last executing test programs: 7m15.57690921s ago: executing program 2 (id=51): pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0x42795000) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) setreuid(0xee01, 0xee01) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r3, 0x1, 0x200000010, &(0x7f0000000000)=0x9, 0x4) sendto$unix(r2, &(0x7f00000004c0)="0434", 0x2, 0xd1, 0x0, 0x0) recvfrom$unix(r3, 0x0, 0x0, 0x10102, 0x0, 0x0) splice(r0, 0x0, r1, 0x0, 0xfffd, 0x0) 7m15.46159979s ago: executing program 2 (id=53): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xffffffffffffffff, {0xffffffffffffffff, 0x2, 0x101, 0x0, 0x0, 0x10000000, {0x40, 0xd08, 0x0, 0x100, 0x0, 0x0, 0x7, 0x0, 0x122, 0x6000, 0x10000, 0x0, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@gettclass={0x24, 0x2a, 0x20, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0xfff2, 0xffe0}, {0xe, 0xfff2}}}, 0x24}, 0x1, 0x7a00}, 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) ioctl$TIOCGPTPEER(r3, 0x40480923, 0x200000000005) ioctl$TIOCGPTPEER(r2, 0x40480923, 0x200000000005) 7m15.282328546s ago: executing program 2 (id=56): r0 = syz_open_procfs(0x0, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000600)=@multiplanar_overlay={0x985, 0x3, 0x4, 0x800000, 0x62, {0x0, 0x2710}, {0x4, 0x0, 0x56, 0x6, 0x4, 0x7, "0d7f70d2"}, 0x9e1, 0x3, {&(0x7f0000000580)=[{0x6, 0x3, {0x1ed}, 0x80}, {0x9, 0x101, {0x94}, 0x7}]}, 0x6, 0x0, r0}) r1 = open$dir(0x0, 0x2704c3, 0x9) readv(r1, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x101001, 0x0) io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000001640)="0115a82b2c236370c1422d633c65ee102c9eab4a6dc0e845c1d88bd078cba2a2d7c5161a4b5d186dbc6dd1f727ae560c5856f7719e991239563fbb185be934039dc1039a0ae64a1674c577402498dde2f55a6cc85cd9a08f224f229cbdcc535222e8cd3355cd90a48d55b7692fa392ff57673b2080012231b794dd2384de39b30b1365e5befb6a6520f24c2109d15edddaf87cf37ef389f4f656531cef2fb5d4779a46d83c795b8702bcbf789aea488b1578500dbde7b188ac586cbe7658b60d3c4f7f88ccabef01ceb5fd0d5df5c34b5a7f9b70550e5d6ad5786edc686eec902e0de09b2f1824062348021b4e7fc612b2c0a33cc237a3b7d043517131e985bd42685ac6b070b1c1480bd1a90bae914cd10bb9f59df13d0636ac3885b8530b4340948ea84fbeca34583c0d3f5d322a6dd730525c71451ae02d83462c0c80e043da4ae4c18f2e841e636d60e273b2fcf6ec570dfd38c397c5ff99a0edfc3515514552748234b847512f25e9ef3be754628554245186620f6d449e76ca5352f95ab3171b34ff795010e6e921b0c60ba6df5d471f7322932e7c6c1bd1325effbc99f3e342acf0a210538b93ca03b765f847447f24eea930d299cdd0212c281346e49b097ee12f4af01c30bf622144aaee0c0aa2a32551132b3e7d7e4c05bed667868858db4df1b403c1a8eff4528f57fd077d5d1f1d02c4853e64668af1aed0e943abcb9aea4c1b5c480c31096e5468df2474fdef1bd8038305ea47c04002a3102d247778968d5e39d96c2b5b2294d7297a4d9f456cbed5afd2c13ced4e1106f1d94369a5e2cc8b67bf3018fa90c59b52069669296eb453451d53caa777f6b9a1fe0b958239219c3458072cfddd52ea4642f0f09ce2431cfd0829baf561badd892b279c6e70ae9fd0cbdb16959e78aa5f52b1ab89bace12b3a650a1027d99fa0f44a161e22a596daaa341e35bf6cb3ce2b1f35fac9f85913233a3ad2f87d00bb81a2f11b279bc3ad45fee843951d0ba139e4cd62affe2527ca7b00de3e7ff7e5dfa2070886121bc784c30ca9f56d61db3417f054c5a417aa8fa18fb0be382442b74a2c3365b965e4c88fb24df25dcf65cfebbfbd857d2fda308a178f080c60a751b74f486bcc7c70552bae8551e36c6ef6aacbfe8cea4eac90f51da07c490806757872d3b7485e3dcd31ac4583ccdd819a49ae7a6681a7043380282892c794a59956ef02fdadf65158d282473b22687057209c48a1f2b5ea26b053fb1b6305e2e86d77f98eba00d51564536fa5394e44a605c7af8e0b5c97ffe4e2243a11e58ed3a9c956c18e852301714b084763096f0fc9bae5f1bedf132a93de1d0572ce18e270368e1e057cde261588c9c6a6e246d3e6e546238dccba818fd654e8da3c915c7b5680b297933626291d2bea9f3a65ebb423fe3abf45038e46702fcfe5693b6a625c2b13dfc52cd338de2ffc3497a8b6ff3c6b2e08c68f719581c51073922dbf7083adc08a2c21ad3c80499352ab51780be171ad8cff20683d006ed14f49d4c77c3880dd982a7ac71fe462d961b8e88e4b5a74b3d390a21403aa5b5060db71bc47034d2f28377b84f6a0cf0dd94596fcd935e0c08dd626a00d5e965765636b42aea825a177d65370e966062458d59d97b251cec57c150e0129233850b5a85be8eca025dc56b1d89af1649b2083d715e83a3c504206c2d6f83e2bc287a2fd194fc911de880b722493ad53abe234272237f179f4a24fd55d60c1c4eee5748f85095daddc511d8ac97832f9304c737031cc6723f22d93b2ddab304935058a402eaff1c24693d199ff379c8c3f9c83b3844aa05d16137ce2e8671e1bd69cfce0194bb81a63f6e1a60c8e69d926d21c14cc027ce323abf5b1e69cbe1aceb99b487b037f047783b94473e374d6f5dc432a7dfcc7c10e24f532ba2c46c0a29afda47022aa8eb03e19b85931d6519ca91fd69b6d7bf488ca4f026805ac85b8db6e80a75e3c1191ad3d0e3b424e82b079b3c45a161ead251ff02467489e99d24f3c6f5b061a96091713a9d24fad6ea6f53e3732a5975716b7735af558c319f762c529607cd74d39fe38582bb98a7566f4e0135449ec11b3d14de598d4e7a87f0ee8170f8fafeb08aeb324eab1b4216a2823c9359ac0fd3bd7bdb57aae6a67235221f243db85cde570b2b6c44ef64880a80ee95ff85ae7b3f572e4c48315b991b25a9c95f4712e7b2b804b090dffe7e28d8f33c3f0310e3df1b3ac279c64ceb1f11ebd613768fd95cb3f2be81fa9ea055de3f1243f276d4f26d8ccc2ca63a4a6eb357e84e048e2e4ddfa2205f30a66bcd732966b7f6f05bcb8f4a939eec39b62004b4d861bf129c512e670afa495e6190b86cff8a33fadbf1e9c6d666852bd63ffb3989bd65e9f7abd3a7aeb873cf163440814eda6608f49eca7c5cde5ea08cf07d0bff379a8d4864eeefeeffc099227c0b85c2649a2b80db7d46ef8291810dccc585b65f2e211c33bb79156723afdccd7e485beb1d16eb084b3c12613d4fc822fc08fa2124af6c9929986406c030597a73947ea8e17e60ffc4399bef27ab8c023952839190a396fbf77978861d6b1abc5d97cc4877e65c0cb00edabcad2eecd570d043d21ae1d5f5b7c8d146a85950b35615079d86b5b2b398e0cc71858eeef8fae12a115f16e0110b0c8046f4693312a9eb9c9254d6ef651c0e289240ee103b9c74be22389c30cae5f0127a3c7ea7d7e25075ff2ff14c5bac4cd0d6dcf549fb44401c377b7a73178531040eb4f5889a71a318553a75cc47fefe4973247df9c50f87837982510bd53a500f7943776a1eede6c1d7f6e319ed54156f49c71b26d96515faa526b34554ac61fb146abc88a8080b27184901721b3501ee9e50c1d4d09373f9bc947ea85c42e9600c3828bf1b056f325397951ae4cfd8eef03860a685cd0a9b4c1cb51e448446f533967d1adb046f972252ace0aad95006c701a55c093ecd8fc7472871483efeb9f6ffc4d06f110329f0e2ed9e50d00e73b7ed1b8f72d27b52c0f9650dbdde0425bbd50d986fe78fe0afbfdb5637405755b1a18e8459bc734be3a53b89a869cd9e0790be16e92ed9b3c2321c7b4b04a869d9c6289db8c3b864eb8e094dff4e6acdcb747c4b283b56830eae4f6de0a4515eaa49ff633cf25af11ce368c3abe91f5d7a19904b6cef753e7969de1c9b20cdeefbb3fa976ed3c64780e9923447545f10b8a729abde4565a02ea001a52f1a83c7803f40fb84e291c98c0241ac46c2e3ba616e67f61451e24d5fc4881c73d89fc8beadc4193c2604a7cde1dff909d3bdd7ae895addb20b8f6e36779d909b8a74c886b5a34ae060bbcfc6436ee09b24efb82a76dd72db5199b9adde3231bd855060f746c7e6cd780b254d9f4e87c8e8341534e8469502075123343e5a64d1f67af34d67620fd2c26b20715356d64db0b8de721dbc4ae2f089bbc3c9024739b6448a4c357d9387b972accda307113214d5ef123216dbf4cecb56eba140bce6e01bdb525a637445096568e2258e6178ed249853147c120c278eed45f3d3cedfb912b19e682acbe8e0ae9876169aa8028b32472b795ad279bf48c5777235eee0942535ecadf124f01e619c1ba813192a611f917c75c8db6d28fae60302ce88ab440c56dedf672d059bd55bd0b0d05e56c3e8190b3617e30722e8db9eb0fbcc4e1e42069fc9af3442c8053494e9bdf23dfd858832423e4c53eb87d319c7b68a159d128e09ec4aae054e4b554d2b868f74a6e55d982005e3ec3dab5fbce3b93356a0d7244d948ecb620ca39d40e95c9ee918ebae8acb813d1441598d731e3301b09eb77fdf187ac589af805003eb3b4a85386f3b891006eca58be3628ebb4257e140878ddc2dc289ae6f208b4f50affd9bea06d7b160f2d35bd4e91528bd7cc5a1d042d63ae199d5ce7f737292817c7b38ac5819425d7f13fac19470ca9291e6acabf50b0e531713953224345380c0353d4b62f0aa68f9195f47a1704a6b15f4bd7cbfc9da7bd804cec71a17ca6cc57a72cba286706f2ad31c7bda4fc5aecd6c7e24b2e3cc06cd86b6cd6a69c530e54220ad2ffbaec8758e79a86834d5968fec0cc0c405c8733ec22ee5b414d55a74fc4cf95774fc70e25f00e89caa1ad648f967136ea40a5c394209f0e478409cdcc206147885ada87141d7f17bd915dd7af8295de072632e15619ecf111fd1e2fecf269f56e2f6bd8a551722682e2e361df8cfd698678151f7d365b0b13101dd420a401555bc7623c3c490ff9355c9aab580f415de533e1370c595c6f55a687f94ca7659aeb5f4f62c7bc6583b363c94c8b6327c36a54fbff006cd6c6d6113d1a4c4fa829b083e242e0be160880fd6943ca6165827b54a0ddd3e22c4b08495d9cc8ee1e21413de578de52c5db4600a9d3aa534847d41ee9b3a12b4ca1351655f57d0f8b16cdd5d27d84746ff92e1dcfb1fc5d746e21ba99fec66acdb4584dce8b0b94e2b52417b914eaceb29cbb816a3e31f4158503653639ee8fbd5446c5bea349ebd502c7ada22404165f2cc82283b692ae1491b174f5ddcb409dc2610c3d2cfb7f5afe613b5a17a684d26a22ae6876c136c392d60cf416b90a46278b65ab5c5919eb53330878734e31010106e14bb1098aa173aa35005ee26d1339dd33e26499e99e0c3681ebf518407ee5469799b8044682ed98ecd6ebbb52a47a83f2277de4eeea2b7c0b556ac9692b1cefc1d562985048210773600aedc7b02ebd8608592d7911c2fd8153de038130cd9d842129e6d5e24b94ef4772d5c65a0cf46e1871872528c9ebf9e6daf34d4483bdde4f745037bedbc7a30753a6d7a6a33e6629c315c1139368d84a2b94cad4e4b90eff2dd6d360ef52dbd53961d7305409624db1e56ebe3dec0a57e37bb63d525091b2956b2c26f34f980a8a8f60ecf5c91b30d7e8ad81044c9dfc5eb565c7111fba652bedc78bab5af87f364a94d013a78855b83b90cc4ad29d1b1a06b78400d928ca2ae2da40d593d8dc1c93ed4f488510af17d17ad239de84cc246c5174d0db2b0b91f72fc795227963421f053180e254b776ba6e4bf11d04b57c4d2d89375d7763f6fae2486093911ad29114643e2d0d95f60699b5a3e869bf9c53fdb0e57b583150686ed6f6f6dec850276ff08674257d6dc15c70dd9ae4421f2f3b4a1d70bdaaa3d4bef8931ed7e8f747ca142aa4faf88bb408616f6fb9f5e811cce03790a7a9e4347b438ee819a61e1db115dd2e169bb80bf504b21d4844a39c37a28654a335f8152da6825cd5cdf90eb8676268b6972f94f642f4d912059f0eef6a1b1388dd2d356d0bb2ced69cc2b9731a2f6ede4560c0c08cafc3041d6a04f", 0xeca) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0xe, 0x8, 0x40, 0x42, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r2}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r2, &(0x7f0000000580), &(0x7f0000000000)=""/104}, 0x20) 7m13.473974646s ago: executing program 2 (id=60): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x1800010, &(0x7f00000002c0)=ANY=[@ANYBLOB="636865636b3d7374726963742c757466383d312c757466383d312c6e66732c6572726f72733d72656d6f756e742d726f2c73686f72746e616d653d77696e6e742c00043518f9aad8a4f2c1cdb3e993cf0444d9d2d40bb509d4da042c2c85e3650de97db42c38cafa7a9d7503c3c985486cf7fc80515e9bef7e9e56fb346de370b3eb3ecbc59d343c36bf04efc3d68033308b0014b0c677eef7536f8115edae5ef2932cc05f566112668fa4f6844dcf823618a2993da771384e8fc12467a56b33e3b00030dbfd82ea2f8ddbeb1d04bac86815ebe0b9d084d60edf56b15e74589892dce86962f611a4313120b738dddfd38d20b443570197dc795020ecf541601ef9a5618869febf769dd50261849a47e170ba166b97e76a0261d0dc1fb3e2646595f1c8b49057d94f10f7b5e35ead0a38", @ANYBLOB="5490f41e89db5c6987bb89944e3ce8a9d74aa557beeb12bf7bf4a19bec956b719f048f1e043475577b7adb3114dbb00a614a03808dfe14f5f5c2dd1b71c4d5a6a09435057b932b0b"], 0x3, 0x240, &(0x7f0000000500)="$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") openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000b40)={0xffffffffffffffff, 0x0, 0x25, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6fc}}, 0x40) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x2020) 7m13.074635462s ago: executing program 2 (id=71): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) 7m12.584847235s ago: executing program 2 (id=80): connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r3, 0x0, 0xf, 0x8) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r2, r5, 0x4e, 0x0) write$binfmt_script(r5, &(0x7f0000000800)={'#! ', './file0'}, 0xb) tee(r4, r3, 0x9, 0x8) 7m12.389916462s ago: executing program 32 (id=80): connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r3, 0x0, 0xf, 0x8) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r2, r5, 0x4e, 0x0) write$binfmt_script(r5, &(0x7f0000000800)={'#! ', './file0'}, 0xb) tee(r4, r3, 0x9, 0x8) 5m54.789934236s ago: executing program 0 (id=444): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = socket(0x28, 0x801, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) futimesat(r0, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) close(0x3) accept$alg(r2, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x8c, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 5m53.793070124s ago: executing program 0 (id=447): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r0) r3 = open(&(0x7f0000000000)='./file0\x00', 0x400, 0x1e1) fcntl$setlease(r3, 0x400, 0x1) r4 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) write$binfmt_script(r4, &(0x7f0000000340)={'#! ', './file0'}, 0xb) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000300)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x17, 0x7fffffff}]}) 5m52.743822297s ago: executing program 0 (id=453): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000002400)={[{0x7, 0xce, 0xfa, 0x5, 0x8, 0x96, 0x9, 0x6, 0x75, 0x0, 0x2, 0x6, 0xffffffff}, {0x15, 0x1, 0x6, 0x2, 0x1, 0x80, 0x2, 0x6, 0xb, 0x2, 0x4, 0x9, 0x1}, {0x2, 0x1c1, 0x8, 0x52, 0x1, 0x2a, 0xff, 0xa6, 0xb, 0x40, 0xf4, 0x4, 0x200}], 0x9}) 5m52.384658019s ago: executing program 0 (id=457): syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./bus\x00', 0x3010050, &(0x7f0000000600)=ANY=[], 0x41, 0x14fe, &(0x7f0000000700)="$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") r0 = creat(&(0x7f0000000580)='./bus\x00', 0x9e) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1084, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r2, &(0x7f00000001c0)='u', 0x1) sendfile(r2, r1, 0x0, 0x7ffff000) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f00000002c0)='./file0\x00', 0xa, &(0x7f00000000c0)=ANY=[], 0xff, 0x2ce, &(0x7f0000000780)="$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") utimensat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) open(&(0x7f00000000c0)='./file1\x00', 0x66842, 0x21) 5m51.742502156s ago: executing program 0 (id=469): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x27c}) r2 = epoll_create(0x80) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000140)={0x20002002}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000003c0)={{&(0x7f0000157000/0x2000)=nil, 0x2000}, 0x1}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) 5m50.024912168s ago: executing program 1 (id=467): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x1, 0x79c, &(0x7f0000001500)="$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") chdir(&(0x7f0000000240)='./file0\x00') quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x14, &(0x7f0000000440)={[], [{@smackfsfloor={'smackfsfloor', 0x3d, '+'}}, {@appraise_type}]}) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x81d90e2d052091e6, 0x0, 0x1, 0x0, &(0x7f0000000080)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) mkdirat(0xffffffffffffff9c, 0x0, 0x181) 5m49.643819922s ago: executing program 0 (id=471): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x32, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400005}, 0x94) 5m48.358147756s ago: executing program 33 (id=471): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x32, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400005}, 0x94) 5m46.829845611s ago: executing program 1 (id=478): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000140)={{0xfffd, 0x4, 0x71, 0x9}, 'syz0\x00', 0x4d}) ioctl$UI_DEV_CREATE(r0, 0x5501) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0x7}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x0, 0x6, 0x4d, 0x39cc1919, 0x6800000, 0x9, 0x3, 0x2, 0x0, 0x8, 0x8, 0x0, 0x2, 0x5, 0x7, 0x3, 0x3c5b, 0x1, 0x1fc, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xd, 0x403, 0x7fff, 0x4c74, 0x80000000, 0x4, 0xffffffff, 0xa, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8d, 0x6, 0x6, 0x3, 0x80092a3, 0x2, 0xe752, 0x20000000, 0x200182, 0x0, 0x7, 0x8, 0x18, 0x4, 0x1, 0x40], [0x10000007, 0x10001, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0x3, 0xf9, 0xd, 0x2bf, 0x5, 0x1800, 0xfffffffc, 0x4, 0x0, 0x7, 0x5, 0x2f, 0x8, 0x8, 0x1, 0x0, 0x2, 0x8, 0x4, 0x8000, 0x9, 0x5, 0x401, 0x3, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x4, 0x1, 0x2, 0x2, 0x20009, 0x4, 0x0, 0x8, 0x9, 0x200, 0xb, 0xa, 0x1, 0x1, 0x2, 0x2, 0x7b, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x400003, 0x9, 0x48c93694, 0x42, 0x400004], [0x3, 0x6, 0x81000001, 0x2, 0xff, 0x40000100, 0x8d2, 0x80000001, 0x5, 0x5, 0x0, 0x1, 0xb, 0x20004, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x9, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x5, 0x1fe, 0x80, 0x2, 0xcc56, 0x950bfaf, 0x1000, 0xa2, 0x4, 0x53cf697b, 0xfffffff9, 0x80000001, 0xac8, 0x8, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x84d, 0x40005, 0x6, 0xaaed, 0x4, 0xdf], [0x10, 0xbb31, 0xffffffff, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x200003, 0x80ce7, 0x1ff, 0xffffffff, 0x7, 0x4, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0x4ffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x7, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x82, 0x100, 0x9602, 0x4, 0x3, 0xfffc, 0x9649, 0x1, 0x10080, 0x6, 0x2, 0x30b1d693, 0x5a2d, 0xc, 0x7, 0x1, 0x35cb92d0, 0x80, 0x4, 0x4, 0xb19, 0x1, 0x5, 0xffff3441, 0xffff81b6]}, 0x45c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 5m45.063122998s ago: executing program 1 (id=485): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") r1 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @aes128, 0x0, '\x00', @a}) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r2, 0xc0406619, &(0x7f0000000140)={@id={0x2, 0x0, @a}}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r0, 0xc0406619, &(0x7f0000000180)={@id={0x2, 0x0, @a}}) 5m43.391877256s ago: executing program 1 (id=489): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file1/file0\x00', 0xf0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000480)='./bus/file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x44fc2, 0x1) close(r0) socket$netlink(0x10, 0x3, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 5m43.144485227s ago: executing program 1 (id=491): request_key(0xfffffffffffffffd, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000002200), 0x60280, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'virt_wifi0\x00', 0xc1eb461a2917d087}) read$FUSE(r0, &(0x7f0000000000)={0x2020}, 0x2020) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 5m38.502579849s ago: executing program 1 (id=498): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x6}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010058c6000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 5m38.311267596s ago: executing program 34 (id=498): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x6}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010058c6000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 13.47777578s ago: executing program 6 (id=1762): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x80, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="39000000130003470fbb65e1c3e4ffff060060001600000056000000250000001900b3c0b6d20300070a0000000084db26b9e4e20000000000", 0x39}], 0x1) 12.319865016s ago: executing program 6 (id=1768): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000440)="ea", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14"], 0x18}, 0xc800) setsockopt$sock_int(r4, 0x1, 0x2a, &(0x7f0000000000), 0x4) recvmmsg(r4, &(0x7f0000001140), 0x74e, 0x0, 0x0) 11.416697078s ago: executing program 7 (id=1770): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x40}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000002100)=ANY=[@ANYBLOB="b0000000000000001659ec0889419429aa5db97288b0f8a87ea8e66d9a8b"], 0xb0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="10"], 0x10) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="a8"], 0xa8) mkdir(&(0x7f00000020c0)='./file0\x00', 0x22) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(r2, &(0x7f0000000440)={0x90, 0x0, r4, {0x0, 0x0, 0xffffffffffffffff, 0x2, 0x200, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1}}}, 0x90) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl}]}}) 11.28146561s ago: executing program 6 (id=1772): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r0 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r0}, &(0x7f0000000080)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) timer_delete(r1) socket$inet_tcp(0x2, 0x1, 0x0) timerfd_settime(0xffffffffffffffff, 0x2, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ABORT_SCAN(r2, 0x0, 0x0) 9.821944983s ago: executing program 7 (id=1776): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x80) fcntl$notify(r3, 0x402, 0x26) fcntl$notify(r3, 0x402, 0x0) 8.749925331s ago: executing program 6 (id=1780): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) r3 = socket(0x28, 0x5, 0x2) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004000}, 0x800) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x509000, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_MSG_GETCHAIN(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c000000040a050000000000200000000a00000a0900030073797a31000000000900010073797a31"], 0x2c}}, 0x4080) sendmsg$kcm(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) close(0x4) 6.773099932s ago: executing program 6 (id=1786): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x406, r1) sendmsg$netlink(r2, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48091}, 0x44000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x8, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) recvmmsg$unix(r2, &(0x7f000000b740)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000100)=""/28, 0x1c}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000006c0)=""/38, 0x26}], 0x1}}], 0x2, 0x2, 0x0) 5.80371364s ago: executing program 5 (id=1787): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) shutdown(0xffffffffffffffff, 0x1) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000cc0), 0x4a0040, 0x0) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000000)=""/226, 0xe2}, {0x0}], 0x2) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000200)=0xd, 0x4) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x7, 0x1, 0x0, 0x0, "0000000000000003"}, 0x10}}, 0x20000000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x6c, 0x1, 0x4, 0x5, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x5}, @NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_CMD={0x5, 0x1, 0x2}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x4}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x3}, @NFULA_CFG_CMD={0x5, 0x1, 0x4}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x7f}, @NFULA_CFG_MODE={0xa, 0x2, {0x1, 0x2}}, @NFULA_CFG_MODE={0xa, 0x2, {0xe, 0x2}}, @NFULA_CFG_QTHRESH={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x20000840) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x6c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8004}, 0x40) sendmsg$NFNL_MSG_COMPAT_GET(r2, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x34, 0x0, 0xb, 0x201, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_COMPAT_NAME={0x7, 0x1, '.+\x00'}, @NFTA_COMPAT_NAME={0x7, 0x1, '-,\x00'}, @NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x24044044}, 0x884) 5.300832296s ago: executing program 5 (id=1790): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000001c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 4.773584124s ago: executing program 6 (id=1791): sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r3 = openat$binfmt_register(0xffffff9c, &(0x7f00000001c0), 0x1, 0x0) write$binfmt_register(r3, &(0x7f0000000200)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x1, 0x3a, '#%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xeahJ\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{\xc5\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xb5\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132\xf9\xbf7K\x8d\x16\xa6\xbf4\v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde\x13\xdf\xc6Z+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x89\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xd3W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a', 0x3a, '#%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xeahJ\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{\xc5\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xb5\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132\xf9\xbf7K\x8d\x16\xa6\xbf4\v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde\x13\xdf\xc6Z+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x89\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xd3W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a', 0x3a, './file1'}, 0x237) 4.438726885s ago: executing program 3 (id=1793): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000140)={0x60, 0x1, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x100, 0x0, 0x0, 0x100000c00, 0x38, 0x24, 0x42, 0x6e}) socket$key(0xf, 0x3, 0x2) sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="a6", 0x1, 0x20000045, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210040, &(0x7f00000004c0), 0xfc, 0x59d, &(0x7f00000022c0)="$eJzs3c1rHGUYAPBnNps0bapJoRT1IIUerNRuvvyoILQeRYsFvdcl2YaQTbdkN6WJBduDvXgrgogF8Sp491j8B/wrClooUoIeRIjMZjZN0t3NR5Numv39YJL33ZnZd56ded59Z2aXDaBrnUz/5CJejehPi4Nr5uUjm3lyZbmlxzcn0imJ5eXP/koiyR5rLJ9k/weyyisR8dvXEWdyT7dbXVicKZbLpbmsPlybvTZcXVg8Oz1bnCpNla6OjY+fe2d87P333t21WN+89M/3n97/6Nw3p5a+++XhsbtJXIij2by1cTyDW2srJ4v/ZaXeuLBhwdFdaGw/STq9AexIT5bnvZH2AYPRk2U9cPB9FRHLQJdK5D90qcY4oHFuv0vnwS+MRx+unADVY+9bG39+5dpI9NfPjY4sJevOjNLz3aFdaD9t49c/791Np2h/HeLwJnWAbbl1OyJG8vmn+/8k6/92bqR+8bi9jW102/sPdNL9dPzzVrPxX251/BNNxj8DTXJ3JzbP/9zDXWimpXT890HT8e9q1zXUk9Veqo/5epMrA+XSSES8HBGnI+LKdLk02r9yDb2Zc0sPllu1v3b8l05p+42xYLYdD/OH1q8zWawVI6LvWWNPPbod8Vq+WfzJ6v5Pmuz/9PW4tMU2TpTuvd5q3ubx763lnyLeaLr/n9zRStrfnxxO9//Iyt+mbfx958TvrdrvdPzp/j/SPv6hZO392ur22/ix/99Sq3kt41892Jof/33J5/VyIwluFGu1udGIvuSTpx8fe7Juo95YPo3/9Kn2/V+z4z89+fpii/HfOX6n5aL7Yf9Pbmv/byykr0SLWVnhwcdf/tCq/a31f2/XS6ezR7L+r7nsWGmzOesKz/r6AQAAAAAAwH6Si4ijkeQKq+VcrlBY+XzH8TiSK1eqtTNXKvNXJ6P+Xdmh6M017nQPNj4PMV0ujWafh23UxzbUxyPiWER823O4Xi9MVMqTnQ4eAAAAAAAAAAAAAAAAAAAA9omBFt//T/3R0+mtA/Zc/YcNDnV6K4BO2PQn/3fjl56AfWnT/AcOrHX5n3RuO4Dnz/s/dC/5D91L/kP3kv/QveQ/dK+t5P+F57AdAAAAAAAAAAAAAAAAAAAAAAAAAAAAcEBcungxnZaXHt+cSOuT1xfmZyrXz06WqjOF2fmJwkRl7lphqlKZKpcKE5XZiBhs93zlSuXa6FjM3xiulaq14erC4uXZyvzV2uXp2eJU6XKp97lFBgAAAAAAAAAAAAAAAAAAAC+O6sLiTLFcLs0diMLP+b145vPR6bj2uHA+4lZ6MOxo9fx+iUKhReF2luvbW6uz/RIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAArPV/AAAA///HtTBf") listxattr(&(0x7f0000000080)='./file0\x00', 0x0, 0x100000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6800000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970001c0007800800064000000023080013400000000208001240"], 0x68}}, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, &(0x7f00000000c0), &(0x7f00000001c0)=0x4) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000002980)={0x0, 0x7fff, 0x80}, 0x8) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 4.353854193s ago: executing program 5 (id=1794): syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000000c0)=0x81) poll(&(0x7f0000000000)=[{r0, 0x41}], 0x1, 0x80) r1 = socket$igmp(0x2, 0x3, 0x2) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r2 = socket(0xa, 0x801, 0x0) getsockopt(r2, 0x29, 0x5, 0x0, &(0x7f0000001ffc)) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000280)={@local, @empty, 0x0, "614af285791a63abd0f993af7e7709576e969f64a8310400dc3fd440829c82ae"}, 0x3c) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000080)={@multicast2, @multicast1, 0x0, "fc592b4ab23e70f2a44699538f4740b1731108a4753985a70c9655e563c25702", 0x7, 0x80000000, 0x7, 0x4}, 0x3c) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) 4.311225356s ago: executing program 4 (id=1795): ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5f7, @name="ac2ad54970138065d4b1a10a14b7e65642722c3da99ba40f000026e78ffc1e0a"}) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000480)="fef0eda8c799a4a0c7cb5b0006000000009b", 0x12, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r1, r0}, &(0x7f00000000c0)=""/83, 0x53, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) pipe2$watch_queue(&(0x7f0000000100), 0x80) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@polexpire={0xd4, 0x1b, 0x201, 0x70bd25, 0x25dfdbfe, {{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, @in=@empty, 0x4e21, 0x4, 0x4e23, 0x0, 0x2, 0x80, 0x20, 0x89}, {0x2, 0x6, 0x8, 0x7, 0x9453, 0x3c, 0xffffffffffffffff, 0x8}, {0xfffffffffffffff5, 0x9, 0x6, 0x81}, 0xffdffff7, 0x6e6bb6, 0x0, 0x1, 0x2, 0x1}, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x3}, @mark={0xc, 0x15, {0x35075d, 0x5}}]}, 0xd4}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r3, r4, 0x26, 0x0, @void}, 0x10) close(r4) splice(r2, 0x0, r4, &(0x7f0000001000), 0x2, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0cc5605, &(0x7f0000000180)={0x1, @vbi={0x500, 0x0, 0x35315842, 0x0, [0x1]}}) 4.310579817s ago: executing program 3 (id=1796): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$xdp(0x2c, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x100, 0x4) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000440)=0x400, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r2, 0x0, r3}, 0x10) 4.252062962s ago: executing program 4 (id=1797): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = semget$private(0x0, 0x4, 0x0) semop(r1, &(0x7f0000000380)=[{0x0, 0xffff}], 0x1) semtimedop(r1, &(0x7f0000000000)=[{0x0, 0x9, 0x800}], 0x1, 0x0) r2 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x4000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xffffffff, 0xffff, 0xffffffffffffffff, 0x7, 0xf}, 0xa}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000100)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x61, 0x0, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x2f, 0x9, @dev={0xac, 0x14, 0x14, 0x10}, @remote, {[@timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{@rand_addr=0x86dd}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}}, {@rand_addr, 0x4f}, {@multicast2}, {@loopback}, {@local, 0x4}, {@multicast1}]}]}}}}}}}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x6) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x24, 0x0, 0x5707b563827c8365, 0x0, 0xffffffff, {{}, {@val={0x8, 0x1, 0x44}, @val={0x8}, @void}}}, 0x24}}, 0x0) 4.175070219s ago: executing program 3 (id=1798): pipe2(&(0x7f0000000040), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace$ARCH_SHSTK_LOCK(0x1e, r0, 0x0, 0x5003) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r3, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="be38", 0xffe7}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000b001400000000000000000000000700000007038b0100000000"], 0x38}, 0x0) 4.075420968s ago: executing program 5 (id=1799): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x6, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x1, 0x9, 0xfffffffffffffffc, 0x0, 0x7fffffff}, 0x0, 0x0) 3.989925266s ago: executing program 4 (id=1800): setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000380)={{0x84, @rand_addr=0x64010104, 0x4e24, 0x3, 'nq\x00', 0x8, 0x5, 0x55}, {@remote, 0x4e22, 0x0, 0x7, 0x12d5c, 0x12d58}}, 0x44) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) sendmsg$sock(r0, &(0x7f0000000940)={&(0x7f0000000300)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000540)}, {&(0x7f0000001400)="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", 0x989}, {0x0}, {&(0x7f0000000680)="cc18101d6bec7dadde1d231d7be01e1a3ebed24c1f1b0cacbb731e37f14830d34d9f1234", 0x24}, {&(0x7f00000006c0)="2219a8d1a15d2cc1d9f7e487ed6138173c17bebef35e5c731961e6d1d07d4bc0a9699ac134", 0x25}, {0x0}], 0x6}, 0x800) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 3.905133524s ago: executing program 5 (id=1801): socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x492492492492846, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x8}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe2(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) unshare(0x28000600) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x9, 0x0) write$P9_RGETLOCK(r2, &(0x7f0000000040)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r1, r3, 0xfffffffffffffc01, 0x0) tee(r1, r3, 0x1fc, 0x0) 3.855756498s ago: executing program 4 (id=1802): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r1, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x4801000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socket$nl_netfilter(0x10, 0x3, 0xc) 2.940237102s ago: executing program 3 (id=1803): r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'xfrm0\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, r4}, 0x14) 2.609376472s ago: executing program 4 (id=1804): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0xfffffffffffffdff, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x33822}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) socket$phonet_pipe(0x23, 0x5, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215, 0x100000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}, 0x1, 0xba01}, 0x0) 2.601304733s ago: executing program 7 (id=1805): socket$packet(0x11, 0x3, 0x300) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x7, 0x9}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xd, 0x3, 0x4, 0x1, 0x0, r0}, 0x48) socket$inet(0x2, 0x2, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0x8}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r1}, &(0x7f0000000280), &(0x7f0000000000)=r2}, 0x20) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r2, r4, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000019100)={@local, @random="a6e286036e89", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0xb00, 0x4e22, 0x18, 0x0, @wg=@data={0x4, 0x0, 0x9a5f}}}}}}, 0x0) 1.97576036s ago: executing program 7 (id=1806): r0 = io_uring_setup(0x3c92, &(0x7f0000000100)={0x0, 0x5, 0x40, 0xffffffff, 0x20000004}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2711, @local}, 0x10) listen(r1, 0xfffffffe) accept(r1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r3, 0x0) connect$unix(r2, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket(0x39, 0x3, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) 1.777514658s ago: executing program 3 (id=1807): getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x3) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000100), 0x4) 1.711649984s ago: executing program 7 (id=1808): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x53, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000001000008000500", @ANYRES32=r7], 0x50}}, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r8}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 1.631536281s ago: executing program 5 (id=1809): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x258, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 623.619804ms ago: executing program 7 (id=1810): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mount$cgroup(0x0, 0x0, 0x0, 0x100000, &(0x7f0000000840)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) keyctl$revoke(0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xa8}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 623.367023ms ago: executing program 4 (id=1811): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r2, 0x0, 0xb) splice(r4, 0x0, r2, 0x0, 0x1000, 0x0) splice(r1, 0x0, r5, 0x0, 0x80, 0x0) 0s ago: executing program 3 (id=1812): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@newtfilter={0x44, 0x2c, 0xd3f, 0x870bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000001740)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x24000080) kernel console output (not intermixed with test programs): comes ready [ 89.255160][ T4761] loop1: detected capacity change from 0 to 256 [ 89.271820][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 89.310868][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 89.401003][ T4761] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x76936814, utbl_chksum : 0xe619d30d) [ 89.840828][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 89.857938][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 89.922503][ T4549] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.948400][ T4780] loop3: detected capacity change from 0 to 512 [ 90.021276][ T4784] netlink: 'syz.0.137': attribute type 27 has an invalid length. [ 90.562056][ T26] audit: type=1326 audit(1771581239.692:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4798 comm="syz.4.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44b942a629 code=0x7ffc0000 [ 90.630872][ T26] audit: type=1326 audit(1771581239.702:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4798 comm="syz.4.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44b942a629 code=0x7ffc0000 [ 90.687896][ T26] audit: type=1326 audit(1771581239.702:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4798 comm="syz.4.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44b942a629 code=0x7ffc0000 [ 90.718993][ T26] audit: type=1326 audit(1771581239.702:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4798 comm="syz.4.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f44b942a629 code=0x7ffc0000 [ 90.763839][ T26] audit: type=1326 audit(1771581239.702:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4798 comm="syz.4.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44b942a629 code=0x7ffc0000 [ 90.828261][ T26] audit: type=1326 audit(1771581239.702:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4798 comm="syz.4.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44b942a629 code=0x7ffc0000 [ 90.908370][ T26] audit: type=1326 audit(1771581239.702:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4798 comm="syz.4.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44b942a629 code=0x7ffc0000 [ 90.941842][ T26] audit: type=1326 audit(1771581239.722:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4798 comm="syz.4.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44b942a629 code=0x7ffc0000 [ 90.973435][ T26] audit: type=1326 audit(1771581239.722:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4798 comm="syz.4.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44b942a629 code=0x7ffc0000 [ 91.001012][ T26] audit: type=1326 audit(1771581239.722:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4798 comm="syz.4.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7f44b942a629 code=0x7ffc0000 [ 91.139068][ T4784] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.146560][ T4784] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.327704][ T4784] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.367694][ T4784] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.512084][ T4784] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.521009][ T4784] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.530648][ T4784] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.539594][ T4784] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.592397][ T4806] netlink: 8 bytes leftover after parsing attributes in process `syz.1.142'. [ 92.614417][ T4784] syz.0.137 (4784) used greatest stack depth: 19696 bytes left [ 92.634853][ T4807] netlink: 8 bytes leftover after parsing attributes in process `syz.1.142'. [ 92.653484][ T4807] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.662068][ T4807] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.723091][ T4824] device veth0 entered promiscuous mode [ 92.768593][ T4837] xt_socket: unknown flags 0x4c [ 92.784255][ T4833] netlink: 4 bytes leftover after parsing attributes in process `syz.4.144'. [ 93.132448][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 93.148746][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 93.206206][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 93.225158][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 93.249790][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 93.274121][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 93.312900][ T4549] device veth0_vlan entered promiscuous mode [ 93.349212][ T4549] device veth1_vlan entered promiscuous mode [ 93.400775][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 93.427350][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 93.442853][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 93.461984][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 93.473955][ T4549] device veth0_macvtap entered promiscuous mode [ 93.490715][ T4549] device veth1_macvtap entered promiscuous mode [ 93.522475][ T4549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.543880][ T4549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.555035][ T4549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.568484][ T4549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.600552][ T4549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.614168][ T4549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.627404][ T4549] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.642392][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 93.658095][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 93.676818][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 93.722781][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 93.735016][ T4549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.775299][ T4549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.788482][ T4874] input: syz1 as /devices/virtual/input/input5 [ 93.816396][ T4549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.847081][ T4549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.857656][ T4549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.868196][ T4549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.892354][ T4549] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.906013][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 93.923667][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 93.974064][ T4549] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.002171][ T4549] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.036577][ T4549] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.046415][ T4549] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.075484][ T4881] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 94.107663][ T4881] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 94.451914][ T4879] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.459332][ T4879] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.954299][ T4879] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.998533][ T4879] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.140153][ T4879] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.150366][ T4879] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.160444][ T4879] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.170787][ T4879] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.331866][ T4886] netlink: 8 bytes leftover after parsing attributes in process `syz.0.156'. [ 95.574096][ T4899] sock: sock_set_timeout: `syz.3.161' (pid 4899) tries to set negative timeout [ 95.766671][ T4901] bond2: (slave veth1): Enslaving as an active interface with a down link [ 95.851869][ T4407] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.859774][ T4407] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.903316][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 97.342615][ T4407] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.350509][ T4407] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.411631][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 99.917278][ T4964] loop5: detected capacity change from 0 to 4096 [ 100.886386][ T4964] EXT4-fs (loop5): Test dummy encryption mode enabled [ 100.926399][ T4971] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 101.075526][ T4971] kvm: pic: non byte read [ 101.099642][ T4964] EXT4-fs (loop5): mounted filesystem without journal. Opts: abort,delalloc,nombcache,test_dummy_encryption,errors=continue,data_err=ignore,delalloc,barrier,,errors=continue. Quota mode: writeback. [ 102.090301][ T4994] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 102.196698][ T4990] loop0: detected capacity change from 0 to 164 [ 102.278379][ T5005] netlink: 'syz.3.187': attribute type 1 has an invalid length. [ 102.401490][ T4990] rock: directory entry would overflow storage [ 102.452768][ T5012] netlink: 28 bytes leftover after parsing attributes in process `syz.3.187'. [ 102.469896][ T4990] rock: sig=0x5053, size=7, remaining=4 [ 102.476522][ T4990] isofs_fill_super: root inode is not a directory. Corrupted media? [ 102.502230][ T5012] 8021q: adding VLAN 0 to HW filter on device bond1 [ 103.975525][ T5011] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 104.042070][ T5011] bond1: (slave batadv1): making interface the new active one [ 104.093419][ T5011] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 104.157280][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 105.104018][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 105.206367][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 105.996528][ T21] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 106.251496][ T21] usb 1-1: Using ep0 maxpacket: 8 [ 107.381696][ T21] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 107.497439][ T21] usb 1-1: config 0 has no interfaces? [ 107.928294][ T21] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 107.971619][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.038187][ T21] usb 1-1: config 0 descriptor?? [ 108.222867][ T5058] loop1: detected capacity change from 0 to 40427 [ 109.781760][ T5094] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.789082][ T5094] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.650805][ T5094] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.724192][ T5094] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.948671][ T5130] loop1: detected capacity change from 0 to 2048 [ 111.003901][ T4264] Alternate GPT is invalid, using primary GPT. [ 111.010631][ T4264] loop1: p2 p3 p7 [ 111.076507][ T5130] Alternate GPT is invalid, using primary GPT. [ 111.090023][ T5130] loop1: p2 p3 p7 [ 111.310260][ T5094] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.333351][ T5094] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.361563][ T5094] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.382671][ T5094] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.580286][ T5108] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 111.690448][ T4808] usb 1-1: USB disconnect, device number 3 [ 111.786614][ T5139] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.218'. [ 111.863763][ T5139] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.218'. [ 112.901163][ T5158] fuse: Bad value for 'fd' [ 115.045910][ T5196] netlink: 12 bytes leftover after parsing attributes in process `syz.0.233'. [ 115.519219][ T5220] device syzkaller0 entered promiscuous mode [ 115.603851][ T5227] Error parsing options; rc = [-22] [ 116.957651][ T4816] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 117.671226][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 117.680373][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 117.698950][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 118.261914][ T4816] usb 2-1: config 0 has no interfaces? [ 118.421781][ T4816] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 118.432554][ T4816] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.440575][ T4816] usb 2-1: Product: syz [ 118.490234][ T4816] usb 2-1: Manufacturer: syz [ 118.508903][ T4816] usb 2-1: SerialNumber: syz [ 118.599343][ T4816] usb 2-1: config 0 descriptor?? [ 119.714542][ T4826] usb 2-1: USB disconnect, device number 2 [ 120.643091][ T5328] loop1: detected capacity change from 0 to 16 [ 120.748066][ T5328] erofs: (device loop1): erofs_load_compr_cfgs: try to load compressed fs with unsupported algorithms fffe [ 122.102263][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 122.811570][ T5363] loop0: detected capacity change from 0 to 512 [ 122.914262][ T5363] EXT4-fs (loop0): Test dummy encryption mode enabled [ 122.954441][ T5363] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 123.043779][ T5363] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 123.118733][ T5363] EXT4-fs error (device loop0): ext4_orphan_get:1426: comm syz.0.275: bad orphan inode 131083 [ 123.640872][ T5363] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,norecovery,,errors=continue. Quota mode: none. [ 125.443021][ T5405] netlink: 'syz.3.288': attribute type 15 has an invalid length. [ 127.241329][ T5421] loop1: detected capacity change from 0 to 128 [ 127.323482][ T5421] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 127.419393][ T5421] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 130.314733][ T5483] netlink: 12 bytes leftover after parsing attributes in process `syz.0.308'. [ 131.971948][ T5513] loop5: detected capacity change from 0 to 2048 [ 132.029006][ T4264] Alternate GPT is invalid, using primary GPT. [ 132.070322][ T4264] loop5: p2 p3 p7 [ 132.157996][ T5513] Alternate GPT is invalid, using primary GPT. [ 132.177279][ T5513] loop5: p2 p3 p7 [ 132.952893][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.968857][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.740890][ T4264] udevd[4264]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 136.388301][ T5636] netlink: 'syz.0.343': attribute type 16 has an invalid length. [ 136.423168][ T5636] netlink: 'syz.0.343': attribute type 17 has an invalid length. [ 136.464637][ T5636] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 136.499843][ T5636] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 136.528901][ T5636] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 136.566509][ T5636] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 136.599992][ T5636] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 136.638300][ T5636] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 136.662774][ T5636] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 136.723021][ T5636] IPv6: ADDRCONF(NETDEV_CHANGE): sit0: link becomes ready [ 136.755583][ T5636] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl0: link becomes ready [ 136.780624][ T5636] IPv6: ADDRCONF(NETDEV_CHANGE): ip6gre0: link becomes ready [ 136.797946][ T5636] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 136.814990][ T5636] IPv6: ADDRCONF(NETDEV_CHANGE): ip6gretap0: link becomes ready [ 136.903183][ T5636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.910666][ T5636] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 136.954749][ T5636] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.980355][ T5636] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 136.998966][ T5636] IPv6: ADDRCONF(NETDEV_CHANGE): nlmon0: link becomes ready [ 137.170833][ T5636] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 138.689324][ T5664] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 138.780132][ T5668] netlink: 8 bytes leftover after parsing attributes in process `syz.3.350'. [ 138.809591][ T5668] bond0: option arp_all_targets: invalid value (18446744071951403948) [ 138.878690][ T5671] netlink: 12 bytes leftover after parsing attributes in process `syz.4.351'. [ 138.909543][ T5671] netlink: 12 bytes leftover after parsing attributes in process `syz.4.351'. [ 140.971634][ T5690] netlink: 'syz.1.355': attribute type 15 has an invalid length. [ 141.109359][ T5690] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 141.174475][ T5690] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 141.223803][ T5690] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 142.725532][ T5742] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3897524436 (7795048872 ns) > initial count (2759807172 ns). Using initial count to start timer. [ 142.768965][ T5742] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3996681224 (15986724896 ns) > initial count (3709615788 ns). Using initial count to start timer. [ 143.901134][ T5753] loop5: detected capacity change from 0 to 4096 [ 143.960775][ T5762] tipc: Failed to remove unknown binding: 66,0,0/0:1430781422/1430781424 [ 143.995807][ T5762] tipc: Failed to remove unknown binding: 66,0,0/0:1430781422/1430781423 [ 144.041227][ T5763] tipc: Failed to remove unknown binding: 66,0,0/0:1430781422/1430781424 [ 144.118848][ T5763] tipc: Failed to remove unknown binding: 66,0,0/0:1430781422/1430781423 [ 144.801697][ T4815] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 145.242543][ T4815] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 145.731573][ T4815] usb 6-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=70.54 [ 145.740780][ T4815] usb 6-1: New USB device strings: Mfr=1, Product=34, SerialNumber=7 [ 145.749371][ T4815] usb 6-1: Product: syz [ 145.771458][ T4815] usb 6-1: Manufacturer: syz [ 145.776284][ T4815] usb 6-1: SerialNumber: syz [ 145.819409][ T4815] usb 6-1: config 0 descriptor?? [ 145.859602][ T5795] netlink: 28 bytes leftover after parsing attributes in process `syz.4.388'. [ 145.870862][ T4815] gspca_main: conex-2.14.0 probing 0572:0041 [ 146.407752][ T5810] netlink: 16 bytes leftover after parsing attributes in process `syz.3.393'. [ 148.419286][ T5826] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 148.434526][ T5826] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 149.108129][ T5858] netlink: 'syz.0.415': attribute type 4 has an invalid length. [ 149.167044][ T5858] netlink: 'syz.0.415': attribute type 4 has an invalid length. [ 149.631511][ T4826] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 151.236771][ T4826] usb 1-1: Using ep0 maxpacket: 16 [ 151.612266][ T4826] usb 1-1: config 4 has an invalid interface number: 51 but max is 0 [ 151.663796][ T4826] usb 1-1: config 4 has no interface number 0 [ 151.753479][ T4826] usb 1-1: config 4 interface 51 has no altsetting 0 [ 152.012512][ T4826] usb 1-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 152.063666][ T4826] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.202137][ T4826] usb 1-1: Product: syz [ 152.221494][ T4826] usb 1-1: Manufacturer: syz [ 152.241776][ T4826] usb 1-1: SerialNumber: syz [ 152.352152][ T4826] usb 1-1: can't set config #4, error -71 [ 152.363205][ T4826] usb 1-1: USB disconnect, device number 4 [ 152.886742][ T5924] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 152.901122][ T5924] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 152.916324][ T5924] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 152.949982][ T5924] device bridge_slave_0 left promiscuous mode [ 152.972677][ T5924] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.001978][ T5924] device bridge_slave_1 left promiscuous mode [ 153.068197][ T5924] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.094341][ T5924] bond0: (slave bond_slave_0): Releasing backup interface [ 153.144297][ T5924] bond0: (slave bond_slave_1): Releasing backup interface [ 154.228810][ T5924] team0: Port device team_slave_0 removed [ 155.348297][ T5924] team0: Port device team_slave_1 removed [ 155.382827][ T5924] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.390315][ T5924] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.431728][ T5924] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.439214][ T5924] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.468847][ T5947] loop1: detected capacity change from 0 to 4096 [ 155.515236][ T5927] team0: Mode changed to "broadcast" [ 155.552896][ T5937] netlink: 4 bytes leftover after parsing attributes in process `syz.5.438'. [ 155.950642][ T4815] usb 6-1: USB disconnect, device number 2 [ 155.980523][ T5967] tipc: Failed to remove unknown binding: 66,0,0/0:348691511/348691513 [ 156.030144][ T5967] tipc: Failed to remove unknown binding: 66,0,0/0:348691511/348691512 [ 156.087740][ T5969] tipc: Failed to remove unknown binding: 66,0,0/0:348691511/348691513 [ 156.110231][ T5969] tipc: Failed to remove unknown binding: 66,0,0/0:348691511/348691512 [ 156.280733][ T5973] netlink: 4 bytes leftover after parsing attributes in process `syz.4.452'. [ 156.359618][ T5973] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.848523][ T5990] loop0: detected capacity change from 0 to 256 [ 156.880896][ T5990] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 156.911633][ T5990] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 156.929910][ T5990] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 157.200973][ T5990] exFAT-fs (loop0): error, invalid access to FAT (entry 0x00000005) bogus content (0x75757575) [ 157.241585][ T5990] exFAT-fs (loop0): Filesystem has been set read-only [ 157.322538][ T4185] exFAT-fs (loop0): error, invalid access to FAT (entry 0x00000005) bogus content (0x75757575) [ 157.335553][ T5993] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000 [ 157.353274][ T4185] exFAT-fs (loop0): error, invalid access to FAT (entry 0x00000005) bogus content (0x75757575) [ 159.112898][ T6019] sch_fq: defrate 53322 ignored. [ 159.266037][ T6021] loop1: detected capacity change from 0 to 2048 [ 160.627076][ T6021] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 160.784052][ T6021] EXT4-fs error (device loop1): ext4_do_update_inode:5222: inode #12: comm syz.1.467: corrupted inode contents [ 160.814726][ T6021] EXT4-fs error (device loop1): ext4_try_add_inline_entry:1371: inode #12: comm syz.1.467: mark_inode_dirty error [ 161.054292][ T6021] EXT4-fs error (device loop1): ext4_do_update_inode:5222: inode #12: comm syz.1.467: corrupted inode contents [ 162.169813][ T6021] EXT4-fs error (device loop1): ext4_mkdir:3097: inode #12: comm syz.1.467: mark_inode_dirty error [ 162.432666][ T6048] netlink: 1319 bytes leftover after parsing attributes in process `syz.4.479'. [ 163.673267][ T6063] input: syz0 as /devices/virtual/input/input6 [ 164.217145][ T6077] loop1: detected capacity change from 0 to 128 [ 164.236828][ T6051] chnl_net:caif_netlink_parms(): no params data found [ 164.532656][ T6077] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 164.580810][ T6051] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.592629][ T6077] ext4 filesystem being mounted at /88/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 164.641978][ T23] Bluetooth: hci0: command 0x0409 tx timeout [ 164.670162][ T6051] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.712639][ T6051] device bridge_slave_0 entered promiscuous mode [ 164.741906][ T6051] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.794244][ T6051] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.843450][ T6051] device bridge_slave_1 entered promiscuous mode [ 164.906185][ T6051] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 164.917766][ T6051] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.015522][ T6076] fscrypt (loop1, inode 12): Missing crypto API support for AES-128-CTS-CBC (API name: "cts(cbc(aes))") [ 165.030479][ T6097] ptrace attach of "./syz-executor exec"[4549] was attempted by "./syz-executor exec"[6097] [ 165.475810][ T6051] team0: Port device team_slave_0 added [ 165.583097][ T6051] team0: Port device team_slave_1 added [ 165.695876][ T6051] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.702954][ T6051] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.789012][ T6051] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.848822][ T6051] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.866194][ T6051] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.965495][ T6051] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 166.124018][ T6051] device hsr_slave_0 entered promiscuous mode [ 166.139171][ T6105] netlink: 52 bytes leftover after parsing attributes in process `syz.4.490'. [ 166.161761][ T6105] netlink: 8 bytes leftover after parsing attributes in process `syz.4.490'. [ 166.175199][ T6051] device hsr_slave_1 entered promiscuous mode [ 167.088990][ T23] Bluetooth: hci0: command 0x041b tx timeout [ 167.156468][ T6051] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 167.183037][ T6051] Cannot create hsr debugfs directory [ 167.578041][ T6118] loop5: detected capacity change from 0 to 8 [ 168.859795][ T6118] SQUASHFS error: xz decompression failed, data probably corrupt [ 168.868011][ T6118] SQUASHFS error: Failed to read block 0x108: -5 [ 168.874454][ T6118] SQUASHFS error: Unable to read metadata cache entry [106] [ 168.881802][ T6118] SQUASHFS error: Unable to read inode 0x101f [ 169.309821][ T4826] Bluetooth: hci0: command 0x040f tx timeout [ 169.702176][ T6051] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 169.712331][ T6051] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 170.579051][ T6051] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 170.670595][ T6121] ODEBUG: Out of memory. ODEBUG disabled [ 170.696517][ T6051] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 170.780244][ T4455] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.836524][ T6132] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 170.925865][ T6135] overlayfs: failed to clone lowerpath [ 170.937982][ T4455] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.975557][ T6135] overlayfs: failed to clone upperpath [ 170.992074][ T6051] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.021109][ T4455] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.155355][ T6051] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.331212][ T4455] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.372283][ T4173] Bluetooth: hci0: command 0x0419 tx timeout [ 171.879145][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 171.907500][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 171.954465][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 171.966950][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 171.976592][ T4407] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.983725][ T4407] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.994351][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 172.003838][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 172.012391][ T4407] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.019518][ T4407] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.027393][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 172.036899][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 172.066566][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 172.091117][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 172.110624][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 172.121057][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 172.136912][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 172.148523][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 172.199573][ T6051] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 172.218179][ T6051] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 172.242596][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 172.261860][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 172.270714][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 172.286914][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 172.342145][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 172.720304][ T6148] chnl_net:caif_netlink_parms(): no params data found [ 172.831549][ T4808] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 173.212420][ T4808] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 173.243599][ T6148] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.257755][ T6148] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.258318][ T4808] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 173.267655][ T6148] device bridge_slave_0 entered promiscuous mode [ 173.302938][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 173.310489][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 173.347913][ T6148] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.361469][ T6148] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.382156][ T4808] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 173.392508][ T6148] device bridge_slave_1 entered promiscuous mode [ 173.404799][ T4808] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 173.420079][ T6051] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.424030][ T4808] usb 6-1: SerialNumber: syz [ 173.499440][ T6148] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.551816][ T6148] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.664434][ T6148] team0: Port device team_slave_0 added [ 173.776896][ T4808] usb 6-1: 0:2 : does not exist [ 173.851811][ T6148] team0: Port device team_slave_1 added [ 174.490320][ T4814] Bluetooth: hci2: command 0x0409 tx timeout [ 174.607531][ T4808] usb 6-1: USB disconnect, device number 3 [ 174.727326][ T6148] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.741801][ T6148] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.801931][ T6148] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.824728][ T6148] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.852958][ T4264] udevd[4264]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 174.869309][ T6148] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.927784][ T6148] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.950651][ T6204] netlink: 24 bytes leftover after parsing attributes in process `syz.3.516'. [ 175.123033][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 175.139823][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 175.183649][ T6148] device hsr_slave_0 entered promiscuous mode [ 175.239396][ T6148] device hsr_slave_1 entered promiscuous mode [ 175.248524][ T6148] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 175.275146][ T6148] Cannot create hsr debugfs directory [ 175.323701][ T6218] loop5: detected capacity change from 0 to 256 [ 175.363138][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 175.382623][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 176.172444][ T6218] FAT-fs (loop5): Directory bread(block 64) failed [ 176.179029][ T6218] FAT-fs (loop5): Directory bread(block 65) failed [ 176.188626][ T6051] device veth0_vlan entered promiscuous mode [ 176.263409][ T6218] FAT-fs (loop5): Directory bread(block 66) failed [ 176.280637][ T6218] FAT-fs (loop5): Directory bread(block 67) failed [ 176.309661][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 176.321440][ T6218] FAT-fs (loop5): Directory bread(block 68) failed [ 176.328109][ T6218] FAT-fs (loop5): Directory bread(block 69) failed [ 176.338297][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 176.379572][ T6051] device veth1_vlan entered promiscuous mode [ 176.413777][ T6218] FAT-fs (loop5): Directory bread(block 70) failed [ 176.420466][ T6218] FAT-fs (loop5): Directory bread(block 71) failed [ 176.462148][ T6218] FAT-fs (loop5): Directory bread(block 72) failed [ 176.468753][ T6218] FAT-fs (loop5): Directory bread(block 73) failed [ 176.496417][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 176.526236][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 176.570920][ T4814] Bluetooth: hci2: command 0x041b tx timeout [ 176.578068][ T6051] device veth0_macvtap entered promiscuous mode [ 176.618835][ T6218] netlink: 4 bytes leftover after parsing attributes in process `syz.5.525'. [ 176.776167][ T4455] device hsr_slave_0 left promiscuous mode [ 176.828665][ T4455] device hsr_slave_1 left promiscuous mode [ 176.862834][ T4455] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.890727][ T4455] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 177.021286][ T4455] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 177.029833][ T4455] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 177.106450][ T4455] device bridge_slave_1 left promiscuous mode [ 177.184565][ T4455] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.606762][ T4455] device bridge_slave_0 left promiscuous mode [ 177.666721][ T4455] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.759137][ T4455] device veth1_macvtap left promiscuous mode [ 177.779019][ T4455] device veth0_macvtap left promiscuous mode [ 177.893251][ T4455] device veth1_vlan left promiscuous mode [ 177.912100][ T4455] device veth0_vlan left promiscuous mode [ 179.258736][ T4814] Bluetooth: hci2: command 0x040f tx timeout [ 180.550560][ T4455] team0 (unregistering): Port device team_slave_1 removed [ 180.565558][ T4455] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 180.598069][ T4455] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 180.663600][ T4455] bond0 (unregistering): Released all slaves [ 180.735398][ T6051] device veth1_macvtap entered promiscuous mode [ 180.752916][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 180.765826][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 180.786395][ T6257] netem: change failed [ 180.897152][ T6051] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.908587][ T6148] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 180.918574][ T6148] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 180.934490][ T6051] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.993553][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 181.007005][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 181.028860][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 182.832958][ T7] Bluetooth: hci2: command 0x0419 tx timeout [ 182.851113][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 182.860930][ T6148] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 182.883763][ T6051] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.898610][ T6051] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.918389][ T6051] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.938636][ T6051] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.970745][ T6148] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 183.216715][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.229975][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.260544][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 183.345146][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.365981][ T6148] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.392610][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.411603][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 183.473693][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 183.505632][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 183.538067][ T6148] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.621799][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 183.631286][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 183.640191][ T4409] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.647366][ T4409] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.688002][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 183.732329][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 183.781737][ T4409] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.789041][ T4409] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.812438][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 184.865588][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 184.895658][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 184.948920][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 185.013622][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 185.054384][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 185.073424][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 185.108367][ T6148] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 185.149268][ T6148] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 185.196688][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 185.215544][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 185.245349][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 185.269131][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 185.287616][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 185.321509][ T4810] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 185.336798][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 185.572947][ T4810] usb 7-1: Using ep0 maxpacket: 16 [ 185.661822][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 185.680037][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 185.691606][ T4810] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 185.707130][ T6148] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.912631][ T4810] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 186.263618][ T4810] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.294059][ T4810] usb 7-1: Product: syz [ 186.321546][ T4810] usb 7-1: Manufacturer: syz [ 186.358150][ T4810] usb 7-1: SerialNumber: syz [ 186.382602][ T4814] Bluetooth: hci1: command 0x0406 tx timeout [ 186.399155][ T4810] usb 7-1: config 0 descriptor?? [ 186.434885][ T4814] Bluetooth: hci4: command 0x0406 tx timeout [ 186.475799][ T4810] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 186.511883][ T4810] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 187.213648][ T6368] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 187.954372][ T4810] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 188.027494][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 188.046642][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 188.098283][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 188.117581][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 188.138584][ T6148] device veth0_vlan entered promiscuous mode [ 188.148459][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 188.179392][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 188.229183][ T6148] device veth1_vlan entered promiscuous mode [ 188.299681][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 188.319309][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 188.345883][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 188.369974][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 188.388733][ T6148] device veth0_macvtap entered promiscuous mode [ 188.399753][ T6148] device veth1_macvtap entered promiscuous mode [ 188.449903][ T6148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.473572][ T6148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.486618][ T4810] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 188.502835][ T4810] em28xx 7-1:0.0: board has no eeprom [ 188.524609][ T6148] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 188.541883][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 188.550533][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 188.562057][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 188.577659][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 188.593032][ T6148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.631411][ T6148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.651081][ T6148] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.663993][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 188.678715][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 188.704637][ T6148] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.717182][ T6148] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.739428][ T6148] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.750461][ T6148] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.871254][ T4409] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.889736][ T4409] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.919964][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 188.957927][ T4409] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.981161][ T4409] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.007089][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 189.487815][ T6388] loop5: detected capacity change from 0 to 32768 [ 189.570737][ T6388] gfs2: can't find protocol l [ 189.742546][ T6313] em28xx 7-1:0.0: reading from i2c device at 0xfffe failed (error=-5) [ 189.771577][ T4810] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 189.786185][ T4810] em28xx 7-1:0.0: dvb set to bulk mode. [ 189.808744][ T7] em28xx 7-1:0.0: Binding DVB extension [ 190.578690][ T4810] usb 7-1: USB disconnect, device number 2 [ 190.585338][ T4810] em28xx 7-1:0.0: Disconnecting em28xx [ 190.679540][ T7] em28xx 7-1:0.0: Registering input extension [ 190.702552][ T4810] em28xx 7-1:0.0: Closing input extension [ 190.832226][ T4810] em28xx 7-1:0.0: Freeing device [ 191.038436][ T6449] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 191.080509][ T6451] loop7: detected capacity change from 0 to 128 [ 191.172221][ T26] kauditd_printk_skb: 242 callbacks suppressed [ 191.172233][ T26] audit: type=1800 audit(1771581340.312:255): pid=6451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.564" name="bus" dev="loop7" ino=1048615 res=0 errno=0 [ 191.226114][ T6455] loop5: detected capacity change from 0 to 2048 [ 191.342512][ T6455] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 191.368655][ T6464] netlink: 8 bytes leftover after parsing attributes in process `syz.6.570'. [ 191.720466][ T6471] 8021q: adding VLAN 0 to HW filter on device bond1 [ 192.783696][ T6490] loop6: detected capacity change from 0 to 1024 [ 194.083984][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.090444][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.967768][ T26] audit: type=1800 audit(1771581344.102:256): pid=6486 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.576" name=80E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080E29080 [ 195.135817][ T4409] hfsplus: b-tree write err: -5, ino 4 [ 196.530328][ T6564] overlayfs: failed to clone upperpath [ 196.581209][ T6564] overlayfs: failed to clone upperpath [ 196.892164][ T6576] tipc: Failed to remove unknown binding: 66,0,0/0:3737895668/3737895670 [ 196.939998][ T6576] tipc: Failed to remove unknown binding: 66,0,0/0:3737895668/3737895669 [ 196.986237][ T6576] tipc: Failed to remove unknown binding: 66,0,0/0:3737895668/3737895670 [ 197.004968][ T6576] tipc: Failed to remove unknown binding: 66,0,0/0:3737895668/3737895669 [ 197.107097][ T6589] loop5: detected capacity change from 0 to 128 [ 197.164676][ T6589] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 197.537504][ T6609] fuse: Bad value for 'fd' [ 198.361940][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 200.107423][ T6664] netlink: 'syz.4.624': attribute type 10 has an invalid length. [ 200.148264][ T6664] device syz_tun entered promiscuous mode [ 200.198085][ T6664] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 200.541554][ T4814] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 200.604412][ T6696] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 200.612570][ T6696] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 200.810149][ T6703] capability: warning: `syz.3.638' uses deprecated v2 capabilities in a way that may be insecure [ 200.911526][ T4814] usb 6-1: config 0 has an invalid interface number: 111 but max is 0 [ 200.929983][ T4814] usb 6-1: config 0 has no interface number 0 [ 200.936816][ T4814] usb 6-1: New USB device found, idVendor=05a9, idProduct=8065, bcdDevice=41.96 [ 200.950838][ T4814] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.970906][ T4814] usb 6-1: config 0 descriptor?? [ 201.024360][ T4814] gspca_main: ov534_9-2.14.0 probing 05a9:8065 [ 201.281448][ T7] Bluetooth: hci3: command 0x0406 tx timeout [ 201.495807][ T6708] loop7: detected capacity change from 0 to 512 [ 201.690571][ T6708] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 201.719740][ T6708] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 202.835767][ T6726] EXT4-fs error (device loop7): __ext4_new_inode:1286: comm syz.7.649: failed to insert inode 16: doubly allocated? [ 202.943107][ T4814] gspca_ov534_9: reg_w failed -110 [ 204.349747][ T4814] gspca_ov534_9: Unknown sensor 0000 [ 204.349809][ T4814] ov534_9: probe of 6-1:0.111 failed with error -22 [ 204.405343][ T4808] usb 6-1: USB disconnect, device number 4 [ 204.632129][ T6749] device syzkaller0 entered promiscuous mode [ 204.731524][ T4816] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 204.971390][ T4816] usb 7-1: Using ep0 maxpacket: 32 [ 205.024102][ T6783] loop5: detected capacity change from 0 to 1024 [ 205.084027][ T6783] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 205.449206][ T6783] EXT4-fs (loop5): mounted filesystem without journal. Opts: auto_da_alloc,mblk_io_submit,,errors=continue. Quota mode: none. [ 205.736474][ T4816] usb 7-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 205.784244][ T4816] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.086932][ T6798] netlink: 4 bytes leftover after parsing attributes in process `syz.7.655'. [ 207.041292][ T4816] usb 7-1: config 0 descriptor?? [ 207.113483][ T4816] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 209.214782][ T6853] netlink: 'syz.7.667': attribute type 10 has an invalid length. [ 209.401448][ T4816] gspca_vc032x: reg_r err -71 [ 209.406206][ T4816] gspca_vc032x: I2c Bus Busy Wait 00 [ 209.411822][ T4816] gspca_vc032x: I2c Bus Busy Wait 00 [ 209.417129][ T4816] gspca_vc032x: I2c Bus Busy Wait 00 [ 209.422717][ T4816] gspca_vc032x: I2c Bus Busy Wait 00 [ 209.428039][ T4816] gspca_vc032x: I2c Bus Busy Wait 00 [ 209.433807][ T4816] gspca_vc032x: I2c Bus Busy Wait 00 [ 209.439110][ T4816] gspca_vc032x: I2c Bus Busy Wait 00 [ 209.445343][ T4816] gspca_vc032x: I2c Bus Busy Wait 00 [ 209.601590][ T4816] gspca_vc032x: I2c Bus Busy Wait 00 [ 209.607121][ T4816] gspca_vc032x: I2c Bus Busy Wait 00 [ 209.612651][ T4816] gspca_vc032x: I2c Bus Busy Wait 00 [ 209.618091][ T4816] gspca_vc032x: I2c Bus Busy Wait 00 [ 209.623554][ T4816] gspca_vc032x: I2c Bus Busy Wait 00 [ 209.628991][ T4816] gspca_vc032x: I2c Bus Busy Wait 00 [ 209.634470][ T4816] gspca_vc032x: I2c Bus Busy Wait 00 [ 209.639932][ T4816] gspca_vc032x: I2c Bus Busy Wait 00 [ 209.645400][ T4816] gspca_vc032x: I2c Bus Busy Wait 00 [ 209.650811][ T4816] gspca_vc032x: I2c Bus Busy Wait 00 [ 209.901775][ T6853] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 209.927034][ T4816] gspca_vc032x: Unknown sensor... [ 210.281497][ T4816] vc032x: probe of 7-1:0.0 failed with error -22 [ 210.314555][ T4816] usb 7-1: USB disconnect, device number 3 [ 211.777577][ T6885] netlink: 4 bytes leftover after parsing attributes in process `syz.3.678'. [ 211.795139][ T6885] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.804734][ T6885] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.813835][ T6885] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.822645][ T6885] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.616615][ T6885] netlink: 4 bytes leftover after parsing attributes in process `syz.3.678'. [ 212.776738][ T6905] netlink: 4 bytes leftover after parsing attributes in process `syz.3.683'. [ 212.833735][ T6905] device hsr_slave_1 left promiscuous mode [ 213.475753][ T6941] xt_hashlimit: max too large, truncated to 1048576 [ 213.512972][ T6941] xt_hashlimit: overflow, try lower: 0/0 [ 213.561285][ T6940] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 213.570829][ T6940] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 213.580372][ T6940] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 213.589860][ T6940] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 213.616500][ T6937] netlink: 20 bytes leftover after parsing attributes in process `syz.7.691'. [ 213.639813][ T6937] device ip6gre1 entered promiscuous mode [ 213.662652][ T6948] netlink: 'syz.7.691': attribute type 6 has an invalid length. [ 213.670352][ T6948] netlink: 72 bytes leftover after parsing attributes in process `syz.7.691'. [ 213.791157][ T6957] binder: 6956:6957 ioctl c0306201 0 returned -14 [ 213.803199][ T6957] binder: 6956:6957 ioctl c0306201 200000000380 returned -14 [ 214.747368][ T6971] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.754688][ T6971] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.819644][ T6977] netlink: 12 bytes leftover after parsing attributes in process `syz.3.701'. [ 214.856657][ T6975] netlink: 'syz.6.700': attribute type 1 has an invalid length. [ 214.873081][ T6974] syz.5.696 (6974) used greatest stack depth: 18672 bytes left [ 214.937372][ T6977] bond2: (slave vcan1): refused to change device type [ 216.581315][ T7010] overlayfs: statfs failed on './file0' [ 217.896765][ T7025] netlink: 5 bytes leftover after parsing attributes in process `syz.4.715'. [ 217.996817][ T7025] .30ªX¹¦D: renamed from gretap0 [ 218.021683][ T7025] A link change request failed with some changes committed already. Interface .30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 219.298455][ T7043] bridge0: port 3(syz_tun) entered blocking state [ 219.308030][ T7043] bridge0: port 3(syz_tun) entered disabled state [ 219.319338][ T7043] device syz_tun entered promiscuous mode [ 219.328742][ T7043] bridge0: port 3(syz_tun) entered blocking state [ 219.335611][ T7043] bridge0: port 3(syz_tun) entered forwarding state [ 219.722263][ T7039] device bridge0 entered promiscuous mode [ 222.602279][ T7096] netlink: 24 bytes leftover after parsing attributes in process `syz.7.729'. [ 222.686713][ T7099] netlink: 4 bytes leftover after parsing attributes in process `syz.3.727'. [ 223.511885][ T154] device hsr_slave_0 left promiscuous mode [ 223.518985][ T154] device hsr_slave_1 left promiscuous mode [ 223.522647][ T7114] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 223.552141][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 223.583449][ T4810] kernel read not supported for file [userfaultfd] (pid: 4810 comm: kworker/0:10) [ 223.600588][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 223.625710][ T154] device bridge_slave_1 left promiscuous mode [ 223.637955][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.655677][ T154] device bridge_slave_0 left promiscuous mode [ 223.667704][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.843689][ T154] team0 (unregistering): Port device team_slave_1 removed [ 224.959019][ T154] team0 (unregistering): Port device team_slave_0 removed [ 225.048733][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 225.086491][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 226.280969][ T154] bond0 (unregistering): Released all slaves [ 227.783592][ T7187] fuse: Bad value for 'fd' [ 228.076664][ T7198] netlink: 24 bytes leftover after parsing attributes in process `syz.7.754'. [ 228.150796][ T7203] netlink: 'syz.6.755': attribute type 39 has an invalid length. [ 228.242570][ T7206] IPv6: Can't replace route, no match found [ 228.704908][ T7177] loop5: detected capacity change from 0 to 32768 [ 228.799152][ T7177] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 scanned by syz.5.751 (7177) [ 229.025708][ T7177] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 229.688278][ T7177] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 229.710431][ T7177] BTRFS info (device loop5): use zstd compression, level 3 [ 229.718406][ T7177] BTRFS info (device loop5): using free space tree [ 229.726069][ T7177] BTRFS info (device loop5): has skinny extents [ 229.817953][ T7242] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 230.742407][ T7177] BTRFS error (device loop5): open_ctree failed: -12 [ 232.591957][ T7300] sch_tbf: burst 2 is lower than device lo mtu (65550) ! [ 233.542975][ T7297] sch_tbf: burst 2 is lower than device lo mtu (65550) ! [ 233.550355][ T7297] sch_tbf: burst 2 is lower than device lo mtu (65550) ! [ 234.787344][ T7347] netlink: 8 bytes leftover after parsing attributes in process `syz.6.781'. [ 234.837028][ T7347] netlink: 12 bytes leftover after parsing attributes in process `syz.6.781'. [ 234.885387][ T7347] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.894808][ T7347] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.904029][ T7347] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.913438][ T7347] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.044184][ T7353] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 235.091950][ T7353] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.228137][ T7354] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 236.302977][ T7372] binder: BINDER_SET_CONTEXT_MGR already set [ 236.382203][ T7372] binder: 7371:7372 ioctl 4018620d 200000000040 returned -16 [ 236.400974][ T7372] binder: 7371:7372 ioctl c0306201 200000000240 returned -11 [ 239.392753][ T7400] bridge0: port 3(syz_tun) entered disabled state [ 239.507935][ T7400] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.515455][ T7400] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.541931][ T7400] device bridge0 left promiscuous mode [ 239.749447][ T7429] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 241.178175][ T7400] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 241.197103][ T7400] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.286849][ T7400] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.296931][ T7400] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.306715][ T7400] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.435415][ T7400] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 241.444955][ T7400] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 241.453879][ T7400] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 241.475471][ T7404] netlink: 24 bytes leftover after parsing attributes in process `syz.3.796'. [ 241.706077][ T7452] netlink: 12 bytes leftover after parsing attributes in process `syz.6.803'. [ 241.737287][ T7449] loop7: detected capacity change from 0 to 1024 [ 241.799947][ T7452] netlink: 12 bytes leftover after parsing attributes in process `syz.6.803'. [ 242.066992][ T7449] Quota error (device loop7): v2_read_file_info: Number of blocks too big for quota file size (6144 > 256). [ 242.314907][ T7449] EXT4-fs warning (device loop7): ext4_enable_quotas:6486: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 242.504565][ T7449] EXT4-fs (loop7): mount failed [ 245.208468][ T7504] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 245.217112][ T7504] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 245.245958][ T7504] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 245.259261][ T7504] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 248.786540][ T7565] netlink: 'syz.7.827': attribute type 21 has an invalid length. [ 248.838554][ T7565] netlink: 132 bytes leftover after parsing attributes in process `syz.7.827'. [ 248.938294][ T7565] netlink: 'syz.7.827': attribute type 1 has an invalid length. [ 248.976552][ T7565] netlink: 12 bytes leftover after parsing attributes in process `syz.7.827'. [ 249.016842][ T7576] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge_slave_0 [ 249.266948][ T7582] netlink: 8 bytes leftover after parsing attributes in process `syz.6.832'. [ 253.255738][ T7629] device bridge1 entered promiscuous mode [ 253.297663][ T7629] bond2: (slave bridge1): making interface the new active one [ 253.342897][ T7629] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 253.362085][ T7632] netlink: 12 bytes leftover after parsing attributes in process `syz.7.844'. [ 253.483360][ T7644] netlink: 12 bytes leftover after parsing attributes in process `syz.3.845'. [ 255.524288][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.530887][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.555502][ T7665] netlink: 'syz.4.850': attribute type 27 has an invalid length. [ 255.874801][ T7665] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 256.818023][ T7692] loop5: detected capacity change from 0 to 512 [ 256.997065][ T7692] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 257.236020][ T7692] ext4 filesystem being mounted at /138/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 258.112258][ T7709] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 258.252380][ T7716] netlink: 'syz.5.861': attribute type 10 has an invalid length. [ 258.354770][ T7716] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 259.610638][ T7741] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 259.694337][ T7746] IPVS: sync thread started: state = MASTER, mcast_ifn = bond_slave_0, syncid = 1, id = 0 [ 259.970297][ T7756] overlayfs: failed to clone upperpath [ 261.625217][ T7786] fuse: Bad value for 'fd' [ 265.645741][ T7832] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 266.018742][ T7840] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.143882][ T7840] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.157105][ T7840] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.192225][ T7870] netlink: 40 bytes leftover after parsing attributes in process `syz.7.898'. [ 269.242593][ T7870] netlink: 40 bytes leftover after parsing attributes in process `syz.7.898'. [ 269.271409][ T7870] netlink: 40 bytes leftover after parsing attributes in process `syz.7.898'. [ 269.337952][ T7870] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 270.497631][ T7840] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.753608][ T7840] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.828162][ T7840] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.910146][ T7840] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.957849][ T7840] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.984026][ T7898] device syzkaller0 entered promiscuous mode [ 271.852830][ T7905] netlink: 'syz.6.908': attribute type 1 has an invalid length. [ 271.968473][ T7905] netlink: 146340 bytes leftover after parsing attributes in process `syz.6.908'. [ 272.061080][ T7915] netlink: 'syz.4.910': attribute type 4 has an invalid length. [ 274.601717][ T7939] Disabled LAPIC found during irq injection [ 276.261403][ T26] audit: type=1800 audit(3919065073.354:257): pid=7956 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.917" name="/" dev="fuse" ino=4 res=0 errno=0 [ 280.627084][ T7992] overlayfs: failed to clone upperpath [ 281.642041][ T4825] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 281.796705][ T8026] tipc: Enabling of bearer rejected, failed to enable media [ 282.071519][ T4228] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 282.093123][ T4825] usb 6-1: Using ep0 maxpacket: 8 [ 282.242004][ T4825] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 282.256729][ T4825] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 282.278703][ T4825] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 282.289621][ T4825] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 282.311873][ T4825] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 282.321489][ T4228] usb 7-1: Using ep0 maxpacket: 16 [ 282.330136][ T4825] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.441600][ T4228] usb 7-1: too many endpoints for config 0 interface 0 altsetting 254: 254, using maximum allowed: 30 [ 282.461179][ T4228] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.491367][ T4228] usb 7-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 282.526621][ T4228] usb 7-1: config 0 interface 0 has no altsetting 0 [ 282.672145][ T4825] usb 6-1: GET_CAPABILITIES returned 0 [ 282.677899][ T4825] usbtmc 6-1:16.0: can't read capabilities [ 282.700269][ T4228] usb 7-1: New USB device found, idVendor=06a3, idProduct=0ccd, bcdDevice= 0.00 [ 283.449294][ T4228] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.459448][ T4228] usb 7-1: config 0 descriptor?? [ 283.602172][ T4825] usb 6-1: USB disconnect, device number 5 [ 283.708463][ T8063] loop7: detected capacity change from 0 to 64 [ 283.717225][ T8060] netlink: 12 bytes leftover after parsing attributes in process `syz.4.945'. [ 283.849407][ T8067] tipc: Started in network mode [ 283.881604][ T8067] tipc: Node identity 4, cluster identity 4711 [ 283.887861][ T8067] tipc: Node number set to 4 [ 283.901485][ T4228] usbhid 7-1:0.0: can't add hid device: -71 [ 283.907741][ T4228] usbhid: probe of 7-1:0.0 failed with error -71 [ 283.960796][ T4228] usb 7-1: USB disconnect, device number 4 [ 283.971073][ T8063] attempt to access beyond end of device [ 283.971073][ T8063] loop7: rw=34817, want=164, limit=64 [ 284.027991][ T8063] attempt to access beyond end of device [ 284.027991][ T8063] loop7: rw=34817, want=168, limit=64 [ 284.072788][ T8063] attempt to access beyond end of device [ 284.072788][ T8063] loop7: rw=34817, want=170, limit=64 [ 284.245766][ T8080] device vlan2 entered promiscuous mode [ 284.302078][ T8080] device bond0 entered promiscuous mode [ 284.308133][ T8063] attempt to access beyond end of device [ 284.308133][ T8063] loop7: rw=34817, want=852, limit=64 [ 284.360650][ T8080] device bond_slave_0 entered promiscuous mode [ 284.639956][ T8080] device bond_slave_1 entered promiscuous mode [ 284.653020][ T8080] device bridge0 entered promiscuous mode [ 284.744650][ T8094] loop2: detected capacity change from 0 to 7 [ 285.311569][ T8094] loop2: [ 285.330008][ T8094] loop2: partition table partially beyond EOD, truncated [ 285.340015][ T4455] attempt to access beyond end of device [ 285.340015][ T4455] loop7: rw=1, want=172, limit=64 [ 285.351915][ T4455] Buffer I/O error on dev loop7, logical block 171, lost async page write [ 285.664554][ T8108] netlink: 4 bytes leftover after parsing attributes in process `syz.5.957'. [ 286.407657][ T8106] xt_hashlimit: size too large, truncated to 1048576 [ 286.456177][ T8106] xt_hashlimit: invalid rate [ 288.024300][ T8146] loop7: detected capacity change from 0 to 512 [ 288.152762][ T8146] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 288.224502][ T8146] ext4 filesystem being mounted at /80/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 288.225225][ T4825] syzkaller0: tun_net_xmit 76 [ 288.337862][ T4825] syzkaller0: tun_net_xmit 48 [ 288.350735][ T4227] syzkaller0: tun_net_xmit 76 [ 288.356990][ T4227] Bluetooth: hci0: command 0x0406 tx timeout [ 288.413078][ T8153] syzkaller0: delete flow: hash 1237430693 index 1 [ 288.608666][ T8171] xt_hashlimit: size too large, truncated to 1048576 [ 288.615596][ T8171] xt_hashlimit: invalid rate [ 289.522971][ T8187] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 289.550475][ T8187] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 289.558822][ T8187] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 289.568610][ T8187] device bridge_slave_0 left promiscuous mode [ 289.575889][ T8187] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.586705][ T8187] device bridge_slave_1 left promiscuous mode [ 289.741673][ T8187] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.224304][ T8187] bond0: (slave bond_slave_0): Releasing backup interface [ 290.270518][ T8187] bond0: (slave bond_slave_1): Releasing backup interface [ 290.370156][ T8187] team0: Port device team_slave_0 removed [ 290.413937][ T8214] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 290.463998][ T8187] team0: Port device team_slave_1 removed [ 290.508073][ T8187] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 290.644998][ T8187] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 290.919747][ T8187] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 291.120376][ T8187] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 291.405130][ T8187] bond0: (slave wlan1): Releasing backup interface [ 293.349506][ T8254] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 294.354609][ T8275] netlink: 4 bytes leftover after parsing attributes in process `syz.5.993'. [ 294.404319][ T8275] device team1 entered promiscuous mode [ 297.954548][ T8306] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 298.233831][ T8306] netlink: 'syz.3.1000': attribute type 10 has an invalid length. [ 298.370522][ T8306] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 298.741296][ T8312] Invalid option length (57448) for dns_resolver key [ 299.922024][ T4828] Bluetooth: hci2: command 0x0406 tx timeout [ 303.867110][ T8412] 8021q: adding VLAN 0 to HW filter on device bond1 [ 303.906359][ T8412] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 303.920250][ T8412] bond1: (slave macvlan2): Enslaving as a backup interface with a down link [ 304.982612][ T8428] team0: Port device team_slave_0 removed [ 307.462089][ T8467] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1035'. [ 307.530436][ T8467] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 307.601940][ T8467] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (68719607821) [ 309.072038][ T8483] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1040'. [ 310.768810][ T8512] netlink: 276 bytes leftover after parsing attributes in process `syz.4.1048'. [ 313.064471][ T8526] loop6: detected capacity change from 0 to 512 [ 313.131852][ T8526] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled [ 313.220999][ T8526] EXT4-fs error (device loop6): ext4_orphan_get:1400: inode #15: comm syz.6.1052: iget: bad i_size value: 38620345925642 [ 313.242384][ T8526] EXT4-fs (loop6): Remounting filesystem read-only [ 313.249053][ T8526] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.1052: couldn't read orphan inode 15 (err -117) [ 313.294687][ T8526] EXT4-fs (loop6): Remounting filesystem read-only [ 313.351923][ T8526] EXT4-fs (loop6): mounted filesystem without journal. Opts: nombcache,jqfmt=vfsv0,nojournal_checksum,errors=remount-ro,usrjquota=,acl,. Quota mode: writeback. [ 314.279862][ T8555] 8021q: adding VLAN 0 to HW filter on device bond3 [ 315.241165][ T8558] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 315.285412][ T8558] bond3: (slave macvlan2): Enslaving as a backup interface with an up link [ 315.298931][ T4407] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 315.321761][ T8562] device vlan2 entered promiscuous mode [ 315.327714][ T8562] device team0 entered promiscuous mode [ 315.437979][ T8562] device team_slave_1 entered promiscuous mode [ 315.695265][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 316.833608][ T4407] bond3: (slave macvlan2): link status up again after 0 ms [ 316.948071][ T4407] bond3: (slave macvlan2): failed to get link speed/duplex [ 316.975892][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.982263][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.038018][ T4407] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 317.156405][ T4407] bond3: (slave macvlan2): failed to get link speed/duplex [ 317.224291][ T8593] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 317.359599][ T8602] device ip6gre1 entered promiscuous mode [ 317.409689][ T8604] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 317.442573][ T4407] bond3: (slave macvlan2): failed to get link speed/duplex [ 317.450373][ T4828] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 317.474319][ T4828] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 317.518846][ T4230] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 317.563203][ T4455] bond3: (slave macvlan2): failed to get link speed/duplex [ 317.632065][ T8614] tipc: Enabling of bearer rejected, failed to enable media [ 317.711456][ T4267] bond3: (slave macvlan2): failed to get link speed/duplex [ 317.853640][ T4267] bond3: (slave macvlan2): failed to get link speed/duplex [ 318.031393][ T4267] bond3: (slave macvlan2): failed to get link speed/duplex [ 318.171395][ T4267] bond3: (slave macvlan2): failed to get link speed/duplex [ 318.460151][ T4230] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 318.491867][ T4828] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 318.706587][ T8631] device vlan2 entered promiscuous mode [ 318.721823][ T26] audit: type=1800 audit(3919065115.862:258): pid=8584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1067" name="bus" dev="ramfs" ino=47476 res=0 errno=0 [ 318.742038][ T8631] device team0 entered promiscuous mode [ 318.761179][ T8633] loop6: detected capacity change from 0 to 256 [ 318.827258][ T8633] FAT-fs (loop6): Directory bread(block 1285) failed [ 318.843409][ T8633] vfat filesystem being mounted at /103/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 319.191889][ T4230] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 319.612363][ T4230] usb 6-1: unable to get BOS descriptor or descriptor too short [ 319.722237][ T4230] usb 6-1: config 63 has an invalid interface number: 66 but max is 0 [ 319.789516][ T4230] usb 6-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 319.919876][ T4230] usb 6-1: config 63 has no interface number 0 [ 319.952391][ T4230] usb 6-1: config 63 interface 66 has no altsetting 0 [ 320.281867][ T4230] usb 6-1: New USB device found, idVendor=174f, idProduct=8a31, bcdDevice=39.f4 [ 320.290964][ T4230] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.305683][ T4230] usb 6-1: Product: syz [ 320.309954][ T4230] usb 6-1: Manufacturer: syz [ 320.353156][ T4407] net_ratelimit: 17 callbacks suppressed [ 320.353321][ T4407] bond3: (slave macvlan2): failed to get link speed/duplex [ 320.386840][ T4230] usb 6-1: SerialNumber: syz [ 320.564062][ T4407] bond3: (slave macvlan2): failed to get link speed/duplex [ 320.802450][ T144] bond3: (slave macvlan2): failed to get link speed/duplex [ 320.976634][ T144] bond3: (slave macvlan2): failed to get link speed/duplex [ 321.195179][ T4455] bond3: (slave macvlan2): failed to get link speed/duplex [ 321.267601][ T8640] udc-core: couldn't find an available UDC or it's busy [ 321.275461][ T8640] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 321.378066][ T8678] dns_resolver: Unsupported server list version (6) [ 321.441436][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 321.459423][ T4230] usb 6-1: USB disconnect, device number 6 [ 321.466515][ T4407] bond3: (slave macvlan2): failed to get link speed/duplex [ 321.590576][ T8677] netlink: 'syz.7.1099': attribute type 12 has an invalid length. [ 321.662193][ T4407] bond3: (slave macvlan2): failed to get link speed/duplex [ 321.800500][ T4264] udevd[4264]: setting owner of /dev/bus/usb/006/006 to uid=0, gid=0 failed: No such file or directory [ 321.853288][ T4407] bond3: (slave macvlan2): failed to get link speed/duplex [ 322.102958][ T4407] bond3: (slave macvlan2): failed to get link speed/duplex [ 322.234819][ T144] bond3: (slave macvlan2): failed to get link speed/duplex [ 325.247483][ T8720] sctp: [Deprecated]: syz.7.1114 (pid 8720) Use of int in max_burst socket option. [ 325.247483][ T8720] Use struct sctp_assoc_value instead [ 325.452667][ T4455] net_ratelimit: 20 callbacks suppressed [ 325.452684][ T4455] bond3: (slave macvlan2): failed to get link speed/duplex [ 326.171083][ T4407] bond3: (slave macvlan2): failed to get link speed/duplex [ 326.248826][ T8752] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1125'. [ 326.306650][ T8752] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1125'. [ 326.351456][ T4455] bond3: (slave macvlan2): failed to get link speed/duplex [ 326.571783][ T4407] bond3: (slave macvlan2): failed to get link speed/duplex [ 326.690589][ T8767] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1127'. [ 326.773970][ T8771] netlink: 'syz.5.1128': attribute type 11 has an invalid length. [ 326.782529][ T8771] netlink: 'syz.5.1128': attribute type 11 has an invalid length. [ 326.790421][ T8771] netlink: 'syz.5.1128': attribute type 6 has an invalid length. [ 326.798777][ T8771] netlink: 5204 bytes leftover after parsing attributes in process `syz.5.1128'. [ 327.745535][ T8757] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 327.835896][ T8767] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 327.904589][ T8769] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1131'. [ 327.921938][ T4455] bond3: (slave macvlan2): failed to get link speed/duplex [ 328.041766][ T4267] bond3: (slave macvlan2): failed to get link speed/duplex [ 328.191436][ T4455] bond3: (slave macvlan2): failed to get link speed/duplex [ 328.229515][ T8783] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1136'. [ 328.391677][ T4455] bond3: (slave macvlan2): failed to get link speed/duplex [ 328.892518][ T4407] bond3: (slave macvlan2): failed to get link speed/duplex [ 329.051379][ T4455] bond3: (slave macvlan2): failed to get link speed/duplex [ 329.386209][ T8805] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 329.600650][ T8809] netlink: 'syz.7.1145': attribute type 3 has an invalid length. [ 329.761395][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 329.921418][ T7746] IPVS: ip_vs_send_async error -101 [ 330.019251][ T8818] netlink: 100 bytes leftover after parsing attributes in process `syz.7.1148'. [ 330.223734][ T8818] hugetlbfs: syz.7.1148 (8818): Using mlock ulimits for SHM_HUGETLB is deprecated [ 330.253696][ T8823] loop5: detected capacity change from 0 to 128 [ 330.485143][ T8823] vfat filesystem being mounted at /187/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2107-12-31 (0x10391447e) [ 330.518486][ T4267] net_ratelimit: 11 callbacks suppressed [ 330.518504][ T4267] bond3: (slave macvlan2): failed to get link speed/duplex [ 330.662774][ T8839] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1153'. [ 330.783675][ T4267] bond3: (slave macvlan2): failed to get link speed/duplex [ 331.032355][ T4267] bond3: (slave macvlan2): failed to get link speed/duplex [ 331.271131][ T4267] bond3: (slave macvlan2): failed to get link speed/duplex [ 331.451795][ T3053] bond3: (slave macvlan2): failed to get link speed/duplex [ 331.572437][ T154] bond3: (slave macvlan2): failed to get link speed/duplex [ 331.776028][ T3053] bond3: (slave macvlan2): failed to get link speed/duplex [ 333.522942][ T4267] bond3: (slave macvlan2): failed to get link speed/duplex [ 333.751455][ T4267] bond3: (slave macvlan2): failed to get link speed/duplex [ 334.011397][ T4267] bond3: (slave macvlan2): failed to get link speed/duplex [ 334.902111][ T8881] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1168'. [ 334.944390][ T8881] bridge3: port 1(veth0_to_bond) entered blocking state [ 334.971980][ T8881] bridge3: port 1(veth0_to_bond) entered disabled state [ 334.998721][ T8881] device veth0_to_bond entered promiscuous mode [ 335.353757][ T8888] netlink: 'syz.6.1170': attribute type 10 has an invalid length. [ 335.452006][ T8888] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1170'. [ 335.504083][ T8888] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.543574][ T8888] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.552393][ T8888] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.570996][ T8888] device geneve0 entered promiscuous mode [ 335.577919][ T8888] team0: Port device geneve0 added [ 335.621906][ T3053] net_ratelimit: 5 callbacks suppressed [ 335.621923][ T3053] bond3: (slave macvlan2): failed to get link speed/duplex [ 336.172248][ T4267] bond3: (slave macvlan2): failed to get link speed/duplex [ 336.452765][ T8899] team0: No ports can be present during mode change [ 336.527217][ T154] bond3: (slave macvlan2): failed to get link speed/duplex [ 337.644574][ T8905] netlink: 'syz.5.1175': attribute type 9 has an invalid length. [ 337.692757][ T154] bond3: (slave macvlan2): failed to get link speed/duplex [ 337.831810][ T4241] bond3: (slave macvlan2): failed to get link speed/duplex [ 337.868307][ T8920] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1179'. [ 338.093280][ T154] bond3: (slave macvlan2): failed to get link speed/duplex [ 338.294159][ T154] bond3: (slave macvlan2): failed to get link speed/duplex [ 338.533085][ T154] bond3: (slave macvlan2): failed to get link speed/duplex [ 338.741998][ T4267] bond3: (slave macvlan2): failed to get link speed/duplex [ 338.916861][ T4455] bond3: (slave macvlan2): failed to get link speed/duplex [ 339.143812][ T26] audit: type=1326 audit(3919065136.282:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8933 comm="syz.3.1185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6ab00c629 code=0x7ffc0000 [ 339.195943][ T26] audit: type=1326 audit(3919065136.312:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8933 comm="syz.3.1185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff6ab00c629 code=0x7ffc0000 [ 339.272214][ T26] audit: type=1326 audit(3919065136.312:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8933 comm="syz.3.1185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6ab00c629 code=0x7ffc0000 [ 339.380357][ T26] audit: type=1326 audit(3919065136.312:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8933 comm="syz.3.1185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff6ab00c629 code=0x7ffc0000 [ 340.341418][ T26] audit: type=1326 audit(3919065136.312:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8933 comm="syz.3.1185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6ab00c629 code=0x7ffc0000 [ 340.388199][ T26] audit: type=1326 audit(3919065136.312:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8933 comm="syz.3.1185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff6ab00c629 code=0x7ffc0000 [ 340.421181][ T26] audit: type=1326 audit(3919065136.312:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8933 comm="syz.3.1185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6ab00c629 code=0x7ffc0000 [ 340.469688][ T26] audit: type=1326 audit(3919065136.312:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8933 comm="syz.3.1185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff6ab00c629 code=0x7ffc0000 [ 340.553812][ T26] audit: type=1326 audit(3919065136.312:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8933 comm="syz.3.1185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6ab00c629 code=0x7ffc0000 [ 340.626318][ T26] audit: type=1326 audit(3919065136.312:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8933 comm="syz.3.1185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6ab00c629 code=0x7ffc0000 [ 340.661978][ T3053] net_ratelimit: 7 callbacks suppressed [ 340.661996][ T3053] bond3: (slave macvlan2): failed to get link speed/duplex [ 340.923538][ T4241] bond3: (slave macvlan2): failed to get link speed/duplex [ 342.196852][ T4455] bond3: (slave macvlan2): failed to get link speed/duplex [ 342.323257][ T4455] bond3: (slave macvlan2): failed to get link speed/duplex [ 342.431509][ T3053] bond3: (slave macvlan2): failed to get link speed/duplex [ 342.473194][ T8976] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1196'. [ 342.546867][ T8976] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 342.555954][ T8976] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 342.567256][ T8976] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 342.576049][ T8976] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 342.626883][ T8976] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1196'. [ 342.701355][ T4455] bond3: (slave macvlan2): failed to get link speed/duplex [ 342.786258][ T8989] capability: warning: `syz.5.1201' uses 32-bit capabilities (legacy support in use) [ 343.089321][ T3053] bond3: (slave macvlan2): failed to get link speed/duplex [ 345.154638][ T4241] bond3: (slave macvlan2): failed to get link speed/duplex [ 345.492199][ T4241] bond3: (slave macvlan2): failed to get link speed/duplex [ 345.612225][ T4241] bond3: (slave macvlan2): failed to get link speed/duplex [ 345.786820][ T4455] bond3: (slave macvlan2): failed to get link speed/duplex [ 345.883710][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 345.911806][ T154] bond3: (slave macvlan2): failed to get link speed/duplex [ 345.959181][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.978152][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.053131][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 346.222864][ T154] bond3: (slave macvlan2): failed to get link speed/duplex [ 346.491594][ T154] bond3: (slave macvlan2): failed to get link speed/duplex [ 346.762048][ T4455] bond3: (slave macvlan2): failed to get link speed/duplex [ 347.064750][ T4455] bond3: (slave macvlan2): failed to get link speed/duplex [ 348.132359][ T3053] bond3: (slave macvlan2): failed to get link speed/duplex [ 348.241507][ T3053] bond3: (slave macvlan2): failed to get link speed/duplex [ 348.602631][ T3053] bond3: (slave macvlan2): failed to get link speed/duplex [ 349.979696][ T3053] bond3: (slave macvlan2): failed to get link speed/duplex [ 350.948473][ T4267] net_ratelimit: 5 callbacks suppressed [ 350.948492][ T4267] bond3: (slave macvlan2): failed to get link speed/duplex [ 351.156967][ T4267] bond3: (slave macvlan2): failed to get link speed/duplex [ 351.913655][ T3053] bond3: (slave macvlan2): failed to get link speed/duplex [ 352.731852][ T4267] bond3: (slave macvlan2): failed to get link speed/duplex [ 352.791666][ T9090] netlink: 'syz.6.1229': attribute type 1 has an invalid length. [ 352.844017][ T9090] 8021q: adding VLAN 0 to HW filter on device bond4 [ 352.873182][ T9094] device veth0_to_bond left promiscuous mode [ 352.888543][ T9094] bridge3: port 1(veth0_to_bond) entered disabled state [ 352.902616][ T9094] bond4: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 352.948459][ T9090] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1229'. [ 353.006533][ T9090] bond4 (unregistering): (slave veth0_to_bond): Releasing active interface [ 353.037252][ T9090] bond4 (unregistering): Released all slaves [ 353.092439][ T154] bond3: (slave macvlan2): failed to get link speed/duplex [ 353.313183][ T4455] bond3: (slave macvlan2): failed to get link speed/duplex [ 353.681748][ T4455] bond3: (slave macvlan2): failed to get link speed/duplex [ 354.735141][ T154] bond3: (slave macvlan2): failed to get link speed/duplex [ 356.317453][ T154] bond3: (slave macvlan2): failed to get link speed/duplex [ 356.388957][ T9138] 9pnet: p9_fd_create_tcp (9138): problem connecting socket to 127.0.0.1 [ 357.143923][ T4267] bond3: (slave macvlan2): failed to get link speed/duplex [ 357.182644][ T9138] 9pnet: p9_fd_create_tcp (9138): problem connecting socket to 127.0.0.1 [ 357.217864][ T9138] 9pnet: p9_fd_create_tcp (9138): problem connecting socket to 127.0.0.1 [ 357.295277][ T26] audit: type=1326 audit(3919065154.432:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9149 comm="syz.5.1247" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbe392f0629 code=0x0 [ 357.311641][ T154] bond3: (slave macvlan2): failed to get link speed/duplex [ 358.714523][ T9157] device ip6gre1 entered promiscuous mode [ 358.760157][ T9160] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 358.769974][ T9160] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 358.780030][ T9160] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 358.826777][ T154] bond3: (slave macvlan2): failed to get link speed/duplex [ 358.835225][ T26] audit: type=1800 audit(3919065155.892:270): pid=9160 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1250" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 358.873358][ T4228] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 358.881019][ T4228] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 358.949290][ T4814] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 358.971941][ T3053] bond3: (slave macvlan2): failed to get link speed/duplex [ 359.092167][ T154] bond3: (slave macvlan2): failed to get link speed/duplex [ 359.623499][ T4814] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 359.771537][ T4407] bond3: (slave macvlan2): failed to get link speed/duplex [ 359.780104][ T4814] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 363.040358][ T4407] bond3: (slave macvlan2): failed to get link speed/duplex [ 364.131921][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 364.164438][ T4407] bond3: (slave macvlan2): failed to get link speed/duplex [ 364.403032][ T3053] bond3: (slave macvlan2): failed to get link speed/duplex [ 365.253616][ T4407] bond3: (slave macvlan2): failed to get link speed/duplex [ 365.988355][ T4407] bond3: (slave macvlan2): failed to get link speed/duplex [ 366.932044][ T4407] bond3: (slave macvlan2): failed to get link speed/duplex [ 367.112452][ T4407] bond3: (slave macvlan2): failed to get link speed/duplex [ 367.371805][ T4455] bond3: (slave macvlan2): failed to get link speed/duplex [ 367.521513][ T4455] bond3: (slave macvlan2): failed to get link speed/duplex [ 367.691681][ T4455] bond3: (slave macvlan2): failed to get link speed/duplex [ 368.517383][ T447] net_ratelimit: 2 callbacks suppressed [ 368.517646][ T447] bond3: (slave macvlan2): failed to get link speed/duplex [ 369.141943][ T4455] bond3: (slave macvlan2): failed to get link speed/duplex [ 369.284807][ T447] bond3: (slave macvlan2): failed to get link speed/duplex [ 369.542991][ T154] bond3: (slave macvlan2): failed to get link speed/duplex [ 369.711361][ T447] bond3: (slave macvlan2): failed to get link speed/duplex [ 370.192211][ T154] bond3: (slave macvlan2): failed to get link speed/duplex [ 370.299890][ T9267] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 370.431375][ T3053] bond3: (slave macvlan2): failed to get link speed/duplex [ 370.460250][ T9275] batman_adv: batadv0: Adding interface: dummy0 [ 370.471857][ T9275] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 370.910985][ T9275] batman_adv: batadv0: Interface activated: dummy0 [ 371.154798][ T9279] batadv0: mtu less than device minimum [ 371.468981][ T9279] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 371.481932][ T9279] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 372.189820][ T9295] netlink: 'syz.6.1285': attribute type 10 has an invalid length. [ 372.641570][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 372.834769][ T9311] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 372.916788][ T9311] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 372.925047][ T9311] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 373.357168][ T9311] bond1: (slave macvlan2): Releasing backup interface [ 373.478975][ T9315] team0: Mode changed to "loadbalance" [ 373.507150][ T9320] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1291'. [ 373.553046][ T3053] net_ratelimit: 28 callbacks suppressed [ 373.553060][ T3053] bond3: (slave macvlan2): failed to get link speed/duplex [ 373.650930][ T9320] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1291'. [ 373.752006][ T3053] bond3: (slave macvlan2): failed to get link speed/duplex [ 373.872019][ T154] bond3: (slave macvlan2): failed to get link speed/duplex [ 374.013671][ T144] bond3: (slave macvlan2): failed to get link speed/duplex [ 374.104776][ T9330] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1295'. [ 374.222062][ T144] bond3: (slave macvlan2): failed to get link speed/duplex [ 374.361758][ T144] bond3: (slave macvlan2): failed to get link speed/duplex [ 374.572915][ T144] bond3: (slave macvlan2): failed to get link speed/duplex [ 374.952356][ T144] bond3: (slave macvlan2): failed to get link speed/duplex [ 375.027893][ T9338] netlink: 'syz.3.1298': attribute type 3 has an invalid length. [ 375.485541][ T3053] bond3: (slave macvlan2): failed to get link speed/duplex [ 375.694669][ T4407] bond3: (slave macvlan2): failed to get link speed/duplex [ 377.121405][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 378.410497][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.416945][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.602416][ T4241] net_ratelimit: 14 callbacks suppressed [ 378.602438][ T4241] bond3: (slave macvlan2): failed to get link speed/duplex [ 379.446319][ T3053] bond3: (slave macvlan2): failed to get link speed/duplex [ 379.591909][ T4241] bond3: (slave macvlan2): failed to get link speed/duplex [ 379.722890][ T4241] bond3: (slave macvlan2): failed to get link speed/duplex [ 379.967943][ T4407] bond3: (slave macvlan2): failed to get link speed/duplex [ 380.310828][ T4241] bond3: (slave macvlan2): failed to get link speed/duplex [ 380.453088][ T4241] bond3: (slave macvlan2): failed to get link speed/duplex [ 381.155486][ T9397] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1314'. [ 381.197839][ T9397] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1314'. [ 381.223364][ T3053] bond3: (slave macvlan2): failed to get link speed/duplex [ 381.352551][ T3053] bond3: (slave macvlan2): failed to get link speed/duplex [ 381.433406][ T9413] overlayfs: failed to clone upperpath [ 381.501921][ T4241] bond3: (slave macvlan2): failed to get link speed/duplex [ 381.617587][ T26] audit: type=1326 audit(3919065178.752:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9419 comm="syz.3.1323" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff6ab00c629 code=0x0 [ 383.172811][ T9440] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1326'. [ 383.484755][ T9441] tmpfs: Bad value for 'uid' [ 383.725344][ T4407] net_ratelimit: 9 callbacks suppressed [ 383.725365][ T4407] bond3: (slave macvlan2): failed to get link speed/duplex [ 383.871952][ T4407] bond3: (slave macvlan2): failed to get link speed/duplex [ 383.988375][ T3053] bond3: (slave macvlan2): failed to get link speed/duplex [ 384.123088][ T3053] bond3: (slave macvlan2): failed to get link speed/duplex [ 384.295154][ T154] bond3: (slave macvlan2): failed to get link speed/duplex [ 384.399546][ T9460] trusted_key: encrypted_key: master key parameter 'šÙ|™{E' is invalid [ 384.491462][ T3053] bond3: (slave macvlan2): failed to get link speed/duplex [ 384.621478][ T3053] bond3: (slave macvlan2): failed to get link speed/duplex [ 384.771392][ T3053] bond3: (slave macvlan2): failed to get link speed/duplex [ 384.960148][ T3053] bond3: (slave macvlan2): failed to get link speed/duplex [ 385.103659][ T154] bond3: (slave macvlan2): failed to get link speed/duplex [ 385.457474][ T9475] 9pnet: p9_fd_create_tcp (9475): problem connecting socket to 127.0.0.1 [ 385.512137][ T9475] 9pnet: p9_fd_create_tcp (9475): problem connecting socket to 127.0.0.1 [ 385.546984][ T9475] 9pnet: p9_fd_create_tcp (9475): problem connecting socket to 127.0.0.1 [ 385.579385][ T9475] 9pnet: p9_fd_create_tcp (9475): problem connecting socket to 127.0.0.1 [ 385.802625][ T9475] 9pnet: p9_fd_create_tcp (9475): problem connecting socket to 127.0.0.1 [ 386.074678][ T9475] 9pnet: p9_fd_create_tcp (9475): problem connecting socket to 127.0.0.1 [ 386.298738][ T9475] 9pnet: p9_fd_create_tcp (9475): problem connecting socket to 127.0.0.1 [ 386.505959][ T9475] 9pnet: p9_fd_create_tcp (9475): problem connecting socket to 127.0.0.1 [ 386.537013][ T9475] 9pnet: p9_fd_create_tcp (9475): problem connecting socket to 127.0.0.1 [ 386.581528][ T9475] 9pnet: p9_fd_create_tcp (9475): problem connecting socket to 127.0.0.1 [ 386.976795][ T9504] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1349'. [ 386.997309][ T9504] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1349'. [ 387.018904][ T9504] device bond0 entered promiscuous mode [ 387.026311][ T9504] device bond_slave_0 entered promiscuous mode [ 387.044214][ T9504] device bond_slave_1 entered promiscuous mode [ 387.062940][ T9504] hsr1: Slave A (team0) is not up; please bring it up to get a fully working HSR network [ 387.073600][ T9504] hsr1: Slave B (bond0) is not up; please bring it up to get a fully working HSR network [ 387.085026][ T9504] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 387.219279][ T9512] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 388.862139][ T3053] net_ratelimit: 55 callbacks suppressed [ 388.862161][ T3053] bond3: (slave macvlan2): failed to get link speed/duplex [ 389.138492][ T3053] bond3: (slave macvlan2): failed to get link speed/duplex [ 389.282046][ T3053] bond3: (slave macvlan2): failed to get link speed/duplex [ 389.391635][ T154] bond3: (slave macvlan2): failed to get link speed/duplex [ 389.465260][ T9550] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1364'. [ 389.921421][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 390.181387][ T4241] bond3: (slave macvlan2): failed to get link speed/duplex [ 390.311355][ T154] bond3: (slave macvlan2): failed to get link speed/duplex [ 390.391524][ T9563] bridge0: port 3(vlan2) entered blocking state [ 390.434554][ T9563] bridge0: port 3(vlan2) entered disabled state [ 390.459629][ T9563] device vlan2 entered promiscuous mode [ 390.851418][ T7746] IPVS: ip_vs_send_async error -101 [ 390.868856][ T9563] bridge0: mtu less than device minimum [ 390.971364][ T4407] bond3: (slave macvlan2): failed to get link speed/duplex [ 391.111464][ T4407] bond3: (slave macvlan2): failed to get link speed/duplex [ 391.432138][ T4407] bond3: (slave macvlan2): failed to get link speed/duplex [ 391.651862][ T9583] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 391.709665][ T9583] bond0: (slave bridge_slave_1): Releasing backup interface [ 391.817725][ T9588] team0: Mode changed to "loadbalance" [ 392.067817][ T9596] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1377'. [ 393.749692][ T9624] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 393.778986][ T9624] device syz_tun left promiscuous mode [ 393.788063][ T9624] bridge0: port 3(syz_tun) entered disabled state [ 393.800767][ T9624] batman_adv: batadv0: Interface deactivated: dummy0 [ 393.828318][ T9624] batman_adv: batadv0: Removing interface: dummy0 [ 393.867659][ T9624] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 393.915759][ T9624] device bridge_slave_0 left promiscuous mode [ 393.959163][ T9624] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.993190][ T9624] device bridge_slave_1 left promiscuous mode [ 393.999455][ T9624] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.032382][ T9624] bond0: (slave bond_slave_0): Releasing backup interface [ 394.054208][ T9624] device bond_slave_0 left promiscuous mode [ 394.320833][ T9624] bond0: (slave bond_slave_1): Releasing backup interface [ 394.536879][ T9624] device bond_slave_1 left promiscuous mode [ 394.685899][ T9624] device team_slave_1 left promiscuous mode [ 394.730936][ T9624] team0: Port device team_slave_1 removed [ 394.743117][ T9624] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 394.751096][ T9624] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 394.769333][ T9624] device geneve0 left promiscuous mode [ 394.783541][ T9624] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.802553][ T9624] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.815865][ T9624] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.853461][ T9624] team0: Port device geneve0 removed [ 394.865629][ T9624] bond2: (slave bridge1): Releasing active interface [ 394.889459][ T9624] bond3: (slave bridge2): Releasing backup interface [ 394.921801][ T9629] team0: Mode changed to "loadbalance" [ 394.928198][ T9627] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1387'. [ 394.940749][ T4230] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 394.955810][ T144] net_ratelimit: 5 callbacks suppressed [ 394.956932][ T144] bond3: (slave macvlan2): failed to get link speed/duplex [ 395.381583][ T144] bond3: (slave macvlan2): failed to get link speed/duplex [ 395.524640][ T144] bond3: (slave macvlan2): failed to get link speed/duplex [ 395.661942][ T144] bond3: (slave macvlan2): failed to get link speed/duplex [ 395.792138][ T144] bond3: (slave macvlan2): failed to get link speed/duplex [ 395.938528][ T4407] bond3: (slave macvlan2): failed to get link speed/duplex [ 396.071586][ T4241] bond3: (slave macvlan2): failed to get link speed/duplex [ 396.232036][ T144] bond3: (slave macvlan2): failed to get link speed/duplex [ 396.244670][ T4230] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 396.413615][ T3053] bond3: (slave macvlan2): failed to get link speed/duplex [ 396.552221][ T3053] bond3: (slave macvlan2): failed to get link speed/duplex [ 396.692019][ T26] audit: type=1326 audit(3919065193.802:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9648 comm="syz.6.1392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24d99bd629 code=0x7fc00000 [ 397.029023][ T9681] bond0: (slave syz_tun): Releasing backup interface [ 397.050217][ T9681] bond0: (slave bridge0): Releasing backup interface [ 397.059306][ T9681] device bridge0 left promiscuous mode [ 397.067075][ T9681] device bridge_slave_0 left promiscuous mode [ 397.074389][ T9681] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.086352][ T9681] device bridge_slave_1 left promiscuous mode [ 397.092724][ T9681] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.103416][ T9681] bond0: (slave bond_slave_0): Releasing backup interface [ 397.125765][ T9681] device bond_slave_0 left promiscuous mode [ 397.142385][ T9681] bond0: (slave bond_slave_1): Releasing backup interface [ 397.369127][ T9681] device bond_slave_1 left promiscuous mode [ 397.381084][ T9681] team0: Port device team_slave_0 removed [ 397.389269][ T9681] team0: Port device team_slave_1 removed [ 397.395912][ T9681] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 397.414406][ T9681] bond1: (slave ip6gretap1): Releasing active interface [ 398.300816][ T9700] overlayfs: failed to clone upperpath [ 398.308983][ T9681] bond2: (slave veth1): Releasing active interface [ 398.360147][ T9685] team0: Mode changed to "loadbalance" [ 398.417038][ T4814] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 398.624521][ T4273] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 398.718340][ T9710] mmap: syz.4.1410 (9710) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 400.433364][ T4241] net_ratelimit: 8 callbacks suppressed [ 400.433382][ T4241] bond3: (slave macvlan2): failed to get link speed/duplex [ 400.691825][ T3053] bond3: (slave macvlan2): failed to get link speed/duplex [ 400.809372][ T4407] bond3: (slave macvlan2): failed to get link speed/duplex [ 402.495520][ T4407] bond3: (slave macvlan2): failed to get link speed/duplex [ 402.586900][ T9742] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1421'. [ 402.632472][ T3053] bond3: (slave macvlan2): failed to get link speed/duplex [ 402.667215][ T9742] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1421'. [ 402.750567][ T9754] device bridge2 entered promiscuous mode [ 402.763082][ T9754] team0: Port device bridge2 added [ 402.778279][ T9754] bridge0: port 1(team0) entered blocking state [ 402.785836][ T9754] bridge0: port 1(team0) entered disabled state [ 402.955187][ T4241] bond3: (slave macvlan2): failed to get link speed/duplex [ 408.613241][ T9828] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1446'. [ 412.706140][ T9767] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.715919][ T9767] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.725989][ T9767] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.735430][ T9767] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.037583][ T9767] netdevsim netdevsim7 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 413.047151][ T9767] netdevsim netdevsim7 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 413.056775][ T9767] netdevsim netdevsim7 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 413.066268][ T9767] netdevsim netdevsim7 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 413.089367][ T9815] IPv6: NLM_F_CREATE should be specified when creating new route [ 413.112030][ T9848] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1453'. [ 413.155565][ T9852] HTB: quantum of class 4000A is big. Consider r2q change. [ 413.184292][ T9857] bond0: (slave bridge0): Releasing backup interface [ 413.199972][ T9857] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.209628][ T9857] device bridge_slave_1 left promiscuous mode [ 413.229248][ T9857] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.248891][ T9857] bond0: (slave bond_slave_0): Releasing backup interface [ 413.269876][ T9857] bond0: (slave bond_slave_1): Releasing backup interface [ 413.296525][ T9857] team0: Port device team_slave_0 removed [ 413.398706][ T9857] team0: Port device team_slave_1 removed [ 413.424396][ T9857] bond1: (slave batadv1): Releasing active interface [ 413.434773][ T9857] bond3: (slave macvlan2): Removing an active aggregator [ 413.821626][ T9857] bond3: (slave macvlan2): Releasing backup interface [ 413.844939][ T9857] device vlan2 left promiscuous mode [ 413.850627][ T9857] device bridge_slave_0 left promiscuous mode [ 413.929404][ T9857] bridge0: port 3(vlan2) entered disabled state [ 416.639082][ T9938] 9p filesystem being mounted at /298/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 416.655836][ T9936] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1478'. [ 418.973199][ T9956] 8021q: VLANs not supported on gre0 [ 419.700486][ T9994] ptrace attach of "./syz-executor exec"[9996] was attempted by "./syz-executor exec"[9994] [ 420.477567][ T9993] xt_l2tp: missing protocol rule (udp|l2tpip) [ 421.838906][T10008] xt_policy: neither incoming nor outgoing policy selected [ 422.312763][T10018] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1504'. [ 422.353781][T10018] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 422.362830][T10018] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 422.371053][T10018] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 422.379818][T10018] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 422.456995][T10024] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1506'. [ 422.547583][T10027] bridge2: port 1(veth7) entered blocking state [ 422.566544][T10027] bridge2: port 1(veth7) entered disabled state [ 422.590383][T10027] device veth7 entered promiscuous mode [ 422.663064][T10024] bridge2: port 2(veth9) entered blocking state [ 422.686624][T10024] bridge2: port 2(veth9) entered disabled state [ 422.707836][T10024] device veth9 entered promiscuous mode [ 422.911051][T10035] device vlan2 entered promiscuous mode [ 424.335993][T10045] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1511'. [ 424.389128][T10045] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1511'. [ 426.401532][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 426.605154][T10071] bridge0: port 1(team0) entered disabled state [ 426.721608][ T7] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 426.794448][T10071] team0: Port device bridge2 removed [ 426.891493][ T4814] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 427.729713][T10088] sctp: [Deprecated]: syz.5.1525 (pid 10088) Use of struct sctp_assoc_value in delayed_ack socket option. [ 427.729713][T10088] Use struct sctp_sack_info instead [ 428.182589][T10107] Invalid option length (1047662) for dns_resolver key [ 428.427117][T10109] xt_socket: unknown flags 0xc [ 429.296729][T10112] syz.3.1532 sent an empty control message without MSG_MORE. [ 429.985738][T10142] xt_policy: output policy not valid in PREROUTING and INPUT [ 431.008485][T10156] overlayfs: failed to clone upperpath [ 431.224710][T10158] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 431.224710][T10158] The task syz.7.1545 (10158) triggered the difference, watch for misbehavior. [ 432.965638][T10175] overlayfs: failed to clone upperpath [ 439.841450][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 439.970022][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.021070][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.695775][T10270] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1576'. [ 441.043862][T10275] overlayfs: failed to clone upperpath [ 441.073033][T10278] netlink: 'syz.7.1580': attribute type 1 has an invalid length. [ 441.241107][T10281] bond2: (slave gretap1): making interface the new active one [ 441.331983][T10281] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 445.005273][T10326] xt_l2tp: missing protocol rule (udp|l2tpip) [ 445.636653][T10337] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000000 [ 448.660019][T10362] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1604'. [ 449.376544][T10372] xt_l2tp: missing protocol rule (udp|l2tpip) [ 449.483832][T10376] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 449.564583][T10376] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 449.582697][T10376] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 451.123838][T10400] device sit0 entered promiscuous mode [ 451.220784][T10400] netlink: 'syz.7.1616': attribute type 1 has an invalid length. [ 451.452655][T10400] netlink: 1 bytes leftover after parsing attributes in process `syz.7.1616'. [ 451.762764][T10414] xt_l2tp: missing protocol rule (udp|l2tpip) [ 452.731854][ T7746] IPVS: ip_vs_send_async error -101 [ 456.222271][T10467] fuse: Bad value for 'fd' [ 456.227878][T10463] overlayfs: failed to clone upperpath [ 461.488273][T10545] netlink: 'syz.6.1656': attribute type 10 has an invalid length. [ 461.555886][T10545] device wlan1 entered promiscuous mode [ 461.562607][T10545] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 463.886566][T10586] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1673'. [ 463.978769][T10586] bridge1: port 1(veth7) entered blocking state [ 464.027136][T10586] bridge1: port 1(veth7) entered disabled state [ 464.042931][T10586] device veth7 entered promiscuous mode [ 470.160776][T10631] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1686'. [ 470.330555][T10631] bridge3: port 1(veth3) entered blocking state [ 470.400619][T10631] bridge3: port 1(veth3) entered disabled state [ 472.150359][T10631] device veth3 entered promiscuous mode [ 474.233303][T10657] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1692'. [ 474.271144][T10657] device team1 entered promiscuous mode [ 474.278185][T10657] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1692'. [ 474.297612][T10657] team2 (uninitialized): Failed to send options change via netlink (err -105) [ 474.328353][T10657] device team2 entered promiscuous mode [ 475.080934][T10673] tipc: Started in network mode [ 475.086555][T10673] tipc: Node identity 84e, cluster identity 4711 [ 475.096880][T10673] tipc: Node number set to 2126 [ 475.464084][ T26] audit: type=1326 audit(3919065272.602:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10680 comm="syz.5.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe392f0629 code=0x7ffc0000 [ 476.270397][ T26] audit: type=1326 audit(3919065273.362:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10680 comm="syz.5.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe392f0629 code=0x7ffc0000 [ 476.398777][ T26] audit: type=1326 audit(3919065273.432:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10680 comm="syz.5.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fbe392f0629 code=0x7ffc0000 [ 476.574957][ T26] audit: type=1326 audit(3919065273.432:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10680 comm="syz.5.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe392f0629 code=0x7ffc0000 [ 477.112168][ T26] audit: type=1326 audit(3919065273.432:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10680 comm="syz.5.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe392f0629 code=0x7ffc0000 [ 477.295229][ T26] audit: type=1326 audit(3919065273.442:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10680 comm="syz.5.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7fbe392f0629 code=0x7ffc0000 [ 477.318764][ T26] audit: type=1326 audit(3919065273.442:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10680 comm="syz.5.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe392f0629 code=0x7ffc0000 [ 477.354621][ T26] audit: type=1326 audit(3919065273.442:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10680 comm="syz.5.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe392f0629 code=0x7ffc0000 [ 477.574219][ T26] audit: type=1326 audit(3919065273.442:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10680 comm="syz.5.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fbe392f0629 code=0x7ffc0000 [ 477.785353][ T26] audit: type=1326 audit(3919065273.442:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10680 comm="syz.5.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe392f0629 code=0x7ffc0000 [ 484.288710][T10771] gfs2: gfs2 mount does not exist [ 485.465270][T10776] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1729'. [ 489.740679][T10818] ipt_CLUSTERIP: Please specify destination IP [ 490.778470][T10830] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 491.712317][T10842] netlink: 'syz.6.1750': attribute type 29 has an invalid length. [ 491.720812][T10842] netlink: 'syz.6.1750': attribute type 29 has an invalid length. [ 491.730798][T10842] netlink: 'syz.6.1750': attribute type 29 has an invalid length. [ 491.742707][T10842] netlink: 'syz.6.1750': attribute type 29 has an invalid length. [ 491.776742][T10842] netlink: 'syz.6.1750': attribute type 29 has an invalid length. [ 491.795074][T10842] netlink: 'syz.6.1750': attribute type 29 has an invalid length. [ 491.838731][T10842] netlink: 'syz.6.1750': attribute type 29 has an invalid length. [ 491.882117][T10842] netlink: 'syz.6.1750': attribute type 29 has an invalid length. [ 491.957239][T10851] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1755'. [ 492.402266][T10851] bridge4: port 1(veth5) entered blocking state [ 492.419099][T10851] bridge4: port 1(veth5) entered disabled state [ 492.476740][T10851] device veth5 entered promiscuous mode [ 493.091275][T10856] bridge4: port 2(veth7) entered blocking state [ 493.131854][T10856] bridge4: port 2(veth7) entered disabled state [ 493.139343][T10856] device veth7 entered promiscuous mode [ 493.414428][ T26] kauditd_printk_skb: 27 callbacks suppressed [ 493.414443][ T26] audit: type=1326 audit(3919065290.542:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10858 comm="syz.3.1757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6ab00c629 code=0x7ffc0000 [ 493.443627][ T26] audit: type=1326 audit(3919065290.542:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10858 comm="syz.3.1757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6ab00c629 code=0x7ffc0000 [ 493.466359][ T26] audit: type=1326 audit(3919065290.542:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10858 comm="syz.3.1757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7ff6ab00c629 code=0x7ffc0000 [ 493.499289][ T26] audit: type=1326 audit(3919065290.542:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10858 comm="syz.3.1757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6ab00c629 code=0x7ffc0000 [ 493.507734][ C0] hrtimer: interrupt took 191205 ns [ 493.524014][ T26] audit: type=1326 audit(3919065290.542:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10858 comm="syz.3.1757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6ab00c629 code=0x7ffc0000 [ 493.868332][ T26] audit: type=1326 audit(3919065290.542:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10858 comm="syz.3.1757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7ff6ab00c629 code=0x7ffc0000 [ 494.242453][ T26] audit: type=1326 audit(3919065290.542:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10858 comm="syz.3.1757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6ab00c629 code=0x7ffc0000 [ 494.361631][ T26] audit: type=1326 audit(3919065290.542:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10858 comm="syz.3.1757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6ab00c629 code=0x7ffc0000 [ 494.461660][ T26] audit: type=1326 audit(3919065290.542:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10858 comm="syz.3.1757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7ff6ab00c629 code=0x7ffc0000 [ 494.937310][T10875] sctp: [Deprecated]: syz.7.1760 (pid 10875) Use of struct sctp_assoc_value in delayed_ack socket option. [ 494.937310][T10875] Use struct sctp_sack_info instead [ 495.649892][T10879] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 495.966250][ T26] audit: type=1326 audit(3919065290.542:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10858 comm="syz.3.1757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6ab00c629 code=0x7ffc0000 [ 496.844950][T10899] 9pnet: Insufficient options for proto=fd [ 497.026466][T10908] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1767'. [ 499.242919][T10924] gfs2: gfs2 mount does not exist [ 501.828304][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 501.838306][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.852462][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 504.769630][T11013] Set syz1 is full, maxelem 2 reached [ 507.615556][T11059] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1808'. [ 507.697399][T11057] device team0 entered promiscuous mode [ 507.703618][T11057] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 507.993599][T11057] device macvlan2 entered promiscuous mode [ 508.031121][T11057] bond0: (slave macvlan2): Enslaving as an active interface with a down link [ 508.167166][T11063] bridge0: port 1(vlan2) entered blocking state [ 508.200008][T11063] bridge0: port 1(vlan2) entered disabled state [ 509.261897][T11064] [ 509.264297][T11064] ====================================================== [ 509.271328][T11064] WARNING: possible circular locking dependency detected [ 509.278383][T11064] syzkaller #0 Not tainted [ 509.282821][T11064] ------------------------------------------------------ [ 509.289855][T11064] syz.5.1809/11064 is trying to acquire lock: [ 509.295932][T11064] ffff88805f952f20 (msk_lock-AF_INET){+.+.}-{0:0}, at: inet_sk_diag_fill+0xf5e/0x1ca0 [ 509.305556][T11064] [ 509.305556][T11064] but task is already holding lock: [ 509.313078][T11064] ffffc90001892688 (&h->lhash2[i].lock){+.+.}-{2:2}, at: mptcp_diag_dump+0x917/0x12b0 [ 509.322702][T11064] [ 509.322702][T11064] which lock already depends on the new lock. [ 509.322702][T11064] [ 509.333142][T11064] [ 509.333142][T11064] the existing dependency chain (in reverse order) is: [ 509.342174][T11064] [ 509.342174][T11064] -> #2 (&h->lhash2[i].lock){+.+.}-{2:2}: [ 509.350102][T11064] _raw_spin_lock+0x2a/0x40 [ 509.355157][T11064] inet_unhash+0xd0/0x540 [ 509.360056][T11064] tcp_set_state+0x35b/0x520 [ 509.365209][T11064] __tcp_close+0x8b/0xfa0 [ 509.370082][T11064] __mptcp_close_ssk+0x1ea/0x460 [ 509.375566][T11064] __mptcp_destroy_sock+0x3b5/0x6f0 [ 509.381314][T11064] mptcp_close+0x5a7/0x9f0 [ 509.386278][T11064] inet_release+0x139/0x180 [ 509.391328][T11064] sock_close+0xd5/0x240 [ 509.396132][T11064] __fput+0x234/0x930 [ 509.400665][T11064] delayed_fput+0x54/0x80 [ 509.405541][T11064] process_one_work+0x85f/0x1010 [ 509.411067][T11064] worker_thread+0xaa6/0x1290 [ 509.416291][T11064] kthread+0x436/0x520 [ 509.420908][T11064] ret_from_fork+0x1f/0x30 [ 509.425910][T11064] [ 509.425910][T11064] -> #1 (k-sk_lock-AF_INET/1){+.+.}-{0:0}: [ 509.433952][T11064] mptcp_close+0x297/0x9f0 [ 509.438915][T11064] inet_release+0x139/0x180 [ 509.443979][T11064] sock_release+0x7b/0x140 [ 509.448959][T11064] mptcp_nl_cmd_flush_addrs+0x990/0xa90 [ 509.455094][T11064] genl_rcv_msg+0xcea/0xf90 [ 509.460144][T11064] netlink_rcv_skb+0x1f5/0x440 [ 509.465447][T11064] genl_rcv+0x24/0x40 [ 509.469971][T11064] netlink_unicast+0x774/0x920 [ 509.475287][T11064] netlink_sendmsg+0x8ba/0xbe0 [ 509.480620][T11064] ____sys_sendmsg+0x5b7/0x8f0 [ 509.485934][T11064] ___sys_sendmsg+0x236/0x2e0 [ 509.491158][T11064] __se_sys_sendmsg+0x1af/0x290 [ 509.496548][T11064] do_syscall_64+0x4c/0xa0 [ 509.501794][T11064] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 509.508248][T11064] [ 509.508248][T11064] -> #0 (msk_lock-AF_INET){+.+.}-{0:0}: [ 509.516019][T11064] __lock_acquire+0x2c42/0x7d10 [ 509.521438][T11064] lock_acquire+0x19e/0x400 [ 509.526489][T11064] mptcp_diag_get_info+0x1f2/0x9e0 [ 509.532147][T11064] inet_sk_diag_fill+0xf5e/0x1ca0 [ 509.537721][T11064] mptcp_diag_dump+0xce6/0x12b0 [ 509.543120][T11064] __inet_diag_dump+0x1f6/0x380 [ 509.548520][T11064] inet_diag_dump_compat+0x17e/0x220 [ 509.554525][T11064] netlink_dump+0x694/0xcf0 [ 509.559577][T11064] __netlink_dump_start+0x523/0x700 [ 509.565325][T11064] inet_diag_rcv_msg_compat+0x207/0x420 [ 509.571417][T11064] sock_diag_rcv_msg+0x164/0x3e0 [ 509.576919][T11064] netlink_rcv_skb+0x1f5/0x440 [ 509.582223][T11064] sock_diag_rcv+0x26/0x40 [ 509.587189][T11064] netlink_unicast+0x774/0x920 [ 509.592496][T11064] netlink_sendmsg+0x8ba/0xbe0 [ 509.597800][T11064] ____sys_sendmsg+0x5b7/0x8f0 [ 509.603107][T11064] ___sys_sendmsg+0x236/0x2e0 [ 509.608331][T11064] __se_sys_sendmsg+0x1af/0x290 [ 509.613762][T11064] do_syscall_64+0x4c/0xa0 [ 509.618724][T11064] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 509.625158][T11064] [ 509.625158][T11064] other info that might help us debug this: [ 509.625158][T11064] [ 509.635418][T11064] Chain exists of: [ 509.635418][T11064] msk_lock-AF_INET --> k-sk_lock-AF_INET/1 --> &h->lhash2[i].lock [ 509.635418][T11064] [ 509.649203][T11064] Possible unsafe locking scenario: [ 509.649203][T11064] [ 509.656704][T11064] CPU0 CPU1 [ 509.662086][T11064] ---- ---- [ 509.667457][T11064] lock(&h->lhash2[i].lock); [ 509.672158][T11064] lock(k-sk_lock-AF_INET/1); [ 509.679571][T11064] lock(&h->lhash2[i].lock); [ 509.686794][T11064] lock(msk_lock-AF_INET); [ 509.691321][T11064] [ 509.691321][T11064] *** DEADLOCK *** [ 509.691321][T11064] [ 509.699476][T11064] 6 locks held by syz.5.1809/11064: [ 509.704695][T11064] #0: ffffffff8d4463e8 (sock_diag_mutex){+.+.}-{3:3}, at: sock_diag_rcv+0x17/0x40 [ 509.714042][T11064] #1: ffffffff8d4462a8 (sock_diag_table_mutex){+.+.}-{3:3}, at: sock_diag_rcv_msg+0x14a/0x3e0 [ 509.724443][T11064] #2: ffff88801fd3b698 (nlk_cb_mutex-SOCK_DIAG){+.+.}-{3:3}, at: __netlink_dump_start+0x11f/0x700 [ 509.735188][T11064] #3: ffffffff8d520288 (inet_diag_table_mutex){+.+.}-{3:3}, at: __inet_diag_dump+0x181/0x380 [ 509.745513][T11064] #4: ffffffff8c31eaa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 509.754885][T11064] #5: ffffc90001892688 (&h->lhash2[i].lock){+.+.}-{2:2}, at: mptcp_diag_dump+0x917/0x12b0 [ 509.764938][T11064] [ 509.764938][T11064] stack backtrace: [ 509.770851][T11064] CPU: 0 PID: 11064 Comm: syz.5.1809 Not tainted syzkaller #0 [ 509.778334][T11064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 509.788408][T11064] Call Trace: [ 509.791722][T11064] [ 509.794672][T11064] dump_stack_lvl+0x188/0x250 [ 509.799374][T11064] ? load_image+0x400/0x400 [ 509.803944][T11064] ? show_regs_print_info+0x20/0x20 [ 509.809174][T11064] ? print_circular_bug+0x12b/0x1a0 [ 509.814391][T11064] check_noncircular+0x296/0x330 [ 509.819485][T11064] ? add_chain_block+0x940/0x940 [ 509.824452][T11064] ? lockdep_lock+0xf1/0x1f0 [ 509.829077][T11064] ? mark_lock+0x94/0x320 [ 509.833436][T11064] ? mark_lock+0x94/0x320 [ 509.837789][T11064] __lock_acquire+0x2c42/0x7d10 [ 509.842671][T11064] ? mark_lock+0x94/0x320 [ 509.847024][T11064] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 509.853032][T11064] ? verify_lock_unused+0x140/0x140 [ 509.858250][T11064] ? lockdep_hardirqs_on_prepare+0x770/0x770 [ 509.864261][T11064] ? __local_bh_enable_ip+0xd7/0x1c0 [ 509.869567][T11064] ? __local_bh_enable_ip+0x136/0x1c0 [ 509.875003][T11064] ? lockdep_hardirqs_on+0x94/0x140 [ 509.880231][T11064] ? __local_bh_enable_ip+0x136/0x1c0 [ 509.885623][T11064] ? _local_bh_enable+0xa0/0xa0 [ 509.890492][T11064] ? nla_put+0x130/0x1e0 [ 509.894756][T11064] lock_acquire+0x19e/0x400 [ 509.899280][T11064] ? inet_sk_diag_fill+0xf5e/0x1ca0 [ 509.904496][T11064] ? memcpy+0x3c/0x60 [ 509.908507][T11064] ? nla_put+0x130/0x1e0 [ 509.912781][T11064] ? read_lock_is_recursive+0x10/0x10 [ 509.918174][T11064] ? sock_diag_put_meminfo+0xc6/0x120 [ 509.923566][T11064] ? sock_diag_save_cookie+0xc0/0xc0 [ 509.928878][T11064] ? rcu_preempt_deferred_qs_irqrestore+0x868/0xc30 [ 509.935501][T11064] ? inet_sk_diag_fill+0xf5e/0x1ca0 [ 509.940725][T11064] mptcp_diag_get_info+0x1f2/0x9e0 [ 509.945868][T11064] ? inet_sk_diag_fill+0xf5e/0x1ca0 [ 509.951102][T11064] inet_sk_diag_fill+0xf5e/0x1ca0 [ 509.956152][T11064] ? inet_diag_msg_attrs_fill+0x930/0x930 [ 509.961898][T11064] ? lockdep_hardirqs_on+0x94/0x140 [ 509.967118][T11064] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 509.972774][T11064] ? inet_diag_bc_sk+0x18b/0x1120 [ 509.977848][T11064] ? mptcp_diag_dump+0x995/0x12b0 [ 509.982894][T11064] mptcp_diag_dump+0xce6/0x12b0 [ 509.987778][T11064] ? mptcp_token_join_cookie_init_state+0x460/0x460 [ 509.994403][T11064] __inet_diag_dump+0x1f6/0x380 [ 509.999274][T11064] inet_diag_dump_compat+0x17e/0x220 [ 510.004578][T11064] ? inet_diag_dump_start_compat+0x20/0x20 [ 510.010411][T11064] ? __alloc_skb+0x473/0x750 [ 510.015019][T11064] netlink_dump+0x694/0xcf0 [ 510.019546][T11064] ? netlink_lookup+0x1d0/0x1d0 [ 510.024415][T11064] ? __inet_diag_dump_start+0x805/0x970 [ 510.029986][T11064] __netlink_dump_start+0x523/0x700 [ 510.035233][T11064] inet_diag_rcv_msg_compat+0x207/0x420 [ 510.040827][T11064] ? inet_diag_unregister+0xb0/0xb0 [ 510.046052][T11064] ? mutex_lock_io_nested+0x60/0x60 [ 510.051280][T11064] ? lockdep_hardirqs_on+0x94/0x140 [ 510.056501][T11064] ? __inet_diag_dump+0x380/0x380 [ 510.061559][T11064] ? inet_diag_dump_start_compat+0x20/0x20 [ 510.067386][T11064] ? inet_diag_dump+0x50/0x50 [ 510.072087][T11064] ? inet_diag_unregister+0xb0/0xb0 [ 510.077317][T11064] sock_diag_rcv_msg+0x164/0x3e0 [ 510.082287][T11064] netlink_rcv_skb+0x1f5/0x440 [ 510.087073][T11064] ? sock_diag_bind+0xa0/0xa0 [ 510.091773][T11064] ? netlink_ack+0xb50/0xb50 [ 510.096382][T11064] ? __lock_acquire+0x7d10/0x7d10 [ 510.101442][T11064] sock_diag_rcv+0x26/0x40 [ 510.105886][T11064] netlink_unicast+0x774/0x920 [ 510.110687][T11064] netlink_sendmsg+0x8ba/0xbe0 [ 510.115482][T11064] ? netlink_getsockopt+0x570/0x570 [ 510.120710][T11064] ? aa_sock_msg_perm+0x94/0x150 [ 510.125670][T11064] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 510.130982][T11064] ? security_socket_sendmsg+0x7c/0xa0 [ 510.136464][T11064] ? netlink_getsockopt+0x570/0x570 [ 510.141689][T11064] ____sys_sendmsg+0x5b7/0x8f0 [ 510.146487][T11064] ? __sys_sendmsg_sock+0x30/0x30 [ 510.151538][T11064] ? import_iovec+0x6f/0xa0 [ 510.156073][T11064] ___sys_sendmsg+0x236/0x2e0 [ 510.160801][T11064] ? __sys_sendmsg+0x2a0/0x2a0 [ 510.165639][T11064] __se_sys_sendmsg+0x1af/0x290 [ 510.170518][T11064] ? __x64_sys_sendmsg+0x80/0x80 [ 510.175478][T11064] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 510.181485][T11064] ? lockdep_hardirqs_on+0x94/0x140 [ 510.186700][T11064] do_syscall_64+0x4c/0xa0 [ 510.191132][T11064] ? clear_bhb_loop+0x30/0x80 [ 510.195834][T11064] ? clear_bhb_loop+0x30/0x80 [ 510.200545][T11064] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 510.206481][T11064] RIP: 0033:0x7fbe392f0629 [ 510.210927][T11064] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 510.230552][T11064] RSP: 002b:00007fbe37529028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 510.238997][T11064] RAX: ffffffffffffffda RBX: 00007fbe3956a090 RCX: 00007fbe392f0629 [ 510.247018][T11064] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 510.255051][T11064] RBP: 00007fbe39386b39 R08: 0000000000000000 R09: 0000000000000000 [ 510.263051][T11064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 510.271047][T11064] R13: 00007fbe3956a128 R14: 00007fbe3956a090 R15: 00007fff36a90998 [ 510.279051][T11064] [ 510.282659][T11064] BUG: sleeping function called from invalid context at net/core/sock.c:3291 [ 510.291438][T11064] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 11064, name: syz.5.1809 [ 510.300588][T11064] INFO: lockdep is turned off. [ 510.305385][T11064] Preemption disabled at: [ 510.305393][T11064] [<0000000000000000>] 0x0 [ 510.314180][T11064] CPU: 0 PID: 11064 Comm: syz.5.1809 Not tainted syzkaller #0 [ 510.321650][T11064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 510.331743][T11064] Call Trace: [ 510.335052][T11064] [ 510.338002][T11064] dump_stack_lvl+0x188/0x250 [ 510.342706][T11064] ? show_regs_print_info+0x20/0x20 [ 510.347925][T11064] ? load_image+0x400/0x400 [ 510.352458][T11064] ___might_sleep+0x493/0x610 [ 510.357166][T11064] ? __might_sleep+0xf0/0xf0 [ 510.361769][T11064] ? nla_put+0x130/0x1e0 [ 510.366038][T11064] ? read_lock_is_recursive+0x10/0x10 [ 510.371443][T11064] ? sock_diag_put_meminfo+0xc6/0x120 [ 510.376843][T11064] ? sock_diag_save_cookie+0xc0/0xc0 [ 510.382150][T11064] ? rcu_preempt_deferred_qs_irqrestore+0x868/0xc30 [ 510.388797][T11064] __lock_sock_fast+0x2f/0xe0 [ 510.393514][T11064] ? inet_sk_diag_fill+0xf5e/0x1ca0 [ 510.398737][T11064] mptcp_diag_get_info+0x1fe/0x9e0 [ 510.403874][T11064] inet_sk_diag_fill+0xf5e/0x1ca0 [ 510.408927][T11064] ? inet_diag_msg_attrs_fill+0x930/0x930 [ 510.414675][T11064] ? lockdep_hardirqs_on+0x94/0x140 [ 510.419904][T11064] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 510.425562][T11064] ? inet_diag_bc_sk+0x18b/0x1120 [ 510.430613][T11064] ? mptcp_diag_dump+0x995/0x12b0 [ 510.435656][T11064] mptcp_diag_dump+0xce6/0x12b0 [ 510.440602][T11064] ? mptcp_token_join_cookie_init_state+0x460/0x460 [ 510.447225][T11064] __inet_diag_dump+0x1f6/0x380 [ 510.452109][T11064] inet_diag_dump_compat+0x17e/0x220 [ 510.457424][T11064] ? inet_diag_dump_start_compat+0x20/0x20 [ 510.463268][T11064] ? __alloc_skb+0x473/0x750 [ 510.467886][T11064] netlink_dump+0x694/0xcf0 [ 510.472420][T11064] ? netlink_lookup+0x1d0/0x1d0 [ 510.477333][T11064] ? __inet_diag_dump_start+0x805/0x970 [ 510.482910][T11064] __netlink_dump_start+0x523/0x700 [ 510.488161][T11064] inet_diag_rcv_msg_compat+0x207/0x420 [ 510.493735][T11064] ? inet_diag_unregister+0xb0/0xb0 [ 510.498962][T11064] ? mutex_lock_io_nested+0x60/0x60 [ 510.504188][T11064] ? lockdep_hardirqs_on+0x94/0x140 [ 510.509414][T11064] ? __inet_diag_dump+0x380/0x380 [ 510.514462][T11064] ? inet_diag_dump_start_compat+0x20/0x20 [ 510.520302][T11064] ? inet_diag_dump+0x50/0x50 [ 510.525153][T11064] ? inet_diag_unregister+0xb0/0xb0 [ 510.530400][T11064] sock_diag_rcv_msg+0x164/0x3e0 [ 510.535370][T11064] netlink_rcv_skb+0x1f5/0x440 [ 510.540189][T11064] ? sock_diag_bind+0xa0/0xa0 [ 510.544904][T11064] ? netlink_ack+0xb50/0xb50 [ 510.549530][T11064] ? __lock_acquire+0x7d10/0x7d10 [ 510.554586][T11064] sock_diag_rcv+0x26/0x40 [ 510.559051][T11064] netlink_unicast+0x774/0x920 [ 510.563847][T11064] netlink_sendmsg+0x8ba/0xbe0 [ 510.568644][T11064] ? netlink_getsockopt+0x570/0x570 [ 510.573866][T11064] ? aa_sock_msg_perm+0x94/0x150 [ 510.578856][T11064] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 510.584192][T11064] ? security_socket_sendmsg+0x7c/0xa0 [ 510.589679][T11064] ? netlink_getsockopt+0x570/0x570 [ 510.594903][T11064] ____sys_sendmsg+0x5b7/0x8f0 [ 510.599702][T11064] ? __sys_sendmsg_sock+0x30/0x30 [ 510.604773][T11064] ? import_iovec+0x6f/0xa0 [ 510.609305][T11064] ___sys_sendmsg+0x236/0x2e0 [ 510.614021][T11064] ? __sys_sendmsg+0x2a0/0x2a0 [ 510.618820][T11064] __se_sys_sendmsg+0x1af/0x290 [ 510.623703][T11064] ? __x64_sys_sendmsg+0x80/0x80 [ 510.628662][T11064] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 510.634678][T11064] ? lockdep_hardirqs_on+0x94/0x140 [ 510.639928][T11064] do_syscall_64+0x4c/0xa0 [ 510.644372][T11064] ? clear_bhb_loop+0x30/0x80 [ 510.649071][T11064] ? clear_bhb_loop+0x30/0x80 [ 510.653779][T11064] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 510.659710][T11064] RIP: 0033:0x7fbe392f0629 [ 510.664151][T11064] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 510.683787][T11064] RSP: 002b:00007fbe37529028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 510.692240][T11064] RAX: ffffffffffffffda RBX: 00007fbe3956a090 RCX: 00007fbe392f0629 [ 510.700234][T11064] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 510.708229][T11064] RBP: 00007fbe39386b39 R08: 0000000000000000 R09: 0000000000000000 [ 510.716230][T11064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 510.724224][T11064] R13: 00007fbe3956a128 R14: 00007fbe3956a090 R15: 00007fff36a90998 [ 510.732354][T11064] [ 515.166872][ T7746] IPVS: ip_vs_send_async error -101