last executing test programs: 12m15.303371818s ago: executing program 0 (id=38): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000002c00)=ANY=[@ANYBLOB="b0"], 0xb0) getresuid(&(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000340)=0x0) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000280)={0xa0, 0x24, 0x0, {{0x0, 0x1, 0x5, 0x6, 0xffc, 0x6, {0x1, 0x1, 0x65d1, 0x0, 0xffffffffffff15ef, 0x3ff, 0x7, 0x7fff, 0x7, 0x2000, 0x8, r3, 0x0, 0x2, 0x10000}}, {0x0, 0x1}}}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',privport,access=', @ANYRESDEC=r3]) mount$overlay(0x0, 0x0, 0x0, 0x120080c, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x800) 12m15.182913507s ago: executing program 0 (id=39): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0xff, 0x4a6, &(0x7f0000000980)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x1320022, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x10}, 0x18) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000200)=@v1={0x0, @aes256, 0x1, @desc3}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000040)='./bus\x00', 0x322020, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, 0x0) 12m14.683769218s ago: executing program 0 (id=42): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, 0x0}], 0x1, 0x6, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000700)={"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"}) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e7d, 0x2c2e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000000000000024d564b000000000b"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12m12.043124418s ago: executing program 0 (id=56): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3f7, &(0x7f00000004c0)="$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") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) socket$alg(0x26, 0x5, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) socket$inet_sctp(0x2, 0x1, 0x84) mprotect(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) setpriority(0x0, 0x0, 0x2a14b58) ptrace$setsig(0x4203, r0, 0x80, &(0x7f00000000c0)={0x8, 0x7, 0x7}) 12m10.911944209s ago: executing program 0 (id=61): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) fsopen(&(0x7f00000000c0)='hugetlbfs\x00', 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12m10.090203734s ago: executing program 0 (id=68): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3400c0, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$igmp6(0xa, 0x3, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x74000000, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c00000010004b0400f4ed00000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028008000400000000000600060000000000060009"], 0x4c}}, 0x0) 12m9.315391686s ago: executing program 32 (id=68): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3400c0, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$igmp6(0xa, 0x3, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x74000000, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c00000010004b0400f4ed00000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028008000400000000000600060000000000060009"], 0x4c}}, 0x0) 11m5.3988515s ago: executing program 5 (id=388): sched_setscheduler(0x0, 0x2, 0x0) syz_mount_image$jfs(&(0x7f0000000380), &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2208088, &(0x7f0000002440)=ANY=[], 0x1, 0x5e97, &(0x7f0000005e00)="$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") creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40) creat(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x12) symlink(&(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mknod$loop(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000, 0x1) creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) creat(&(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x36) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mkdir(&(0x7f0000000140)='./control\x00', 0x5) 11m4.936212227s ago: executing program 5 (id=395): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16, @ANYBLOB="b022fd84099290ab8ebe39cfc17f80bc2926131e9437a1dea9ca1756900531c14b67f7a9edd0d80c7c73649053153a8d8db6d3c0d3b3fa951f57d14071b61a27d968a0ae7bd580d2d9fd9034451c3ecffae80b234e72fb11e3a60c1208bd5262c5009e3e45582ed4203850292ed682fc5e26f5c2af47718ee5b4f2ed68f0b21b813ec22c4c61d3f22f5a01ebea6c484d8ef4ca90180b4587e0bee2f782fef574aa1e0ebc5d9e42452910d03c12feff7848f72ac5430476b9dc2457a09efdc6f181c408abe7b30cccd2c8fb85389e1cacd4f4b29a3d4a55941bf1bb416203732d6712d5a89470876ae6daec66f3fe1b39982c2781b115e20af7ce0a0c7c77db1073adc6e11597bd9f540f90f60b92dc84a5c764379c0b9426ff4f547182502633aa754dcfc63e46c7cef8e3a0c29bf5184ac150e90d884c59cba3dae7c531fb114534292629d8532c0f67ee37f2c349ea8f28199aff2aa335df5db411287a73adff030000000000007a361c55af160d98b5c3db84da37d80e07269c33f60f111ec3c09d8843e1f5499e71de9b48882b9415d45b20393888ec49f307d535580947b5a5b40b465382aa4a579f317d91792f8ed70e9401863bc0a21d7e15f828ae8f13c673a30cba6f10f89c8a018cc8bbe7072ffe1c5d4ef11f0f82cf967faef8608f8b289245f87607917b0c2578dbbe5186ac78b8cd9a5aff567aebe8a73dd547fdc503885a2df4953f3497688b7b1ede6a2e529b25ecc246a7bcb00077059d7e0100aa20cb4d1dbac6eec0a9f803601c799eddb9b271f0530842291167abffb982fe47a496e884ee3c17850f970cb3ac3342b832b8b984e2eb4836afb7727f7310a347add2a1094cfff7b44516593bbf15f3a9e0e2a788e99bdec6706ae9a39b4f8983ae38d4cdf866d9670de91036ea86646f195ec4b4ce462ea624b8875825262a301f9235496b935506109287bbcf4754e3fa637428a2e39a80cd07ffafd756839abddc721421754fcae705ab432fcdd6f3c004dfad9e6bfa87746dd41649dcd2bf1728a3d6d2ddf27a52957422a27f9e478530873d9f1861b71f2378540648b171bcbd44533723ae1a89e56e2f570c0571eb3c66fac65e3abad003fe1204eb320591d6a93f9052b80494b2f52ad89d6374cf33040e2484c3384946450bb65835d65bebb4a91c0f82e598e5aa7ff9ba79f27bbd46240287721d2759fa24cec97658d8f17b3f424293f7253b74dae4b966c8089c546936953d8ce63463c26f1e296f56e17e7f890b6001ed5d9f739036842e989b40c02d3fe5227b1fb08a98f1b1f0c336346698e70171e74e40c5304a356b29c947672f8a0535b7ce3a66b276d09ca3d9fff030e41598649a310875f5b5801c471182c1f617c907f06b5f36a1f9294b0f4a95d0fc98682b1e38f2f94fb08f20c5e5c7afaa9fbbd84734a98dd9b33188f6b79334b09ca8e2de56457242f904b114a2c313b193fe421d7fa97da5ab77f363e83b4698bf903022d13826ded79a905f07f97dc0fc4cc290b969ee37075a4a80a0d86d0696eeea2048ebd1a97f8319b3342e515ae5c9e25ee933d926ae0f31af55aeb07da6508756ac9549ba8bbc0095a17cb647df12f926e595a531d7208ef75cfd6239f65a0584121c75e00f7c77990b90e6350b1a84eba4430979bb726ab02050573af29156bed8e243527593dc0c6de41d0b6775818a96ee97d153826a217e8d7e88c6c44baa781a495afeba3882a06f5b1a87b1e8ee1edf404ac3ade6f5af1f6cd22c01506b5f84befb55c86f79b56e4d5754be8f564f57852f991c2275cbf55937666e022c2b2f0d020156152377859b345f74fe66791421e5571a7900df89c9bef5c3cb19113fae5d524ae2edea5ca91baf096c02e1e860c9b5a97882da598ef1e39fcb61d83f997675a772ac37c0fbe65a9d379b9204a915fdb6a7c7cdbd14c0893cd5e8cfd56f4021756d6c6a25b258a69922a41f3c7bc43b69f46293b381a27ae5a3cfcf2526f8eadcb540ec87d6009d6a2939882140f9a447c5be4328a0681aa3002f6a9dfd836b362fb1d423d7c9571aeb00000000b9ab4e85574baf27b1028db0f6647aa7fe995c1fbf8ab422bb15acf9ae6de73972c9549cb601297bbb1c740e8761af16c4785c4827b5dc5e52f4a82000f6f87670ec19fea4e04e564fc83c0ccf1b7fa2bb9ac3e56addfa7f5f6d1d3d3c92dea5de9fa42f1414a769b0cdc40e306fee0ad66573628b83a07fe087fcb3377848e1a7869e592c83bb594284da28a4f5db381059d56e5d4989042dadbbe6000b66184ca8fe9d293f6c70988f3d7b8ee00546a21aaeca498ae06fa7becc5a55914c7a1ab714d955a8b0bd72e8d6bbf4dd451b525fcbc9fb5c10747dee3c755d39be5c2d52345c56185a8d6cee878b72255acabf7dbefafaed94838532fd01ea6244c4ac929de6846084a07d19de7098e62b613775abe326d402f707c4fbb3968b0aac7f1f27537cbdecee19151b310bcbe2c848ef41eea747e85f87d5a160b2cb6b28d137e30c69770c1651e44a66f8e3394bec03c8256b89fd59bec449c6a2bdb351f53d05e463f75b834624b8c7b557dc38a398d726d0846fc2f062b5b32d10af38ce844c6811aaef73ace1d86813bc37433670f6180f9bd112ae00133077fc7a0bd12d7b4b3a53a3c16a9cb0e8112f18691aa3bd2215afdaa1d00c8ea4f4a302ea9ebc94afaad2549f646a8ae66b953fa9cd649a02c4b152cc6c7b55d99ddc3d0fd1fcd84da355eb02581dba9e4d9dd235d2d4c4e094161440e70926221d76ce70c8762485c8b801550cc208e5d1bfd184e622ff0950a912dd47163c838fd562f09ca1690e76da55a471ec67cb83bbb103975bd4683f0393ec8b843f55ba2c0bdc6c90b50031cfe751792bd5d0cb50c8ee93086794e18c4ed66d6bd09b499f8ff2f63a8920701ab0af5b4b75402b1d65b1eb515dc46e181a1699f21e67349c904f02f8358e28faff2ade65703d14dc2774b02acc731eee0941675502d95e0c32a7304f6e9af85ef220daea0de24cf79e35a59412e62835d3032f88d9ed7befd4f708bfd2d236bd188b6f951bba13e3add84f111e20324a523426611ec15fb376e7306cbec6867f0b945047a4facf78154e68a66a36972d5a18af1403baa9b4b51fddd072ee1f0087add02485b40323bd708b76406e10a927a913d91c5d771d3aeb3cfafb54b1016785c65ed13060d5f1b550676a656b874fd392ae61c5044218df55cbb72b819990ffdb130fb17a14f7cb5a2a8aafedc6526d83762dbf320f15758030eeecf5652dccf04cdc68827400c768a21daff47212b87357ff0bcb36cae4d113a5d9815b07332cb42329321664d93e43e6dcd6115987007fc623088004f8ac943736eb2a045a25b1bbfbbc97571eabf875d924f6b7b0e524b1afa0ff499473aa7976de83b91928e84f8e445728778fe0e5a356a57f09ed254848cec31b7c5c9c7a2fca21befe15ffc9317e96f7ad582684ce625791b99563781bf64983e77be4f1a5893beec4b560fc15e9c21dd0c29bf2879dfaa257ba5ec97957050d5b2c1f25eb4064488c139dbf88f3b7c70850d6fdbf0603cdd4011bf76e0d9ee5c2b128b50dba5689a8f04d4caf62d777eab31aab4b4195da780901352d284885bf417eb05367ee1b5f2f8c5cfe7f0394fb977f3a3f96084375e22ccf6c3ee4659d68d2b1948a4a1783a4db2282c67d39613fa67be4dd144793b76c09dd563ef3d169f34318acbd62d3b2d64f9173d16e9801132918c3390172c6f64d049b4c894d593419e5f4d5a513fc5a64ddcd05b034e6d16fe88ff89a520c464f842ad5a62a6fc46f0e9d56d05d6f5e625d25f537cca62910981dd463255318d8273db13d27fdc6c17c2c54776ba3a246c413957f297b8ecb1adb5c3f1d4d8e4d7705bdb9268f956d2845b68511edd51cdc5d05de5d6d4b3f573592986fed325f1f3c6a9ef7740f9d843e11981d1ca515c7e722ec4d691c5e4d3a146e39bcf407f66418f754bb2508cb4cc843aa9d8eb63850e5b9103682ecc1fc8f972f394be9d31cb9efd0f693d4ec41fe8d0993b45d2f422f9ab604d3371c1bda1daa3206a027c4de5c8f2cf6d1fc7e6d1423a6c71e84f24e0a4dfbf4a331deff2ae649df9681a08846efc9f0001e7ef106f1bfa25ee2799b13f1f076e30e58078d186afb65301497e982478babf143972cc7072f70829b8faee46e56a1451ff7ddd0dd35816bfa29eee361de60fbc3222e89d70f1495be94d0e82072a0e572e3055c905552e6c45d2af3d4f505a99d947667059c1c92ce2d3549077539c4cec4c07337361eeb9f78813bf9e77b0a79f391ae6eb663deb53317f61ef8ddffdbd0ca2d8095c10c106b0968325bc1e88829d92399b809f1b881e9b9f0aeada5c5ee20fd0866070e3d5d41e62f5b6d2d25441babcdf9d3dc8ae3c140a6f352daf00ed38e248b236acd27f24bdebae0f272a5820ef77fb603fe3cc910a9d842129259e61d25dcf546cd770e4cccab470b20fa5f5972a6dd15853483de6e032f9726c166e81e8e0f9db4df397cc4a10b6e58708a31f48d7d2bae4ef92828c37088068b2ae433110dc7c08e6017d8b26e4e0382ca8fa62dc6f53c4cc2f0f78af72335c494f57f2414afe247e2291c395895bb18f701b6f4331feb759110c543dd94a238e782ad552047677558a50e7683d71a9e222fd19a9343e1d64528640a8099dedd19e4c747dda18ff25b15bddf750a54533b6ecfc75ad4a2909485f7fd759d45c74727b2e7300eae71a8784f5dd7f25b4b000ed3254264131cbbae316fb3a3bfbeb309dd2d18104629db354f447791eb882bf0333a520b8dba745b673d071b07e1de3e02fe751a1cf5908435b1a38edbd60483abdb15452c868844ceb96c449ab72999a55c79f9ce7405797142ef7095b4caf99d7bbe51cd4e963e4ffbbd2648761abd3894b5420a0add261ff9c0eff61aafd1ac5195ff15cadb5b0c7ce34d4d2d68146f3dae677e833b8be0f8a876153bb65398def38e4bf539d3a00047b19c483062fc1c2547b7d4f7d99b7035212ccfffeeb21ed7bbd6165ac7fbafbca3cef86fff655305706dd0baa607c50543bb0d66f0f4dbdd9c365fdb7b875dc5e7ee59afccc321ad1e31cc84687afda71231bb2e4dc3ce79ff3ce4bbafed8821a5b71bbf3844f110e2dd9557b596ac792d97506d22c0410bce435e20fa2e2d435361b5b6ac85f44763769723a7b629258f45e10578f70bef2e9c05af8032e357697dfcd30de9b3e953a36d6cb7a03ce69288b663f692793904dd8fb4ab6dc31ddf7f6942ef84c1e68c78bf9974f830ee2fccca84113cee98b47ed41a87fe610c5348dc38d4ada19862772317a70754870347ad87dbbb4c52349b0261aa8e108fcf387b24d4e2a77ba76e8472fd74ab6fa021277a24ef7a48d395b0fd1f9c0cf83bac56b433ffbfe5984a362e337969febf259988162c2b4842bd2fc0b230fee93a085003e615088abfe41889f7b5e0f380ffe55b66c1f7419993c3dd4aac5891494a183ddca2e415e1749489c925715f3c44d94b90d2d735f2b923bdbbbf1646580ab135356a9ee29bc19e73ded9a33798a69d248574e0c9e9f40a1c1ba52bc66a578d08b75f271a9e9f447efede09d6b3b57e0aa6322c18fd6f5e1c9d2753e0a6513cc04124ab89802eb9c504f0e5550868ab597629d7cc7447ed1b01b2ff4cf511aa098710b208b5aa0f595039a2f0e7294c5fe3b0c3e6c40000000000000000000000000000000002588beb10115f4b22f4ac997c86c49201ee9dceb2142ae61555bbbc4ef8cdd468a8ffbe6cbfc8877dd87292c70e10669bc99d8d5710f7719cc2cffc86cd529b6da2511d07aef4a1d9533ab58a76f80ad7fe91a17397d3c83481", @ANYBLOB="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", @ANYRES64], 0x8, 0x2ee, &(0x7f00000029c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r0, 0x5) read$FUSE(r1, &(0x7f0000000880)={0x2020}, 0x2020) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0x4028af11, &(0x7f0000000040)={{0x0, 0x5, 0x5, 0x6, 0x9, 0x0, 0x36, 0xc7e, 0xfffffffc, 0x101, 0x2, 0x1, 0x8, 0xb}}) 11m0.571512467s ago: executing program 5 (id=416): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x26e1, 0x0) close(r0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) syz_genetlink_get_family_id$nl80211(0x0, r1) ioctl$SIOCSIFHWADDR(r0, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 11m0.238414614s ago: executing program 5 (id=419): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3f7, &(0x7f00000004c0)="$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") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) socket$alg(0x26, 0x5, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) socket$inet_sctp(0x2, 0x1, 0x84) mprotect(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) setpriority(0x0, 0x0, 0x2a14b58) ptrace$setsig(0x4203, r0, 0x80, &(0x7f00000000c0)={0x8, 0x7, 0x7}) 10m59.984765024s ago: executing program 5 (id=425): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x1}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0xfdfdffffffffffff, &(0x7f0000000380)="c6"}) 10m58.734979915s ago: executing program 5 (id=428): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="01002bbd7000fbdbdf252100000008000300", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000) 10m58.240795445s ago: executing program 33 (id=428): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="01002bbd7000fbdbdf252100000008000300", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000) 15.758227081s ago: executing program 4 (id=2791): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x108f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x4) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2c}, 0x78, r5}) r6 = socket(0xa, 0x1, 0x0) ioctl(r6, 0x8916, &(0x7f0000000000)) ioctl(r6, 0x8936, &(0x7f0000000000)) 10.371978185s ago: executing program 6 (id=2803): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x1, @multicast, 'ip6gre0\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000001f00)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000040)=0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='tlb_flush\x00'}, 0x18) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$PPPIOCBRIDGECHAN(r2, 0x40047435, &(0x7f0000000200)=0x1) sendmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000280)=@assoc_value, &(0x7f0000000240)=0x8) 8.548469302s ago: executing program 1 (id=2806): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000240)=[@mss={0x2, 0x8}, @window={0x3, 0xe, 0x7ff}, @timestamp, @sack_perm, @window={0x3, 0x16}, @window={0x3, 0x0, 0xfffc}, @sack_perm, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 8.537978033s ago: executing program 3 (id=2807): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002cc0)={0x401, 0x101, 0x4, 0x7, 0x990}, 0x14) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) 8.459871609s ago: executing program 6 (id=2808): add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) syz_clone3(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, 0x0, 0x0) accept4(r3, 0x0, 0x0, 0x0) msgctl$IPC_RMID(0x0, 0x0) msgget(0x2, 0x201) msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000040)=""/105) 8.459533709s ago: executing program 2 (id=2809): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x8001}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xe}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 7.286555253s ago: executing program 6 (id=2810): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) r2 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) write(r1, &(0x7f00000000c0), 0x0) writev(r2, &(0x7f00000002c0)=[{0x0}], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000a00)={'wlan0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000180)="02030c65420002000000ab5d71acedd7c9560385dcb1080084d7dc039806112405ce811cc352", 0xff88, 0x0, &(0x7f0000000140)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @broadcast}, 0x14) 7.279410924s ago: executing program 2 (id=2811): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000006c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x488, 0x98, 0x0, 0x248, 0x358, 0x358, 0x418, 0x418, 0x418, 0x418, 0x418, 0x6, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1_macvtap\x00', 'veth0_to_team\x00', {}, {}, 0x11, 0x0, 0x41}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x3f}, @loopback, 0xff, 0xffffff00, 'ip6gre0\x00', 'macvlan1\x00', {0xff}, {0xff}, 0x33, 0x1, 0xa}, 0x0, 0xd8, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@set={{0x40}, {{0x0, [0x7, 0x1, 0x1, 0x4, 0x1d], 0x0, 0x6}}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x2, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, 0x0, 0x0, 'macvlan1\x00', 'rose0\x00', {}, {}, 0x0, 0x0, 0x1d}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00'}}]}, @TTL={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'nr0\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x21, 0x6, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4e8) 7.095646409s ago: executing program 3 (id=2812): socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) memfd_secret(0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$inet6_tcp(0xa, 0x1, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) socket$inet6(0xa, 0x3, 0x6) pipe(&(0x7f0000000240)) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz1\x00', {0x1b10, 0x0, 0x1, 0x2}, 0x2f, [0x2, 0x1, 0x704d, 0x1, 0x3, 0x1, 0x2, 0x7db, 0x4, 0xfffffc01, 0xfffffffb, 0x8, 0x200001, 0x100, 0xfe, 0x4a, 0x7, 0x5, 0x2ca, 0x8, 0x76, 0x8, 0x0, 0x200, 0x40, 0x19b2, 0x8000, 0x7, 0xc1, 0x4000000, 0x7, 0x3, 0xe, 0x7, 0x1, 0x1, 0x5, 0xf, 0x7, 0x10001, 0x9, 0x7f, 0x8, 0x6, 0xb, 0x101, 0x6, 0x40, 0x7f, 0x9, 0x1, 0x6, 0x4, 0x2284919, 0x4, 0x5643fa73, 0xfffeffff, 0x7, 0x800, 0x2, 0x8a, 0x6, 0x1, 0x16], [0xfffffed2, 0x7fffffff, 0xffff, 0x7, 0xe62, 0x3, 0x0, 0x9, 0xc33, 0xf, 0xa, 0x800, 0x6c368000, 0x4, 0x1000007, 0x0, 0x10, 0x5, 0x5, 0x8001, 0x10000, 0x7fff, 0x9, 0x0, 0x5, 0x4, 0x4, 0x8, 0x40, 0xc14, 0x80000001, 0x3, 0x3, 0x7, 0x7, 0x8, 0x8, 0x5, 0x4, 0x9, 0x5, 0x3, 0x2, 0x4, 0x0, 0xfff, 0xa4, 0x4, 0x5, 0xd69, 0x9, 0xf404, 0x3, 0x3, 0x3, 0x1, 0x6, 0x0, 0x0, 0x8000006, 0x8, 0x9, 0x4, 0x1000068], [0x1, 0x1, 0x4, 0xfffffffc, 0x0, 0x7fff, 0x405, 0x9, 0x2, 0xffc, 0x7, 0x4, 0xc, 0x7, 0xa, 0xa, 0x6, 0x4, 0x5, 0x5, 0x2, 0x30000000, 0x644, 0x2, 0xfffffffd, 0x7, 0x10000, 0x7f, 0x7ff, 0xd, 0x400, 0x0, 0x41, 0x81, 0xc99, 0x25a, 0x2, 0xfffffffc, 0x2, 0x5d9fff6, 0x3ff, 0xff, 0x4, 0x8, 0x10000, 0xe7, 0x200, 0x7af5, 0x0, 0x9, 0x0, 0xffff, 0x7, 0x6, 0x0, 0x82, 0x9, 0x2000002, 0x100, 0x100, 0x8, 0x0, 0x200, 0x10], [0xffefff80, 0xd5800000, 0x0, 0x4, 0x2, 0x62a, 0x6, 0x407, 0xb343, 0x4, 0x1, 0x8, 0x7, 0x8, 0xffffff81, 0x80000000, 0x5, 0x3, 0x201, 0xfff, 0x3, 0x0, 0x3c65, 0xa, 0x6, 0x80, 0xffffffff, 0x3, 0x2, 0x7, 0x1, 0x7, 0x7, 0x8, 0x1, 0x0, 0x9, 0x17ce, 0x0, 0x200, 0x6fe, 0xd6, 0x7, 0x13b, 0x7, 0x8, 0xb757, 0x2, 0x117, 0x996, 0x54, 0x8c1, 0x0, 0x5, 0x5, 0x8, 0x80100, 0x10000400, 0x9, 0x5, 0x3, 0xfffffffb, 0xc, 0x2]}, 0x45c) r0 = syz_io_uring_setup(0xd2, &(0x7f0000000500)={0x0, 0x2000000, 0x800, 0x0, 0xc0}, &(0x7f00000002c0)=0x0, &(0x7f0000000640)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 7.014363935s ago: executing program 1 (id=2813): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semctl$GETALL(0x0, 0x0, 0xd, 0xfffffffffffffffe) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000014c0)={'macvtap0\x00', &(0x7f00000013c0)=@ethtool_drvinfo={0x3, "3768ca9bdb9072480b2f1c8f8182ce0898651461231fb740854b22a4379de586", "43a38879022a99b405a660e7cd1d15725e68a25c5152bd0bd227ffb8739f1cfc", "131c5b4bdb8af434447f3cb705650db1c0f8ddb541648cc0b1d318873f8c9a85", "f16051bbcb4dda20aea0d433f8c6f05bce62635e71c972c7929a58603233d497", "1cb283a6b524caa0cfd3fc2d99e7cad81b31b74f347dff63fa93236b8a8a2ccb"}}) socket$nl_rdma(0x10, 0x3, 0x14) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r4, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) 5.995950897s ago: executing program 1 (id=2814): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bind$rds(r2, &(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10) ioctl$sock_proto_private(r2, 0x89e0, &(0x7f0000001080)) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x5c, r1, 0x917, 0x1000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @remote}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44}, 0x0) 5.96701257s ago: executing program 2 (id=2815): openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$autofs(0xffffffffffffff9c, 0x0, 0x8000, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setresgid(0xee00, 0xee01, 0x0) setgroups(0x0, 0x0) setuid(0xee00) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000007000/0x4000)=nil) 4.937075193s ago: executing program 1 (id=2816): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x101042, 0x40) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file7\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000240)='./bus\x00', 0x322020, &(0x7f0000000240)=ANY=[], 0x1, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) 4.46801019s ago: executing program 4 (id=2817): socket$netlink(0x10, 0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000540)={r6, &(0x7f0000000480), &(0x7f0000000340)=@udp6=r2}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r7, r4, 0x25, 0x2, @val=@tcx}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000bc0)=ANY=[], 0x0) 4.283938875s ago: executing program 3 (id=2818): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x40, &(0x7f0000000100), 0x4, 0x57c, &(0x7f00000006c0)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x61709000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_audit(0x10, 0x3, 0x9) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x141042, 0x0) 3.788085815s ago: executing program 6 (id=2819): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x5) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0x2) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x9504, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xd8ef}], 0x1, 0x0, 0x0, 0x2c}, 0x4) 3.625834258s ago: executing program 2 (id=2820): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000002c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000580)={&(0x7f0000000180)=[0x0], 0x1, r6, r7, 0x3, 0xc, 0xffffffff, 0x804, {0xac7c, 0x1, 0x3, 0x67, 0xf4b, 0x1, 0x2, 0x5, 0x4132, 0xe154, 0x1000, 0x7f, 0x3, 0xffffffff, "fe1d00003413000000f1ff000080004000"}}) 3.621015019s ago: executing program 4 (id=2821): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x50) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r3, 0x2284, &(0x7f0000000080)) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) shutdown(r4, 0x1) 2.087560232s ago: executing program 1 (id=2822): syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) socket$netlink(0x10, 0x3, 0x0) socket(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$vicodec0(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_usb_connect(0x6, 0x24, &(0x7f0000000200)=ANY=[], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) fsopen(&(0x7f0000000000)='erofs\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x4) socket$netlink(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800060000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES16=r0], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x140cc014) 2.087124502s ago: executing program 3 (id=2823): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, 0x0, 0x0) sendmsg$inet(r3, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) read(r3, &(0x7f0000000380)=""/41, 0x29) 2.082876933s ago: executing program 6 (id=2824): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0x6, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb600000000000000008d0000007500000095"], 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000010000e1850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000001800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4) close(0x3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.61183212s ago: executing program 2 (id=2825): openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) r1 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000280)="dee7030022cf5c6c7bc31bd2599759fafa9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976edec860ab49c3a4f51ab0124b50c3362201a307df03000", 0x83, r1) preadv(0xffffffffffffffff, 0x0, 0x0, 0x35, 0x88) keyctl$search(0xa, r1, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x4, r2, 0xffffffffffffffff, 0xee00) 1.412240517s ago: executing program 4 (id=2826): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'veth1_to_bridge\x00', 0x200}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r4}]}, 0x20}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x2}]}, 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x2, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) 1.303998585s ago: executing program 3 (id=2827): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x8}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x51, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) 1.162585187s ago: executing program 6 (id=2828): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getpeername(r0, &(0x7f0000000080)=@hci, &(0x7f0000000100)=0x80) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f00000007c0)={0x0, 0xea60}, 0x10) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r1) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000340)}], 0x1, 0x0, 0x0, 0xff0f0000}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000200)=""/102400, 0x19000, 0x80000000000000) socket$xdp(0x2c, 0x3, 0x0) 1.131876259s ago: executing program 2 (id=2829): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) r4 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) sendfile(r4, r4, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r4, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f000002eff0)={0x135, &(0x7f0000000000)=[{}]}, 0x10) 902.572968ms ago: executing program 4 (id=2830): pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0x40045010, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000640)={0x11, 0x17, r2, 0x1, 0x24, 0x6, @broadcast}, 0x14) bind$packet(0xffffffffffffffff, &(0x7f0000000680)={0x11, 0xf6, r2}, 0x14) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0) socket$inet6(0xa, 0x5, 0x800) r3 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000080)=0xe9) r4 = accept4$llc(0xffffffffffffffff, 0x0, 0x0, 0x800) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000100)={@initdev}, &(0x7f00000003c0)=0xc) sendmsg$inet(r4, 0x0, 0x8000) r5 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) prlimit64(0x0, 0x7, &(0x7f00000003c0), 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r0, 0x39) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r1, 0xffffffffffffffff) 155.878578ms ago: executing program 1 (id=2831): socket$netlink(0x10, 0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000540)={r6, &(0x7f0000000480), &(0x7f0000000340)=@udp6=r2}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r7, r4, 0x25, 0x2, @val=@tcx}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000bc0)=ANY=[], 0x0) 60.664066ms ago: executing program 3 (id=2832): socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080fffffffe0000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000c00)={0x0, 0x0, 0x0}, 0x2000) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800060000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES64=r6], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x88010) 0s ago: executing program 4 (id=2833): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x101042, 0x40) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file7\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000240)='./bus\x00', 0x322020, &(0x7f0000000240)=ANY=[], 0x1, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) kernel console output (not intermixed with test programs): ocess `syz.6.900'. [ 261.550078][ T7708] netlink: 'syz.4.908': attribute type 10 has an invalid length. [ 261.588957][ T7708] device macvlan0 entered promiscuous mode [ 261.653991][ T7708] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 261.763699][ T7708] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 261.799972][ T7708] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 261.900062][ T7708] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 261.934805][ T7708] bond0 (unregistering): Released all slaves [ 262.942639][ T7719] netlink: 12 bytes leftover after parsing attributes in process `syz.3.911'. [ 263.007308][ T7722] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 263.067824][ T7726] netlink: 'syz.4.914': attribute type 1 has an invalid length. [ 263.303028][ T7731] 8021q: adding VLAN 0 to HW filter on device bond1 [ 263.327331][ T7731] bond0: (slave bond1): making interface the new active one [ 263.335913][ T7731] bond0: (slave bond1): Enslaving as an active interface with an up link [ 263.355533][ T7740] netlink: 8 bytes leftover after parsing attributes in process `syz.1.919'. [ 263.441350][ T7726] bond0: (slave gretap1): Enslaving as a backup interface with an up link [ 264.414121][ T7756] futex_wake_op: syz.1.922 tries to shift op by 36; fix this program [ 264.483210][ T7761] netlink: 'syz.1.922': attribute type 4 has an invalid length. [ 264.522253][ T7761] netlink: 17 bytes leftover after parsing attributes in process `syz.1.922'. [ 264.597531][ T7766] netlink: 'syz.6.926': attribute type 10 has an invalid length. [ 264.702814][ T7766] device macvlan0 entered promiscuous mode [ 264.822921][ T7766] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 265.835344][ T7780] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 265.864438][ T7770] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 265.977579][ T7770] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 266.055993][ T7770] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 266.106555][ T7770] bond0 (unregistering): Released all slaves [ 266.168673][ T7786] netlink: 'syz.1.932': attribute type 1 has an invalid length. [ 266.355084][ T7788] 8021q: adding VLAN 0 to HW filter on device bond1 [ 266.363324][ T7788] bond0: (slave bond1): making interface the new active one [ 266.433097][ T7788] bond0: (slave bond1): Enslaving as an active interface with an up link [ 266.468539][ T7789] bond0: (slave gretap1): Enslaving as a backup interface with an up link [ 266.760539][ T7801] netlink: 'syz.6.935': attribute type 21 has an invalid length. [ 266.793145][ T7801] netlink: 132 bytes leftover after parsing attributes in process `syz.6.935'. [ 266.815521][ T7801] netlink: 'syz.6.935': attribute type 1 has an invalid length. [ 266.854588][ T7801] netlink: 12 bytes leftover after parsing attributes in process `syz.6.935'. [ 266.896367][ T7806] netlink: 4 bytes leftover after parsing attributes in process `syz.2.937'. [ 266.919659][ T7805] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 267.498213][ T7826] netlink: 'syz.2.941': attribute type 2 has an invalid length. [ 267.617863][ T7823] syz.3.944[7823] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 267.618377][ T7823] syz.3.944[7823] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 267.709898][ T7825] netlink: 4 bytes leftover after parsing attributes in process `syz.4.943'. [ 270.658851][ T7866] loop6: detected capacity change from 0 to 128 [ 270.726234][ T7869] netlink: 'syz.1.956': attribute type 2 has an invalid length. [ 271.146107][ T7866] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 271.545799][ T7876] netlink: 200 bytes leftover after parsing attributes in process `syz.3.961'. [ 271.596635][ T7876] netlink: 4 bytes leftover after parsing attributes in process `syz.3.961'. [ 273.056076][ T7888] netlink: 'syz.6.963': attribute type 2 has an invalid length. [ 273.148635][ T7893] netlink: 4 bytes leftover after parsing attributes in process `syz.3.964'. [ 274.938867][ T7909] bridge0: port 3(netdevsim0) entered blocking state [ 274.948882][ T7909] bridge0: port 3(netdevsim0) entered disabled state [ 274.964851][ T7909] device netdevsim0 entered promiscuous mode [ 274.972715][ T7914] hugetlbfs: syz.1.973 (7914): Using mlock ulimits for SHM_HUGETLB is deprecated [ 275.037993][ T7909] bridge0: port 3(netdevsim0) entered blocking state [ 275.044960][ T7909] bridge0: port 3(netdevsim0) entered forwarding state [ 276.453489][ T7932] netlink: 47 bytes leftover after parsing attributes in process `syz.1.978'. [ 276.630476][ T13] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 276.984848][ T13] usb 7-1: Using ep0 maxpacket: 32 [ 277.125579][ T13] usb 7-1: config 0 has no interfaces? [ 277.346011][ T13] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 277.467915][ T13] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.736688][ T13] usb 7-1: Product: syz [ 277.740895][ T13] usb 7-1: Manufacturer: syz [ 277.749475][ T13] usb 7-1: SerialNumber: syz [ 277.810872][ T13] usb 7-1: config 0 descriptor?? [ 277.853311][ T7953] overlayfs: failed to clone upperpath [ 278.083999][ T7312] usb 7-1: USB disconnect, device number 2 [ 279.679911][ T7973] netlink: 'syz.2.990': attribute type 21 has an invalid length. [ 279.784086][ T7973] netlink: 132 bytes leftover after parsing attributes in process `syz.2.990'. [ 279.938580][ T7973] netlink: 'syz.2.990': attribute type 1 has an invalid length. [ 280.159261][ T7973] netlink: 12 bytes leftover after parsing attributes in process `syz.2.990'. [ 280.242624][ T7975] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 280.246905][ T7979] mmap: syz.1.992 (7979) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 280.774004][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 280.774019][ T26] audit: type=1326 audit(1756523312.824:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8001 comm="syz.1.1000" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc0b7648be9 code=0x0 [ 281.118640][ T8011] device wg2 entered promiscuous mode [ 283.425933][ T8028] overlayfs: failed to clone upperpath [ 283.680767][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.915613][ T8055] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 286.014833][ T8048] netlink: 'syz.3.1010': attribute type 21 has an invalid length. [ 286.048471][ T8048] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1010'. [ 286.094470][ T8048] netlink: 'syz.3.1010': attribute type 1 has an invalid length. [ 286.167447][ T8048] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1010'. [ 286.192583][ T8057] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 287.065749][ T8073] netlink: 200 bytes leftover after parsing attributes in process `syz.2.1020'. [ 287.121898][ T8073] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1020'. [ 288.540986][ T8087] loop6: detected capacity change from 0 to 16 [ 288.554184][ T7313] Bluetooth: hci0: command 0x0406 tx timeout [ 289.232203][ T8087] erofs: (device loop6): mounted with root inode @ nid 36. [ 289.250387][ T8084] erofs: (device loop6): z_erofs_fill_inode_lazy: big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 289.263947][ T8084] erofs: (device loop6): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 289.273206][ T8084] erofs: (device loop6): z_erofs_fill_inode_lazy: big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 289.286157][ T8084] erofs: (device loop6): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 289.295343][ T8084] erofs: (device loop6): z_erofs_fill_inode_lazy: big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 289.308118][ T8084] erofs: (device loop6): z_erofs_readahead: readahead error at page 45 @ nid 36 [ 289.317287][ T8084] erofs: (device loop6): z_erofs_fill_inode_lazy: big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 289.330086][ T8084] erofs: (device loop6): z_erofs_readahead: readahead error at page 44 @ nid 36 [ 289.339187][ T8084] erofs: (device loop6): z_erofs_fill_inode_lazy: big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 289.351985][ T8084] erofs: (device loop6): z_erofs_readahead: readahead error at page 43 @ nid 36 [ 289.361105][ T8084] erofs: (device loop6): z_erofs_fill_inode_lazy: big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 289.373892][ T8084] erofs: (device loop6): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 289.384724][ T8084] erofs: (device loop6): z_erofs_fill_inode_lazy: big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 289.397502][ T8084] erofs: (device loop6): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 289.406608][ T8084] erofs: (device loop6): z_erofs_fill_inode_lazy: big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 289.419387][ T8084] erofs: (device loop6): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 289.428498][ T8084] erofs: (device loop6): z_erofs_fill_inode_lazy: big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 289.441250][ T8084] erofs: (device loop6): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 289.450433][ T8084] erofs: (device loop6): z_erofs_fill_inode_lazy: big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 289.463183][ T8084] erofs: (device loop6): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 289.472279][ T8084] erofs: (device loop6): z_erofs_fill_inode_lazy: big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 289.485044][ T8084] erofs: (device loop6): z_erofs_readahead: readahead error at page 37 @ nid 36 [ 289.494118][ T8084] erofs: (device loop6): z_erofs_fill_inode_lazy: big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 289.506887][ T8084] erofs: (device loop6): z_erofs_readahead: readahead error at page 36 @ nid 36 [ 289.516000][ T8084] erofs: (device loop6): z_erofs_fill_inode_lazy: big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 289.528771][ T8084] erofs: (device loop6): z_erofs_readahead: readahead error at page 35 @ nid 36 [ 289.537883][ T8084] erofs: (device loop6): z_erofs_fill_inode_lazy: big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 289.550645][ T8084] erofs: (device loop6): z_erofs_readahead: readahead error at page 34 @ nid 36 [ 289.559774][ T8084] erofs: (device loop6): z_erofs_fill_inode_lazy: big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 289.572542][ T8084] erofs: (device loop6): z_erofs_readahead: readahead error at page 33 @ nid 36 [ 289.581658][ T8084] erofs: (device loop6): z_erofs_fill_inode_lazy: big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 289.594432][ T8084] erofs: (device loop6): z_erofs_readahead: readahead error at page 32 @ nid 36 [ 289.603546][ T8084] erofs: (device loop6): z_erofs_fill_inode_lazy: big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 289.616318][ T8084] erofs: (device loop6): z_erofs_readahead: readahead error at page 31 @ nid 36 [ 289.625432][ T8084] erofs: (device loop6): z_erofs_fill_inode_lazy: big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 289.638360][ T8084] erofs: (device loop6): z_erofs_readahead: readahead error at page 30 @ nid 36 [ 289.647471][ T8084] erofs: (device loop6): z_erofs_fill_inode_lazy: big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 289.660267][ T8084] erofs: (device loop6): z_erofs_readahead: readahead error at page 29 @ nid 36 [ 289.669363][ T8084] erofs: (device loop6): z_erofs_fill_inode_lazy: big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 289.682134][ T8084] erofs: (device loop6): z_erofs_readahead: readahead error at page 28 @ nid 36 [ 289.691324][ T8084] erofs: (device loop6): z_erofs_fill_inode_lazy: big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 289.704089][ T8084] erofs: (device loop6): z_erofs_readahead: readahead error at page 27 @ nid 36 [ 289.713233][ T8084] erofs: (device loop6): z_erofs_fill_inode_lazy: big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 289.726092][ T8084] erofs: (device loop6): z_erofs_readahead: readahead error at page 26 @ nid 36 [ 289.735191][ T8084] erofs: (device loop6): z_erofs_fill_inode_lazy: big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 289.747963][ T8084] erofs: (device loop6): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 289.757063][ T8084] erofs: (device loop6): z_erofs_fill_inode_lazy: big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 289.769845][ T8084] erofs: (device loop6): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 289.778951][ T8084] erofs: (device loop6): z_erofs_fill_inode_lazy: big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 289.791710][ T8084] erofs: (device loop6): z_erofs_readahead: readahead error at page 23 @ nid 36 [ 289.800815][ T8084] erofs: (device loop6): z_erofs_fill_inode_lazy: big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 289.813591][ T8084] erofs: (device loop6): z_erofs_readahead: readahead error at page 22 @ nid 36 [ 289.822688][ T8084] erofs: (device loop6): z_erofs_fill_inode_lazy: big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 289.835465][ T8084] erofs: (device loop6): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 289.844520][ T8084] erofs: (device loop6): z_erofs_fill_inode_lazy: big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 289.857493][ T8084] erofs: (device loop6): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 289.866618][ T8084] erofs: (device loop6): z_erofs_fill_inode_lazy: big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 289.879458][ T8084] erofs: (device loop6): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 289.888685][ T8084] erofs: (device loop6): z_erofs_fill_inode_lazy: big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 289.901443][ T8084] erofs: (device loop6): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 289.910776][ T8084] erofs: (device loop6): z_erofs_fill_inode_lazy: big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 289.923525][ T8084] erofs: (device loop6): z_erofs_readahead: readahead error at page 17 @ nid 36 [ 289.932676][ T8084] erofs: (device loop6): z_erofs_fill_inode_lazy: big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 289.945527][ T8084] erofs: (device loop6): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 289.954650][ T8084] erofs: (device loop6): z_erofs_fill_inode_lazy: big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 289.967430][ T8084] erofs: (device loop6): z_erofs_readahead: readahead error at page 15 @ nid 36 [ 291.056578][ T8128] loop4: detected capacity change from 0 to 256 [ 291.115145][ T8128] exfat: Deprecated parameter 'namecase' [ 291.142355][ T8128] exfat: Bad value for 'allow_utime' [ 291.996571][ T8137] overlayfs: failed to resolve './bus': -2 [ 292.206980][ T8144] overlayfs: failed to clone upperpath [ 293.161502][ T26] audit: type=1326 audit(1756523325.204:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8150 comm="syz.4.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46339f7be9 code=0x7fc00000 [ 293.187786][ T26] audit: type=1326 audit(1756523325.244:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8160 comm="syz.1.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0b7648be9 code=0x7ffc0000 [ 293.220870][ T26] audit: type=1326 audit(1756523325.244:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8160 comm="syz.1.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0b7648be9 code=0x7ffc0000 [ 293.246267][ T8162] netlink: 'syz.1.1049': attribute type 4 has an invalid length. [ 293.266398][ T8162] netlink: 'syz.1.1049': attribute type 3 has an invalid length. [ 293.288171][ T8162] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1049'. [ 293.300921][ T26] audit: type=1326 audit(1756523325.274:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8160 comm="syz.1.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc0b7648be9 code=0x7ffc0000 [ 293.373796][ T26] audit: type=1326 audit(1756523325.274:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8160 comm="syz.1.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0b7648be9 code=0x7ffc0000 [ 293.459334][ T26] audit: type=1326 audit(1756523325.274:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8160 comm="syz.1.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0b7648be9 code=0x7ffc0000 [ 293.501024][ T26] audit: type=1326 audit(1756523325.294:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8160 comm="syz.1.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc0b7648be9 code=0x7ffc0000 [ 294.164378][ T26] audit: type=1326 audit(1756523325.294:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8160 comm="syz.1.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0b7648be9 code=0x7ffc0000 [ 294.217541][ T26] audit: type=1326 audit(1756523325.294:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8160 comm="syz.1.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0b7648be9 code=0x7ffc0000 [ 294.242875][ T26] audit: type=1326 audit(1756523325.294:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8160 comm="syz.1.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc0b7648be9 code=0x7ffc0000 [ 299.508980][ T8246] loop6: detected capacity change from 0 to 40427 [ 299.560926][ T8246] F2FS-fs (loop6): Insane cp_payload (553648128 >= 504) [ 299.568053][ T8246] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 299.580943][ T8246] F2FS-fs (loop6): invalid crc value [ 299.597859][ T8246] F2FS-fs (loop6): Found nat_bits in checkpoint [ 299.644175][ T8246] F2FS-fs (loop6): Cannot turn on quotas: -2 on 2 [ 299.651285][ T8246] F2FS-fs (loop6): Start checkpoint disabled! [ 299.666978][ T8246] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 299.674070][ T8246] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 299.815591][ T8255] ÿÿÿÿÿÿ: renamed from lo [ 301.184363][ T26] kauditd_printk_skb: 19 callbacks suppressed [ 301.184383][ T26] audit: type=1326 audit(1756523332.124:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8207 comm="syz.1.1062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0b7648be9 code=0x7fc00000 [ 301.342091][ T8262] loop4: detected capacity change from 0 to 2048 [ 301.365853][ T8267] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 301.482653][ T8262] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 302.966755][ T8261] UDF-fs: warning (device loop4): udf_truncate_tail_extent: Too long extent after EOF in inode 1436: i_size: 151552 lbcount: 155648 extent 129+154624 [ 303.332596][ T8288] xt_cgroup: path and classid specified [ 304.068550][ T8294] loop4: detected capacity change from 0 to 512 [ 304.232011][ T8294] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 304.334791][ T8294] ext4 filesystem being mounted at /198/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 304.575242][ T8294] EXT4-fs (loop4): re-mounted. Opts: (null). Quota mode: writeback. [ 304.907921][ T8326] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1091'. [ 305.534871][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 305.561537][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 305.591156][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 305.614375][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 305.635842][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 305.654770][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 305.677361][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 305.699051][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 305.717523][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 305.738316][ C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 306.431415][ T8351] loop6: detected capacity change from 0 to 4096 [ 306.559471][ T26] audit: type=1326 audit(1756523338.614:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8357 comm="syz.1.1106" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc0b7648be9 code=0x0 [ 307.277311][ T5933] ntfs3: loop6: ntfs_evict_inode r=5 failed, -22. [ 307.283797][ T5933] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 312.696230][ T8435] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1131'. [ 312.914053][ T8435] syz.2.1131 (8435) used greatest stack depth: 19648 bytes left [ 314.662620][ T8459] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.984401][ T8459] device wg2 left promiscuous mode [ 315.174254][ T8459] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 315.226223][ T8459] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 315.449638][ T8459] device macvlan0 left promiscuous mode [ 315.632902][ T8459] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.642190][ T8459] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.651129][ T8459] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.660055][ T8459] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.180346][ T26] audit: type=1326 audit(1756523348.234:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8490 comm="syz.1.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0b7648be9 code=0x7ffc0000 [ 316.373221][ T26] audit: type=1326 audit(1756523348.264:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8490 comm="syz.1.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0b7648be9 code=0x7ffc0000 [ 316.438165][ T26] audit: type=1326 audit(1756523348.264:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8490 comm="syz.1.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc0b7648be9 code=0x7ffc0000 [ 316.853694][ T8505] netlink: 'syz.1.1152': attribute type 3 has an invalid length. [ 316.943405][ T26] audit: type=1326 audit(1756523348.274:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8490 comm="syz.1.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0b7648be9 code=0x7ffc0000 [ 317.013760][ T8505] netlink: 'syz.1.1152': attribute type 3 has an invalid length. [ 317.121627][ T26] audit: type=1326 audit(1756523348.274:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8490 comm="syz.1.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0b7648be9 code=0x7ffc0000 [ 317.146597][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.152936][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.175549][ T26] audit: type=1326 audit(1756523348.274:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8490 comm="syz.1.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc0b7648be9 code=0x7ffc0000 [ 317.214598][ T26] audit: type=1326 audit(1756523348.274:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8490 comm="syz.1.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0b7648be9 code=0x7ffc0000 [ 317.265941][ T26] audit: type=1326 audit(1756523348.274:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8490 comm="syz.1.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0b7648be9 code=0x7ffc0000 [ 317.364760][ T26] audit: type=1326 audit(1756523348.274:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8490 comm="syz.1.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc0b7648be9 code=0x7ffc0000 [ 317.428111][ T26] audit: type=1326 audit(1756523348.274:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8490 comm="syz.1.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0b7648be9 code=0x7ffc0000 [ 317.536540][ T8504] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1153'. [ 318.901747][ T8524] overlayfs: failed to clone lowerpath [ 320.536328][ T8544] net_ratelimit: 616 callbacks suppressed [ 320.536345][ T8544] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 320.703838][ T8551] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 320.713952][ T8551] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 320.914321][ T8566] netlink: 'syz.2.1171': attribute type 3 has an invalid length. [ 320.925918][ T8566] netlink: 'syz.2.1171': attribute type 3 has an invalid length. [ 321.540804][ T26] kauditd_printk_skb: 9 callbacks suppressed [ 321.540821][ T26] audit: type=1326 audit(1756523353.594:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8565 comm="syz.1.1173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0b7648be9 code=0x7fc00000 [ 321.784697][ T26] audit: type=1326 audit(1756523353.814:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8575 comm="syz.2.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32d32c1be9 code=0x7ffc0000 [ 321.882530][ T26] audit: type=1326 audit(1756523353.814:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8575 comm="syz.2.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32d32c1be9 code=0x7ffc0000 [ 321.905817][ T26] audit: type=1326 audit(1756523353.874:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8575 comm="syz.2.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7f32d32c1be9 code=0x7ffc0000 [ 321.928558][ T26] audit: type=1326 audit(1756523353.874:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8575 comm="syz.2.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32d32c1be9 code=0x7ffc0000 [ 321.962073][ T26] audit: type=1326 audit(1756523353.874:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8575 comm="syz.2.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32d32c1be9 code=0x7ffc0000 [ 322.059580][ T8583] Invalid option length (826) for dns_resolver key [ 322.565154][ T26] audit: type=1326 audit(1756523353.874:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8575 comm="syz.2.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f32d32c1be9 code=0x7ffc0000 [ 322.587741][ T26] audit: type=1326 audit(1756523353.874:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8575 comm="syz.2.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32d32c1be9 code=0x7ffc0000 [ 322.746211][ T26] audit: type=1326 audit(1756523353.874:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8575 comm="syz.2.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32d32c1be9 code=0x7ffc0000 [ 322.879223][ T26] audit: type=1326 audit(1756523353.874:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8575 comm="syz.2.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f32d32c1be9 code=0x7ffc0000 [ 322.934926][ T8600] loop6: detected capacity change from 0 to 47 [ 323.052687][ T8600] attempt to access beyond end of device [ 323.052687][ T8600] loop6: rw=1, want=50, limit=47 [ 323.063290][ T8600] buffer_io_error: 278 callbacks suppressed [ 323.063303][ T8600] Buffer I/O error on dev loop6, logical block 24, lost async page write [ 323.077847][ T8600] attempt to access beyond end of device [ 323.077847][ T8600] loop6: rw=1, want=52, limit=47 [ 323.088645][ T8600] Buffer I/O error on dev loop6, logical block 25, lost async page write [ 323.406082][ T8612] netlink: 'syz.6.1186': attribute type 3 has an invalid length. [ 323.434491][ T8612] netlink: 'syz.6.1186': attribute type 3 has an invalid length. [ 323.495693][ T8614] xt_bpf: check failed: parse error [ 323.893268][ T8629] Invalid option length (826) for dns_resolver key [ 325.113299][ T8652] netlink: 'syz.3.1204': attribute type 7 has an invalid length. [ 325.121754][ T8652] netlink: 'syz.3.1204': attribute type 8 has an invalid length. [ 326.947322][ T8680] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1212'. [ 330.769865][ T8710] overlayfs: failed to clone upperpath [ 334.808159][ T8759] netlink: 'syz.3.1235': attribute type 16 has an invalid length. [ 334.824493][ T8759] netlink: 'syz.3.1235': attribute type 17 has an invalid length. [ 334.918570][ T8759] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 334.926132][ T8759] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 334.933637][ T8759] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 334.941595][ T8759] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 335.583653][ T8769] loop6: detected capacity change from 0 to 4096 [ 335.806100][ T8769] ntfs3: loop6: Different NTFS' sector size (1024) and media sector size (512) [ 336.725951][ T8793] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1243'. [ 337.732298][ T8812] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 337.758782][ T8812] CIFS mount error: No usable UNC path provided in device string! [ 337.758782][ T8812] [ 337.769158][ T8812] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 337.846605][ T8813] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1245'. [ 338.292481][ T8813] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 338.302000][ T8813] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 338.311042][ T8813] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 338.319848][ T8813] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 338.654918][ T8826] netlink: 'syz.6.1256': attribute type 21 has an invalid length. [ 338.662952][ T8826] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1256'. [ 338.672342][ T8826] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1256'. [ 338.753126][ T8831] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1258'. [ 338.841895][ T8837] netlink: zone id is out of range [ 338.867865][ T8837] netlink: zone id is out of range [ 338.894204][ T8837] netlink: zone id is out of range [ 338.936570][ T8837] netlink: zone id is out of range [ 338.964226][ T8837] netlink: zone id is out of range [ 338.969606][ T8837] netlink: zone id is out of range [ 338.980328][ T8837] netlink: zone id is out of range [ 338.985646][ T8837] netlink: zone id is out of range [ 338.990922][ T8837] netlink: zone id is out of range [ 339.001591][ T8837] netlink: zone id is out of range [ 339.153539][ T8844] loop6: detected capacity change from 0 to 512 [ 339.231316][ T8844] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 339.244620][ T8844] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 339.487344][ T8844] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2825: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 339.506792][ T8844] EXT4-fs (loop6): 1 truncate cleaned up [ 339.512532][ T8844] EXT4-fs (loop6): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000004,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nodiscard,quota,. Quota mode: writeback. [ 341.311686][ T8860] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 341.335089][ T8860] kvm: pic: non byte read [ 341.339841][ T8860] kvm: pic: non byte read [ 341.347754][ T8860] kvm: pic: non byte read [ 341.352346][ T8860] kvm: pic: single mode not supported [ 341.352425][ T8860] kvm: pic: non byte read [ 341.384975][ T8860] kvm: pic: non byte read [ 341.391310][ T8860] kvm: pic: non byte read [ 341.400874][ T8860] kvm: pic: non byte read [ 341.406341][ T8860] kvm: pic: non byte read [ 341.411262][ T8860] kvm: pic: non byte read [ 341.437166][ T8860] kvm: pic: single mode not supported [ 341.437258][ T8860] kvm: pic: non byte read [ 343.384992][ T8907] loop6: detected capacity change from 0 to 2047 [ 343.700601][ T8862] Alternate GPT is invalid, using primary GPT. [ 343.754890][ T8862] loop6: p2 p3 p7 [ 343.862212][ T8920] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1285'. [ 343.911865][ T8907] Alternate GPT is invalid, using primary GPT. [ 343.948009][ T8907] loop6: p2 p3 p7 [ 344.031980][ T26] kauditd_printk_skb: 22 callbacks suppressed [ 344.031996][ T26] audit: type=1326 audit(1756523376.084:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8925 comm="syz.4.1287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46339f7be9 code=0x7ffc0000 [ 344.102428][ T26] audit: type=1326 audit(1756523376.124:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8925 comm="syz.4.1287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f46339f7be9 code=0x7ffc0000 [ 344.172651][ T26] audit: type=1326 audit(1756523376.124:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8925 comm="syz.4.1287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46339f7be9 code=0x7ffc0000 [ 344.203520][ T8862] udevd[8862]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 344.209551][ T8768] udevd[8768]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 344.276673][ T8931] udevd[8931]: inotify_add_watch(7, /dev/loop6p7, 10) failed: No such file or directory [ 344.333807][ T26] audit: type=1326 audit(1756523376.124:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8925 comm="syz.4.1287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f46339f7be9 code=0x7ffc0000 [ 344.411786][ T8862] udevd[8862]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 344.411909][ T8931] udevd[8931]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 344.426602][ T8768] udevd[8768]: inotify_add_watch(7, /dev/loop6p7, 10) failed: No such file or directory [ 344.482552][ T26] audit: type=1326 audit(1756523376.124:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8925 comm="syz.4.1287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46339f7be9 code=0x7ffc0000 [ 344.596194][ T26] audit: type=1326 audit(1756523376.124:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8925 comm="syz.4.1287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f46339f7be9 code=0x7ffc0000 [ 344.671290][ T26] audit: type=1326 audit(1756523376.124:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8925 comm="syz.4.1287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46339f7be9 code=0x7ffc0000 [ 344.788536][ T26] audit: type=1326 audit(1756523376.124:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8925 comm="syz.4.1287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f46339f7be9 code=0x7ffc0000 [ 344.821421][ T26] audit: type=1326 audit(1756523376.144:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8925 comm="syz.4.1287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46339f7be9 code=0x7ffc0000 [ 344.881250][ T26] audit: type=1326 audit(1756523376.144:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8925 comm="syz.4.1287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f46339f7be9 code=0x7ffc0000 [ 345.738889][ T8948] device syzkaller0 entered promiscuous mode [ 346.525320][ T8963] device wg2 left promiscuous mode [ 346.765100][ T8963] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 347.056610][ T8963] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.065646][ T8963] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.075075][ T8963] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.084244][ T8963] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.224132][ T8963] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 347.233114][ T8963] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 347.242184][ T8963] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 347.251290][ T8963] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 347.267950][ T8976] netlink: 'syz.2.1304': attribute type 8 has an invalid length. [ 348.123045][ T9002] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1308'. [ 350.551699][ T9020] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1316'. [ 350.607884][ T9020] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1316'. [ 354.401460][ T9071] overlayfs: failed to clone upperpath [ 355.146404][ T9079] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 355.268180][ T9082] net_ratelimit: 23 callbacks suppressed [ 355.268198][ T9082] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 355.354058][ T9082] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 355.539502][ T9091] bridge0: port 1(vxlan0) entered blocking state [ 355.562975][ T9091] bridge0: port 1(vxlan0) entered disabled state [ 355.571332][ T9091] device vxlan0 entered promiscuous mode [ 355.714496][ T9102] syz.1.1344[9102] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 355.721755][ T9102] syz.1.1344[9102] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 356.975836][ T9119] ptrace attach of "./syz-executor exec"[5933] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ  "[9119] [ 358.750081][ T9127] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1353'. [ 361.561808][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 361.561822][ T26] audit: type=1326 audit(1756523393.614:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9161 comm="syz.3.1362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6b205dbe9 code=0x7ffc0000 [ 361.650967][ T26] audit: type=1326 audit(1756523393.654:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9161 comm="syz.3.1362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fd6b205dbe9 code=0x7ffc0000 [ 361.706878][ T26] audit: type=1326 audit(1756523393.654:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9161 comm="syz.3.1362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6b205dbe9 code=0x7ffc0000 [ 361.738212][ T26] audit: type=1326 audit(1756523393.654:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9161 comm="syz.3.1362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fd6b205dbe9 code=0x7ffc0000 [ 361.770817][ T9165] loop6: detected capacity change from 0 to 2048 [ 361.784266][ T26] audit: type=1326 audit(1756523393.654:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9161 comm="syz.3.1362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6b205dbe9 code=0x7ffc0000 [ 361.810570][ T26] audit: type=1326 audit(1756523393.654:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9161 comm="syz.3.1362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd6b205dbe9 code=0x7ffc0000 [ 361.845762][ T9165] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 361.862706][ T26] audit: type=1326 audit(1756523393.654:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9161 comm="syz.3.1362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6b205dbe9 code=0x7ffc0000 [ 361.874060][ T9165] UDF-fs: Scanning with blocksize 512 failed [ 361.914578][ T26] audit: type=1326 audit(1756523393.654:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9161 comm="syz.3.1362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd6b205dbe9 code=0x7ffc0000 [ 361.937388][ T9165] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 361.943766][ T26] audit: type=1326 audit(1756523393.654:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9161 comm="syz.3.1362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6b205dbe9 code=0x7ffc0000 [ 361.970149][ T26] audit: type=1326 audit(1756523393.654:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9161 comm="syz.3.1362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7fd6b205dbe9 code=0x7ffc0000 [ 362.636281][ T9] attempt to access beyond end of device [ 362.636281][ T9] loop6: rw=1, want=2050, limit=2048 [ 362.776964][ T9] Buffer I/O error on dev loop6, logical block 1024, lost async page write [ 362.813207][ T9] attempt to access beyond end of device [ 362.813207][ T9] loop6: rw=1, want=2050, limit=2048 [ 362.825681][ T9] Buffer I/O error on dev loop6, logical block 1024, lost async page write [ 362.835669][ T9] attempt to access beyond end of device [ 362.835669][ T9] loop6: rw=1, want=2050, limit=2048 [ 362.846675][ T9] Buffer I/O error on dev loop6, logical block 1024, lost async page write [ 363.217375][ T9] attempt to access beyond end of device [ 363.217375][ T9] loop6: rw=1, want=2050, limit=2048 [ 363.232092][ T9] Buffer I/O error on dev loop6, logical block 1024, lost async page write [ 364.082606][ T9] attempt to access beyond end of device [ 364.082606][ T9] loop6: rw=1, want=2052, limit=2048 [ 364.136852][ T9] Buffer I/O error on dev loop6, logical block 1025, lost async page write [ 364.166489][ T9194] overlayfs: failed to clone upperpath [ 364.235046][ T9] attempt to access beyond end of device [ 364.235046][ T9] loop6: rw=1, want=2052, limit=2048 [ 364.275757][ T9] Buffer I/O error on dev loop6, logical block 1025, lost async page write [ 364.313845][ T9] attempt to access beyond end of device [ 364.313845][ T9] loop6: rw=1, want=2052, limit=2048 [ 364.394750][ T9] Buffer I/O error on dev loop6, logical block 1025, lost async page write [ 364.403514][ T9] attempt to access beyond end of device [ 364.403514][ T9] loop6: rw=1, want=2052, limit=2048 [ 364.414374][ T9] Buffer I/O error on dev loop6, logical block 1025, lost async page write [ 364.423456][ T9] attempt to access beyond end of device [ 364.423456][ T9] loop6: rw=1, want=2054, limit=2048 [ 364.640500][ T9] Buffer I/O error on dev loop6, logical block 1026, lost async page write [ 364.749362][ T9] attempt to access beyond end of device [ 364.749362][ T9] loop6: rw=1, want=2054, limit=2048 [ 364.921370][ T9] Buffer I/O error on dev loop6, logical block 1026, lost async page write [ 365.263115][ T9210] loop6: detected capacity change from 0 to 1024 [ 365.926607][ T9220] xt_ecn: cannot match TCP bits for non-tcp packets [ 365.944001][ T9210] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 366.783062][ T9234] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1384'. [ 366.792926][ T9234] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1384'. [ 366.809657][ T9234] netlink: 'syz.1.1384': attribute type 10 has an invalid length. [ 368.245945][ T9243] syz.6.1378[9243] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 368.246044][ T9243] syz.6.1378[9243] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 371.651785][ T9276] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1391'. [ 373.224301][ T9300] xt_ecn: cannot match TCP bits for non-tcp packets [ 376.199009][ T9314] overlayfs: failed to clone upperpath [ 377.861730][ T9346] loop6: detected capacity change from 0 to 40427 [ 377.943832][ T9346] F2FS-fs (loop6): invalid crc value [ 378.004079][ T9346] F2FS-fs (loop6): Found nat_bits in checkpoint [ 378.303109][ T9346] F2FS-fs (loop6): Start checkpoint disabled! [ 378.439363][ T9346] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 378.487970][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.498814][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.936546][ T26] kauditd_printk_skb: 11 callbacks suppressed [ 378.936558][ T26] audit: type=1326 audit(1756523410.994:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9362 comm="syz.1.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0b7648be9 code=0x7ffc0000 [ 379.662241][ T26] audit: type=1326 audit(1756523411.044:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9362 comm="syz.1.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0b7648be9 code=0x7ffc0000 [ 380.604575][ T26] audit: type=1326 audit(1756523411.044:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9362 comm="syz.1.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc0b7648be9 code=0x7ffc0000 [ 380.836340][ T26] audit: type=1326 audit(1756523411.044:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9362 comm="syz.1.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0b7648be9 code=0x7ffc0000 [ 381.458331][ T26] audit: type=1326 audit(1756523411.044:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9362 comm="syz.1.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0b7648be9 code=0x7ffc0000 [ 381.484731][ T26] audit: type=1326 audit(1756523411.044:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9362 comm="syz.1.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc0b7648be9 code=0x7ffc0000 [ 382.638181][ T26] audit: type=1326 audit(1756523411.044:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9362 comm="syz.1.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0b7648be9 code=0x7ffc0000 [ 382.794597][ T26] audit: type=1326 audit(1756523411.044:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9362 comm="syz.1.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0b7648be9 code=0x7ffc0000 [ 383.050232][ T9312] handle_bad_sector: 60 callbacks suppressed [ 383.050255][ T9312] attempt to access beyond end of device [ 383.050255][ T9312] loop6: rw=2049, want=40976, limit=40427 [ 383.293732][ T26] audit: type=1326 audit(1756523411.054:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9362 comm="syz.1.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc0b7648be9 code=0x7ffc0000 [ 383.334618][ T26] audit: type=1326 audit(1756523411.054:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9362 comm="syz.1.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0b7648be9 code=0x7ffc0000 [ 386.196409][ T9432] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1437'. [ 386.662770][ T9448] capability: warning: `syz.2.1438' uses 32-bit capabilities (legacy support in use) [ 390.313132][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 390.313148][ T26] audit: type=1326 audit(1756523422.364:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9486 comm="syz.2.1451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32d32c1be9 code=0x7ffc0000 [ 390.397441][ T26] audit: type=1326 audit(1756523422.384:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9486 comm="syz.2.1451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32d32c1be9 code=0x7ffc0000 [ 390.510571][ T26] audit: type=1326 audit(1756523422.394:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9486 comm="syz.2.1451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f32d32c1be9 code=0x7ffc0000 [ 390.620048][ T26] audit: type=1326 audit(1756523422.394:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9486 comm="syz.2.1451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32d32c1be9 code=0x7ffc0000 [ 390.803685][ T26] audit: type=1326 audit(1756523422.394:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9486 comm="syz.2.1451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32d32c1be9 code=0x7ffc0000 [ 391.478202][ T26] audit: type=1326 audit(1756523422.394:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9486 comm="syz.2.1451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f32d32c1be9 code=0x7ffc0000 [ 391.583762][ T26] audit: type=1326 audit(1756523422.404:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9486 comm="syz.2.1451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32d32c1be9 code=0x7ffc0000 [ 391.688705][ T26] audit: type=1326 audit(1756523422.404:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9486 comm="syz.2.1451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32d32c1be9 code=0x7ffc0000 [ 391.782451][ T26] audit: type=1326 audit(1756523422.404:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9486 comm="syz.2.1451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f32d32c1be9 code=0x7ffc0000 [ 391.816445][ T9525] overlayfs: failed to clone upperpath [ 391.946890][ T26] audit: type=1326 audit(1756523422.404:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9486 comm="syz.2.1451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32d32c1be9 code=0x7ffc0000 [ 394.016498][ T9530] loop6: detected capacity change from 0 to 32768 [ 394.245466][ T9530] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 scanned by syz.6.1467 (9530) [ 395.185801][ T9530] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 395.231173][ T9530] BTRFS info (device loop6): enabling auto defrag [ 395.268849][ T9530] BTRFS info (device loop6): doing ref verification [ 395.400055][ T9530] BTRFS info (device loop6): use no compression [ 395.407766][ T9530] BTRFS info (device loop6): force clearing of disk cache [ 395.498333][ T9530] BTRFS info (device loop6): max_inline at 4096 [ 395.524671][ T9530] BTRFS info (device loop6): disabling free space tree [ 395.533544][ T9530] BTRFS info (device loop6): has skinny extents [ 397.558096][ T9530] BTRFS error (device loop6): open_ctree failed: -12 [ 398.158224][ T9605] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1483'. [ 400.667185][ T9667] mmap: syz.6.1505 (9667): VmData 50049024 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 401.104231][ T9659] bridge0: port 3(netdevsim0) entered disabled state [ 401.111346][ T9659] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.118831][ T9659] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.217344][ T9690] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1512'. [ 401.240002][ T9690] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1512'. [ 401.281332][ T9694] netlink: 'syz.2.1512': attribute type 10 has an invalid length. [ 401.303146][ T9696] 9pnet: Insufficient options for proto=fd [ 401.332467][ T9693] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1513'. [ 404.839348][ T9746] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1532'. [ 404.853929][ T9746] device hsr_slave_0 left promiscuous mode [ 406.422310][ T9771] lo speed is unknown, defaulting to 1000 [ 407.090369][ T9771] lo speed is unknown, defaulting to 1000 [ 407.266021][ T9781] block device autoloading is deprecated and will be removed. [ 407.276354][ T9771] lo speed is unknown, defaulting to 1000 [ 407.301309][ T9771] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 407.355761][ T9771] lo speed is unknown, defaulting to 1000 [ 407.370100][ T9771] lo speed is unknown, defaulting to 1000 [ 407.377719][ T9771] lo speed is unknown, defaulting to 1000 [ 407.384842][ T9771] lo speed is unknown, defaulting to 1000 [ 407.399071][ T9771] lo speed is unknown, defaulting to 1000 [ 407.527888][ T9788] loop6: detected capacity change from 0 to 2048 [ 407.668464][ T9788] NILFS (loop6): error -5 while loading last checkpoint (checkpoint number=2) [ 409.175283][ T9805] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1553'. [ 413.070105][ T9839] netlink: 'syz.6.1560': attribute type 4 has an invalid length. [ 413.171456][ T9841] netlink: 'syz.1.1562': attribute type 1 has an invalid length. [ 413.281026][ T9841] 8021q: adding VLAN 0 to HW filter on device bond2 [ 413.354278][ T9842] bond2: (slave bridge4): making interface the new active one [ 413.392663][ T9842] bond2: (slave bridge4): Enslaving as an active interface with an up link [ 413.410457][ T9843] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1562'. [ 413.507376][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 414.291585][ T9871] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1568'. [ 415.169484][ T9879] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1572'. [ 415.289623][ T9881] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1571'. [ 417.638075][ T9905] overlayfs: failed to clone upperpath [ 417.864454][ T9910] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 417.914214][ T9910] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 417.936556][ T9908] loop6: detected capacity change from 0 to 40427 [ 417.952284][ T9910] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 417.960025][ T9910] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 417.967647][ T9910] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 417.975217][ T9910] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 417.982794][ T9910] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 417.990686][ T9910] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 417.998587][ T9910] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 418.026107][ T9910] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 418.026712][ T9908] F2FS-fs (loop6): invalid crc value [ 418.033924][ T9910] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 418.058456][ T9908] F2FS-fs (loop6): Found nat_bits in checkpoint [ 418.112331][ T9908] F2FS-fs (loop6): Start checkpoint disabled! [ 418.117904][ T9910] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 418.147531][ T9908] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 418.156520][ T9910] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 418.189003][ T9910] bridge0: port 3(netdevsim0) entered blocking state [ 418.195864][ T9910] bridge0: port 3(netdevsim0) entered forwarding state [ 418.203099][ T9910] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.210270][ T9910] bridge0: port 2(bridge_slave_1) entered forwarding state [ 418.217715][ T9910] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.224860][ T9910] bridge0: port 1(bridge_slave_0) entered forwarding state [ 418.380653][ T26] kauditd_printk_skb: 17 callbacks suppressed [ 418.380701][ T26] audit: type=1800 audit(1756523450.434:260): pid=9919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1579" name="file1" dev="loop6" ino=14 res=0 errno=0 [ 418.519500][ T9910] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 418.601917][ T9910] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 418.933751][ T9910] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 419.263659][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 419.688193][ T9803] Set syz1 is full, maxelem 65536 reached [ 419.920603][ T9932] atomic_op ffff88805b848998 conn xmit_atomic 0000000000000000 [ 419.929555][ T4276] attempt to access beyond end of device [ 419.929555][ T4276] loop6: rw=2049, want=40968, limit=40427 [ 419.990783][ T9938] tipc: Enabling of bearer rejected, failed to enable media [ 421.117497][ T9962] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1596'. [ 422.301978][ T9974] siw: device registration error -23 [ 422.342816][ T9977] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 422.417208][ T9982] batman_adv: batadv0: Adding interface: dummy0 [ 422.423835][ T9982] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 422.452082][ T9982] batman_adv: batadv0: Interface activated: dummy0 [ 422.491316][ T9982] batadv0: mtu less than device minimum [ 422.513043][ T9982] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 422.526407][ T9982] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 422.538898][ T9982] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 422.551433][ T9982] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 422.563968][ T9982] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 422.576476][ T9982] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 422.589055][ T9982] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 423.981225][T10005] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1615'. [ 424.014923][T10005] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 424.029189][T10005] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 424.147509][T10011] lo speed is unknown, defaulting to 1000 [ 424.192318][ T26] audit: type=1326 audit(1756523456.244:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10008 comm="syz.6.1618" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2e03e1cbe9 code=0x0 [ 424.223414][T10019] overlayfs: failed to clone upperpath [ 424.711831][T10031] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1624'. [ 424.738069][T10031] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1624'. [ 426.503065][T10048] netlink: 'syz.1.1627': attribute type 4 has an invalid length. [ 430.975734][T10095] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1640'. [ 431.659218][T10102] netlink: 'syz.1.1655': attribute type 1 has an invalid length. [ 431.706692][T10102] 8021q: adding VLAN 0 to HW filter on device bond3 [ 431.714188][T10109] netlink: 'syz.2.1645': attribute type 4 has an invalid length. [ 431.863689][T10102] bond3: (slave vlan3): Opening slave failed [ 431.985112][T10112] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1646'. [ 432.010954][T10112] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 432.095036][T10113] netlink: 1032 bytes leftover after parsing attributes in process `syz.4.1646'. [ 436.253687][T10154] 8021q: VLANs not supported on vcan0 [ 436.428025][T10154] netlink: 788 bytes leftover after parsing attributes in process `syz.2.1658'. [ 438.254795][ T5192] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 438.594723][ T5192] usb 7-1: Using ep0 maxpacket: 8 [ 438.661222][T10183] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 438.724836][ T5192] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 438.744576][ T5192] usb 7-1: New USB device found, idVendor=2801, idProduct=0201, bcdDevice=2a.d5 [ 438.774056][ T5192] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.825902][ T5192] usb 7-1: config 0 descriptor?? [ 440.002746][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.010982][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.233573][T10201] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1675'. [ 440.367584][T10205] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1676'. [ 440.577538][T10209] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1677'. [ 441.917864][ T4231] usb 7-1: USB disconnect, device number 3 [ 442.278177][T10233] loop6: detected capacity change from 0 to 4096 [ 442.303314][T10240] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1687'. [ 443.199580][T10233] ntfs3: loop6: failed to convert "0080" to cp775 [ 443.244885][T10233] ntfs3: loop6: failed to convert name for inode 1e. [ 443.253644][T10252] netlink: 'syz.3.1690': attribute type 1 has an invalid length. [ 443.334350][T10252] 8021q: adding VLAN 0 to HW filter on device bond0 [ 443.538955][T10265] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1693'. [ 444.587652][ T26] audit: type=1326 audit(1756523476.644:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10281 comm="syz.3.1700" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd6b205dbe9 code=0x0 [ 447.108446][T10312] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 447.174870][T10312] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 447.215326][T10312] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 447.222736][T10312] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 447.347192][T10312] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 447.388014][T10312] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 447.451604][T10312] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 447.471857][T10312] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 447.649729][T10312] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 448.121306][T10312] net_ratelimit: 12 callbacks suppressed [ 448.121318][T10312] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 449.648397][T10351] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1717'. [ 460.287151][T10454] syz.4.1747 sent an empty control message without MSG_MORE. [ 463.129007][ T4249] Process accounting resumed [ 463.256606][T10463] Process accounting resumed [ 475.103980][T10613] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1799'. [ 480.396591][T10674] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1816'. [ 484.096217][T10719] netlink: set zone limit has 8 unknown bytes [ 484.195631][T10719] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1829'. [ 484.231099][ T26] audit: type=1326 audit(1756523516.284:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10720 comm="syz.6.1831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e03e1cbe9 code=0x7ffc0000 [ 484.456364][ T26] audit: type=1326 audit(1756523516.464:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10720 comm="syz.6.1831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2e03e1cbe9 code=0x7ffc0000 [ 484.479332][ T26] audit: type=1326 audit(1756523516.464:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10720 comm="syz.6.1831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e03e1cbe9 code=0x7ffc0000 [ 486.612946][ T26] audit: type=1326 audit(1756523516.464:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10720 comm="syz.6.1831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2e03e1cbe9 code=0x7ffc0000 [ 486.643338][ T26] audit: type=1326 audit(1756523516.464:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10720 comm="syz.6.1831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e03e1cbe9 code=0x7ffc0000 [ 486.675195][ T26] audit: type=1326 audit(1756523516.464:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10720 comm="syz.6.1831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2e03e1cbe9 code=0x7ffc0000 [ 486.708160][ T26] audit: type=1326 audit(1756523516.464:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10720 comm="syz.6.1831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e03e1cbe9 code=0x7ffc0000 [ 486.769112][ T26] audit: type=1326 audit(1756523516.464:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10720 comm="syz.6.1831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2e03e1cbe9 code=0x7ffc0000 [ 486.810455][ T26] audit: type=1326 audit(1756523516.464:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10720 comm="syz.6.1831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e03e1cbe9 code=0x7ffc0000 [ 486.869206][ T26] audit: type=1326 audit(1756523516.464:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10720 comm="syz.6.1831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f2e03e1cbe9 code=0x7ffc0000 [ 486.995495][T10722] loop6: detected capacity change from 0 to 8192 [ 489.193953][T10767] tipc: Enabling of bearer rejected, failed to enable media [ 491.845594][T10792] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 491.970882][T10792] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 492.140200][T10792] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 492.396662][T10792] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 492.552347][T10792] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 492.569269][T10792] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 492.614681][T10792] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 492.636711][T10792] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 492.644942][T10792] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 492.701326][T10792] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 492.723493][T10811] fuse: Bad value for 'fd' [ 492.851903][ T26] kauditd_printk_skb: 9 callbacks suppressed [ 492.851919][ T26] audit: type=1326 audit(1756523524.904:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10814 comm="syz.2.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32d32c1be9 code=0x7ffc0000 [ 493.200912][ T26] audit: type=1326 audit(1756523524.904:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10814 comm="syz.2.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32d32c1be9 code=0x7ffc0000 [ 493.649024][ T26] audit: type=1326 audit(1756523524.904:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10814 comm="syz.2.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f32d32c1be9 code=0x7ffc0000 [ 493.786772][ T26] audit: type=1326 audit(1756523524.904:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10814 comm="syz.2.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32d32c1be9 code=0x7ffc0000 [ 493.826511][T10823] fuse: Bad value for 'fd' [ 494.314032][ T26] audit: type=1326 audit(1756523524.904:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10814 comm="syz.2.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32d32c1be9 code=0x7ffc0000 [ 494.780406][ T26] audit: type=1326 audit(1756523524.904:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10814 comm="syz.2.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f32d32c1be9 code=0x7ffc0000 [ 495.335883][ T26] audit: type=1326 audit(1756523524.914:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10814 comm="syz.2.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32d32c1be9 code=0x7ffc0000 [ 496.339567][ T26] audit: type=1326 audit(1756523524.914:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10814 comm="syz.2.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32d32c1be9 code=0x7ffc0000 [ 496.539280][ T26] audit: type=1326 audit(1756523524.914:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10814 comm="syz.2.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f32d32c1be9 code=0x7ffc0000 [ 496.561876][ T26] audit: type=1326 audit(1756523524.914:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10814 comm="syz.2.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32d32c1be9 code=0x7ffc0000 [ 499.045789][T10865] overlayfs: failed to clone lowerpath [ 499.107299][T10861] netlink: 'syz.6.1869': attribute type 1 has an invalid length. [ 500.527255][T10878] device team0 entered promiscuous mode [ 500.561602][T10878] device team_slave_0 entered promiscuous mode [ 500.568606][T10878] device team_slave_1 entered promiscuous mode [ 500.579927][T10878] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 500.601840][T10878] bond0: (slave macvlan0): Enslaving as an active interface with a down link [ 500.604639][ T5190] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 500.814534][ T5190] usb 7-1: device descriptor read/64, error -71 [ 500.833315][T10878] bridge0: port 1(vlan0) entered blocking state [ 500.908759][T10878] bridge0: port 1(vlan0) entered disabled state [ 501.094630][ T5190] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 501.151487][T10878] device vlan0 entered promiscuous mode [ 501.381350][T10878] device bond0 entered promiscuous mode [ 501.405638][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.411995][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.919626][ T5190] usb 7-1: device descriptor read/64, error -71 [ 501.926713][T10886] lo speed is unknown, defaulting to 1000 [ 501.946446][T10886] lo speed is unknown, defaulting to 1000 [ 501.963370][T10886] lo speed is unknown, defaulting to 1000 [ 502.042838][ T5190] usb usb7-port1: attempt power cycle [ 502.321911][T10886] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 502.454609][ T5190] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 502.588866][T10886] lo speed is unknown, defaulting to 1000 [ 502.688997][T10886] lo speed is unknown, defaulting to 1000 [ 502.713353][T10886] lo speed is unknown, defaulting to 1000 [ 502.822697][ T5190] usb 7-1: device not accepting address 6, error -71 [ 502.837417][T10886] lo speed is unknown, defaulting to 1000 [ 502.844109][T10886] lo speed is unknown, defaulting to 1000 [ 504.355167][ T26] kauditd_printk_skb: 15 callbacks suppressed [ 504.355183][ T26] audit: type=1326 audit(1756523536.414:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10914 comm="syz.1.1886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0b7648be9 code=0x7ffc0000 [ 504.435834][ T26] audit: type=1326 audit(1756523536.414:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10914 comm="syz.1.1886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0b7648be9 code=0x7ffc0000 [ 504.530181][ T26] audit: type=1326 audit(1756523536.424:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10914 comm="syz.1.1886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fc0b7648be9 code=0x7ffc0000 [ 504.718532][ T26] audit: type=1326 audit(1756523536.424:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10914 comm="syz.1.1886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0b7648be9 code=0x7ffc0000 [ 504.741341][ T26] audit: type=1326 audit(1756523536.424:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10914 comm="syz.1.1886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7fc0b7648be9 code=0x7ffc0000 [ 505.494950][T10930] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1889'. [ 505.505371][ T26] audit: type=1326 audit(1756523536.424:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10914 comm="syz.1.1886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0b7648be9 code=0x7ffc0000 [ 505.545368][T10943] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1889'. [ 505.578602][ T26] audit: type=1326 audit(1756523536.424:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10914 comm="syz.1.1886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc0b7648be9 code=0x7ffc0000 [ 505.615594][T10938] net_ratelimit: 28 callbacks suppressed [ 505.615613][T10938] netlink: zone id is out of range [ 505.636822][ T26] audit: type=1326 audit(1756523536.424:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10914 comm="syz.1.1886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0b7648be9 code=0x7ffc0000 [ 505.689954][ T26] audit: type=1326 audit(1756523536.424:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10914 comm="syz.1.1886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fc0b7648be9 code=0x7ffc0000 [ 505.856379][ T26] audit: type=1326 audit(1756523536.424:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10914 comm="syz.1.1886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0b7648be9 code=0x7ffc0000 [ 506.576874][T10951] device macvlan0 left promiscuous mode [ 506.659695][T10951] device macsec0 left promiscuous mode [ 506.710847][T10965] overlayfs: failed to clone upperpath [ 506.947499][T10970] tipc: Failed to remove unknown binding: 66,1,1/2886997007:81253760/81253762 [ 507.469046][T10970] tipc: Failed to remove unknown binding: 66,1,1/2886997007:81253760/81253762 [ 507.654709][T10970] tipc: Failed to remove unknown binding: 66,1,1/2886997007:81253760/81253762 [ 508.668834][T10989] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 508.749749][T10990] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1905'. [ 513.085339][T11028] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1916'. [ 513.368380][T11051] loop6: detected capacity change from 0 to 1024 [ 514.336648][T11058] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1922'. [ 517.696035][T11086] overlayfs: failed to clone upperpath [ 517.736097][T11078] lo speed is unknown, defaulting to 1000 [ 517.742838][T11078] lo speed is unknown, defaulting to 1000 [ 518.426408][T11101] loop6: detected capacity change from 0 to 128 [ 518.512529][T11113] xt_time: unknown flags 0xc [ 521.012188][T11127] attempt to access beyond end of device [ 521.012188][T11127] loop6: rw=2049, want=385, limit=128 [ 524.979575][T11173] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 526.181901][T11194] device batadv1 entered promiscuous mode [ 527.552669][T11198] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 527.659550][T11204] 9pnet: Insufficient options for proto=fd [ 528.323164][ T26] kauditd_printk_skb: 16 callbacks suppressed [ 528.323181][ T26] audit: type=1326 audit(1756526138.366:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11207 comm="syz.6.1967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e03e1cbe9 code=0x7ffc0000 [ 528.410389][T11208] tipc: New replicast peer: 255.255.255.255 [ 528.463448][T11208] tipc: Enabled bearer , priority 10 [ 528.698701][ T26] audit: type=1326 audit(1756526138.456:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11207 comm="syz.6.1967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f2e03e1cbe9 code=0x7ffc0000 [ 529.459130][ T26] audit: type=1326 audit(1756526138.456:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11207 comm="syz.6.1967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e03e1cbe9 code=0x7ffc0000 [ 529.481701][ T26] audit: type=1326 audit(1756526138.456:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11207 comm="syz.6.1967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2e03e1cbe9 code=0x7ffc0000 [ 529.531877][ T26] audit: type=1326 audit(1756526138.456:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11207 comm="syz.6.1967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e03e1cbe9 code=0x7ffc0000 [ 529.578157][ T26] audit: type=1326 audit(1756526138.456:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11207 comm="syz.6.1967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2e03e1cbe9 code=0x7ffc0000 [ 529.653371][T11220] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 529.666676][ T26] audit: type=1326 audit(1756526138.456:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11207 comm="syz.6.1967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e03e1cbe9 code=0x7ffc0000 [ 529.731249][ T26] audit: type=1326 audit(1756526138.456:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11207 comm="syz.6.1967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2e03e1cbe9 code=0x7ffc0000 [ 529.780190][ T26] audit: type=1326 audit(1756526138.456:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11207 comm="syz.6.1967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e03e1cbe9 code=0x7ffc0000 [ 529.829789][ T26] audit: type=1326 audit(1756526138.456:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11207 comm="syz.6.1967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2e03e1cbe9 code=0x7ffc0000 [ 531.338031][T11235] IPVS: wlc: SCTP 172.20.20.187:0 - no destination available [ 532.800050][T11265] overlayfs: failed to clone lowerpath [ 532.963220][T11269] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1985'. [ 534.752521][T11296] netlink: 'syz.6.1993': attribute type 10 has an invalid length. [ 534.760561][T11296] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1993'. [ 534.772748][T11296] device batadv0 entered promiscuous mode [ 534.786541][T11296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 534.796835][T11296] bridge0: port 4(batadv0) entered blocking state [ 534.803589][T11296] bridge0: port 4(batadv0) entered disabled state [ 535.415596][T11299] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1997'. [ 535.424873][T11299] device vlan0 entered promiscuous mode [ 535.447185][ T4209] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 535.457218][ T4209] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 537.576010][T11327] lo speed is unknown, defaulting to 1000 [ 537.625440][T11327] lo speed is unknown, defaulting to 1000 [ 538.941261][T11350] netlink: 'syz.1.2009': attribute type 10 has an invalid length. [ 538.968807][T11350] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2009'. [ 538.989027][T11350] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 539.035147][T11353] lo speed is unknown, defaulting to 1000 [ 539.072877][T11353] lo speed is unknown, defaulting to 1000 [ 540.603868][ T4257] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 542.606872][T11377] netlink: 'syz.4.2017': attribute type 10 has an invalid length. [ 542.753307][T11377] siw: device registration error -23 [ 548.737562][T11457] netlink: 'syz.2.2038': attribute type 10 has an invalid length. [ 548.757186][T11457] tipc: Resetting bearer [ 548.806815][T11451] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2039'. [ 552.221086][T11488] device bridge_slave_0 left promiscuous mode [ 553.536289][T11488] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.094452][T11488] device bridge_slave_1 left promiscuous mode [ 554.100932][T11488] bridge0: port 2(bridge_slave_1) entered disabled state [ 554.165189][T11488] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 554.179406][T11488] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 554.188495][T11488] bond0: (slave bond1): Releasing backup interface [ 554.195514][T11488] bond0: (slave bond1): the permanent HWaddr of slave - ea:4d:99:1e:d5:6b - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 554.232581][T11488] bond0: (slave gretap1): making interface the new active one [ 554.293028][T11488] bond0: (slave gretap1): Releasing backup interface [ 554.614118][T11488] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 555.145737][ T26] kauditd_printk_skb: 12 callbacks suppressed [ 555.145753][ T26] audit: type=1326 audit(1756526166.207:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11507 comm="syz.6.2054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e03e1cbe9 code=0x7ffc0000 [ 555.220337][ T26] audit: type=1326 audit(1756526166.237:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11507 comm="syz.6.2054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e03e1cbe9 code=0x7ffc0000 [ 555.382650][ T26] audit: type=1326 audit(1756526166.237:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11507 comm="syz.6.2054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2e03e1cbe9 code=0x7ffc0000 [ 555.416214][ T26] audit: type=1326 audit(1756526166.237:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11507 comm="syz.6.2054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e03e1cbe9 code=0x7ffc0000 [ 555.619068][ T26] audit: type=1326 audit(1756526166.237:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11507 comm="syz.6.2054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e03e1cbe9 code=0x7ffc0000 [ 556.361894][ T26] audit: type=1326 audit(1756526166.237:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11507 comm="syz.6.2054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f2e03e1cbe9 code=0x7ffc0000 [ 556.488524][ T26] audit: type=1326 audit(1756526166.237:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11507 comm="syz.6.2054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e03e1cbe9 code=0x7ffc0000 [ 559.323172][ T26] audit: type=1326 audit(1756526166.237:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11507 comm="syz.6.2054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e03e1cbe9 code=0x7ffc0000 [ 559.650445][ T26] audit: type=1326 audit(1756526166.237:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11507 comm="syz.6.2054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f2e03e1cbe9 code=0x7ffc0000 [ 559.763591][ T26] audit: type=1326 audit(1756526166.247:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11507 comm="syz.6.2054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e03e1cbe9 code=0x7ffc0000 [ 560.790838][T11562] syz.6.2070 (11562) used greatest stack depth: 17344 bytes left [ 560.924589][T11566] netlink: 'syz.4.2071': attribute type 29 has an invalid length. [ 560.982994][T11566] netlink: 'syz.4.2071': attribute type 29 has an invalid length. [ 561.012170][T11569] netlink: 'syz.4.2071': attribute type 29 has an invalid length. [ 562.803888][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.811903][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.034199][T11597] lo speed is unknown, defaulting to 1000 [ 563.040905][T11597] lo speed is unknown, defaulting to 1000 [ 563.205764][T11604] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 563.775072][T11604] Error parsing options; rc = [-22] [ 563.934792][T11612] SET target dimension over the limit! [ 564.312355][T11610] Set syz1 is full, maxelem 65536 reached [ 564.554747][T11618] netlink: 'syz.3.2086': attribute type 10 has an invalid length. [ 564.563080][T11618] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2086'. [ 564.572139][T11618] netlink: 'syz.3.2086': attribute type 10 has an invalid length. [ 564.594425][T11618] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2086'. [ 564.609879][T11623] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2089'. [ 564.867314][T11624] loop6: detected capacity change from 0 to 32768 [ 564.953648][T11624] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 564.964687][T11624] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 565.102357][T11624] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 565.117585][ T4231] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 565.129064][ T4231] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 565.678026][T11641] MTD: Couldn't look up './file0': -15 [ 566.463197][ T4231] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 1334ms [ 566.474495][ T4231] gfs2: fsid=syz:syz.0: jid=0: Done [ 566.481966][T11624] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 566.572554][T11624] attempt to access beyond end of device [ 566.572554][T11624] loop6: rw=12288, want=9007199254757624, limit=32768 [ 566.585094][T11624] gfs2: fsid=syz:syz.0: can't lock local "qc" file: -5 [ 566.668873][T11648] syz.2.2095[11648] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 566.669010][T11648] syz.2.2095[11648] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 566.999368][T11657] overlayfs: failed to get inode (-116) [ 567.036807][T11657] overlayfs: failed to get inode (-116) [ 568.397752][T11673] netlink: 'syz.6.2102': attribute type 12 has an invalid length. [ 569.058499][T11689] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20000 [ 569.091770][T11689] netlink: 'syz.2.2108': attribute type 16 has an invalid length. [ 569.120489][T11691] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2107'. [ 569.130464][T11689] netlink: 'syz.2.2108': attribute type 3 has an invalid length. [ 569.193771][T11689] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2108'. [ 570.023673][ T26] kauditd_printk_skb: 16 callbacks suppressed [ 570.023773][ T26] audit: type=1804 audit(1756526181.067:381): pid=11706 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2112" name="file1" dev="ramfs" ino=53121 res=1 errno=0 [ 572.281075][T11723] lo speed is unknown, defaulting to 1000 [ 572.313661][T11723] lo speed is unknown, defaulting to 1000 [ 572.611459][T11743] nftables ruleset with unbound chain [ 573.181930][T11764] netlink: 'syz.3.2126': attribute type 4 has an invalid length. [ 574.877387][T11805] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2135'. [ 575.054149][T11809] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2136'. [ 575.109043][T11811] loop6: detected capacity change from 0 to 512 [ 575.127920][T11809] device macvlan0 left promiscuous mode [ 575.163404][T11809] netlink: 'syz.4.2136': attribute type 1 has an invalid length. [ 575.171179][T11809] netlink: 'syz.4.2136': attribute type 2 has an invalid length. [ 575.224645][T11811] EXT4-fs (loop6): Ignoring removed mblk_io_submit option [ 575.262512][T11811] EXT4-fs (loop6): inline encryption not supported [ 575.269349][T11811] EXT4-fs (loop6): Test dummy encryption mode enabled [ 575.332726][T11811] EXT4-fs (loop6): Ignoring removed mblk_io_submit option [ 575.391150][T11811] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 575.967197][T11828] netlink: 27 bytes leftover after parsing attributes in process `syz.4.2138'. [ 576.129207][T11811] EXT4-fs (loop6): 1 truncate cleaned up [ 576.206174][T11811] EXT4-fs (loop6): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 576.582679][T11834] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2142'. [ 580.483979][T11883] bridge0: port 2(batadv1) entered blocking state [ 580.504999][T11883] bridge0: port 2(batadv1) entered disabled state [ 580.572358][T11883] device batadv1 entered promiscuous mode [ 581.790216][ T4209] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 581.799712][ T4209] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 581.974356][T11896] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2155'. [ 582.126658][T11903] overlayfs: failed to clone lowerpath [ 582.168539][T11903] fuse: Bad value for 'group_id' [ 582.758465][ T26] audit: type=1326 audit(1756526193.597:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11915 comm="syz.2.2165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32d32c1be9 code=0x7ffc0000 [ 582.996708][T11920] loop6: detected capacity change from 0 to 256 [ 583.757424][ T26] audit: type=1326 audit(1756526193.607:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11915 comm="syz.2.2165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f32d32c1be9 code=0x7ffc0000 [ 583.796209][ T26] audit: type=1326 audit(1756526193.607:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11915 comm="syz.2.2165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32d32c1be9 code=0x7ffc0000 [ 583.944659][ T26] audit: type=1326 audit(1756526193.607:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11915 comm="syz.2.2165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f32d32c1be9 code=0x7ffc0000 [ 583.973350][ T26] audit: type=1326 audit(1756526193.607:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11915 comm="syz.2.2165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32d32c1be9 code=0x7ffc0000 [ 584.014622][ T26] audit: type=1326 audit(1756526193.607:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11915 comm="syz.2.2165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f32d32c1be9 code=0x7ffc0000 [ 584.084510][ T26] audit: type=1326 audit(1756526193.607:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11915 comm="syz.2.2165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32d32c1be9 code=0x7ffc0000 [ 584.116811][ T26] audit: type=1326 audit(1756526193.607:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11915 comm="syz.2.2165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f32d32c3a7c code=0x7ffc0000 [ 584.139410][ T26] audit: type=1326 audit(1756526193.607:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11915 comm="syz.2.2165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f32d32c39b4 code=0x7ffc0000 [ 584.161932][ T26] audit: type=1326 audit(1756526193.607:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11915 comm="syz.2.2165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f32d32c39b4 code=0x7ffc0000 [ 585.172600][T11945] vivid-003: disconnect [ 586.409517][T11935] vivid-003: reconnect [ 586.458734][T11938] netlink: 'syz.2.2173': attribute type 10 has an invalid length. [ 586.654328][T11938] bridge0: port 3(netdevsim0) entered disabled state [ 586.662262][T11938] bridge0: port 2(bridge_slave_1) entered disabled state [ 586.670187][T11938] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.574446][T11941] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2173'. [ 588.599751][T11941] device netdevsim0 left promiscuous mode [ 588.738507][T11941] bridge0: port 3(netdevsim0) entered disabled state [ 588.772177][T11941] device bridge_slave_1 left promiscuous mode [ 588.804219][T11941] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.813712][T11941] device bridge_slave_0 left promiscuous mode [ 588.824275][T11941] bridge0: port 1(bridge_slave_0) entered disabled state [ 594.572187][T12040] netlink: 'syz.6.2203': attribute type 10 has an invalid length. [ 594.599043][T12040] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2203'. [ 594.608550][T12040] bridge0: port 4(batadv0) entered disabled state [ 594.617235][T12040] device bond3 left promiscuous mode [ 595.039735][T12040] bridge0: port 3(bond3) entered disabled state [ 595.856048][T12040] device bridge_slave_1 left promiscuous mode [ 595.862340][T12040] bridge0: port 2(bridge_slave_1) entered disabled state [ 595.872673][T12040] device bridge_slave_0 left promiscuous mode [ 595.878933][T12040] bridge0: port 1(bridge_slave_0) entered disabled state [ 596.915299][ T26] kauditd_printk_skb: 21 callbacks suppressed [ 596.915315][ T26] audit: type=1326 audit(1756526207.977:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12069 comm="syz.4.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46339f7be9 code=0x7ffc0000 [ 597.378126][T12080] IPVS: Error connecting to the multicast addr [ 597.743320][ T26] audit: type=1326 audit(1756526207.977:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12069 comm="syz.4.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46339f7be9 code=0x7ffc0000 [ 597.767827][ T26] audit: type=1326 audit(1756526207.977:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12069 comm="syz.4.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f46339f7be9 code=0x7ffc0000 [ 598.357234][ T26] audit: type=1326 audit(1756526207.977:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12069 comm="syz.4.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46339f7be9 code=0x7ffc0000 [ 598.380139][ T26] audit: type=1326 audit(1756526207.977:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12069 comm="syz.4.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46339f7be9 code=0x7ffc0000 [ 598.406553][ T26] audit: type=1326 audit(1756526207.977:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12069 comm="syz.4.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f46339f6550 code=0x7ffc0000 [ 598.447325][ T26] audit: type=1326 audit(1756526207.977:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12069 comm="syz.4.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46339f7be9 code=0x7ffc0000 [ 598.472597][ T26] audit: type=1326 audit(1756526207.977:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12069 comm="syz.4.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46339f7be9 code=0x7ffc0000 [ 598.497144][ T26] audit: type=1326 audit(1756526207.977:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12069 comm="syz.4.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f46339f7be9 code=0x7ffc0000 [ 599.217716][ T26] audit: type=1326 audit(1756526207.977:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12069 comm="syz.4.2212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46339f7be9 code=0x7ffc0000 [ 601.153657][T12123] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 601.383613][T12139] netlink: 27 bytes leftover after parsing attributes in process `syz.1.2232'. [ 602.847998][T12151] netlink: 'syz.6.2238': attribute type 4 has an invalid length. [ 605.686697][T12186] loop6: detected capacity change from 0 to 128 [ 605.751712][T12193] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_team, syncid = 0, id = 0 [ 606.548410][T12186] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 606.574717][T12186] ext4 filesystem being mounted at /301/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 606.623345][T12186] EXT4-fs (loop6): shut down requested (1) [ 606.677022][T12186] fscrypt: loop6: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 606.702860][T12188] fscrypt (loop6, inode 13): Error -5 getting encryption context [ 606.711386][T12188] EXT4-fs warning (device loop6): ext4_lookup:1870: Inconsistent encryption contexts: 12/13 [ 607.148223][T12217] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 607.512337][T12205] xt_time: unknown flags 0xc [ 609.206338][T12245] xt_CT: You must specify a L4 protocol and not use inversions on it [ 616.326070][T12296] tipc: Failed to remove unknown binding: 66,1,1/2886997162:3989324263/3989324265 [ 616.338122][T12296] tipc: Failed to remove unknown binding: 66,1,1/2886997162:3989324263/3989324265 [ 617.255696][T12296] tipc: Failed to remove unknown binding: 66,1,1/2886997162:3989324263/3989324265 [ 617.904118][T12319] netlink: 'syz.1.2286': attribute type 1 has an invalid length. [ 617.940111][T12319] 8021q: adding VLAN 0 to HW filter on device bond4 [ 617.970650][T12321] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.981313][T12321] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.997308][T12321] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.014755][T12321] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.034320][T12321] bond4: (slave geneve2): making interface the new active one [ 618.051276][T12321] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 618.060368][ T9311] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready [ 621.797275][T12334] netlink: 'syz.4.2290': attribute type 10 has an invalid length. [ 621.832117][T12334] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2290'. [ 621.836126][T12351] overlayfs: failed to clone upperpath [ 621.862871][T12334] netlink: 'syz.4.2290': attribute type 10 has an invalid length. [ 621.968307][T12334] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2290'. [ 624.225391][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.231853][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.486424][T12396] xt_TPROXY: Can be used only with -p tcp or -p udp [ 626.493971][T12414] loop6: detected capacity change from 0 to 128 [ 630.924199][T12437] netlink: 'syz.1.2322': attribute type 10 has an invalid length. [ 631.887109][T12437] siw: device registration error -23 [ 633.386908][T12477] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.428684][T12477] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.437526][T12477] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.446394][T12477] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.461608][T12477] device geneve2 entered promiscuous mode [ 633.489608][T12473] loop6: detected capacity change from 0 to 4096 [ 641.861638][T12529] device syzkaller0 entered promiscuous mode [ 642.618198][T12541] netlink: 'syz.4.2349': attribute type 3 has an invalid length. [ 644.849196][T12556] loop6: detected capacity change from 0 to 512 [ 644.861554][T12556] EXT4-fs (loop6): Ignoring removed orlov option [ 645.037441][T12556] EXT4-fs (loop6): mounted filesystem without journal. Opts: nodelalloc,orlov,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 645.051645][T12556] ext4 filesystem being mounted at /321/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 645.182708][T12556] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.212469][T12556] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.242504][T12556] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.282514][T12556] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.332561][T12556] device geneve2 entered promiscuous mode [ 645.505787][T12568] xt_CT: You must specify a L4 protocol and not use inversions on it [ 646.004506][T12570] lo speed is unknown, defaulting to 1000 [ 646.010892][T12570] lo speed is unknown, defaulting to 1000 [ 646.498843][T12583] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2360'. [ 646.661751][T12587] 8021q: adding VLAN 0 to HW filter on device bond0 [ 646.700619][T12587] bond0: (slave rose0): Enslaving as an active interface with an up link [ 646.732831][ T389] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 649.808724][T12629] tipc: Enabling of bearer rejected, failed to enable media [ 651.014361][T12642] tipc: Enabling of bearer rejected, failed to enable media [ 652.761579][T12660] Set syz1 is full, maxelem 65536 reached [ 652.767404][T12665] SET target dimension over the limit! [ 656.199058][T12719] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 656.918257][T12719] Error parsing options; rc = [-22] [ 659.352056][ T26] kauditd_printk_skb: 10 callbacks suppressed [ 659.352074][ T26] audit: type=1326 audit(1756526271.351:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12765 comm="syz.4.2402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46339f7be9 code=0x7ffc0000 [ 659.394880][ T26] audit: type=1326 audit(1756526271.351:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12765 comm="syz.4.2402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7f46339f7be9 code=0x7ffc0000 [ 659.480153][ T26] audit: type=1326 audit(1756526271.351:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12765 comm="syz.4.2402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46339f7be9 code=0x7ffc0000 [ 659.506604][T12771] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2399'. [ 660.326043][ T26] audit: type=1326 audit(1756526271.351:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12765 comm="syz.4.2402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46339f7be9 code=0x7ffc0000 [ 660.565806][T12782] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2403'. [ 663.014778][T12802] device batadv2 entered promiscuous mode [ 666.217444][T12831] netlink: 'syz.2.2419': attribute type 1 has an invalid length. [ 667.184811][T12831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 667.199472][T12834] bond0: (slave geneve2): making interface the new active one [ 667.251552][T12834] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 667.758827][ T9311] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 669.731015][T12855] device batadv1 entered promiscuous mode [ 670.094033][T12862] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 670.576507][T12860] lo speed is unknown, defaulting to 1000 [ 670.618203][T12860] lo speed is unknown, defaulting to 1000 [ 671.366826][ T26] audit: type=1326 audit(1756526283.421:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12883 comm="syz.3.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6b205dbe9 code=0x7ffc0000 [ 671.432259][ T26] audit: type=1326 audit(1756526283.461:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12883 comm="syz.3.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd6b205dbe9 code=0x7ffc0000 [ 671.461328][ T26] audit: type=1326 audit(1756526283.461:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12883 comm="syz.3.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6b205dbe9 code=0x7ffc0000 [ 671.521625][ T26] audit: type=1326 audit(1756526283.461:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12883 comm="syz.3.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6b205dbe9 code=0x7ffc0000 [ 671.545737][ T26] audit: type=1326 audit(1756526283.461:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12883 comm="syz.3.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd6b205dbe9 code=0x7ffc0000 [ 671.569203][ T26] audit: type=1326 audit(1756526283.461:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12883 comm="syz.3.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6b205dbe9 code=0x7ffc0000 [ 671.600178][ T26] audit: type=1326 audit(1756526283.461:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12883 comm="syz.3.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6b205dbe9 code=0x7ffc0000 [ 671.634521][ T26] audit: type=1326 audit(1756526283.461:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12883 comm="syz.3.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd6b205dbe9 code=0x7ffc0000 [ 671.677867][ T26] audit: type=1326 audit(1756526283.461:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12883 comm="syz.3.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6b205dbe9 code=0x7ffc0000 [ 671.778394][ T26] audit: type=1326 audit(1756526283.461:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12883 comm="syz.3.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fd6b205fa7c code=0x7ffc0000 [ 671.795821][T12888] overlayfs: failed to clone lowerpath [ 671.899901][T12891] netlink: 'syz.4.2435': attribute type 1 has an invalid length. [ 671.931809][T12891] 8021q: adding VLAN 0 to HW filter on device bond2 [ 673.241868][T12896] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.254285][T12896] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.263747][T12896] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.272005][T12896] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.297243][T12896] bond2: (slave geneve2): making interface the new active one [ 674.889828][T12896] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 674.922037][ T9311] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 674.941696][T12902] device geneve3 entered promiscuous mode [ 676.935143][T12927] bridge0: port 2(batadv0) entered blocking state [ 676.972695][T12927] bridge0: port 2(batadv0) entered disabled state [ 677.014000][T12927] device batadv0 entered promiscuous mode [ 677.569277][ T4319] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 677.578867][ T4319] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 678.755610][T12972] netlink: 'syz.2.2455': attribute type 4 has an invalid length. [ 678.859410][T12978] netlink: 'syz.6.2453': attribute type 1 has an invalid length. [ 678.998469][T12978] 8021q: adding VLAN 0 to HW filter on device bond0 [ 679.258904][ T4249] lo speed is unknown, defaulting to 1000 [ 680.309484][T12976] bond0: (slave geneve3): making interface the new active one [ 680.399200][T12982] ipt_REJECT: TCP_RESET invalid for non-tcp [ 680.420906][T12976] bond0: (slave geneve3): Enslaving as an active interface with an up link [ 680.469869][ T9311] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 685.282757][T13051] loop6: detected capacity change from 0 to 40427 [ 686.545478][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.545577][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.875859][T13051] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 686.875891][T13051] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 688.071898][T13065] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2476'. [ 688.072409][T13065] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2476'. [ 688.164521][T13051] F2FS-fs (loop6): invalid crc value [ 688.166536][T13051] F2FS-fs (loop6): Failed to start F2FS issue_checkpoint_thread (-12) [ 688.784091][T13071] tipc: Enabling of bearer rejected, failed to enable media [ 689.750075][T13087] device batadv1 entered promiscuous mode [ 689.924973][T13091] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 690.076395][T13099] netlink: 'syz.6.2486': attribute type 10 has an invalid length. [ 692.302638][ T26] kauditd_printk_skb: 25 callbacks suppressed [ 692.302656][ T26] audit: type=1326 audit(1756526304.331:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13120 comm="syz.1.2494" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc0b7648be9 code=0x0 [ 693.533406][T13130] tipc: Enabling of bearer rejected, failed to enable media [ 693.650954][T13137] tipc: Enabled bearer , priority 0 [ 693.667245][T13132] netlink: 'syz.3.2495': attribute type 10 has an invalid length. [ 693.676489][T13137] device syzkaller0 entered promiscuous mode [ 693.688833][T13137] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 693.707708][T13137] tipc: Resetting bearer [ 693.717451][T13135] tipc: Resetting bearer [ 693.737054][T13135] tipc: Disabling bearer [ 694.965973][T13142] o2cb: This node has not been configured. [ 694.972298][T13142] o2cb: Cluster check failed. Fix errors before retrying. [ 694.979519][T13142] (syz.4.2500,13142,1):user_dlm_register:675 ERROR: status = -22 [ 694.987340][T13142] (syz.4.2500,13142,1):dlmfs_mkdir:430 ERROR: Error -22 could not register domain "file1" [ 696.020504][T13159] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2502'. [ 696.758952][T13176] xt_CT: You must specify a L4 protocol and not use inversions on it [ 703.679105][T13237] tipc: Enabled bearer , priority 0 [ 703.723635][T13237] device syzkaller0 entered promiscuous mode [ 705.244463][T13249] tipc: Resetting bearer [ 705.300818][T13236] tipc: Resetting bearer [ 705.518495][T13236] tipc: Disabling bearer [ 706.520084][T13259] delete_channel: no stack [ 707.118188][T13279] device bridge_slave_0 entered promiscuous mode [ 710.031960][T13302] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2538'. [ 712.134847][T13318] lo speed is unknown, defaulting to 1000 [ 712.143480][T13318] lo speed is unknown, defaulting to 1000 [ 712.149755][T13318] lo speed is unknown, defaulting to 1000 [ 712.266542][T13318] infiniband sz1: set down [ 712.271642][T13318] infiniband sz1: added lo [ 712.337155][T13319] tipc: Enabled bearer , priority 0 [ 712.402222][T13318] infiniband sz1: Couldn't open port 1 [ 712.464520][T13318] RDS/IB: sz1: added [ 712.469607][T13318] smc: adding ib device sz1 with port count 1 [ 712.476113][T13318] smc: ib device sz1 port 1 has pnetid [ 712.514140][T13318] lo speed is unknown, defaulting to 1000 [ 712.618543][T13318] lo speed is unknown, defaulting to 1000 [ 712.678825][ T4249] lo speed is unknown, defaulting to 1000 [ 712.702869][T13322] device syzkaller0 entered promiscuous mode [ 713.918164][T13318] lo speed is unknown, defaulting to 1000 [ 713.972161][T13337] tipc: Enabled bearer , priority 0 [ 714.020515][T13318] lo speed is unknown, defaulting to 1000 [ 714.081556][T13343] tipc: Enabled bearer , priority 10 [ 714.148357][T13342] tipc: Resetting bearer [ 714.183256][T13342] tipc: Disabling bearer [ 714.221935][T13318] lo speed is unknown, defaulting to 1000 [ 714.722207][ T5192] lo speed is unknown, defaulting to 1000 [ 715.678399][T13353] tipc: Enabling of bearer rejected, failed to enable media [ 716.068729][T13367] tipc: Started in network mode [ 716.106133][T13367] tipc: Node identity ac1414aa, cluster identity 4711 [ 716.123789][T13367] tipc: Enabling of bearer rejected, failed to enable media [ 716.682870][T13380] xt_hashlimit: Unknown mode mask 80FF, kernel too old? [ 717.169679][T13376] loop6: detected capacity change from 0 to 1024 [ 717.384849][T13382] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2558'. [ 717.421748][T13382] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 717.430541][T13382] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 717.439306][T13382] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 717.448042][T13382] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 717.812811][T13390] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 717.841949][T13376] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 717.872252][T13376] ext4 filesystem being mounted at /356/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 719.838415][T13390] xt_TPROXY: Can be used only with -p tcp or -p udp [ 721.586112][T13409] device batadv_slave_0 entered promiscuous mode [ 721.645397][T13414] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2563'. [ 722.870944][T13434] ipt_REJECT: TCP_RESET invalid for non-tcp [ 724.089073][T13443] tipc: Enabling of bearer rejected, already enabled [ 725.203521][T13449] tipc: Enabling of bearer rejected, already enabled [ 726.983812][T13463] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2580'. [ 727.005666][T13463] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2580'. [ 728.618730][T13485] tipc: Enabling of bearer rejected, failed to enable media [ 728.987704][T13491] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.2587'. [ 730.326104][T13510] tipc: Enabling of bearer rejected, failed to enable media [ 731.598819][T13525] tipc: Enabling of bearer rejected, already enabled [ 736.121414][T13572] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2605'. [ 736.142784][T13572] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2605'. [ 736.988477][T13571] device batadv_slave_0 entered promiscuous mode [ 737.026805][T13569] tipc: Enabling of bearer rejected, failed to enable media [ 738.035481][T13587] netlink: 'syz.3.2610': attribute type 10 has an invalid length. [ 738.557897][T13594] overlayfs: failed to resolve './file0': -2 [ 739.290715][T13597] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2623'. [ 739.401360][T13600] loop6: detected capacity change from 0 to 1024 [ 739.399419][T13597] bridge0: port 1(vlan2) entered blocking state [ 739.421755][T13597] bridge0: port 1(vlan2) entered disabled state [ 739.460794][T13600] EXT4-fs (loop6): Ignoring removed nobh option [ 739.509529][T13600] EXT4-fs (loop6): Ignoring removed bh option [ 739.517346][T13600] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 739.561808][T13602] device gretap1 entered promiscuous mode [ 739.576419][T13602] bridge0: port 1(gretap1) entered blocking state [ 739.583574][T13602] bridge0: port 1(gretap1) entered disabled state [ 739.607961][T13600] EXT4-fs (loop6): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 740.341651][T13613] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2617'. [ 740.453641][T13616] tipc: Enabling of bearer rejected, already enabled [ 741.277258][T13619] overlayfs: conflicting lowerdir path [ 742.907047][T13632] device batadv_slave_0 entered promiscuous mode [ 743.024952][T13637] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 743.119186][T13641] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2620'. [ 743.136605][T13641] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2620'. [ 745.121922][T13659] tipc: Enabling of bearer rejected, already enabled [ 746.701939][T13669] device bridge_slave_0 entered promiscuous mode [ 746.719023][T13669] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 746.781587][T13674] tipc: Enabling of bearer rejected, failed to enable media [ 747.262082][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.542194][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.601719][T13695] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 748.631326][T13695] batadv0: mtu less than device minimum [ 748.660546][T13695] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 748.673148][T13695] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 748.685652][T13695] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 748.697422][T13695] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 748.709137][T13695] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 748.720938][T13695] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 748.732785][T13695] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 748.744474][T13695] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 748.756165][T13695] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 748.790205][T13695] device batadv_slave_0 entered promiscuous mode [ 750.345290][T13729] xt_recent: Unsupported userspace flags (000000de) [ 751.314637][T13749] device batadv_slave_0 entered promiscuous mode [ 751.596700][T13761] netlink: 'syz.6.2660': attribute type 12 has an invalid length. [ 756.891005][T13796] loop6: detected capacity change from 0 to 256 [ 762.562519][T13857] netlink: 180 bytes leftover after parsing attributes in process `syz.4.2682'. [ 765.228332][T13878] tipc: Enabling of bearer rejected, failed to enable media [ 765.255545][T13867] smb3: Bad value for 'uid' [ 765.315028][T13867] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2687'. [ 767.247049][T13897] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2692'. [ 767.257800][T13897] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2692'. [ 767.880716][T13903] net_ratelimit: 10 callbacks suppressed [ 767.880757][T13903] openvswitch: netlink: Actions may not be safe on all matching packets [ 772.130659][T13947] overlayfs: failed to clone upperpath [ 773.049529][T13957] tipc: New replicast peer: 255.255.255.255 [ 773.186295][T13957] tipc: Enabled bearer , priority 10 [ 776.593138][T13990] delete_channel: no stack [ 776.697734][T13998] loop6: detected capacity change from 0 to 1024 [ 780.220819][T13998] EXT4-fs: failed to create workqueue [ 780.239674][T13998] EXT4-fs (loop6): mount failed [ 782.571914][T14040] loop6: detected capacity change from 0 to 1024 [ 784.059107][T14057] tipc: Enabling of bearer rejected, failed to enable media [ 784.124789][T14040] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 784.150739][T14040] ext4 filesystem being mounted at /382/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 786.860962][T14090] loop6: detected capacity change from 0 to 32768 [ 787.141058][T14090] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.2743 (14090) [ 787.651532][T14090] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 787.660442][T14090] BTRFS info (device loop6): enabling disk space caching [ 787.667781][T14090] BTRFS info (device loop6): setting nodatasum [ 787.674435][T14090] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_LZO (0x8) [ 787.684462][T14090] BTRFS info (device loop6): force lzo compression, level 0 [ 787.691920][T14090] BTRFS info (device loop6): unrecognized rescue option 'ignoremetacsums' [ 787.700958][T14090] BTRFS error (device loop6): unrecognized rescue value ignoremetacsums [ 787.710065][T14090] BTRFS error (device loop6): cannot disable free space tree [ 787.737719][T14090] BTRFS error (device loop6): open_ctree failed: -22 [ 787.800678][T13996] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by udevd (13996) [ 787.824014][T14108] tipc: Enabling of bearer rejected, already enabled [ 790.776333][T14142] loop6: detected capacity change from 0 to 1024 [ 792.513874][T14146] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2757'. [ 793.037445][T14142] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 793.065046][T14142] ext4 filesystem being mounted at /385/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 795.418978][ T26] audit: type=1800 audit(1756526663.454:473): pid=14163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2758" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 795.627965][T14155] netlink: 'syz.4.2761': attribute type 29 has an invalid length. [ 795.650458][T14176] gfs2: gfs2 mount does not exist [ 795.657897][T14155] netlink: 'syz.4.2761': attribute type 29 has an invalid length. [ 795.675692][T14155] netlink: 'syz.4.2761': attribute type 29 has an invalid length. [ 795.778345][T14174] loop6: detected capacity change from 0 to 1024 [ 796.165488][T14174] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 796.401430][T14174] ext4 filesystem being mounted at /386/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 798.750684][T14204] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2771'. [ 798.760137][T14204] openvswitch: netlink: IP tunnel attribute has 3056 unknown bytes. [ 801.331960][T14219] netlink: 'syz.6.2772': attribute type 10 has an invalid length. [ 801.457031][T14219] team0: Failed to send options change via netlink (err -105) [ 801.469742][T14219] team0: Port device dummy0 added [ 801.504079][T14228] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2779'. [ 801.602602][T14231] tipc: Enabling of bearer rejected, failed to enable media [ 802.517903][T14243] loop6: detected capacity change from 0 to 1024 [ 803.280571][T14243] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 803.304882][T14243] ext4 filesystem being mounted at /388/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 806.573746][T14290] tipc: Enabling of bearer rejected, failed to enable media [ 807.453713][T14293] loop6: detected capacity change from 0 to 4096 [ 807.640519][T14293] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 808.765820][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.772217][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.836877][T14335] tipc: Enabling of bearer rejected, already enabled [ 813.689426][T14362] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 815.064576][T14374] overlayfs: failed to clone upperpath [ 818.230113][T14409] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2827'. [ 818.240863][T14409] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2827'. [ 819.389155][T14422] [ 819.391544][T14422] ====================================================== [ 819.398580][T14422] WARNING: possible circular locking dependency detected [ 819.405628][T14422] syzkaller #0 Not tainted [ 819.410056][T14422] ------------------------------------------------------ [ 819.417083][T14422] syz.3.2832/14422 is trying to acquire lock: [ 819.423160][T14422] ffff8880241ad1a0 (msk_lock-AF_INET){+.+.}-{0:0}, at: inet_sk_diag_fill+0xef6/0x1b50 [ 819.432768][T14422] [ 819.432768][T14422] but task is already holding lock: [ 819.440142][T14422] ffffc90001870948 (&h->lhash2[i].lock){+.+.}-{2:2}, at: mptcp_diag_dump+0x911/0x1290 [ 819.449748][T14422] [ 819.449748][T14422] which lock already depends on the new lock. [ 819.449748][T14422] [ 819.460163][T14422] [ 819.460163][T14422] the existing dependency chain (in reverse order) is: [ 819.469284][T14422] [ 819.469284][T14422] -> #2 (&h->lhash2[i].lock){+.+.}-{2:2}: [ 819.477225][T14422] _raw_spin_lock+0x2a/0x40 [ 819.482284][T14422] inet_unhash+0xd0/0x540 [ 819.487155][T14422] tcp_set_state+0x35b/0x520 [ 819.492290][T14422] __tcp_close+0x91/0xf10 [ 819.497167][T14422] __mptcp_close_ssk+0x1ea/0x460 [ 819.502653][T14422] __mptcp_destroy_sock+0x3f6/0x720 [ 819.508418][T14422] mptcp_close+0x5a4/0x9f0 [ 819.513375][T14422] inet_release+0x139/0x180 [ 819.518420][T14422] sock_release+0x7b/0x140 [ 819.523390][T14422] mptcp_nl_cmd_add_addr+0x9fd/0xcf0 [ 819.529216][T14422] genl_rcv_msg+0xbc6/0xf40 [ 819.534261][T14422] netlink_rcv_skb+0x1e0/0x430 [ 819.539579][T14422] genl_rcv+0x24/0x40 [ 819.544102][T14422] netlink_unicast+0x774/0x920 [ 819.549418][T14422] netlink_sendmsg+0x8ab/0xbc0 [ 819.554746][T14422] ____sys_sendmsg+0x5a2/0x8c0 [ 819.560056][T14422] ___sys_sendmsg+0x1f0/0x260 [ 819.565284][T14422] __se_sys_sendmsg+0x190/0x250 [ 819.570684][T14422] do_syscall_64+0x4c/0xa0 [ 819.575651][T14422] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 819.582095][T14422] [ 819.582095][T14422] -> #1 (k-sk_lock-AF_INET/1){+.+.}-{0:0}: [ 819.590128][T14422] mptcp_close+0x297/0x9f0 [ 819.595090][T14422] inet_release+0x139/0x180 [ 819.600145][T14422] sock_release+0x7b/0x140 [ 819.605151][T14422] mptcp_nl_cmd_add_addr+0x9fd/0xcf0 [ 819.610979][T14422] genl_rcv_msg+0xbc6/0xf40 [ 819.616004][T14422] netlink_rcv_skb+0x1e0/0x430 [ 819.621299][T14422] genl_rcv+0x24/0x40 [ 819.625802][T14422] netlink_unicast+0x774/0x920 [ 819.631107][T14422] netlink_sendmsg+0x8ab/0xbc0 [ 819.636416][T14422] ____sys_sendmsg+0x5a2/0x8c0 [ 819.641707][T14422] ___sys_sendmsg+0x1f0/0x260 [ 819.646905][T14422] __se_sys_sendmsg+0x190/0x250 [ 819.652306][T14422] do_syscall_64+0x4c/0xa0 [ 819.657260][T14422] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 819.663677][T14422] [ 819.663677][T14422] -> #0 (msk_lock-AF_INET){+.+.}-{0:0}: [ 819.671499][T14422] __lock_acquire+0x2c33/0x7c60 [ 819.676883][T14422] lock_acquire+0x197/0x3f0 [ 819.681912][T14422] mptcp_diag_get_info+0x1db/0x990 [ 819.687549][T14422] inet_sk_diag_fill+0xef6/0x1b50 [ 819.693099][T14422] mptcp_diag_dump+0xcca/0x1290 [ 819.698476][T14422] __inet_diag_dump+0x1f6/0x380 [ 819.703852][T14422] inet_diag_dump_compat+0x161/0x200 [ 819.709675][T14422] netlink_dump+0x676/0xcd0 [ 819.714710][T14422] __netlink_dump_start+0x523/0x700 [ 819.720431][T14422] inet_diag_rcv_msg_compat+0x1e9/0x3c0 [ 819.726501][T14422] sock_diag_rcv_msg+0x164/0x3e0 [ 819.731978][T14422] netlink_rcv_skb+0x1e0/0x430 [ 819.737283][T14422] sock_diag_rcv+0x26/0x40 [ 819.742225][T14422] netlink_unicast+0x774/0x920 [ 819.747516][T14422] netlink_sendmsg+0x8ab/0xbc0 [ 819.752804][T14422] ____sys_sendmsg+0x5a2/0x8c0 [ 819.758089][T14422] ___sys_sendmsg+0x1f0/0x260 [ 819.763288][T14422] __se_sys_sendmsg+0x190/0x250 [ 819.768659][T14422] do_syscall_64+0x4c/0xa0 [ 819.773618][T14422] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 819.780037][T14422] [ 819.780037][T14422] other info that might help us debug this: [ 819.780037][T14422] [ 819.790433][T14422] Chain exists of: [ 819.790433][T14422] msk_lock-AF_INET --> k-sk_lock-AF_INET/1 --> &h->lhash2[i].lock [ 819.790433][T14422] [ 819.804171][T14422] Possible unsafe locking scenario: [ 819.804171][T14422] [ 819.811703][T14422] CPU0 CPU1 [ 819.817064][T14422] ---- ---- [ 819.822427][T14422] lock(&h->lhash2[i].lock); [ 819.827108][T14422] lock(k-sk_lock-AF_INET/1); [ 819.834504][T14422] lock(&h->lhash2[i].lock); [ 819.841705][T14422] lock(msk_lock-AF_INET); [ 819.846207][T14422] [ 819.846207][T14422] *** DEADLOCK *** [ 819.846207][T14422] [ 819.854345][T14422] 6 locks held by syz.3.2832/14422: [ 819.859536][T14422] #0: ffffffff8d241668 (sock_diag_mutex){+.+.}-{3:3}, at: sock_diag_rcv+0x17/0x40 [ 819.868853][T14422] #1: ffffffff8d241528 (sock_diag_table_mutex){+.+.}-{3:3}, at: sock_diag_rcv_msg+0x14a/0x3e0 [ 819.879215][T14422] #2: ffff88807654f690 (nlk_cb_mutex-SOCK_DIAG){+.+.}-{3:3}, at: __netlink_dump_start+0x11f/0x700 [ 819.889945][T14422] #3: ffffffff8d31b988 (inet_diag_table_mutex){+.+.}-{3:3}, at: __inet_diag_dump+0x181/0x380 [ 819.900211][T14422] #4: ffffffff8c11c460 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 819.909520][T14422] #5: ffffc90001870948 (&h->lhash2[i].lock){+.+.}-{2:2}, at: mptcp_diag_dump+0x911/0x1290 [ 819.919527][T14422] [ 819.919527][T14422] stack backtrace: [ 819.925412][T14422] CPU: 1 PID: 14422 Comm: syz.3.2832 Not tainted syzkaller #0 [ 819.932869][T14422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 819.942936][T14422] Call Trace: [ 819.946218][T14422] [ 819.949158][T14422] dump_stack_lvl+0x168/0x230 [ 819.953841][T14422] ? load_image+0x3b0/0x3b0 [ 819.958346][T14422] ? show_regs_print_info+0x20/0x20 [ 819.963546][T14422] ? print_circular_bug+0x12b/0x1a0 [ 819.968918][T14422] check_noncircular+0x274/0x310 [ 819.973872][T14422] ? add_chain_block+0x940/0x940 [ 819.978827][T14422] ? lockdep_lock+0xdc/0x1e0 [ 819.983434][T14422] ? mark_lock+0x94/0x320 [ 819.987765][T14422] __lock_acquire+0x2c33/0x7c60 [ 819.992659][T14422] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 819.998746][T14422] ? verify_lock_unused+0x140/0x140 [ 820.003952][T14422] ? lockdep_hardirqs_on_prepare+0x760/0x760 [ 820.009935][T14422] ? verify_lock_unused+0x140/0x140 [ 820.015229][T14422] ? __local_bh_enable_ip+0xcb/0x1b0 [ 820.020531][T14422] ? __local_bh_enable_ip+0x12a/0x1b0 [ 820.025909][T14422] ? lockdep_hardirqs_on+0x94/0x140 [ 820.031115][T14422] ? __local_bh_enable_ip+0x12a/0x1b0 [ 820.036492][T14422] ? _local_bh_enable+0xa0/0xa0 [ 820.041361][T14422] ? skb_put+0x117/0x210 [ 820.045606][T14422] lock_acquire+0x197/0x3f0 [ 820.050138][T14422] ? inet_sk_diag_fill+0xef6/0x1b50 [ 820.055344][T14422] ? read_lock_is_recursive+0x10/0x10 [ 820.060809][T14422] ? rcu_lock_release+0x5/0x20 [ 820.065577][T14422] ? __lock_acquire+0x7c60/0x7c60 [ 820.070604][T14422] ? inet_sk_diag_fill+0xef6/0x1b50 [ 820.075804][T14422] mptcp_diag_get_info+0x1db/0x990 [ 820.080918][T14422] ? inet_sk_diag_fill+0xef6/0x1b50 [ 820.086117][T14422] inet_sk_diag_fill+0xef6/0x1b50 [ 820.091143][T14422] ? inet_diag_msg_attrs_fill+0x8c0/0x8c0 [ 820.096859][T14422] ? rcu_lock_release+0x5/0x20 [ 820.101628][T14422] ? do_raw_spin_lock+0x11d/0x280 [ 820.106650][T14422] ? inet_diag_bc_sk+0x187/0x10c0 [ 820.111673][T14422] ? security_capable+0x85/0xb0 [ 820.116540][T14422] mptcp_diag_dump+0xcca/0x1290 [ 820.121400][T14422] ? mptcp_token_join_cookie_init_state+0x460/0x460 [ 820.128014][T14422] __inet_diag_dump+0x1f6/0x380 [ 820.132870][T14422] inet_diag_dump_compat+0x161/0x200 [ 820.138155][T14422] ? inet_diag_dump_start_compat+0x20/0x20 [ 820.143974][T14422] ? memset+0x1e/0x40 [ 820.147992][T14422] ? __alloc_skb+0x473/0x750 [ 820.152594][T14422] netlink_dump+0x676/0xcd0 [ 820.157112][T14422] ? netlink_lookup+0x1d0/0x1d0 [ 820.161974][T14422] ? __inet_diag_dump_start+0x805/0x970 [ 820.167531][T14422] __netlink_dump_start+0x523/0x700 [ 820.172747][T14422] inet_diag_rcv_msg_compat+0x1e9/0x3c0 [ 820.178301][T14422] ? inet_diag_unregister+0xb0/0xb0 [ 820.183499][T14422] ? mutex_lock_io_nested+0x60/0x60 [ 820.188728][T14422] ? __inet_diag_dump+0x380/0x380 [ 820.193765][T14422] ? inet_diag_dump_start_compat+0x20/0x20 [ 820.199574][T14422] ? inet_diag_dump+0x50/0x50 [ 820.204352][T14422] ? sock_diag_rcv+0x17/0x40 [ 820.208944][T14422] ? sock_diag_rcv+0x17/0x40 [ 820.213651][T14422] ? inet_diag_unregister+0xb0/0xb0 [ 820.218855][T14422] sock_diag_rcv_msg+0x164/0x3e0 [ 820.223797][T14422] netlink_rcv_skb+0x1e0/0x430 [ 820.228561][T14422] ? sock_diag_bind+0xa0/0xa0 [ 820.233252][T14422] ? netlink_ack+0xb60/0xb60 [ 820.237847][T14422] ? __lock_acquire+0x7c60/0x7c60 [ 820.242887][T14422] sock_diag_rcv+0x26/0x40 [ 820.247309][T14422] netlink_unicast+0x774/0x920 [ 820.252080][T14422] netlink_sendmsg+0x8ab/0xbc0 [ 820.256850][T14422] ? netlink_getsockopt+0x560/0x560 [ 820.262082][T14422] ? aa_sock_msg_perm+0x94/0x150 [ 820.267042][T14422] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 820.272420][T14422] ? security_socket_sendmsg+0x7c/0xa0 [ 820.277873][T14422] ? netlink_getsockopt+0x560/0x560 [ 820.283072][T14422] ____sys_sendmsg+0x5a2/0x8c0 [ 820.287841][T14422] ? memset+0x1e/0x40 [ 820.291833][T14422] ? __sys_sendmsg_sock+0x30/0x30 [ 820.296886][T14422] ? import_iovec+0x6f/0xa0 [ 820.301394][T14422] ___sys_sendmsg+0x1f0/0x260 [ 820.306079][T14422] ? __sys_sendmsg+0x250/0x250 [ 820.310875][T14422] ? percpu_counter_add_batch+0x13b/0x160 [ 820.316612][T14422] ? __fdget+0x18b/0x210 [ 820.320861][T14422] __se_sys_sendmsg+0x190/0x250 [ 820.325718][T14422] ? __x64_sys_sendmsg+0x80/0x80 [ 820.330666][T14422] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 820.336655][T14422] ? lockdep_hardirqs_on+0x94/0x140 [ 820.341858][T14422] do_syscall_64+0x4c/0xa0 [ 820.346273][T14422] ? clear_bhb_loop+0x30/0x80 [ 820.351036][T14422] ? clear_bhb_loop+0x30/0x80 [ 820.355831][T14422] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 820.361757][T14422] RIP: 0033:0x7fd6b205dbe9 [ 820.366193][T14422] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 820.385809][T14422] RSP: 002b:00007fd6b02c5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 820.394228][T14422] RAX: ffffffffffffffda RBX: 00007fd6b2294fa0 RCX: 00007fd6b205dbe9 [ 820.402203][T14422] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 820.410177][T14422] RBP: 00007fd6b20e0e19 R08: 0000000000000000 R09: 0000000000000000 [ 820.418151][T14422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 820.426126][T14422] R13: 00007fd6b2295038 R14: 00007fd6b2294fa0 R15: 00007ffe8d9c6b58 [ 820.434258][T14422] [ 820.438261][T14422] BUG: sleeping function called from invalid context at net/core/sock.c:3283 [ 820.447107][T14422] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 14422, name: syz.3.2832 [ 820.456282][T14422] INFO: lockdep is turned off. [ 820.461055][T14422] Preemption disabled at: [ 820.461066][T14422] [<0000000000000000>] 0x0 [ 820.469925][T14422] CPU: 1 PID: 14422 Comm: syz.3.2832 Not tainted syzkaller #0 [ 820.477397][T14422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 820.487477][T14422] Call Trace: [ 820.490782][T14422] [ 820.493754][T14422] dump_stack_lvl+0x168/0x230 [ 820.498551][T14422] ? show_regs_print_info+0x20/0x20 [ 820.503813][T14422] ? load_image+0x3b0/0x3b0 [ 820.508343][T14422] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 820.514613][T14422] ___might_sleep+0x47c/0x600 [ 820.519322][T14422] ? __might_sleep+0xf0/0xf0 [ 820.523930][T14422] ? read_lock_is_recursive+0x10/0x10 [ 820.529330][T14422] ? rcu_lock_release+0x5/0x20 [ 820.534202][T14422] __lock_sock_fast+0x2f/0xe0 [ 820.538908][T14422] ? inet_sk_diag_fill+0xef6/0x1b50 [ 820.544126][T14422] mptcp_diag_get_info+0x1e7/0x990 [ 820.549441][T14422] inet_sk_diag_fill+0xef6/0x1b50 [ 820.554501][T14422] ? inet_diag_msg_attrs_fill+0x8c0/0x8c0 [ 820.560243][T14422] ? rcu_lock_release+0x5/0x20 [ 820.565028][T14422] ? do_raw_spin_lock+0x11d/0x280 [ 820.570091][T14422] ? inet_diag_bc_sk+0x187/0x10c0 [ 820.575136][T14422] ? security_capable+0x85/0xb0 [ 820.580015][T14422] mptcp_diag_dump+0xcca/0x1290 [ 820.584900][T14422] ? mptcp_token_join_cookie_init_state+0x460/0x460 [ 820.591517][T14422] __inet_diag_dump+0x1f6/0x380 [ 820.596393][T14422] inet_diag_dump_compat+0x161/0x200 [ 820.601715][T14422] ? inet_diag_dump_start_compat+0x20/0x20 [ 820.607538][T14422] ? memset+0x1e/0x40 [ 820.611526][T14422] ? __alloc_skb+0x473/0x750 [ 820.616128][T14422] netlink_dump+0x676/0xcd0 [ 820.620652][T14422] ? netlink_lookup+0x1d0/0x1d0 [ 820.625633][T14422] ? __inet_diag_dump_start+0x805/0x970 [ 820.631211][T14422] __netlink_dump_start+0x523/0x700 [ 820.636413][T14422] inet_diag_rcv_msg_compat+0x1e9/0x3c0 [ 820.641962][T14422] ? inet_diag_unregister+0xb0/0xb0 [ 820.647157][T14422] ? mutex_lock_io_nested+0x60/0x60 [ 820.652363][T14422] ? __inet_diag_dump+0x380/0x380 [ 820.657388][T14422] ? inet_diag_dump_start_compat+0x20/0x20 [ 820.663193][T14422] ? inet_diag_dump+0x50/0x50 [ 820.667873][T14422] ? sock_diag_rcv+0x17/0x40 [ 820.672468][T14422] ? sock_diag_rcv+0x17/0x40 [ 820.677060][T14422] ? inet_diag_unregister+0xb0/0xb0 [ 820.682255][T14422] sock_diag_rcv_msg+0x164/0x3e0 [ 820.687218][T14422] netlink_rcv_skb+0x1e0/0x430 [ 820.692074][T14422] ? sock_diag_bind+0xa0/0xa0 [ 820.696759][T14422] ? netlink_ack+0xb60/0xb60 [ 820.701371][T14422] ? __lock_acquire+0x7c60/0x7c60 [ 820.706401][T14422] sock_diag_rcv+0x26/0x40 [ 820.710820][T14422] netlink_unicast+0x774/0x920 [ 820.715590][T14422] netlink_sendmsg+0x8ab/0xbc0 [ 820.720448][T14422] ? netlink_getsockopt+0x560/0x560 [ 820.725651][T14422] ? aa_sock_msg_perm+0x94/0x150 [ 820.730782][T14422] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 820.736067][T14422] ? security_socket_sendmsg+0x7c/0xa0 [ 820.741524][T14422] ? netlink_getsockopt+0x560/0x560 [ 820.746727][T14422] ____sys_sendmsg+0x5a2/0x8c0 [ 820.751511][T14422] ? memset+0x1e/0x40 [ 820.755493][T14422] ? __sys_sendmsg_sock+0x30/0x30 [ 820.760520][T14422] ? import_iovec+0x6f/0xa0 [ 820.765025][T14422] ___sys_sendmsg+0x1f0/0x260 [ 820.769711][T14422] ? __sys_sendmsg+0x250/0x250 [ 820.774477][T14422] ? percpu_counter_add_batch+0x13b/0x160 [ 820.780219][T14422] ? __fdget+0x18b/0x210 [ 820.784460][T14422] __se_sys_sendmsg+0x190/0x250 [ 820.789318][T14422] ? __x64_sys_sendmsg+0x80/0x80 [ 820.794342][T14422] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 820.800417][T14422] ? lockdep_hardirqs_on+0x94/0x140 [ 820.805619][T14422] do_syscall_64+0x4c/0xa0 [ 820.810040][T14422] ? clear_bhb_loop+0x30/0x80 [ 820.814733][T14422] ? clear_bhb_loop+0x30/0x80 [ 820.819410][T14422] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 820.825303][T14422] RIP: 0033:0x7fd6b205dbe9 [ 820.829720][T14422] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 820.849327][T14422] RSP: 002b:00007fd6b02c5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 820.857754][T14422] RAX: ffffffffffffffda RBX: 00007fd6b2294fa0 RCX: 00007fd6b205dbe9 [ 820.865726][T14422] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 820.873698][T14422] RBP: 00007fd6b20e0e19 R08: 0000000000000000 R09: 0000000000000000 [ 820.881668][T14422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 820.889639][T14422] R13: 00007fd6b2295038 R14: 00007fd6b2294fa0 R15: 00007ffe8d9c6b58 [ 820.897627][T14422] [ 821.179266][T14432] overlayfs: failed to clone upperpath