last executing test programs: 22.946489886s ago: executing program 3 (id=5462): socket$nl_generic(0x10, 0x3, 0x10) chdir(&(0x7f00000000c0)='./file0\x00') r0 = syz_usb_connect(0x0, 0x81, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000800)={0x2c, &(0x7f0000000580)={0x40, 0x13}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000300)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e2b, 0xb, @private1={0xfc, 0x1, '\x00', 0x6}, 0x6}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x6000000000000000) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x200002, 0x0) 19.428283789s ago: executing program 3 (id=5467): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x27, 0x3, 0x80000000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000240)={0xaa, 0x50}) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f0000000140)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}}) 15.245532155s ago: executing program 0 (id=5475): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, &(0x7f0000000200)) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = creat(0x0, 0x0) r5 = fanotify_init(0xf00, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x8001420, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, 0x0) mount$nfs4(&(0x7f00000001c0)='%^,(\x00', &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x800, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNSETIFINDEX(r4, 0x400454da, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, 0x0, 0x0) sendmsg$rds(r6, &(0x7f0000000580)={&(0x7f0000000000)={0x2, 0x4, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000000300), 0x0, 0x4040000}, 0x0) socket(0x10, 0x3, 0x0) 14.210429208s ago: executing program 3 (id=5476): socket$nl_generic(0x10, 0x3, 0x10) chdir(&(0x7f00000000c0)='./file0\x00') r0 = syz_usb_connect(0x0, 0x81, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000800)={0x2c, &(0x7f0000000580)={0x40, 0x13}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000300)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e2b, 0xb, @private1={0xfc, 0x1, '\x00', 0x6}, 0x6}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x6000000000000000) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x200002, 0x0) 13.468599447s ago: executing program 0 (id=5478): setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r5 = fanotify_init(0xf00, 0x0) fanotify_mark(r5, 0x105, 0x5000003a, r4, 0x0) 13.270866734s ago: executing program 2 (id=5479): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="c672796c6f636b206e6f6e6500"], 0xd) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000800)={{&(0x7f00004e7000/0x2000)=nil, 0x2000}, 0x6}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r4, &(0x7f0000003740)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000bc0)=[@rdma_args={0x48, 0x114, 0x1, {{0x2, 0x2}, {&(0x7f0000000900)=""/230, 0xe6}, &(0x7f0000000b80), 0x0, 0x40, 0xd}}], 0x48, 0x90}, 0x0) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x2, 0x0, 0x5}) write(r5, &(0x7f0000000440), 0x0) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x80, 0xfffffffc, 0xdc67}}) 11.553141282s ago: executing program 2 (id=5480): mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00'}, 0x94) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wg2\x00'}) socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000004a80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000007c0)="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", 0x2e8}], 0x1}}], 0x1, 0x400c0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000480)=0x1df9, 0x4) sendto$inet(r3, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) 9.567846891s ago: executing program 2 (id=5482): r0 = io_uring_setup(0x177f, &(0x7f0000000140)={0x0, 0xb5fa, 0x1}) r1 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_mtu(r1, 0x29, 0x17, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_OUTPUT(r6, 0xc004562f, &(0x7f00000000c0)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r6, 0xc0845657, &(0x7f0000000480)={0x0, @bt={0x12, 0x6, 0x1, 0x2, 0xd59f80, 0x8, 0x5, 0x7, 0x8, 0x0, 0x2, 0x596, 0x7, 0x0, 0x2e, 0xd, {0xffff945a, 0xfffffaec}, 0x3, 0xed}}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x10, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @sk_reuseport, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close_range(r0, 0xffffffffffffffff, 0x0) 9.557754202s ago: executing program 1 (id=5483): ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r0, 0x0, 0x19, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x4400, &(0x7f0000000240)=ANY=[@ANYBLOB='check=strict,session=0x0000000000000024,iocharset=ascii,overriderockperm,overriderockperm,gid=', @ANYRESOCT=0x0, @ANYRES16=0x0], 0xf6, 0xa15, &(0x7f00000002c0)="$eJzs3c1vHOd9B/DvrEiJog1VtlVXFWxrJUM2bbMUSdUSBB9qiVxKdPlSkBRgoS0sw5IKQURd2C1gGz3IQNFTjBhBECDJJfAxJwPOIb4EuiXHnHIIkPg/CIxcohwCBju7lJbkvog0RSrK57MYzdvveduZnUe73J0n/CVbWVkppy2uX/rxTlaWh8/5ya8++/yT+vTxrezNnrxa/DQZSFJN+v5Univ9E5ML87M9MrqZXElyOymS7Etj3sH+NWtXUnw7j99bv53ihzncJtnAJhtHTyv8Vdvt8w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB5KE5Ojo2NFZqbnLr1Z7awcArzL/tXsvixH/S6+7FVskRT1KQMDq0N9Hz50b/fT9X+O55nG2jONkb8H8tFjTx987am+ymr6LhXaEe9/+NHNt5eXr713b1N/28C+Zrvqy/t2rHr3b+/Wkl2ozU0vzk/PnrtQq04vzlfPnj49evLi1GJ1ajq1xcuLS7XZ6sRC7dzS/EJ1aOKl6tjZs6eqtZHL85fmLkyOzNRWN575h/HR0dPVN0b+pXZuYXF+7uQbI4sTF6dnZqbnLpQx9d31mDP1E/Gfp5eqS7Vzs9Xq9RvL1071qmQ9aKztnmJt0HivnMZHx8fHxsbHx06/evbVM6OjfRs2jK6TDRG7f9Kye36yrddu+IYqzf4/M5nOXC7lzVTbPiYymYXMZ7bD/qbV/v/EyVrXclv7/9Ve/vC93UdS9v/PNdae69T/d6hL78fKSiPnraZffbyfD/NRbubtLGc51/LeN85xw+OP25RP9Zu3duPjQmqZy3QWM5/pzOZcuaXa3FLN2ZzO6YzmrVzMVBZTzVSmM5NaFnM5i1lKrTyjJrKQWs5lKfNZSDVDmchLqWYsZ3M2p1JNLSO5nPlcylwuZDLnylyu50b5vJ/qUse7QWP3EzTeJWib+/+Vh/F/gjxo234Nh61aafb/ezsGrKwuDU3sWK0AAACA7fT3v8iBQ0/+/DdJf54tP5efmp6pje52tQAAAIBtVH5d75n6rL++9GwK7/8BAADgUVOUv7ErkgzmaGOp8UuoPfEhAAAAADwiyr//P1efDdaXjqa4eyeUK7tdNwAAAGB79L7Hfs+IYnj19r/Vq4351WZE8z6/g1PTM7WRifmZ18byQnmXgfKXBhty25MU/eXPD17OsUbUscHGfHBtjgP1qLGR18byco43GzL0fH32/FCbyPFG5IuNyBe7RJ6qRwLAo+54l/74fvv/lzPciBg+0rc3Sd+RNj3rqJ4VAB4WvcfY6RlR/OO99//9zWzX9P9P5vofGl8pGMk7eTfLuZrh8tcG5TcO1uT6b582PzO4+zWE0Qz3+DRgNfaXZyoZ7vF5wGDLQC/DPT4RaMTm35NTD/5AAMAOOt6hH95M/z/c8v4/G9//3x1a6JqfFALAQ+HuCPYPcGG32wgArKWXBgAAAAAAAAAAAAAAAAAAAAAAAAAAgO23rXf7H9hi8t82x/V7sMMQbFjY33wOtp7Pd5LsXJ2LbS6rsg35rCTZqeO1cws5mGz5WW17Gu9Nsvvt6rnQ13xJ3Hx7ebeuSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOykItnTbnsl2ZdkNMnJna/Vg3Nrtyuw8/6pdaW4kzv5IAd2rzoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI+m5v3/K2nMH2tsSl8lOZHkSpJ/3e06bqc7u12BbbJ/i+la7v9fP+ZZKdLXOOwp+icmF+Zn64e/HPuh8tVnn39Sn1qS77vfcsrAyrrBJZolrI/90eOrS0+UqQYnr71/87/f/a/q5PlUsjfnl6ZmJmcvLLx+L8nTxRdJNY1p1Wp9//fEzz5t0/Iv6i1tb325U+WTM7mx3L9rl7p7ud3cWL42Xi9pqfbm0v/8540PWnY9mWPJ80PJ0NqS/qM+dSjpWPq7lVZ8Xfx/cSDfy5Xy+NefjWKlqB+ivynbv//6jeVrI++8u3y1Q50O5miSq8lA9zp93LL7aHk9aas86yr99VJHy6D6P4d6tLGrlhzHOrThifKUGWy2YW/HNrSqdm5DqeV5r7Tb36jRqQ41eiovtDnSK/uSzjV6ofuRbq/4uvh1cTG/yv+1jP9RqR//E+n86lybRRnZcqZ0jKw0IsuWj7fueGt95O++f1+1bztMDZv1rTUv3krL9b95rLbperRSdL0etZS4udfFuhLXnRVdXhdlj3RoXYrm1adTmmY9DzWiOtTzb/NK0nek21VxQ2/9So8ryt30r7ffvdXX/w+Kofw+t4z/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPPyKZE+77ZXkRJKDq+vVZGUT2e7rtKMyWGy2itvq1t1/HgmVzSYo7uROPsiBB1MdAAAAAAAAAHba+cmvPvv8k/pU7G9uav59v5r0JTlYfHd/JhfmZ3tk1J9cSXK7vjzQZn+XP/fX0+Xxe+u362uHN9sSAOB+/TkAAP//mWBg/A==") setrlimit(0x8, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@getnexthop={0x2c, 0x6a, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@NHA_FDB={0x4}, @NHA_GROUPS={0x4}, @NHA_GROUPS={0x4}, @NHA_OIF={0x8}]}, 0x2c}}, 0x0) r6 = io_uring_setup(0x4, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0xb, 0x20002f7}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) 8.410783214s ago: executing program 2 (id=5484): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x27, 0x3, 0x80000000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000240)={0xaa, 0x50}) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f0000000140)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}}) 8.408063734s ago: executing program 3 (id=5485): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() ptrace$getregset(0x4204, r1, 0x202, &(0x7f0000000300)={&(0x7f00000001c0)}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fanotify_init(0xf00, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x8001420, 0x1) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x8006, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x5, 0x5, 0x3e, 0x18e, 0x6, 0x6, 0x454f, 0x6, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x47, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x4, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x9, 0x8, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0xa9, 0x5, 0x0, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x807ff, 0x2006, 0x80a2ed, 0x1, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x1938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x6, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0x7, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x3, 0x7e, 0x100, 0x9622, 0x7, 0x2, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000240)={0x0, 0x0}, 0x10) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f0000000580)={&(0x7f0000000000)={0x2, 0x4, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000000300)=[@mask_fadd={0x58, 0x114, 0x8, {{0x3, 0xffff9b0c}, &(0x7f0000000140)=0x94aa, 0x0, 0xcf, 0xd3, 0x7, 0x3, 0x8, 0x3}}], 0x58, 0x4040000}, 0x0) 8.392415215s ago: executing program 1 (id=5486): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x24}}, 0x48850) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r4, @ANYBLOB="140004006e696376663000ffffff"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x240048d0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) sendfile(r7, r7, 0x0, 0x4) close(0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x17, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000000000028850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0xfca804a0, 0xe, 0x0, &(0x7f0000000580)="b80022ab98d1db1b883e04000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r10, 0x5, 0x1, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NL80211_CMD_CONNECT(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x3c, r10, 0x5, 0x4, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x70000, {0x18, 0x0, 0x8000, 0x1ff}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4800}, 0x8060040) 7.127730397s ago: executing program 3 (id=5487): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f00000002c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @in6={0xa, 0x4e23, 0x8, @local, 0xd88a}}}, 0x90) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r5 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x30, r7, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_LNS_MODE={0x5}]}, 0x30}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000044000701fcffffff0000000004"], 0x20}, 0x1, 0x0, 0x0, 0x88c4}, 0xc000) tkill(r5, 0xb) 6.896592686s ago: executing program 0 (id=5488): syz_open_dev$sndmidi(0x0, 0x2, 0x141101) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000240)=ANY=[@ANYBLOB="e0000002ac1414aa0100000002"], 0x18) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa080045000028006400000402907800000000e000000211009078e00000020000000200000000"], 0x0) ioctl$KVM_REINJECT_CONTROL(0xffffffffffffffff, 0xae71, &(0x7f0000000000)={0xc9}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) userfaultfd(0x800) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x80) 6.896339536s ago: executing program 1 (id=5489): syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f00000000c0)='.\x02\x00', 0x8488, &(0x7f0000000780), 0xfe, 0x10fd, &(0x7f0000001140)="$eJzs2T9rFEEYBvBnds8/3cqmXwQtLCQknF8ghcK1ttqIpDJVrlL8OH4cTWUf0msRsF9Zb/dO5UTwTm1+PzjmvYd9Z2fKmQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMZsmnkhxUSTtlVZKSdN3F4ipJN+V33tdVSp6eLpaPz+dPlknqb4+XZ0kZuoa2tMf3brfzdt4et48OTu5/WL5+8+rF2dnp+ThNSZfL6/1vpYzrAQAAAH7U76z5z+8HAAAAfmdvFwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf6hvNnU7FVWSknTdxeIqSbel78Y/Wh8AAACwu5Iqz5tt+eoaYONhPjZlnQ/jlzLUR3m3pR8AAAD4pf7WWHz/fb3c3JzHH2S2PpcP2d3Mcni4+j8O+XyS1EmOfpr88vrty+lX+vpv7wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAAAAAPYKAAD///F61s8=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0x8000c61) symlink(&(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', &(0x7f00000002c0)='.\x02\x00') syz_emit_ethernet(0x66, &(0x7f0000000b40)={@random="cf702e8cf675", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x30, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @dev, @dev, [{0x2, 0x1, "1ac8b0c854f6"}]}}}}}}, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_GET(r0, 0x0, 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) syz_io_uring_setup(0x497, 0x0, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_io_uring_submit(r2, r3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000700), 0xffffffffffffffff) ftruncate(r0, 0x5) 5.948650452s ago: executing program 1 (id=5490): ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000200)={0x0, 0x1, 0x0, 0x0, "4620f63a4e6b5c9b4410b99e0e549fcfdeb92566761ad1c34ca4a1abe476fa96"}) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r0, &(0x7f00000012c0)=ANY=[@ANYBLOB="7f454c4604070003070000000000000002000300030204000903000038000000fcffffff0e00000000002000010005000000000000000000030000007f00000004000000040020000c"], 0x958) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_pidfd_open(0x0, 0x0) ioctl$FS_IOC_GETVERSION(r4, 0xff0a, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) io_setup(0x9, &(0x7f0000000240)=0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) io_submit(r5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, 0x0) close(r0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000040300f11010000000000010902240001000000010904000001030006"], 0x0) 4.245686069s ago: executing program 0 (id=5491): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x27, 0x3, 0x80000000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000240)={0xaa, 0x50}) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f0000000140)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}}) 3.101496371s ago: executing program 0 (id=5492): socket(0x28, 0x5, 0x0) mknodat$null(0xffffffffffffff9c, 0x0, 0xb0a54e68b1cd2fdb, 0x103) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) faccessat2(0xffffffffffffff9c, 0x0, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f00000001c0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e23}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000100)=@gcm_128={{0x303}, "cfc85eb51b0ace6a", "4617a9f6040839230fb7fead776dd8dc", "3f4051c4", "a44a889722b66244"}, 0x28) recvmmsg(r4, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000b00)=""/81, 0x51}], 0x1}}], 0x1, 0x0, 0x0) 3.011168918s ago: executing program 3 (id=5493): socket$nl_generic(0x10, 0x3, 0x10) chdir(&(0x7f00000000c0)='./file0\x00') r0 = syz_usb_connect(0x0, 0x81, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000800)={0x2c, &(0x7f0000000580)={0x40, 0x13}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000300)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e2b, 0xb, @private1={0xfc, 0x1, '\x00', 0x6}, 0x6}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x6000000000000000) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x200002, 0x0) 1.49167608s ago: executing program 1 (id=5494): r0 = io_uring_setup(0x177f, &(0x7f0000000140)={0x0, 0xb5fa, 0x1}) r1 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_mtu(r1, 0x29, 0x17, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_OUTPUT(r6, 0xc004562f, &(0x7f00000000c0)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r6, 0xc0845657, &(0x7f0000000480)={0x0, @bt={0x12, 0x6, 0x1, 0x2, 0xd59f80, 0x8, 0x5, 0x7, 0x8, 0x0, 0x2, 0x596, 0x7, 0x0, 0x2e, 0xd, {0xffff945a, 0xfffffaec}, 0x3, 0xed}}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x10, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @sk_reuseport, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close_range(r0, 0xffffffffffffffff, 0x0) 1.49143782s ago: executing program 2 (id=5495): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1ff, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f0000001d00)={&(0x7f00000017c0)={0x2, 0x0, @private=0x8a010101}, 0x10, 0x0, 0x0, &(0x7f0000000240)}, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$EVIOCGKEY(r0, 0x80404518, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1}, 0x48) 1.195294784s ago: executing program 0 (id=5496): setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r5 = fanotify_init(0xf00, 0x0) fanotify_mark(r5, 0x105, 0x5000003a, r4, 0x0) 236.535231ms ago: executing program 1 (id=5497): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) fcntl$getown(r0, 0x9) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) accept4$llc(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r5, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}}, 0x20040880) sendmmsg$inet6(r1, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) 0s ago: executing program 2 (id=5498): syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f00000000c0)='.\x02\x00', 0x8488, &(0x7f0000000780), 0xfe, 0x10fd, &(0x7f0000001140)="$eJzs2T9rFEEYBvBnds8/3cqmXwQtLCQknF8ghcK1ttqIpDJVrlL8OH4cTWUf0msRsF9Zb/dO5UTwTm1+PzjmvYd9Z2fKmQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMZsmnkhxUSTtlVZKSdN3F4ipJN+V33tdVSp6eLpaPz+dPlknqb4+XZ0kZuoa2tMf3brfzdt4et48OTu5/WL5+8+rF2dnp+ThNSZfL6/1vpYzrAQAAAH7U76z5z+8HAAAAfmdvFwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf6hvNnU7FVWSknTdxeIqSbel78Y/Wh8AAACwu5Iqz5tt+eoaYONhPjZlnQ/jlzLUR3m3pR8AAAD4pf7WWHz/fb3c3JzHH2S2PpcP2d3Mcni4+j8O+XyS1EmOfpr88vrty+lX+vpv7wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAAAAAPYKAAD///F61s8=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0x8000c61) symlink(&(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', &(0x7f00000002c0)='.\x02\x00') syz_emit_ethernet(0x66, &(0x7f0000000b40)={@random="cf702e8cf675", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x30, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @dev, @dev, [{0x2, 0x1, "1ac8b0c854f6"}]}}}}}}, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_GET(r0, 0x0, 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) syz_io_uring_setup(0x497, 0x0, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_io_uring_submit(r2, r3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000700), 0xffffffffffffffff) ftruncate(r0, 0x5) kernel console output (not intermixed with test programs): 295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16598 comm="syz.2.2776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febc898ebe9 code=0x7ffc0000 [ 1205.544770][ T28] audit: type=1326 audit(1756524267.843:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16598 comm="syz.2.2776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7febc898ebe9 code=0x7ffc0000 [ 1205.633247][ T28] audit: type=1326 audit(1756524267.843:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16598 comm="syz.2.2776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febc898ebe9 code=0x7ffc0000 [ 1205.689729][ T28] audit: type=1326 audit(1756524267.843:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16598 comm="syz.2.2776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7febc898ebe9 code=0x7ffc0000 [ 1205.715753][ T28] audit: type=1326 audit(1756524267.843:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16598 comm="syz.2.2776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febc898ebe9 code=0x7ffc0000 [ 1205.749043][ T28] audit: type=1326 audit(1756524267.861:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16598 comm="syz.2.2776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7febc898ebe9 code=0x7ffc0000 [ 1205.799548][ T28] audit: type=1326 audit(1756524267.861:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16598 comm="syz.2.2776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febc898ebe9 code=0x7ffc0000 [ 1205.900990][ T28] audit: type=1326 audit(1756524267.861:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16598 comm="syz.2.2776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7febc898ebe9 code=0x7ffc0000 [ 1205.970140][ T28] audit: type=1326 audit(1756524267.861:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16598 comm="syz.2.2776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febc898ebe9 code=0x7ffc0000 [ 1208.332427][T16626] team0: left allmulticast mode [ 1208.342666][T16626] bridge0: port 1(team0) entered disabled state [ 1208.377361][T16626] bond3: (slave gretap2): Releasing active interface [ 1208.465170][T16626] bond4: (slave geneve3): Releasing active interface [ 1208.659542][T16626] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1208.675612][T16626] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1208.685559][T16626] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1209.462477][T16626] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1209.716957][T16626] bond10: (slave veth7): Releasing active interface [ 1210.738222][T16628] team0: Mode changed to "loadbalance" [ 1211.377054][T16644] UBIFS error (pid: 16644): cannot open "./file0", error -22 [ 1213.293449][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 1213.860839][ T28] audit: type=1326 audit(1756524275.606:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16650 comm="syz.1.2788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b7278ebe9 code=0x7ffc0000 [ 1213.883888][ T28] audit: type=1326 audit(1756524275.616:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16650 comm="syz.1.2788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f3b7278ebe9 code=0x7ffc0000 [ 1214.055931][ T28] audit: type=1326 audit(1756524275.616:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16650 comm="syz.1.2788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b7278ebe9 code=0x7ffc0000 [ 1214.091178][ T28] audit: type=1326 audit(1756524275.616:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16650 comm="syz.1.2788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3b7278ebe9 code=0x7ffc0000 [ 1214.123743][ T28] audit: type=1326 audit(1756524275.616:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16650 comm="syz.1.2788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b7278ebe9 code=0x7ffc0000 [ 1214.193855][ T28] audit: type=1326 audit(1756524275.625:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16650 comm="syz.1.2788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f3b7278ebe9 code=0x7ffc0000 [ 1216.765103][ T28] audit: type=1326 audit(1756524275.625:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16650 comm="syz.1.2788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b7278ebe9 code=0x7ffc0000 [ 1218.162756][ T28] audit: type=1326 audit(1756524275.625:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16650 comm="syz.1.2788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f3b7278ebe9 code=0x7ffc0000 [ 1218.216899][ T28] audit: type=1326 audit(1756524275.634:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16650 comm="syz.1.2788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b7278ebe9 code=0x7ffc0000 [ 1218.448087][ T28] audit: type=1326 audit(1756524275.634:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16650 comm="syz.1.2788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b7278ebe9 code=0x7ffc0000 [ 1222.886275][ T28] audit: type=1326 audit(1756524284.577:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16698 comm="syz.0.2802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc40398ebe9 code=0x7ffc0000 [ 1223.537279][ T28] audit: type=1326 audit(1756524284.577:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16698 comm="syz.0.2802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7fc40398ebe9 code=0x7ffc0000 [ 1223.570113][ T28] audit: type=1326 audit(1756524284.577:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16698 comm="syz.0.2802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc40398ebe9 code=0x7ffc0000 [ 1223.613645][T16708] netlink: 'syz.1.2803': attribute type 10 has an invalid length. [ 1223.617526][ T28] audit: type=1326 audit(1756524284.577:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16698 comm="syz.0.2802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc40398ebe9 code=0x7ffc0000 [ 1223.655453][T16708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1223.693973][T16708] team0: Port device bond0 added [ 1223.710018][ T28] audit: type=1326 audit(1756524284.577:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16698 comm="syz.0.2802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc40398ebe9 code=0x7ffc0000 [ 1224.257209][ T28] audit: type=1326 audit(1756524284.586:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16698 comm="syz.0.2802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7fc40398ebe9 code=0x7ffc0000 [ 1224.285819][ T28] audit: type=1326 audit(1756524284.586:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16698 comm="syz.0.2802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc40398ebe9 code=0x7ffc0000 [ 1224.325201][ T28] audit: type=1326 audit(1756524284.586:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16698 comm="syz.0.2802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7fc40398ebe9 code=0x7ffc0000 [ 1224.373908][T16716] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2806'. [ 1225.802910][ T28] audit: type=1326 audit(1756524284.586:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16698 comm="syz.0.2802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc40398ebe9 code=0x7ffc0000 [ 1225.993661][ T28] audit: type=1326 audit(1756524284.586:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16698 comm="syz.0.2802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc40398ebe9 code=0x7ffc0000 [ 1228.293841][T16724] trusted_key: encrypted_key: insufficient parameters specified [ 1236.466045][T16836] loop0: detected capacity change from 0 to 64 [ 1237.064732][T16861] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2826'. [ 1238.146425][ T28] audit: type=1326 audit(1756524298.804:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16864 comm="syz.2.2828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febc898ebe9 code=0x7ffc0000 [ 1238.190613][ T28] audit: type=1326 audit(1756524298.804:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16864 comm="syz.2.2828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febc898ebe9 code=0x7ffc0000 [ 1238.238630][ T28] audit: type=1326 audit(1756524298.860:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16864 comm="syz.2.2828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7febc898ebe9 code=0x7ffc0000 [ 1238.261269][ T28] audit: type=1326 audit(1756524298.860:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16864 comm="syz.2.2828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febc898ebe9 code=0x7ffc0000 [ 1238.414182][ T28] audit: type=1326 audit(1756524298.860:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16864 comm="syz.2.2828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febc898ebe9 code=0x7ffc0000 [ 1244.610418][T16923] loop0: detected capacity change from 0 to 256 [ 1244.637492][T16923] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1244.697539][T16923] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 1244.764412][T16923] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1247.444947][T16948] ip6t_REJECT: ECHOREPLY is not supported [ 1247.623680][T16952] loop0: detected capacity change from 0 to 1024 [ 1247.699843][T16952] EXT4-fs: Ignoring removed orlov option [ 1247.803336][T16952] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1248.000587][ T28] audit: type=1800 audit(1756524308.093:802): pid=16952 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="GPL" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 1248.094490][ T28] audit: type=1804 audit(1756524308.102:803): pid=16952 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="GPL" name="/newroot/287/bus/bus" dev="loop0" ino=18 res=1 errno=0 [ 1248.269124][T11413] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1251.955979][T16998] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2859'. [ 1258.678956][T17026] netlink: 'syz.2.2865': attribute type 10 has an invalid length. [ 1263.986095][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1263.992761][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 1272.349894][T17132] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2886'. [ 1272.363011][T17132] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2886'. [ 1273.920264][T17149] netlink: 'syz.0.2888': attribute type 1 has an invalid length. [ 1273.929874][T17149] netlink: 'syz.0.2888': attribute type 2 has an invalid length. [ 1274.710811][T17160] team0: Port device bond0 removed [ 1276.653285][T17160] bond6: (slave gretap2): Releasing backup interface [ 1276.875827][T17160] gretap2: left promiscuous mode [ 1276.881627][T17160] gretap2: left allmulticast mode [ 1277.687573][T17160] bond7: (slave geneve2): Releasing active interface [ 1277.736655][T17160] netdevsim netdevsim1 : unset [1, 1] type 2 family 0 port 20000 - 0 [ 1277.771489][T17160] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1277.790931][T17160] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1277.823376][T17160] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1277.902117][T17160] bond9: (slave veth15): Releasing active interface [ 1277.917201][T17160] bond9: (slave veth15): the permanent HWaddr of slave - e2:ec:9c:32:44:18 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1277.942586][T17160] vlan5: entered promiscuous mode [ 1277.947691][T17160] macvtap0: entered promiscuous mode [ 1277.983218][T17160] bond9: (slave vlan5): Releasing active interface [ 1277.991598][T17160] vlan5: left promiscuous mode [ 1277.997087][T17160] macvtap0: left promiscuous mode [ 1278.031805][T17160] bond11: (slave gretap3): Releasing active interface [ 1278.112110][T17164] team0: Unable to change to the same mode the team is in [ 1278.122026][T17177] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2899'. [ 1278.149716][T17181] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2899'. [ 1278.159349][T17180] netlink: 'syz.2.2900': attribute type 1 has an invalid length. [ 1278.418884][T17180] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1279.258494][T17182] veth11: entered promiscuous mode [ 1279.277680][T17182] bond11: (slave veth11): Enslaving as an active interface with a down link [ 1283.224277][T17224] loop0: detected capacity change from 0 to 16 [ 1283.510751][T17224] erofs: (device loop0): mounted with root inode @ nid 36. [ 1283.554167][T17224] erofs: (device loop0): z_erofs_read_folio: read error -117 @ 0 of nid 36 [ 1283.563493][T17224] erofs: (device loop0): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 1284.232473][T17225] netlink: 'syz.2.2910': attribute type 1 has an invalid length. [ 1284.240928][T17225] netlink: 'syz.2.2910': attribute type 2 has an invalid length. [ 1284.325271][T17231] xt_NFQUEUE: number of total queues is 0 [ 1288.839517][T17246] delete_channel: no stack [ 1292.634717][T17275] syz.1.2923 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1294.296195][T17274] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1302.005769][T17323] bridge_slave_0: left allmulticast mode [ 1302.037534][T17323] bridge_slave_0: left promiscuous mode [ 1302.058305][T17323] bridge0: port 1(bridge_slave_0) entered disabled state [ 1302.093587][T17323] bridge_slave_1: left allmulticast mode [ 1302.113363][T17323] bridge_slave_1: left promiscuous mode [ 1302.135299][T17323] bridge0: port 2(bridge_slave_1) entered disabled state [ 1302.178770][T17323] bond0: (slave bond_slave_0): Releasing backup interface [ 1302.213335][T17323] bond0: (slave bond_slave_1): Releasing backup interface [ 1302.412523][T17323] team0: Failed to send options change via netlink (err -105) [ 1302.437137][T17323] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 1302.448167][T17323] team0: Port device team_slave_0 removed [ 1302.500331][T17323] team0: Failed to send options change via netlink (err -105) [ 1302.508408][T17323] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 1302.527320][T17323] team0: Port device team_slave_1 removed [ 1302.535416][T17323] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1302.596351][T17332] xt_connbytes: Forcing CT accounting to be enabled [ 1302.603285][T17332] set match dimension is over the limit! [ 1302.842200][T17323] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1303.227953][T17323] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1303.235460][T17323] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1303.359281][T17323] bond1: (slave ip6gretap1): Releasing backup interface [ 1303.451984][T17323] ip6gretap1: left promiscuous mode [ 1303.467684][T17323] ip6gretap1: left allmulticast mode [ 1303.493765][T17323] bond2: (slave geneve2): Releasing active interface [ 1303.509659][T17323] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1303.521632][T17323] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1303.552433][T17323] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1303.623835][T17323] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1303.651690][T17323] bond3: (slave ip6erspan0): Releasing active interface [ 1303.659291][T17323] bond3: (slave ip6erspan0): the permanent HWaddr of slave - ee:64:39:74:4d:10 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1304.367294][T17323] bond3: (slave gretap1): making interface the new active one [ 1304.585328][T17323] bond3: (slave gretap1): Releasing active interface [ 1304.639839][T17323] bond7: (slave veth3): Releasing active interface [ 1304.661999][T17323] bond7: (slave veth3): the permanent HWaddr of slave - b2:32:4a:21:b6:d0 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1304.853306][T17323] vlan2: entered promiscuous mode [ 1304.858460][T17323] macvtap0: entered promiscuous mode [ 1304.891837][T17323] bond7: (slave vlan2): Releasing active interface [ 1304.902079][T17323] vlan2: left promiscuous mode [ 1305.605870][T17323] macvtap0: left promiscuous mode [ 1305.735363][T17325] team0: Mode changed to "loadbalance" [ 1307.255023][T17370] netlink: set zone limit has 8 unknown bytes [ 1308.006304][ T28] audit: type=1326 audit(1756524364.198:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17365 comm="syz.1.2950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b7278ebe9 code=0x7ffc0000 [ 1308.071919][ T28] audit: type=1326 audit(1756524364.207:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17365 comm="syz.1.2950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f3b7278ebe9 code=0x7ffc0000 [ 1308.095720][ T28] audit: type=1326 audit(1756524364.207:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17365 comm="syz.1.2950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b7278ebe9 code=0x7ffc0000 [ 1308.812852][ T28] audit: type=1326 audit(1756524364.217:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17365 comm="syz.1.2950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b7278ebe9 code=0x7ffc0000 [ 1308.868834][ T28] audit: type=1326 audit(1756524364.217:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17365 comm="syz.1.2950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3b7278ebe9 code=0x7ffc0000 [ 1308.894908][ T28] audit: type=1326 audit(1756524364.217:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17365 comm="syz.1.2950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b7278ebe9 code=0x7ffc0000 [ 1308.920090][ T28] audit: type=1326 audit(1756524364.217:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17365 comm="syz.1.2950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b7278ebe9 code=0x7ffc0000 [ 1309.767822][ T28] audit: type=1326 audit(1756524364.226:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17365 comm="syz.1.2950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3b7278ebe9 code=0x7ffc0000 [ 1309.813574][ T28] audit: type=1326 audit(1756524364.226:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17365 comm="syz.1.2950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b7278ebe9 code=0x7ffc0000 [ 1309.882801][ T28] audit: type=1326 audit(1756524364.226:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17365 comm="syz.1.2950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f3b7278ebe9 code=0x7ffc0000 [ 1313.069015][T17414] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 1313.914203][T17422] loop0: detected capacity change from 0 to 32768 [ 1313.928961][T17422] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.2965 (17422) [ 1313.953563][T17422] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1313.964134][T17422] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 1313.973880][T17422] BTRFS info (device loop0): enabling disk space caching [ 1313.981062][T17422] BTRFS info (device loop0): setting nodatasum [ 1313.987346][T17422] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 1313.997561][T17422] BTRFS info (device loop0): force lzo compression, level 0 [ 1314.004964][T17422] BTRFS info (device loop0): unrecognized rescue option 'ignoremetacsums' [ 1314.014091][T17422] BTRFS error (device loop0): unrecognized rescue value ignoremetacsums [ 1314.022455][T17422] BTRFS error (device loop0): cannot disable free space tree [ 1314.043002][T17422] BTRFS error (device loop0): open_ctree failed: -22 [ 1315.598979][T17441] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1315.624093][T17354] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by udevd (17354) [ 1315.744943][T17443] lo speed is unknown, defaulting to 1000 [ 1327.946567][T17503] batman_adv: batadv0: Adding interface: dummy0 [ 1328.018417][T17503] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1328.411185][T17503] batman_adv: batadv0: Interface activated: dummy0 [ 1328.460334][T17514] batadv0: mtu less than device minimum [ 1328.490194][T17514] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1328.503941][T17514] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1328.516639][T17514] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1328.529314][T17514] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1328.542092][T17514] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1328.554762][T17514] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1328.567542][T17514] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1328.580216][T17514] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1328.592869][T17514] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1330.648075][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1330.654460][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 1335.765497][T17561] batman_adv: batadv0: Adding interface: dummy0 [ 1335.771922][T17561] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1335.798083][T17561] batman_adv: batadv0: Interface activated: dummy0 [ 1341.571641][T17608] netlink: 'syz.1.3026': attribute type 1 has an invalid length. [ 1343.460406][T17608] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1343.468579][T17613] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3017'. [ 1343.813598][T17608] bond16: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1345.462140][T17618] bond16: (slave veth17): Enslaving as an active interface with a down link [ 1345.765246][T17608] vlan6: entered allmulticast mode [ 1345.770440][T17608] veth1: entered allmulticast mode [ 1345.828235][T17608] bond16: (slave vlan6): making interface the new active one [ 1345.859021][T17608] vlan6: entered promiscuous mode [ 1346.684032][T17608] bond16: (slave vlan6): Enslaving as an active interface with an up link [ 1348.241290][T17654] netlink: 'syz.1.3032': attribute type 1 has an invalid length. [ 1348.571822][T17663] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3032'. [ 1348.593480][T17654] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3032'. [ 1348.604974][T17654] 8021q: adding VLAN 0 to HW filter on device bond17 [ 1349.306463][T17666] tipc: Enabling of bearer rejected, already enabled [ 1351.574975][T16748] Bluetooth: hci4: Frame reassembly failed (-84) [ 1353.109762][T17695] net_ratelimit: 10 callbacks suppressed [ 1353.109776][T17695] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1353.969707][T17691] Bluetooth: hci4: command 0x1003 tx timeout [ 1354.866997][ T50] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1355.116577][T17709] netlink: 'syz.2.3045': attribute type 1 has an invalid length. [ 1355.324027][T17716] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3045'. [ 1356.430783][T17709] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3045'. [ 1356.489739][T17709] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1358.706163][T17733] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1358.713099][T17736] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3055'. [ 1358.910493][ T6244] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1358.928063][ T6244] buffer_io_error: 286 callbacks suppressed [ 1358.928079][ T6244] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1358.942590][ T6244] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1358.950464][ T6244] Buffer I/O error on dev nbd0, logical block 2, async page read [ 1358.958392][ T6244] Buffer I/O error on dev nbd0, logical block 3, async page read [ 1358.972458][ T6244] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1358.982367][ T6244] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1358.990928][ T6244] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1359.684142][ T6244] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1359.692057][ T6244] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 2 prio class 2 [ 1359.701724][ T6244] Buffer I/O error on dev nbd0, logical block 2, async page read [ 1359.714700][ T6244] Buffer I/O error on dev nbd0, logical block 3, async page read [ 1359.722885][T11245] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1359.733005][T11245] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1359.740936][T11245] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1359.749331][T11245] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1359.762277][T11245] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1359.771913][T11245] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1359.781428][T11245] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1359.790819][T17730] ldm_validate_partition_table(): Disk read failed. [ 1359.797543][T11245] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1359.940426][T17730] Dev nbd0: unable to read RDB block 0 [ 1360.008843][T17730] nbd0: unable to read partition table [ 1360.365174][T17748] xt_NFQUEUE: number of queues (8) out of range (got 65537) [ 1361.075140][T17748] lo speed is unknown, defaulting to 1000 [ 1362.845599][T17764] loop0: detected capacity change from 0 to 1024 [ 1362.895893][T17764] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1363.040892][T17764] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1364.549221][T17778] netlink: 324 bytes leftover after parsing attributes in process `syz.2.3063'. [ 1364.558678][T17778] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3063'. [ 1364.790707][T11413] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1364.952656][T17788] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 1364.952656][T17788] The task syz.3.3065 (17788) triggered the difference, watch for misbehavior. [ 1366.052677][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 1366.052694][ T28] audit: type=1326 audit(1756524418.526:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17785 comm="syz.3.3065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa88e18ebe9 code=0x7fc00000 [ 1366.082556][ T28] audit: type=1326 audit(1756524418.526:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17785 comm="syz.3.3065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fa88e18ebe9 code=0x7fc00000 [ 1366.112413][ T28] audit: type=1326 audit(1756524418.526:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17785 comm="syz.3.3065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa88e18ebe9 code=0x7fc00000 [ 1366.222963][ T28] audit: type=1326 audit(1756524418.526:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17785 comm="syz.3.3065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa88e18ebe9 code=0x7fc00000 [ 1366.245994][ T28] audit: type=1326 audit(1756524418.526:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17785 comm="syz.3.3065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa88e18ebe9 code=0x7fc00000 [ 1367.004439][ T28] audit: type=1326 audit(1756524418.526:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17785 comm="syz.3.3065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa88e18ebe9 code=0x7fc00000 [ 1367.092723][ T28] audit: type=1326 audit(1756524418.526:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17785 comm="syz.3.3065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa88e18ebe9 code=0x7fc00000 [ 1367.115393][ T28] audit: type=1326 audit(1756524418.526:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17785 comm="syz.3.3065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa88e18ebe9 code=0x7fc00000 [ 1367.138099][ T28] audit: type=1326 audit(1756524418.526:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17785 comm="syz.3.3065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa88e18ebe9 code=0x7fc00000 [ 1367.170353][ T28] audit: type=1326 audit(1756524418.526:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17785 comm="syz.3.3065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa88e18ebe9 code=0x7fc00000 [ 1367.200246][T17793] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1367.345316][T17804] netlink: 'syz.0.3069': attribute type 1 has an invalid length. [ 1367.430861][T17804] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3069'. [ 1367.474630][T17804] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3069'. [ 1367.671773][T17804] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3069'. [ 1367.691794][T17804] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1369.769636][T17827] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3075'. [ 1370.037867][T17829] loop0: detected capacity change from 0 to 32768 [ 1370.158864][T17829] JBD2: Ignoring recovery information on journal [ 1370.247744][T17829] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1371.821594][T11413] ocfs2: Unmounting device (7,0) on (node local) [ 1372.110681][T17840] bridge7: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1373.202819][T17843] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1375.708380][T16748] vlan6: left promiscuous mode [ 1377.522043][T17880] netlink: 'syz.3.3088': attribute type 1 has an invalid length. [ 1378.528748][T17882] netlink: 'syz.2.3087': attribute type 1 has an invalid length. [ 1378.552906][T17882] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 1378.558354][T17885] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3088'. [ 1378.592595][T17885] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1378.607062][T17887] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3087'. [ 1378.626406][T17887] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3087'. [ 1378.651567][T17890] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3087'. [ 1383.226922][T17931] netlink: 'syz.1.3100': attribute type 1 has an invalid length. [ 1383.269560][T17931] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3100'. [ 1383.278920][T17931] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3100'. [ 1383.290765][T17931] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3100'. [ 1383.308363][T17931] 8021q: adding VLAN 0 to HW filter on device bond18 [ 1384.349512][T17942] loop0: detected capacity change from 0 to 64 [ 1385.459962][T17949] syz.0.3103: attempt to access beyond end of device [ 1385.459962][T17949] loop0: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 1385.474005][T17949] buffer_io_error: 54 callbacks suppressed [ 1385.474020][T17949] Buffer I/O error on dev loop0, logical block 512, async page read [ 1385.488161][T17949] syz.0.3103: attempt to access beyond end of device [ 1385.488161][T17949] loop0: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 1385.501793][T17949] Buffer I/O error on dev loop0, logical block 56576, async page read [ 1387.240234][T17962] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1388.948476][T17980] netlink: 'syz.0.3114': attribute type 1 has an invalid length. [ 1389.193237][T17985] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3114'. [ 1389.210034][T17985] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1391.388175][T17998] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3118'. [ 1391.525645][T17998] bridge8: port 1(veth13) entered blocking state [ 1391.550545][T17998] bridge8: port 1(veth13) entered disabled state [ 1391.573511][T17998] veth13: entered allmulticast mode [ 1391.601358][T17998] veth13: entered promiscuous mode [ 1391.641717][T18004] netlink: 'syz.0.3121': attribute type 1 has an invalid length. [ 1391.924214][T18001] bridge8: port 2(veth0_to_bond) entered blocking state [ 1391.935693][T18001] bridge8: port 2(veth0_to_bond) entered disabled state [ 1391.945317][T18001] veth0_to_bond: entered allmulticast mode [ 1392.406696][T18001] veth0_to_bond: entered promiscuous mode [ 1393.477285][T18005] vlan2: entered allmulticast mode [ 1393.625780][T18005] veth0_to_hsr: entered allmulticast mode [ 1393.631935][T18005] bridge8: port 3(vlan2) entered blocking state [ 1393.649535][T18005] bridge8: port 3(vlan2) entered disabled state [ 1393.677944][T18005] vlan2: entered promiscuous mode [ 1393.694165][T18005] veth0_to_hsr: entered promiscuous mode [ 1393.724540][T18008] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3121'. [ 1393.780830][T18004] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3121'. [ 1393.838070][T18004] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1394.083777][T18030] netlink: 'syz.0.3128': attribute type 1 has an invalid length. [ 1394.984128][T18027] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3127'. [ 1395.002688][T18030] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3128'. [ 1395.059298][T18030] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1395.350143][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1395.356664][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 1397.907918][T18052] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1398.689680][T18061] netlink: 'syz.3.3136': attribute type 1 has an invalid length. [ 1399.458833][T18067] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3136'. [ 1401.110835][T18061] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3136'. [ 1401.378893][T18061] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1401.609573][T18078] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1402.558432][T18080] libceph: resolve '4..' (ret=-3): failed [ 1402.698152][T18084] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3140'. [ 1404.229837][T18090] bond19: (slave gretap4): Enslaving as an active interface with an up link [ 1404.280437][T18084] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3140'. [ 1404.291593][T18084] 8021q: adding VLAN 0 to HW filter on device bond19 [ 1406.320503][T18102] tipc: Enabling of bearer rejected, failed to enable media [ 1410.609104][T18138] o2cb: This node has not been configured. [ 1410.615788][T18138] o2cb: Cluster check failed. Fix errors before retrying. [ 1410.623140][T18138] (syz.0.3156,18138,0):user_dlm_register:674 ERROR: status = -22 [ 1410.631061][T18138] (syz.0.3156,18138,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1" [ 1411.184030][T18144] netlink: 'syz.0.3153': attribute type 1 has an invalid length. [ 1412.572525][T18148] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1412.585233][T18150] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3153'. [ 1412.880570][T18150] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1416.307676][T18180] xt_NFQUEUE: number of queues (8) out of range (got 65537) [ 1416.383253][T18180] lo speed is unknown, defaulting to 1000 [ 1416.672517][T18188] netlink: 'syz.0.3163': attribute type 1 has an invalid length. [ 1416.782245][T18190] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3163'. [ 1416.960994][T18188] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3163'. [ 1416.995041][T18188] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1418.224459][T18204] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1420.311277][T18215] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3170'. [ 1421.818472][T18230] netlink: 'syz.1.3173': attribute type 1 has an invalid length. [ 1422.020423][T18238] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3173'. [ 1422.056884][T18233] ceph: No mds server is up or the cluster is laggy [ 1422.263035][T18230] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3173'. [ 1422.304690][T18230] 8021q: adding VLAN 0 to HW filter on device bond20 [ 1424.380698][T18252] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3178'. [ 1424.506063][T18252] bond13: (slave gretap4): Enslaving as an active interface with an up link [ 1424.649194][T18252] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3178'. [ 1424.694319][T18252] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1424.866891][T18262] xt_NFQUEUE: number of queues (8) out of range (got 65537) [ 1425.402850][T18262] lo speed is unknown, defaulting to 1000 [ 1427.153610][T18270] loop0: detected capacity change from 0 to 32768 [ 1427.197272][T18268] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3184'. [ 1427.210167][T18270] JBD2: Ignoring recovery information on journal [ 1427.607071][T18270] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1428.173099][T11413] ocfs2: Unmounting device (7,0) on (node local) [ 1430.187483][T18290] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3189'. [ 1432.595662][T18297] loop0: detected capacity change from 0 to 32768 [ 1432.637777][T18297] JBD2: Ignoring recovery information on journal [ 1432.682037][T18297] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1432.775810][T18293] bridge0: port 1(veth9) entered blocking state [ 1432.829912][T18293] bridge0: port 1(veth9) entered disabled state [ 1432.842970][T18293] veth9: entered allmulticast mode [ 1433.017704][T18293] veth9: entered promiscuous mode [ 1433.060370][T18290] bridge0: port 2(veth0_to_bond) entered blocking state [ 1433.114385][T18290] bridge0: port 2(veth0_to_bond) entered disabled state [ 1433.121820][T18290] veth0_to_bond: entered allmulticast mode [ 1433.135058][T18290] veth0_to_bond: entered promiscuous mode [ 1433.158000][T18307] vlan0: entered allmulticast mode [ 1433.163733][T18307] veth0_to_hsr: entered allmulticast mode [ 1433.170797][T18307] bridge0: port 3(vlan0) entered blocking state [ 1433.191777][T18307] bridge0: port 3(vlan0) entered disabled state [ 1433.210005][T18307] vlan0: entered promiscuous mode [ 1433.218073][T11413] ocfs2: Unmounting device (7,0) on (node local) [ 1433.254177][T18307] veth0_to_hsr: entered promiscuous mode [ 1433.727647][T18318] loop0: detected capacity change from 0 to 256 [ 1433.740496][T18318] exfat: Deprecated parameter 'utf8' [ 1434.406915][T18318] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011e3e, chksum : 0x38c882e6, utbl_chksum : 0xe619d30d) [ 1434.794139][T18323] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3197'. [ 1435.846708][T18329] loop0: detected capacity change from 0 to 1024 [ 1436.019788][T18329] __quota_error: 57 callbacks suppressed [ 1436.019808][T18329] Quota error (device loop0): do_check_range: Getting block 64 out of range 1-5 [ 1436.076348][T18329] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 1436.106791][T18329] EXT4-fs error (device loop0): ext4_acquire_dquot:6940: comm syz.0.3197: Failed to acquire dquot type 0 [ 1436.756171][T18329] EXT4-fs error (device loop0): mb_free_blocks:1938: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 1436.817108][T18329] EXT4-fs error (device loop0): ext4_do_update_inode:5230: inode #13: comm syz.0.3197: corrupted inode contents [ 1437.086769][T18329] EXT4-fs error (device loop0): ext4_dirty_inode:6106: inode #13: comm syz.0.3197: mark_inode_dirty error [ 1437.102014][T18329] EXT4-fs error (device loop0): ext4_do_update_inode:5230: inode #13: comm syz.0.3197: corrupted inode contents [ 1437.701002][T18329] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #13: comm syz.0.3197: mark_inode_dirty error [ 1437.954388][T18355] netlink: 'syz.1.3204': attribute type 1 has an invalid length. [ 1437.974339][T18329] EXT4-fs error (device loop0): ext4_do_update_inode:5230: inode #13: comm syz.0.3197: corrupted inode contents [ 1438.113414][T18329] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 1438.160458][T18354] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3204'. [ 1438.191551][T18329] EXT4-fs error (device loop0): ext4_do_update_inode:5230: inode #13: comm syz.0.3197: corrupted inode contents [ 1438.277476][T18329] EXT4-fs error (device loop0): ext4_truncate:4288: inode #13: comm syz.0.3197: mark_inode_dirty error [ 1438.301248][T18354] 8021q: adding VLAN 0 to HW filter on device bond21 [ 1438.381555][T18329] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 1438.461050][T18329] EXT4-fs (loop0): 1 truncate cleaned up [ 1438.483094][T18329] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1438.709672][T11413] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1438.742128][T18364] tipc: Enabling of bearer rejected, failed to enable media [ 1439.737606][T18373] tipc: Enabled bearer , priority 0 [ 1439.765001][T18373] syzkaller0: entered promiscuous mode [ 1439.787704][T18373] syzkaller0: entered allmulticast mode [ 1439.854979][T18373] tipc: Resetting bearer [ 1439.870561][T18372] tipc: Resetting bearer [ 1439.907768][T18372] tipc: Disabling bearer [ 1441.076804][T18384] loop0: detected capacity change from 0 to 64 [ 1452.441548][T18467] netlink: 'syz.2.3232': attribute type 1 has an invalid length. [ 1452.569073][T18467] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3232'. [ 1452.615820][T18467] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1453.666603][T18480] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3235'. [ 1454.334569][T18463] loop0: detected capacity change from 0 to 32768 [ 1454.374523][T18482] autofs4:pid:18482:autofs_fill_super: called with bogus options [ 1454.387959][T18463] JBD2: Ignoring recovery information on journal [ 1454.422794][T18476] netlink: 'syz.3.3234': attribute type 10 has an invalid length. [ 1454.430939][T18476] hsr0: entered promiscuous mode [ 1454.436207][T18476] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1454.448567][T18476] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 1454.459249][T18476] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1454.471774][T18476] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 1454.557043][T18463] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1456.423592][ T7210] libceph: connect (1)[c::]:6789 error -22 [ 1456.433828][ T7210] libceph: mon0 (1)[c::]:6789 connect error [ 1456.488886][T18496] ceph: No mds server is up or the cluster is laggy [ 1456.537643][T18500] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3239'. [ 1456.905117][T11413] ocfs2: Unmounting device (7,0) on (node local) [ 1459.462288][T18524] netlink: 'syz.3.3248': attribute type 1 has an invalid length. [ 1459.930760][T18503] udevd[18503]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1460.301918][T17953] udevd[17953]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1460.415913][T18526] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3248'. [ 1460.455003][T18526] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3248'. [ 1460.464942][T18528] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3248'. [ 1460.805946][T18528] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1460.825796][T18529] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1460.835712][T18529] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1460.845377][T18529] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1461.033756][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1461.040186][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 1465.211521][T16537] libceph: connect (1)[c::]:6789 error -97 [ 1465.217576][T16537] libceph: mon0 (1)[c::]:6789 connect error [ 1465.919150][ T5860] libceph: connect (1)[c::]:6789 error -97 [ 1465.968054][T18558] ceph: No mds server is up or the cluster is laggy [ 1466.078270][ T5860] libceph: mon0 (1)[c::]:6789 connect error [ 1467.862589][T18575] netlink: 212 bytes leftover after parsing attributes in process `syz.1.3257'. [ 1468.064639][ T28] audit: type=1326 audit(1756524513.881:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18574 comm="syz.1.3257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b7278ebe9 code=0x7ffc0000 [ 1468.131857][ T28] audit: type=1326 audit(1756524513.881:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18574 comm="syz.1.3257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b7278ebe9 code=0x7ffc0000 [ 1468.166013][ T28] audit: type=1326 audit(1756524513.881:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18574 comm="syz.1.3257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3b7278ebe9 code=0x7ffc0000 [ 1468.684790][ T28] audit: type=1326 audit(1756524513.881:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18574 comm="syz.1.3257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b7278ebe9 code=0x7ffc0000 [ 1468.973162][ T28] audit: type=1326 audit(1756524513.881:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18574 comm="syz.1.3257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3b7278ebe9 code=0x7ffc0000 [ 1469.038947][ T28] audit: type=1326 audit(1756524514.021:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18574 comm="syz.1.3257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b7278ebe9 code=0x7ffc0000 [ 1469.062276][ T28] audit: type=1326 audit(1756524514.021:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18574 comm="syz.1.3257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b7278ebe9 code=0x7ffc0000 [ 1469.118023][ T28] audit: type=1326 audit(1756524514.826:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18574 comm="syz.1.3257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7f3b7278ebe9 code=0x7ffc0000 [ 1469.174355][ T28] audit: type=1326 audit(1756524514.826:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18574 comm="syz.1.3257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b7278ebe9 code=0x7ffc0000 [ 1469.210573][T18588] netlink: 'syz.2.3260': attribute type 1 has an invalid length. [ 1469.243952][ T28] audit: type=1326 audit(1756524514.826:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18574 comm="syz.1.3257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b7278ebe9 code=0x7ffc0000 [ 1469.289124][T18592] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3260'. [ 1469.444911][T18592] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3260'. [ 1469.565796][T18588] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3260'. [ 1469.614746][T18588] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1469.881205][T18601] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3266'. [ 1471.518192][T18612] fuse: root generation should be zero [ 1473.420017][T18619] loop0: detected capacity change from 0 to 4096 [ 1473.801616][T18619] ntfs3: loop0: ino=3, ntfs_set_state failed, -22. [ 1473.811365][T18619] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [ 1476.236273][T16737] ntfs3: loop0: ino=3, ntfs3_write_inode failed, -22. [ 1477.000390][T11413] ntfs3: loop0: ino=3, ntfs_set_state failed, -22. [ 1477.030083][T11413] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 1477.041386][T11413] ntfs3: loop0: ino=3, ntfs_set_state failed, -22. [ 1477.059428][T16783] ntfs3: loop0: ino=3, ntfs3_write_inode failed, -22. [ 1478.806431][T18664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 1478.828001][T18664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1478.838718][T18664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 1478.848712][T18664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1483.336975][T18669] bridge6: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1487.542240][T18723] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3295'. [ 1488.364501][ T5860] libceph: connect (1)[c::]:6789 error -101 [ 1488.371014][ T5860] libceph: mon0 (1)[c::]:6789 connect error [ 1488.378577][T18736] ceph: No mds server is up or the cluster is laggy [ 1509.008485][T18874] loop0: detected capacity change from 0 to 32768 [ 1509.055564][T18874] JBD2: Ignoring recovery information on journal [ 1509.095798][T18874] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1510.195237][T11413] ocfs2: Unmounting device (7,0) on (node local) [ 1517.398334][T18914] loop0: detected capacity change from 0 to 8 [ 1523.864904][T18943] netlink: 'syz.1.3375': attribute type 1 has an invalid length. [ 1525.214491][T18943] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3375'. [ 1525.408172][T18943] 8021q: adding VLAN 0 to HW filter on device bond22 [ 1526.163186][T18956] bridge9: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1527.015549][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1527.022692][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 1527.040553][T18968] misc userio: Invalid payload size [ 1531.475219][T18988] netlink: 'syz.2.3380': attribute type 1 has an invalid length. [ 1531.547895][T18988] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3380'. [ 1531.588030][T18988] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1531.835418][T18992] tipc: Enabling of bearer rejected, failed to enable media [ 1531.884581][T18994] lo speed is unknown, defaulting to 1000 [ 1532.170325][T18999] loop0: detected capacity change from 0 to 32768 [ 1532.207382][T18999] JBD2: Ignoring recovery information on journal [ 1532.287907][T18999] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1533.123879][T11413] ocfs2: Unmounting device (7,0) on (node local) [ 1533.139443][T19011] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3385'. [ 1533.159077][T19011] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3385'. [ 1534.774545][T19023] xt_bpf: check failed: parse error [ 1534.867149][T19027] netlink: 'syz.0.3390': attribute type 1 has an invalid length. [ 1534.954239][T19030] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3390'. [ 1536.915386][T19030] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1541.502449][T19073] netlink: 'syz.1.3404': attribute type 1 has an invalid length. [ 1541.638003][T19075] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3404'. [ 1541.654329][T19076] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3404'. [ 1541.667061][T19076] 8021q: adding VLAN 0 to HW filter on device bond23 [ 1543.533447][T19095] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3412'. [ 1546.564212][T19122] batadv_slave_1: entered promiscuous mode [ 1546.573991][T19121] batadv_slave_1: left promiscuous mode [ 1547.499293][T19129] netlink: 'syz.3.3420': attribute type 1 has an invalid length. [ 1547.620107][T19129] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3420'. [ 1547.643964][T19129] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1548.032960][T19140] netlink: 'syz.2.3431': attribute type 1 has an invalid length. [ 1548.371432][T19144] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3431'. [ 1548.540495][T19144] 8021q: adding VLAN 0 to HW filter on device bond17 [ 1553.469283][T19186] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1554.903259][T19192] netlink: 'syz.2.3435': attribute type 1 has an invalid length. [ 1555.078304][T19197] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3435'. [ 1555.179095][T19197] 8021q: adding VLAN 0 to HW filter on device bond18 [ 1560.563989][T19236] netlink: 'syz.3.3446': attribute type 1 has an invalid length. [ 1561.293336][T19236] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3446'. [ 1561.333042][T19236] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1561.623840][T19245] lo speed is unknown, defaulting to 1000 [ 1563.693073][T19259] tipc: Enabling of bearer rejected, failed to enable media [ 1564.281353][T19271] netlink: 344 bytes leftover after parsing attributes in process `syz.1.3455'. [ 1564.292412][T19271] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3455'. [ 1565.281857][T19275] netlink: 'syz.3.3458': attribute type 1 has an invalid length. [ 1565.619560][T19275] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3458'. [ 1566.517375][T19275] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1567.883128][T19296] overlayfs: failed to clone upperpath [ 1568.508714][T19299] tipc: Enabling of bearer rejected, failed to enable media [ 1573.299998][T19350] netlink: 416 bytes leftover after parsing attributes in process `syz.1.3471'. [ 1577.098233][T19389] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3483'. [ 1584.722018][T19438] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3495'. [ 1585.412637][T19447] overlayfs: failed to clone upperpath [ 1586.664973][ T28] audit: type=1326 audit(1756524624.885:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19449 comm="syz.2.3498" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7febc898ebe9 code=0x0 [ 1586.854808][T19455] tipc: Enabling of bearer rejected, failed to enable media [ 1589.507002][T19476] netlink: 'syz.1.3505': attribute type 1 has an invalid length. [ 1589.561613][T19476] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3505'. [ 1589.577452][T19476] 8021q: adding VLAN 0 to HW filter on device bond24 [ 1592.405721][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1592.418175][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 1592.651964][T19494] loop0: detected capacity change from 0 to 32768 [ 1593.971518][T19494] JBD2: Ignoring recovery information on journal [ 1594.025933][T19494] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1595.523274][T11413] ocfs2: Unmounting device (7,0) on (node local) [ 1596.292289][T19528] netlink: 'syz.0.3517': attribute type 1 has an invalid length. [ 1597.399399][T19529] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3517'. [ 1597.437822][T19529] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1599.334519][T19554] kAFS: unable to lookup cell '\/' [ 1602.294038][T19570] netlink: 344 bytes leftover after parsing attributes in process `syz.2.3529'. [ 1602.303793][T19570] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3529'. [ 1603.822322][T19580] netlink: 'syz.2.3532': attribute type 1 has an invalid length. [ 1603.873825][T19580] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3532'. [ 1603.884642][T19580] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3532'. [ 1603.900647][T19580] 8021q: adding VLAN 0 to HW filter on device bond19 [ 1605.520602][T19598] netlink: 416 bytes leftover after parsing attributes in process `syz.0.3536'. [ 1607.473870][T19603] loop0: detected capacity change from 0 to 32768 [ 1607.571009][T19603] JBD2: Ignoring recovery information on journal [ 1607.631978][T19603] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1608.330070][T11413] ocfs2: Unmounting device (7,0) on (node local) [ 1608.822435][T19627] random: crng reseeded on system resumption [ 1623.817403][T19693] overlayfs: failed to clone lowerpath [ 1624.680612][T19702] loop0: detected capacity change from 0 to 2048 [ 1624.708494][T19702] FAT-fs (loop0): Unrecognized mount option "msdos" or missing value [ 1629.162493][T19734] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3570'. [ 1630.806364][T19743] loop0: detected capacity change from 0 to 32768 [ 1630.860000][T19743] JBD2: Ignoring recovery information on journal [ 1631.293605][T19743] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1633.697623][T11413] ocfs2: Unmounting device (7,0) on (node local) [ 1644.025005][T19792] netlink: 'syz.0.3588': attribute type 1 has an invalid length. [ 1644.110432][T19792] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3588'. [ 1644.141507][T19792] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3588'. [ 1644.175961][T19792] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1644.555947][T19797] netlink: 'syz.0.3597': attribute type 1 has an invalid length. [ 1645.983876][T19797] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3597'. [ 1646.384618][T19797] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3597'. [ 1646.444642][T19797] 8021q: adding VLAN 0 to HW filter on device bond17 [ 1651.186142][T19838] loop0: detected capacity change from 0 to 764 [ 1651.299775][T19838] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 1652.967790][T19837] Symlink component flag not implemented [ 1652.974869][T19837] Symlink component flag not implemented (7) [ 1653.089904][T19846] xt_CT: No such helper "snmp_trap" [ 1653.395033][T19851] netlink: 'syz.2.3603': attribute type 1 has an invalid length. [ 1654.084065][T19853] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3603'. [ 1654.131927][T19851] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3603'. [ 1654.186553][T19851] 8021q: adding VLAN 0 to HW filter on device bond20 [ 1654.800814][T19859] netlink: 'syz.0.3612': attribute type 1 has an invalid length. [ 1655.343259][T19869] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3606'. [ 1657.227649][T19863] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3612'. [ 1657.406952][T19859] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3612'. [ 1657.439361][T19859] 8021q: adding VLAN 0 to HW filter on device bond18 [ 1658.752928][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1658.761415][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 1661.719118][T19910] netlink: 'syz.2.3618': attribute type 1 has an invalid length. [ 1661.864005][T19912] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3618'. [ 1662.130190][T19910] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3618'. [ 1662.143332][T19910] 8021q: adding VLAN 0 to HW filter on device bond21 [ 1665.806755][T19920] loop0: detected capacity change from 0 to 2048 [ 1665.985961][T19920] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 1666.658547][T19920] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1666.682828][T19920] ext4 filesystem being mounted at /453/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1667.467046][ T28] audit: type=1326 audit(1756524700.456:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19927 comm="syz.1.3623" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3b7278ebe9 code=0x0 [ 1669.682508][T11413] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1669.888239][T19947] netlink: 'syz.1.3634': attribute type 1 has an invalid length. [ 1673.114103][T19953] bond25: (slave vxcan1): The slave device specified does not support setting the MAC address [ 1673.754127][T19953] bond25: (slave vxcan1): Error -95 calling set_mac_address [ 1673.988629][T19964] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3630'. [ 1675.330633][T19974] loop0: detected capacity change from 0 to 32768 [ 1675.574806][T19974] JBD2: Ignoring recovery information on journal [ 1677.173661][T19974] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1678.028596][T11413] ocfs2: Unmounting device (7,0) on (node local) [ 1679.022846][T19996] netlink: 'syz.3.3641': attribute type 1 has an invalid length. [ 1683.573641][T20031] loop0: detected capacity change from 0 to 32768 [ 1683.617687][T20031] JBD2: Ignoring recovery information on journal [ 1683.880797][T20031] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1685.226471][T20045] overlayfs: failed to clone lowerpath [ 1685.742292][T11413] ocfs2: Unmounting device (7,0) on (node local) [ 1687.593714][T20061] netlink: 'syz.2.3657': attribute type 1 has an invalid length. [ 1688.096516][T20064] bond22: (slave vxcan1): The slave device specified does not support setting the MAC address [ 1688.376135][T20064] bond22: (slave vxcan1): Error -95 calling set_mac_address [ 1690.364982][T20088] veth0_to_team: left promiscuous mode [ 1690.370546][T20088] veth0_to_team: left allmulticast mode [ 1692.686560][T20106] loop0: detected capacity change from 0 to 32768 [ 1692.730245][T20106] JBD2: Ignoring recovery information on journal [ 1692.778190][T20106] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1694.188133][T11413] ocfs2: Unmounting device (7,0) on (node local) [ 1694.295283][T20126] netlink: 'syz.2.3673': attribute type 1 has an invalid length. [ 1695.116931][T20126] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3673'. [ 1696.200009][T20139] netlink: 'syz.0.3676': attribute type 1 has an invalid length. [ 1700.235305][T20165] netlink: 'syz.1.3685': attribute type 1 has an invalid length. [ 1700.402473][T20171] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3685'. [ 1700.760532][T20180] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3686'. [ 1703.066357][T20187] netlink: 'syz.1.3688': attribute type 1 has an invalid length. [ 1709.878551][T20212] netlink: 'syz.2.3695': attribute type 1 has an invalid length. [ 1710.059584][T20218] netlink: 'syz.3.3697': attribute type 1 has an invalid length. [ 1710.233106][T20212] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3695'. [ 1713.353811][T20251] loop0: detected capacity change from 0 to 764 [ 1713.527762][T20251] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 1715.566088][T20259] netlink: 'syz.1.3706': attribute type 1 has an invalid length. [ 1715.747316][T20268] netlink: 'syz.2.3708': attribute type 1 has an invalid length. [ 1715.938538][T20268] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3708'. [ 1720.234587][T20295] loop0: detected capacity change from 0 to 40427 [ 1720.290551][T20295] F2FS-fs (loop0): Unrecognized mount option "18446744073709551615" or missing value [ 1722.014630][T20307] netlink: 'syz.2.3718': attribute type 1 has an invalid length. [ 1723.772258][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1723.778825][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 1724.386370][T20315] netlink: 'syz.1.3719': attribute type 1 has an invalid length. [ 1724.487557][T20315] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3719'. [ 1725.392756][T20326] @: renamed from vlan0 (while UP) [ 1725.548441][ T28] audit: type=1326 audit(1756524754.793:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20332 comm="syz.2.3723" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7febc898ebe9 code=0x0 [ 1728.170150][T20351] netlink: 'syz.2.3729': attribute type 1 has an invalid length. [ 1728.281875][T20353] netlink: 'syz.1.3730': attribute type 1 has an invalid length. [ 1730.460561][T20365] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3730'. [ 1737.115105][T20410] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3742'. [ 1737.680710][T20414] loop0: detected capacity change from 0 to 2048 [ 1738.621935][T20414] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1743.734232][T20456] netlink: 'syz.2.3752': attribute type 10 has an invalid length. [ 1748.533705][T20482] loop0: detected capacity change from 0 to 1024 [ 1756.613275][T20525] netlink: 'syz.3.3773': attribute type 1 has an invalid length. [ 1756.727315][T20525] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3773'. [ 1761.174248][T20575] netlink: 'syz.1.3784': attribute type 1 has an invalid length. [ 1761.480190][T20575] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3784'. [ 1770.063977][T20657] netlink: 'syz.1.3806': attribute type 1 has an invalid length. [ 1770.071801][T20657] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.3806'. [ 1780.960762][T20708] loop0: detected capacity change from 0 to 32768 [ 1787.495342][T20753] loop0: detected capacity change from 0 to 128 [ 1787.502903][T20753] EXT4-fs: Ignoring removed nobh option [ 1789.277027][T20753] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1789.295811][T20753] ext4 filesystem being mounted at /500/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1789.494229][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1789.500866][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 1789.577178][T11413] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1790.764793][T20762] loop0: detected capacity change from 0 to 2048 [ 1790.836600][T20762] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1790.932638][T20762] ext4 filesystem being mounted at /501/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1791.109898][T20762] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3837'. [ 1791.707388][T11413] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1792.549962][T20784] debugfs: Directory 'netdev:nicvf0' with parent 'phy3' already present! [ 1796.518048][T20788] o2cb: This node has not been configured. [ 1796.524008][T20788] o2cb: Cluster check failed. Fix errors before retrying. [ 1796.531490][T20788] (syz.0.3843,20788,1):user_dlm_register:674 ERROR: status = -22 [ 1796.541491][T20788] (syz.0.3843,20788,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "bus" [ 1801.604018][T20843] block device autoloading is deprecated and will be removed. [ 1803.439971][T20862] netlink: 'syz.2.3860': attribute type 10 has an invalid length. [ 1803.468086][T20862] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3860'. [ 1803.622345][T20862] team0: Port device geneve0 added [ 1807.577426][T20891] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 1809.373386][T20909] loop0: detected capacity change from 0 to 64 [ 1810.286639][T20912] syz.0.3873: attempt to access beyond end of device [ 1810.286639][T20912] loop0: rw=2049, sector=65, nr_sectors = 1 limit=64 [ 1810.301173][T20912] Buffer I/O error on dev loop0, logical block 65, lost async page write [ 1810.310714][T20912] syz.0.3873: attempt to access beyond end of device [ 1810.310714][T20912] loop0: rw=2049, sector=66, nr_sectors = 1 limit=64 [ 1810.333521][T20912] Buffer I/O error on dev loop0, logical block 66, lost async page write [ 1810.342650][T20912] syz.0.3873: attempt to access beyond end of device [ 1810.342650][T20912] loop0: rw=2049, sector=67, nr_sectors = 1 limit=64 [ 1810.387819][T20912] Buffer I/O error on dev loop0, logical block 67, lost async page write [ 1810.419396][T20912] syz.0.3873: attempt to access beyond end of device [ 1810.419396][T20912] loop0: rw=2049, sector=68, nr_sectors = 1 limit=64 [ 1810.469171][T20912] Buffer I/O error on dev loop0, logical block 68, lost async page write [ 1810.477893][T20912] syz.0.3873: attempt to access beyond end of device [ 1810.477893][T20912] loop0: rw=2049, sector=72, nr_sectors = 1 limit=64 [ 1810.491507][T20912] Buffer I/O error on dev loop0, logical block 72, lost async page write [ 1810.500235][T20912] syz.0.3873: attempt to access beyond end of device [ 1810.500235][T20912] loop0: rw=2049, sector=73, nr_sectors = 1 limit=64 [ 1810.523493][T20912] Buffer I/O error on dev loop0, logical block 73, lost async page write [ 1810.543317][T20912] syz.0.3873: attempt to access beyond end of device [ 1810.543317][T20912] loop0: rw=2049, sector=76, nr_sectors = 1 limit=64 [ 1810.568001][T20912] Buffer I/O error on dev loop0, logical block 76, lost async page write [ 1810.577599][T20912] syz.0.3873: attempt to access beyond end of device [ 1810.577599][T20912] loop0: rw=2049, sector=77, nr_sectors = 1 limit=64 [ 1810.622911][T20912] Buffer I/O error on dev loop0, logical block 77, lost async page write [ 1810.671574][T20912] syz.0.3873: attempt to access beyond end of device [ 1810.671574][T20912] loop0: rw=2049, sector=78, nr_sectors = 760 limit=64 [ 1817.962200][T20966] o2cb: This node has not been configured. [ 1817.968243][T20966] o2cb: Cluster check failed. Fix errors before retrying. [ 1817.975513][T20966] (syz.3.3888,20966,1):user_dlm_register:674 ERROR: status = -22 [ 1817.983378][T20966] (syz.3.3888,20966,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "bus" [ 1818.294228][T20971] binder: 20970:20971 ioctl c0306201 200000000080 returned -14 [ 1819.830705][T20980] binder: BINDER_SET_CONTEXT_MGR already set [ 1819.837829][T20980] binder: 20970:20980 ioctl 4018620d 200000000040 returned -16 [ 1830.172734][T21039] lo: entered promiscuous mode [ 1830.177781][T21039] lo: entered allmulticast mode [ 1830.186723][T21039] tunl0: entered promiscuous mode [ 1830.191941][T21039] tunl0: entered allmulticast mode [ 1830.198511][T21039] gre0: entered promiscuous mode [ 1830.203486][T21039] gre0: entered allmulticast mode [ 1830.212336][T21039] gretap0: entered promiscuous mode [ 1830.217625][T21039] gretap0: entered allmulticast mode [ 1830.224540][T21039] erspan0: entered promiscuous mode [ 1830.229795][T21039] erspan0: entered allmulticast mode [ 1830.237642][T21039] ip_vti0: entered promiscuous mode [ 1830.243006][T21039] ip_vti0: entered allmulticast mode [ 1830.249585][T21039] ip6_vti0: entered promiscuous mode [ 1830.255052][T21039] ip6_vti0: entered allmulticast mode [ 1830.262645][T21039] sit0: entered promiscuous mode [ 1830.267659][T21039] sit0: entered allmulticast mode [ 1830.278643][T21039] ip6tnl0: entered promiscuous mode [ 1830.283986][T21039] ip6tnl0: entered allmulticast mode [ 1830.290850][T21039] ip6gre0: entered promiscuous mode [ 1830.296257][T21039] ip6gre0: entered allmulticast mode [ 1830.303304][T21039] ip6gretap0: entered promiscuous mode [ 1830.308909][T21039] ip6gretap0: entered allmulticast mode [ 1830.316162][T21039] bond0: entered promiscuous mode [ 1830.321237][T21039] bond0: entered allmulticast mode [ 1830.327665][T21039] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1830.335240][T21039] team0: entered promiscuous mode [ 1830.340395][T21039] team0: entered allmulticast mode [ 1830.346149][T21039] 8021q: adding VLAN 0 to HW filter on device team0 [ 1830.353361][T21039] tipc: Resetting bearer [ 1830.359236][T21039] tipc: Resetting bearer [ 1830.364952][T21039] dummy0: entered promiscuous mode [ 1830.370177][T21039] dummy0: entered allmulticast mode [ 1830.376696][T21039] nlmon0: entered promiscuous mode [ 1830.382026][T21039] nlmon0: entered allmulticast mode [ 1830.604553][T21039] caif0: entered promiscuous mode [ 1830.609676][T21039] caif0: entered allmulticast mode [ 1830.615078][T21039] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1830.635951][ T5860] lo speed is unknown, defaulting to 1000 [ 1835.299150][T21065] tipc: Enabled bearer , priority 0 [ 1835.340389][T21065] syzkaller0: entered promiscuous mode [ 1835.345924][T21065] syzkaller0: entered allmulticast mode [ 1836.741413][T21065] tipc: Resetting bearer [ 1836.959647][T21064] tipc: Resetting bearer [ 1837.679230][T21064] tipc: Disabling bearer [ 1838.758342][T21095] tipc: Enabled bearer , priority 10 [ 1838.876216][T21095] lo speed is unknown, defaulting to 1000 [ 1838.882946][T21095] lo speed is unknown, defaulting to 1000 [ 1838.890480][T21095] lo speed is unknown, defaulting to 1000 [ 1838.917108][T21095] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1839.417994][T21095] lo speed is unknown, defaulting to 1000 [ 1839.425423][T21095] lo speed is unknown, defaulting to 1000 [ 1839.432978][T21095] lo speed is unknown, defaulting to 1000 [ 1839.440348][T21095] lo speed is unknown, defaulting to 1000 [ 1839.447713][T21095] lo speed is unknown, defaulting to 1000 [ 1852.767664][T21162] xt_hashlimit: max too large, truncated to 1048576 [ 1854.387912][T21181] xt_ecn: cannot match TCP bits for non-tcp packets [ 1854.690754][T21178] tipc: Enabled bearer , priority 10 [ 1855.560018][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1855.579644][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 1862.205806][T21237] tipc: Enabling of bearer rejected, failed to enable media [ 1862.601370][T21237] siw: device registration error -23 [ 1862.919231][T21236] 9pnet_fd: p9_fd_create_tcp (21236): problem connecting socket to 127.0.0.1 [ 1862.962539][T21241] netlink: 'syz.0.3952': attribute type 1 has an invalid length. [ 1863.128825][T21241] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3952'. [ 1865.268070][T21270] netlink: 'syz.0.3958': attribute type 13 has an invalid length. [ 1865.284294][T21270] veth0_macvtap: left allmulticast mode [ 1865.290265][T21270] veth0_macvtap: left promiscuous mode [ 1865.434609][T21270] macvtap0: refused to change device tx_queue_len [ 1867.646583][T21293] netlink: 'syz.0.3966': attribute type 1 has an invalid length. [ 1867.768764][T21293] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3966'. [ 1870.873752][T21337] Timeout policy `syz0' can only be used by L3 protocol number 56026 [ 1871.928585][T21343] netlink: 'syz.1.3978': attribute type 1 has an invalid length. [ 1872.314209][T21343] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3978'. [ 1874.064695][T21363] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3983'. [ 1874.300207][T21377] tipc: Enabled bearer , priority 0 [ 1878.735506][T21417] loop0: detected capacity change from 0 to 16 [ 1878.742972][T21417] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 1878.976549][T21407] overlayfs: failed to resolve './bus': -2 [ 1883.603442][T21465] sctp: [Deprecated]: syz.1.4011 (pid 21465) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1883.603442][T21465] Use struct sctp_sack_info instead [ 1884.197825][ T28] audit: type=1326 audit(1756524903.035:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21463 comm="syz.2.4012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febc898ebe9 code=0x7ffc0000 [ 1884.824098][ T28] audit: type=1326 audit(1756524903.035:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21463 comm="syz.2.4012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febc898ebe9 code=0x7ffc0000 [ 1884.887262][ T28] audit: type=1326 audit(1756524903.054:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21463 comm="syz.2.4012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7febc898ebe9 code=0x7ffc0000 [ 1884.922998][ T28] audit: type=1326 audit(1756524903.054:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21463 comm="syz.2.4012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febc898ebe9 code=0x7ffc0000 [ 1885.038004][ T28] audit: type=1326 audit(1756524903.063:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21463 comm="syz.2.4012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febc898ebe9 code=0x7ffc0000 [ 1885.147360][ T28] audit: type=1326 audit(1756524903.073:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21463 comm="syz.2.4012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7febc898ebe9 code=0x7ffc0000 [ 1885.183271][ T28] audit: type=1326 audit(1756524903.082:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21463 comm="syz.2.4012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febc898ebe9 code=0x7ffc0000 [ 1885.205998][ T28] audit: type=1326 audit(1756524903.082:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21463 comm="syz.2.4012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febc898ebe9 code=0x7ffc0000 [ 1885.228627][ T28] audit: type=1326 audit(1756524903.110:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21463 comm="syz.2.4012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7febc898ebe9 code=0x7ffc0000 [ 1885.387384][ T28] audit: type=1326 audit(1756524903.110:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21463 comm="syz.2.4012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febc898ebe9 code=0x7ffc0000 [ 1888.898343][T21497] loop0: detected capacity change from 0 to 32768 [ 1888.935727][T21497] JBD2: Ignoring recovery information on journal [ 1889.017342][T21497] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1890.745487][T11413] ocfs2: Unmounting device (7,0) on (node local) [ 1890.965621][T21511] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4022'. [ 1891.691337][T21511] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4022'. [ 1896.342971][T21573] No such timeout policy "syz0" [ 1905.639876][T21649] team0: Port device vlan0 added [ 1905.707760][T21653] tipc: Enabled bearer , priority 0 [ 1914.704458][T21736] loop0: detected capacity change from 0 to 512 [ 1914.777744][T21736] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 1914.788438][T21736] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000001) [ 1914.798732][T21736] FAT-fs (loop0): Filesystem has been set read-only [ 1917.339403][T19373] blk_print_req_error: 22 callbacks suppressed [ 1917.339425][T19373] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 1 [ 1917.355440][T19373] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1917.366281][T19373] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1917.375102][T19373] Buffer I/O error on dev nbd0, logical block 2, async page read [ 1917.384837][T19373] Buffer I/O error on dev nbd0, logical block 3, async page read [ 1917.395480][T19613] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 1 [ 1917.405174][T19613] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1917.417917][T19613] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1917.427589][T19613] Buffer I/O error on dev nbd0, logical block 2, async page read [ 1917.435733][T19613] Buffer I/O error on dev nbd0, logical block 3, async page read [ 1917.444383][T19613] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 1 [ 1917.453641][T19613] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1917.463408][T19613] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1917.471812][T19613] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 1 [ 1917.482682][T19613] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 1 [ 1917.494086][T19613] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 1 [ 1917.508716][T19613] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 1 [ 1917.520140][T21753] ldm_validate_partition_table(): Disk read failed. [ 1917.526902][T19613] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 1 [ 1917.538104][T19613] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 1 [ 1917.551471][T19613] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 1 [ 1917.561300][T21753] Dev nbd0: unable to read RDB block 0 [ 1917.573274][T21753] nbd0: unable to read partition table [ 1918.071877][T21759] lo: left promiscuous mode [ 1918.076657][T21759] lo: left allmulticast mode [ 1918.085537][T21759] tunl0: left promiscuous mode [ 1918.090476][T21759] tunl0: left allmulticast mode [ 1918.096226][T21759] gre0: left promiscuous mode [ 1918.100989][T21759] gre0: left allmulticast mode [ 1918.106506][T21759] gretap0: left promiscuous mode [ 1918.111718][T21759] gretap0: left allmulticast mode [ 1918.117484][T21759] erspan0: left promiscuous mode [ 1919.418465][T21759] erspan0: left allmulticast mode [ 1919.425478][T21759] ip_vti0: left promiscuous mode [ 1919.430667][T21759] ip_vti0: left allmulticast mode [ 1919.438051][T21759] ip6_vti0: left promiscuous mode [ 1919.443424][T21759] ip6_vti0: left allmulticast mode [ 1919.450870][T21759] sit0: left promiscuous mode [ 1919.497045][T21759] sit0: left allmulticast mode [ 1919.504129][T21759] ip6tnl0: left promiscuous mode [ 1919.509358][T21759] ip6tnl0: left allmulticast mode [ 1919.516471][T21759] ip6gre0: left promiscuous mode [ 1919.521938][T21759] ip6gre0: left allmulticast mode [ 1919.529082][T21759] ip6gretap0: left promiscuous mode [ 1919.534594][T21759] ip6gretap0: left allmulticast mode [ 1919.542165][T21759] bond0: left promiscuous mode [ 1919.547126][T21759] bond0: left allmulticast mode [ 1919.555983][T21759] team0: left promiscuous mode [ 1919.561269][T21759] team0: left allmulticast mode [ 1919.568824][T21759] tipc: Resetting bearer [ 1919.576242][T21759] tipc: Resetting bearer [ 1919.582897][T21759] dummy0: left promiscuous mode [ 1919.587988][T21759] dummy0: left allmulticast mode [ 1919.596697][T21759] nlmon0: left promiscuous mode [ 1919.602097][T21759] nlmon0: left allmulticast mode [ 1919.668107][T21759] caif0: left promiscuous mode [ 1919.673111][T21759] caif0: left allmulticast mode [ 1919.678098][T21759] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1920.457422][T21772] loop0: detected capacity change from 0 to 2048 [ 1920.816504][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1921.131199][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 1922.647788][T21790] Timeout policy `syz0' can only be used by L3 protocol number 56026 [ 1925.613676][T21797] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4099'. [ 1925.790459][T21820] netlink: 'syz.2.4104': attribute type 1 has an invalid length. [ 1925.981690][T21820] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4104'. [ 1927.177386][T21841] tipc: Resetting bearer [ 1929.740322][T21867] netlink: 'syz.1.4116': attribute type 1 has an invalid length. [ 1929.931303][T21867] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4116'. [ 1939.280569][T21969] sctp: [Deprecated]: syz.2.4145 (pid 21969) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1939.280569][T21969] Use struct sctp_sack_info instead [ 1939.539772][T21971] netlink: 'syz.3.4146': attribute type 1 has an invalid length. [ 1939.590728][T21971] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4146'. [ 1944.695316][T22009] overlayfs: failed to clone upperpath [ 1950.210857][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 1950.210874][ T28] audit: type=1326 audit(1756524964.501:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22049 comm="syz.2.4164" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7febc898ebe9 code=0x0 [ 1950.797264][T22066] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1950.823168][T22066] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1951.134774][T22067] bond0 (unregistering): Released all slaves [ 1956.316343][T22115] No such timeout policy "syz0" [ 1960.190315][T22136] loop0: detected capacity change from 0 to 2048 [ 1960.219799][T22139] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1972.771942][T22227] ptrace attach of "./syz-executor exec"[5790] was attempted by "./syz-executor exec"[22227] [ 1972.817363][T22227] xt_cgroup: invalid path, errno=-2 [ 1976.706700][T22254] Timeout policy `syz0' can only be used by L3 protocol number 56026 [ 1983.118805][T22310] ptrace attach of "./syz-executor exec"[5785] was attempted by "./syz-executor exec"[22310] [ 1983.250239][T22312] xt_cgroup: invalid path, errno=-2 [ 1983.730127][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802588b400: rx timeout, send abort [ 1983.850013][T22314] sctp: [Deprecated]: syz.2.4231 (pid 22314) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1983.850013][T22314] Use struct sctp_sack_info instead [ 1984.273147][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802588b400: abort rx timeout. Force session deactivation [ 1986.735145][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1986.743564][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 1990.415651][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802840ec00: rx timeout, send abort [ 1990.958477][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802840ec00: abort rx timeout. Force session deactivation [ 1992.055732][T22369] 9pnet_virtio: no channels available for device syz [ 1992.152149][T22374] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1999.157398][T22415] overlayfs: failed to clone upperpath [ 2002.355521][T22436] ptrace attach of "./syz-executor exec"[11413] was attempted by "./syz-executor exec"[22436] [ 2002.461050][T22436] xt_cgroup: invalid path, errno=-2 [ 2003.813767][ T28] audit: type=1326 audit(1756525015.096:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22451 comm="syz.3.4271" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa88e18ebe9 code=0x0 [ 2004.198690][T22458] No such timeout policy "syz0" [ 2011.240103][T22491] delete_channel: no stack [ 2018.383930][T22543] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4292'. [ 2035.261064][T22628] sctp: [Deprecated]: syz.2.4315 (pid 22628) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2035.261064][T22628] Use struct sctp_sack_info instead [ 2042.470309][T22664] netdevsim netdevsim1 : set [0, 0] type 1 family 0 port 8472 - 0 [ 2042.478441][T22664] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2042.487357][T22664] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2042.496204][T22664] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2042.536620][T22664] vxlan0: entered promiscuous mode [ 2042.542084][T22664] vxlan0: entered allmulticast mode [ 2042.575807][T22664] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 2045.412879][T22686] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4323'. [ 2045.536718][T22690] sctp: [Deprecated]: syz.1.4329 (pid 22690) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2045.536718][T22690] Use struct sctp_sack_info instead [ 2050.563966][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880256d3000: rx timeout, send abort [ 2051.106867][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880256d3000: abort rx timeout. Force session deactivation [ 2052.722424][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 2052.729066][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 2056.461677][T22771] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4348'. [ 2058.298027][T22792] xt_socket: unknown flags 0x50 [ 2058.310872][T22792] overlayfs: missing 'lowerdir' [ 2068.430211][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802ccde800: rx timeout, send abort [ 2068.973115][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802ccde800: abort rx timeout. Force session deactivation [ 2072.994716][T22899] netlink: 'syz.3.4383': attribute type 10 has an invalid length. [ 2074.197936][T22909] netlink: 'syz.1.4386': attribute type 6 has an invalid length. [ 2076.843943][T22936] netlink: 9 bytes leftover after parsing attributes in process `syz.2.4391'. [ 2076.908056][T22936] gretap0: entered promiscuous mode [ 2080.789880][ C0] vcan0: j1939_tp_rxtimer: 0xffff888036eff400: rx timeout, send abort [ 2081.332744][ C0] vcan0: j1939_tp_rxtimer: 0xffff888036eff400: abort rx timeout. Force session deactivation [ 2082.011785][T22974] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2082.752609][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803977ac00: rx timeout, send abort [ 2083.063027][T22988] xt_socket: unknown flags 0x50 [ 2083.070643][T22988] overlayfs: missing 'lowerdir' [ 2083.295480][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803977ac00: abort rx timeout. Force session deactivation [ 2086.009755][ C1] vcan0: j1939_tp_rxtimer: 0xffff888033297000: rx timeout, send abort [ 2086.552724][ C1] vcan0: j1939_tp_rxtimer: 0xffff888033297000: abort rx timeout. Force session deactivation [ 2090.172102][T23048] kthread_run failed with err -4 [ 2090.183032][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805010d000: rx timeout, send abort [ 2090.725929][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805010d000: abort rx timeout. Force session deactivation [ 2091.133940][T23060] ceph: No mds server is up or the cluster is laggy [ 2091.384472][T16537] libceph: connect (1)[c::]:6789 error -101 [ 2091.390693][T16537] libceph: mon0 (1)[c::]:6789 connect error [ 2095.269288][T23074] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4429'. [ 2098.756675][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805ba19c00: rx timeout, send abort [ 2099.299481][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805ba19c00: abort rx timeout. Force session deactivation [ 2101.399483][T23120] Timeout policy `syz0' can only be used by L3 protocol number 56026 [ 2102.678930][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802566b400: rx timeout, send abort [ 2103.221802][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802566b400: abort rx timeout. Force session deactivation [ 2103.410416][T23144] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4450'. [ 2105.559701][T23163] No such timeout policy "syz0" [ 2107.410999][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805de02000: rx timeout, send abort [ 2107.953873][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805de02000: abort rx timeout. Force session deactivation [ 2111.010609][T23201] No such timeout policy "syz0" [ 2117.865516][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 2117.872377][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 2118.455384][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805daf8c00: rx timeout, send abort [ 2118.998205][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805daf8c00: abort rx timeout. Force session deactivation [ 2122.201614][T23265] sctp: [Deprecated]: syz.0.4486 (pid 23265) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2122.201614][T23265] Use struct sctp_sack_info instead [ 2127.465818][T23296] No such timeout policy "syz0" [ 2127.738178][T23301] netlink: 'syz.2.4490': attribute type 1 has an invalid length. [ 2127.746250][T23301] netlink: 'syz.2.4490': attribute type 2 has an invalid length. [ 2129.625270][T23312] kernel read not supported for file /file1 (pid: 23312 comm: syz.2.4498) [ 2129.659273][ T28] audit: type=1800 audit(1756525132.798:917): pid=23312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4498" name="file1" dev="mqueue" ino=51560 res=0 errno=0 [ 2132.138669][T23333] sctp: [Deprecated]: syz.1.4502 (pid 23333) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2132.138669][T23333] Use struct sctp_sack_info instead [ 2133.062460][T23339] ceph: No mds server is up or the cluster is laggy [ 2133.205077][T20082] libceph: connect (1)[c::]:6789 error -97 [ 2133.211114][T20082] libceph: mon0 (1)[c::]:6789 connect error [ 2142.004570][T23407] macsec0: entered allmulticast mode [ 2143.536853][T23417] overlayfs: failed to clone lowerpath [ 2144.250788][T23422] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2148.698936][T23460] syz_tun: entered allmulticast mode [ 2151.382497][T23473] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 2152.894722][ T28] audit: type=1326 audit(1756525154.546:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23478 comm="syz.2.4539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febc898ebe9 code=0x7fc00000 [ 2153.059518][ T28] audit: type=1326 audit(1756525154.695:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23478 comm="syz.2.4539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febc898ebe9 code=0x7fc00000 [ 2156.854490][T23520] ceph: No mds server is up or the cluster is laggy [ 2157.433044][T20082] libceph: connect (1)[c::]:6789 error -22 [ 2157.439300][T20082] libceph: mon0 (1)[c::]:6789 connect error [ 2157.794702][T20082] libceph: connect (1)[c::]:6789 error -22 [ 2157.806263][T20082] libceph: mon0 (1)[c::]:6789 connect error [ 2163.135461][T23566] ceph: No mds server is up or the cluster is laggy [ 2164.705560][T23586] sctp: [Deprecated]: syz.2.4570 (pid 23586) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2164.705560][T23586] Use struct sctp_sack_info instead [ 2166.875248][T23607] overlayfs: failed to clone lowerpath [ 2169.021320][T23616] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 2171.620012][ T5860] libceph: connect (1)[c::]:6789 error -101 [ 2171.651837][ T5860] libceph: mon0 (1)[c::]:6789 connect error [ 2171.664077][T23648] ceph: No mds server is up or the cluster is laggy [ 2172.936318][T23666] overlayfs: failed to clone lowerpath [ 2173.377728][T20082] libceph: connect (1)[c::]:6789 error -22 [ 2173.383790][T20082] libceph: mon0 (1)[c::]:6789 connect error [ 2173.485859][T23668] ceph: No mds server is up or the cluster is laggy [ 2173.790629][T23674] sctp: [Deprecated]: syz.3.4589 (pid 23674) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2173.790629][T23674] Use struct sctp_sack_info instead [ 2174.470060][T19763] libceph: connect (1)[c::]:6789 error -22 [ 2174.476809][T19763] libceph: mon0 (1)[c::]:6789 connect error [ 2176.081283][T23700] veth1_macvtap: left promiscuous mode [ 2176.087173][T23700] macsec0: entered allmulticast mode [ 2176.538712][ C0] vcan0: j1939_tp_rxtimer: 0xffff888024687c00: rx timeout, send abort [ 2177.029793][T23707] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4597'. [ 2177.081639][ C0] vcan0: j1939_tp_rxtimer: 0xffff888024687c00: abort rx timeout. Force session deactivation [ 2179.295460][T23718] ceph: No mds server is up or the cluster is laggy [ 2184.448137][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 2184.455243][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 2184.877016][T23761] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 2186.271190][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805ba35c00: rx timeout, send abort [ 2186.579372][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803fbcd000: rx timeout, send abort [ 2188.060478][T23782] ceph: No mds server is up or the cluster is laggy [ 2190.575753][T23812] bridge_slave_0: default FDB implementation only supports local addresses [ 2191.499987][T23813] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 37748736, id = 0 [ 2192.102919][T23803] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 2194.422176][ T28] audit: type=1326 audit(1756525193.066:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23826 comm="syz.0.4627" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc40398ebe9 code=0x0 [ 2197.811560][T23856] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 2208.616296][T23928] netlink: 'syz.2.4649': attribute type 4 has an invalid length. [ 2208.655643][ T7211] lo speed is unknown, defaulting to 1000 [ 2211.298282][T23941] veth1_macvtap: left promiscuous mode [ 2211.303885][T23941] macsec0: entered allmulticast mode [ 2213.037088][T23949] xt_CT: No such helper "snmp" [ 2213.409289][T23955] 9pnet_fd: Insufficient options for proto=fd [ 2214.790541][T23971] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2214.941359][T23974] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4665'. [ 2217.926394][T23993] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 2226.368623][T24069] ceph: No mds server is up or the cluster is laggy [ 2226.506223][T19714] libceph: connect (1)[c::]:6789 error -22 [ 2226.636939][T19714] libceph: mon0 (1)[c::]:6789 connect error [ 2231.725553][T24116] ceph: No mds server is up or the cluster is laggy [ 2231.836397][ T7211] libceph: connect (1)[c::]:6789 error -22 [ 2231.842537][ T7211] libceph: mon0 (1)[c::]:6789 connect error [ 2235.367790][T24147] overlayfs: failed to clone upperpath [ 2236.031937][T24150] ceph: No mds server is up or the cluster is laggy [ 2237.042202][T24163] ceph: No mds server is up or the cluster is laggy [ 2243.898134][T24213] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 2244.113825][T24211] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2244.753073][T24225] sctp: [Deprecated]: syz.1.4733 (pid 24225) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2244.753073][T24225] Use struct sctp_sack_info instead [ 2247.902055][T19714] libceph: connect (1)[c::]:6789 error -97 [ 2247.913903][T19714] libceph: mon0 (1)[c::]:6789 connect error [ 2247.997754][T24252] ceph: No mds server is up or the cluster is laggy [ 2248.213209][ T5860] libceph: connect (1)[c::]:6789 error -97 [ 2248.219335][ T5860] libceph: mon0 (1)[c::]:6789 connect error [ 2249.912518][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 2249.919119][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 2251.603761][T24284] netlink: 'syz.3.4746': attribute type 4 has an invalid length. [ 2251.647756][T20082] lo speed is unknown, defaulting to 1000 [ 2252.666501][ T28] audit: type=1326 audit(1756525247.384:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24282 comm="syz.2.4748" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7febc898ebe9 code=0x0 [ 2254.940563][T24300] (null): rxe_set_mtu: Set mtu to 1024 [ 2254.954959][T24300] rdma_rxe: rxe_newlink: failed to add bridge_slave_0 [ 2257.212859][T24305] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 2260.779175][T24340] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 2263.453346][T24371] sctp: [Deprecated]: syz.2.4770 (pid 24371) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2263.453346][T24371] Use struct sctp_sack_info instead [ 2264.401010][T24384] ceph: No mds server is up or the cluster is laggy [ 2264.560790][ T7211] libceph: connect (1)[c::]:6789 error -97 [ 2264.611530][ T7211] libceph: mon0 (1)[c::]:6789 connect error [ 2265.077377][ T7211] libceph: connect (1)[c::]:6789 error -97 [ 2265.106159][ T7211] libceph: mon0 (1)[c::]:6789 connect error [ 2270.243352][T24417] netlink: 'syz.0.4782': attribute type 4 has an invalid length. [ 2271.871770][T24429] Timeout policy `syz0' can only be used by L3 protocol number 56026 [ 2272.280881][T24431] sctp: [Deprecated]: syz.2.4786 (pid 24431) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2272.280881][T24431] Use struct sctp_sack_info instead [ 2277.114211][T24466] 8021q: adding VLAN 0 to HW filter on device bond22 [ 2277.268606][T24469] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 2277.308202][T24469] bond22: (slave macvlan2): Enslaving as a backup interface with a down link [ 2277.462817][T24474] No such timeout policy "syz0" [ 2277.582243][T24466] tipc: Resetting bearer [ 2278.307624][T24478] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 2290.423998][T24567] (null): rxe_set_mtu: Set mtu to 1024 [ 2290.445596][T24567] rdma_rxe: rxe_newlink: failed to add bridge_slave_0 [ 2306.827042][T24675] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4854'. [ 2314.098512][T24728] ceph: No mds server is up or the cluster is laggy [ 2314.111393][T20082] libceph: connect (1)[c::]:6789 error -22 [ 2314.118354][T20082] libceph: mon0 (1)[c::]:6789 connect error [ 2314.422064][ T7211] libceph: connect (1)[c::]:6789 error -22 [ 2314.428132][ T7211] libceph: mon0 (1)[c::]:6789 connect error [ 2315.548108][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 2315.554660][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 2317.249317][T24746] overlayfs: missing 'lowerdir' [ 2319.273481][T24764] No such timeout policy "syz0" [ 2321.113097][T24776] ceph: No mds server is up or the cluster is laggy [ 2331.382828][T24835] fuse: Unknown parameter '0xffffffffffffffff' [ 2331.421762][ T28] audit: type=1326 audit(1756525321.496:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24830 comm="syz.2.4893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febc898ebe9 code=0x7ffc0000 [ 2331.844098][ T28] audit: type=1326 audit(1756525321.496:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24830 comm="syz.2.4893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febc898ebe9 code=0x7ffc0000 [ 2331.890260][ T28] audit: type=1326 audit(1756525321.496:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24830 comm="syz.2.4893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7febc898d457 code=0x7ffc0000 [ 2331.943275][ T28] audit: type=1326 audit(1756525321.496:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24830 comm="syz.2.4893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7febc899038a code=0x7ffc0000 [ 2331.999486][ T28] audit: type=1326 audit(1756525321.515:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24830 comm="syz.2.4893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febc898ebe9 code=0x7ffc0000 [ 2332.047128][ T28] audit: type=1326 audit(1756525321.515:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24830 comm="syz.2.4893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febc898ebe9 code=0x7ffc0000 [ 2332.100759][ T28] audit: type=1326 audit(1756525321.515:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24830 comm="syz.2.4893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7febc898ebe9 code=0x7ffc0000 [ 2332.147192][ T28] audit: type=1326 audit(1756525321.515:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24830 comm="syz.2.4893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febc898ebe9 code=0x7ffc0000 [ 2335.489754][ T28] audit: type=1326 audit(1756525321.515:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24830 comm="syz.2.4893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febc898ebe9 code=0x7ffc0000 [ 2335.556526][ T28] audit: type=1326 audit(1756525321.515:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24830 comm="syz.2.4893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7febc898ebe9 code=0x7ffc0000 [ 2338.682499][T24868] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 2348.405471][T24934] veth0_to_bond: left allmulticast mode [ 2348.441174][T24934] veth0_to_bond: left promiscuous mode [ 2348.457626][T24934] bridge8: port 2(veth0_to_bond) entered disabled state [ 2350.001632][T24934] team0: Port device geneve0 removed [ 2350.299662][T24934] bond3: (slave ip6erspan0): Releasing active interface [ 2350.876717][T24934] bond4: (slave geneve2): Releasing active interface [ 2350.961046][T24934] bond5: (slave geneve3): Releasing active interface [ 2351.011596][T24934] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 2351.044439][T24934] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 2351.070812][T24934] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 2351.080635][T24934] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 2351.109273][T24934] bond8: (slave gretap3): Releasing active interface [ 2351.161507][T24934] bond11: (slave veth11): Releasing active interface [ 2351.191927][T24934] veth13: left allmulticast mode [ 2351.207833][T24934] veth13: left promiscuous mode [ 2351.221334][T24934] bridge8: port 1(veth13) entered disabled state [ 2351.232790][T24934] vlan2: left promiscuous mode [ 2351.244100][T24934] veth0_to_hsr: left promiscuous mode [ 2351.256046][T24934] bridge8: port 3(vlan2) entered disabled state [ 2351.269885][T24934] bond13: (slave gretap4): Releasing backup interface [ 2351.320791][T24938] team0: Mode changed to "activebackup" [ 2351.413341][T24951] team0: Port device vlan0 added [ 2351.521400][T24956] tipc: Enabled bearer , priority 0 [ 2352.531795][T24966] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 2356.926468][T24993] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 2358.990668][T25015] netlink: 'syz.1.4940': attribute type 10 has an invalid length. [ 2361.200308][T25030] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 2361.909366][T25038] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4947'. [ 2365.567904][T25067] overlayfs: failed to clone upperpath [ 2369.271852][T25090] ceph: No mds server is up or the cluster is laggy [ 2369.290932][T20082] libceph: connect (1)[c::]:6789 error -22 [ 2369.368128][T20082] libceph: mon0 (1)[c::]:6789 connect error [ 2374.166214][T25128] No such timeout policy "syz0" [ 2378.920052][T25164] sctp: [Deprecated]: syz.0.4980 (pid 25164) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2378.920052][T25164] Use struct sctp_sack_info instead [ 2379.862653][T25171] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_team, syncid = 0, id = 0 [ 2380.728740][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 2380.735453][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 2393.652562][T25264] No such timeout policy "syz0" [ 2396.797157][T25291] netlink: get zone limit has 8 unknown bytes [ 2399.414593][T25306] lo speed is unknown, defaulting to 1000 [ 2399.420513][T25306] lo speed is unknown, defaulting to 1000 [ 2399.427141][T25306] lo speed is unknown, defaulting to 1000 [ 2399.443774][T25306] infiniband 3yz0: RDMA CMA: cma_listen_on_dev, error -98 [ 2399.814989][T25306] lo speed is unknown, defaulting to 1000 [ 2399.822681][T25306] lo speed is unknown, defaulting to 1000 [ 2399.830213][T25306] lo speed is unknown, defaulting to 1000 [ 2399.837612][T25306] lo speed is unknown, defaulting to 1000 [ 2399.845159][T25306] lo speed is unknown, defaulting to 1000 [ 2401.734525][T25321] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 2404.429926][T25334] No such timeout policy "syz0" [ 2406.163090][T25341] ptrace attach of ""[25342] was attempted by "./syz-executor exec"[25341] [ 2406.929198][T25346] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 2413.346882][T25391] ceph: No mds server is up or the cluster is laggy [ 2413.795711][T25390] overlayfs: failed to clone upperpath [ 2420.330112][T25445] overlayfs: failed to clone upperpath [ 2422.183430][T25458] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2425.107538][T25491] netlink: get zone limit has 8 unknown bytes [ 2426.784665][T25502] overlayfs: failed to clone upperpath [ 2427.832619][ T28] kauditd_printk_skb: 45 callbacks suppressed [ 2427.832636][ T28] audit: type=1326 audit(1756525411.709:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25507 comm="syz.2.5062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febc898ebe9 code=0x7fc00000 [ 2430.688778][ T28] audit: type=1326 audit(1756525414.384:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25507 comm="syz.2.5062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febc898ebe9 code=0x7fc00000 [ 2431.786722][T25532] netlink: get zone limit has 8 unknown bytes [ 2435.224451][T25550] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 2439.418680][T25592] ceph: No mds server is up or the cluster is laggy [ 2439.441937][ T7211] libceph: connect (1)[c::]:6789 error -97 [ 2439.694940][ T7211] libceph: mon0 (1)[c::]:6789 connect error [ 2439.966449][T25598] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5082'. [ 2442.596785][T25618] "syz.2.5088" (25618) uses obsolete ecb(arc4) skcipher [ 2443.663746][T25628] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 2443.857707][T25617] ceph: No mds server is up or the cluster is laggy [ 2446.287736][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 2446.294179][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 2449.209592][T25669] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 2451.788753][ T28] audit: type=1326 audit(1756525433.510:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25685 comm="syz.1.5104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b7278ebe9 code=0x7ffc0000 [ 2451.820944][ T28] audit: type=1326 audit(1756525433.510:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25685 comm="syz.1.5104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3b7278ebe9 code=0x7ffc0000 [ 2451.848875][ T28] audit: type=1326 audit(1756525433.520:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25685 comm="syz.1.5104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b7278ebe9 code=0x7ffc0000 [ 2451.882628][ T28] audit: type=1326 audit(1756525433.520:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25685 comm="syz.1.5104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f3b7278ebe9 code=0x7ffc0000 [ 2451.934310][ T28] audit: type=1326 audit(1756525434.118:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25685 comm="syz.1.5104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b7278ebe9 code=0x7ffc0000 [ 2451.999927][ T28] audit: type=1326 audit(1756525434.118:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25685 comm="syz.1.5104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b7278ebe9 code=0x7ffc0000 [ 2453.861053][T25713] batman_adv: batadv0: Local translation table size (148) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:2a [ 2454.248190][T25717] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 2456.637945][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803fbe1c00: rx timeout, send abort [ 2457.180903][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803fbe1c00: abort rx timeout. Force session deactivation [ 2462.839483][T25764] ceph: No mds server is up or the cluster is laggy [ 2463.847727][ C1] vcan0: j1939_tp_rxtimer: 0xffff888033295000: rx timeout, send abort [ 2464.390608][ C1] vcan0: j1939_tp_rxtimer: 0xffff888033295000: abort rx timeout. Force session deactivation [ 2469.690310][T25833] xt_limit: Overflow, try lower: 687865856/40 [ 2470.231060][ C0] vcan0: j1939_tp_rxtimer: 0xffff888020db6c00: rx timeout, send abort [ 2470.774005][ C0] vcan0: j1939_tp_rxtimer: 0xffff888020db6c00: abort rx timeout. Force session deactivation [ 2476.587199][T25889] overlayfs: failed to clone upperpath [ 2479.160549][T25897] ptrace attach of ""[25898] was attempted by "./syz-executor exec"[25897] [ 2482.238112][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805c5bd800: rx timeout, send abort [ 2482.781040][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805c5bd800: abort rx timeout. Force session deactivation [ 2484.377163][T25931] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 2487.307465][T25949] Timeout policy `syz0' can only be used by L3 protocol number 56026 [ 2487.833118][ T28] audit: type=1326 audit(1756525467.607:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25946 comm="syz.0.5177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc40398ebe9 code=0x7fc00000 [ 2487.912373][ T28] audit: type=1326 audit(1756525467.907:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25946 comm="syz.0.5177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc40398ebe9 code=0x7fc00000 [ 2488.725087][ T7211] libceph: connect (1)[c::]:6789 error -97 [ 2488.731657][ T7211] libceph: mon0 (1)[c::]:6789 connect error [ 2488.751766][T25970] ceph: No mds server is up or the cluster is laggy [ 2489.946277][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804430b400: rx timeout, send abort [ 2490.079342][T25985] No such timeout policy "syz0" [ 2490.489208][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804430b400: abort rx timeout. Force session deactivation [ 2494.117893][T26014] xt_limit: Overflow, try lower: 687865856/40 [ 2495.687520][T26024] ceph: No mds server is up or the cluster is laggy [ 2496.409931][T26039] lo: entered promiscuous mode [ 2496.434816][T26039] tunl0: entered promiscuous mode [ 2496.456427][T26039] gre0: entered promiscuous mode [ 2496.468109][T26039] gretap0: entered promiscuous mode [ 2496.494945][T26039] erspan0: entered promiscuous mode [ 2496.511959][T26039] ip_vti0: entered promiscuous mode [ 2496.528159][T26039] ip6_vti0: entered promiscuous mode [ 2496.549141][T26039] sit0: entered promiscuous mode [ 2496.566177][T26039] ip6tnl0: entered promiscuous mode [ 2496.578602][T26039] ip6gre0: entered promiscuous mode [ 2496.618245][T26039] ip6gretap0: entered promiscuous mode [ 2496.647247][T26039] bond0: entered promiscuous mode [ 2496.653734][T26039] team0: entered promiscuous mode [ 2496.660692][T26039] tipc: Resetting bearer [ 2496.666808][T26039] dummy0: entered promiscuous mode [ 2496.673097][T26039] nlmon0: entered promiscuous mode [ 2496.680368][T26039] caif0: entered promiscuous mode [ 2496.685967][T26039] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2496.715185][ T7211] lo speed is unknown, defaulting to 1000 [ 2497.099015][T26046] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 2497.822598][T26050] 8021q: adding VLAN 0 to HW filter on device ipvlan1 [ 2497.868630][T26050] team0: Device ipvlan1 is already an upper device of the team interface [ 2505.986174][T19763] libceph: connect (1)[c::]:6789 error -22 [ 2505.992621][T19763] libceph: mon0 (1)[c::]:6789 connect error [ 2506.005890][T26096] ceph: No mds server is up or the cluster is laggy [ 2507.526171][T26119] netlink: 'syz.2.5224': attribute type 6 has an invalid length. [ 2507.542462][T26119] Invalid option length (65058) for dns_resolver key [ 2508.343417][T26125] xt_limit: Overflow, try lower: 687865856/40 [ 2511.290706][T26155] IPVS: set_ctl: invalid protocol: 47 172.20.20.50:20000 [ 2511.315931][T26155] atomic_op ffff88805e467198 conn xmit_atomic 0000000000000000 [ 2511.980902][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 2511.987658][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 2512.285061][T26162] 8021q: adding VLAN 0 to HW filter on device ipvlan1 [ 2512.299112][T26162] team0: Device ipvlan1 is already an upper device of the team interface [ 2513.950775][T26172] xt_limit: Overflow, try lower: 687865856/40 [ 2528.933875][T19714] libceph: connect (1)[c::]:6789 error -97 [ 2528.984770][T26267] ceph: No mds server is up or the cluster is laggy [ 2528.997837][T19714] libceph: mon0 (1)[c::]:6789 connect error [ 2530.521938][T26281] netlink: 'syz.1.5273': attribute type 1 has an invalid length. [ 2530.545613][T26281] 8021q: adding VLAN 0 to HW filter on device bond34 [ 2530.701475][T26281] bond34: (slave veth19): Enslaving as an active interface with a down link [ 2538.589790][T26343] sctp: [Deprecated]: syz.2.5292 (pid 26343) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2538.589790][T26343] Use struct sctp_sack_info instead [ 2541.689186][T26366] Cannot find del_set index 3 as target [ 2542.201628][T26370] No such timeout policy "syz0" [ 2545.517351][T26392] sctp: [Deprecated]: syz.3.5308 (pid 26392) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2545.517351][T26392] Use struct sctp_sack_info instead [ 2547.394915][T26409] No such timeout policy "syz0" [ 2548.191840][T26416] ceph: No mds server is up or the cluster is laggy [ 2548.199302][T19714] libceph: connect (1)[c::]:6789 error -22 [ 2548.211879][T19714] libceph: mon0 (1)[c::]:6789 connect error [ 2550.589948][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803be6dc00: rx timeout, send abort [ 2551.132849][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803be6dc00: abort rx timeout. Force session deactivation [ 2553.409517][T26460] ceph: No mds server is up or the cluster is laggy [ 2553.590197][T26470] sctp: [Deprecated]: syz.2.5328 (pid 26470) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2553.590197][T26470] Use struct sctp_sack_info instead [ 2554.837012][T26478] Invalid ELF header magic: != ELF [ 2559.822554][T26528] lo speed is unknown, defaulting to 1000 [ 2559.872792][T26528] lo speed is unknown, defaulting to 1000 [ 2559.898959][T26528] lo speed is unknown, defaulting to 1000 [ 2560.414932][T26531] ceph: No mds server is up or the cluster is laggy [ 2562.544394][ T28] audit: type=1326 audit(1756525537.707:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26548 comm="syz.3.5348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa88e18ebe9 code=0x7ffc0000 [ 2562.591368][ T28] audit: type=1326 audit(1756525537.735:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26548 comm="syz.3.5348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa88e18ebe9 code=0x7ffc0000 [ 2562.614158][ T28] audit: type=1326 audit(1756525537.735:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26548 comm="syz.3.5348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa88e18ebe9 code=0x7ffc0000 [ 2562.708025][ T28] audit: type=1326 audit(1756525537.735:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26548 comm="syz.3.5348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa88e18ebe9 code=0x7ffc0000 [ 2562.894149][ T28] audit: type=1326 audit(1756525537.735:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26548 comm="syz.3.5348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7fa88e18ebe9 code=0x7ffc0000 [ 2562.923615][ T28] audit: type=1326 audit(1756525537.735:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26548 comm="syz.3.5348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa88e18ebe9 code=0x7ffc0000 [ 2562.979273][ T28] audit: type=1326 audit(1756525537.735:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26548 comm="syz.3.5348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa88e18ebe9 code=0x7ffc0000 [ 2563.077815][ T28] audit: type=1326 audit(1756525537.744:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26548 comm="syz.3.5348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fa88e18ebe9 code=0x7ffc0000 [ 2563.204998][ T28] audit: type=1326 audit(1756525537.744:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26548 comm="syz.3.5348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa88e18ebe9 code=0x7ffc0000 [ 2563.228578][ T28] audit: type=1326 audit(1756525537.744:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26548 comm="syz.3.5348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa88e18ebe9 code=0x7ffc0000 [ 2566.314195][T16537] libceph: connect (1)[c::]:6789 error -97 [ 2566.875794][T16537] libceph: mon0 (1)[c::]:6789 connect error [ 2566.901096][T26577] ceph: No mds server is up or the cluster is laggy [ 2570.544053][T26603] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2570.551340][T26603] IPv6: NLM_F_CREATE should be set when creating new route [ 2570.558654][T26603] IPv6: NLM_F_CREATE should be set when creating new route [ 2570.565926][T26603] IPv6: NLM_F_CREATE should be set when creating new route [ 2573.117231][T26627] Invalid ELF header magic: != ELF [ 2578.027964][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 2578.034772][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 2579.731339][T26688] No such timeout policy "syz1" [ 2580.525453][T26694] sctp: [Deprecated]: syz.3.5385 (pid 26694) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2580.525453][T26694] Use struct sctp_sack_info instead [ 2582.140954][T26710] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5389'. [ 2582.687923][T26711] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 2590.457530][T19763] libceph: connect (1)[c::]:6789 error -22 [ 2590.479482][T19763] libceph: mon0 (1)[c::]:6789 connect error [ 2590.513546][T26761] ceph: No mds server is up or the cluster is laggy [ 2590.786986][T19763] libceph: connect (1)[c::]:6789 error -22 [ 2590.793035][T19763] libceph: mon0 (1)[c::]:6789 connect error [ 2591.554844][T26769] overlayfs: failed to clone upperpath [ 2592.350180][T26779] Timeout policy `syz1' can only be used by L3 protocol number 2342 [ 2594.130493][T26787] ceph: No mds server is up or the cluster is laggy [ 2594.167224][T16537] libceph: connect (1)[c::]:6789 error -97 [ 2594.173249][T16537] libceph: mon0 (1)[c::]:6789 connect error [ 2594.903846][T26797] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5411'. [ 2600.560670][T26833] netlink: 'syz.3.5420': attribute type 4 has an invalid length. [ 2603.538738][T26864] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5427'. [ 2605.052342][T26882] fuse: Unknown parameter '0x0000000000000003' [ 2611.754543][T26943] ceph: No mds server is up or the cluster is laggy [ 2613.356300][T26957] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 2614.156642][T26965] overlayfs: failed to clone upperpath [ 2617.925431][T26987] netlink: 'syz.1.5455': attribute type 10 has an invalid length. [ 2617.954914][T26987] netlink: 2 bytes leftover after parsing attributes in process `syz.1.5455'. [ 2617.997858][T26987] 8021q: adding VLAN 0 to HW filter on device team0 [ 2620.507990][T27006] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 2621.059281][T27015] ceph: No mds server is up or the cluster is laggy [ 2624.487821][T27041] ceph: No mds server is up or the cluster is laggy [ 2627.394210][T27058] ceph: No mds server is up or the cluster is laggy [ 2633.430449][T27104] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5486'. [ 2633.798556][T27108] atomic_op ffff888042c11198 conn xmit_atomic 0000000000000000 [ 2635.356079][T27121] netlink: 'syz.0.5488': attribute type 10 has an invalid length. [ 2635.364472][T27121] netlink: 2 bytes leftover after parsing attributes in process `syz.0.5488'. [ 2635.381145][T27121] team0: entered promiscuous mode [ 2635.812688][T27122] ceph: No mds server is up or the cluster is laggy [ 2641.920652][T27158] ================================================================== [ 2641.928784][T27158] BUG: KASAN: slab-use-after-free in xfrm_state_find+0x35b8/0x4510 [ 2641.936724][T27158] Read of size 1 at addr ffff8880531716f8 by task syz.1.5497/27158 [ 2641.944646][T27158] [ 2641.946993][T27158] CPU: 1 PID: 27158 Comm: syz.1.5497 Not tainted syzkaller #0 [ 2641.954485][T27158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2641.964568][T27158] Call Trace: [ 2641.967871][T27158] [ 2641.970837][T27158] dump_stack_lvl+0x16c/0x230 [ 2641.975556][T27158] ? __lock_acquire+0x7c80/0x7c80 [ 2641.980612][T27158] ? show_regs_print_info+0x20/0x20 [ 2641.985846][T27158] ? load_image+0x3b0/0x3b0 [ 2641.990383][T27158] ? __virt_addr_valid+0x469/0x540 [ 2641.995529][T27158] print_report+0xac/0x220 [ 2641.999975][T27158] ? xfrm_state_find+0x35b8/0x4510 [ 2642.005121][T27158] kasan_report+0x117/0x150 [ 2642.009658][T27158] ? xfrm_state_find+0x35b8/0x4510 [ 2642.014808][T27158] xfrm_state_find+0x35b8/0x4510 [ 2642.019802][T27158] ? xfrm_state_find+0x321/0x4510 [ 2642.024865][T27158] ? verify_lock_unused+0x140/0x140 [ 2642.030097][T27158] ? xfrm_sad_getinfo+0x170/0x170 [ 2642.035165][T27158] ? mark_lock+0x94/0x320 [ 2642.039535][T27158] xfrm_resolve_and_create_bundle+0x727/0x2c20 [ 2642.045739][T27158] ? xfrm_policy_lookup_bytype+0x133/0x1070 [ 2642.051681][T27158] ? xfrm_expand_policies+0x690/0x690 [ 2642.057105][T27158] ? xfrm_policy_find_inexact_candidates+0x650/0x680 [ 2642.063833][T27158] ? xfrm_policy_lookup_bytype+0x1013/0x1070 [ 2642.069860][T27158] ? xfrm_policy_lookup_bytype+0x133/0x1070 [ 2642.075807][T27158] ? xfrm_expand_policies+0x41a/0x690 [ 2642.081214][T27158] xfrm_lookup_with_ifid+0x556/0x19c0 [ 2642.086629][T27158] ? __xfrm_sk_clone_policy+0x850/0x850 [ 2642.092294][T27158] ? __lock_acquire+0x7c80/0x7c80 [ 2642.097375][T27158] ? ip6_dst_lookup_flow+0x97/0xe0 [ 2642.102517][T27158] xfrm_lookup_route+0x3c/0x1b0 [ 2642.107486][T27158] sctp_v6_get_dst+0x6b0/0x1b90 [ 2642.112371][T27158] ? sctp_v6_get_dst+0x45c/0x1b90 [ 2642.117446][T27158] ? sctp_v6_xmit+0x1230/0x1230 [ 2642.122339][T27158] ? __asan_memset+0x22/0x40 [ 2642.126986][T27158] ? dst_release+0x72/0x1a0 [ 2642.131528][T27158] sctp_transport_route+0x10b/0x2c0 [ 2642.136779][T27158] sctp_assoc_add_peer+0x650/0x13a0 [ 2642.142051][T27158] sctp_connect_new_asoc+0x304/0x690 [ 2642.147382][T27158] ? __sctp_connect+0xd20/0xd20 [ 2642.152273][T27158] ? __local_bh_enable_ip+0x12e/0x1c0 [ 2642.157678][T27158] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 2642.163257][T27158] ? security_sctp_bind_connect+0x89/0xb0 [ 2642.169009][T27158] sctp_sendmsg+0x155c/0x27e0 [ 2642.173737][T27158] ? sctp_getsockopt+0xb60/0xb60 [ 2642.178720][T27158] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 2642.184842][T27158] ? aa_sk_perm+0x7fc/0x930 [ 2642.189392][T27158] ? aa_af_perm+0x2b0/0x2b0 [ 2642.193934][T27158] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 2642.200394][T27158] ? sock_rps_record_flow+0x19/0x400 [ 2642.205714][T27158] ? inet_send_prepare+0x260/0x260 [ 2642.210854][T27158] ? inet_sendmsg+0xe9/0x2f0 [ 2642.215483][T27158] ? inet_send_prepare+0x260/0x260 [ 2642.220628][T27158] ____sys_sendmsg+0x5bf/0x950 [ 2642.225430][T27158] ? __asan_memset+0x22/0x40 [ 2642.230046][T27158] ? __sys_sendmsg_sock+0x30/0x30 [ 2642.235088][T27158] ? __import_iovec+0x5f2/0x860 [ 2642.239979][T27158] ? import_iovec+0x73/0xa0 [ 2642.244515][T27158] ___sys_sendmsg+0x220/0x290 [ 2642.249216][T27158] ? __sys_sendmsg+0x270/0x270 [ 2642.254023][T27158] __sys_sendmmsg+0x275/0x4a0 [ 2642.258724][T27158] ? __ia32_sys_sendmsg+0x90/0x90 [ 2642.263771][T27158] ? __ia32_sys_get_robust_list+0x90/0x90 [ 2642.269505][T27158] ? fput+0x154/0x1a0 [ 2642.273508][T27158] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 2642.279503][T27158] ? lock_chain_count+0x20/0x20 [ 2642.284368][T27158] __x64_sys_sendmmsg+0xa0/0xb0 [ 2642.289241][T27158] do_syscall_64+0x55/0xb0 [ 2642.293676][T27158] ? clear_bhb_loop+0x40/0x90 [ 2642.298363][T27158] ? clear_bhb_loop+0x40/0x90 [ 2642.303055][T27158] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2642.308989][T27158] RIP: 0033:0x7f3b7278ebe9 [ 2642.313426][T27158] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2642.333150][T27158] RSP: 002b:00007f3b709d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2642.341599][T27158] RAX: ffffffffffffffda RBX: 00007f3b729c6180 RCX: 00007f3b7278ebe9 [ 2642.349631][T27158] RDX: 0000000000000001 RSI: 0000200000000a80 RDI: 0000000000000004 [ 2642.357632][T27158] RBP: 00007f3b72811e19 R08: 0000000000000000 R09: 0000000000000000 [ 2642.365621][T27158] R10: 000000000004c040 R11: 0000000000000246 R12: 0000000000000000 [ 2642.373608][T27158] R13: 00007f3b729c6218 R14: 00007f3b729c6180 R15: 00007ffc69658998 [ 2642.381606][T27158] [ 2642.384632][T27158] [ 2642.386967][T27158] Allocated by task 26817: [ 2642.391394][T27158] kasan_set_track+0x4e/0x70 [ 2642.396120][T27158] __kasan_kmalloc+0x8f/0xa0 [ 2642.400728][T27158] __kmalloc+0xb4/0x240 [ 2642.404902][T27158] iter_file_splice_write+0x18a/0xc50 [ 2642.410292][T27158] direct_splice_actor+0xe8/0x130 [ 2642.415363][T27158] splice_direct_to_actor+0x2f0/0x870 [ 2642.420752][T27158] do_splice_direct+0x1b7/0x2c0 [ 2642.425624][T27158] do_sendfile+0x5dc/0xf70 [ 2642.430078][T27158] __se_sys_sendfile64+0xda/0x190 [ 2642.435131][T27158] do_syscall_64+0x55/0xb0 [ 2642.439562][T27158] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2642.445500][T27158] [ 2642.447831][T27158] Freed by task 26817: [ 2642.451904][T27158] kasan_set_track+0x4e/0x70 [ 2642.456515][T27158] kasan_save_free_info+0x2e/0x50 [ 2642.461557][T27158] ____kasan_slab_free+0x126/0x1e0 [ 2642.466776][T27158] slab_free_freelist_hook+0x130/0x1b0 [ 2642.472265][T27158] __kmem_cache_free+0xba/0x1f0 [ 2642.477138][T27158] iter_file_splice_write+0xab0/0xc50 [ 2642.482535][T27158] direct_splice_actor+0xe8/0x130 [ 2642.487581][T27158] splice_direct_to_actor+0x2f0/0x870 [ 2642.492987][T27158] do_splice_direct+0x1b7/0x2c0 [ 2642.497872][T27158] do_sendfile+0x5dc/0xf70 [ 2642.502311][T27158] __se_sys_sendfile64+0xda/0x190 [ 2642.507367][T27158] do_syscall_64+0x55/0xb0 [ 2642.511800][T27158] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2642.517721][T27158] [ 2642.520076][T27158] The buggy address belongs to the object at ffff888053171600 [ 2642.520076][T27158] which belongs to the cache kmalloc-256 of size 256 [ 2642.534164][T27158] The buggy address is located 248 bytes inside of [ 2642.534164][T27158] freed 256-byte region [ffff888053171600, ffff888053171700) [ 2642.547976][T27158] [ 2642.550308][T27158] The buggy address belongs to the physical page: [ 2642.556743][T27158] page:ffffea00014c5c00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x53170 [ 2642.567171][T27158] head:ffffea00014c5c00 order:1 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 2642.576127][T27158] ksm flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 2642.584473][T27158] page_type: 0xffffffff() [ 2642.588816][T27158] raw: 00fff00000000840 ffff888017841b40 ffffea0001674500 dead000000000003 [ 2642.597430][T27158] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 2642.606022][T27158] page dumped because: kasan: bad access detected [ 2642.612461][T27158] page_owner tracks the page as allocated [ 2642.618293][T27158] page last allocated via order 1, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 20113, tgid 20105 (syz.0.3668), ts 1693275460674, free_ts 1691216727238 [ 2642.641412][T27158] post_alloc_hook+0x1cd/0x210 [ 2642.646210][T27158] get_page_from_freelist+0x195c/0x19f0 [ 2642.651787][T27158] __alloc_pages+0x1e3/0x460 [ 2642.656397][T27158] alloc_slab_page+0x5d/0x170 [ 2642.661091][T27158] new_slab+0x87/0x2e0 [ 2642.665182][T27158] ___slab_alloc+0xc6d/0x12f0 [ 2642.669899][T27158] __kmem_cache_alloc_node+0x1a2/0x260 [ 2642.675380][T27158] __kmalloc+0xa4/0x240 [ 2642.679552][T27158] iter_file_splice_write+0x18a/0xc50 [ 2642.684958][T27158] direct_splice_actor+0xe8/0x130 [ 2642.690178][T27158] splice_direct_to_actor+0x2f0/0x870 [ 2642.695572][T27158] do_splice_direct+0x1b7/0x2c0 [ 2642.700440][T27158] do_sendfile+0x5dc/0xf70 [ 2642.704877][T27158] __se_sys_sendfile64+0xda/0x190 [ 2642.709917][T27158] do_syscall_64+0x55/0xb0 [ 2642.714350][T27158] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2642.720263][T27158] page last free stack trace: [ 2642.724944][T27158] free_unref_page_prepare+0x7ce/0x8e0 [ 2642.730427][T27158] free_unref_page+0x32/0x2e0 [ 2642.735124][T27158] __unfreeze_partials+0x1cf/0x210 [ 2642.740261][T27158] put_cpu_partial+0x17c/0x250 [ 2642.745049][T27158] __slab_free+0x31d/0x410 [ 2642.749482][T27158] qlist_free_all+0x75/0xe0 [ 2642.754030][T27158] kasan_quarantine_reduce+0x143/0x160 [ 2642.759529][T27158] __kasan_slab_alloc+0x22/0x80 [ 2642.764393][T27158] slab_post_alloc_hook+0x6e/0x4d0 [ 2642.769525][T27158] kmem_cache_alloc+0x11e/0x2e0 [ 2642.774392][T27158] vm_area_dup+0x27/0x270 [ 2642.778730][T27158] copy_mm+0xc08/0x1c20 [ 2642.782898][T27158] copy_process+0x16d3/0x3d70 [ 2642.787601][T27158] kernel_clone+0x21b/0x840 [ 2642.792113][T27158] __x64_sys_clone+0x18c/0x1e0 [ 2642.796908][T27158] do_syscall_64+0x55/0xb0 [ 2642.801341][T27158] [ 2642.803675][T27158] Memory state around the buggy address: [ 2642.809309][T27158] ffff888053171580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 2642.817378][T27158] ffff888053171600: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2642.825448][T27158] >ffff888053171680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2642.833513][T27158] ^ [ 2642.841493][T27158] ffff888053171700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 2642.849562][T27158] ffff888053171780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 2642.857626][T27158] ================================================================== [ 2642.865953][T27158] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 2642.873181][T27158] CPU: 1 PID: 27158 Comm: syz.1.5497 Not tainted syzkaller #0 [ 2642.880664][T27158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2642.890734][T27158] Call Trace: [ 2642.894059][T27158] [ 2642.897010][T27158] dump_stack_lvl+0x16c/0x230 [ 2642.901709][T27158] ? show_regs_print_info+0x20/0x20 [ 2642.906923][T27158] ? load_image+0x3b0/0x3b0 [ 2642.911436][T27158] panic+0x2c0/0x710 [ 2642.915343][T27158] ? bpf_jit_dump+0xd0/0xd0 [ 2642.919875][T27158] ? _raw_spin_unlock_irqrestore+0xa9/0x110 [ 2642.925787][T27158] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 2642.931699][T27158] ? _raw_spin_unlock+0x40/0x40 [ 2642.936559][T27158] ? print_memory_metadata+0x314/0x400 [ 2642.942024][T27158] ? xfrm_state_find+0x35b8/0x4510 [ 2642.947145][T27158] check_panic_on_warn+0x84/0xa0 [ 2642.952119][T27158] ? xfrm_state_find+0x35b8/0x4510 [ 2642.957265][T27158] end_report+0x6f/0x140 [ 2642.961608][T27158] kasan_report+0x128/0x150 [ 2642.966138][T27158] ? xfrm_state_find+0x35b8/0x4510 [ 2642.971274][T27158] xfrm_state_find+0x35b8/0x4510 [ 2642.976230][T27158] ? xfrm_state_find+0x321/0x4510 [ 2642.981263][T27158] ? verify_lock_unused+0x140/0x140 [ 2642.986467][T27158] ? xfrm_sad_getinfo+0x170/0x170 [ 2642.991505][T27158] ? mark_lock+0x94/0x320 [ 2642.995857][T27158] xfrm_resolve_and_create_bundle+0x727/0x2c20 [ 2643.002043][T27158] ? xfrm_policy_lookup_bytype+0x133/0x1070 [ 2643.007958][T27158] ? xfrm_expand_policies+0x690/0x690 [ 2643.013340][T27158] ? xfrm_policy_find_inexact_candidates+0x650/0x680 [ 2643.020126][T27158] ? xfrm_policy_lookup_bytype+0x1013/0x1070 [ 2643.026127][T27158] ? xfrm_policy_lookup_bytype+0x133/0x1070 [ 2643.032041][T27158] ? xfrm_expand_policies+0x41a/0x690 [ 2643.037444][T27158] xfrm_lookup_with_ifid+0x556/0x19c0 [ 2643.042825][T27158] ? __xfrm_sk_clone_policy+0x850/0x850 [ 2643.048397][T27158] ? __lock_acquire+0x7c80/0x7c80 [ 2643.053447][T27158] ? ip6_dst_lookup_flow+0x97/0xe0 [ 2643.058564][T27158] xfrm_lookup_route+0x3c/0x1b0 [ 2643.063420][T27158] sctp_v6_get_dst+0x6b0/0x1b90 [ 2643.068276][T27158] ? sctp_v6_get_dst+0x45c/0x1b90 [ 2643.073332][T27158] ? sctp_v6_xmit+0x1230/0x1230 [ 2643.078189][T27158] ? __asan_memset+0x22/0x40 [ 2643.082800][T27158] ? dst_release+0x72/0x1a0 [ 2643.087328][T27158] sctp_transport_route+0x10b/0x2c0 [ 2643.092564][T27158] sctp_assoc_add_peer+0x650/0x13a0 [ 2643.097785][T27158] sctp_connect_new_asoc+0x304/0x690 [ 2643.103092][T27158] ? __sctp_connect+0xd20/0xd20 [ 2643.108005][T27158] ? __local_bh_enable_ip+0x12e/0x1c0 [ 2643.113405][T27158] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 2643.118989][T27158] ? security_sctp_bind_connect+0x89/0xb0 [ 2643.124743][T27158] sctp_sendmsg+0x155c/0x27e0 [ 2643.129452][T27158] ? sctp_getsockopt+0xb60/0xb60 [ 2643.134405][T27158] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 2643.140431][T27158] ? aa_sk_perm+0x7fc/0x930 [ 2643.144972][T27158] ? aa_af_perm+0x2b0/0x2b0 [ 2643.149538][T27158] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 2643.155977][T27158] ? sock_rps_record_flow+0x19/0x400 [ 2643.161276][T27158] ? inet_send_prepare+0x260/0x260 [ 2643.166401][T27158] ? inet_sendmsg+0xe9/0x2f0 [ 2643.170998][T27158] ? inet_send_prepare+0x260/0x260 [ 2643.176111][T27158] ____sys_sendmsg+0x5bf/0x950 [ 2643.180896][T27158] ? __asan_memset+0x22/0x40 [ 2643.185505][T27158] ? __sys_sendmsg_sock+0x30/0x30 [ 2643.190542][T27158] ? __import_iovec+0x5f2/0x860 [ 2643.195423][T27158] ? import_iovec+0x73/0xa0 [ 2643.199948][T27158] ___sys_sendmsg+0x220/0x290 [ 2643.204654][T27158] ? __sys_sendmsg+0x270/0x270 [ 2643.209469][T27158] __sys_sendmmsg+0x275/0x4a0 [ 2643.214181][T27158] ? __ia32_sys_sendmsg+0x90/0x90 [ 2643.219229][T27158] ? __ia32_sys_get_robust_list+0x90/0x90 [ 2643.224959][T27158] ? fput+0x154/0x1a0 [ 2643.229133][T27158] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 2643.235119][T27158] ? lock_chain_count+0x20/0x20 [ 2643.239980][T27158] __x64_sys_sendmmsg+0xa0/0xb0 [ 2643.244846][T27158] do_syscall_64+0x55/0xb0 [ 2643.249268][T27158] ? clear_bhb_loop+0x40/0x90 [ 2643.253948][T27158] ? clear_bhb_loop+0x40/0x90 [ 2643.258629][T27158] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2643.264535][T27158] RIP: 0033:0x7f3b7278ebe9 [ 2643.268955][T27158] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2643.288606][T27158] RSP: 002b:00007f3b709d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2643.297028][T27158] RAX: ffffffffffffffda RBX: 00007f3b729c6180 RCX: 00007f3b7278ebe9 [ 2643.305023][T27158] RDX: 0000000000000001 RSI: 0000200000000a80 RDI: 0000000000000004 [ 2643.313088][T27158] RBP: 00007f3b72811e19 R08: 0000000000000000 R09: 0000000000000000 [ 2643.321066][T27158] R10: 000000000004c040 R11: 0000000000000246 R12: 0000000000000000 [ 2643.329038][T27158] R13: 00007f3b729c6218 R14: 00007f3b729c6180 R15: 00007ffc69658998 [ 2643.337025][T27158] [ 2643.340413][T27158] Kernel Offset: disabled [ 2643.344745][T27158] Rebooting in 86400 seconds..