last executing test programs: 13m8.04989125s ago: executing program 0 (id=49): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x16, 0x0, 0x8400, 0x1, 0x0, 0x1, 0x1}, 0x50) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000500)={r3, 0x0, 0x20000000}, 0x20) 13m6.138380628s ago: executing program 0 (id=52): ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890b, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) 13m1.154739081s ago: executing program 0 (id=68): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x58) sendto$inet(0xffffffffffffffff, &(0x7f0000000300)="ab", 0x1, 0x0, 0x0, 0x0) unshare(0x20000400) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@typedef={0x7}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x2d}, 0x12) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r1, 0x58, &(0x7f00000002c0)}, 0x10) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x0, 0x6}) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, &(0x7f0000000280)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELOBJ={0xe0, 0x14, 0xa, 0x101, 0x0, 0x0, {0x6, 0x0, 0x2}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0xbe, 0x8, "9ad4914ddfadb9fd40619747962e1ce61ee6d8e8ce0cdb4da6a72f77ebd2a6061ec7e1aa52dc8f53a1eceec0dbd8947e1d33fdac86c5225432e56506b722ae442adbfb1cc99d7a74449640ceeba2d5d4cadab3b592b537af3a2f0b88fbf48d09d1ebe435246e3c69aa52cd70c19add8fd45e7d1f5c8203680deb8c1e88b787934bd290446f82e22d085b0c07815ec63cd1f277d7e6581d5c7a1637ecb4f607cd5eb47658da497b848525daa6a4ffe7bd1737d4fcf84eef622df0"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x108}, 0x1, 0x0, 0x0, 0x1001}, 0x4) accept4(r0, &(0x7f0000000300)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000000380)=0x80, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="53062172b14730d1384d29c97f10ca31b0a027c2a30c166f5d55fc2e9e1f0fb0446d28b4b4d1df9a309ecdfbec6aeb62516958ec82ce4d521df07166c250c3d323c35b2b8efd5704d9b89a2dd4b0db885d5654bb364c30f2f5853a175f1d06e82c3667e2dd825f6ec016cc2551cf081d719fc87e40afb4b4b4ded486c5152ca2bc7f63c901c15bb2b55e35940ec62ff7", 0x90) 13m0.686921168s ago: executing program 0 (id=71): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) 13m0.465257661s ago: executing program 0 (id=73): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') unshare(0x24020400) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) readv(r0, &(0x7f0000000080)=[{&(0x7f0000002600)=""/46, 0x2e}], 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 12m59.125795431s ago: executing program 0 (id=78): r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)={0xa0000001}) epoll_wait(r4, &(0x7f0000000340)=[{}], 0x1, 0x1000) 12m44.045005312s ago: executing program 32 (id=78): r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)={0xa0000001}) epoll_wait(r4, &(0x7f0000000340)=[{}], 0x1, 0x1000) 10.014982841s ago: executing program 4 (id=2602): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x6c}}, 0x0) write$cgroup_int(r0, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xb, 0x7, 0x2, 0x4, 0x200d, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x20}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x7800, 0x0, 0x3) 9.173263778s ago: executing program 1 (id=2611): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fstat(r1, 0x0) setreuid(0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000000) r3 = syz_open_dev$video4linux(&(0x7f0000000340), 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000080)={0x0, 0x100, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x980900}}) 8.166365179s ago: executing program 4 (id=2613): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x117, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) r2 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114df, 0x0, 0x1, 0x89}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) io_uring_enter(r2, 0x3518, 0xaddf, 0x2, 0x0, 0x0) 8.165381169s ago: executing program 3 (id=2615): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20}, {0x4}, {0xc}, {0x61}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000fbdbdf254400000008000300", @ANYRES32=r3, @ANYBLOB="1c00238006001900040000"], 0x38}, 0x1, 0x0, 0x0, 0x24000801}, 0x4000) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000002280)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002240)={&(0x7f0000000380)={0x34, r2, 0x4, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x10001, 0x2e}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x60}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4004890) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x1, 0x0, 0x0, 0x0, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3, 0x8000}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x4, 0x0, 0x8000000}, {}, {0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8000000}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x4000000, 0x2, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x724a969d}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {}, {}, {0x80}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0xe, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x3}, {0x0, 0x0, 0x0, 0x8510}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, {0x0, 0x0, 0x200}, {}, {}, {0x5}, {}, {}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x9}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0xfffffffe}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x2, 0x0, 0x20000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x0, 0x1, 0x3c}, {}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x2004}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x8000}, {0x0, 0x0, 0x10000}, {0x0, 0x80000000, 0x0, 0x7fff800}], [{}, {}, {}, {}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x5}, {0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x4}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f0000000240)={0x1, 0x0, 0x1000, 0x5c, &(0x7f00000000c0)="11005d2a39657fba0672a1adfb881c023772c1247ff4e2e42f1d185e1c6ed982d6c6d408229000129b3816310efc60c27b2c9b39d159607f71bce0d467a30d104167822ac1dc3a26b467f91f714725f1070c010a86e4d37946e888ff", 0xfb0, 0x0, &(0x7f0000001240)="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"}) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x400, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x40, 0x0, 0xffffffffffffffff}, 0x40000}}, 0xb8}}, 0xc844) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {}, {0x0, 0x0, 0x0, 0xfffffffffffffffe}}}, 0xb8}}, 0x0) 8.053821591s ago: executing program 1 (id=2616): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$erofs(&(0x7f00000000c0), &(0x7f0000000140)='./bus\x00', 0x0, &(0x7f0000000080)=ANY=[], 0xfd, 0x1fa, &(0x7f0000000380)="$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") 7.908517445s ago: executing program 4 (id=2617): mount$9p_fd(0x0, 0x0, 0x0, 0x200000, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r0, 0x0) epoll_create1(0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setfsuid(0x0) prlimit64(0x0, 0xe, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_usbip_server_init(0x3) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 7.908368245s ago: executing program 2 (id=2618): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001340)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() chdir(&(0x7f0000000080)='./file0\x00') 7.464397704s ago: executing program 3 (id=2619): r0 = gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 5.24187556s ago: executing program 2 (id=2620): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0xc}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7b}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r3}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 4.934519687s ago: executing program 2 (id=2621): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6(0xa, 0x2, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x2008440, &(0x7f0000000300)='trans=rdma,') 4.010929676s ago: executing program 1 (id=2622): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r4 = dup(r3) read$FUSE(r4, 0x0, 0x0) sendfile(r3, r4, 0x0, 0x80006) 4.009273636s ago: executing program 3 (id=2623): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001240)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x1b0, 0xc8, 0x8, 0x0, 0x5803, 0x310, 0x2e8, 0x2e8, 0x310, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x190, 0x1b0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67442c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1, 0x2}}, @common=@inet=@socket1={{0x28}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @mcast2, [], [], 'macvtap0\x00', 'syzkaller1\x00'}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) 3.786387491s ago: executing program 1 (id=2624): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_mount_image$hfsplus(&(0x7f0000007340), &(0x7f0000000000)='./file2\x00', 0x1600008, &(0x7f0000000100)={[{@nodecompose}, {}, {@umask={'umask', 0x3d, 0x3}}, {@uid}, {@nobarrier}, {@type={'type', 0x3d, "05f2875e"}}, {@type={'type', 0x3d, "21f205c1"}}]}, 0x3, 0x637, &(0x7f0000001480)="$eJzs3UtsG2kdAPD/OI4TB9TN7qa7Ba1EtJUWRESbh7IQLpSHUA4rtFoOnKPWbay6aZW4KK0QCi9x4MKh4lwOuXFC6j1SOcMF9ZpjJVAvPaDcjGY8dpy386qd7e8Xjb/v8zfzzX/+9jzsyJoA3lrzE1HciCTmJz5bTdub6zO1zfWZoby7FhFpvRCRNLIikqWI5Hmz+0b68LX0yXz+5KD1PKnOffHi9ebLZqvYWjgppbXhg5c7SnPBtXyK8YgYyMu9Brsddcd4Nw8cbz///dP+QTYDTbf5aitx0GuNPdaOs/iJ91ugfyTN8+YeoxEj2Rm6eR0Q+dGh8GajO3vHOsoBAADABfXOVmytNRqNXscBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF0l+//8knwqt+ngkrfv/lzpmL/Uw1DOx0esAAAAAAAAAAOBEGgOdrW9sxVasxqV2b5L9z//jrDGWPX4lHsZKVGI5rsVqLEQ96rEcUxEx2jFQaXWhXl+e6mLJ6X2XnD7XjQYAAAAAAACAL7vfxvz2//8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKAfJBEDzSKbxlr10SgUI2I4IkrpfGsR/2rVL7KNXgcAAAAAb8A7W7EVq3Gp1W4k2Wf+D7LP/cPxMJaiHtWoRy0qcSv7LqD5qb+wuT5T21yfuZdOe8f9y/8amS7DyEaM5ncP+6/5SjZHOW5HNXvmWtyM+1Erd45ypRXP/nH95lU69g9yXUZ2Ky/TLf9zXvaH0Swjg+2MTOaxpXl89/BM/PDVSdc0nq5pKgrtb37GziHnI3mZ7Cp7b3fOp6OQ5Tv1weGZiPjms7/9YrG2dHfx9spE/2zSCTUz0Wg0MzGUtVqZ+PCtysRktu2X2+35+Gn8PCZiPD6P5ajGL2Mh6lGJ8fhJVlvI38/p4+iuTBV2Dn1jR+vzoyIp5a9L8yh6vJg+zpa9FNX4WdyPW1GJT7O/6ZiK78ZszMZcxyt8uYu9vnC8vf7qt/JKekj/Y172hzSv73bktfOYO5r1dT6znaX3zv7YWPx6XknX8buI+PEZbufp7M5EepZ49tVm3/uHZ+Kv2XXCSm3p7vLiwoMu1/dJXqb70R/66iyRvl/eS1+srLXz3ZH2vb9v31TWN9buK+zpu9zuO2pPLeXXcHtHms76Pty3bybru9LRt+d6q309BEAfG/n2SKn8n/I/y0/Lvy8vlj8b/tHQ94Y+KsXgPwa/X5wc+KTwUfL3eBq/3v78DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnNzKo8d3F2q1yvKRlSS7+X9EVzN3VFq3czp85iSK2Y18jjOySq1WGY6+CONYldq/IzqeSXodTz9Uhvrtzd/b4xJw/q7X7z24vvLo8Xeq9xbuVO5UlgZnZ+cm52Y/nbl+u1obiPSxMtnrKIHzsH3S73UkAAAAAAAAAAAAQLcO/xnAYD7X6X5O0ONNBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC64+YkobkQSU5PXJtP25vpMLZ1a9e05ixFRiIjkVxHJ84gb0ZxitGO45KD1PKnOffHi9ebL7bGKrfkLhy3XnbV8ivGIGMjLsxrv5qnHS9pbmCbsaul0wcGZ+X8AAAD///vWCd4=") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bca) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000001900)=@raw={'raw\x00', 0x8, 0x3, 0x450, 0x0, 0x1acc02, 0x148, 0x328, 0x10, 0x3b8, 0x2a8, 0x2a8, 0x3b8, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast1, @loopback, 0xff, 0xffffff00, 'veth0_virt_wifi\x00', 'netdevsim0\x00', {}, {}, 0x1}, 0x40000, 0x2c8, 0x328, 0x0, {0x0, 0x5803}, [@common=@icmp={{0x258}, {0xd, "dd1c"}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @fd}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x2, 0x2, 0x4, 0x0, 0x7], 0x11, 0x2}, {0x1, [0x3, 0xb, 0x2, 0x7, 0x3, 0x4], 0x2, 0x4}}}}, {{@ip={@remote, @multicast2, 0xffffff00, 0x0, 'virt_wifi0\x00', 'caif0\x00', {}, {0xff}, 0xd1b6c305b1e83769, 0x3, 0x2}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) 2.151622845s ago: executing program 2 (id=2625): syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000c80)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[], 0x1, 0xc4d, &(0x7f0000001b40)="$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") socket$packet(0x11, 0x3, 0x300) r0 = socket$inet(0x2, 0x801, 0x0) sendto$inet(r0, &(0x7f00000001c0), 0xfffffffffffffe58, 0x2000c094, 0x0, 0xffffffe6) pipe2(&(0x7f0000000100), 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') preadv(r1, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/44, 0x2c}], 0x1, 0x0, 0x0) writev(r1, &(0x7f00000003c0), 0x100000000000022d) r2 = inotify_init() inotify_add_watch(r2, 0x0, 0x400017e) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000000104050000000000000000000a00000006000640"], 0x3c}}, 0x80) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 2.139181225s ago: executing program 1 (id=2626): open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x4b}, 0x48) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0xa}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000500)="7c003307000000000008000081001a", 0x0, 0x469, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) fdatasync(r2) personality(0x5000007) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock2(&(0x7f0000072000/0x4000)=nil, 0x4000, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2.085507527s ago: executing program 4 (id=2627): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r3, 0x1, 0x1}, 0x48) open$dir(0x0, 0x40040, 0x13) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xd, 0x4, 0x4, 0xa8, 0x0, r4, 0x0, '\x00', 0x0, r3, 0x0, 0x5}, 0x48) 1.762361833s ago: executing program 2 (id=2628): unshare(0x20000000) gettid() prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) tgkill(0x0, 0x0, 0x27) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x372, &(0x7f0000000500)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x18) link(0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b610aa9ba11b47d4f94c439e055cdbb2b12c983885c93ea4ab4ca1e02d831ae162ee104"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0xfffffffc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xd}, {0xe, 0x10}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x408, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) 1.022473429s ago: executing program 3 (id=2629): socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r1], 0x50}}, 0x0) socket$alg(0x26, 0x5, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='freezer.parent_freezing\x00', 0x0, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newlink={0x50, 0x10, 0x421, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x60e1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0x400}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x50}}, 0x2) 1.021764859s ago: executing program 4 (id=2630): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f0000000000)=""/74, 0x328000, 0x800}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) 759.290304ms ago: executing program 3 (id=2631): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x39383ddd, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x8801) 706.958335ms ago: executing program 2 (id=2632): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0xfdef}], 0x1, 0x0, 0x0, 0x800300}, 0x20000801) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(r2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='contention_end\x00', r5}, 0x10) recvmsg(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x1) 586.514998ms ago: executing program 3 (id=2633): r0 = io_uring_setup(0xd1b, &(0x7f0000000300)={0x0, 0xa06c, 0x0, 0x5, 0x28b}) io_uring_register$IORING_REGISTER_FILES(r0, 0x20, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = eventfd(0x5) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000100)={0x1, 0x80a0000, 0xa, r3, 0x3}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)={0x30, r4, 0x1, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TX_RATES={0x14, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x10, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x6, 0x2, [{0x5}, {0x5, 0x7}]}, @NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r6, 0x0, 0x6, &(0x7f0000000040)=0xf, 0x4) sendto$inet(r6, &(0x7f0000000000)="f461c5bbd7000083", 0x8, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r6, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x8005}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/72, 0x48}, {&(0x7f00000003c0)=""/135, 0x87}], 0x2}, 0x9}], 0x2, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="6000000002060502000000000000000000000000140007800800114000000000050015000600000005000100060000e0050005000200000005000400000000000900020073797a310000000011000300686173683a69702c706f7274"], 0x60}}, 0x0) 380.390072ms ago: executing program 1 (id=2634): openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000600)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) socket(0x840000000002, 0x3, 0xff) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) add_key(0x0, &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') 0s ago: executing program 4 (id=2635): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x4) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r3, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r3], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r5 = socket(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}, {0x5, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x79}}, 0x800) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001540)=@newtfilter={0x68, 0x28, 0xd27, 0x1004001, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x2, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_sample={0x30, 0x21d, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x8810}, 0x400c8b4) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x24}}, 0x10) kernel console output (not intermixed with test programs): tion interval = 5 seconds, CP frequency < 30 seconds [ 220.707070][ T7778] loop3: detected capacity change from 0 to 4096 [ 220.749990][ T7778] EXT4-fs (loop3): Test dummy encryption mode enabled [ 220.847799][ T7778] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 221.053440][ T7778] System zones: 0-5 [ 221.248195][ T7778] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.906157][ T7778] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 223.364869][ T7778] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 223.393963][ T28] audit: type=1800 audit(1752130628.122:72): pid=7778 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.516" name="file1" dev="loop3" ino=19 res=0 errno=0 [ 223.425273][ T7816] bond0: (slave syz_tun): Releasing backup interface [ 223.461033][ T7816] bond0: (slave dummy0): Releasing backup interface [ 223.488660][ T7816] veth0_to_bond: left allmulticast mode [ 223.494402][ T7816] veth0_to_bond: left promiscuous mode [ 223.504405][ T7816] bridge2: port 2(veth0_to_bond) entered disabled state [ 223.527124][ T7816] bond0: (slave bond_slave_0): Releasing backup interface [ 223.543801][ T7816] bond0: (slave bond_slave_1): Releasing backup interface [ 223.591030][ T7816] team0: Port device team_slave_0 removed [ 223.611576][ T7816] team0: Port device team_slave_1 removed [ 223.618990][ T7816] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 223.627008][ T7816] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 223.634626][ T7816] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 223.653797][ T7816] veth3: left allmulticast mode [ 223.658823][ T7816] veth3: left promiscuous mode [ 223.664171][ T7816] bridge2: port 1(veth3) entered disabled state [ 223.707357][ T5929] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 223.887349][ T5929] usb 4-1: Using ep0 maxpacket: 16 [ 223.894231][ T5929] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 223.904413][ T5929] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 223.915430][ T5929] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 223.924567][ T5929] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.932624][ T5929] usb 4-1: Product: syz [ 223.936802][ T5929] usb 4-1: Manufacturer: syz [ 223.941428][ T5929] usb 4-1: SerialNumber: syz [ 224.160457][ T5929] usb 4-1: 0:2 : does not exist [ 224.178820][ T5929] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 224.209827][ T5929] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 224.464539][ T5929] usb 4-1: USB disconnect, device number 3 [ 224.915928][ T5798] udevd[5798]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 225.303396][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.625537][ T7850] bond1: (slave gretap1): Releasing active interface [ 229.218175][ T7861] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 230.325067][ T8] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 231.087280][ T7867] ceph: No mds server is up or the cluster is laggy [ 231.299313][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.619911][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 231.659662][ T8] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 231.679585][ T8] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 231.703853][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.748929][ T8] usb 4-1: config 0 descriptor?? [ 231.814044][ T7882] netlink: 56 bytes leftover after parsing attributes in process `syz.4.546'. [ 231.830682][ T7882] netlink: 12 bytes leftover after parsing attributes in process `syz.4.546'. [ 231.856353][ T7882] netlink: 31 bytes leftover after parsing attributes in process `syz.4.546'. [ 231.874893][ T7882] netlink: 'syz.4.546': attribute type 3 has an invalid length. [ 231.886539][ T7882] netlink: 'syz.4.546': attribute type 2 has an invalid length. [ 231.898987][ T7882] netlink: 31 bytes leftover after parsing attributes in process `syz.4.546'. [ 232.135671][ T7889] netlink: 4 bytes leftover after parsing attributes in process `syz.2.540'. [ 232.324176][ T8] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 232.339749][ T8] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 233.211787][ T7901] loop3: detected capacity change from 0 to 256 [ 234.673536][ T7901] FAT-fs (loop3): bogus sectors per cluster 255 [ 234.777111][ T7901] FAT-fs (loop3): Can't find a valid FAT filesystem [ 236.427834][ T7921] loop3: detected capacity change from 0 to 4096 [ 236.462393][ T7922] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 236.816647][ T7929] netlink: 'syz.1.548': attribute type 13 has an invalid length. [ 236.841160][ T7929] netlink: 'syz.1.548': attribute type 17 has an invalid length. [ 236.972437][ T7929] syz_tun: left promiscuous mode [ 237.070314][ T5929] usb 4-1: USB disconnect, device number 4 [ 237.079947][ T7929] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 237.205520][ T5800] Bluetooth: hci2: command 0x0406 tx timeout [ 242.417375][ T5800] Bluetooth: hci1: command 0x0406 tx timeout [ 244.068180][ T8017] loop3: detected capacity change from 0 to 256 [ 244.231634][ T8017] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 244.290688][ T8017] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 244.506783][ T8017] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 247.061964][ T8047] binder_alloc: 8046: pid 8046 spamming oneway? 2 buffers allocated for a total size of 5120 [ 248.239552][ T8029] loop3: detected capacity change from 0 to 40427 [ 248.264864][ T8029] F2FS-fs (loop3): Wrong segment_count / block_count (31 > 3) [ 248.283480][ T8029] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 248.304057][ T8029] F2FS-fs (loop3): Unrecognized mount option "smackfs" or missing value [ 250.142069][ T8076] loop2: detected capacity change from 0 to 512 [ 250.199776][ T8076] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 250.216846][ T8076] EXT4-fs (loop2): orphan cleanup on readonly fs [ 250.231694][ T8076] EXT4-fs warning (device loop2): ext4_enable_quotas:7173: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 250.272459][ T8076] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 250.298133][ T8076] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #16: comm syz.2.602: iget: immutable or append flags not allowed on symlinks [ 250.312716][ T8076] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.602: couldn't read orphan inode 16 (err -117) [ 250.314875][ T8074] loop3: detected capacity change from 0 to 8192 [ 250.348456][ T8076] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 250.458348][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.137163][ T8111] IPv6: sit1: Disabled Multicast RS [ 253.456518][ T8116] netlink: 24 bytes leftover after parsing attributes in process `syz.2.612'. [ 255.781489][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.788076][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.940326][ T8131] loop2: detected capacity change from 0 to 32768 [ 255.969437][ T8131] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 256.669386][ T5785] ocfs2: Unmounting device (7,2) on (node local) [ 257.186445][ T8169] IPv6: sit1: Disabled Multicast RS [ 262.990137][ T8237] netlink: 'syz.3.659': attribute type 4 has an invalid length. [ 263.029791][ T8240] netlink: 'syz.3.659': attribute type 4 has an invalid length. [ 263.197302][ T8251] netlink: 24 bytes leftover after parsing attributes in process `syz.2.657'. [ 263.240354][ T8249] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 263.647995][ T8264] loop2: detected capacity change from 0 to 64 [ 264.850408][ T8264] netlink: 64 bytes leftover after parsing attributes in process `syz.2.662'. [ 267.992632][ T8294] netlink: 'syz.4.670': attribute type 4 has an invalid length. [ 268.098104][ T8296] netlink: 'syz.4.670': attribute type 4 has an invalid length. [ 268.531995][ T8303] xt_TPROXY: Can be used only with -p tcp or -p udp [ 269.234694][ T8322] tc_dump_action: action bad kind [ 271.649875][ T8333] Bluetooth: MGMT ver 1.22 [ 271.658617][ T8333] netlink: 'syz.2.685': attribute type 10 has an invalid length. [ 271.685206][ T8333] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 272.108232][ T8343] netlink: 44 bytes leftover after parsing attributes in process `syz.2.689'. [ 272.121216][ T8343] netlink: 8 bytes leftover after parsing attributes in process `syz.2.689'. [ 272.137550][ T8343] netlink: 16 bytes leftover after parsing attributes in process `syz.2.689'. [ 272.178895][ T8345] xt_TPROXY: Can be used only with -p tcp or -p udp [ 273.189105][ T28] audit: type=1326 audit(1752130677.922:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8347 comm="syz.2.691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7f0d8e929 code=0x7ffc0000 [ 273.287258][ T28] audit: type=1326 audit(1752130677.962:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8347 comm="syz.2.691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fe7f0d8e929 code=0x7ffc0000 [ 273.350941][ T28] audit: type=1326 audit(1752130677.962:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8347 comm="syz.2.691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7f0d8e929 code=0x7ffc0000 [ 273.417278][ T28] audit: type=1326 audit(1752130677.962:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8347 comm="syz.2.691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7f0d8e929 code=0x7ffc0000 [ 273.530747][ T28] audit: type=1326 audit(1752130677.982:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8347 comm="syz.2.691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fe7f0d8e929 code=0x7ffc0000 [ 273.557259][ T28] audit: type=1326 audit(1752130677.982:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8347 comm="syz.2.691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7f0d8e929 code=0x7ffc0000 [ 273.607569][ T28] audit: type=1326 audit(1752130677.982:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8347 comm="syz.2.691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7f0d8e929 code=0x7ffc0000 [ 273.840712][ T28] audit: type=1326 audit(1752130678.002:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8347 comm="syz.2.691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7fe7f0d8e929 code=0x7ffc0000 [ 274.253329][ T28] audit: type=1326 audit(1752130678.002:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8347 comm="syz.2.691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7f0d8e929 code=0x7ffc0000 [ 274.367305][ T28] audit: type=1326 audit(1752130678.002:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8347 comm="syz.2.691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe7f0d8e929 code=0x7ffc0000 [ 275.035297][ T8364] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.694'. [ 275.762313][ T8376] loop2: detected capacity change from 0 to 512 [ 275.853776][ T8376] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 275.883252][ T8376] ext4 filesystem being mounted at /171/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 276.182267][ T8384] bridge_slave_0: left allmulticast mode [ 276.191936][ T8384] bridge_slave_0: left promiscuous mode [ 276.200297][ T8384] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.215720][ T8384] bridge_slave_1: left allmulticast mode [ 276.222599][ T8384] bridge_slave_1: left promiscuous mode [ 276.233928][ T8384] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.273004][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.293148][ T8384] team0: Port device team_slave_0 removed [ 276.345442][ T8384] team0: Port device team_slave_1 removed [ 276.358004][ T8384] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 276.377535][ T8384] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 276.401839][ T8384] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 276.424856][ T8384] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 280.365849][ T8426] netlink: 'syz.3.710': attribute type 10 has an invalid length. [ 280.456019][ T8426] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 280.838946][ T8431] Invalid ELF header magic: != ELF [ 280.886011][ T8431] loop3: detected capacity change from 0 to 1024 [ 280.964946][ T8431] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 281.141182][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.277547][ T8442] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.717'. [ 284.051125][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 284.051139][ T28] audit: type=1326 audit(1752130688.782:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8465 comm="syz.1.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f700eb8e929 code=0x7ffc0000 [ 284.147326][ T28] audit: type=1326 audit(1752130688.782:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8465 comm="syz.1.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f700eb8e929 code=0x7ffc0000 [ 284.184506][ T28] audit: type=1326 audit(1752130688.822:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8465 comm="syz.1.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f700eb8e929 code=0x7ffc0000 [ 284.219510][ T28] audit: type=1326 audit(1752130688.822:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8465 comm="syz.1.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f700eb8e929 code=0x7ffc0000 [ 284.266764][ T28] audit: type=1326 audit(1752130688.822:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8465 comm="syz.1.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f700eb8e929 code=0x7ffc0000 [ 284.300200][ T28] audit: type=1326 audit(1752130688.822:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8465 comm="syz.1.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f700eb8e929 code=0x7ffc0000 [ 284.329865][ T28] audit: type=1326 audit(1752130688.822:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8465 comm="syz.1.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f700eb8e929 code=0x7ffc0000 [ 284.380312][ T28] audit: type=1326 audit(1752130688.822:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8465 comm="syz.1.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f700eb8e929 code=0x7ffc0000 [ 284.412144][ T28] audit: type=1326 audit(1752130688.822:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8465 comm="syz.1.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f700eb8e929 code=0x7ffc0000 [ 284.449183][ T28] audit: type=1326 audit(1752130688.822:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8465 comm="syz.1.722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f700eb8e929 code=0x7ffc0000 [ 286.142113][ T8483] Invalid ELF header magic: != ELF [ 286.174901][ T8483] loop2: detected capacity change from 0 to 1024 [ 286.225571][ T8483] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 286.389483][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.168501][ T8506] loop2: detected capacity change from 0 to 128 [ 288.319453][ T8506] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 288.335696][ T8506] FAT-fs (loop2): Filesystem has been set read-only [ 288.343369][ T8506] syz.2.731: attempt to access beyond end of device [ 288.343369][ T8506] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 288.368911][ T8506] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 288.380640][ T8506] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 290.408346][ T8] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 290.472351][ T8] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 294.752985][ T8572] xt_CT: You must specify a L4 protocol and not use inversions on it [ 296.435927][ T8583] netlink: 9275 bytes leftover after parsing attributes in process `syz.4.756'. [ 297.106458][ T8591] loop2: detected capacity change from 0 to 2048 [ 297.334207][ T8593] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 297.398602][ T8595] overlayfs: failed to clone upperpath [ 297.447392][ T8593] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 297.471964][ T8593] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 297.576556][ T8593] Remounting filesystem read-only [ 297.604389][ T8590] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 297.627370][ T8590] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 297.682889][ T8590] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 297.707341][ T8590] NILFS (loop2): discard dirty block: blocknr=37, size=1024 [ 297.752203][ T8590] NILFS (loop2): discard dirty block: blocknr=38, size=1024 [ 297.913393][ T8590] NILFS (loop2): discard dirty page: offset=0, ino=5 [ 298.013986][ T8590] NILFS (loop2): discard dirty block: blocknr=41, size=1024 [ 298.108146][ T8590] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 298.265244][ T8590] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 298.334389][ T8590] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 298.346384][ T8590] NILFS (loop2): discard dirty page: offset=0, ino=4 [ 298.356234][ T8590] NILFS (loop2): discard dirty block: blocknr=40, size=1024 [ 298.366535][ T8590] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 298.381437][ T8590] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 298.390528][ T8590] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 298.405177][ T8590] NILFS (loop2): discard dirty page: offset=0, ino=3 [ 298.426468][ T8590] NILFS (loop2): discard dirty block: blocknr=42, size=1024 [ 298.433992][ T8590] NILFS (loop2): discard dirty block: blocknr=43, size=1024 [ 298.441859][ T8590] NILFS (loop2): discard dirty block: blocknr=44, size=1024 [ 298.449932][ T8590] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 298.582613][ T8606] loop3: detected capacity change from 0 to 2048 [ 298.595074][ T8606] EXT4-fs: Ignoring removed mblk_io_submit option [ 298.668341][ T8606] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 298.912125][ T8620] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 298.998202][ T5799] Bluetooth: hci0: unexpected event 0x03 length: 17 > 11 [ 299.073135][ T8606] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.764: bg 0: block 234: padding at end of block bitmap is not set [ 299.112291][ T8606] EXT4-fs (loop3): Remounting filesystem read-only [ 299.228153][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.595616][ T8627] netlink: 80 bytes leftover after parsing attributes in process `syz.3.778'. [ 300.486889][ T8644] tipc: Enabling of bearer rejected, already enabled [ 300.567962][ T8649] netlink: 9275 bytes leftover after parsing attributes in process `syz.4.775'. [ 300.878212][ T5799] Bluetooth: hci0: command 0x0406 tx timeout [ 301.938003][ T8659] netlink: 'syz.3.782': attribute type 10 has an invalid length. [ 302.014530][ T8659] macvlan0: entered promiscuous mode [ 302.046690][ T8659] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 302.278766][ T8668] xt_CT: You must specify a L4 protocol and not use inversions on it [ 302.957293][ T5799] Bluetooth: hci0: command 0x0406 tx timeout [ 303.036231][ T8664] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 303.057262][ T8664] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 303.078483][ T8674] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 303.094257][ T5799] Bluetooth: hci1: unexpected event 0x03 length: 17 > 11 [ 303.099536][ T8664] bond0 (unregistering): Released all slaves [ 303.134437][ T8666] netlink: 80 bytes leftover after parsing attributes in process `syz.2.783'. [ 303.895346][ T8687] overlayfs: failed to clone upperpath [ 304.628584][ T8696] netlink: 24 bytes leftover after parsing attributes in process `syz.3.790'. [ 304.771982][ T8696] netlink: 4 bytes leftover after parsing attributes in process `syz.3.790'. [ 305.042176][ T5799] Bluetooth: hci1: command 0x0406 tx timeout [ 306.264970][ T8726] netlink: 'syz.1.795': attribute type 10 has an invalid length. [ 306.272415][ T8727] netlink: 9275 bytes leftover after parsing attributes in process `syz.4.807'. [ 306.283017][ T8726] macvlan0: entered promiscuous mode [ 306.302413][ T8726] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 306.321996][ T8725] batadv_slave_0: entered promiscuous mode [ 306.620146][ T8726] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 306.643159][ T8726] bond0 (unregistering): Released all slaves [ 307.117264][ T5799] Bluetooth: hci1: command 0x0406 tx timeout [ 307.947020][ T8743] loop3: detected capacity change from 0 to 512 [ 307.954206][ T8735] netlink: 80 bytes leftover after parsing attributes in process `syz.1.796'. [ 307.997270][ T8743] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 308.006340][ T8743] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 308.072801][ T8743] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 308.103330][ T8743] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 308.141206][ T8743] System zones: 0-2, 18-18, 34-34 [ 308.168787][ T8743] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.800: iget: bad i_size value: 360287970189639680 [ 308.181985][ T8748] netlink: 24 bytes leftover after parsing attributes in process `syz.1.804'. [ 308.206385][ T8743] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.800: couldn't read orphan inode 15 (err -117) [ 308.244546][ T8748] netlink: 4 bytes leftover after parsing attributes in process `syz.1.804'. [ 308.252611][ T8743] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 309.111616][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.826117][ T8762] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 309.839972][ T8762] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 309.928991][ T8766] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 312.000650][ T8792] netlink: 24 bytes leftover after parsing attributes in process `syz.4.820'. [ 312.213905][ T8794] all: renamed from bridge_slave_0 (while UP) [ 312.253289][ T8792] netlink: 4 bytes leftover after parsing attributes in process `syz.4.820'. [ 312.891856][ T8808] overlayfs: failed to clone upperpath [ 312.977953][ T8813] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 314.623735][ T8833] all: renamed from bridge_slave_0 (while UP) [ 314.675063][ T8837] netlink: 156 bytes leftover after parsing attributes in process `syz.3.836'. [ 317.355177][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.369661][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.720345][ T8872] netlink: 4 bytes leftover after parsing attributes in process `syz.4.844'. [ 319.814544][ T8889] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 319.966287][ T8888] loop3: detected capacity change from 0 to 2048 [ 320.000616][ T8888] EXT4-fs: Ignoring removed mblk_io_submit option [ 320.386601][ T8888] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 321.044541][ T8888] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.848: bg 0: block 234: padding at end of block bitmap is not set [ 321.060281][ T8888] EXT4-fs (loop3): Remounting filesystem read-only [ 321.183834][ T8903] all: renamed from bridge_slave_0 (while UP) [ 321.346882][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.431762][ T8935] all: renamed from bridge_slave_0 (while UP) [ 326.925932][ T8970] loop3: detected capacity change from 0 to 512 [ 326.950355][ T8968] netlink: 20 bytes leftover after parsing attributes in process `syz.4.877'. [ 327.009137][ T8970] EXT4-fs (loop3): Test dummy encryption mode enabled [ 327.017409][ T8970] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 327.067383][ T8970] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 327.119725][ T8970] EXT4-fs (loop3): 1 truncate cleaned up [ 327.134313][ T8970] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 327.158037][ T8978] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 327.653282][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.308398][ T9010] Error parsing options; rc = [-22] [ 334.253415][ T9041] syz.4.901 uses obsolete (PF_INET,SOCK_PACKET) [ 334.457549][ T9047] netlink: 24 bytes leftover after parsing attributes in process `syz.2.902'. [ 334.466799][ T8] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 334.691856][ T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 334.717276][ T8] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 334.738895][ T8] usb 4-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 334.762108][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.787518][ T8] usb 4-1: Product: syz [ 334.792170][ T8] usb 4-1: Manufacturer: syz [ 334.805728][ T8] usb 4-1: SerialNumber: syz [ 334.813131][ T8] usb 4-1: config 0 descriptor?? [ 335.100610][ T9033] netlink: 'syz.3.899': attribute type 10 has an invalid length. [ 335.136113][ T5833] usb 4-1: USB disconnect, device number 5 [ 335.783137][ T9067] cgroup: subsys name conflicts with all [ 337.671871][ T9094] xt_HMARK: proto mask must be zero with L3 mode [ 341.979098][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 341.979112][ T28] audit: type=1326 audit(1752130746.692:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9139 comm="syz.2.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7f0d8e929 code=0x7ffc0000 [ 342.066272][ T28] audit: type=1326 audit(1752130746.692:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9139 comm="syz.2.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7f0d8e929 code=0x7ffc0000 [ 342.276330][ T28] audit: type=1326 audit(1752130746.692:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9139 comm="syz.2.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe7f0d8e929 code=0x7ffc0000 [ 342.566465][ T28] audit: type=1326 audit(1752130746.692:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9139 comm="syz.2.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7f0d8e929 code=0x7ffc0000 [ 342.739822][ T28] audit: type=1326 audit(1752130746.692:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9139 comm="syz.2.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7f0d8e929 code=0x7ffc0000 [ 342.855398][ T28] audit: type=1326 audit(1752130746.702:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9139 comm="syz.2.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe7f0d8e929 code=0x7ffc0000 [ 342.907498][ T28] audit: type=1326 audit(1752130746.702:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9139 comm="syz.2.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7f0d8e929 code=0x7ffc0000 [ 342.952653][ T28] audit: type=1326 audit(1752130746.712:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9139 comm="syz.2.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe7f0d8e929 code=0x7ffc0000 [ 343.033824][ T28] audit: type=1326 audit(1752130746.712:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9139 comm="syz.2.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7f0d8e929 code=0x7ffc0000 [ 343.071038][ T28] audit: type=1326 audit(1752130746.712:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9139 comm="syz.2.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7f0d8e929 code=0x7ffc0000 [ 349.027107][ T9223] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 352.269578][ T9263] netlink: 24 bytes leftover after parsing attributes in process `syz.4.972'. [ 352.408643][ T9268] netlink: 4 bytes leftover after parsing attributes in process `syz.2.974'. [ 352.709317][ T9274] netlink: 4 bytes leftover after parsing attributes in process `syz.4.976'. [ 352.923829][ T9279] tipc: Enabled bearer , priority 0 [ 352.950004][ T9277] syzkaller0: entered promiscuous mode [ 352.969520][ T9277] syzkaller0: entered allmulticast mode [ 352.999395][ T9277] tipc: Resetting bearer [ 353.023870][ T9276] tipc: Resetting bearer [ 353.054590][ T9281] netlink: 'syz.2.978': attribute type 1 has an invalid length. [ 353.079986][ T9276] tipc: Disabling bearer [ 353.324151][ T9286] loop3: detected capacity change from 0 to 512 [ 353.469013][ T9286] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 353.593327][ T9286] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002] [ 353.705007][ T9286] System zones: 1-12 [ 353.803765][ T9286] EXT4-fs (loop3): 1 truncate cleaned up [ 353.921544][ T9286] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 354.144609][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.105440][ T9304] loop3: detected capacity change from 0 to 16 [ 355.282439][ T9304] erofs: (device loop3): mounted with root inode @ nid 36. [ 356.860778][ T9324] loop3: detected capacity change from 0 to 2048 [ 356.948352][ T9324] NILFS (loop3): The specified checkpoint is not a snapshot (checkpoint number=2) [ 359.294520][ T9371] PKCS7: Unknown OID: [4] 0.38.35.0.951690.11253 [ 359.320314][ T9371] PKCS7: Only support pkcs7_signedData type [ 359.531524][ T9380] netlink: 'syz.3.1006': attribute type 39 has an invalid length. [ 361.082822][ T9397] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1011'. [ 362.915656][ T9409] loop3: detected capacity change from 0 to 512 [ 362.924968][ T9409] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 362.971997][ T9409] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 362.990937][ T9409] ext4 filesystem being mounted at /242/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 363.088667][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.295345][ T9420] netlink: 'syz.1.1017': attribute type 5 has an invalid length. [ 363.984900][ T9430] netlink: 'syz.4.1020': attribute type 7 has an invalid length. [ 364.074777][ T9430] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1020'. [ 364.356554][ T9434] kernel profiling enabled (shift: 6) [ 364.474415][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 364.474428][ T28] audit: type=1326 audit(1752130769.202:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9443 comm="syz.4.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6d018e929 code=0x7ffc0000 [ 364.542979][ T28] audit: type=1326 audit(1752130769.242:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9443 comm="syz.4.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6d018e929 code=0x7ffc0000 [ 364.606064][ T28] audit: type=1326 audit(1752130769.242:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9443 comm="syz.4.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb6d018e929 code=0x7ffc0000 [ 364.655372][ T28] audit: type=1326 audit(1752130769.242:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9443 comm="syz.4.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6d018e929 code=0x7ffc0000 [ 364.809099][ T28] audit: type=1326 audit(1752130769.242:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9443 comm="syz.4.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6d018e929 code=0x7ffc0000 [ 365.197669][ T9460] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1030'. [ 365.887463][ T28] audit: type=1326 audit(1752130769.242:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9443 comm="syz.4.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb6d018e929 code=0x7ffc0000 [ 366.271542][ T28] audit: type=1326 audit(1752130769.242:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9443 comm="syz.4.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6d018e929 code=0x7ffc0000 [ 366.998118][ T9471] netlink: 'syz.2.1032': attribute type 7 has an invalid length. [ 367.015505][ T28] audit: type=1326 audit(1752130769.242:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9443 comm="syz.4.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6d018e929 code=0x7ffc0000 [ 367.057619][ T9471] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1032'. [ 367.177411][ T28] audit: type=1326 audit(1752130769.242:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9443 comm="syz.4.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7fb6d018e929 code=0x7ffc0000 [ 367.299842][ T28] audit: type=1326 audit(1752130769.242:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9443 comm="syz.4.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6d018e929 code=0x7ffc0000 [ 369.690572][ T9505] netlink: 'syz.1.1044': attribute type 7 has an invalid length. [ 369.699493][ T9505] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1044'. [ 372.057458][ T5799] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 372.066055][ T5799] Bluetooth: hci0: Injecting HCI hardware error event [ 372.074957][ T5799] Bluetooth: hci0: hardware error 0x00 [ 374.249420][ T5799] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 374.821820][ T9561] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1063'. [ 375.289201][ T5799] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 375.298104][ T5799] Bluetooth: hci2: Injecting HCI hardware error event [ 375.306952][ T5799] Bluetooth: hci2: hardware error 0x00 [ 376.500189][ T9578] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1069'. [ 376.511300][ T9578] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1069'. [ 376.533891][ T9578] netlink: 31 bytes leftover after parsing attributes in process `syz.3.1069'. [ 376.565515][ T9578] netlink: 'syz.3.1069': attribute type 3 has an invalid length. [ 376.588493][ T9578] netlink: 'syz.3.1069': attribute type 2 has an invalid length. [ 376.607501][ T9578] netlink: 31 bytes leftover after parsing attributes in process `syz.3.1069'. [ 377.373469][ T5799] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 377.471614][ T9585] ceph: No mds server is up or the cluster is laggy [ 378.167379][ T9602] netlink: 'syz.4.1076': attribute type 5 has an invalid length. [ 378.482706][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.489180][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.558349][ T9616] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1082'. [ 378.591439][ T9616] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1082'. [ 378.611626][ T9616] netlink: 31 bytes leftover after parsing attributes in process `syz.1.1082'. [ 378.636233][ T9616] netlink: 'syz.1.1082': attribute type 3 has an invalid length. [ 378.647798][ T9616] netlink: 'syz.1.1082': attribute type 2 has an invalid length. [ 378.662202][ T9616] netlink: 31 bytes leftover after parsing attributes in process `syz.1.1082'. [ 378.850575][ T9623] netlink: 'syz.2.1083': attribute type 10 has an invalid length. [ 378.863943][ T9623] tipc: Resetting bearer [ 378.893710][ T9623] tipc: Resetting bearer [ 378.918313][ T9623] 8021q: adding VLAN 0 to HW filter on device team0 [ 378.938984][ T9623] bond0: (slave team0): Enslaving as an active interface with an up link [ 379.719940][ T9628] ceph: No mds server is up or the cluster is laggy [ 380.949680][ T9662] netlink: 'syz.3.1095': attribute type 10 has an invalid length. [ 382.401852][ T9677] ceph: No mds server is up or the cluster is laggy [ 382.503354][ T9690] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1109'. [ 383.976413][ T9713] netlink: 'syz.1.1108': attribute type 10 has an invalid length. [ 385.094940][ T9726] ceph: No mds server is up or the cluster is laggy [ 385.188441][ T9732] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1114'. [ 398.575718][ T9758] netlink: 'syz.4.1124': attribute type 10 has an invalid length. [ 399.319443][ T9767] loop3: detected capacity change from 0 to 256 [ 399.409664][ T9767] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 399.489713][ T9767] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 400.938777][ T9773] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1127'. [ 401.260770][ T9776] virtio-fs: tag not found [ 401.921572][ T9788] xt_recent: Unsupported userspace flags (000000de) [ 402.920952][ T9800] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 403.649942][ T9806] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1137'. [ 403.686859][ T9806] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1137'. [ 405.026772][ T9828] tipc: Started in network mode [ 405.040403][ T9828] tipc: Node identity 4, cluster identity 4711 [ 405.052018][ T9828] tipc: Node number set to 4 [ 405.087283][ T5833] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 405.178270][ T9834] netlink: zone id is out of range [ 405.183579][ T9834] netlink: zone id is out of range [ 405.189202][ T9834] netlink: zone id is out of range [ 405.190857][ T9832] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1148'. [ 405.194390][ T9834] netlink: zone id is out of range [ 405.264235][ T9834] netlink: zone id is out of range [ 405.270922][ T9834] netlink: zone id is out of range [ 405.276215][ T9834] netlink: zone id is out of range [ 405.282796][ T9834] netlink: zone id is out of range [ 405.288516][ T9834] netlink: zone id is out of range [ 405.293835][ T9834] netlink: zone id is out of range [ 405.377762][ T5833] usb 4-1: Using ep0 maxpacket: 32 [ 405.415650][ T5833] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 405.731229][ T5833] usb 4-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 405.834909][ T5833] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.893062][ T5833] usb 4-1: Product: syz [ 405.897533][ T5833] usb 4-1: Manufacturer: syz [ 405.902223][ T5833] usb 4-1: SerialNumber: syz [ 405.916402][ T5833] usb 4-1: config 0 descriptor?? [ 405.930569][ T9820] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 405.946508][ T5833] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 406.691575][ T5853] usb 4-1: USB disconnect, device number 6 [ 407.107917][ T9854] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 407.116716][ T9854] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 407.605526][ T9873] lo speed is unknown, defaulting to 1000 [ 407.615780][ T9873] lo speed is unknown, defaulting to 1000 [ 407.633214][ T9873] lo speed is unknown, defaulting to 1000 [ 407.660455][ T9873] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 407.681827][ T9873] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 407.741518][ T9873] lo speed is unknown, defaulting to 1000 [ 407.756906][ T9873] lo speed is unknown, defaulting to 1000 [ 407.765126][ T9873] lo speed is unknown, defaulting to 1000 [ 407.780239][ T9873] lo speed is unknown, defaulting to 1000 [ 407.787587][ T9873] lo speed is unknown, defaulting to 1000 [ 407.992910][ T9880] ip6t_rpfilter: unknown options [ 411.074411][ T9909] @: renamed from vlan0 (while UP) [ 411.407583][ T9914] nftables ruleset with unbound set [ 411.527027][ T9922] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1176'. [ 411.550436][ T9922] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1176'. [ 411.841633][ T9926] xt_recent: Unsupported userspace flags (000000de) [ 413.309113][ T9936] loop3: detected capacity change from 0 to 512 [ 413.336454][ T9936] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 413.382655][ T9936] EXT4-fs (loop3): 1 truncate cleaned up [ 413.414445][ T9936] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 413.561022][ T9946] bridge4: entered allmulticast mode [ 413.602438][ T9946] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1183'. [ 413.713267][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.907834][ T9975] xt_recent: Unsupported userspace flags (000000de) [ 423.197531][T10021] virtio-fs: tag not found [ 423.543642][T10029] xt_recent: Unsupported userspace flags (000000de) [ 423.762331][T10034] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 423.771764][T10034] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 423.856948][T10039] loop3: detected capacity change from 0 to 256 [ 423.865964][T10039] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 423.877152][T10039] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 423.896261][T10039] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 424.832460][T10048] xt_recent: Unsupported userspace flags (000000de) [ 426.738321][T10081] virtio-fs: tag not found [ 426.810224][T10083] bridge5: entered allmulticast mode [ 426.826097][T10083] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1219'. [ 427.089166][T10090] @: renamed from vlan0 (while UP) [ 427.306538][T10093] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 427.316902][T10093] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 429.252231][T10116] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1228'. [ 429.378826][T10116] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1228'. [ 430.039077][T10120] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1229'. [ 430.132040][T10116] syz.4.1228 (10116) used greatest stack depth: 20072 bytes left [ 430.216739][T10123] siw: device registration error -23 [ 435.435372][T10175] @: renamed from vlan0 (while UP) [ 436.682041][T10181] lo speed is unknown, defaulting to 1000 [ 439.920906][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.927323][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.437883][T10227] syz.4.1260: attempt to access beyond end of device [ 440.437883][T10227] loop9: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 440.787556][T10227] EXT4-fs (loop9): unable to read superblock [ 442.781326][T10262] loop3: detected capacity change from 0 to 256 [ 442.823709][T10262] FAT-fs (loop3): bogus number of FAT sectors [ 442.847630][T10262] FAT-fs (loop3): Can't find a valid FAT filesystem [ 443.425603][T10266] loop3: detected capacity change from 0 to 512 [ 443.433036][T10266] EXT4-fs: Ignoring removed i_version option [ 443.442864][T10266] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 443.468268][T10266] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 443.489548][T10266] ext4 filesystem being mounted at /296/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 443.493552][T10273] @: renamed from vlan0 (while UP) [ 443.522663][T10266] EXT4-fs error (device loop3): ext4_do_update_inode:5230: inode #2: comm syz.3.1280: corrupted inode contents [ 443.546628][T10266] EXT4-fs (loop3): Remounting filesystem read-only [ 444.576112][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.600482][ T6399] __quota_error: 16 callbacks suppressed [ 444.600499][ T6399] Quota error (device loop3): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync! [ 449.245788][T10324] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1282'. [ 449.655327][ T2947] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.259509][ T2947] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.435061][ T2947] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.555000][ T2947] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.571474][T10334] net_ratelimit: 23 callbacks suppressed [ 450.571487][T10334] dccp_close: ABORT with 32 bytes unread [ 451.963499][T10348] cgroup: subsys name conflicts with all [ 451.987880][ T5800] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 452.001756][ T2947] tipc: Disabling bearer [ 452.010086][ T5800] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 452.023515][ T2947] tipc: Left network mode [ 452.038741][ T5800] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 452.048813][ T5800] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 452.061823][ T5800] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 452.070532][ T5800] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 452.151916][T10355] lo speed is unknown, defaulting to 1000 [ 453.545727][T10355] chnl_net:caif_netlink_parms(): no params data found [ 454.158595][ T5799] Bluetooth: hci3: command tx timeout [ 456.004221][T10355] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.013361][T10355] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.024986][T10355] bridge_slave_0: entered allmulticast mode [ 456.035810][T10355] bridge_slave_0: entered promiscuous mode [ 456.045077][T10355] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.057086][T10355] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.065381][T10355] bridge_slave_1: entered allmulticast mode [ 456.075768][T10355] bridge_slave_1: entered promiscuous mode [ 456.101291][T10402] netlink: 'syz.2.1303': attribute type 10 has an invalid length. [ 456.130687][T10402] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 456.142085][T10404] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1302'. [ 456.244105][ T5799] Bluetooth: hci3: command tx timeout [ 456.289005][T10355] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 456.326782][T10355] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 456.504148][T10355] team0: Port device team_slave_0 added [ 456.521095][T10355] team0: Port device team_slave_1 added [ 456.626728][T10355] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 456.633967][T10355] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 456.665823][T10355] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 456.746394][ T2947] hsr_slave_0: left promiscuous mode [ 456.753098][ T2947] hsr_slave_1: left promiscuous mode [ 456.779823][ T2947] veth1_macvtap: left promiscuous mode [ 456.785404][ T2947] veth0_macvtap: left promiscuous mode [ 456.791223][ T2947] veth1_vlan: left promiscuous mode [ 456.796761][ T2947] veth0_vlan: left promiscuous mode [ 457.131301][ T2947] bond1 (unregistering): Released all slaves [ 458.093216][T10355] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 458.100587][T10355] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 458.126592][T10355] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 458.181202][T10429] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 458.201082][T10430] netlink: 'syz.1.1315': attribute type 10 has an invalid length. [ 458.293929][T10355] hsr_slave_0: entered promiscuous mode [ 458.306556][T10355] hsr_slave_1: entered promiscuous mode [ 458.317301][ T5799] Bluetooth: hci3: command tx timeout [ 460.427337][ T5799] Bluetooth: hci3: command tx timeout [ 460.954199][T10355] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 460.965646][T10355] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 460.975949][T10355] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 460.989348][T10476] cgroup: subsys name conflicts with all [ 460.997627][T10355] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 461.092447][T10355] 8021q: adding VLAN 0 to HW filter on device bond0 [ 461.119695][T10355] 8021q: adding VLAN 0 to HW filter on device team0 [ 461.143925][ T1083] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.151207][ T1083] bridge0: port 1(bridge_slave_0) entered forwarding state [ 461.162550][ T1083] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.169758][ T1083] bridge0: port 2(bridge_slave_1) entered forwarding state [ 463.246103][T10355] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 463.793740][T10355] veth0_vlan: entered promiscuous mode [ 463.837723][T10355] veth1_vlan: entered promiscuous mode [ 463.948107][T10355] veth0_macvtap: entered promiscuous mode [ 463.974085][T10355] veth1_macvtap: entered promiscuous mode [ 464.006778][T10355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 464.023532][T10355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.139550][T10355] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 464.296382][T10355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 464.446334][T10355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.595671][T10355] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 464.781205][T10355] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.813991][T10355] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.907379][T10355] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.916327][T10355] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.940050][T10541] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1326'. [ 466.467441][ T6525] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 466.513450][ T6525] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 467.773389][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 467.812623][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 473.927894][ T5929] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 474.817326][ T5929] usb 4-1: Using ep0 maxpacket: 16 [ 474.864622][ T5929] usb 4-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00 [ 474.899783][ T5929] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.924359][ T5929] usb 4-1: Product: syz [ 474.939022][ T5929] usb 4-1: Manufacturer: syz [ 474.943655][ T5929] usb 4-1: SerialNumber: syz [ 474.964777][ T5929] usb 4-1: config 0 descriptor?? [ 474.984163][ T5929] usb-storage 4-1:0.0: USB Mass Storage device detected [ 475.005496][ T5929] usb-storage 4-1:0.0: Quirks match for vid 054c pid 002e: 1 [ 475.020952][ T5929] usb-storage 4-1:0.0: This device (054c,002e,0500 S 04 P c9) has an unneeded SubClass entry in unusual_devs.h (kernel 6.6.96-syzkaller) [ 475.020952][ T5929] Please send a copy of this message to and [ 475.213029][ T5872] usb 4-1: USB disconnect, device number 7 [ 477.466675][ T5874] kernel write not supported for file [eventfd] (pid: 5874 comm: kworker/1:5) [ 481.127524][T10734] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 481.144280][T10731] IPVS: stopping backup sync thread 10734 ... [ 481.415343][T10741] 8021q: VLANs not supported on gre0 [ 482.542246][T10756] netlink: 'syz.2.1380': attribute type 12 has an invalid length. [ 484.499591][T10769] bridge0: entered promiscuous mode [ 484.505615][T10769] vlan2: entered promiscuous mode [ 485.650525][T10797] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1396'. [ 485.702574][T10794] loop3: detected capacity change from 0 to 4096 [ 486.061234][T10794] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 486.611008][T10355] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 489.724191][T10840] bond0: (slave dummy0): Releasing backup interface [ 489.741207][T10840] bond0: (slave dummy0): the permanent HWaddr of slave - aa:aa:aa:aa:aa:24 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 490.966204][T10876] overlayfs: failed to clone upperpath [ 492.140132][T10893] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1428'. [ 493.814927][T10925] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1439'. [ 493.859788][T10925] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1439'. [ 495.814974][T10944] ecryptfs_parse_options: eCryptfs: unrecognized option [³(] [ 495.822604][T10944] ecryptfs_parse_options: eCryptfs: unrecognized option [{\)] [ 495.830279][T10944] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 495.844297][T10944] Error parsing options; rc = [-22] [ 501.355293][T10995] dvmrp0: entered allmulticast mode [ 501.362209][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.372198][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.417032][T10995] dvmrp0: left allmulticast mode [ 502.288732][T11002] team0: Mode changed to "activebackup" [ 502.305915][T11001] tipc: Started in network mode [ 502.326413][T11001] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 502.336789][T11001] tipc: Enabled bearer , priority 0 [ 503.448505][ T5929] tipc: Node number set to 11578026 [ 503.572635][ T28] audit: type=1326 audit(1752130908.302:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11024 comm="syz.3.1471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f826ab8e929 code=0x7ffc0000 [ 503.626259][ T28] audit: type=1326 audit(1752130908.302:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11024 comm="syz.3.1471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f826ab8e929 code=0x7ffc0000 [ 503.670801][ T28] audit: type=1326 audit(1752130908.302:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11024 comm="syz.3.1471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f826ab8e929 code=0x7ffc0000 [ 503.710372][ T28] audit: type=1326 audit(1752130908.302:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11024 comm="syz.3.1471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f826ab8e929 code=0x7ffc0000 [ 503.734037][ T28] audit: type=1326 audit(1752130908.302:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11024 comm="syz.3.1471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f826ab8e929 code=0x7ffc0000 [ 503.757874][ T28] audit: type=1326 audit(1752130908.302:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11024 comm="syz.3.1471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f826ab8e929 code=0x7ffc0000 [ 503.781275][ T28] audit: type=1326 audit(1752130908.302:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11024 comm="syz.3.1471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f826ab8e929 code=0x7ffc0000 [ 503.824544][T11031] loop3: detected capacity change from 0 to 2048 [ 503.831457][ T28] audit: type=1326 audit(1752130908.302:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11024 comm="syz.3.1471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f826ab8e929 code=0x7ffc0000 [ 503.877193][ T28] audit: type=1326 audit(1752130908.302:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11024 comm="syz.3.1471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f826ab8e929 code=0x7ffc0000 [ 503.891320][T11031] loop3: p1 < > p3 [ 503.919596][T11031] loop3: p3 size 134217728 extends beyond EOD, truncated [ 503.969427][ T5157] loop3: p1 < > p3 [ 503.987159][ T28] audit: type=1326 audit(1752130908.302:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11024 comm="syz.3.1471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f826ab8e929 code=0x7ffc0000 [ 503.997466][ T5157] loop3: p3 size 134217728 extends beyond EOD, truncated [ 504.155362][T11028] kvm: emulating exchange as write [ 505.794625][T11056] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 507.035764][T11081] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 507.053634][T11081] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.061370][T11081] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.320417][T11090] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1491'. [ 509.054914][T11104] ipt_REJECT: ECHOREPLY no longer supported. [ 509.279521][T11079] Bluetooth: hci3: command 0x0406 tx timeout [ 517.102837][T11201] can0: slcan on ttyS3. [ 517.179848][T11201] can0 (unregistered): slcan off ttyS3. [ 518.559050][T11212] dccp_close: ABORT with 214 bytes unread [ 518.661061][T11214] syz.2.1530[11214] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 518.661187][T11214] syz.2.1530[11214] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 518.707057][T11214] syz.2.1530[11214] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 518.737000][T11214] syz.2.1530[11214] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 518.763804][T11224] syz.2.1530[11224] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 518.808425][T11224] syz.2.1530[11224] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 518.857428][T11214] wg2: entered promiscuous mode [ 518.902251][T11214] wg2: entered allmulticast mode [ 520.649470][T11243] ptrace attach of "./syz-executor exec"[11244] was attempted by "./syz-executor exec"[11243] [ 521.621333][T11250] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1540'. [ 522.101475][T11253] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1540'. [ 525.171049][T11278] overlayfs: failed to clone upperpath [ 525.406308][T11280] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1551'. [ 525.418742][T11280] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1551'. [ 526.009003][T11269] loop3: detected capacity change from 0 to 32768 [ 526.382358][T11269] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 526.502167][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 526.502182][ T28] audit: type=1800 audit(1752130931.232:203): pid=11269 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1547" name="file1" dev="loop3" ino=17059 res=0 errno=0 [ 526.938266][T10551] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 528.297243][T11295] syz.3.1547 (11295) used greatest stack depth: 19024 bytes left [ 528.740313][T11269] syz.3.1547 (11269) used greatest stack depth: 18952 bytes left [ 528.748778][T10551] usb 4-1: unable to get BOS descriptor or descriptor too short [ 528.757784][T10551] usb 4-1: no configurations [ 528.762416][T10551] usb 4-1: can't read configurations, error -22 [ 528.902765][ T28] audit: type=1326 audit(1752130933.612:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11319 comm="syz.1.1563" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f700eb8e929 code=0x0 [ 528.981408][T10355] ocfs2: Unmounting device (7,3) on (node local) [ 530.283348][T11339] tipc: Started in network mode [ 530.290531][T11339] tipc: Node identity ac1414aa, cluster identity 4711 [ 530.374872][T11339] tipc: Enabled bearer , priority 10 [ 532.391713][ T5929] tipc: Node number set to 2886997162 [ 532.432299][T11345] vlan2: entered promiscuous mode [ 532.470957][T11345] vlan2: entered allmulticast mode [ 532.557039][T11345] hsr_slave_1: entered allmulticast mode [ 532.963774][T11354] syz_tun: entered allmulticast mode [ 532.992682][T11353] syz_tun: left allmulticast mode [ 538.808137][T11441] loop3: detected capacity change from 0 to 128 [ 538.846499][T11441] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 538.924559][T11441] ext4 filesystem being mounted at /61/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 539.228084][T11454] netlink: 'syz.4.1606': attribute type 12 has an invalid length. [ 539.266202][T11458] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1605'. [ 539.358415][T10355] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 539.766917][T11470] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 540.920402][T11484] overlayfs: failed to clone upperpath [ 542.289249][T11517] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 543.454971][T11528] overlayfs: failed to clone upperpath [ 543.467232][T11530] 9pnet: Could not find request transport: 0xffffffffffffffff [ 543.632723][T11542] tipc: Failed to remove unknown binding: 66,1,1/4:2965852676/2965852678 [ 547.404825][T11584] 9pnet: Could not find request transport: 0xffffffffffffffff [ 549.800047][T11628] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1661'. [ 550.054419][ T23] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 551.469382][T11639] 9pnet: Could not find request transport: 0xffffffffffffffff [ 551.695158][T11652] dccp_close: ABORT with 214 bytes unread [ 555.953643][T11703] 9pnet: Could not find request transport: 0xffffffffffffffff [ 555.974374][T11706] dccp_close: ABORT with 214 bytes unread [ 558.979404][T11738] netlink: 'syz.1.1689': attribute type 10 has an invalid length. [ 559.013149][T11738] team0: Port device dummy0 added [ 559.295923][T11738] netlink: 'syz.1.1689': attribute type 10 has an invalid length. [ 559.649546][T11738] team0: Port device dummy0 removed [ 561.273211][T11750] 9pnet: Could not find request transport: 0xffffffffffffffff [ 561.395893][T11764] tipc: Failed to remove unknown binding: 66,1,1/2886997162:956657120/956657122 [ 562.138891][T11780] tipc: Enabling of bearer rejected, failed to enable media [ 562.244408][T11765] TCP: out of memory -- consider tuning tcp_mem [ 562.693450][T11793] tipc: Failed to remove unknown binding: 66,1,1/2886997162:891691159/891691161 [ 562.729813][T11793] tipc: Failed to remove unknown binding: 66,1,1/2886997162:891691159/891691161 [ 562.756398][T11793] tipc: Failed to remove unknown binding: 66,1,1/2886997162:891691159/891691161 [ 562.802006][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.808562][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 567.108669][T11817] TCP: out of memory -- consider tuning tcp_mem [ 570.691874][T11854] tipc: Failed to remove unknown binding: 66,1,1/11578026:1971889435/1971889437 [ 570.811486][T11852] loop3: detected capacity change from 0 to 8192 [ 572.231049][T11877] xfrm0: entered promiscuous mode [ 572.236670][T11877] xfrm0: entered allmulticast mode [ 572.478099][T11885] tipc: Failed to remove unknown binding: 66,1,1/4:3502243711/3502243713 [ 576.003107][T11931] loop3: detected capacity change from 0 to 512 [ 576.106766][T11931] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 576.133230][T11931] ext4 filesystem being mounted at /92/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 576.178161][T11931] EXT4-fs error (device loop3): ext4_do_update_inode:5230: inode #2: comm syz.3.1750: corrupted inode contents [ 576.215884][T11931] EXT4-fs error (device loop3): ext4_dirty_inode:6106: inode #2: comm syz.3.1750: mark_inode_dirty error [ 576.264664][T11931] EXT4-fs error (device loop3): ext4_do_update_inode:5230: inode #2: comm syz.3.1750: corrupted inode contents [ 576.291553][T11931] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #2: comm syz.3.1750: mark_inode_dirty error [ 576.395680][T10355] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 588.840024][T12051] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1790'. [ 588.927606][T12056] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1794'. [ 588.954369][T12054] loop3: detected capacity change from 0 to 1024 [ 589.026029][T12054] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 590.488889][T10355] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 590.539817][T12072] overlayfs: failed to clone upperpath [ 591.346913][T12081] overlayfs: failed to clone upperpath [ 595.272771][T12095] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1801'. [ 598.897425][T12133] input: syz0 as /devices/virtual/input/input8 [ 599.822933][ T28] audit: type=1326 audit(1752131004.552:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12138 comm="syz.2.1816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7f0d8e929 code=0x7ffc0000 [ 599.873731][ T28] audit: type=1326 audit(1752131004.552:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12138 comm="syz.2.1816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7f0d8e929 code=0x7ffc0000 [ 600.016098][ T28] audit: type=1326 audit(1752131004.622:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12138 comm="syz.2.1816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe7f0d8e929 code=0x7ffc0000 [ 600.062125][ T28] audit: type=1326 audit(1752131004.622:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12138 comm="syz.2.1816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7f0d8e929 code=0x7ffc0000 [ 600.119917][ T28] audit: type=1326 audit(1752131004.622:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12138 comm="syz.2.1816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7f0d8e929 code=0x7ffc0000 [ 600.301804][ T28] audit: type=1326 audit(1752131004.642:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12138 comm="syz.2.1816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fe7f0d8e929 code=0x7ffc0000 [ 600.338143][ T28] audit: type=1326 audit(1752131004.642:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12138 comm="syz.2.1816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7f0d8e929 code=0x7ffc0000 [ 601.055475][ T28] audit: type=1326 audit(1752131004.642:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12138 comm="syz.2.1816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7f0d8e929 code=0x7ffc0000 [ 601.134039][ T28] audit: type=1326 audit(1752131004.642:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12138 comm="syz.2.1816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fe7f0d8e929 code=0x7ffc0000 [ 601.226226][ T28] audit: type=1326 audit(1752131004.642:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12138 comm="syz.2.1816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7f0d8e929 code=0x7ffc0000 [ 602.466080][T12194] dvmrp0: entered allmulticast mode [ 602.519097][T12194] dvmrp0: left allmulticast mode [ 604.764786][T12216] lo speed is unknown, defaulting to 1000 [ 605.121267][T12230] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1834'. [ 614.598610][T12350] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1859'. [ 615.055030][T12350] loop3: detected capacity change from 0 to 2048 [ 615.122665][T12350] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 615.150307][T12350] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 615.176743][T12350] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 1)! [ 615.207711][T12350] EXT4-fs (loop3): group descriptors corrupted! [ 616.181967][T12365] loop3: detected capacity change from 0 to 1024 [ 617.388945][T12382] loop3: detected capacity change from 0 to 512 [ 617.409280][T12382] EXT4-fs: Ignoring removed bh option [ 617.414720][T12382] EXT4-fs: Ignoring removed mblk_io_submit option [ 617.426488][T12382] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 617.451289][T12384] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1864'. [ 617.472871][T12382] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 617.514517][T12382] ext4 filesystem being mounted at /121/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 617.595362][T12389] lo speed is unknown, defaulting to 1000 [ 619.930608][T10355] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 624.457227][T12456] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 624.483707][T12456] CIFS mount error: No usable UNC path provided in device string! [ 624.483707][T12456] [ 624.495991][T12456] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 624.707059][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.713544][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.628638][T12463] bond0: (slave team0): Releasing backup interface [ 625.643023][T12463] tipc: Resetting bearer [ 625.669871][T12463] tipc: Resetting bearer [ 625.825876][T12463] bond0: (slave wlan1): Releasing backup interface [ 625.834766][T12463] bond1: (slave gretap1): Releasing active interface [ 625.939460][T12465] team0: Mode changed to "activebackup" [ 628.838226][T12463] tipc: Enabling of bearer rejected, already enabled [ 629.285015][T12474] loop3: detected capacity change from 0 to 8192 [ 635.403862][T12521] sctp: [Deprecated]: syz.4.1908 (pid 12521) Use of struct sctp_assoc_value in delayed_ack socket option. [ 635.403862][T12521] Use struct sctp_sack_info instead [ 636.465998][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 636.466012][ T28] audit: type=1326 audit(1752131041.192:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12527 comm="syz.2.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7f0d8e929 code=0x7ffc0000 [ 636.567109][ T28] audit: type=1326 audit(1752131041.192:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12527 comm="syz.2.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7f0d8e929 code=0x7ffc0000 [ 636.672539][ T28] audit: type=1326 audit(1752131041.232:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12527 comm="syz.2.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fe7f0d8e929 code=0x7ffc0000 [ 636.737326][ T28] audit: type=1326 audit(1752131041.232:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12527 comm="syz.2.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7f0d8e929 code=0x7ffc0000 [ 636.794639][ T28] audit: type=1326 audit(1752131041.232:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12527 comm="syz.2.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7f0d8e929 code=0x7ffc0000 [ 636.835475][ T28] audit: type=1326 audit(1752131041.242:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12527 comm="syz.2.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fe7f0d8e929 code=0x7ffc0000 [ 636.897801][ T28] audit: type=1326 audit(1752131041.242:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12527 comm="syz.2.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7f0d8e929 code=0x7ffc0000 [ 636.970396][ T28] audit: type=1326 audit(1752131041.242:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12527 comm="syz.2.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fe7f0d8e929 code=0x7ffc0000 [ 637.013333][ T28] audit: type=1326 audit(1752131041.242:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12527 comm="syz.2.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7f0d8e929 code=0x7ffc0000 [ 637.087108][ T28] audit: type=1326 audit(1752131041.242:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12527 comm="syz.2.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7fe7f0d8e929 code=0x7ffc0000 [ 637.489956][T12545] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 639.614742][T12552] ptrace attach of ""[12557] was attempted by "./syz-executor exec"[12552] [ 640.513120][T12563] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1921'. [ 644.415395][T12583] loop3: detected capacity change from 0 to 8192 [ 644.478119][T12590] ecryptfs_parse_options: eCryptfs: unrecognized option [³(] [ 644.485604][T12590] ecryptfs_parse_options: eCryptfs: unrecognized option [{\)] [ 644.493275][T12590] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 644.506553][T12590] Error parsing options; rc = [-22] [ 645.216901][T12592] netlink: 576 bytes leftover after parsing attributes in process `syz.4.1929'. [ 647.107581][T12602] No such timeout policy "syz1" [ 649.134440][T12618] mmap: syz.1.1937 (12618): VmData 37474304 exceed data ulimit 9. Update limits or use boot option ignore_rlimit_data. [ 649.150717][T12616] vlan4: entered promiscuous mode [ 649.155765][T12616] bond0: entered promiscuous mode [ 649.161085][T12616] bond_slave_0: entered promiscuous mode [ 649.187150][T12616] bond_slave_1: entered promiscuous mode [ 649.655168][T12627] syz.1.1939[12627] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 649.655306][T12627] syz.1.1939[12627] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 649.997737][T12632] ecryptfs_parse_options: eCryptfs: unrecognized option [³(] [ 650.016638][T12632] ecryptfs_parse_options: eCryptfs: unrecognized option [{\)] [ 650.024250][T12632] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 650.037364][T12632] Error parsing options; rc = [-22] [ 650.107688][T12627] syz.1.1939[12627] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 650.107800][T12627] syz.1.1939[12627] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 650.145353][T12627] syz.1.1939[12627] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 650.158182][T12627] syz.1.1939[12627] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 651.163854][T12643] loop3: detected capacity change from 0 to 1024 [ 652.541813][T12643] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 652.591726][T12643] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 652.612932][T12643] JBD2: no valid journal superblock found [ 652.637544][T12643] EXT4-fs (loop3): Could not load journal inode [ 652.999404][T12659] loop3: detected capacity change from 0 to 8192 [ 653.237320][T12659] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 655.029981][T12676] loop3: detected capacity change from 0 to 128 [ 655.785592][T12697] xt_socket: unknown flags 0x48 [ 659.194437][T12714] loop3: detected capacity change from 0 to 2048 [ 661.367755][T12716] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 663.578470][T12734] loop3: detected capacity change from 0 to 2048 [ 664.279125][T12734] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 664.673821][T12731] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 665.171885][T12757] netlink: 'syz.3.1973': attribute type 1 has an invalid length. [ 665.199127][T12757] 8021q: adding VLAN 0 to HW filter on device bond1 [ 665.366581][T12757] ipvlan2: entered allmulticast mode [ 665.389035][T12757] bond1: entered allmulticast mode [ 665.415650][T12759] bond1: (slave gretap1): making interface the new active one [ 665.425932][T12759] gretap1: entered allmulticast mode [ 665.433602][T12759] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 666.607727][T12772] 9pnet_fd: Insufficient options for proto=fd [ 670.614444][T12801] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1986'. [ 674.699586][T12844] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-": -EINTR [ 676.369051][T12864] lo speed is unknown, defaulting to 1000 [ 680.456546][T12899] bridge0: entered allmulticast mode [ 680.483593][T12899] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 683.161001][T12938] netlink: 'syz.2.2026': attribute type 3 has an invalid length. [ 685.680174][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.686772][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.836375][T12991] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 690.088026][T13029] 9pnet_fd: Insufficient options for proto=fd [ 692.300173][T13049] vlan2: entered promiscuous mode [ 692.311251][T13049] team0: entered promiscuous mode [ 693.405543][T13064] netlink: 2028 bytes leftover after parsing attributes in process `syz.1.2063'. [ 693.415067][T13064] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2063'. [ 693.684986][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 693.684999][ T28] audit: type=1326 audit(1752131099.418:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13067 comm="syz.4.2065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6d018e929 code=0x7ffc0000 [ 693.716345][ T28] audit: type=1326 audit(1752131099.418:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13067 comm="syz.4.2065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6d018e929 code=0x7ffc0000 [ 693.760106][ T28] audit: type=1326 audit(1752131099.428:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13067 comm="syz.4.2065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb6d018e929 code=0x7ffc0000 [ 694.078186][ T28] audit: type=1326 audit(1752131099.428:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13067 comm="syz.4.2065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6d018e929 code=0x7ffc0000 [ 694.295926][ T28] audit: type=1326 audit(1752131099.428:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13067 comm="syz.4.2065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6d018e929 code=0x7ffc0000 [ 694.477132][ T28] audit: type=1326 audit(1752131099.428:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13067 comm="syz.4.2065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fb6d018e929 code=0x7ffc0000 [ 695.335272][ T28] audit: type=1326 audit(1752131099.428:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13067 comm="syz.4.2065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6d018e929 code=0x7ffc0000 [ 695.341065][ T5874] IPVS: starting estimator thread 0... [ 695.621895][ T28] audit: type=1326 audit(1752131099.428:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13067 comm="syz.4.2065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb6d018e929 code=0x7ffc0000 [ 695.645162][ T28] audit: type=1326 audit(1752131099.428:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13067 comm="syz.4.2065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6d018e929 code=0x7ffc0000 [ 695.704143][ T28] audit: type=1326 audit(1752131099.428:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13067 comm="syz.4.2065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6d018e929 code=0x7ffc0000 [ 695.727199][T13079] IPVS: using max 30 ests per chain, 72000 per kthread [ 696.097398][T13091] netlink: 'syz.4.2072': attribute type 21 has an invalid length. [ 696.106576][T13091] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2072'. [ 697.133630][T13102] xt_CT: You must specify a L4 protocol and not use inversions on it [ 697.718122][T13107] bridge_slave_0: left allmulticast mode [ 697.723982][T13107] bridge_slave_0: left promiscuous mode [ 697.730072][T13107] bridge0: port 1(bridge_slave_0) entered disabled state [ 697.745633][T13107] bridge_slave_1: left allmulticast mode [ 697.752424][T13107] bridge_slave_1: left promiscuous mode [ 697.790443][T13107] bridge0: port 2(bridge_slave_1) entered disabled state [ 697.811275][T13107] bond0: (slave bond_slave_0): Releasing backup interface [ 697.892958][T13111] syz.2.2079 (13111): attempted to duplicate a private mapping with mremap. This is not supported. [ 697.895804][T13107] bond_slave_0: left promiscuous mode [ 698.513366][T13107] bond0: (slave bond_slave_1): Releasing backup interface [ 698.554680][T13107] bond_slave_1: left promiscuous mode [ 698.820567][T13107] team0: Port device team_slave_0 removed [ 699.371612][T13107] team0: Port device team_slave_1 removed [ 699.414567][T13107] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 699.442034][T13107] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 699.558590][T13107] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 699.588592][T13107] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 699.628013][T13107] bond1: (slave gretap1): Releasing active interface [ 699.634740][T13107] gretap1: left allmulticast mode [ 699.669646][T13108] team0: Mode changed to "roundrobin" [ 701.775952][T13138] mmap: syz.3.2091 (13138) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 701.861442][T13140] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2088'. [ 703.031968][T13159] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2096'. [ 703.051113][T13159] netlink: 120 bytes leftover after parsing attributes in process `syz.2.2096'. [ 708.071790][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 708.071803][ T28] audit: type=1326 audit(1752131113.808:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13203 comm="syz.3.2108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f826ab8e929 code=0x7ffc0000 [ 708.103456][ T28] audit: type=1326 audit(1752131113.838:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13203 comm="syz.3.2108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f826ab8e929 code=0x7ffc0000 [ 708.141915][ T28] audit: type=1326 audit(1752131113.868:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13203 comm="syz.3.2108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f826ab8e929 code=0x7ffc0000 [ 708.220716][ T28] audit: type=1326 audit(1752131113.868:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13203 comm="syz.3.2108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f826ab8e929 code=0x7ffc0000 [ 708.275230][ T28] audit: type=1326 audit(1752131113.868:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13203 comm="syz.3.2108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f826ab8e929 code=0x7ffc0000 [ 708.348379][ T28] audit: type=1326 audit(1752131113.868:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13203 comm="syz.3.2108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f826ab8e929 code=0x7ffc0000 [ 708.399204][T13213] netlink: 2028 bytes leftover after parsing attributes in process `syz.2.2109'. [ 708.447365][T13213] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2109'. [ 708.468657][ T28] audit: type=1326 audit(1752131113.878:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13203 comm="syz.3.2108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f826ab8e929 code=0x7ffc0000 [ 708.491851][ T28] audit: type=1326 audit(1752131113.878:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13203 comm="syz.3.2108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f826ab8e929 code=0x7ffc0000 [ 708.514366][ T28] audit: type=1326 audit(1752131113.908:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13203 comm="syz.3.2108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f826ab8e929 code=0x7ffc0000 [ 708.537037][ T28] audit: type=1326 audit(1752131113.908:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13203 comm="syz.3.2108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f826ab8e929 code=0x7ffc0000 [ 710.932639][T13237] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 713.200542][T13259] netlink: 2028 bytes leftover after parsing attributes in process `syz.4.2124'. [ 713.321999][T13259] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2124'. [ 716.582544][T13300] xt_CT: You must specify a L4 protocol and not use inversions on it [ 716.690943][T13302] netlink: 2028 bytes leftover after parsing attributes in process `syz.3.2135'. [ 716.700491][T13302] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2135'. [ 718.063285][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 718.063298][ T28] audit: type=1326 audit(1752131123.798:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13315 comm="syz.4.2142" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb6d018e929 code=0x0 [ 720.433426][T13356] sit0: entered promiscuous mode [ 720.463744][T13356] netlink: 21 bytes leftover after parsing attributes in process `syz.1.2155'. [ 721.075050][T13369] xt_hashlimit: max too large, truncated to 1048576 [ 723.536692][T13396] xfrm0: entered promiscuous mode [ 723.541981][T13396] xfrm0: entered allmulticast mode [ 730.187553][T13488] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2199'. [ 736.039377][T13542] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2212'. [ 736.070838][T13542] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2212'. [ 742.500212][T13590] bridge0: entered allmulticast mode [ 743.288845][T13601] futex_wake_op: syz.4.2231 tries to shift op by 32; fix this program [ 745.818708][T13641] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2241'. [ 747.257977][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.264334][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.130651][T13665] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2248'. [ 748.335174][T13668] lo speed is unknown, defaulting to 1000 [ 749.444497][T13689] netlink: 'syz.2.2253': attribute type 11 has an invalid length. [ 751.017869][T13697] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2257'. [ 753.551903][T13719] xt_CT: You must specify a L4 protocol and not use inversions on it [ 755.381324][T13731] lo speed is unknown, defaulting to 1000 [ 755.789219][T13743] CIFS mount error: No usable UNC path provided in device string! [ 755.789219][T13743] [ 755.799510][T13743] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 758.764859][T13773] DRBG: could not allocate digest TFM handle: hmac(sha256) [ 765.082786][ T28] audit: type=1326 audit(1752131170.818:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13830 comm="syz.1.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f700eb8e929 code=0x7ffc0000 [ 765.106283][ T28] audit: type=1326 audit(1752131170.818:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13830 comm="syz.1.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f700eb8e929 code=0x7ffc0000 [ 765.129910][ T28] audit: type=1326 audit(1752131170.818:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13830 comm="syz.1.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f700eb8e929 code=0x7ffc0000 [ 765.152703][ T28] audit: type=1326 audit(1752131170.818:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13830 comm="syz.1.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f700eb8e929 code=0x7ffc0000 [ 765.176078][ T28] audit: type=1326 audit(1752131170.818:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13830 comm="syz.1.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f700eb8e929 code=0x7ffc0000 [ 765.203338][ T28] audit: type=1326 audit(1752131170.818:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13830 comm="syz.1.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f700eb8e929 code=0x7ffc0000 [ 765.240255][ T28] audit: type=1326 audit(1752131170.818:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13830 comm="syz.1.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f700eb8e929 code=0x7ffc0000 [ 765.278314][ T28] audit: type=1326 audit(1752131170.818:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13830 comm="syz.1.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f700eb8e929 code=0x7ffc0000 [ 765.310202][ T28] audit: type=1326 audit(1752131170.818:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13830 comm="syz.1.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f700eb8e929 code=0x7ffc0000 [ 765.342493][ T28] audit: type=1326 audit(1752131170.818:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13830 comm="syz.1.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f700eb8e929 code=0x7ffc0000 [ 765.395714][T13839] macsec1: entered promiscuous mode [ 765.402261][T13839] macvlan1: entered promiscuous mode [ 765.416752][T13839] macvlan1: left promiscuous mode [ 766.282668][T13851] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 766.289959][T13851] IPv6: NLM_F_CREATE should be set when creating new route [ 766.304204][T13851] lo: entered allmulticast mode [ 766.348673][T13851] tunl0: entered allmulticast mode [ 766.408407][T13854] xt_CT: You must specify a L4 protocol and not use inversions on it [ 766.817568][T13851] gre0: entered allmulticast mode [ 766.952643][T13851] gretap0: entered allmulticast mode [ 766.990832][T13851] erspan0: entered allmulticast mode [ 767.040412][T13851] ip_vti0: entered allmulticast mode [ 767.167532][T13851] ip6_vti0: entered allmulticast mode [ 767.247835][T13851] sit0: entered allmulticast mode [ 767.543211][T13861] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2297'. [ 767.579811][T13851] ip6tnl0: entered allmulticast mode [ 768.011398][T13851] ip6gre0: entered allmulticast mode [ 768.197614][T13851] syz_tun: entered allmulticast mode [ 768.234223][T13851] ip6gretap0: entered allmulticast mode [ 768.321378][T13851] bridge0: entered allmulticast mode [ 768.372447][T13851] vcan0: entered allmulticast mode [ 768.389343][T13851] team0: entered allmulticast mode [ 768.402150][T13851] dummy0: entered allmulticast mode [ 768.502913][T13851] nlmon0: entered allmulticast mode [ 768.539558][T13851] caif0: entered allmulticast mode [ 768.570813][T13851] batadv0: entered allmulticast mode [ 768.630005][T13851] vxcan0: entered allmulticast mode [ 768.649889][T13851] vxcan1: entered allmulticast mode [ 768.664939][T13851] veth0: entered allmulticast mode [ 768.679509][T13851] veth1: entered allmulticast mode [ 768.704731][T13851] wg0: entered allmulticast mode [ 768.728860][T13851] wg1: entered allmulticast mode [ 768.747398][T13851] wg2: entered allmulticast mode [ 768.765526][T13851] veth0_to_bridge: entered allmulticast mode [ 768.809692][T13851] bridge_slave_0: entered allmulticast mode [ 768.867659][T13851] veth1_to_bridge: entered allmulticast mode [ 768.928192][T13851] bridge_slave_1: entered allmulticast mode [ 768.951620][T13851] veth0_to_bond: entered allmulticast mode [ 768.967426][T13851] bond_slave_0: entered allmulticast mode [ 768.987387][T13851] veth1_to_bond: entered allmulticast mode [ 769.001625][T13851] bond_slave_1: entered allmulticast mode [ 769.028714][T13851] veth0_to_team: entered allmulticast mode [ 769.043181][T13851] team_slave_0: entered allmulticast mode [ 769.069704][T13851] veth1_to_team: entered allmulticast mode [ 769.086285][T13851] team_slave_1: entered allmulticast mode [ 769.107647][T13851] veth0_to_batadv: entered allmulticast mode [ 769.180955][T13851] batadv_slave_0: entered allmulticast mode [ 769.322001][T13851] veth1_to_batadv: entered allmulticast mode [ 769.371433][T13851] batadv_slave_1: entered allmulticast mode [ 769.390175][T13851] xfrm0: entered allmulticast mode [ 769.428462][T13851] veth0_to_hsr: entered allmulticast mode [ 769.477463][T13851] hsr_slave_0: entered allmulticast mode [ 769.525812][T13851] veth1_to_hsr: entered allmulticast mode [ 769.569971][T13851] hsr_slave_1: entered allmulticast mode [ 769.579218][T13851] hsr0: entered allmulticast mode [ 769.609330][T13851] veth1_vlan: entered allmulticast mode [ 769.641519][T13851] veth0_vlan: entered allmulticast mode [ 769.719638][T13851] @: entered allmulticast mode [ 769.734874][T13851] vlan1: entered allmulticast mode [ 769.744972][T13851] macvlan0: left promiscuous mode [ 769.751454][T13851] macvlan0: entered allmulticast mode [ 769.760793][T13851] macvlan1: entered allmulticast mode [ 769.772899][T13851] ipvlan0: entered allmulticast mode [ 769.783312][T13851] ipvlan1: entered allmulticast mode [ 769.804591][T13851] veth1_macvtap: entered allmulticast mode [ 769.835016][T13851] veth0_macvtap: entered allmulticast mode [ 769.865046][T13851] macvtap0: entered allmulticast mode [ 769.894473][T13851] macsec0: entered allmulticast mode [ 769.925153][T13851] geneve0: entered allmulticast mode [ 769.957876][T13851] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.966870][T13851] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.976365][T13851] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.985590][T13851] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.994893][T13851] geneve1: entered allmulticast mode [ 770.026592][T13851] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 770.059555][T13851] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 770.083317][T13851] netdevsim netdevsim4 netdevsim2: entered allmulticast mode [ 770.107585][T13851] netdevsim netdevsim4 netdevsim3: entered allmulticast mode [ 770.131060][T13851] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 770.151178][T13851] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 770.163071][T13851] vlan2: entered allmulticast mode [ 770.172359][T13851] ip6tnl1: entered allmulticast mode [ 770.190689][T13851] sit1: entered allmulticast mode [ 770.202548][T13851] bridge1: entered allmulticast mode [ 770.218700][T13851] bridge2: entered allmulticast mode [ 770.234495][T13851] sit2: entered allmulticast mode [ 770.240929][T13851] veth2: entered allmulticast mode [ 770.252446][T13851] veth3: entered allmulticast mode [ 770.260026][T13851] bridge3: entered allmulticast mode [ 770.282130][T13851] sit3: entered allmulticast mode [ 770.316740][T13851] syztnl1: entered allmulticast mode [ 770.338656][T13851] ip6gre1: entered allmulticast mode [ 770.421113][T13851] bridge5: entered allmulticast mode [ 770.431684][T13867] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2309'. [ 770.726922][T13887] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2305'. [ 771.184865][T13900] vlan0: entered promiscuous mode [ 771.237091][T13900] bond0: entered promiscuous mode [ 771.328810][T13905] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2310'. [ 772.094350][T13912] netlink: 'syz.1.2316': attribute type 1 has an invalid length. [ 772.205525][T13912] 8021q: adding VLAN 0 to HW filter on device bond0 [ 772.331427][T13914] ipvlan1: entered allmulticast mode [ 772.372617][T13914] bond0: entered allmulticast mode [ 772.558071][T13912] bond0: (slave gretap1): making interface the new active one [ 772.587216][T13912] gretap1: entered allmulticast mode [ 772.595919][T13912] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 775.384735][T13952] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2325'. [ 776.817243][T13960] xt_socket: unknown flags 0x48 [ 777.619739][T13962] ptrace attach of ""[13963] was attempted by "./syz-executor exec"[13962] [ 782.344191][T13995] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 784.243058][T14008] ptrace attach of ""[14009] was attempted by "./syz-executor exec"[14008] [ 787.025571][T14024] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2347'. [ 790.860363][T14053] netlink: 'syz.2.2356': attribute type 1 has an invalid length. [ 791.788072][T14053] 8021q: adding VLAN 0 to HW filter on device bond2 [ 791.814173][T14061] ipvlan1: entered allmulticast mode [ 791.833014][T14061] bond2: entered allmulticast mode [ 791.836829][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 791.836842][ T28] audit: type=1326 audit(1752131198.559:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14064 comm="syz.4.2357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6d018e929 code=0x7ffc0000 [ 791.887053][ T28] audit: type=1326 audit(1752131198.559:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14064 comm="syz.4.2357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb6d018e929 code=0x7ffc0000 [ 791.943236][ T28] audit: type=1326 audit(1752131198.559:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14064 comm="syz.4.2357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6d018e929 code=0x7ffc0000 [ 792.001862][ T28] audit: type=1326 audit(1752131198.559:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14064 comm="syz.4.2357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fb6d018e929 code=0x7ffc0000 [ 792.033204][ T28] audit: type=1326 audit(1752131198.559:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14064 comm="syz.4.2357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6d018e929 code=0x7ffc0000 [ 792.062629][ T28] audit: type=1326 audit(1752131198.559:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14064 comm="syz.4.2357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6d018e929 code=0x7ffc0000 [ 792.103696][ T28] audit: type=1326 audit(1752131198.559:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14064 comm="syz.4.2357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=90 compat=0 ip=0x7fb6d018e929 code=0x7ffc0000 [ 792.133384][T14074] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2361'. [ 792.143752][T14074] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2361'. [ 792.148191][ T28] audit: type=1326 audit(1752131198.559:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14064 comm="syz.4.2357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6d018e929 code=0x7ffc0000 [ 792.159993][T14074] bridge2: entered promiscuous mode [ 792.338276][ T28] audit: type=1326 audit(1752131198.559:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14064 comm="syz.4.2357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb6d018e929 code=0x7ffc0000 [ 792.382072][ T28] audit: type=1326 audit(1752131198.559:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14064 comm="syz.4.2357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6d018e929 code=0x7ffc0000 [ 792.409389][T14074] bridge2: entered allmulticast mode [ 792.420527][T14079] netlink: 'syz.3.2361': attribute type 4 has an invalid length. [ 793.640905][T14095] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2365'. [ 795.090388][T14110] lo speed is unknown, defaulting to 1000 [ 795.190495][T10551] IPVS: starting estimator thread 0... [ 795.511508][T14109] IPVS: using max 20 ests per chain, 48000 per kthread [ 796.234061][T14121] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2373'. [ 798.239791][T14136] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2377'. [ 798.985355][T14141] bond0: (slave gretap1): Releasing active interface [ 799.006329][T14141] gretap1: left allmulticast mode [ 799.142770][T14150] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 799.185182][T14141] team0: Mode changed to "roundrobin" [ 800.312954][T14165] macsec2: entered promiscuous mode [ 800.337299][T14165] macvlan1: entered promiscuous mode [ 800.379837][T14165] macvlan1: left promiscuous mode [ 801.723868][T14185] team0: Mode changed to "roundrobin" [ 804.982127][T14220] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 805.114052][T14231] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2410'. [ 805.154446][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 805.154460][ T28] audit: type=1326 audit(1752131211.879:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14227 comm="syz.1.2409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f700eb8e929 code=0x7ffc0000 [ 805.227078][ T28] audit: type=1326 audit(1752131211.879:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14227 comm="syz.1.2409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f700eb8e929 code=0x7ffc0000 [ 805.287874][ T28] audit: type=1326 audit(1752131211.879:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14227 comm="syz.1.2409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f700eb8e929 code=0x7ffc0000 [ 805.294255][T14232] lo speed is unknown, defaulting to 1000 [ 805.310474][T14235] netlink: 'syz.3.2411': attribute type 3 has an invalid length. [ 805.357035][ T28] audit: type=1326 audit(1752131211.889:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14227 comm="syz.1.2409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f700eb8e929 code=0x7ffc0000 [ 805.428658][ T28] audit: type=1326 audit(1752131211.889:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14227 comm="syz.1.2409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f700eb8e929 code=0x7ffc0000 [ 805.477115][ T28] audit: type=1326 audit(1752131211.889:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14227 comm="syz.1.2409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f700eb8e929 code=0x7ffc0000 [ 805.517284][ T28] audit: type=1326 audit(1752131211.889:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14227 comm="syz.1.2409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f700eb8e929 code=0x7ffc0000 [ 805.569169][ T28] audit: type=1326 audit(1752131211.889:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14227 comm="syz.1.2409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f700eb8e929 code=0x7ffc0000 [ 805.651787][ T28] audit: type=1326 audit(1752131211.889:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14227 comm="syz.1.2409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f700eb8e929 code=0x7ffc0000 [ 805.737930][ T28] audit: type=1326 audit(1752131211.889:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14227 comm="syz.1.2409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f700eb8e929 code=0x7ffc0000 [ 808.563033][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.579666][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.624079][T14262] xt_TPROXY: Can be used only with -p tcp or -p udp [ 808.687213][T14269] netlink: 'syz.3.2420': attribute type 21 has an invalid length. [ 808.695242][T14269] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2420'. [ 813.171328][T14315] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2434'. [ 813.965971][T14315] hsr_slave_1 (unregistering): left promiscuous mode [ 814.200147][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 814.200161][ T28] audit: type=1326 audit(1752131220.929:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14327 comm="syz.3.2438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f826ab8e929 code=0x7ffc0000 [ 814.477586][ T28] audit: type=1326 audit(1752131220.959:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14327 comm="syz.3.2438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f826ab8e929 code=0x7ffc0000 [ 814.794043][ T28] audit: type=1326 audit(1752131220.959:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14327 comm="syz.3.2438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f826ab8e929 code=0x7ffc0000 [ 814.817438][ T28] audit: type=1326 audit(1752131220.959:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14327 comm="syz.3.2438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f826ab8e929 code=0x7ffc0000 [ 814.840318][ T28] audit: type=1326 audit(1752131220.959:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14327 comm="syz.3.2438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f826ab8e929 code=0x7ffc0000 [ 815.007229][ T28] audit: type=1326 audit(1752131220.959:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14327 comm="syz.3.2438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f826ab8e929 code=0x7ffc0000 [ 815.029996][ T28] audit: type=1326 audit(1752131220.959:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14327 comm="syz.3.2438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=90 compat=0 ip=0x7f826ab8e929 code=0x7ffc0000 [ 815.067509][ T28] audit: type=1326 audit(1752131220.959:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14327 comm="syz.3.2438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f826ab8e929 code=0x7ffc0000 [ 815.090530][ T28] audit: type=1326 audit(1752131220.959:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14327 comm="syz.3.2438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f826ab8e929 code=0x7ffc0000 [ 815.970060][ T28] audit: type=1326 audit(1752131220.959:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14327 comm="syz.3.2438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f826ab8e929 code=0x7ffc0000 [ 817.355673][T14354] cifs: Bad value for 'port' [ 820.477482][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 820.477514][ T28] audit: type=1326 audit(1752131227.109:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14393 comm="syz.4.2457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6d018e929 code=0x7ffc0000 [ 820.774220][ T28] audit: type=1326 audit(1752131227.109:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14393 comm="syz.4.2457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6d018e929 code=0x7ffc0000 [ 820.799434][ T28] audit: type=1326 audit(1752131227.149:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14393 comm="syz.4.2457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fb6d018e929 code=0x7ffc0000 [ 820.833777][ T28] audit: type=1326 audit(1752131227.269:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14393 comm="syz.4.2457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6d018e929 code=0x7ffc0000 [ 820.929385][ T28] audit: type=1326 audit(1752131227.299:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14393 comm="syz.4.2457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6d018e929 code=0x7ffc0000 [ 820.978483][ T28] audit: type=1326 audit(1752131227.399:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14393 comm="syz.4.2457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7fb6d018e929 code=0x7ffc0000 [ 821.002376][T14407] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2469'. [ 821.033888][ T28] audit: type=1326 audit(1752131227.559:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14393 comm="syz.4.2457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6d018e929 code=0x7ffc0000 [ 821.047183][T14407] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2469'. [ 821.094272][T14407] bridge8: entered promiscuous mode [ 821.104271][ T28] audit: type=1326 audit(1752131227.559:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14393 comm="syz.4.2457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6d018e929 code=0x7ffc0000 [ 821.107761][T14407] bridge8: entered allmulticast mode [ 821.146417][T14414] netlink: 'syz.1.2469': attribute type 4 has an invalid length. [ 821.193990][T14411] lo speed is unknown, defaulting to 1000 [ 821.334608][T14409] lo speed is unknown, defaulting to 1000 [ 823.710229][ T28] audit: type=1326 audit(1752131230.289:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14440 comm="syz.3.2470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f826ab8e929 code=0x7ffc0000 [ 823.743710][ T28] audit: type=1326 audit(1752131230.289:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14440 comm="syz.3.2470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f826ab8e929 code=0x7ffc0000 [ 826.383237][T14466] lo speed is unknown, defaulting to 1000 [ 831.737629][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 831.737665][ T28] audit: type=1326 audit(1752131238.459:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14531 comm="syz.4.2496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6d018e929 code=0x7ffc0000 [ 831.837000][ T28] audit: type=1326 audit(1752131238.559:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14531 comm="syz.4.2496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7fb6d018e929 code=0x7ffc0000 [ 831.910971][ T28] audit: type=1326 audit(1752131238.559:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14531 comm="syz.4.2496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6d018e929 code=0x7ffc0000 [ 831.971983][ T28] audit: type=1326 audit(1752131238.559:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14531 comm="syz.4.2496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6d018e929 code=0x7ffc0000 [ 832.002629][ T28] audit: type=1326 audit(1752131238.559:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14531 comm="syz.4.2496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fb6d018e929 code=0x7ffc0000 [ 832.021012][T14532] netlink: 'syz.4.2496': attribute type 16 has an invalid length. [ 832.031266][ T28] audit: type=1326 audit(1752131238.559:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14531 comm="syz.4.2496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb6d018e963 code=0x7ffc0000 [ 832.034087][T14532] netlink: 'syz.4.2496': attribute type 17 has an invalid length. [ 832.061734][ T28] audit: type=1326 audit(1752131238.559:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14531 comm="syz.4.2496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb6d018d3df code=0x7ffc0000 [ 832.094493][ T28] audit: type=1326 audit(1752131238.559:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14531 comm="syz.4.2496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fb6d018e9b7 code=0x7ffc0000 [ 832.123492][ T28] audit: type=1326 audit(1752131238.559:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14531 comm="syz.4.2496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb6d018d290 code=0x7ffc0000 [ 832.149257][T14532] 8021q: adding VLAN 0 to HW filter on device team0 [ 832.155600][ T28] audit: type=1326 audit(1752131238.559:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14531 comm="syz.4.2496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fb6d018d58a code=0x7ffc0000 [ 832.156525][T14532] tipc: Resetting bearer [ 832.186168][T14532] tipc: Resetting bearer [ 832.196601][T14532] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 832.633807][T14541] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2499'. [ 832.643116][T14541] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2499'. [ 840.207866][T14631] xt_TCPMSS: Only works on TCP SYN packets [ 840.318504][T14643] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2530'. [ 840.590236][T14645] netlink: 'syz.4.2531': attribute type 10 has an invalid length. [ 840.598284][T14645] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2531'. [ 840.607774][T14645] geneve0: left allmulticast mode [ 840.614377][T14645] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 840.623720][T14645] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 840.632729][T14645] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 840.641572][T14645] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 840.656612][T14645] geneve0: entered allmulticast mode [ 840.664754][T14645] team0: Port device geneve0 added [ 841.898412][T14662] ceph: No mds server is up or the cluster is laggy [ 856.244995][T14778] netlink: 'syz.2.2570': attribute type 3 has an invalid length. [ 857.757289][T14789] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2576'. [ 858.159516][T14804] SET target dimension over the limit! [ 860.283415][T14814] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2584'. [ 860.309628][T14814] vlan4: entered promiscuous mode [ 860.599447][T14823] overlayfs: failed to clone upperpath [ 863.010329][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 863.010361][ T28] audit: type=1326 audit(1752131269.729:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14857 comm="syz.3.2596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f826ab8e929 code=0x7ffc0000 [ 863.478214][ T28] audit: type=1326 audit(1752131269.739:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14857 comm="syz.3.2596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f826ab8e929 code=0x7ffc0000 [ 863.506161][ T28] audit: type=1326 audit(1752131270.199:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14857 comm="syz.3.2596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f826ab8e929 code=0x7ffc0000 [ 863.530032][T14861] netlink: 'syz.3.2596': attribute type 16 has an invalid length. [ 863.539720][ T28] audit: type=1326 audit(1752131270.199:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14857 comm="syz.3.2596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f826ab8e929 code=0x7ffc0000 [ 863.569906][T14861] netlink: 'syz.3.2596': attribute type 17 has an invalid length. [ 863.579911][ T28] audit: type=1326 audit(1752131270.199:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14857 comm="syz.3.2596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f826ab8e929 code=0x7ffc0000 [ 863.651931][ T28] audit: type=1326 audit(1752131270.199:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14857 comm="syz.3.2596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f826ab8e929 code=0x7ffc0000 [ 863.692957][T14861] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 863.717141][ T28] audit: type=1326 audit(1752131270.199:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14857 comm="syz.3.2596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f826ab8e929 code=0x7ffc0000 [ 863.717224][T14863] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2598'. [ 863.773206][ T28] audit: type=1326 audit(1752131270.199:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14857 comm="syz.3.2596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f826ab8e929 code=0x7ffc0000 [ 863.794898][T14863] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 863.828366][T14863] batman_adv: batadv0: Adding interface: macvlan2 [ 863.837337][ T28] audit: type=1326 audit(1752131270.199:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14857 comm="syz.3.2596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f826ab8e929 code=0x7ffc0000 [ 863.853217][T14863] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 863.897022][ T28] audit: type=1326 audit(1752131270.199:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14857 comm="syz.3.2596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f826ab8e929 code=0x7ffc0000 [ 863.933300][T14863] batman_adv: batadv0: Interface activated: macvlan2 [ 864.272000][T14875] overlayfs: failed to clone upperpath [ 870.037886][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.044328][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.060763][T14929] x_tables: ip_tables: icmp.0 match: invalid size 8 (kernel) != (user) 568 [ 872.079456][T14934] xt_CT: You must specify a L4 protocol and not use inversions on it [ 872.230973][T14936] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2625'. [ 872.818202][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 872.818234][ T28] audit: type=1326 audit(1752131279.459:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14941 comm="syz.2.2628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7f0d8e929 code=0x7ffc0000 [ 872.932820][T14942] netlink: 'syz.2.2628': attribute type 16 has an invalid length. [ 872.941167][ T28] audit: type=1326 audit(1752131279.469:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14941 comm="syz.2.2628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7f0d8e929 code=0x7ffc0000 [ 872.959084][T14942] netlink: 'syz.2.2628': attribute type 17 has an invalid length. [ 873.033442][ T28] audit: type=1326 audit(1752131279.479:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14941 comm="syz.2.2628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7fe7f0d8e929 code=0x7ffc0000 [ 873.076045][T14942] 8021q: adding VLAN 0 to HW filter on device team0 [ 873.114580][T14942] tipc: Resetting bearer [ 873.124991][T14942] tipc: Resetting bearer [ 873.138944][ T28] audit: type=1326 audit(1752131279.489:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14941 comm="syz.2.2628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7f0d8e929 code=0x7ffc0000 [ 873.183529][T14942] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 873.187159][ T28] audit: type=1326 audit(1752131279.489:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14941 comm="syz.2.2628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7f0d8e929 code=0x7ffc0000 [ 873.287641][ T28] audit: type=1326 audit(1752131279.499:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14941 comm="syz.2.2628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fe7f0d8e929 code=0x7ffc0000 [ 873.357158][ T28] audit: type=1326 audit(1752131279.519:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14941 comm="syz.2.2628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe7f0d8e963 code=0x7ffc0000 [ 873.392072][ T28] audit: type=1326 audit(1752131279.539:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14941 comm="syz.2.2628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe7f0d8d3df code=0x7ffc0000 [ 873.438873][ T28] audit: type=1326 audit(1752131279.579:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14941 comm="syz.2.2628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fe7f0d8e9b7 code=0x7ffc0000 [ 873.462497][ T28] audit: type=1326 audit(1752131279.579:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14941 comm="syz.2.2628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe7f0d8d290 code=0x7ffc0000 [ 873.778640][T14960] lo speed is unknown, defaulting to 1000 [ 874.207905][T14967] [ 874.210382][T14967] ====================================================== [ 874.217404][T14967] WARNING: possible circular locking dependency detected [ 874.224443][T14967] 6.6.96-syzkaller #0 Not tainted [ 874.229461][T14967] ------------------------------------------------------ [ 874.236473][T14967] syz.4.2635/14967 is trying to acquire lock: [ 874.242542][T14967] ffff88801bb7b238 (&trie->lock){-.-.}-{2:2}, at: trie_delete_elem+0x96/0x6a0 [ 874.251454][T14967] [ 874.251454][T14967] but task is already holding lock: [ 874.258827][T14967] ffff88801ae78558 (&n->list_lock){-.-.}-{2:2}, at: __unfreeze_partials+0x7f/0x210 [ 874.268134][T14967] [ 874.268134][T14967] which lock already depends on the new lock. [ 874.268134][T14967] [ 874.278529][T14967] [ 874.278529][T14967] the existing dependency chain (in reverse order) is: [ 874.287613][T14967] [ 874.287613][T14967] -> #1 (&n->list_lock){-.-.}-{2:2}: [ 874.295074][T14967] _raw_spin_lock_irqsave+0xa8/0xf0 [ 874.300789][T14967] get_partial_node+0x36/0x540 [ 874.306099][T14967] ___slab_alloc+0x9cd/0x12f0 [ 874.311307][T14967] __kmem_cache_alloc_node+0x1a2/0x260 [ 874.317271][T14967] __kmalloc_node+0xa4/0x230 [ 874.322383][T14967] bpf_map_kmalloc_node+0xbc/0x1b0 [ 874.328010][T14967] trie_update_elem+0x166/0xea0 [ 874.333373][T14967] bpf_map_update_value+0x67c/0x740 [ 874.339095][T14967] map_update_elem+0x57b/0x700 [ 874.344368][T14967] __sys_bpf+0x652/0x800 [ 874.349116][T14967] __x64_sys_bpf+0x7c/0x90 [ 874.354038][T14967] do_syscall_64+0x55/0xb0 [ 874.358981][T14967] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 874.365395][T14967] [ 874.365395][T14967] -> #0 (&trie->lock){-.-.}-{2:2}: [ 874.372677][T14967] __lock_acquire+0x2ddb/0x7c80 [ 874.378037][T14967] lock_acquire+0x197/0x410 [ 874.383048][T14967] _raw_spin_lock_irqsave+0xa8/0xf0 [ 874.388756][T14967] trie_delete_elem+0x96/0x6a0 [ 874.394029][T14967] bpf_prog_2c29ac5cdc6b1842+0x42/0x46 [ 874.400001][T14967] bpf_trace_run2+0x1d1/0x3c0 [ 874.405183][T14967] __bpf_trace_contention_end+0xdd/0x130 [ 874.411329][T14967] trace_contention_end+0xe6/0x110 [ 874.416976][T14967] __pv_queued_spin_lock_slowpath+0x7ec/0x9d0 [ 874.423592][T14967] do_raw_spin_lock+0x24e/0x2c0 [ 874.428972][T14967] _raw_spin_lock_irqsave+0xb4/0xf0 [ 874.434690][T14967] __unfreeze_partials+0x7f/0x210 [ 874.440222][T14967] put_cpu_partial+0x17c/0x250 [ 874.445516][T14967] __slab_free+0x31d/0x410 [ 874.450451][T14967] qlist_free_all+0x75/0xe0 [ 874.455459][T14967] kasan_quarantine_reduce+0x143/0x160 [ 874.461424][T14967] __kasan_slab_alloc+0x22/0x80 [ 874.466784][T14967] slab_post_alloc_hook+0x6e/0x4d0 [ 874.472401][T14967] kmem_cache_alloc+0x11e/0x2e0 [ 874.477755][T14967] security_file_alloc+0x34/0x120 [ 874.483283][T14967] init_file+0x94/0x1f0 [ 874.487945][T14967] alloc_empty_file+0xb7/0x1d0 [ 874.493212][T14967] alloc_file+0x5c/0x600 [ 874.497962][T14967] alloc_file_pseudo+0x17e/0x200 [ 874.503445][T14967] sock_alloc_file+0xb7/0x280 [ 874.508648][T14967] __sys_socket+0x13d/0x1a0 [ 874.513688][T14967] __x64_sys_socket+0x7a/0x90 [ 874.518884][T14967] do_syscall_64+0x55/0xb0 [ 874.523812][T14967] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 874.530211][T14967] [ 874.530211][T14967] other info that might help us debug this: [ 874.530211][T14967] [ 874.540460][T14967] Possible unsafe locking scenario: [ 874.540460][T14967] [ 874.547898][T14967] CPU0 CPU1 [ 874.553247][T14967] ---- ---- [ 874.558620][T14967] lock(&n->list_lock); [ 874.562854][T14967] lock(&trie->lock); [ 874.569430][T14967] lock(&n->list_lock); [ 874.576189][T14967] lock(&trie->lock); [ 874.580263][T14967] [ 874.580263][T14967] *** DEADLOCK *** [ 874.580263][T14967] [ 874.588389][T14967] 3 locks held by syz.4.2635/14967: [ 874.593572][T14967] #0: ffffffff8ce2ea60 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x24/0x50 [ 874.603129][T14967] #1: ffff88801ae78558 (&n->list_lock){-.-.}-{2:2}, at: __unfreeze_partials+0x7f/0x210 [ 874.612869][T14967] #2: ffffffff8cd2f760 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run2+0xde/0x3c0 [ 874.622168][T14967] [ 874.622168][T14967] stack backtrace: [ 874.628045][T14967] CPU: 1 PID: 14967 Comm: syz.4.2635 Not tainted 6.6.96-syzkaller #0 [ 874.636103][T14967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 874.646143][T14967] Call Trace: [ 874.649412][T14967] [ 874.652333][T14967] dump_stack_lvl+0x16c/0x230 [ 874.657004][T14967] ? load_image+0x3b0/0x3b0 [ 874.661498][T14967] ? show_regs_print_info+0x20/0x20 [ 874.666690][T14967] ? print_circular_bug+0x12b/0x1a0 [ 874.671878][T14967] check_noncircular+0x2bd/0x3c0 [ 874.676810][T14967] ? print_deadlock_bug+0x5d0/0x5d0 [ 874.681996][T14967] ? lockdep_lock+0xe0/0x220 [ 874.686589][T14967] ? _find_first_zero_bit+0xd3/0x100 [ 874.691865][T14967] __lock_acquire+0x2ddb/0x7c80 [ 874.696727][T14967] ? mark_lock+0x94/0x320 [ 874.701048][T14967] ? verify_lock_unused+0x140/0x140 [ 874.706245][T14967] ? __lock_acquire+0x1260/0x7c80 [ 874.711256][T14967] ? is_bpf_text_address+0x26/0x2a0 [ 874.716452][T14967] lock_acquire+0x197/0x410 [ 874.720943][T14967] ? trie_delete_elem+0x96/0x6a0 [ 874.725874][T14967] ? __lock_acquire+0x1260/0x7c80 [ 874.730993][T14967] ? read_lock_is_recursive+0x20/0x20 [ 874.736371][T14967] ? mark_lock+0x94/0x320 [ 874.740784][T14967] ? mark_lock+0x94/0x320 [ 874.745107][T14967] _raw_spin_lock_irqsave+0xa8/0xf0 [ 874.750303][T14967] ? trie_delete_elem+0x96/0x6a0 [ 874.755240][T14967] ? _raw_spin_lock+0x40/0x40 [ 874.759911][T14967] trie_delete_elem+0x96/0x6a0 [ 874.764668][T14967] ? __cant_sleep+0x210/0x210 [ 874.769350][T14967] ? mark_lock+0x94/0x320 [ 874.773674][T14967] bpf_prog_2c29ac5cdc6b1842+0x42/0x46 [ 874.779132][T14967] bpf_trace_run2+0x1d1/0x3c0 [ 874.783798][T14967] ? bpf_trace_run2+0xde/0x3c0 [ 874.788557][T14967] ? bpf_trace_run1+0x3b0/0x3b0 [ 874.793423][T14967] ? __bpf_trace_contention_end+0xce/0x130 [ 874.799227][T14967] __bpf_trace_contention_end+0xdd/0x130 [ 874.804862][T14967] ? __bpf_trace_contention_begin+0x130/0x130 [ 874.810924][T14967] ? verify_lock_unused+0x140/0x140 [ 874.816116][T14967] trace_contention_end+0xe6/0x110 [ 874.821223][T14967] __pv_queued_spin_lock_slowpath+0x7ec/0x9d0 [ 874.827304][T14967] ? lock_chain_count+0x20/0x20 [ 874.832147][T14967] ? __pv_queued_spin_unlock_slowpath+0x2a0/0x2a0 [ 874.838553][T14967] do_raw_spin_lock+0x24e/0x2c0 [ 874.843410][T14967] ? __rwlock_init+0x150/0x150 [ 874.848168][T14967] _raw_spin_lock_irqsave+0xb4/0xf0 [ 874.853353][T14967] ? _raw_spin_lock+0x40/0x40 [ 874.858033][T14967] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 874.864019][T14967] ? lock_chain_count+0x20/0x20 [ 874.868859][T14967] __unfreeze_partials+0x7f/0x210 [ 874.873873][T14967] put_cpu_partial+0x17c/0x250 [ 874.878635][T14967] ? put_cpu_partial+0x6e/0x250 [ 874.883481][T14967] __slab_free+0x31d/0x410 [ 874.887887][T14967] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 874.893766][T14967] ? _raw_spin_unlock+0x40/0x40 [ 874.898604][T14967] ? __phys_addr+0xba/0x170 [ 874.903098][T14967] qlist_free_all+0x75/0xe0 [ 874.907586][T14967] kasan_quarantine_reduce+0x143/0x160 [ 874.913034][T14967] __kasan_slab_alloc+0x22/0x80 [ 874.917875][T14967] slab_post_alloc_hook+0x6e/0x4d0 [ 874.922976][T14967] kmem_cache_alloc+0x11e/0x2e0 [ 874.927810][T14967] ? security_file_alloc+0x34/0x120 [ 874.932997][T14967] security_file_alloc+0x34/0x120 [ 874.938007][T14967] init_file+0x94/0x1f0 [ 874.942151][T14967] alloc_empty_file+0xb7/0x1d0 [ 874.946924][T14967] alloc_file+0x5c/0x600 [ 874.951178][T14967] alloc_file_pseudo+0x17e/0x200 [ 874.956109][T14967] ? alloc_empty_backing_file+0xe0/0xe0 [ 874.961643][T14967] ? _raw_spin_unlock+0x28/0x40 [ 874.966480][T14967] ? alloc_fd+0x58f/0x630 [ 874.970804][T14967] sock_alloc_file+0xb7/0x280 [ 874.975480][T14967] __sys_socket+0x13d/0x1a0 [ 874.979975][T14967] __x64_sys_socket+0x7a/0x90 [ 874.984643][T14967] do_syscall_64+0x55/0xb0 [ 874.989049][T14967] ? clear_bhb_loop+0x40/0x90 [ 874.993715][T14967] ? clear_bhb_loop+0x40/0x90 [ 874.998400][T14967] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 875.004342][T14967] RIP: 0033:0x7fb6d018e929 [ 875.008744][T14967] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 875.028336][T14967] RSP: 002b:00007fb6d10ab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 875.036734][T14967] RAX: ffffffffffffffda RBX: 00007fb6d03b5fa0 RCX: 00007fb6d018e929 [ 875.044690][T14967] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 875.052647][T14967] RBP: 00007fb6d0210b39 R08: 0000000000000000 R09: 0000000000000000 [ 875.060605][T14967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 875.068589][T14967] R13: 0000000000000000 R14: 00007fb6d03b5fa0 R15: 00007ffec6614298 [ 875.076558][T14967] [ 875.088900][T14967] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2635'.