Ignoring removed bh option [ 882.938919][T31287] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 882.993397][T31297] lo speed is unknown, defaulting to 1000 [ 883.020369][T31287] EXT4-fs (loop6): mounted filesystem without journal. Opts: resuid=0x0000000000000000,data_err=abort,barrier=0x0000000000000001,dioread_nolock,grpjquota=,quota,data_err=ignore,grpquota,nobh,user_xattr,bh,minixdf,,errors=continue. Quota mode: writeback. [ 883.831468][T31334] netlink: 72 bytes leftover after parsing attributes in process `syz.3.11878'. [ 883.892817][T31332] lo speed is unknown, defaulting to 1000 [ 884.131217][T31343] netlink: 'syz.2.11882': attribute type 15 has an invalid length. [ 884.140333][T31341] loop6: detected capacity change from 0 to 2048 [ 884.169417][T31343] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11882'. [ 884.241861][T31341] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 884.272204][T31341] ext4 filesystem being mounted at /116/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 885.126023][T31390] lo speed is unknown, defaulting to 1000 [ 885.208920][T31398] fuse: Bad value for 'fd' [ 885.652229][T31418] xt_NFQUEUE: number of total queues is 0 [ 886.387408][T31424] netlink: 'syz.6.11918': attribute type 15 has an invalid length. [ 886.413857][T31424] netlink: 24 bytes leftover after parsing attributes in process `syz.6.11918'. [ 887.071625][T31459] lo speed is unknown, defaulting to 1000 [ 887.337746][T31478] 9pnet: Could not find request transport: 0xffffffffffffffff [ 887.443647][T31486] netlink: 64 bytes leftover after parsing attributes in process `syz.1.11949'. [ 887.781362][T31511] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11961'. [ 887.983604][T31524] lo speed is unknown, defaulting to 1000 [ 888.280435][T31530] lo speed is unknown, defaulting to 1000 [ 888.565440][T31538] lo speed is unknown, defaulting to 1000 [ 888.970502][T31556] netlink: 'syz.3.11983': attribute type 4 has an invalid length. [ 889.574682][T31593] overlayfs: missing 'workdir' [ 890.515907][T31641] netlink: 'syz.6.12021': attribute type 25 has an invalid length. [ 890.589146][T31646] lo speed is unknown, defaulting to 1000 [ 890.620504][T31651] netlink: 'syz.4.12024': attribute type 13 has an invalid length. [ 890.657343][T31651] netlink: 'syz.4.12024': attribute type 17 has an invalid length. [ 891.365617][T31651] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 891.457497][T16052] ip6_tunnel: M xmit: Local address not yet configured! [ 891.471013][ T5017] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 891.493611][T31674] device batadv_slave_1 entered promiscuous mode [ 891.540718][T31673] device batadv_slave_1 left promiscuous mode [ 892.069647][T31709] lo speed is unknown, defaulting to 1000 [ 892.327367][T31729] netlink: 28 bytes leftover after parsing attributes in process `syz.6.12062'. [ 893.033079][T31750] lo speed is unknown, defaulting to 1000 [ 894.701427][T31801] xt_hashlimit: max too large, truncated to 1048576 [ 894.751086][T31806] lo speed is unknown, defaulting to 1000 [ 894.757142][T31801] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 895.066966][T31825] overlayfs: failed to clone lowerpath [ 895.150461][T31828] loop6: detected capacity change from 0 to 128 [ 895.242031][ C1] ip6_tunnel: M xmit: Local address not yet configured! [ 895.398002][T31842] xt_hashlimit: max too large, truncated to 1048576 [ 895.407235][T31842] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 895.425000][T31840] lo speed is unknown, defaulting to 1000 [ 896.178127][T31876] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12127'. [ 897.268972][T31897] lo speed is unknown, defaulting to 1000 [ 898.299960][T31946] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12160'. [ 898.644534][T31967] sch_fq: defrate 9 ignored. [ 898.712710][T31969] netlink: 104 bytes leftover after parsing attributes in process `syz.4.12171'. [ 898.903014][T31980] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12176'. [ 899.593115][T32003] netlink: 128 bytes leftover after parsing attributes in process `syz.3.12187'. [ 899.691691][T32004] lo speed is unknown, defaulting to 1000 [ 899.692900][T32006] netlink: 44 bytes leftover after parsing attributes in process `syz.1.12188'. [ 899.736669][T32006] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12188'. [ 900.735558][T32054] lo speed is unknown, defaulting to 1000 [ 900.770167][T32058] netlink: 'syz.2.12212': attribute type 13 has an invalid length. [ 900.812016][T32058] netlink: 'syz.2.12212': attribute type 17 has an invalid length. [ 900.856869][T32058] rdma_rxe: ignoring netdev event = 30 for lo [ 900.891397][ T26] kauditd_printk_skb: 35 callbacks suppressed [ 900.891410][ T26] audit: type=1326 audit(2000000258.702:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32064 comm="syz.6.12217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce8421c6c9 code=0x7ffc0000 [ 900.992487][ T26] audit: type=1326 audit(2000000258.702:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32064 comm="syz.6.12217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce8421c6c9 code=0x7ffc0000 [ 901.088636][ T26] audit: type=1326 audit(2000000258.702:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32064 comm="syz.6.12217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce8421c6c9 code=0x7ffc0000 [ 901.183285][ T26] audit: type=1326 audit(2000000258.702:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32064 comm="syz.6.12217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce8421c6c9 code=0x7ffc0000 [ 901.268933][ T26] audit: type=1326 audit(2000000258.732:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32064 comm="syz.6.12217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fce8421c6c9 code=0x7ffc0000 [ 901.335815][ T26] audit: type=1326 audit(2000000258.732:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32064 comm="syz.6.12217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce8421c6c9 code=0x7ffc0000 [ 901.400085][ T26] audit: type=1326 audit(2000000258.732:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32064 comm="syz.6.12217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce8421c6c9 code=0x7ffc0000 [ 901.479812][ T26] audit: type=1326 audit(2000000258.742:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32064 comm="syz.6.12217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce8421c6c9 code=0x7ffc0000 [ 901.481514][T32086] netlink: 68 bytes leftover after parsing attributes in process `syz.6.12227'. [ 901.527744][ T26] audit: type=1326 audit(2000000258.742:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32064 comm="syz.6.12217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce8421c6c9 code=0x7ffc0000 [ 901.575523][ T26] audit: type=1326 audit(2000000258.742:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32064 comm="syz.6.12217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fce8421c6c9 code=0x7ffc0000 [ 901.968172][T32058] infiniband syz2: set active [ 901.995496][T32058] 8021q: adding VLAN 0 to HW filter on device bond0 [ 902.004961][T32058] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 902.033475][T32058] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 902.045795][T32058] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 902.056317][T32058] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 902.069596][T32058] net veth1_virt_wifi virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 902.082110][T32058] device veth1_vlan left promiscuous mode [ 902.088677][T32058] device veth0_vlan left promiscuous mode [ 902.095019][T32058] device veth0_vlan entered promiscuous mode [ 902.102375][T32058] device veth1_vlan entered promiscuous mode [ 902.112871][T32058] device veth1_macvtap left promiscuous mode [ 902.119660][T32058] device veth0_macvtap left promiscuous mode [ 902.126645][T32058] device veth0_macvtap entered promiscuous mode [ 902.138176][T32058] device veth1_macvtap entered promiscuous mode [ 902.145581][T32058] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 902.154608][T32058] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 902.163393][T32058] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 902.172417][T32058] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 902.232994][T19399] lo speed is unknown, defaulting to 1000 [ 902.238980][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 902.258012][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 902.288559][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 902.309088][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 902.325785][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 902.341402][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 902.351653][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 902.368413][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 902.377261][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 902.385746][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 902.394640][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 902.403042][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 902.411373][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 902.420186][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 902.428947][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 902.439105][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 902.447575][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 902.455870][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 902.464394][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 902.473328][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 902.481852][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 902.490091][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 902.498619][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): @: link becomes ready [ 902.506306][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 902.514721][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 902.523277][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 902.531347][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 902.539443][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 902.548668][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 902.556814][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 902.564893][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 902.573065][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 902.584546][T32070] lo speed is unknown, defaulting to 1000 [ 902.869048][T32104] lo speed is unknown, defaulting to 1000 [ 902.974475][T32130] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12246'. [ 903.082165][ C1] ip6_tunnel: M xmit: Local address not yet configured! [ 903.262922][T32147] fuse: Unknown parameter '&' [ 903.379368][T32152] lo speed is unknown, defaulting to 1000 [ 904.177193][T32198] lo speed is unknown, defaulting to 1000 [ 904.454824][T32218] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12285'. [ 904.671710][T32233] lo speed is unknown, defaulting to 1000 [ 904.939736][T32243] netlink: 'syz.1.12298': attribute type 13 has an invalid length. [ 905.230313][T32263] overlayfs: missing 'workdir' [ 906.727632][T32286] loop6: detected capacity change from 0 to 256 [ 906.822491][T32289] lo speed is unknown, defaulting to 1000 [ 906.839399][T29850] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 906.879322][T29850] FAT-fs (loop6): Filesystem has been set read-only [ 906.911116][T29850] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 907.997734][T32308] lo speed is unknown, defaulting to 1000 [ 908.516169][T32335] netlink: 32 bytes leftover after parsing attributes in process `syz.2.12340'. [ 908.699626][T32308] chnl_net:caif_netlink_parms(): no params data found [ 908.970342][T32308] bridge0: port 1(bridge_slave_0) entered blocking state [ 909.014661][T32308] bridge0: port 1(bridge_slave_0) entered disabled state [ 909.054086][T32308] device bridge_slave_0 entered promiscuous mode [ 909.089152][T32349] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12345'. [ 909.186045][T32308] bridge0: port 2(bridge_slave_1) entered blocking state [ 909.207501][T32308] bridge0: port 2(bridge_slave_1) entered disabled state [ 909.240499][T32308] device bridge_slave_1 entered promiscuous mode [ 909.316090][T32308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 909.359246][T32308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 909.968206][T11955] Bluetooth: hci0: command 0x0409 tx timeout [ 910.196222][T32308] team0: Port device team_slave_0 added [ 910.233911][T32308] team0: Port device team_slave_1 added [ 910.347232][T32308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 910.363253][T32308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 910.420286][T32405] tipc: Failed to remove unknown binding: 66,1,1/4088848897:860292522/860292524 [ 910.464655][T32405] tipc: Failed to remove unknown binding: 66,1,1/4088848897:860292522/860292524 [ 910.494387][T32308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 910.528421][T32308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 910.703770][T32308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 910.813765][T32308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 911.684716][T32308] device hsr_slave_0 entered promiscuous mode [ 911.713004][T32308] device hsr_slave_1 entered promiscuous mode [ 911.731665][T32308] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 911.772996][T32308] Cannot create hsr debugfs directory [ 911.906542][T32435] netlink: 'syz.2.12381': attribute type 17 has an invalid length. [ 911.930486][T32435] infiniband syz2: set active [ 911.960717][T19395] lo speed is unknown, defaulting to 1000 [ 912.044401][T19396] Bluetooth: hci0: command 0x041b tx timeout [ 912.150067][T32308] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 912.158507][T32445] 9pnet: Insufficient options for proto=fd [ 912.198480][T32308] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 912.224154][T32308] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 912.259955][T32308] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 912.485381][T32308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 912.547406][T32308] 8021q: adding VLAN 0 to HW filter on device team0 [ 912.588015][ T5017] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 912.611235][ T5017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 912.640075][T32469] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 912.662130][ T5017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 912.675104][T32469] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 912.687765][ T5017] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 912.702395][ T5017] bridge0: port 1(bridge_slave_0) entered blocking state [ 912.709493][ T5017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 912.728769][ T5017] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 912.746420][T32474] netlink: 'syz.3.12395': attribute type 13 has an invalid length. [ 912.782342][T32474] netlink: 'syz.3.12395': attribute type 17 has an invalid length. [ 912.812190][T32474] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 912.888678][T32473] ipt_CLUSTERIP: Please specify destination IP [ 912.912903][T32474] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 912.921021][T32474] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 912.964478][T32483] sctp: [Deprecated]: syz.4.12400 (pid 32483) Use of struct sctp_assoc_value in delayed_ack socket option. [ 912.964478][T32483] Use struct sctp_sack_info instead [ 913.088408][ T154] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 913.100014][T32474] 8021q: adding VLAN 0 to HW filter on device bond1 [ 913.148475][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 913.158300][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 913.177824][ T424] bridge0: port 2(bridge_slave_1) entered blocking state [ 913.184940][ T424] bridge0: port 2(bridge_slave_1) entered forwarding state [ 913.192899][T20336] bond1: (slave ip6gretap1): link status up again after 0 ms [ 913.194925][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 913.221226][T20336] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 913.235764][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 913.248385][T20336] bond1: (slave ip6gretap1): link status up again after 0 ms [ 913.258354][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 913.267617][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 913.279558][T32471] lo speed is unknown, defaulting to 1000 [ 913.293723][T20336] bond1: (slave ip6gretap1): link status up again after 0 ms [ 913.323857][ T154] bond1: (slave ip6gretap1): link status up again after 0 ms [ 913.344660][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 913.362855][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 913.382031][ T154] bond1: (slave ip6gretap1): link status up again after 0 ms [ 913.383818][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 913.412068][ T154] bond1: (slave ip6gretap1): link status up again after 0 ms [ 913.425750][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 913.442116][ T154] bond1: (slave ip6gretap1): link status up again after 0 ms [ 913.459949][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 913.472367][ T154] bond1: (slave ip6gretap1): link status up again after 0 ms [ 913.513984][ T4428] bond1: (slave ip6gretap1): link status up again after 0 ms [ 913.520356][ T9] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 913.534139][ T5017] bond1: (slave ip6gretap1): link status up again after 0 ms [ 913.552030][ T4428] bond1: (slave ip6gretap1): link status up again after 0 ms [ 913.581459][T32308] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 913.583057][ T4428] bond1: (slave ip6gretap1): link status up again after 0 ms [ 913.627814][T32308] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 913.640205][ T4428] bond1: (slave ip6gretap1): link status up again after 0 ms [ 913.659324][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 913.671816][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 913.674997][ T4428] bond1: (slave ip6gretap1): link status up again after 0 ms [ 913.698947][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 913.724422][ T4428] bond1: (slave ip6gretap1): link status up again after 0 ms [ 913.725141][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 913.749297][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 913.762388][ T154] bond1: (slave ip6gretap1): link status up again after 0 ms [ 913.765196][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 913.782185][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 913.782184][ T154] bond1: (slave ip6gretap1): link status up again after 0 ms [ 913.805721][ T154] bond1: (slave ip6gretap1): link status up again after 0 ms [ 913.807673][ T9] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 913.858731][ T424] bond1: (slave ip6gretap1): link status up again after 0 ms [ 913.912062][T20336] bond1: (slave ip6gretap1): link status up again after 0 ms [ 913.932122][ T424] bond1: (slave ip6gretap1): link status up again after 0 ms [ 913.972050][ T424] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 913.981581][ T424] bond1: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 914.075311][T32506] netlink: 104 bytes leftover after parsing attributes in process `syz.2.12409'. [ 914.089066][ T424] bond1: active interface up! [ 914.304521][ T9] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 914.632145][ T154] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 914.669720][T19399] Bluetooth: hci0: command 0x040f tx timeout [ 914.699436][T32511] futex_wake_op: syz.2.12411 tries to shift op by 32; fix this program [ 914.789873][ T154] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 914.834752][ T9] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 914.997766][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 915.033378][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 915.070194][T32308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 915.134449][ T154] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 915.304245][ T9] device  left promiscuous mode [ 915.362258][ T4428] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 915.492126][ T4428] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 915.644306][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 915.663061][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 915.710626][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 915.732770][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 915.762686][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 915.770566][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 915.800483][T32308] device veth0_vlan entered promiscuous mode [ 915.821641][T32308] device veth1_vlan entered promiscuous mode [ 915.853226][T20336] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 915.864842][T20336] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 915.905575][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 915.915030][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 915.932598][T32308] device veth0_macvtap entered promiscuous mode [ 915.964433][T32308] device veth1_macvtap entered promiscuous mode [ 916.019279][T32308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 916.037805][T32308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 916.048964][T32308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 916.065792][T32308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 916.078069][T32308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 916.093252][T32308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 916.109680][T32308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 916.122315][T32308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 916.138627][T32308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 916.150576][T32308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 916.167347][T32308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 916.194513][ T4428] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 916.203904][T20336] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 916.226239][T20336] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 916.240776][T20336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 916.250389][T20336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 916.266957][T32308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 916.291559][T32308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 916.302728][T32308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 916.313451][T32308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 916.324623][T32308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 916.334109][T20336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 916.345168][T20336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 916.356840][T32308] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 916.373128][T32308] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 916.388435][T32308] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 916.397288][T32308] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 916.536823][ T424] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 916.578104][ T424] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 916.603588][T20336] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 916.617919][ T5017] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 916.630228][ T5017] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 916.637658][ T4428] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 916.671519][T20336] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 916.682545][T19399] Bluetooth: hci0: command 0x0419 tx timeout [ 917.592780][T32622] lo speed is unknown, defaulting to 1000 [ 918.104436][T20336] net_ratelimit: 11 callbacks suppressed [ 918.104451][T20336] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 918.252114][ T5017] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 918.433094][ T5017] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 918.452012][ C1] ip6_tunnel: M xmit: Local address not yet configured! [ 918.562755][ T154] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 918.609639][T32687] netlink: 'syz.2.12458': attribute type 1 has an invalid length. [ 918.860003][T32693] bond1: (slave bridge0): making interface the new active one [ 918.931763][T32693] bond1: (slave bridge0): Enslaving as an active interface with an up link [ 918.973659][ T4428] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 918.998165][ T9] device hsr_slave_0 left promiscuous mode [ 919.060217][ T9] device hsr_slave_1 left promiscuous mode [ 919.080652][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 919.331504][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 919.603668][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 919.673460][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 919.756844][ T9] device bridge_slave_1 left promiscuous mode [ 919.771796][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 919.802549][ T9] device bridge_slave_0 left promiscuous mode [ 919.823297][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 919.869679][ T9] device veth1_macvtap left promiscuous mode [ 919.880343][ T9] device veth0_macvtap left promiscuous mode [ 919.907813][ T9] device veth1_vlan left promiscuous mode [ 919.929288][ T9] device veth0_vlan left promiscuous mode [ 920.354650][ T9] team0 (unregistering): Port device team_slave_1 removed [ 920.370304][ T9] team0 (unregistering): Port device team_slave_0 removed [ 920.384592][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 920.405222][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 920.486503][ T9] bond0 (unregistering): Released all slaves [ 920.552726][T32695] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12458'. [ 920.563422][T32695] 8021q: adding VLAN 0 to HW filter on device bond1 [ 920.584032][ T4428] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 920.652152][T32726] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12467'. [ 920.713086][ T424] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 920.833345][ T424] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 920.973079][T20336] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 921.082398][ T4428] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 921.356728][ T305] netlink: 140 bytes leftover after parsing attributes in process `syz.2.12484'. [ 921.377287][ T310] 9pnet: Insufficient options for proto=fd [ 922.645553][ T349] fuse: Invalid rootmode [ 923.158632][ T154] net_ratelimit: 15 callbacks suppressed [ 923.158649][ T154] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 923.327241][T20336] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 923.404258][ T402] kernel read not supported for file /cpuacct.usage_percpu (pid: 402 comm: syz.2.12521) [ 923.442169][ T154] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 923.449948][ T26] kauditd_printk_skb: 85 callbacks suppressed [ 923.449961][ T26] audit: type=1800 audit(2000000281.262:1059): pid=402 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.12521" name="cpuacct.usage_percpu" dev="mqueue" ino=148931 res=0 errno=0 [ 923.562087][T20336] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 923.593738][ T415] netlink: 'syz.4.12526': attribute type 10 has an invalid length. [ 923.687450][ T424] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 923.725290][ T426] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12530'. [ 923.764145][ T428] netlink: 8 bytes leftover after parsing attributes in process `syz.7.12531'. [ 923.796306][ T428] netlink: 12 bytes leftover after parsing attributes in process `syz.7.12531'. [ 923.813000][T20336] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 923.832546][ T428] netlink: 8 bytes leftover after parsing attributes in process `syz.7.12531'. [ 923.875279][ T428] netlink: 8 bytes leftover after parsing attributes in process `syz.7.12531'. [ 923.925021][ T5017] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 924.042435][ T424] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 924.153077][ T424] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 924.289636][T20336] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 924.363832][ T471] device batadv_slave_1 entered promiscuous mode [ 924.411578][ T475] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12550'. [ 924.430477][ T469] device batadv_slave_1 left promiscuous mode [ 924.862332][ T507] netlink: 'syz.1.12561': attribute type 10 has an invalid length. [ 925.318600][ T535] kernel read not supported for file /cpuacct.usage_percpu (pid: 535 comm: syz.1.12570) [ 925.355019][ T26] audit: type=1800 audit(2016777728.153:1060): pid=535 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.12570" name="cpuacct.usage_percpu" dev="mqueue" ino=149914 res=0 errno=0 [ 1030.231878][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1030.238858][ C1] rcu: 0-...!: (0 ticks this GP) idle=4b3/1/0x4000000000000000 softirq=73217/73217 fqs=0 [ 1030.250376][ C1] (detected by 1, t=10502 jiffies, g=98341, q=164) [ 1030.256967][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1030.262167][ C0] NMI backtrace for cpu 0 [ 1030.262176][ C0] CPU: 0 PID: 5017 Comm: kworker/u4:10 Not tainted syzkaller #0 [ 1030.262191][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1030.262207][ C0] Workqueue: bat_events batadv_nc_worker [ 1030.262249][ C0] RIP: 0010:kasan_check_range+0x4f/0x290 [ 1030.262266][ C0] Code: f8 ff ff 01 00 0f 82 43 02 00 00 49 bf 01 00 00 00 00 fc ff df 49 89 fb 49 c1 eb 03 49 b8 00 00 00 00 00 fc ff df 4f 8d 0c 03 <48> 8d 5c 37 ff 48 c1 eb 03 4e 8d 14 3b 4d 89 d6 4d 29 ce 49 83 fe [ 1030.262278][ C0] RSP: 0018:ffffc90000007860 EFLAGS: 00000802 [ 1030.262289][ C0] RAX: 0000000000000101 RBX: ffff88802af00000 RCX: ffffffff815cb124 [ 1030.262299][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff8ffbe288 [ 1030.262308][ C0] RBP: 0000000000000008 R08: dffffc0000000000 R09: fffffbfff1ff7c51 [ 1030.262317][ C0] R10: fffffbfff1ff7c52 R11: 1ffffffff1ff7c51 R12: 0000000000000100 [ 1030.262327][ C0] R13: dffffc0000000000 R14: ffff88802af00b40 R15: dffffc0000000001 [ 1030.262337][ C0] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 1030.262348][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1030.262358][ C0] CR2: 0000001b32616ff8 CR3: 000000007ec97000 CR4: 00000000003506f0 [ 1030.262370][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1030.262378][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1030.262387][ C0] Call Trace: [ 1030.262393][ C0] [ 1030.262403][ C0] mark_lock+0x94/0x320 [ 1030.262421][ C0] __lock_acquire+0xd5a/0x7c60 [ 1030.262442][ C0] ? mark_lock+0x94/0x320 [ 1030.262457][ C0] ? __lock_acquire+0x13ad/0x7c60 [ 1030.262471][ C0] ? verify_lock_unused+0x140/0x140 [ 1030.262486][ C0] ? verify_lock_unused+0x140/0x140 [ 1030.262499][ C0] ? mark_lock+0x94/0x320 [ 1030.262516][ C0] ? __pv_queued_spin_lock_slowpath+0x7e6/0x9c0 [ 1030.262533][ C0] lock_acquire+0x197/0x3f0 [ 1030.262546][ C0] ? advance_sched+0x47/0x940 [ 1030.262563][ C0] ? __hrtimer_run_queues+0x441/0xc40 [ 1030.262578][ C0] ? read_lock_is_recursive+0x10/0x10 [ 1030.262593][ C0] ? __lock_acquire+0x7c60/0x7c60 [ 1030.262607][ C0] ? __rwlock_init+0x140/0x140 [ 1030.262622][ C0] _raw_spin_lock+0x2a/0x40 [ 1030.262635][ C0] ? advance_sched+0x47/0x940 [ 1030.262647][ C0] advance_sched+0x47/0x940 [ 1030.262661][ C0] ? _raw_spin_unlock+0x40/0x40 [ 1030.262677][ C0] __hrtimer_run_queues+0x53d/0xc40 [ 1030.262694][ C0] ? taprio_free_sched_cb+0x190/0x190 [ 1030.262711][ C0] ? hrtimer_interrupt+0x8d0/0x8d0 [ 1030.262725][ C0] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 1030.262741][ C0] hrtimer_interrupt+0x3bb/0x8d0 [ 1030.262764][ C0] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 1030.262779][ C0] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 1030.262794][ C0] [ 1030.262798][ C0] [ 1030.262802][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1030.262817][ C0] RIP: 0010:lock_acquire+0x142/0x3f0 [ 1030.262831][ C0] Code: 4c 89 f0 48 c1 e8 03 42 0f b6 04 38 84 c0 0f 85 f2 01 00 00 41 83 3e 00 0f 85 00 01 00 00 48 c7 84 24 a0 00 00 00 00 00 00 00 <9c> 8f 84 24 a0 00 00 00 4c 8b b4 24 a0 00 00 00 fa 48 c7 c7 60 2a [ 1030.262842][ C0] RSP: 0018:ffffc9000343faa0 EFLAGS: 00000246 [ 1030.262853][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: e8c55d7579c2e000 [ 1030.262862][ C0] RDX: 0000000000000000 RSI: ffffffff8a59e560 RDI: ffffffff8a59e520 [ 1030.262871][ C0] RBP: ffffc9000343fbc0 R08: dffffc0000000000 R09: fffffbfff1ad33a6 [ 1030.262880][ C0] R10: fffffbfff1ad33a6 R11: 1ffffffff1ad33a5 R12: ffffffff8c11c760 [ 1030.262890][ C0] R13: 1ffff92000687f60 R14: ffff88802af00aec R15: dffffc0000000000 [ 1030.262908][ C0] ? rcu_lock_release+0x5/0x20 [ 1030.262921][ C0] ? read_lock_is_recursive+0x10/0x10 [ 1030.262935][ C0] ? __lock_acquire+0x7c60/0x7c60 [ 1030.262950][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 1030.262967][ C0] rcu_lock_acquire+0x2a/0x30 [ 1030.262979][ C0] ? rcu_lock_acquire+0x5/0x30 [ 1030.262990][ C0] batadv_nc_worker+0xc9/0x5c0 [ 1030.263004][ C0] process_one_work+0x863/0x1000 [ 1030.263024][ C0] ? worker_detach_from_pool+0x240/0x240 [ 1030.263037][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 1030.263051][ C0] ? _raw_spin_lock_irq+0xab/0xe0 [ 1030.263063][ C0] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 1030.263076][ C0] ? wq_worker_running+0x97/0x170 [ 1030.263089][ C0] worker_thread+0xaa8/0x12a0 [ 1030.263104][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 1030.263120][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 1030.263137][ C0] kthread+0x436/0x520 [ 1030.263149][ C0] ? rcu_lock_release+0x20/0x20 [ 1030.263161][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1030.263173][ C0] ret_from_fork+0x1f/0x30 [ 1030.263193][ C0] [ 1030.264161][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10501 jiffies! g98341 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 1030.731081][ C1] rcu: Possible timer handling issue on cpu=0 timer-softirq=50477 [ 1030.738957][ C1] rcu: rcu_preempt kthread starved for 10502 jiffies! g98341 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 1030.750313][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1030.760266][ C1] rcu: RCU grace-period kthread stack dump: [ 1030.766138][ C1] task:rcu_preempt state:I stack:27976 pid: 15 ppid: 2 flags:0x00004000 [ 1030.775339][ C1] Call Trace: [ 1030.778607][ C1] [ 1030.781533][ C1] __schedule+0x11bb/0x4390 [ 1030.786035][ C1] ? _raw_spin_lock_irqsave+0x7f/0xf0 [ 1030.791405][ C1] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 1030.797300][ C1] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 1030.803184][ C1] ? _raw_spin_unlock+0x40/0x40 [ 1030.808023][ C1] ? rcu_is_watching+0x11/0xa0 [ 1030.812780][ C1] ? release_firmware_map_entry+0x190/0x190 [ 1030.818683][ C1] schedule+0x11b/0x1e0 [ 1030.822834][ C1] schedule_timeout+0x15c/0x280 [ 1030.827675][ C1] ? console_conditional_schedule+0x40/0x40 [ 1030.833561][ C1] ? update_process_times+0x200/0x200 [ 1030.838929][ C1] ? prepare_to_swait_event+0x331/0x350 [ 1030.844476][ C1] rcu_gp_fqs_loop+0x29e/0x11b0 [ 1030.849321][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 1030.854516][ C1] ? rcu_gp_init+0xd58/0x10e0 [ 1030.859186][ C1] ? rcu_gp_init+0x10e0/0x10e0 [ 1030.863943][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1030.869130][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 1030.874322][ C1] rcu_gp_kthread+0x98/0x350 [ 1030.878906][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 1030.884006][ C1] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 1030.889889][ C1] ? __kthread_parkme+0x157/0x1b0 [ 1030.894908][ C1] kthread+0x436/0x520 [ 1030.898965][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 1030.904064][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1030.908651][ C1] ret_from_fork+0x1f/0x30 [ 1030.913074][ C1] [ 1030.916080][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1030.922387][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1030.927583][ C0] NMI backtrace for cpu 0 [ 1030.927590][ C0] CPU: 0 PID: 5017 Comm: kworker/u4:10 Not tainted syzkaller #0 [ 1030.927605][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1030.927614][ C0] Workqueue: bat_events batadv_nc_worker [ 1030.927630][ C0] RIP: 0010:debug_object_activate+0x3a9/0x480 [ 1030.927648][ C0] Code: 74 1b 48 89 df 44 89 ee ff d1 89 c1 b8 ea ff ff ff 84 c9 74 08 ff 05 d2 a5 8a 09 31 c0 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f <5d> c3 41 ff c4 44 89 25 cb bc 5d 12 48 c7 c7 80 ed 59 8a 48 89 de [ 1030.927659][ C0] RSP: 0018:ffffc90000007cd8 EFLAGS: 00000082 [ 1030.927670][ C0] RAX: 0000000000000000 RBX: ffff888022054b40 RCX: ffff88802af00000 [ 1030.927680][ C0] RDX: 0000000000010000 RSI: ffffffff8a0caf20 RDI: ffff888022054b40 [ 1030.927689][ C0] RBP: 0000000000000000 R08: 0000000000000004 R09: 0000000000000003 [ 1030.927697][ C0] R10: fffff52000000f80 R11: 1ffff92000000f80 R12: dffffc0000000000 [ 1030.927707][ C0] R13: 1ffff1101720546a R14: ffff8880b902a340 R15: dffffc0000000000 [ 1030.927717][ C0] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 1030.927729][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1030.927740][ C0] CR2: 0000001b32616ff8 CR3: 000000007ec97000 CR4: 00000000003506f0 [ 1030.927752][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1030.927760][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1030.927769][ C0] Call Trace: [ 1030.927774][ C0] [ 1030.927781][ C0] enqueue_hrtimer+0x30/0x370 [ 1030.927798][ C0] __hrtimer_run_queues+0x65a/0xc40 [ 1030.927816][ C0] ? taprio_free_sched_cb+0x190/0x190 [ 1030.927837][ C0] ? hrtimer_interrupt+0x8d0/0x8d0 [ 1030.927851][ C0] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 1030.927867][ C0] hrtimer_interrupt+0x3bb/0x8d0 [ 1030.927893][ C0] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 1030.927907][ C0] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 1030.927923][ C0] [ 1030.927926][ C0] [ 1030.927931][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1030.927946][ C0] RIP: 0010:lock_acquire+0x142/0x3f0 [ 1030.927961][ C0] Code: 4c 89 f0 48 c1 e8 03 42 0f b6 04 38 84 c0 0f 85 f2 01 00 00 41 83 3e 00 0f 85 00 01 00 00 48 c7 84 24 a0 00 00 00 00 00 00 00 <9c> 8f 84 24 a0 00 00 00 4c 8b b4 24 a0 00 00 00 fa 48 c7 c7 60 2a [ 1030.927972][ C0] RSP: 0018:ffffc9000343faa0 EFLAGS: 00000246 [ 1030.927983][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: e8c55d7579c2e000 [ 1030.927991][ C0] RDX: 0000000000000000 RSI: ffffffff8a59e560 RDI: ffffffff8a59e520 [ 1030.928000][ C0] RBP: ffffc9000343fbc0 R08: dffffc0000000000 R09: fffffbfff1ad33a6 [ 1030.928010][ C0] R10: fffffbfff1ad33a6 R11: 1ffffffff1ad33a5 R12: ffffffff8c11c760 [ 1030.928020][ C0] R13: 1ffff92000687f60 R14: ffff88802af00aec R15: dffffc0000000000 [ 1030.928041][ C0] ? rcu_lock_release+0x5/0x20 [ 1030.928054][ C0] ? read_lock_is_recursive+0x10/0x10 [ 1030.928069][ C0] ? __lock_acquire+0x7c60/0x7c60 [ 1030.928084][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 1030.928102][ C0] rcu_lock_acquire+0x2a/0x30 [ 1030.928114][ C0] ? rcu_lock_acquire+0x5/0x30 [ 1030.928125][ C0] batadv_nc_worker+0xc9/0x5c0 [ 1030.928140][ C0] process_one_work+0x863/0x1000 [ 1030.928167][ C0] ? worker_detach_from_pool+0x240/0x240 [ 1030.928180][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 1030.928195][ C0] ? _raw_spin_lock_irq+0xab/0xe0 [ 1030.928207][ C0] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 1030.928221][ C0] ? wq_worker_running+0x97/0x170 [ 1030.928234][ C0] worker_thread+0xaa8/0x12a0 [ 1030.928248][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 1030.928266][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 1030.928284][ C0] kthread+0x436/0x520 [ 1030.928295][ C0] ? rcu_lock_release+0x20/0x20 [ 1030.928307][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1030.928320][ C0] ret_from_fork+0x1f/0x30 [ 1030.928340][ C0]