last executing test programs: 17m24.645631946s ago: executing program 32 (id=70): mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) chdir(&(0x7f0000000240)='./file0\x00') r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x2000402) r1 = open$dir(&(0x7f0000000640)='./file0\x00', 0xa0542, 0x50) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x459], 0x0, 0x0, 0x1, 0x1}}, 0x40) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x3, 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 15m34.874632418s ago: executing program 33 (id=708): socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="030000000400000004eca6141f198e9dd6000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000200"/28], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r2, @ANYBLOB="01060000000000000000090000002c0004801300010062726f6164636173742d6c696e6b0000140007800800060000000000080005"], 0xac}}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) bind$tipc(r3, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x41}}, 0x10) bind$tipc(r3, &(0x7f0000000100)=@name={0x1e, 0x2, 0x9d3354bba4295a8d, {{0x41}}}, 0x10) 13m46.679293403s ago: executing program 34 (id=1148): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='nr_inodes=M']) chdir(&(0x7f0000000140)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') unlink(&(0x7f0000000180)='./file1\x00') 13m33.859261934s ago: executing program 2 (id=1186): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) set_mempolicy(0x4003, &(0x7f0000000200)=0x7, 0x3) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) 13m31.854313556s ago: executing program 2 (id=1190): syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de0108000109021b0001000003000904000001785ecc00090585020004"], 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9da, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x2, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x2000, 0x3, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2}}}}}]}}]}}, 0x0) syz_io_uring_setup(0x116, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000004c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x183822, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r2, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x814}) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x58, 0x24, 0xd0f, 0x470bd2d, 0xfffffffd, {0x60, 0x0, 0x0, r5, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x7, 0x5, 0x20, 0x2, 0x3, 0xd1c, 0x1}}, {0x6, 0x2, [0x4f]}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000040}, 0x44080) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4000) 13m27.679855071s ago: executing program 2 (id=1211): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x10) getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0xb8) 13m25.87043736s ago: executing program 2 (id=1202): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000b00000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x3fed, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_FILES2(r2, 0xd, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x0}, 0x20) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r3, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) io_uring_register$IORING_UNREGISTER_FILES(r2, 0x3, 0x0, 0x0) 13m25.556663595s ago: executing program 2 (id=1206): mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000440)='./file0\x00', 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29, r1}, './file0\x00'}) 13m25.085015082s ago: executing program 2 (id=1213): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000e40)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0200000002"], 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001180)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="0200000002"], 0x10) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000e40)=ANY=[@ANYRES32=r4, @ANYRES32=r5], 0x10) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r6, 0x2, 0x0, 0x0, &(0x7f0000000200)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) 13m9.832497951s ago: executing program 35 (id=1213): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000e40)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0200000002"], 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001180)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="0200000002"], 0x10) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000e40)=ANY=[@ANYRES32=r4, @ANYRES32=r5], 0x10) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r6, 0x2, 0x0, 0x0, &(0x7f0000000200)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) 12m46.93904951s ago: executing program 7 (id=1360): socket$nl_generic(0x10, 0x3, 0x10) socket$tipc(0x1e, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="090200000000000000000f000000050030000000000008000300", @ANYRES32=r4], 0x24}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x54, 0x10, 0x401, 0x0, 0x1000000, {0x0, 0x0, 0x0, 0x0, 0xf0ff}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 12m45.351929145s ago: executing program 7 (id=1367): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="9802"], 0x298) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x13c) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000540)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r4}, 0x10) fspick(r3, &(0x7f0000000180)='./file0\x00', 0x0) getdents64(r3, 0x0, 0x3f00) 12m44.267713442s ago: executing program 7 (id=1372): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) sendmsg$unix(0xffffffffffffffff, 0x0, 0x8810) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, 0x0, 0x4000044) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000900)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x6, 0x2, 0x0, 0x2, 0xffffffff}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd}}]}}}]}, 0x58}}, 0x0) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 12m40.54767248s ago: executing program 7 (id=1382): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f0000000440)=ANY=[], 0x1, 0x1268, &(0x7f0000002500)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./bus\x00', 0x0) chdir(&(0x7f0000000540)='./file0\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x185641, 0x0) r2 = open(&(0x7f00000003c0)='./bus\x00', 0x84902, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r2, 0x0) write$FUSE_ATTR(r1, &(0x7f0000000440)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0xffffffffff7ffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000, 0x0, 0x0, 0x0, 0x1}}}, 0x78) creat(&(0x7f0000000780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x7e1ce440945e0ba7) renameat2(r0, 0x0, r0, &(0x7f0000000200)='./bus\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000640)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) 12m40.141088256s ago: executing program 7 (id=1385): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mremap(&(0x7f0000a01000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000047c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) mremap(&(0x7f00009a1000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000fef000/0x4000)=nil) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000084c000/0x3000)=nil) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) mremap(&(0x7f0000883000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f00004ce000/0x4000)=nil) munmap(&(0x7f0000308000/0x4000)=nil, 0x4000) mremap(&(0x7f000076c000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000397000/0x1000)=nil) munmap(&(0x7f00001f0000/0x1000)=nil, 0x1000) mremap(&(0x7f0000275000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f000024a000/0x1000)=nil) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) 12m36.225293937s ago: executing program 7 (id=1395): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="83fcffff1400090500000000fddbdf"], 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x2, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x22) syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "156909", 0x44, 0x2f, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x88a8}, {}, {}, {0xa888, 0x88be, 0x8000000, {{}, 0x1, {0x7}}}}}}}}}, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) 12m35.980458611s ago: executing program 36 (id=1395): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="83fcffff1400090500000000fddbdf"], 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x2, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x22) syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "156909", 0x44, 0x2f, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x88a8}, {}, {}, {0xa888, 0x88be, 0x8000000, {{}, 0x1, {0x7}}}}}}}}}, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) 12m12.306001852s ago: executing program 9 (id=1396): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_io_uring_setup(0x7ee9, &(0x7f00000001c0)={0x0, 0xeaba, 0x0, 0x1, 0x80}, &(0x7f00000003c0), &(0x7f0000000580)) io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, &(0x7f0000000280), 0x26) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 12m12.193548034s ago: executing program 9 (id=1486): socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r1, @ANYRES16=r0], 0x0) 12m8.915980356s ago: executing program 9 (id=1497): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_rdma(0x10, 0x3, 0x14) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="03", 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmmsg(r4, &(0x7f0000001140), 0x700, 0x2, 0x0) 12m7.567748307s ago: executing program 9 (id=1501): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setresuid(0xee01, 0x0, 0x0) sendmmsg$unix(r0, &(0x7f0000007cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)=[@cred={{0x1c}}], 0x20}}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x845, &(0x7f00000005c0)={[{@shortname_winnt}, {@shortname_winnt}, {@shortname_lower}, {@shortname_winnt}, {@shortname_winnt}, {@fat=@discard}, {@fat=@check_strict}, {@shortname_mixed}, {@shortname_winnt}, {@rodir}, {@shortname_win95}, {@fat=@sys_immutable}, {@utf8}]}, 0x0, 0x274, &(0x7f0000000780)="$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") r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r1, &(0x7f0000002140)={0x2020}, 0x2100) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000380)={0x300, 0x0, 0x103ff}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000fcffffff000000000000210085000000360000009500070000000000b83f3584230b8f5ec8921327291cf4880dd3a91af830f8a476ba1b51d4eb67103b000000000000000000000000000000640f9922d207e93470686f20ad"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 12m6.579113772s ago: executing program 9 (id=1507): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f00000001c0)={0x2, 0x4e24, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000012c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {&(0x7f0000001080)=""/148, 0x94}, &(0x7f00000011c0)=[{&(0x7f0000001140)=""/102, 0x66}], 0x1, 0x60, 0xffffffff00000001}}], 0x48, 0x8004}, 0x0) 12m4.123742581s ago: executing program 9 (id=1516): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x10e, &(0x7f0000000200)={0x0, 0x0, 0x800, 0x0, 0x20000}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, 0x0, &(0x7f0000000180)}, 0x20) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r3, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080), 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x10, 0x4007, @fd_index=0x8000000, 0x2, 0x0}) io_uring_enter(r0, 0x3f70, 0x0, 0x0, 0x0, 0x0) 12m2.596232165s ago: executing program 37 (id=1516): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x10e, &(0x7f0000000200)={0x0, 0x0, 0x800, 0x0, 0x20000}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, 0x0, &(0x7f0000000180)}, 0x20) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r3, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080), 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x10, 0x4007, @fd_index=0x8000000, 0x2, 0x0}) io_uring_enter(r0, 0x3f70, 0x0, 0x0, 0x0, 0x0) 9m57.396370037s ago: executing program 8 (id=1978): r0 = io_uring_setup(0x6b66, &(0x7f0000000040)={0x0, 0xffbffffc, 0x400, 0x0, 0x3bd}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000000)=0x4, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007ed, &(0x7f0000008400)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000008100)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56561, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8}]}}]}, 0x3c}}, 0x0) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYRESHEX], 0xa89) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 9m56.392328793s ago: executing program 8 (id=1993): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000190c0)='net/tcp6\x00') pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) 9m54.449342464s ago: executing program 8 (id=1985): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="9802"], 0x298) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r3, &(0x7f0000000080)='./file0\x00') 9m54.356505495s ago: executing program 8 (id=1987): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xe, &(0x7f0000000140)={[{@resgid}, {@resgid}, {@nodiscard}]}, 0xff, 0x44b, &(0x7f00000004c0)="$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") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000f00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, 0x1) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x40, &(0x7f0000000340), 0x0, 0x4f7, &(0x7f0000000540)="$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") openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x42842, 0x10e) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000240)='./bus\x00', 0x187102, 0x1) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') bind$alg(r0, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) creat(&(0x7f00000001c0)='./file0\x00', 0x0) 9m52.390495336s ago: executing program 8 (id=2003): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x4) modify_ldt$write(0x1, &(0x7f0000000040)={0x403, 0x20000800}, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f00000aa000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x4040, &(0x7f0000000080)={[{@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x30}}, {@nodelalloc}, {@bsdgroups}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4}}]}, 0xfe, 0x475, &(0x7f0000002480)="$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") openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000080)=0x1) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)=@x86={0x1, 0x8, 0x26, 0x0, 0x1, 0x6, 0x14, 0x7, 0x5e, 0xfb, 0x0, 0x2, 0x0, 0x5, 0x2, 0x5, 0x3, 0xc, 0x0, '\x00', 0xff, 0xcd}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9m49.804012256s ago: executing program 8 (id=2015): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004f40)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000400)="f2e0b7531e2063b7a6345c67a555f26bf2ef0fbc7006a89c01a5517e64a10b791358670701b411733c3a0934877d466f0cd8cb7f6a170fc7a990fb07b3e8d4c588345e6b8fdf025851f3aadc6c3abde6ba8a4b5ece8598be1d57bd1e85c8e8660cbc3a", 0x63}], 0x1}}], 0x1, 0x48100) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4276ef66ba420266b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000980)=[@text32={0x20, 0x0}], 0x1, 0x51, 0x0, 0x0) ioctl$SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x94}}, 0x40880) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='X\x00\x00'], 0x58}}, 0x2040000) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x7, 0xf, 0x9, '\x00', 0x5}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9m49.648505848s ago: executing program 38 (id=2015): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004f40)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000400)="f2e0b7531e2063b7a6345c67a555f26bf2ef0fbc7006a89c01a5517e64a10b791358670701b411733c3a0934877d466f0cd8cb7f6a170fc7a990fb07b3e8d4c588345e6b8fdf025851f3aadc6c3abde6ba8a4b5ece8598be1d57bd1e85c8e8660cbc3a", 0x63}], 0x1}}], 0x1, 0x48100) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4276ef66ba420266b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000980)=[@text32={0x20, 0x0}], 0x1, 0x51, 0x0, 0x0) ioctl$SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x94}}, 0x40880) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='X\x00\x00'], 0x58}}, 0x2040000) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x7, 0xf, 0x9, '\x00', 0x5}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8m39.095870465s ago: executing program 3 (id=2286): syz_emit_ethernet(0x72, &(0x7f0000000640)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x3c, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "a300", 0x0, 0x33, 0x0, @mcast1, @ipv4={'\x00', '\xff\xff', @empty}, [@dstopts={0x2b}], '\v\vy\''}}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f0000001640)=0x4f1d, 0x4) sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5) 8m37.269181743s ago: executing program 3 (id=2291): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000080)={{0x3}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x74}, {0x6c}, {0x6, 0x0, 0x0, 0x7fffffff}]}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000000)={0x8498, 0x2, 0x1}, 0x18, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0x80000004}) r3 = socket$netlink(0x10, 0x3, 0x4) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f0000000380)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}, 0xe) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000002d80)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000010401390000000000000000000083ff05000100010000"], 0x1c}, 0x1, 0x0, 0x0, 0x8840}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 8m37.095858886s ago: executing program 3 (id=2294): socket$inet_mptcp(0x2, 0x1, 0x106) openat$kvm(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x24, 0x0, 0x20, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15f4}]}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x4040000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8m35.742348047s ago: executing program 3 (id=2300): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x0, 0x61, 0x10, 0x94}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 8m34.229984061s ago: executing program 3 (id=2304): syz_mount_image$udf(&(0x7f0000000180), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2144d4, &(0x7f0000000280)=ANY=[@ANYBLOB="696f636861727365743d63703836332c7569643d69676e6f72652c66696c657365743d30303030303030303030303030303030303132372c616e63686f723d30303030303030303030303030303030303030332c66696c657365743d30303030303030303030303030303030303030302c6e6f6164696e6963622c726f6f746469723d30303030303030303030303030303030303030352c004524cde9924a2eb7ed92c6d3f4"], 0xfe, 0xc24, &(0x7f0000002280)="$eJzs3UFsHNd9B+D/Gy5Fym4rJk5Uu42LTVukMmO5sqSYilW4q5pmG0CWiVDMLQBX5EpdmFoSJNXIRtrQvfTQQ4Ci6CEnAq1RIEUDoymCHtnWBZKLD0VOPREtbARFD2wRIKeAxcy+lZY0ZcmmSFH299nUbznz3ux7b5YzkqA3LwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAiN976cKpZ9ODbgUAcJAuTX311Gn3fwD4RLnsz/8AAAAAAAAAAAAAAHDYpSjisUixeGkzzVTfdw1fbHdu3Jwen9i92tFU1Ryoypdfw8+ePnP2S8+NnevlB9e/356IV6YuX6i/uHB9cam1vNyaq0932rMLc617PsJe6+80Wg1A/fqrN+auXl2un37mzLbdN0feG3r0+Mj5sadOPtkrOz0+MTHVV6Y2+JHf/X3uNMPjSBRxMlI8/b2fpGZEFLH3sbjLZ2e/Ha06MVp1Ynp8ourIfLvZWSl3TvYGooio91Vq9MboAM7FnjQiVsvmlw0eLbs3tdhcal6Zb9Unm0sr7ZX2QmcydVtb9qceRZxLEWsRsTH0/sMNRhG1SPGdY5vpSkQM9Mbhi9XE4Du3o9jHPt6Dsp31wYi14iE4Z4fYUBTxcqT46dtFzJZjlr/iCxEvl/mDiDfLfCEilR+MsxHv7vI54uFUiyL+vDz/5zfTXHU96F1XLn6t/pXO1YW+sr3rykN/fzhIh/zaNBxFNKsr/mb66L/ZAQAAAAAAAAAAAAAAAOB+OxpFPBEpXvr3P6rmFUc1L/3Y+bHfH/nF/jnjj9/lOGXZZyJitbi3OblH8hTiyTSZ0gOeS/xJNhxF/HGe//fGg24MAAAAAAAAAAAAAAAAAADAJ9yPI8Xz75xIa9G/pni7c61+uXllvrsqbG/t396a6VtbW1v11M1GzpmcqznXcq7n3MgZRa6fs5FzJudqzrWc6zk3csZArp+zkXMm52rOtZzrOTdyRi3Xz9nIOZNzNedazvWcGznjkKzdCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwcVJEET+PFN/+xmaKFBGNiJno5vpQrwwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8CANpSK+Hynqf9C4ta0WEan6v+tE+cvZaBwp89PRGCvzhWhcyNmsstZ44wG0n70ZTEX8KFIMDb9164Tn8z/Y/e7WxyDe/Obt736l1s2B3s6R94YePX7s/NjErz1+p9dptwaMXmx3btysT49PTEz1ba7ld/9037aR/L7F/ek6EbH82uuvNufnW0ufmBdFHIpmPKgXte6LWhyS9hzUi3y9il12FYfhp6BxWAaq9+IBX5g4EOX9/91I8dvv/Efvht+7//9C97tbd/j42Z/cvv8/v/NA+3T/f6xv2/P5dyODtYjhleuLg8cjhpdfe/1k+3rzWutaq3P21Kkvj419+cypwSMRw1fb862+V3seKgAAAAAAAAAAAAAAAICDlYr43UjR/NFmqkfEzWq+1sj5sadOPjkQA9V8q23ztl6Zunyh/uLC9cWl1vJya64+3WnPLsy17vXthqvpXtPjE/vSmbs6us/tPzr84sLia0vta3+4suv+R4YvXFleWWrO7r47jkYR0ejfMlo1eHp8omr0fLvZqapO7jqZ7sMbTEX8Z6SYPVs/0tuW5//tnOG/bf7/6s4D7dP8v0/1bSvfM6UifhYpfusvHo/PV+18JN43Zrnc30SK0XOfy+XiSFmu14bucwW6MwPLsv8bKf7h59vL9uZDPna77LP3Oq4Pi/L8H4sU3/+z78av523bn/+w+/l/ZOeB9un8f6Zv2yPbnlew566Tz//JSPHCY2/Fb+RtH/T8jyK2tra+FXEiF771fI59Ov+f7ds2Et33/c37130AAAAAAAAAAICH1mAq4m8jxZMTtfRc3nYv//5vbueB9unff/1y37a5A1qvaM+DCgAAAACHxGAq4seR4trKW7fmUG+f/903//N3bq+9Pp527K3+nu+XqucG3M+//+s3kt93Zu/dBgAAAAAAAAAAAAAAAAAAgEMlpSKey+upz9xlPfX1SPHSfz+dy6XjZbneOvAj1a/DlxY6Jy/Mzy/MNleaV+Zb9anF5myrrPuZSLH515/LdYtqffXP57rdNd6Ht3prsS9Fiom/65XtrsXeW5u8ux54dy32suynIsV//f32sr11rD97u+zpsuxfRYqv/9PuZY/fLnumLPvdSPHDr9d7ZR8py/aej9p9JulwLeZbz8wuzL/vUagAAAAAAAAAAAAAAAAAAADwYQ2mIv40UvzP9bVYrab9v3FrV85ab8Ob3+xb73+Hm9U6/yPV+v93ev1R1v8fuS+9BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAh0uKIl6PFIuXNtP6UPl91/DFdufGzenxid2rHU1VzYGqfPk1/OzpM2e/9NzYuV5+cP377Yl4ZeryhfqLC9cXl1rLy625+nSnPbsw17rnI+y1/u2h6xqtBqB+/dUbc1evLtdPP3Nm2+6bI+8NPXp85PzYUyef7JWdHp+YmOorUxv8EO/+oRp325Eo4i8jxdPf+0n656GIIvY+Fnf57Oy3o1UnRqtOTI9PVB2Zbzc7K+XOyd5AFBH1vkqN3hgdwLnYk0bEatn8ssGjZfemFptLzSvzrfpkc2mlvdJe6EymbmvL/tSjiHMpYi0iNob6D3QkZxGvRorvHNtM/zIUMdAbhy9emvrqqdN3bkexr728i29V7awPRqwVD8E5O8SGooh/jBQ/fftE/OtQRC26X/GFiJfL/EHEm2W+EJHKD8bZiHeHHnSruV9qUcT/lef//GZ6eyii+pGprisXv1b/SufqQl/Z3nVl5/1hKyIeqvvDQTrk16bhKOKH1RV/M/2bn2sAAAAAAAAAAAAAAACAQ6SIX40Uz79zIlXzg2/NKW53rtUvN6/Md6f19eb+9eZMb21tbdVTNxs5Z3Ku5lzLuZ5zI2cUuX7ORs6ZnKs513Ku59zIGQO5fs5GzpmcqznXcq7n3MgZtVw/ZyPnTM7VnGs513Nu5IxDMncPAAAAAAAAAAAAAAAAAAD4eCmq/1J8+xubaWuou770THRz3XqgH3v/HwAA//9wn/vk") openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x4a37e, 0x4) r1 = open(&(0x7f0000000040)='./bus\x00', 0x46342, 0x0) mmap(&(0x7f0000617000/0x4000)=nil, 0x4000, 0x2000004, 0x40010, r1, 0xcc875000) ftruncate(r1, 0x2008002) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8088e3ad122bc192, 0x4002011, r0, 0x1000000) syz_open_procfs(0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, 0x0, 0x0) 8m33.844044107s ago: executing program 3 (id=2306): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r0}, 0x18) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) write$cgroup_int(r2, &(0x7f00000001c0)=0x8200000000000000, 0xfffffdef) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x8, 0x3032, 0xffffffffffffffff, 0x54099000) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, 0x0, 0x8000) 8m32.014502326s ago: executing program 39 (id=2306): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r0}, 0x18) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) write$cgroup_int(r2, &(0x7f00000001c0)=0x8200000000000000, 0xfffffdef) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x8, 0x3032, 0xffffffffffffffff, 0x54099000) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, 0x0, 0x8000) 10.283647487s ago: executing program 5 (id=4028): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000000)={[{@nobarrier}]}, 0xff, 0x485, &(0x7f0000001040)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000000)) syz_mount_image$fuse(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mount$overlay(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@index_on}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}]}) 9.503316837s ago: executing program 1 (id=4032): sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x9}, 0x203, 0x3, 0x0, 0x0, 0x0, 0x0, 0x9}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, 0x0, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r4, 0xc0f85403, &(0x7f0000000480)={{0x3, 0x0, 0x1, 0x1, 0x4}, 0x0, 0x6, 'id0\x00', 'timer0\x00'}) socket$inet6_sctp(0xa, 0x1, 0x84) 9.039854493s ago: executing program 5 (id=4034): socket(0x11, 0x800000003, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x19, 0x4, 0x4, 0x20001, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x21, 0x0, @void, @value, @void, @value}, 0x1d) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r6, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) 7.507826653s ago: executing program 5 (id=4039): openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x3c, r0, 0x6ae3e61d32b8160b, 0x0, 0x0, {0x4a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0xa8, 0x36}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f00000004c0)={0x148, r0, 0x200, 0x70bd28, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x800}, {0x6, 0x16, 0x40}, {0x5}, {0x6}, {0x8, 0xb, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0x2}, {0x5}, {0x6, 0x11, 0xb}, {0x8, 0xb, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x14}, {0x6, 0x16, 0x8}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x4}, {0x8, 0xb, 0x101}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xd}, {0x6}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x6}, {0x8, 0xb, 0xf}}]}, 0x148}, 0x1, 0x0, 0x0, 0x4000}, 0x240000c0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000200), 0x4) r2 = socket$inet6(0xa, 0x1, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @random="c5f9772bb146", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x10}}}}}}}, 0x0) sendto$inet6(r2, 0x0, 0x0, 0xfffffefffffbffaf, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$sock_inet_SIOCSIFBRDADDR(r2, 0x891a, &(0x7f0000000000)={'tunl0\x00', {0x2, 0x4e20, @local}}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 6.95567266s ago: executing program 1 (id=4043): openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x3c, r0, 0x6ae3e61d32b8160b, 0x0, 0x0, {0x4a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0xa8, 0x36}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f00000004c0)={0x148, r0, 0x200, 0x70bd28, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x800}, {0x6, 0x16, 0x40}, {0x5}, {0x6}, {0x8, 0xb, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0x2}, {0x5}, {0x6, 0x11, 0xb}, {0x8, 0xb, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x14}, {0x6, 0x16, 0x8}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x4}, {0x8, 0xb, 0x101}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xd}, {0x6}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x6}, {0x8, 0xb, 0xf}}]}, 0x148}, 0x1, 0x0, 0x0, 0x4000}, 0x240000c0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000200), 0x4) r2 = socket$inet6(0xa, 0x1, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @random="c5f9772bb146", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x10}}}}}}}, 0x0) sendto$inet6(r2, 0x0, 0x0, 0xfffffefffffbffaf, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$sock_inet_SIOCSIFBRDADDR(r2, 0x891a, &(0x7f0000000000)={'tunl0\x00', {0x2, 0x4e20, @local}}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 6.260566549s ago: executing program 5 (id=4045): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000000)={[{@nobarrier}]}, 0xff, 0x485, &(0x7f0000001040)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000000)) syz_mount_image$fuse(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mount$overlay(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@index_on}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}]}) 5.063929385s ago: executing program 1 (id=4047): syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000180)=0x10000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{}, &(0x7f0000000440), &(0x7f0000000480)}, 0x20) r4 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x141000, 0x0) mmap$dsp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x80010, r4, 0x0) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40080}, 0x4000000) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r5 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ff8000/0x3000)=nil) shmat(r5, &(0x7f0000ffd000/0x2000)=nil, 0x4000) 5.050714584s ago: executing program 6 (id=4048): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) r0 = inotify_init1(0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) inotify_add_watch(r0, &(0x7f00000000c0)='.\x00', 0x4000000e) r4 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x74, 0x101301) ioctl$USBDEVFS_CONNECTINFO(r5, 0x40085511, 0xfffffffffffffffd) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000180)={0xa0, 0xfffffffffffffffe, 0x0, {{0x3, 0x1, 0x5, 0x6, 0x5, 0x1, {0x1, 0x2d203ae5, 0x6, 0x1, 0x2, 0xd615, 0x5, 0x800001, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3fa, 0x1}}, {0x0, 0x1f}}}, 0xa0) sendfile(r4, r4, &(0x7f0000000080), 0x7f03) 3.794884201s ago: executing program 0 (id=4050): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c) 3.791413081s ago: executing program 1 (id=4051): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00'}, 0x10) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="650a0000000000006119680000000000180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 3.687216822s ago: executing program 0 (id=4052): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000010a80)=@raw={'raw\x00', 0x8, 0x3, 0x2e0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x248, 0xffffffff, 0xffffffff, 0x248, 0xffffffff, 0x3, 0x0, {[{{@ip={@broadcast, @private, 0x0, 0x0, 'batadv0\x00', 'batadv_slave_0\x00', {}, {}, 0x21}, 0x6, 0xa0, 0x100, 0x0, {}, [@common=@inet=@dccp={{0x30}, {[], [], 0x0, 0x6}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x970}}}}, {{@ip={@loopback, @dev, 0x0, 0xffffff00, 'veth0_virt_wifi\x00', 'bond_slave_0\x00'}, 0x0, 0x128, 0x148, 0x0, {}, [@common=@unspec=@conntrack1={{0xb8}, {{@ipv6=@mcast1, [0xff, 0xffffffff, 0xff], @ipv4=@broadcast, [0x0, 0x35be66baa0a3113a, 0xff000000], @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, [0xff000000, 0xff00007f, 0xffffff00, 0xff000000], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], 0x9377, 0x317, 0x3a, 0x4e21, 0x4e22, 0x4e24, 0x4e22, 0x2000, 0x100}, 0x1, 0x3}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x340) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f88) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000000)={'\x00', 0x8, 0x2, 0x80400, 0x2004, 0x800}) 3.685443342s ago: executing program 6 (id=4054): r0 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200021"], 0x69) close(r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x54) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x84, &(0x7f0000000180)={r5, @in={{0x2, 0x0, @empty}}}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8482, 0x0) openat$drirender128(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 2.719443105s ago: executing program 6 (id=4055): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, 0x0, &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[], 0x48) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = mq_open(&(0x7f00000008c0)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!T\xednux\x02\xc7\x12\xec\xca7\xbc\x1fS\x1c\x05y\x91\xe5\x9aL\xa9u\b\x00\x00\x00\xa0pC\x19\x9b\vY\x186\xa4\xe7\x1eg{`\xfa\xf3n\x8fIj6f\xfb\x13-g\x19(a6\x18\xe24nz\x83w8\xff\xfb\x83\f\x9a\xda\xc5w\x8eo\x02\xa3\xc1\x83\x91\xc6\xfd\x8c\xc4s\x03\x16\xa4+\xce|^\x98K_0\x8a\xb0\xff~\x1e\xd92\xb4r\xd8\xe7', 0x40, 0x110, 0x0) mq_timedreceive(r2, 0x0, 0xfffffffffffffee3, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2.148390342s ago: executing program 5 (id=4056): shutdown(0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xa}, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8582, 0x0) syz_usb_connect$cdc_ecm(0x6, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_open_procfs(0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) open(0x0, 0x40, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4276ef66ba420266b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.899340485s ago: executing program 1 (id=4057): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x3c, r1, 0x6ae3e61d32b8160b, 0x0, 0x0, {0x4a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0xa8, 0x36}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f00000004c0)={0x148, r1, 0x200, 0x70bd28, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x800}, {0x6, 0x16, 0x40}, {0x5}, {0x6}, {0x8, 0xb, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0x2}, {0x5}, {0x6, 0x11, 0xb}, {0x8, 0xb, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x14}, {0x6, 0x16, 0x8}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x4}, {0x8, 0xb, 0x101}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xd}, {0x6}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x6}, {0x8, 0xb, 0xf}}]}, 0x148}, 0x1, 0x0, 0x0, 0x4000}, 0x240000c0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r3 = socket$inet6(0xa, 0x1, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @random="c5f9772bb146", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x10}}}}}}}, 0x0) sendto$inet6(r3, 0x0, 0x0, 0xfffffefffffbffaf, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$sock_inet_SIOCSIFBRDADDR(r3, 0x891a, &(0x7f0000000000)={'tunl0\x00', {0x2, 0x4e20, @local}}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0xd, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 1.801779406s ago: executing program 6 (id=4058): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x2b, 'rdma'}]}, 0x6) 1.708513118s ago: executing program 6 (id=4059): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[], 0x48) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = mq_open(&(0x7f00000008c0)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!T\xednux\x02\xc7\x12\xec\xca7\xbc\x1fS\x1c\x05y\x91\xe5\x9aL\xa9u\b\x00\x00\x00\xa0pC\x19\x9b\vY\x186\xa4\xe7\x1eg{`\xfa\xf3n\x8fIj6f\xfb\x13-g\x19(a6\x18\xe24nz\x83w8\xff\xfb\x83\f\x9a\xda\xc5w\x8eo\x02\xa3\xc1\x83\x91\xc6\xfd\x8c\xc4s\x03\x16\xa4+\xce|^\x98K_0\x8a\xb0\xff~\x1e\xd92\xb4r\xd8\xe7', 0x40, 0x110, 0x0) mq_timedreceive(r2, 0x0, 0xfffffffffffffee3, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1.647196198s ago: executing program 4 (id=4061): socket(0x11, 0x800000003, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x19, 0x4, 0x4, 0x20001, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x21, 0x0, @void, @value, @void, @value}, 0x1d) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r6, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) 1.598633519s ago: executing program 0 (id=4062): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000300), r3) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x1c}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r5) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)={0x2c, r6, 0x821, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4000004) 1.593397699s ago: executing program 4 (id=4063): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 1.55776252s ago: executing program 4 (id=4064): io_setup(0xa42, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) r3 = syz_open_dev$swradio(&(0x7f00000000c0), 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000080)={0xf0f041, 0x5}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) io_submit(0x0, 0x0, 0x0) 1.375952752s ago: executing program 4 (id=4065): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x4518, &(0x7f00000004c0)={[{@minixdf}, {@block_validity}, {@quota}]}, 0x1, 0x4e1, &(0x7f0000001400)="$eJzs3c9vG1kdAPDvTOKStClJgUOpRFvRorSCOklD24hDKRKCUyWg3EtInCiKE0ex0zZRBan4A5AQAiROPXHpXwAS6oE/ACEhwR2xv7TabXcPe9hdr2yP0zS142jXiavk85Gm897zON/vm8rjmXlPngCOrPMRcSsi+iLickQMZ+1ptsRmY6lt9/zZw5nakkS1eue9JJKsbeffPJG9bSAifvbjiF8mr8Ytr28sTheLhdWsPlZZWhkrr29cWViani/MF5YnJyeuT92YujY13pV+1vp184dv/uG3f/nRzb9/5/7/7r5z6Ve1tIay11v1oxsaXc/V90VTf0Ss7kewHujL1rmOW/5j33MBAKCz2jn+VyLim/Xz/+Hoq5+dAgAAAIdJ9ftD8XESUQUAAAAOrbQ+BzZJ89lcgKFI03y+MYf3a3E8LZbKlW/PldaWZxtzZUcil84tFAvj2ZzakcgltfpEvfyifnVHfTIiTkXE74cH6/X8TKk42+ubHwAAAHBEnNhx/f/hcOP6HwAAADhkRnqdAAAAALDvXrr+f9y7PAAAAID9Y/wfAAAADrWf3L5dW6rN51/P3ltfWyzduzJbKC/ml9Zm8jOl1ZX8fKk0X//NvqVOf69YKq18N5bXHoxVCuXKWHl94+5SaW25Mrjw0iOwAQAAgAN06tzT/yYRsfm9wfpSc6zXSQEHIum0wfa7dm/sby7AwerL1k/+2uNEgAPX3+sEgJ7J9ToBoOc63QdoO3nnn93PBQAA2B+jX98a/x9stjXH/zvfG+g4egi8xtJeJwAAHDjj/3B05bZmAAJH1Zd3NiQRm9uqX3z8v1r9PHkBAADdM1RfkjSfjQUORZrm8xEn648FyCVzC8XCeHZ98J/h3Jdq9Yn6OxOj/wAAAAAAAAAAAAAAAAAAAAAAAACwR9VqElUAAADgUItI306yJ/mPDl8c2nl/4Fjy0XB9HRH3/3znjw+mK5XViVr7+1vtlT9l7Vc9TxwAAABeB83r9OZ1PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB00/NnD2eayysvHtu/uO/+ICJGWsXvj4H6eiByEXH8gyT6t70viYi+LsTffBQRp1vFT2ppxUiWRav4gz2Mn0bEiS7Eh6Psae34c6vV5y+N8/V1689frfxWF+K3P/6lW8e/vjbHn5N7jHFmc5f4jyLO9Lc+/jTjJ23iX9hj/F/8fGOj3WvVxxGjLb9/kpdijVWWVsbK6xtXFpam5wvzheXJyYnrUzemrk2Nj80tFAvZvy1j/O4bf/t0t/4fbxN/pNH/c+36f3GP/f/k3w+efbVRzLWKf+lC6+/f0434r+z/NPvu+1ZWfl6t/no0Kyebjf253dkn/zq7W/9n2/S/0///pT32//JPf/P/PW4KAByA8vrG4nSxWFhVaF2oVu0ohUNZiIHdtun1kQkAAOi2Fyf9vc4EAAAAAAAAAAAAAAAAAAAAjq6D+KWxnTF3+TlqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICe+SwAAP//C2TYfA==") fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r3, 0xc0406441, 0x0) getdents(r2, &(0x7f0000000080)=""/37, 0x25) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f00000000c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000240)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000200)='./file0/file0\x00') 1.375528522s ago: executing program 4 (id=4066): r0 = open(&(0x7f0000000280)='.\x00', 0x141080, 0x0) openat(r0, &(0x7f0000000000)='./file0/file0\x00', 0x2c000, 0x9) r1 = socket$inet6(0xa, 0x5, 0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) fcntl$notify(r0, 0x402, 0x2b) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_io_uring_setup(0x112, &(0x7f0000000140)={0x0, 0x63c1, 0x1, 0x3}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x5, 0x0, 0x0}) io_uring_enter(r4, 0x47f6, 0xb277, 0x0, 0x0, 0x0) r7 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) fcntl$setlease(r7, 0x400, 0x0) mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) 678.393781ms ago: executing program 1 (id=4067): openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xb, &(0x7f0000000440)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000280)={0xffffffff, 0x2, 0x5, 0x9, 0x58e5, 0x3, 0x7fffffff, 0x522d, 0x100, 0x100000000, 0x8, 0x9, 0x8, 0x5, 0x8, 0xdf74, 0x300000000, 0xb, 0x100, 0x7, 0x8000000000000000, 0x1, 0x1ff, 0x0, 0x8, 0xfffffffffffffffb}) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, 0x0, 0x0) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) 675.782921ms ago: executing program 5 (id=4068): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, 0x0, &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[], 0x48) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = mq_open(&(0x7f00000008c0)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!T\xednux\x02\xc7\x12\xec\xca7\xbc\x1fS\x1c\x05y\x91\xe5\x9aL\xa9u\b\x00\x00\x00\xa0pC\x19\x9b\vY\x186\xa4\xe7\x1eg{`\xfa\xf3n\x8fIj6f\xfb\x13-g\x19(a6\x18\xe24nz\x83w8\xff\xfb\x83\f\x9a\xda\xc5w\x8eo\x02\xa3\xc1\x83\x91\xc6\xfd\x8c\xc4s\x03\x16\xa4+\xce|^\x98K_0\x8a\xb0\xff~\x1e\xd92\xb4r\xd8\xe7', 0x40, 0x110, 0x0) mq_timedreceive(r2, 0x0, 0xfffffffffffffee3, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 621.366932ms ago: executing program 0 (id=4069): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) io_uring_setup(0xc90, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0x14, &(0x7f0000003480)={0x4, 0x0, 0x4, &(0x7f00000001c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x0}, 0x2) io_uring_enter(0xffffffffffffffff, 0x18, 0x0, 0x1f, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x4000054) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) ioctl$TCSETA(r1, 0x5406, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7ff, 0x0, "0b77380a49fed5c1"}) semget$private(0x0, 0x6, 0x0) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)={[{0x2b, 'rdma'}]}, 0x6) 620.409902ms ago: executing program 6 (id=4070): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) openat$ptmx(0xffffffffffffff9c, 0x0, 0x40000, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000001200), 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x348, 0x0, 0x4c, 0x1a, 0xc000000, 0x73, 0x2c8, 0x258, 0x258, 0x2c8, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x168, 0x198, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0x6}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', @dev}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fedbdf2501000000000000000b0000000014001462726f616463"], 0x30}, 0x1, 0x0, 0x0, 0x4000851}, 0x880) stat(&(0x7f0000002e80)='./file0/file0\x00', 0x0) 359.574345ms ago: executing program 0 (id=4071): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000000)='./file0\x00', 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000040)='./bus\x00', 0x60142, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000005300)=[{0x0}], 0x1, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(r2) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$inet6_udplite(0x11, 0x2, 0x88) getsockopt$bt_BT_SECURITY(r3, 0x107, 0x13, 0x0, 0xfffffffffffffeec) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r4, 0x5410, &(0x7f0000000100)) fallocate(r0, 0x10, 0x0, 0x2000) 357.504185ms ago: executing program 4 (id=4072): socket(0x11, 0x800000003, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x19, 0x4, 0x4, 0x20001, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x21, 0x0, @void, @value, @void, @value}, 0x1d) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r6, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) 0s ago: executing program 0 (id=4073): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000010a80)=@raw={'raw\x00', 0x8, 0x3, 0x2e0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x248, 0xffffffff, 0xffffffff, 0x248, 0xffffffff, 0x3, 0x0, {[{{@ip={@broadcast, @private, 0x0, 0x0, 'batadv0\x00', 'batadv_slave_0\x00', {}, {}, 0x21}, 0x6, 0xa0, 0x100, 0x0, {}, [@common=@inet=@dccp={{0x30}, {[], [], 0x0, 0x6}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x970}}}}, {{@ip={@loopback, @dev, 0x0, 0xffffff00, 'veth0_virt_wifi\x00', 'bond_slave_0\x00'}, 0x0, 0x128, 0x148, 0x0, {}, [@common=@unspec=@conntrack1={{0xb8}, {{@ipv6=@mcast1, [0xff, 0xffffffff, 0xff], @ipv4=@broadcast, [0x0, 0x35be66baa0a3113a, 0xff000000], @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, [0xff000000, 0xff00007f, 0xffffff00, 0xff000000], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], 0x9377, 0x317, 0x3a, 0x4e21, 0x4e22, 0x4e24, 0x4e22, 0x2000, 0x100}, 0x1, 0x3}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x340) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f88) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000000)={'\x00', 0x8, 0x2, 0x80400, 0x2004, 0x800}) kernel console output (not intermixed with test programs): .0.1983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c18256169 code=0x7ffc0000 [ 534.667623][T12565] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1989'. [ 534.687853][T12565] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1989'. [ 534.698232][T12565] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1989'. [ 534.709270][T12565] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1989'. [ 534.718743][T12565] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1989'. [ 534.767070][ T26] audit: type=1326 audit(1743773794.232:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12540 comm="syz.0.1983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c18256169 code=0x7ffc0000 [ 534.810602][ T26] audit: type=1326 audit(1743773794.232:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12540 comm="syz.0.1983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f1c18256169 code=0x7ffc0000 [ 534.833729][ T26] audit: type=1326 audit(1743773794.232:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12540 comm="syz.0.1983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c18256169 code=0x7ffc0000 [ 534.856469][ T26] audit: type=1326 audit(1743773794.232:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12540 comm="syz.0.1983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c18256169 code=0x7ffc0000 [ 535.039588][ T26] audit: type=1326 audit(1743773794.232:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12540 comm="syz.0.1983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1c18256169 code=0x7ffc0000 [ 535.068291][T12559] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 535.200399][T12559] EXT4-fs (loop8): 1 truncate cleaned up [ 535.207121][T12559] EXT4-fs (loop8): mounted filesystem without journal. Opts: resgid=0x0000000000000000,resgid=0x0000000000000000,nodiscard,,errors=continue. Quota mode: none. [ 535.507411][T12559] EXT4-fs warning (device loop8): dx_probe:893: inode #2: comm syz.8.1987: dx entry: limit 124 != root limit 123 [ 535.559005][T12559] EXT4-fs warning (device loop8): dx_probe:966: inode #2: comm syz.8.1987: Corrupt directory, running e2fsck is recommended [ 535.608703][T12559] EXT4-fs error (device loop8): ext4_add_entry:2474: inode #2: comm syz.8.1987: Directory has corrupted htree index. [ 535.802776][ T9277] EXT4-fs warning (device loop8): dx_probe:893: inode #2: comm syz-executor: dx entry: limit 124 != root limit 123 [ 535.880889][ T9277] EXT4-fs warning (device loop8): dx_probe:966: inode #2: comm syz-executor: Corrupt directory, running e2fsck is recommended [ 536.121248][ T9277] EXT4-fs warning (device loop8): ext4_dirblock_csum_verify:406: inode #2: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 536.330761][ T9277] EXT4-fs error (device loop8): ext4_readdir:220: inode #2: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 536.542324][ T9277] EXT4-fs warning (device loop8): ext4_dirblock_csum_verify:406: inode #2: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 536.585751][ T9277] EXT4-fs error (device loop8): ext4_readdir:220: inode #2: comm syz-executor: path (unknown): directory fails checksum at offset 2048 [ 536.636968][T12613] netlink: 'syz.4.2005': attribute type 1 has an invalid length. [ 536.647121][ T4183] Bluetooth: Wrong link type (-22) [ 536.648034][ T9277] EXT4-fs warning (device loop8): dx_probe:893: inode #2: comm syz-executor: dx entry: limit 124 != root limit 123 [ 536.688029][ T9277] EXT4-fs warning (device loop8): dx_probe:966: inode #2: comm syz-executor: Corrupt directory, running e2fsck is recommended [ 538.189740][T12639] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2013'. [ 538.359741][ T4345] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.460799][ T4345] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.572995][ T4345] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.503114][ T4345] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.564016][ T26] kauditd_printk_skb: 13 callbacks suppressed [ 539.564031][ T26] audit: type=1326 audit(1743773800.222:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12670 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07c1e29169 code=0x7ffc0000 [ 539.683191][ T26] audit: type=1326 audit(1743773800.222:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12670 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07c1e29169 code=0x7ffc0000 [ 541.496435][ T26] audit: type=1326 audit(1743773800.252:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12670 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f07c1e29169 code=0x7ffc0000 [ 541.625939][ T26] audit: type=1326 audit(1743773800.252:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12670 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07c1e29169 code=0x7ffc0000 [ 541.665324][ T26] audit: type=1326 audit(1743773800.252:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12670 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07c1e29169 code=0x7ffc0000 [ 541.691102][ T26] audit: type=1326 audit(1743773800.252:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12670 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f07c1e29169 code=0x7ffc0000 [ 541.725472][ T26] audit: type=1326 audit(1743773800.252:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12670 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07c1e29169 code=0x7ffc0000 [ 541.918444][ T26] audit: type=1326 audit(1743773800.252:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12670 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07c1e29169 code=0x7ffc0000 [ 541.951998][ T26] audit: type=1326 audit(1743773800.252:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12670 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f07c1e29169 code=0x7ffc0000 [ 541.976518][ T4345] tipc: Left network mode [ 542.611946][ T26] audit: type=1326 audit(1743773800.252:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12670 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07c1e29169 code=0x7ffc0000 [ 542.694157][T12680] chnl_net:caif_netlink_parms(): no params data found [ 542.820117][T12680] bridge0: port 1(bridge_slave_0) entered blocking state [ 542.827733][T12680] bridge0: port 1(bridge_slave_0) entered disabled state [ 542.836671][T12680] device bridge_slave_0 entered promiscuous mode [ 542.845595][T12680] bridge0: port 2(bridge_slave_1) entered blocking state [ 542.853130][T12680] bridge0: port 2(bridge_slave_1) entered disabled state [ 542.862497][T12680] device bridge_slave_1 entered promiscuous mode [ 542.900931][T12680] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 542.926443][T12680] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 542.959857][T12680] team0: Port device team_slave_0 added [ 542.976643][T12680] team0: Port device team_slave_1 added [ 543.007246][T12680] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 543.014561][T12680] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 543.041151][T12680] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 543.059086][T12680] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 543.067032][T12680] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 543.096781][T12680] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 543.169926][T12680] device hsr_slave_0 entered promiscuous mode [ 543.183149][T12680] device hsr_slave_1 entered promiscuous mode [ 543.190450][T12680] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 543.206719][T12680] Cannot create hsr debugfs directory [ 543.447908][ T4345] device hsr_slave_0 left promiscuous mode [ 543.455190][ T4345] device hsr_slave_1 left promiscuous mode [ 543.463469][ T21] Bluetooth: hci4: command 0x0409 tx timeout [ 543.469905][ T4345] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 543.478341][ T4345] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 543.487131][ T4345] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 543.495415][ T4345] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 543.506096][ T4345] device bridge_slave_1 left promiscuous mode [ 543.512993][ T4345] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.521603][ T4345] device bridge_slave_0 left promiscuous mode [ 543.528544][ T4345] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.548224][ T4345] device veth1_macvtap left promiscuous mode [ 543.554368][ T4345] device veth0_macvtap left promiscuous mode [ 543.560445][ T4345] device veth1_vlan left promiscuous mode [ 543.566794][ T4345] device veth0_vlan left promiscuous mode [ 543.785742][ T4345] team0 (unregistering): Port device team_slave_1 removed [ 543.799139][ T4345] team0 (unregistering): Port device team_slave_0 removed [ 543.811864][ T4345] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 543.826408][ T4345] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 543.889950][ T4345] bond0 (unregistering): Released all slaves [ 545.013168][T12680] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 545.034235][T12680] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 545.063335][T12680] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 545.072949][T12680] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 545.185739][T12680] 8021q: adding VLAN 0 to HW filter on device bond0 [ 545.201595][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 545.216452][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 545.248300][T12680] 8021q: adding VLAN 0 to HW filter on device team0 [ 545.268105][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 545.292671][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 545.304997][ T4239] bridge0: port 1(bridge_slave_0) entered blocking state [ 545.312109][ T4239] bridge0: port 1(bridge_slave_0) entered forwarding state [ 545.366424][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 545.375148][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 545.393033][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 545.412164][ T4239] bridge0: port 2(bridge_slave_1) entered blocking state [ 545.419256][ T4239] bridge0: port 2(bridge_slave_1) entered forwarding state [ 545.452335][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 545.466804][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 545.476128][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 545.502611][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 545.520295][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 545.536047][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 545.552581][ T4250] Bluetooth: hci4: command 0x041b tx timeout [ 545.556537][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 545.615301][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 545.631193][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 545.651421][T12680] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 545.668962][T12680] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 545.678807][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 545.688467][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 545.895434][ T5678] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 545.909052][ T5678] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 545.926067][T12680] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 546.138919][ T5678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 546.148047][ T5678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 546.170387][ T5678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 546.188199][ T5678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 546.201248][ T5678] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 546.216626][ T5678] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 546.231338][T12680] device veth0_vlan entered promiscuous mode [ 546.255612][T12680] device veth1_vlan entered promiscuous mode [ 546.290576][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 546.307224][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 546.321109][T12680] device veth0_macvtap entered promiscuous mode [ 546.339711][T12680] device veth1_macvtap entered promiscuous mode [ 546.358348][T12680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 546.370036][T12680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.380653][T12680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 546.392293][T12680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.402892][T12680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 546.414413][T12680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.426669][T12680] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 546.436248][ T5678] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 546.446665][ T5678] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 546.455479][ T5678] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 546.465775][ T5678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 546.481441][T12680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 546.492773][T12680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.504096][T12680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 546.516351][T12680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.527771][T12680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 546.541978][T12680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.557408][T12680] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 546.567333][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 546.581337][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 546.599896][T12680] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.613152][T12680] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.623192][T12680] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.631907][T12680] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.731610][ T4345] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 546.749263][ T4345] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 546.770317][ T4239] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 546.776429][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 546.781754][ T4239] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 546.805193][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 546.920529][T12869] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2038'. [ 546.948282][T12869] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2038'. [ 547.623269][ T21] Bluetooth: hci4: command 0x040f tx timeout [ 548.835179][T12904] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2032'. [ 549.007216][T12906] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2033'. [ 549.260526][T12918] batman_adv: batadv0: Adding interface: geneve2 [ 549.292155][T12918] batman_adv: batadv0: Not using interface geneve2 (retrying later): interface not active [ 549.384297][T12914] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 549.436191][T12914] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 550.315647][ T4250] Bluetooth: hci4: command 0x0419 tx timeout [ 550.489220][T12966] netlink: zone id is out of range [ 550.509897][T12966] netlink: zone id is out of range [ 550.518248][T12966] netlink: zone id is out of range [ 550.523830][T12966] netlink: zone id is out of range [ 550.529300][T12966] netlink: zone id is out of range [ 550.534890][T12968] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2052'. [ 550.548217][T12966] netlink: zone id is out of range [ 550.553948][T12966] netlink: zone id is out of range [ 550.563298][T12966] netlink: zone id is out of range [ 550.575451][T12966] netlink: zone id is out of range [ 550.681010][T12972] netlink: 'syz.4.2055': attribute type 21 has an invalid length. [ 550.717704][T12972] netlink: 'syz.4.2055': attribute type 1 has an invalid length. [ 550.738194][T12978] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 551.757274][T12992] autofs4:pid:12992:autofs_fill_super: called with bogus options [ 551.825510][T12992] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2059'. [ 553.903668][ T26] kauditd_printk_skb: 16 callbacks suppressed [ 553.903682][ T26] audit: type=1326 audit(1743773814.560:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13021 comm="syz.4.2067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76eca90169 code=0x7ffc0000 [ 554.061166][ T26] audit: type=1326 audit(1743773814.610:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13021 comm="syz.4.2067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f76eca90169 code=0x7ffc0000 [ 554.087983][ T26] audit: type=1326 audit(1743773814.610:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13021 comm="syz.4.2067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76eca90169 code=0x7ffc0000 [ 554.162773][ T26] audit: type=1326 audit(1743773814.610:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13021 comm="syz.4.2067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76eca90169 code=0x7ffc0000 [ 554.296868][ T26] audit: type=1326 audit(1743773814.610:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13021 comm="syz.4.2067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f76eca90169 code=0x7ffc0000 [ 554.453399][ T26] audit: type=1326 audit(1743773814.610:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13021 comm="syz.4.2067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76eca90169 code=0x7ffc0000 [ 554.761414][ T26] audit: type=1326 audit(1743773814.610:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13021 comm="syz.4.2067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76eca90169 code=0x7ffc0000 [ 554.807597][ T26] audit: type=1326 audit(1743773814.610:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13021 comm="syz.4.2067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f76eca90169 code=0x7ffc0000 [ 554.872659][ T26] audit: type=1326 audit(1743773814.610:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13021 comm="syz.4.2067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76eca90169 code=0x7ffc0000 [ 554.956154][ T26] audit: type=1326 audit(1743773814.610:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13021 comm="syz.4.2067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76eca90169 code=0x7ffc0000 [ 555.946669][T13067] netlink: '+}[@': attribute type 4 has an invalid length. [ 556.001476][T13073] netlink: 'syz.0.2073': attribute type 4 has an invalid length. [ 557.933493][T13123] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2084'. [ 563.648388][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 571.668069][T13258] loop5: detected capacity change from 0 to 2048 [ 571.863838][T13274] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 571.941044][T13274] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2124'. [ 572.792883][T13258] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 572.824338][T13258] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 573.201149][T13310] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2130'. [ 574.285049][T13343] device batadv_slave_1 entered promiscuous mode [ 574.333614][T13343] net_ratelimit: 24 callbacks suppressed [ 574.333631][T13343] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 574.347941][ T5203] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 575.520746][ T5203] usb 6-1: Using ep0 maxpacket: 8 [ 575.647577][ T5203] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 575.732225][ T5203] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 575.867306][ T5203] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.103338][ T5203] usb 6-1: config 0 descriptor?? [ 576.206014][ T26] kauditd_printk_skb: 17 callbacks suppressed [ 576.206028][ T26] audit: type=1326 audit(1743773836.847:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13371 comm="syz.0.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c18256169 code=0x7ffc0000 [ 576.300899][ T26] audit: type=1326 audit(1743773836.887:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13371 comm="syz.0.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c18256169 code=0x7ffc0000 [ 576.399169][ T5203] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 576.429880][ T26] audit: type=1326 audit(1743773836.887:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13371 comm="syz.0.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f1c18256169 code=0x7ffc0000 [ 576.452643][ T26] audit: type=1326 audit(1743773836.887:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13371 comm="syz.0.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c18256169 code=0x7ffc0000 [ 576.504765][ T26] audit: type=1326 audit(1743773836.887:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13371 comm="syz.0.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c18256169 code=0x7ffc0000 [ 576.588032][T13389] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2146'. [ 577.449037][ T21] usb 6-1: USB disconnect, device number 6 [ 577.624276][T13400] kvm [13399]: vcpu0, guest rIP: 0x1a3 disabled perfctr wrmsr: 0xc2 data 0x8000 [ 577.794518][T13412] serio: Serial port ptm0 [ 580.039862][T13459] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2163'. [ 580.699864][T13469] netlink: 'syz.6.2169': attribute type 10 has an invalid length. [ 580.744349][T13469] team0: Cannot enslave team device to itself [ 580.813924][T13469] device vlan2 entered promiscuous mode [ 580.822939][T13469] device vlan0 entered promiscuous mode [ 580.847745][T13469] team0: Port device vlan2 added [ 581.397873][T13482] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 581.406106][T13482] IPv6: NLM_F_CREATE should be set when creating new route [ 581.607154][T13484] overlayfs: failed to clone upperpath [ 581.636717][ T4658] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 581.733248][T13490] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2177'. [ 581.913978][ T4658] usb 4-1: Using ep0 maxpacket: 8 [ 582.056704][ T4658] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 582.098671][ T4658] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 582.149933][ T4658] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.207740][ T4658] usb 4-1: config 0 descriptor?? [ 582.254518][T13493] overlayfs: failed to clone upperpath [ 582.913155][ T4658] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 583.040614][T13519] loop5: detected capacity change from 0 to 1024 [ 583.206639][ T5203] usb 4-1: USB disconnect, device number 13 [ 583.579234][ T4345] hfsplus: b-tree write err: -5, ino 4 [ 585.466818][ T5515] Bluetooth: hci1: command 0x0406 tx timeout [ 585.482234][T13570] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 585.727339][T13570] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2196'. [ 588.145535][T13633] netlink: 'syz.3.2208': attribute type 11 has an invalid length. [ 588.189204][T13633] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2208'. [ 590.137617][T13654] tipc: Enabled bearer , priority 0 [ 590.971149][T13647] tipc: Resetting bearer [ 591.025102][T13647] tipc: Disabling bearer [ 591.369282][T13677] netlink: 'syz.6.2215': attribute type 4 has an invalid length. [ 591.638989][T13678] netlink: 'syz.6.2215': attribute type 4 has an invalid length. [ 593.777014][ T26] audit: type=1326 audit(1743773854.415:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13725 comm="syz.5.2229" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f80f48cc169 code=0x0 [ 596.339608][ C1] Illegal XDP return value 16128, expect packet loss! [ 597.318965][T13781] xt_l2tp: wrong L2TP version: 0 [ 597.461565][T13779] autofs4:pid:13779:autofs_fill_super: called with bogus options [ 600.459393][T13841] netlink: 'syz.6.2259': attribute type 10 has an invalid length. [ 600.468004][T13841] batman_adv: batadv0: Adding interface: team0 [ 600.474653][T13841] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 600.500062][T13841] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 600.580036][T13843] netlink: 'syz.0.2258': attribute type 32 has an invalid length. [ 601.572231][T13859] overlayfs: failed to clone upperpath [ 601.875544][T13871] netlink: 'syz.6.2264': attribute type 1 has an invalid length. [ 602.071060][T13871] device bond1 entered promiscuous mode [ 602.101353][T13874] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 603.132825][T13874] bond1: (slave batadv1): making interface the new active one [ 603.140725][T13874] device batadv1 entered promiscuous mode [ 603.149235][T13874] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 605.926358][T13951] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2276'. [ 607.630993][T13971] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2283'. [ 607.654304][T13971] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2283'. [ 608.082549][T13983] hub 2-0:1.0: USB hub found [ 608.289305][T13983] hub 2-0:1.0: 1 port detected [ 612.350526][ T26] audit: type=1326 audit(1743773872.973:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14037 comm="syz.4.2299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76eca90169 code=0x7ffc0000 [ 612.439387][ T26] audit: type=1326 audit(1743773873.043:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14037 comm="syz.4.2299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f76eca90169 code=0x7ffc0000 [ 612.467638][T14044] cgroup: Unknown subsys name 'obj_role' [ 612.904928][ T26] audit: type=1326 audit(1743773873.043:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14037 comm="syz.4.2299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76eca90169 code=0x7ffc0000 [ 612.929614][ T26] audit: type=1326 audit(1743773873.043:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14037 comm="syz.4.2299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76eca90169 code=0x7ffc0000 [ 612.983750][ T26] audit: type=1326 audit(1743773873.043:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14037 comm="syz.4.2299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f76eca90169 code=0x7ffc0000 [ 613.101403][ T26] audit: type=1326 audit(1743773873.043:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14037 comm="syz.4.2299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76eca90169 code=0x7ffc0000 [ 613.220962][ T26] audit: type=1326 audit(1743773873.043:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14037 comm="syz.4.2299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76eca90169 code=0x7ffc0000 [ 613.668721][ T26] audit: type=1326 audit(1743773873.043:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14037 comm="syz.4.2299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f76eca90169 code=0x7ffc0000 [ 613.711500][ T26] audit: type=1326 audit(1743773873.043:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14037 comm="syz.4.2299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76eca90169 code=0x7ffc0000 [ 613.970150][ T26] audit: type=1326 audit(1743773873.043:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14037 comm="syz.4.2299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76eca90169 code=0x7ffc0000 [ 615.700428][T14097] loop5: detected capacity change from 0 to 128 [ 617.486688][T14126] chnl_net:caif_netlink_parms(): no params data found [ 617.619955][T14126] bridge0: port 1(bridge_slave_0) entered blocking state [ 617.628170][T14126] bridge0: port 1(bridge_slave_0) entered disabled state [ 617.639067][T14126] device bridge_slave_0 entered promiscuous mode [ 617.648555][T14126] bridge0: port 2(bridge_slave_1) entered blocking state [ 617.666833][T14126] bridge0: port 2(bridge_slave_1) entered disabled state [ 617.674831][T14126] device bridge_slave_1 entered promiscuous mode [ 617.681806][ T26] kauditd_printk_skb: 15 callbacks suppressed [ 617.681820][ T26] audit: type=1326 audit(1743773878.322:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14107 comm="syz.4.2315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76eca90169 code=0x7fc00000 [ 617.712539][ T26] audit: type=1326 audit(1743773878.322:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14107 comm="syz.4.2315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f76eca90169 code=0x7fc00000 [ 617.767631][ T26] audit: type=1326 audit(1743773878.322:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14107 comm="syz.4.2315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76eca90169 code=0x7fc00000 [ 617.776210][T14126] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 617.851525][T14126] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 617.861057][ T26] audit: type=1326 audit(1743773878.322:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14107 comm="syz.4.2315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76eca90169 code=0x7fc00000 [ 617.861092][ T26] audit: type=1326 audit(1743773878.322:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14107 comm="syz.4.2315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76eca90169 code=0x7fc00000 [ 617.982813][T14126] team0: Port device team_slave_0 added [ 617.993451][T14126] team0: Port device team_slave_1 added [ 618.055761][ T26] audit: type=1326 audit(1743773878.322:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14107 comm="syz.4.2315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76eca90169 code=0x7fc00000 [ 618.078350][ T26] audit: type=1326 audit(1743773878.322:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14107 comm="syz.4.2315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76eca90169 code=0x7fc00000 [ 618.102925][ T26] audit: type=1326 audit(1743773878.322:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14107 comm="syz.4.2315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76eca90169 code=0x7fc00000 [ 618.105364][T14126] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 618.140422][ T26] audit: type=1326 audit(1743773878.322:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14107 comm="syz.4.2315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76eca90169 code=0x7fc00000 [ 618.143977][T14126] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 618.425073][ T26] audit: type=1326 audit(1743773878.322:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14107 comm="syz.4.2315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76eca90169 code=0x7fc00000 [ 618.980747][T14126] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 619.052455][T14160] loop5: detected capacity change from 0 to 2048 [ 619.077243][T14126] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 619.095639][T14160] loop5: p2 < > p3 < p5 > p4 [ 619.100372][T14160] loop5: partition table partially beyond EOD, truncated [ 619.107907][T14126] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 619.130721][T14160] loop5: p2 start 4278190080 is beyond EOD, truncated [ 619.148499][T14126] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 619.645011][ T5515] Bluetooth: hci0: command 0x0409 tx timeout [ 620.831819][T14160] loop5: p4 size 8192 extends beyond EOD, truncated [ 620.910555][T14126] device hsr_slave_0 entered promiscuous mode [ 620.967543][T14126] device hsr_slave_1 entered promiscuous mode [ 620.983230][T14160] loop5: p5 size 8192 extends beyond EOD, truncated [ 620.999177][T14126] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 621.063168][T14126] Cannot create hsr debugfs directory [ 621.160471][T14178] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2329'. [ 621.328987][ T4267] udevd[4267]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 621.468529][ T4709] udevd[4709]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 621.480215][ T6064] udevd[6064]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory [ 621.548159][T14174] netlink: 'syz.0.2327': attribute type 4 has an invalid length. [ 621.619755][T14174] netlink: 'syz.0.2327': attribute type 4 has an invalid length. [ 623.158929][ T5515] Bluetooth: hci0: command 0x041b tx timeout [ 624.528501][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.853612][T14233] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2342'. [ 625.460786][ T5524] Bluetooth: hci0: command 0x040f tx timeout [ 625.603001][T14126] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 625.635384][T14126] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 625.660750][T14126] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 626.236674][T14126] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 626.753970][T14126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 626.862076][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 626.870145][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 626.954626][T14126] 8021q: adding VLAN 0 to HW filter on device team0 [ 627.054452][ T5684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 627.109194][ T5684] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 627.125429][ T5684] bridge0: port 1(bridge_slave_0) entered blocking state [ 627.132602][ T5684] bridge0: port 1(bridge_slave_0) entered forwarding state [ 627.161006][ T5684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 627.192918][ T5684] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 627.222466][ T5684] bridge0: port 2(bridge_slave_1) entered blocking state [ 627.229914][ T5684] bridge0: port 2(bridge_slave_1) entered forwarding state [ 627.285153][T14285] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2354'. [ 627.405889][ T5684] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 627.441242][ T5684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 627.473117][ T5684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 627.508788][ T5684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 627.536764][ T5684] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 627.552297][ T4658] Bluetooth: hci0: command 0x0419 tx timeout [ 627.556509][ T5684] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 627.599384][ T5688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 627.642105][ T5688] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 627.661251][ T5688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 627.777361][ T5688] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 628.730700][T14126] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 628.767690][T14126] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 629.972631][ T5676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 630.017839][ T5676] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 631.787253][T14365] loop5: detected capacity change from 0 to 512 [ 631.948587][ T5676] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 631.953092][T14365] EXT4-fs (loop5): Ignoring removed nobh option [ 631.987205][ T5676] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 632.020531][T14126] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 632.067154][T14365] EXT4-fs error (device loop5): ext4_do_update_inode:5174: inode #3: comm syz.5.2370: corrupted inode contents [ 632.153811][ T5684] bridge0: port 2(bridge_slave_1) entered disabled state [ 632.181606][T14386] MPTCP: kernel_bind error, err=-99 [ 632.185630][T14365] EXT4-fs error (device loop5): ext4_dirty_inode:6010: inode #3: comm syz.5.2370: mark_inode_dirty error [ 632.221619][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 632.240430][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 632.280417][T14126] device veth0_vlan entered promiscuous mode [ 632.294872][T14365] EXT4-fs error (device loop5): ext4_do_update_inode:5174: inode #3: comm syz.5.2370: corrupted inode contents [ 632.327672][T14126] device veth1_vlan entered promiscuous mode [ 632.339932][T14365] EXT4-fs error (device loop5): __ext4_ext_dirty:183: inode #3: comm syz.5.2370: mark_inode_dirty error [ 632.398907][T14365] __quota_error: 57 callbacks suppressed [ 632.398926][T14365] Quota error (device loop5): write_blk: dquota write failed [ 632.471873][T14126] device veth0_macvtap entered promiscuous mode [ 632.492309][T14365] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 632.502891][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 632.511290][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 632.523630][T14365] EXT4-fs error (device loop5): ext4_acquire_dquot:6197: comm syz.5.2370: Failed to acquire dquot type 0 [ 632.627643][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 632.781475][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 632.807083][T14365] EXT4-fs error (device loop5): ext4_do_update_inode:5174: inode #16: comm syz.5.2370: corrupted inode contents [ 633.051664][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 633.125186][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 633.139296][T14126] device veth1_macvtap entered promiscuous mode [ 633.284937][T14365] EXT4-fs error (device loop5): ext4_dirty_inode:6010: inode #16: comm syz.5.2370: mark_inode_dirty error [ 633.332224][T14365] EXT4-fs error (device loop5): ext4_do_update_inode:5174: inode #16: comm syz.5.2370: corrupted inode contents [ 633.485239][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 633.502909][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 633.511203][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 633.523104][T14365] EXT4-fs error (device loop5): __ext4_ext_dirty:183: inode #16: comm syz.5.2370: mark_inode_dirty error [ 633.730799][T14365] EXT4-fs error (device loop5): ext4_do_update_inode:5174: inode #16: comm syz.5.2370: corrupted inode contents [ 633.785626][ T3005] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 634.230887][T14126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 634.260636][T14365] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 634.297031][T14365] EXT4-fs error (device loop5): ext4_do_update_inode:5174: inode #16: comm syz.5.2370: corrupted inode contents [ 634.328363][T14365] EXT4-fs error (device loop5): ext4_truncate:4272: inode #16: comm syz.5.2370: mark_inode_dirty error [ 634.390300][T14365] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 634.413000][T14126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.431938][T14126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 634.432010][T14365] EXT4-fs (loop5): 1 truncate cleaned up [ 634.448565][T14365] EXT4-fs (loop5): mounted filesystem without journal. Opts: journal_dev=0x000000000000d353,nobh,,errors=continue. Quota mode: writeback. [ 634.451202][T14126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.463458][T14365] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 634.751951][T14126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 634.946624][T14126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.161225][T14126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 635.188083][T14126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.199670][T14126] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 635.216191][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 635.243264][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 635.256374][T14126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 635.267980][T14126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.283282][T14126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 635.298619][T14126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.310677][T14126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 635.323200][T14126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.337979][T14126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 635.349439][T14126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.369657][T14126] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 635.382699][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 635.419443][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 635.446750][T14126] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.462639][T14126] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.481979][T14126] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.516771][T14126] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.648345][ T5684] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 635.689233][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 635.710280][ T5684] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 635.747085][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 635.767132][ T5688] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 635.847071][ T5688] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 636.795293][T14455] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 636.805150][T14455] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 636.814285][T14455] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 636.823392][T14455] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 636.888442][T14455] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 639.806380][T14482] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2395'. [ 641.720527][T14493] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2399'. [ 642.043669][T14493] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2399'. [ 642.089343][T14512] xt_hashlimit: invalid rate [ 642.242583][T14513] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 643.312748][T14512] netlink: 136 bytes leftover after parsing attributes in process `syz.1.2404'. [ 643.412881][T14518] loop5: detected capacity change from 0 to 512 [ 643.538305][T14518] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 643.670426][T14537] 9pnet: p9_errstr2errno: server reported unknown error 1 g;-~ [ 643.907019][T14518] EXT4-fs (loop5): 1 truncate cleaned up [ 643.912699][T14518] EXT4-fs (loop5): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,nombcache,quota,,errors=continue. Quota mode: writeback. [ 645.343813][T14556] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 645.443802][T14556] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 647.385598][T14576] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2418'. [ 648.526589][T14594] IPVS: length: 217 != 24 [ 648.768481][T14607] "syz.6.2426" (14607) uses obsolete ecb(arc4) skcipher [ 650.528225][T14617] tipc: Started in network mode [ 650.558436][T14617] tipc: Node identity 7f000001, cluster identity 4711 [ 650.605015][T14617] tipc: Enabled bearer , priority 10 [ 650.709461][T14626] loop5: detected capacity change from 0 to 512 [ 650.779581][T14617] tipc: Enabled bearer , priority 0 [ 650.916415][T14626] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 651.056605][T14626] ext4 filesystem being mounted at /66/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 651.548854][T14648] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 652.161511][ T5515] tipc: Node number set to 2130706433 [ 652.188408][T14644] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 652.232503][T14644] batman_adv: batadv0: Removing interface: team0 [ 652.269253][T14644] device bridge_slave_0 left promiscuous mode [ 652.316952][T14644] bridge0: port 1(bridge_slave_0) entered disabled state [ 652.328216][T14644] device bridge_slave_1 left promiscuous mode [ 652.357605][T14644] bridge0: port 2(bridge_slave_1) entered disabled state [ 652.404830][T14644] bond0: (slave bond_slave_0): Releasing backup interface [ 652.455305][T14644] bond0: (slave bond_slave_1): Releasing backup interface [ 652.746254][T14644] team0: Port device team_slave_0 removed [ 653.685028][T14662] xt_CT: You must specify a L4 protocol and not use inversions on it [ 654.249311][T14644] team0: Port device team_slave_1 removed [ 654.324239][T14644] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 654.352913][T14644] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 654.429004][T14644] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 654.446187][T14644] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 654.506612][T14672] kvm: pic: non byte write [ 654.521935][T14672] kvm: pic: single mode not supported [ 654.521956][T14672] kvm: pic: level sensitive irq not supported [ 654.588375][T14682] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2441'. [ 654.650468][T14686] loop5: detected capacity change from 0 to 512 [ 654.685648][T14644] team0: Port device netdevsim0 removed [ 654.743835][T14644] device vlan0 left promiscuous mode [ 654.791058][T14686] EXT4-fs (loop5): Ignoring removed nobh option [ 654.816134][T14644] team0: Port device vlan2 removed [ 654.822097][T14686] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 654.848682][T14644] bond1: (slave batadv1): Releasing active interface [ 654.937855][T14644] device batadv1 left promiscuous mode [ 655.203742][T14649] netlink: 'syz.6.2434': attribute type 10 has an invalid length. [ 655.261460][T14686] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.2443: invalid indirect mapped block 256 (level 2) [ 655.487379][T14649] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 655.525403][T14686] EXT4-fs (loop5): 2 truncates cleaned up [ 655.531172][T14686] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,nojournal_checksum,dioread_nolock,bsdgroups,,errors=continue. Quota mode: writeback. [ 655.580523][T14668] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2439'. [ 656.155656][ T26] audit: type=1800 audit(1743773916.678:497): pid=14711 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2443" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 656.310529][T14717] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 656.358686][T14718] netlink: 'syz.1.2450': attribute type 4 has an invalid length. [ 657.888840][T14748] kvm: emulating exchange as write [ 658.075749][ T26] audit: type=1326 audit(1743773918.708:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14750 comm="syz.4.2456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76eca90169 code=0x7ffc0000 [ 658.122786][T14758] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2457'. [ 658.185034][ T26] audit: type=1326 audit(1743773918.738:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14750 comm="syz.4.2456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76eca90169 code=0x7ffc0000 [ 658.258398][ T26] audit: type=1326 audit(1743773918.748:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14750 comm="syz.4.2456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f76eca90169 code=0x7ffc0000 [ 658.407033][ T26] audit: type=1326 audit(1743773918.748:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14750 comm="syz.4.2456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76eca90169 code=0x7ffc0000 [ 658.561907][ T26] audit: type=1326 audit(1743773918.748:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14750 comm="syz.4.2456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76eca90169 code=0x7ffc0000 [ 658.967723][ T26] audit: type=1326 audit(1743773918.748:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14750 comm="syz.4.2456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f76eca90169 code=0x7ffc0000 [ 660.115521][ T26] audit: type=1326 audit(1743773918.748:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14750 comm="syz.4.2456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76eca90169 code=0x7ffc0000 [ 660.137872][ C0] vkms_vblank_simulate: vblank timer overrun [ 660.175298][ T26] audit: type=1326 audit(1743773918.748:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14750 comm="syz.4.2456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76eca90169 code=0x7ffc0000 [ 661.958164][ T26] audit: type=1326 audit(1743773918.758:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14750 comm="syz.4.2456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f76eca90169 code=0x7ffc0000 [ 662.124769][ T26] audit: type=1326 audit(1743773918.758:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14750 comm="syz.4.2456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76eca90169 code=0x7ffc0000 [ 662.177511][ T26] audit: type=1326 audit(1743773918.758:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14750 comm="syz.4.2456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76eca90169 code=0x7ffc0000 [ 662.200548][ T26] audit: type=1326 audit(1743773918.788:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14750 comm="syz.4.2456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f76eca90169 code=0x7ffc0000 [ 662.223243][ C0] vkms_vblank_simulate: vblank timer overrun [ 662.229387][ T26] audit: type=1326 audit(1743773918.788:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14750 comm="syz.4.2456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f76eca901a3 code=0x7ffc0000 [ 662.306933][ T26] audit: type=1326 audit(1743773918.788:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14750 comm="syz.4.2456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f76eca901a3 code=0x7ffc0000 [ 662.344208][ T26] audit: type=1326 audit(1743773918.788:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14750 comm="syz.4.2456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76eca90169 code=0x7ffc0000 [ 662.386015][T14824] bridge0: port 3(batadv1) entered blocking state [ 662.399922][T14824] bridge0: port 3(batadv1) entered disabled state [ 662.409808][ T26] audit: type=1326 audit(1743773918.788:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14750 comm="syz.4.2456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76eca90169 code=0x7ffc0000 [ 662.446415][T14824] device batadv1 entered promiscuous mode [ 662.475804][ T26] audit: type=1326 audit(1743773918.788:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14750 comm="syz.4.2456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76eca90169 code=0x7ffc0000 [ 662.524785][ T26] audit: type=1326 audit(1743773918.788:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14750 comm="syz.4.2456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f76eca90169 code=0x7ffc0000 [ 662.631693][T14838] loop1: detected capacity change from 0 to 1024 [ 663.422986][T14838] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,abort,dioread_lock,norecovery,discard,lazytime,noload,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 663.466081][ T4345] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 663.478394][ T4345] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 663.528648][T14848] netlink: 564 bytes leftover after parsing attributes in process `syz.5.2491'. [ 664.040027][T14859] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 664.927833][T14880] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2487'. [ 665.135805][T14890] --map-set only usable from mangle table [ 665.401058][T14891] loop5: detected capacity change from 0 to 256 [ 665.754090][T14893] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2490'. [ 665.793631][T14898] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2493'. [ 665.812904][T14893] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 666.506123][ T4213] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 668.367263][ T4250] Bluetooth: hci4: command 0x0406 tx timeout [ 668.646282][ T4213] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 669.018685][ T4213] usb 2-1: can't read configurations, error -71 [ 669.846794][T14944] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2501'. [ 669.872567][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 669.872698][ T26] audit: type=1326 audit(1743773929.676:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14933 comm="syz.4.2503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76eca90169 code=0x7ffc0000 [ 670.629819][ T26] audit: type=1326 audit(1743773929.676:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14933 comm="syz.4.2503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76eca90169 code=0x7ffc0000 [ 670.687885][ T26] audit: type=1326 audit(1743773929.696:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14933 comm="syz.4.2503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f76eca90169 code=0x7ffc0000 [ 670.730612][T14959] netlink: 41326 bytes leftover after parsing attributes in process `syz.4.2509'. [ 670.766697][ T26] audit: type=1326 audit(1743773929.696:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14933 comm="syz.4.2503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76eca90169 code=0x7ffc0000 [ 670.850217][ T26] audit: type=1326 audit(1743773929.696:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14933 comm="syz.4.2503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76eca90169 code=0x7ffc0000 [ 671.260088][ T26] audit: type=1326 audit(1743773929.696:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14933 comm="syz.4.2503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f76eca90169 code=0x7ffc0000 [ 671.467452][ T26] audit: type=1326 audit(1743773929.696:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14933 comm="syz.4.2503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76eca90169 code=0x7ffc0000 [ 671.493808][ T26] audit: type=1326 audit(1743773929.696:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14933 comm="syz.4.2503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76eca90169 code=0x7ffc0000 [ 671.544047][ T26] audit: type=1326 audit(1743773931.136:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14933 comm="syz.4.2503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f76eca90169 code=0x7ffc0000 [ 671.727257][ T26] audit: type=1326 audit(1743773931.136:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14933 comm="syz.4.2503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76eca90169 code=0x7ffc0000 [ 672.500730][T14987] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 672.564042][T14987] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 673.927800][T15001] orangefs_mount: mount request failed with -4 [ 675.492330][T15031] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2521'. [ 676.339313][T15023] team0: Port device netdevsim0 removed [ 676.370444][T15023] bond0: (slave wlan1): Releasing backup interface [ 676.417436][ T4215] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 678.296688][T15023] tipc: Resetting bearer [ 678.388419][T15023] tipc: Resetting bearer [ 678.409111][T15023] batman_adv: batadv0: Removing interface: geneve2 [ 678.430814][T15033] netlink: 'syz.0.2524': attribute type 10 has an invalid length. [ 678.463269][T15033] tipc: Resetting bearer [ 678.471533][T15033] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 679.462498][T15076] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2535'. [ 681.561140][T15112] tipc: Enabling of bearer rejected, failed to enable media [ 683.302272][T15145] loop5: detected capacity change from 0 to 128 [ 683.605086][ T26] kauditd_printk_skb: 26 callbacks suppressed [ 683.605102][ T26] audit: type=1326 audit(1743773944.235:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15155 comm="syz.1.2542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41b6f38169 code=0x7ffc0000 [ 683.622353][T15156] loop1: detected capacity change from 0 to 512 [ 684.406281][T15169] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 684.708655][T15156] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 684.735968][ T26] audit: type=1326 audit(1743773944.235:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15155 comm="syz.1.2542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f41b6f38169 code=0x7ffc0000 [ 684.769529][T15156] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 684.822345][T15156] System zones: 0-1, 15-15, 18-18, 34-34 [ 684.929846][ T26] audit: type=1326 audit(1743773944.235:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15155 comm="syz.1.2542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41b6f38169 code=0x7ffc0000 [ 684.964895][T15156] EXT4-fs (loop1): orphan cleanup on readonly fs [ 684.991494][ T26] audit: type=1326 audit(1743773944.235:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15155 comm="syz.1.2542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f41b6f38169 code=0x7ffc0000 [ 685.035079][T15156] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 686.025262][T15156] EXT4-fs warning (device loop1): ext4_enable_quotas:6432: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 686.040764][ T26] audit: type=1326 audit(1743773944.235:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15155 comm="syz.1.2542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41b6f38169 code=0x7ffc0000 [ 686.079009][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.088728][T15184] loop5: detected capacity change from 0 to 40427 [ 686.098211][T15156] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 686.134901][T15156] EXT4-fs error (device loop1): ext4_orphan_get:1427: comm syz.1.2542: bad orphan inode 16 [ 686.150924][ T26] audit: type=1326 audit(1743773944.235:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15155 comm="syz.1.2542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f41b6f38169 code=0x7ffc0000 [ 686.183975][T15156] ext4_test_bit(bit=15, block=18) = 1 [ 686.202527][T15156] is_bad_inode(inode)=0 [ 686.208035][T15156] NEXT_ORPHAN(inode)=0 [ 686.223449][T15184] F2FS-fs (loop5): Found nat_bits in checkpoint [ 686.252788][ T26] audit: type=1326 audit(1743773944.235:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15155 comm="syz.1.2542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41b6f38169 code=0x7ffc0000 [ 686.288200][T15156] max_ino=32 [ 686.291515][T15184] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 686.318033][T15156] i_nlink=2 [ 686.356866][ T26] audit: type=1326 audit(1743773944.245:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15155 comm="syz.1.2542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f41b6f38169 code=0x7ffc0000 [ 686.412114][T15156] EXT4-fs (loop1): mounted filesystem without journal. Opts: resgid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 686.485881][ T26] audit: type=1326 audit(1743773944.245:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15155 comm="syz.1.2542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f41b6f381a3 code=0x7ffc0000 [ 686.507575][T15156] fscrypt (loop1, inode 16): Error -61 getting encryption context [ 686.822193][T15206] fscrypt (loop1, inode 16): Error -61 getting encryption context [ 688.372505][T12680] attempt to access beyond end of device [ 688.372505][T12680] loop5: rw=2049, want=45104, limit=40427 [ 688.564402][T15224] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2566'. [ 690.424784][ T26] kauditd_printk_skb: 30 callbacks suppressed [ 690.424798][ T26] audit: type=1326 audit(1743773951.054:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15253 comm="syz.0.2570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c18256169 code=0x7ffc0000 [ 690.455423][ T26] audit: type=1326 audit(1743773951.084:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15253 comm="syz.0.2570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c18256169 code=0x7ffc0000 [ 691.649480][ T26] audit: type=1326 audit(1743773952.264:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15253 comm="syz.0.2570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f1c18256169 code=0x7ffc0000 [ 692.224778][ T26] audit: type=1326 audit(1743773952.274:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15253 comm="syz.0.2570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c18256169 code=0x7ffc0000 [ 692.458995][ T26] audit: type=1326 audit(1743773952.274:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15253 comm="syz.0.2570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c18256169 code=0x7ffc0000 [ 692.489034][ T26] audit: type=1326 audit(1743773952.704:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15253 comm="syz.0.2570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f1c18256169 code=0x7ffc0000 [ 692.554301][T15273] loop1: detected capacity change from 0 to 2048 [ 693.167249][ T26] audit: type=1326 audit(1743773952.704:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15253 comm="syz.0.2570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c18256169 code=0x7ffc0000 [ 693.192752][ T26] audit: type=1326 audit(1743773952.704:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15253 comm="syz.0.2570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c18256169 code=0x7ffc0000 [ 693.288980][ T26] audit: type=1326 audit(1743773952.704:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15253 comm="syz.0.2570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f1c18256169 code=0x7ffc0000 [ 693.532934][T15273] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 695.440540][ T26] audit: type=1326 audit(1743773952.704:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15253 comm="syz.0.2570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c18256169 code=0x7ffc0000 [ 695.690546][ T26] audit: type=1326 audit(1743773952.704:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15253 comm="syz.0.2570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c18256169 code=0x7ffc0000 [ 695.773971][ T26] audit: type=1326 audit(1743773952.704:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15253 comm="syz.0.2570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f1c18256169 code=0x7ffc0000 [ 695.797914][ T26] audit: type=1326 audit(1743773952.704:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15253 comm="syz.0.2570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c18256169 code=0x7ffc0000 [ 695.821485][ T26] audit: type=1326 audit(1743773952.704:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15253 comm="syz.0.2570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c18256169 code=0x7ffc0000 [ 696.441434][ T26] audit: type=1326 audit(1743773952.714:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15253 comm="syz.0.2570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f1c18256169 code=0x7ffc0000 [ 696.584856][T15309] loop1: detected capacity change from 0 to 512 [ 696.629259][ T26] audit: type=1326 audit(1743773952.714:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15253 comm="syz.0.2570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c18256169 code=0x7ffc0000 [ 696.655431][ T26] audit: type=1326 audit(1743773952.714:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15253 comm="syz.0.2570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c18256169 code=0x7ffc0000 [ 696.677963][ T26] audit: type=1326 audit(1743773952.714:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15253 comm="syz.0.2570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f1c18256169 code=0x7ffc0000 [ 696.705890][ T26] audit: type=1326 audit(1743773952.714:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15253 comm="syz.0.2570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c18256169 code=0x7ffc0000 [ 696.772518][T15309] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.2582: bg 0: block 248: padding at end of block bitmap is not set [ 696.797019][T15309] EXT4-fs error (device loop1): ext4_acquire_dquot:6197: comm syz.1.2582: Failed to acquire dquot type 1 [ 696.818326][T15309] EXT4-fs (loop1): 1 truncate cleaned up [ 696.824067][T15309] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 697.120401][T15309] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 697.474544][T15325] overlayfs: failed to clone upperpath [ 697.663705][T15309] tipc: Enabled bearer , priority 10 [ 697.815026][T15336] loop5: detected capacity change from 0 to 1024 [ 697.903540][ T155] EXT4-fs error (device loop1): ext4_release_dquot:6220: comm kworker/u4:3: Failed to release dquot type 1 [ 698.654848][T15336] EXT4-fs (loop5): mounted filesystem without journal. Opts: nombcache,abort,dioread_lock,norecovery,discard,lazytime,noload,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 698.940833][T15369] device sit2 entered promiscuous mode [ 699.065297][T15379] overlayfs: failed to clone upperpath [ 699.343485][T15401] netlink: 564 bytes leftover after parsing attributes in process `syz.6.2613'. [ 699.492360][T15405] netlink: 41326 bytes leftover after parsing attributes in process `syz.6.2605'. [ 699.628448][T15414] nfs: Unknown parameter 'ntext' [ 701.826316][ T5524] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz1 [ 701.909427][T15468] netlink: 41326 bytes leftover after parsing attributes in process `syz.1.2620'. [ 703.870761][T15478] nftables ruleset with unbound chain [ 704.138599][T15487] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2626'. [ 704.343329][T15496] overlayfs: failed to clone upperpath [ 705.098840][T15503] loop5: detected capacity change from 0 to 512 [ 706.852791][T15503] EXT4-fs (loop5): mounted filesystem without journal. Opts: auto_da_alloc,init_itable,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 707.056688][T15503] ext4 filesystem being mounted at /98/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 707.567651][ T26] kauditd_printk_skb: 71 callbacks suppressed [ 707.567667][ T26] audit: type=1326 audit(1743773968.192:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15500 comm="syz.5.2628" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f80f48cc169 code=0x0 [ 707.666407][T15541] netlink: 'syz.5.2628': attribute type 13 has an invalid length. [ 709.974646][T15540] team0 (unregistering): Port device team_slave_0 removed [ 710.043886][T15561] loop1: detected capacity change from 0 to 512 [ 710.201099][T15571] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2641'. [ 710.266213][T15540] team0 (unregistering): Port device team_slave_1 removed [ 710.284787][T15540] team0 (unregistering): Port device netdevsim0 removed [ 710.971901][T15561] EXT4-fs (loop1): Ignoring removed nobh option [ 710.982728][T15561] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 711.092995][T15561] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.2640: invalid indirect mapped block 256 (level 2) [ 711.097395][T15589] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2648'. [ 711.247427][T15561] EXT4-fs (loop1): 2 truncates cleaned up [ 711.278476][T15561] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,nojournal_checksum,dioread_nolock,bsdgroups,,errors=continue. Quota mode: writeback. [ 712.004403][ T26] audit: type=1326 audit(1743773972.642:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15602 comm="syz.0.2653" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1c18256169 code=0x0 [ 713.119976][T15612] netlink: 'syz.0.2653': attribute type 13 has an invalid length. [ 713.133987][T15603] kvm: pic: level sensitive irq not supported [ 717.702318][T15667] loop1: detected capacity change from 0 to 40427 [ 718.763078][T15667] F2FS-fs (loop1): Found nat_bits in checkpoint [ 718.966657][T15667] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 719.527340][T15696] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2673'. [ 719.536679][T15696] openvswitch: netlink: Missing key (keys=40, expected=80) [ 721.193799][T14126] attempt to access beyond end of device [ 721.193799][T14126] loop1: rw=2049, want=45104, limit=40427 [ 721.382518][T15707] netlink: 596 bytes leftover after parsing attributes in process `syz.4.2677'. [ 726.557130][ T4250] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 727.751583][T15775] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 729.599261][T15833] overlayfs: failed to clone upperpath [ 736.610224][T15977] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2739'. [ 736.633582][T15977] device bridge_slave_1 left promiscuous mode [ 736.648648][T15977] bridge0: port 2(bridge_slave_1) entered disabled state [ 736.685805][T15977] device bridge_slave_0 left promiscuous mode [ 736.708877][T15977] bridge0: port 1(bridge_slave_0) entered disabled state [ 737.968656][T15992] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2742'. [ 738.822639][T16012] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 738.829953][T16012] IPv6: NLM_F_CREATE should be set when creating new route [ 738.877671][T16012] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 738.934690][T16012] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 738.970423][T16012] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 738.990921][T16012] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 739.013805][T16012] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 739.036853][T16012] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 739.062000][T16012] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 739.202770][ T26] audit: type=1326 audit(1743773999.829:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16028 comm="syz.4.2752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76eca90169 code=0x7ffc0000 [ 739.269404][ T26] audit: type=1326 audit(1743773999.829:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16028 comm="syz.4.2752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76eca90169 code=0x7ffc0000 [ 739.380657][ T26] audit: type=1326 audit(1743773999.829:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16028 comm="syz.4.2752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f76eca90169 code=0x7ffc0000 [ 739.417819][ T26] audit: type=1326 audit(1743773999.829:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16028 comm="syz.4.2752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76eca90169 code=0x7ffc0000 [ 739.453670][ T26] audit: type=1326 audit(1743773999.829:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16028 comm="syz.4.2752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76eca90169 code=0x7ffc0000 [ 739.485879][ T26] audit: type=1326 audit(1743773999.829:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16028 comm="syz.4.2752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f76eca90169 code=0x7ffc0000 [ 739.568408][ T26] audit: type=1326 audit(1743773999.869:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16028 comm="syz.4.2752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76eca90169 code=0x7ffc0000 [ 739.605144][ T26] audit: type=1326 audit(1743773999.889:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16028 comm="syz.4.2752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76eca90169 code=0x7ffc0000 [ 739.636850][ T26] audit: type=1326 audit(1743773999.899:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16028 comm="syz.4.2752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f76eca90169 code=0x7ffc0000 [ 739.660040][ T26] audit: type=1326 audit(1743773999.929:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16028 comm="syz.4.2752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76eca90169 code=0x7ffc0000 [ 743.015236][T16100] overlayfs: failed to resolve './file1': -2 [ 744.156640][T16104] xt_nat: multiple ranges no longer supported [ 744.199488][T16098] loop5: detected capacity change from 0 to 1024 [ 744.206405][ T2238] Bluetooth: hci0: command 0x0406 tx timeout [ 744.292470][ T26] kauditd_printk_skb: 33 callbacks suppressed [ 744.292486][ T26] audit: type=1326 audit(1743774004.918:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16093 comm="syz.5.2768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f80f48cadca code=0x7ffc0000 [ 744.417882][ T26] audit: type=1326 audit(1743774004.918:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16093 comm="syz.5.2768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f80f48cadca code=0x7ffc0000 [ 744.426773][T16098] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 744.541276][T16098] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 744.585118][ T26] audit: type=1326 audit(1743774005.038:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16093 comm="syz.5.2768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f80f48ca9d7 code=0x7ffc0000 [ 744.639000][T16098] EXT4-fs error (device loop5): ext4_get_journal_inode:5160: comm syz.5.2768: inode #1: comm syz.5.2768: iget: illegal inode # [ 744.697474][T16127] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2775'. [ 745.082037][T16098] EXT4-fs (loop5): no journal found [ 745.088269][T16127] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 745.088492][T16098] EXT4-fs (loop5): can't get journal size [ 745.115417][T16127] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 745.129199][T16098] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a80ce11c, mo2=0002] [ 745.156557][T16098] EXT4-fs (loop5): failed to initialize system zone (-22) [ 745.163808][T16098] EXT4-fs (loop5): mount failed [ 745.177969][ T26] audit: type=1326 audit(1743774005.038:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16093 comm="syz.5.2768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f80f48cd90a code=0x7ffc0000 [ 745.286790][ T26] audit: type=1326 audit(1743774005.918:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16093 comm="syz.5.2768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f80f48caad0 code=0x7ffc0000 [ 745.418339][ T26] audit: type=1326 audit(1743774005.948:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16093 comm="syz.5.2768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f80f48cbd6b code=0x7ffc0000 [ 745.589982][ T26] audit: type=1326 audit(1743774006.058:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16093 comm="syz.5.2768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f80f48cadca code=0x7ffc0000 [ 745.612317][ T26] audit: type=1326 audit(1743774006.058:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16093 comm="syz.5.2768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80f48cc169 code=0x7ffc0000 [ 745.668737][ T26] audit: type=1326 audit(1743774006.088:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16093 comm="syz.5.2768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80f48cc169 code=0x7ffc0000 [ 746.445387][ T26] audit: type=1326 audit(1743774006.268:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16093 comm="syz.5.2768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f80f48cc169 code=0x7ffc0000 [ 749.107132][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 750.314250][T16171] Invalid option length (1081) for dns_resolver key [ 752.383892][T16189] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2792'. [ 752.654468][T16191] overlayfs: failed to clone upperpath [ 752.854244][T16196] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2795'. [ 760.591462][T16297] loop1: detected capacity change from 0 to 512 [ 761.242861][T16297] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 761.398455][T16297] ext4 filesystem being mounted at /77/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 766.039894][T16387] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2845'. [ 766.066213][T16387] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2845'. [ 767.956003][T16387] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2845'. [ 768.846974][T16408] kvm [16406]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0xcf [ 769.088942][T16408] kvm [16406]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x2d [ 771.348016][ T5524] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 773.115684][ T5524] usb 6-1: Using ep0 maxpacket: 8 [ 773.278324][ T5524] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 773.307933][ T5524] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 773.317525][ T5524] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 773.528050][ T5524] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 774.898123][ T5524] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 774.907210][ T5524] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 774.941882][ T5524] usb 6-1: can't set config #1, error -71 [ 775.242742][ T5524] usb 6-1: USB disconnect, device number 8 [ 775.274759][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 775.274774][ T26] audit: type=1326 audit(1743774035.895:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16488 comm="syz.4.2871" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f76eca90169 code=0x0 [ 775.330212][T16492] libceph: resolve '. [ 775.330212][T16492] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 775.330212][T16492] ' (ret=-3): failed [ 775.937728][T16498] loop5: detected capacity change from 0 to 512 [ 776.121308][T16498] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 776.172193][T16498] EXT4-fs error (device loop5): ext4_orphan_get:1401: inode #15: comm syz.5.2875: iget: bad extended attribute block 512 [ 776.229542][T16507] netlink: 'syz.4.2878': attribute type 2 has an invalid length. [ 776.243193][T16498] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.2875: couldn't read orphan inode 15 (err -117) [ 776.295064][T16498] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 776.378516][T16503] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2877'. [ 777.535403][T16516] device vlan2 entered promiscuous mode [ 777.675471][T16516] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2880'. [ 778.866979][T16516] device hsr_slave_1 left promiscuous mode [ 778.951394][T16536] netlink: 'syz.6.2885': attribute type 5 has an invalid length. [ 778.977591][T16537] loop1: detected capacity change from 0 to 4096 [ 779.101807][T16537] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 779.118706][T16537] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 779.146723][T16537] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 779.183634][T16537] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 779.208755][T16537] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 779.234452][T16537] ntfs: volume version 3.1. [ 779.248137][T16537] ntfs: (device loop1): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 779.273574][T16537] ntfs: (device loop1): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 779.322754][T16537] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 779.358514][T16537] ntfs: (device loop1): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 781.976843][T16567] x_tables: duplicate entry at hook 1 [ 784.207126][T16603] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2904'. [ 784.216527][T16603] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2904'. [ 784.940693][T16606] loop1: detected capacity change from 0 to 512 [ 785.023880][T16606] EXT4-fs (loop1): Unrecognized mount option "defcontext=sysadm_u" or missing value [ 786.107975][T16618] xt_CT: No such helper "netbios-ns" [ 788.285433][T16645] loop1: detected capacity change from 0 to 512 [ 788.503865][T16645] EXT4-fs (loop1): Ignoring removed oldalloc option [ 788.537621][T16645] EXT4-fs (loop1): Ignoring removed nobh option [ 789.781822][T16645] EXT4-fs (loop1): mounted filesystem without journal. Opts: oldalloc,resgid=0x0000000000000000,errors=remount-ro,nobh,delalloc,. Quota mode: writeback. [ 791.947912][T16645] ext4 filesystem being mounted at /97/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 792.595525][T16678] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2928'. [ 792.596842][T16675] delete_channel: no stack [ 792.627209][T16678] device macvtap1 entered promiscuous mode [ 792.637824][T16678] device bond0 entered promiscuous mode [ 792.656785][T16678] device wlan1 entered promiscuous mode [ 792.849691][T16678] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 793.362674][T16679] device bond0 left promiscuous mode [ 793.425184][T16679] device wlan1 left promiscuous mode [ 793.561948][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 793.561963][ T26] audit: type=1326 audit(1743774054.182:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16689 comm="syz.5.2931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80f48cc169 code=0x7ffc0000 [ 795.545084][T16704] xt_connbytes: Forcing CT accounting to be enabled [ 795.552327][T16704] xt_bpf: check failed: parse error [ 795.707888][ T26] audit: type=1326 audit(1743774054.182:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16689 comm="syz.5.2931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f80f48cc169 code=0x7ffc0000 [ 795.830442][ T26] audit: type=1326 audit(1743774054.182:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16689 comm="syz.5.2931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80f48cc169 code=0x7ffc0000 [ 795.951640][ T26] audit: type=1326 audit(1743774054.182:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16689 comm="syz.5.2931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7f80f48cc169 code=0x7ffc0000 [ 795.977437][ T26] audit: type=1326 audit(1743774054.182:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16689 comm="syz.5.2931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80f48cc169 code=0x7ffc0000 [ 796.001099][ T26] audit: type=1326 audit(1743774054.182:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16689 comm="syz.5.2931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f80f48cc169 code=0x7ffc0000 [ 796.697553][T16715] delete_channel: no stack [ 796.717511][ T26] audit: type=1326 audit(1743774054.182:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16689 comm="syz.5.2931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80f48cc169 code=0x7ffc0000 [ 796.820945][ T26] audit: type=1326 audit(1743774054.182:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16689 comm="syz.5.2931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f80f48caad0 code=0x7ffc0000 [ 796.846851][ T26] audit: type=1326 audit(1743774054.182:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16689 comm="syz.5.2931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80f48cc169 code=0x7ffc0000 [ 796.870170][ T26] audit: type=1326 audit(1743774054.182:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16689 comm="syz.5.2931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f80f48cc169 code=0x7ffc0000 [ 798.830937][ T26] kauditd_printk_skb: 18 callbacks suppressed [ 798.830956][ T26] audit: type=1326 audit(1743774059.262:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16739 comm="syz.5.2945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80f48cc169 code=0x7ffc0000 [ 799.030315][T16741] loop5: detected capacity change from 0 to 4096 [ 799.116358][ T26] audit: type=1326 audit(1743774059.372:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16739 comm="syz.5.2945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80f48cc169 code=0x7ffc0000 [ 799.197608][T16741] ntfs: (device loop5): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 799.271278][T16757] netlink: 'syz.6.2950': attribute type 4 has an invalid length. [ 799.285676][T16741] ntfs: (device loop5): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 799.484163][T16741] ntfs: (device loop5): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 800.596438][T16741] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 800.714034][T16769] libceph: resolve '. [ 800.714034][T16769] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 800.714034][T16769] ' (ret=-3): failed [ 801.104140][T16741] ntfs: (device loop5): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 801.119118][T16741] ntfs: volume version 3.1. [ 801.136355][T16741] ntfs: (device loop5): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 802.972284][T16741] ntfs: (device loop5): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 803.280009][T16741] ntfs: (device loop5): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 803.641941][T16788] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 806.440238][T16815] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2964'. [ 808.857577][T16836] device vlan3 entered promiscuous mode [ 808.863254][T16836] device veth1_to_batadv entered promiscuous mode [ 809.115072][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.850300][T16836] device veth1_to_batadv left promiscuous mode [ 811.751375][T16856] overlayfs: failed to clone upperpath [ 819.466503][T16918] loop1: detected capacity change from 0 to 1024 [ 819.479559][T16922] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 821.232293][T16918] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 821.854467][T16917] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 821.872004][T16917] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 821.884328][T16917] EXT4-fs (loop1): This should not happen!! Data will be lost [ 821.884328][T16917] [ 821.894029][T16917] EXT4-fs (loop1): Total free blocks count 0 [ 821.900020][T16917] EXT4-fs (loop1): Free/Dirty block details [ 821.905964][T16917] EXT4-fs (loop1): free_blocks=68451041280 [ 821.911862][T16917] EXT4-fs (loop1): dirty_blocks=16 [ 821.917089][T16917] EXT4-fs (loop1): Block reservation details [ 821.923072][T16917] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 823.456469][T16980] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3011'. [ 823.523984][T16980] device bond_slave_0 entered promiscuous mode [ 823.530280][T16980] device bond_slave_1 entered promiscuous mode [ 823.536550][T16980] device vxlan0 entered promiscuous mode [ 823.574439][T16980] device macvtap1 entered promiscuous mode [ 823.580364][T16980] device bond0 entered promiscuous mode [ 823.588945][T16980] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 823.629650][T16982] device bond0 left promiscuous mode [ 823.649378][T16982] device bond_slave_0 left promiscuous mode [ 823.655381][T16982] device bond_slave_1 left promiscuous mode [ 823.661442][T16982] device vxlan0 left promiscuous mode [ 824.224851][T16992] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3013'. [ 827.517263][T17044] xt_nfacct: accounting object `syz1' does not exists [ 828.833105][T17063] overlayfs: failed to clone upperpath [ 832.350426][T17116] overlayfs: failed to clone upperpath [ 837.968920][T17190] xt_nfacct: accounting object `syz1' does not exists [ 839.748098][T17202] loop1: detected capacity change from 0 to 16 [ 840.794270][T17202] erofs: (device loop1): mounted with root inode @ nid 36. [ 844.554192][T17247] x_tables: duplicate underflow at hook 2 [ 850.076183][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 850.076199][ T26] audit: type=1804 audit(1743774110.686:772): pid=17275 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.3103" name="/newroot/176/file1" dev="fuse" ino=1 res=1 errno=0 [ 850.793829][ T26] audit: type=1800 audit(1743774110.956:773): pid=17275 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3103" name="/" dev="fuse" ino=1 res=0 errno=0 [ 853.239968][T17343] netlink: 'syz.5.3119': attribute type 8 has an invalid length. [ 853.248122][T17343] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3119'. [ 855.799045][T17370] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3128'. [ 858.005590][T17403] ip6gretap0 speed is unknown, defaulting to 1000 [ 858.223636][T17403] ip6gretap0 speed is unknown, defaulting to 1000 [ 858.251285][T17403] ip6gretap0 speed is unknown, defaulting to 1000 [ 858.468368][T17410] device ip6gretap0 entered promiscuous mode [ 858.910747][T17414] loop1: detected capacity change from 0 to 256 [ 858.941670][T17403] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 859.007237][T17403] ip6gretap0 speed is unknown, defaulting to 1000 [ 859.053319][T17403] ip6gretap0 speed is unknown, defaulting to 1000 [ 859.073307][T17403] ip6gretap0 speed is unknown, defaulting to 1000 [ 859.133654][T17403] ip6gretap0 speed is unknown, defaulting to 1000 [ 859.182406][T17403] ip6gretap0 speed is unknown, defaulting to 1000 [ 859.222994][T17412] loop1: detected capacity change from 0 to 512 [ 859.230491][T17403] ip6gretap0 speed is unknown, defaulting to 1000 [ 859.256116][T17403] ip6gretap0 speed is unknown, defaulting to 1000 [ 859.677165][T17429] bridge0: port 1(vlan3) entered blocking state [ 859.724704][T17429] bridge0: port 1(vlan3) entered disabled state [ 859.846127][T17429] device wlan1 entered promiscuous mode [ 859.856339][T17429] bridge0: port 1(vlan3) entered blocking state [ 859.862687][T17429] bridge0: port 1(vlan3) entered forwarding state [ 860.878766][T17444] delete_channel: no stack [ 863.855961][T17511] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3180'. [ 870.144734][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 874.075796][T17600] device wg2 entered promiscuous mode [ 875.820262][T17625] netlink: 64985 bytes leftover after parsing attributes in process `syz.4.3212'. [ 877.393273][T17653] mkiss: ax0: crc mode is auto. [ 879.626905][T17665] overlayfs: failed to clone upperpath [ 879.890601][T17654] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3223'. [ 880.075520][T17654] syz.4.3223 (17654) used greatest stack depth: 17816 bytes left [ 880.079459][T17670] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3227'. [ 880.187516][ C1] vcan0: j1939_tp_rxtimer: 0xffff888061b99800: rx timeout, send abort [ 882.451156][T17708] sctp: [Deprecated]: syz.4.3236 (pid 17708) Use of struct sctp_assoc_value in delayed_ack socket option. [ 882.451156][T17708] Use struct sctp_sack_info instead [ 897.877569][T17898] loop5: detected capacity change from 0 to 1024 [ 898.112345][T17901] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3297'. [ 903.115551][T17961] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3311'. [ 905.373930][T17990] netlink: 'syz.5.3324': attribute type 12 has an invalid length. [ 905.445339][T17991] overlayfs: failed to clone upperpath [ 911.114406][ C1] hrtimer: interrupt took 46691 ns [ 912.714369][T18054] binder: 18045:18054 ioctl c0306201 200000000680 returned -14 [ 913.241404][T18076] loop5: detected capacity change from 0 to 4096 [ 914.163589][T18083] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 914.191890][T18090] device  entered promiscuous mode [ 917.035265][T18111] overlayfs: failed to clone upperpath [ 918.664778][T18133] lo speed is unknown, defaulting to 1000 [ 918.698941][T18133] lo speed is unknown, defaulting to 1000 [ 918.714317][T18133] lo speed is unknown, defaulting to 1000 [ 919.322211][T18133] infiniband sz1: set down [ 919.327483][T18133] infiniband sz1: added lo [ 919.359178][T18133] infiniband sz1: Couldn't open port 1 [ 919.392057][T18133] RDS/IB: sz1: added [ 919.397081][T18133] smc: adding ib device sz1 with port count 1 [ 919.403625][T18133] smc: ib device sz1 port 1 has pnetid [ 919.414546][T18133] lo speed is unknown, defaulting to 1000 [ 919.444686][ T4250] lo speed is unknown, defaulting to 1000 [ 919.465444][T18140] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 919.514081][ T2238] lo speed is unknown, defaulting to 1000 [ 919.633158][T18133] lo speed is unknown, defaulting to 1000 [ 919.728223][T18133] lo speed is unknown, defaulting to 1000 [ 919.824108][T18133] lo speed is unknown, defaulting to 1000 [ 920.732927][T18133] lo speed is unknown, defaulting to 1000 [ 920.910104][T18133] lo speed is unknown, defaulting to 1000 [ 921.004518][T18133] lo speed is unknown, defaulting to 1000 [ 921.153545][T18157] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3373'. [ 925.959084][T18223] netlink: 'syz.5.3390': attribute type 5 has an invalid length. [ 929.063121][T18253] device erspan1 entered promiscuous mode [ 931.589354][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 934.420082][T18316] ip6gretap0 speed is unknown, defaulting to 1000 [ 934.430166][T18316] lo speed is unknown, defaulting to 1000 [ 941.389211][T18408] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3450'. [ 944.207059][T18425] MPTCP: kernel_bind error, err=-99 [ 950.362817][T18471] batman_adv: batadv0: Adding interface: dummy0 [ 950.407290][T18471] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 950.566333][T18471] batman_adv: batadv0: Interface activated: dummy0 [ 950.626108][T18472] batadv0: mtu less than device minimum [ 950.838145][T18472] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 950.851758][T18472] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 950.864267][T18472] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 950.876812][T18472] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 950.889296][T18472] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 950.902017][T18472] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 950.914510][T18472] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 950.927651][T18472] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 950.940174][T18472] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 951.807828][T18474] tipc: Started in network mode [ 951.812726][T18474] tipc: Node identity 4, cluster identity 4711 [ 951.847318][T18474] tipc: Node number set to 4 [ 952.055196][T18493] batman_adv: batadv0: Adding interface: dummy0 [ 952.217735][T18493] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 952.263716][T18493] batman_adv: batadv0: Interface activated: dummy0 [ 952.272569][T18499] netlink: 71 bytes leftover after parsing attributes in process `syz.6.3474'. [ 960.404649][T18619] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 962.625449][T18636] netlink: 'syz.0.3510': attribute type 5 has an invalid length. [ 962.802449][T18638] loop5: detected capacity change from 0 to 512 [ 963.184728][T18638] EXT4-fs error (device loop5): ext4_orphan_get:1401: inode #15: comm syz.5.3511: casefold flag without casefold feature [ 963.464551][T18638] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.3511: couldn't read orphan inode 15 (err -117) [ 963.761762][T18638] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 967.693101][T18691] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3527'. [ 969.863219][T18733] io-wq is not configured for unbound workers [ 969.883672][T18735] overlayfs: failed to clone upperpath [ 969.906366][T18730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 969.920084][T18730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 969.931664][T18730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 969.942156][T18730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 970.122636][T18742] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 970.143055][T18742] SET target dimension over the limit! [ 970.911880][T18753] netlink: 71 bytes leftover after parsing attributes in process `syz.4.3547'. [ 971.449998][T18769] netlink: 'syz.6.3549': attribute type 5 has an invalid length. [ 971.896836][T18777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 972.015639][T18777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 972.278633][T18777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 972.439355][T18777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 972.642951][T18785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 972.694186][T18778] ALSA: mixer_oss: invalid OSS volume '' [ 972.708151][T18785] bond0: (slave rose0): Enslaving as an active interface with an up link [ 972.731108][ T5676] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 972.856599][T18801] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3561'. [ 987.169357][T19007] gfs2: path_lookup on /dev/net/tun returned error -2 [ 990.647679][T19066] overlayfs: failed to clone upperpath [ 992.681774][T19090] loop5: detected capacity change from 0 to 256 [ 994.854796][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 995.141040][T19090] FAT-fs (loop5): Directory bread(block 64) failed [ 995.307651][T19090] FAT-fs (loop5): Directory bread(block 65) failed [ 995.365670][T19090] FAT-fs (loop5): Directory bread(block 66) failed [ 995.418753][T19090] FAT-fs (loop5): Directory bread(block 67) failed [ 995.599301][T19090] FAT-fs (loop5): Directory bread(block 68) failed [ 995.746702][T19090] FAT-fs (loop5): Directory bread(block 69) failed [ 996.022161][T19090] FAT-fs (loop5): Directory bread(block 70) failed [ 996.032504][T19090] FAT-fs (loop5): Directory bread(block 71) failed [ 996.069860][T19090] FAT-fs (loop5): Directory bread(block 72) failed [ 996.092229][T19090] FAT-fs (loop5): Directory bread(block 73) failed [ 999.400616][T19153] overlayfs: missing 'lowerdir' [ 1004.943022][T19232] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3685'. [ 1004.952020][T19232] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3685'. [ 1004.961137][T19232] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3685'. [ 1012.084076][T19285] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3703'. [ 1012.220922][T19285] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3703'. [ 1012.559613][T19293] overlayfs: failed to clone upperpath [ 1014.809276][T19322] overlayfs: failed to clone upperpath [ 1015.407368][T19333] overlayfs: failed to clone upperpath [ 1017.701349][T19359] netlink: 'syz.6.3724': attribute type 5 has an invalid length. [ 1021.127136][T19382] overlayfs: failed to clone upperpath [ 1022.210700][T19412] netlink: 'syz.6.3738': attribute type 5 has an invalid length. [ 1022.953877][ T26] audit: type=1326 audit(1743774283.488:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19421 comm="syz.1.3744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41b6f38169 code=0x7ffc0000 [ 1023.067433][T19425] overlayfs: failed to clone upperpath [ 1023.171129][T19431] loop5: detected capacity change from 0 to 512 [ 1023.178136][ T26] audit: type=1326 audit(1743774283.488:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19421 comm="syz.1.3744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41b6f38169 code=0x7ffc0000 [ 1023.478954][T19436] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1023.488558][T19436] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 1023.496561][T19436] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 1023.503933][T19436] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 1023.511693][T19436] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 1023.519374][T19436] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 1023.527317][T19436] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 1023.537356][T19436] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1023.633538][ T26] audit: type=1326 audit(1743774283.488:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19421 comm="syz.1.3744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f41b6f38169 code=0x7ffc0000 [ 1023.848358][ T26] audit: type=1326 audit(1743774283.488:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19421 comm="syz.1.3744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41b6f38169 code=0x7ffc0000 [ 1023.870801][ T26] audit: type=1326 audit(1743774283.488:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19421 comm="syz.1.3744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41b6f38169 code=0x7ffc0000 [ 1023.912120][ T26] audit: type=1326 audit(1743774283.488:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19421 comm="syz.1.3744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f41b6f38169 code=0x7ffc0000 [ 1024.014959][ T26] audit: type=1326 audit(1743774283.488:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19421 comm="syz.1.3744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41b6f38169 code=0x7ffc0000 [ 1024.281161][T19443] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3751'. [ 1024.376997][T19431] EXT4-fs error (device loop5): ext4_orphan_get:1401: inode #15: comm syz.5.3747: casefold flag without casefold feature [ 1024.565844][T19431] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.3747: couldn't read orphan inode 15 (err -117) [ 1024.670201][ T26] audit: type=1326 audit(1743774283.488:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19421 comm="syz.1.3744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41b6f38169 code=0x7ffc0000 [ 1024.719032][T19443] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1024.766822][ T26] audit: type=1326 audit(1743774283.488:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19421 comm="syz.1.3744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f41b6f38169 code=0x7ffc0000 [ 1024.789430][T19431] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 1024.807435][ T26] audit: type=1326 audit(1743774283.488:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19421 comm="syz.1.3744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41b6f38169 code=0x7ffc0000 [ 1026.365297][T19462] netlink: 'syz.1.3756': attribute type 5 has an invalid length. [ 1029.361783][T19493] loop5: detected capacity change from 0 to 512 [ 1029.875946][T19506] netlink: 'syz.6.3769': attribute type 5 has an invalid length. [ 1030.104627][T19493] EXT4-fs error (device loop5): ext4_orphan_get:1401: inode #15: comm syz.5.3766: casefold flag without casefold feature [ 1030.126408][T19493] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.3766: couldn't read orphan inode 15 (err -117) [ 1030.175835][T19493] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 1035.760513][T19561] netlink: 'syz.5.3783': attribute type 5 has an invalid length. [ 1036.344760][T19568] overlayfs: failed to clone upperpath [ 1042.255002][T19629] overlayfs: failed to clone upperpath [ 1042.937711][T19635] ip6gretap0 speed is unknown, defaulting to 1000 [ 1042.945061][T19635] lo speed is unknown, defaulting to 1000 [ 1045.536235][T19665] netlink: 892 bytes leftover after parsing attributes in process `syz.4.3815'. [ 1046.425928][T19679] tipc: Started in network mode [ 1046.430902][T19679] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 1046.439841][T19679] tipc: Enabling of bearer rejected, failed to enable media [ 1047.665077][T19680] ip6gretap0 speed is unknown, defaulting to 1000 [ 1047.665995][T19680] lo speed is unknown, defaulting to 1000 [ 1048.353135][T19695] loop5: detected capacity change from 0 to 1024 [ 1049.931663][T19705] netlink: 'syz.0.3825': attribute type 9 has an invalid length. [ 1049.952129][T19639] hfsplus: b-tree write err: -5, ino 4 [ 1050.057672][T19709] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3827'. [ 1052.155528][T19740] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3834'. [ 1052.188647][T19741] loop5: detected capacity change from 0 to 512 [ 1053.096698][T19741] EXT4-fs error (device loop5): ext4_orphan_get:1401: inode #15: comm syz.5.3837: casefold flag without casefold feature [ 1053.158681][T19741] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.3837: couldn't read orphan inode 15 (err -117) [ 1053.188623][T19741] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 1054.585606][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 1057.575375][T19811] overlayfs: failed to clone upperpath [ 1061.891917][ T26] kauditd_printk_skb: 10 callbacks suppressed [ 1061.891936][ T26] audit: type=1326 audit(1743774321.924:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19838 comm="syz.0.3862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c18256169 code=0x7ffc0000 [ 1062.006536][T19844] loop5: detected capacity change from 0 to 128 [ 1062.088851][ T26] audit: type=1326 audit(1743774321.924:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19838 comm="syz.0.3862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c18256169 code=0x7ffc0000 [ 1062.179791][ T26] audit: type=1326 audit(1743774321.924:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19838 comm="syz.0.3862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1c18256169 code=0x7ffc0000 [ 1062.428093][ T26] audit: type=1326 audit(1743774321.924:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19838 comm="syz.0.3862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c18256169 code=0x7ffc0000 [ 1062.859833][T19844] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 1063.223192][T19844] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1063.558432][ T26] audit: type=1326 audit(1743774321.924:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19838 comm="syz.0.3862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c18256169 code=0x7ffc0000 [ 1063.750184][T19858] overlayfs: failed to clone upperpath [ 1064.449174][ T26] audit: type=1326 audit(1743774321.924:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19838 comm="syz.0.3862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f1c18256169 code=0x7ffc0000 [ 1064.479105][ T26] audit: type=1326 audit(1743774321.924:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19838 comm="syz.0.3862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c18256169 code=0x7ffc0000 [ 1064.513602][ T26] audit: type=1326 audit(1743774321.924:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19838 comm="syz.0.3862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c18256169 code=0x7ffc0000 [ 1064.545186][ T26] audit: type=1326 audit(1743774321.924:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19838 comm="syz.0.3862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f1c18256169 code=0x7ffc0000 [ 1064.663631][ T26] audit: type=1326 audit(1743774321.934:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19838 comm="syz.0.3862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c18256169 code=0x7ffc0000 [ 1066.901880][T19884] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1068.675716][T19900] loop5: detected capacity change from 0 to 512 [ 1069.157170][T19900] EXT4-fs error (device loop5): ext4_orphan_get:1401: inode #15: comm syz.5.3879: casefold flag without casefold feature [ 1069.196339][T19900] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.3879: couldn't read orphan inode 15 (err -117) [ 1069.286891][T19900] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 1075.299584][T19969] overlayfs: failed to clone upperpath [ 1080.573159][T20012] overlayfs: failed to clone upperpath [ 1081.583353][T20026] overlayfs: failed to clone upperpath [ 1082.596092][T20032] overlayfs: failed to clone upperpath [ 1083.713467][T20059] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3923'. [ 1084.599612][T20071] overlayfs: failed to clone upperpath [ 1086.194522][T20092] overlayfs: failed to clone upperpath [ 1087.542574][T20108] overlayfs: failed to clone upperpath [ 1090.522887][T20133] overlayfs: failed to clone upperpath [ 1090.905313][T20145] loop5: detected capacity change from 0 to 512 [ 1090.948020][T20147] 9pnet_virtio: no channels available for device syz [ 1091.200871][T20151] ptrace attach of "./syz-executor exec"[4171] was attempted by ""[20151] [ 1091.808592][T20145] EXT4-fs error (device loop5): ext4_orphan_get:1401: inode #15: comm syz.5.3950: casefold flag without casefold feature [ 1091.860425][T20145] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.3950: couldn't read orphan inode 15 (err -117) [ 1091.942328][T20145] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 1096.517061][T20217] overlayfs: failed to clone upperpath [ 1099.220170][T20246] overlayfs: failed to clone upperpath [ 1103.941132][T20289] batman_adv: batadv0: Adding interface: dummy0 [ 1103.947852][T20289] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1103.982060][T20289] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 1106.258539][T20300] loop5: detected capacity change from 0 to 2048 [ 1106.266321][T20300] UDF-fs: bad mount option "anchor=00000000002147483649" or missing value [ 1106.659003][T20304] overlayfs: failed to clone upperpath [ 1106.826169][T20306] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1107.906474][T20322] netlink: 'syz.6.4000': attribute type 7 has an invalid length. [ 1107.924791][T20322] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4000'. [ 1108.916053][T20329] Cannot find del_set index 4 as target [ 1109.218518][T20327] syz.5.3999 uses old SIOCAX25GETINFO [ 1110.604887][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 1110.604903][ T26] audit: type=1326 audit(1743774370.499:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20333 comm="syz.1.4003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41b6f38169 code=0x7ffc0000 [ 1110.971876][ T26] audit: type=1326 audit(1743774370.499:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20333 comm="syz.1.4003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41b6f38169 code=0x7ffc0000 [ 1111.004180][ T26] audit: type=1326 audit(1743774370.509:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20333 comm="syz.1.4003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f41b6f38169 code=0x7ffc0000 [ 1111.033881][ T26] audit: type=1326 audit(1743774370.509:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20333 comm="syz.1.4003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41b6f38169 code=0x7ffc0000 [ 1111.230336][ T26] audit: type=1326 audit(1743774370.509:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20333 comm="syz.1.4003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41b6f38169 code=0x7ffc0000 [ 1111.277905][ T26] audit: type=1326 audit(1743774370.519:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20333 comm="syz.1.4003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f41b6f38169 code=0x7ffc0000 [ 1111.307614][ T26] audit: type=1326 audit(1743774370.519:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20333 comm="syz.1.4003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41b6f38169 code=0x7ffc0000 [ 1111.386852][T20356] overlayfs: failed to clone upperpath [ 1111.404286][ T26] audit: type=1326 audit(1743774370.519:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20333 comm="syz.1.4003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41b6f38169 code=0x7ffc0000 [ 1111.444718][ T26] audit: type=1326 audit(1743774370.519:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20333 comm="syz.1.4003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f41b6f38169 code=0x7ffc0000 [ 1111.468225][ T26] audit: type=1326 audit(1743774370.519:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20333 comm="syz.1.4003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41b6f38169 code=0x7ffc0000 [ 1113.308112][T20368] ip6gretap0 speed is unknown, defaulting to 1000 [ 1113.326880][T20368] lo speed is unknown, defaulting to 1000 [ 1114.972356][T20383] netlink: 'syz.0.4015': attribute type 1 has an invalid length. [ 1114.994370][T20383] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4015'. [ 1115.955069][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 1117.879331][T20425] loop5: detected capacity change from 0 to 512 [ 1118.374286][T20425] EXT4-fs error (device loop5): ext4_orphan_get:1401: inode #15: comm syz.5.4028: casefold flag without casefold feature [ 1118.614745][T20425] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.4028: couldn't read orphan inode 15 (err -117) [ 1118.657222][T20425] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 1122.146969][T20478] loop5: detected capacity change from 0 to 512 [ 1123.048431][T20478] EXT4-fs error (device loop5): ext4_orphan_get:1401: inode #15: comm syz.5.4045: casefold flag without casefold feature [ 1123.109535][T20478] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.4045: couldn't read orphan inode 15 (err -117) [ 1123.635828][T20478] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 1233.135493][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1233.142574][ C1] rcu: 0-...!: (1 GPs behind) idle=f2f/1/0x4000000000000000 softirq=57724/57729 fqs=31 [ 1233.155009][ C1] (detected by 1, t=10505 jiffies, g=70301, q=552) [ 1233.161641][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1233.166853][ C0] NMI backtrace for cpu 0 [ 1233.166863][ C0] CPU: 0 PID: 20554 Comm: syz.1.4067 Not tainted 5.15.179-syzkaller #0 [ 1233.166878][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1233.166887][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x7c/0x80 [ 1233.166913][ C0] Code: 8d 42 28 4c 39 d0 77 22 89 f8 89 f6 48 c7 44 0a 08 05 00 00 00 48 89 44 0a 10 48 89 74 0a 18 4c 89 44 0a 20 49 ff c1 4c 89 09 0f 1f 00 4c 8b 04 24 65 48 8b 0d 14 cf 81 7e 65 8b 05 15 cf 81 [ 1233.166931][ C0] RSP: 0018:ffffc90000007cb8 EFLAGS: 00000006 [ 1233.166944][ C0] RAX: 0000000000010000 RBX: 0000000000000001 RCX: ffff888069f9bb80 [ 1233.166954][ C0] RDX: ffff888069f9bb80 RSI: 0000000000000001 RDI: 0000000000000000 [ 1233.166963][ C0] RBP: ffff88807d72eae8 R08: ffffffff888d2b3b R09: 0000000000000003 [ 1233.166972][ C0] R10: ffffffffffffffff R11: dffffc0000000001 R12: ffff88807d72e800 [ 1233.166982][ C0] R13: ffff88807d72eb40 R14: dffffc0000000000 R15: ffff88807d72eb28 [ 1233.166992][ C0] FS: 00007f41b4d806c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1233.167005][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1233.167015][ C0] CR2: 000000110c26086b CR3: 00000000655a8000 CR4: 00000000003506f0 [ 1233.167028][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1233.167036][ C0] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1233.167044][ C0] Call Trace: [ 1233.167050][ C0] [ 1233.167058][ C0] ? nmi_cpu_backtrace+0x39f/0x4a0 [ 1233.167074][ C0] ? read_lock_is_recursive+0x10/0x10 [ 1233.167090][ C0] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 1233.167104][ C0] ? unknown_nmi_error+0xd0/0xd0 [ 1233.167125][ C0] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 1233.167141][ C0] ? nmi_handle+0xf7/0x370 [ 1233.167156][ C0] ? __sanitizer_cov_trace_const_cmp4+0x7c/0x80 [ 1233.167172][ C0] ? default_do_nmi+0x62/0x150 [ 1233.167189][ C0] ? exc_nmi+0xa8/0x100 [ 1233.167202][ C0] ? end_repeat_nmi+0x16/0x31 [ 1233.167219][ C0] ? advance_sched+0x12b/0x940 [ 1233.167236][ C0] ? __sanitizer_cov_trace_const_cmp4+0x7c/0x80 [ 1233.167252][ C0] ? __sanitizer_cov_trace_const_cmp4+0x7c/0x80 [ 1233.167269][ C0] ? __sanitizer_cov_trace_const_cmp4+0x7c/0x80 [ 1233.167290][ C0] [ 1233.167294][ C0] [ 1233.167297][ C0] advance_sched+0x12b/0x940 [ 1233.167313][ C0] ? _raw_spin_unlock+0x40/0x40 [ 1233.167328][ C0] ? taprio_free_sched_cb+0x1a0/0x1a0 [ 1233.167343][ C0] __hrtimer_run_queues+0x598/0xcf0 [ 1233.167366][ C0] ? hrtimer_interrupt+0x980/0x980 [ 1233.167379][ C0] ? ktime_get_update_offsets_now+0x407/0x420 [ 1233.167397][ C0] hrtimer_interrupt+0x392/0x980 [ 1233.167421][ C0] __sysvec_apic_timer_interrupt+0x13b/0x4b0 [ 1233.167436][ C0] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 1233.167454][ C0] [ 1233.167458][ C0] [ 1233.167463][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1233.167477][ C0] RIP: 0010:kasan_check_range+0x81/0x290 [ 1233.167492][ C0] Code: df 4f 8d 34 1a 4c 89 f5 4c 29 cd 48 83 fd 10 7f 26 48 85 ed 0f 84 3a 01 00 00 49 f7 d2 49 01 da 41 80 39 00 0f 85 c4 01 00 00 <49> ff c1 49 ff c2 75 ee e9 1d 01 00 00 45 89 cf 41 83 e7 07 0f 84 [ 1233.167504][ C0] RSP: 0018:ffffc90002937a38 EFLAGS: 00000246 [ 1233.167516][ C0] RAX: ffffffff884d8e01 RBX: 1ffff92000526f68 RCX: ffffffff884d8e74 [ 1233.167526][ C0] RDX: 0000000000000001 RSI: 0000000000000080 RDI: ffffc90002937b40 [ 1233.167535][ C0] RBP: 0000000000000010 R08: dffffc0000000000 R09: fffff52000526f68 [ 1233.167544][ C0] R10: fffffffffffffff0 R11: dffffc0000000001 R12: ffffc90002937be0 [ 1233.167554][ C0] R13: dffffc0000000000 R14: fffff52000526f78 R15: ffffc90002937b40 [ 1233.167567][ C0] ? ___sys_recvmsg+0x51/0x690 [ 1233.167582][ C0] ? ___sys_recvmsg+0xc4/0x690 [ 1233.167600][ C0] memset+0x1f/0x40 [ 1233.167614][ C0] ___sys_recvmsg+0xc4/0x690 [ 1233.167631][ C0] ? __sys_recvmsg+0x260/0x260 [ 1233.167653][ C0] ? __might_sleep+0xc0/0xc0 [ 1233.167672][ C0] ? __might_fault+0xb4/0x110 [ 1233.167690][ C0] do_recvmmsg+0x36f/0x8f0 [ 1233.167709][ C0] ? __sys_recvmmsg+0x270/0x270 [ 1233.167729][ C0] ? __lock_acquire+0x1ff0/0x1ff0 [ 1233.167741][ C0] ? fd_install+0x2b1/0x4c0 [ 1233.167762][ C0] __x64_sys_recvmmsg+0x195/0x240 [ 1233.167778][ C0] ? do_recvmmsg+0x8f0/0x8f0 [ 1233.167793][ C0] ? syscall_enter_from_user_mode+0x2e/0x240 [ 1233.167806][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 1233.167822][ C0] ? syscall_enter_from_user_mode+0x2e/0x240 [ 1233.167836][ C0] do_syscall_64+0x3b/0xb0 [ 1233.167850][ C0] ? clear_bhb_loop+0x15/0x70 [ 1233.167863][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1233.167877][ C0] RIP: 0033:0x7f41b6f38169 [ 1233.167898][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1233.167909][ C0] RSP: 002b:00007f41b4d80038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1233.167923][ C0] RAX: ffffffffffffffda RBX: 00007f41b7151080 RCX: 00007f41b6f38169 [ 1233.167932][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1233.167941][ C0] RBP: 00007f41b6fb92a0 R08: 0000000000000000 R09: 0000000000000000 [ 1233.167950][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1233.167958][ C0] R13: 0000000000000000 R14: 00007f41b7151080 R15: 00007ffe4bdedc98 [ 1233.167974][ C0] [ 1233.168848][ C1] rcu: rcu_preempt kthread starved for 10335 jiffies! g70301 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1233.706278][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1233.716324][ C1] rcu: RCU grace-period kthread stack dump: [ 1233.722451][ C1] task:rcu_preempt state:R running task stack:27000 pid: 15 ppid: 2 flags:0x00004000 [ 1233.733330][ C1] Call Trace: [ 1233.736690][ C1] [ 1233.739627][ C1] __schedule+0x12c4/0x45b0 [ 1233.744154][ C1] ? _raw_spin_unlock_irqrestore+0x8b/0x130 [ 1233.750266][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 1233.756273][ C1] ? __mod_timer+0xa8e/0xeb0 [ 1233.760959][ C1] ? release_firmware_map_entry+0x190/0x190 [ 1233.767281][ C1] ? mod_timer_pending+0x20/0x20 [ 1233.772303][ C1] ? lockdep_softirqs_off+0x420/0x420 [ 1233.777678][ C1] schedule+0x11b/0x1f0 [ 1233.781833][ C1] schedule_timeout+0x1b9/0x300 [ 1233.786681][ C1] ? console_conditional_schedule+0x40/0x40 [ 1233.792665][ C1] ? update_process_times+0x200/0x200 [ 1233.798044][ C1] ? prepare_to_swait_event+0x321/0x340 [ 1233.803680][ C1] rcu_gp_fqs_loop+0x2bf/0x1080 [ 1233.808535][ C1] ? dyntick_save_progress_counter+0x230/0x230 [ 1233.814686][ C1] ? rcu_gp_init+0x1140/0x1140 [ 1233.819450][ C1] ? finish_swait+0xc5/0x1d0 [ 1233.824035][ C1] rcu_gp_kthread+0xa4/0x360 [ 1233.828627][ C1] ? _raw_spin_unlock+0x40/0x40 [ 1233.833492][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 1233.838620][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 1233.844527][ C1] ? __kthread_parkme+0x15c/0x1c0 [ 1233.849566][ C1] kthread+0x3f6/0x4f0 [ 1233.853636][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 1233.858739][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1233.863322][ C1] ret_from_fork+0x1f/0x30 [ 1233.867744][ C1] [ 1233.870752][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1233.877059][ C1] NMI backtrace for cpu 1 [ 1233.881470][ C1] CPU: 1 PID: 20580 Comm: syz.6.4078 Not tainted 5.15.179-syzkaller #0 [ 1233.889718][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1233.899919][ C1] Call Trace: [ 1233.903229][ C1] [ 1233.906079][ C1] dump_stack_lvl+0x1e3/0x2d0 [ 1233.910858][ C1] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 1233.916494][ C1] ? panic+0x860/0x860 [ 1233.920572][ C1] nmi_cpu_backtrace+0x46a/0x4a0 [ 1233.925504][ C1] ? __wake_up_klogd+0xd5/0x100 [ 1233.930353][ C1] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 1233.936498][ C1] ? _printk+0xd1/0x120 [ 1233.940656][ C1] ? cpu_online+0x1f/0x40 [ 1233.945065][ C1] ? panic+0x860/0x860 [ 1233.949138][ C1] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 1233.955427][ C1] nmi_trigger_cpumask_backtrace+0x181/0x2a0 [ 1233.961427][ C1] rcu_check_gp_kthread_starvation+0x1d2/0x240 [ 1233.967713][ C1] print_other_cpu_stall+0x137a/0x14d0 [ 1233.973208][ C1] ? print_cpu_stall+0x600/0x600 [ 1233.978157][ C1] ? __lock_acquire+0x1ff0/0x1ff0 [ 1233.983370][ C1] ? do_raw_spin_unlock+0x137/0x8b0 [ 1233.988675][ C1] rcu_sched_clock_irq+0xa38/0x1150 [ 1233.993874][ C1] ? rcutree_dead_cpu+0x20/0x20 [ 1233.998718][ C1] ? hrtimer_run_queues+0x163/0x450 [ 1234.003917][ C1] ? account_process_tick+0x232/0x3a0 [ 1234.009298][ C1] update_process_times+0x196/0x200 [ 1234.014495][ C1] tick_sched_timer+0x386/0x550 [ 1234.019434][ C1] ? tick_setup_sched_timer+0x2d0/0x2d0 [ 1234.025252][ C1] __hrtimer_run_queues+0x55b/0xcf0 [ 1234.030468][ C1] ? hrtimer_interrupt+0x980/0x980 [ 1234.035571][ C1] ? ktime_get_update_offsets_now+0x407/0x420 [ 1234.042097][ C1] hrtimer_interrupt+0x392/0x980 [ 1234.047102][ C1] __sysvec_apic_timer_interrupt+0x13b/0x4b0 [ 1234.053187][ C1] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 1234.058823][ C1] [ 1234.061749][ C1] [ 1234.064770][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1234.070744][ C1] RIP: 0010:smp_call_function_many_cond+0xaa1/0xd90 [ 1234.077330][ C1] Code: 44 89 fe 83 e6 01 31 ff e8 dc d9 0b 00 41 83 e7 01 75 07 e8 71 d6 0b 00 eb 41 f3 90 48 b8 00 00 00 00 00 fc ff df 0f b6 04 03 <84> c0 75 11 41 f7 45 00 01 00 00 00 74 1e e8 4c d6 0b 00 eb db 44 [ 1234.097197][ C1] RSP: 0018:ffffc900032af220 EFLAGS: 00000246 [ 1234.103375][ C1] RAX: 0000000000000000 RBX: 1ffff110171c8541 RCX: 0000000000080000 [ 1234.111458][ C1] RDX: ffffc90017800000 RSI: 000000000007ffff RDI: 0000000000080000 [ 1234.119618][ C1] RBP: ffffc900032af360 R08: ffffffff8174c644 R09: fffffbfff2131e1a [ 1234.127809][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 1234.135787][ C1] R13: ffff8880b8e42a08 R14: ffff8880b8f3b380 R15: 0000000000000001 [ 1234.143775][ C1] ? smp_call_function_many_cond+0xa84/0xd90 [ 1234.149770][ C1] ? flush_tlb_all+0x20/0x20 [ 1234.154359][ C1] ? smp_call_function_many+0x30/0x30 [ 1234.160031][ C1] ? do_raw_spin_lock+0x14a/0x370 [ 1234.165621][ C1] ? do_raw_spin_unlock+0x137/0x8b0 [ 1234.171371][ C1] ? flush_tlb_all+0x20/0x20 [ 1234.176338][ C1] on_each_cpu_cond_mask+0x3b/0x80 [ 1234.181483][ C1] __purge_vmap_area_lazy+0x294/0x1740 [ 1234.187200][ C1] ? cpumask_next+0xc3/0xf0 [ 1234.191970][ C1] ? purge_fragmented_blocks_allcpus+0x855/0x950 [ 1234.198726][ C1] ? purge_fragmented_blocks_allcpus+0x8da/0x950 [ 1234.205221][ C1] ? _vm_unmap_aliases+0x441/0x4e0 [ 1234.210344][ C1] ? purge_fragmented_blocks_allcpus+0x950/0x950 [ 1234.216770][ C1] _vm_unmap_aliases+0x453/0x4e0 [ 1234.221710][ C1] change_page_attr_set_clr+0x308/0x1050 [ 1234.227632][ C1] ? __set_memory_prot+0x100/0x100 [ 1234.232753][ C1] ? find_vm_area+0xf9/0x130 [ 1234.237397][ C1] ? __lock_acquire+0x1ff0/0x1ff0 [ 1234.242427][ C1] ? do_raw_spin_lock+0x14a/0x370 [ 1234.247543][ C1] set_memory_ro+0xa1/0xe0 [ 1234.252042][ C1] ? set_memory_nx+0x130/0x130 [ 1234.256888][ C1] ? _raw_spin_unlock+0x24/0x40 [ 1234.261915][ C1] bpf_int_jit_compile+0xbf36/0xc6c0 [ 1234.267480][ C1] ? emit_bpf_dispatcher+0xd90/0xd90 [ 1234.272957][ C1] ? ktime_get_with_offset+0x101/0x320 [ 1234.278410][ C1] ? seqcount_lockdep_reader_access+0x153/0x220 [ 1234.284817][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 1234.290021][ C1] ? ktime_get_real_ts64+0x460/0x460 [ 1234.295668][ C1] bpf_prog_select_runtime+0x701/0x9f0 [ 1234.301232][ C1] ? memset+0x1f/0x40 [ 1234.305670][ C1] ? bpf_obj_name_cpy+0x186/0x1d0 [ 1234.310696][ C1] bpf_prog_load+0x131c/0x1b60 [ 1234.315465][ C1] ? map_freeze+0x360/0x360 [ 1234.320378][ C1] ? __might_fault+0xb8/0x110 [ 1234.325340][ C1] ? __might_fault+0xb4/0x110 [ 1234.330016][ C1] ? bpf_lsm_bpf+0x5/0x10 [ 1234.334528][ C1] ? security_bpf+0x7d/0xa0 [ 1234.339225][ C1] __sys_bpf+0x343/0x670 [ 1234.343897][ C1] ? bpf_link_show_fdinfo+0x300/0x300 [ 1234.349275][ C1] ? syscall_enter_from_user_mode+0x2e/0x240 [ 1234.355281][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 1234.360897][ C1] __x64_sys_bpf+0x78/0x90 [ 1234.365367][ C1] do_syscall_64+0x3b/0xb0 [ 1234.370229][ C1] ? clear_bhb_loop+0x15/0x70 [ 1234.374907][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1234.380796][ C1] RIP: 0033:0x7f07c1e29169 [ 1234.385300][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1234.405103][ C1] RSP: 002b:00007f07bfc92038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1234.413620][ C1] RAX: ffffffffffffffda RBX: 00007f07c2041fa0 RCX: 00007f07c1e29169 [ 1234.421599][ C1] RDX: 0000000000000080 RSI: 0000200000000180 RDI: 0000000000000005 [ 1234.429576][ C1] RBP: 00007f07c1eaa2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1234.437801][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1234.445884][ C1] R13: 0000000000000001 R14: 00007f07c2041fa0 R15: 00007fffee832838 [ 1234.453882][ C1]