last executing test programs: 14m44.950673299s ago: executing program 32 (id=79): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x2000b, 0x1000005, 0x401d031, 0xffffffffffffffff, 0x0) unshare(0x20000) r0 = syz_open_procfs$namespace(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt\x00', 0x1ff) mount(&(0x7f0000000640)=@filename='mtd0\x00', &(0x7f0000000680)='./mnt\x00', &(0x7f00000006c0)='jffs2\x00', 0x0, &(0x7f0000000700)='compr=none\x00') setns(r0, 0x20000) 13m28.000396647s ago: executing program 33 (id=647): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2c, r0, 0x1, 0x4, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xcb}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)={0x50, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={{{}, {}, @device_b, @device_a, @from_mac=@broadcast, {0x0, 0xfb}}, @ext_ch_sw={0x4, 0x4, {{0x0, 0x0, 0x2}, @val={0x76, 0x6, {0x61, 0x3, 0xd, 0x5}}}}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}]}, 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 12m46.210683697s ago: executing program 34 (id=984): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000540)={0xa, 0x4e24, 0xfffffffc, @empty, 0x4}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c100000000000244e0000", 0x58}], 0x1) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x7, 0x9) 12m5.569606689s ago: executing program 35 (id=1255): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000000)="89", 0x1) mremap(&(0x7f000004f000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f000016c000/0x2000)=nil) syz_clone3(&(0x7f0000000600)={0x100000000, 0x0, 0x0, 0x0, {0xe}, 0x0, 0x0, 0x0, 0x0}, 0x58) setitimer(0x0, &(0x7f00000002c0)={{0x77359400}, {0x77359400}}, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x8000, 0x0, 0x0, 0x2) 10m21.202550359s ago: executing program 0 (id=2135): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0x50}, 0x40002002) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a800000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r3}, 0xc) 10m20.916682538s ago: executing program 0 (id=2137): r0 = openat$rtc(0xffffff9c, &(0x7f0000000200), 0xa200, 0x0) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000700)=""/191, 0x4}], 0x3) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mount$bind(0x0, 0x0, 0x0, 0x1000000, 0x0) 10m19.45388794s ago: executing program 0 (id=2145): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x10e) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f0000000e80), 0x2000, &(0x7f0000002e80)={&(0x7f0000002f40)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x12510421, 0x3, 0xc, 0x1, 0x56, 0x0, 0x0, 0x2, 0x9cea}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr(&(0x7f0000002fc0)='./file0\x00', &(0x7f0000003000)=@known='security.apparmor\x00', 0x0, 0x0, 0x1) syz_fuse_handle_req(r0, &(0x7f0000003040)="6074800be6a663e55421e35b2d43c491fcb92e5276791368f7ac2306753e5c7f43fa1b328eeff3ade5036fa9a59965b7df04f04f394c4cdfa8154858a9b5c5e05dcbb6c6da75b7a0cb7d0ffa4f38aad2817157bebff12aadd611f82c34b5a46a36986ae839bacb8fbd6d5b683cffb6a6deac9a40e90d498ce1c6a8d40923128d548f72af5df610254e7c7694126b8b7494136c9be79639605b6ced224b4a90169ac56ee14947ab15a77c56af89e73b0cf83a771af79d268d57db9c16b4752b205844fcf27e9a584dbc110728c484f0509c190bd94befea72c78d2c1539a2314f95183804234d66727c337deb23f16352880071a4a7234250c6cdd977668ecd4b18ec46f19f49ab9be757a3db22f6390d34d4e6b3535689feb7d63d08a8927aa90e627aae135c154df05403fc33fcb6a409a5ec3d729d1f647da6043660e0260a359cd65cb016ddaf275ba215b10f7a144a94b7dd57a8a754a119683e716c9fe7219d2be8d006e7e309b81140664240dd372168cc05932f05c8aaa9f8772456062f01270c099da18a451f7618e2ea324db80e2d47dcacfd030ee12e88f48e5aae2e3297f748d5832e74a777cbc4cf26a8733963ddef4a2f62696345c81b8b79dabf2d010ee6318ee3928d6a9c8f6b28db6a4c590a3a5dc0bc10770a879d05976dc75af7448e9f9506c72d79b7bd1bc829472706686382a12c8b6fae13094269588782d12694da6565f0bbbb4f0f707307f36285ee491f0c8a2942107651bab4639a6000fec0590896120f97813a3a8f0c8b5beb5e5e113ebeeb4404567230ce492c1398ed1bf07353c2f49e6703d0c41a59588bd6e1acc133291947b9088c6ada89caa09d83bb8dfc768574968235fe9ba04fefa161e36fde8f2cbf877ec3c284d85253f6bcf941150937544e92dcdc360a20516158557d4aa08e781fcda8cb90186ed407bd934cc8801edb7dc19e60dc1f86f056e9728359406dd4ac81683a5d41de219d97bbd9edcfc5cc81c8d23157865a6eeb1c30bd6fa93b6174c0a2f97d6bddfbb6014a820f39870c1df328792b8133f6dedac7fff173b54fc5024e3163eeb6094fb00e9848a9e11e37fa454f6192fe9cc9c3bb68bc418cd170c43a90cb4cf0540489a26cc89b316bd5fa410b517ca63a4ceeaacbd0243f25d0236b8a2424c45f0eabc584bbf268302747d68257499db740115d413a209c6b05f6d01cdd069f4a2b208d48a98bccf569af42999eae6f7ef3f40dba45d3b38e1c28fddf0cfe1bfe02fe77315f329329f3843467cb29c490c694dc5ebebb0e6eb42fb9e611d2e07c01773605a4a542a32a2f47bd1524cf4c2bb064e8eee2e95c4dea608581794b6ec05cd0558d1251ad3aeec246717ea9ab2730c7c1a29879bd44a61fd86058ae677789bdba038f2054445ef2efb18b9924d863fe4e91f0670f00ac4dd7a75e182b3eb45df57499ea81149529f6a59c5293f89ae07001acefaa3ac2731f0f8f940d83fa529efb49ab2960dbed16fb18a5fa8e624a5e7d40a6b909da91aed2ac73ebc9eb83b093fd9ef6e2ecec94d24c2a2dc2914df20f2aa07b396ab02e0ad91ac44b1a76c331f5dceb7b7569d8103f8c8e944a2c1772ec9b42462463a534ffaf6d3e4dfca3cc556a34c857b7096a67e9795c133d351ca436e99b23537e93dec2b2abb6082f20b25a767185f4d33f6a5eb65eae396a2ebeecfbacb6992246e0c56dd0e73d615e73567fde83e8fc26d168edd0a4cbafe5b9d1d92bfdb0461ec4d1a0672072ddcadaecc750208355e281aa0fc0cd06085a91083f21ec2a8307205fa0e26bafc7ceafcbe5d19e0c29f62d4e6e14b037b735e26d97037dcf863784beef2bb374ce40c67971730cf4cba66afd802ab3b8c24836ab1fe903d46b82d8145cfcd9e45997044cc4ac3154bd3006a252c590eb7523494d64f8301e4f8388557aded12a969bf149d8767eb912c10976e48806823304bec64db0b50635240093911736b6f5b3a358713d882fb522da3afc5ce818ccc80b7a3a5834e2dc2d2fc6f8252198f82885d45e3171a6abc7319602c309f74250bc1e5f6c42a1d1dadfb589d6ebf6e2f5fab456abee5038d0b55eb961dda18334110173a8db62f4fa41cf6aeb47d62ae179e2c45d60657c70e3549734437e3098d948a1f709079427c3fdab87f6d2abad9d35326f69aa40a8d76c8b5147539ea9b80c18cf32248ea2429c0fcbe506c4c98790a885c5c34104e130e520f2741666b984be1892e5552454d1750ae76dbb52688bef7edcf286f61bfdecbffb277549fe144c71f908fc1b4831e0062386600e0ecb61fa2227c4ecd51b4e14bf412b438b9c839bea9ec8a15616fadedba57e7cb0e727289ecc014dc9fb21f3619533355a5c614cce36016196c503e7df99acca67025d2744c8b428575c89897314a822c8010ec8e2a0b085e2f6e11d3acd29382da799d5d51ab110666d49d3030268cf903dfb7a0f94843780239d065e806ed89f46cacb5fe4cd5be3bb2c7e287df2ce18637ee8b0def95a3395004e3d739fe3f34fba26ecdd47ff86795b59c06101699a99e1e8098bf0206d453c738fa8b2110037ea9bb72e4a600b2f6cb49695ec7e9b61bba6360ce105d681970592cf3ff05381d5df9be8c7d6ce64914211f0c84d5aa8addca85ffaa656bcdf576fc2f52514e3e5ea7d23ff296ab746913ddabc437ca5cedec9a85f48aac54601888d82f2bdfc0f908fb544329fd740ae969dedb427cfd12bfd094eda6126f7fad7ba2c38811f0893a08c670804e88b94d355bcf517cbfb8e45934b3c7ed13b5ab309b0996ba1778c82f462b9fbc67ee8a06dd1e7ff7a584fdb0a3eb1a4f7857f8af8b60c27027a83a9c4b65f727c7f861e2a497a53da9efead3c11fc22dce14e1621a678a37794f08e5ca62bf036590a4680c45b0152bbfcc8bdb727b40f504750a356fc1ef044d038415ca57f26a6191512dcc31373dfc6feab298c2f761bb48ac177656160be1c0bb37dc45a6eb6db84c3681939f479dee630108ad479eb8815bd9e65838c171686e907d212e10d26ab0d6cae312db3180e0cc642c67a822c9702a344d3242b94a20aad40788fe539769ff33b777b14a175e5d9980414e2281c52f05540174eae1d83006ad74ee5f2214d032b4cce90029b9ca8af3ae4eeae1b3463cbc078c51db509802158cce5fa9cdf4c3b35ee3c622b4b96b9d0f6a5598e1eea82cf27a3f61bdd5808acc5eae715be2e1068884e49baab264c2575645f1fcaf5b07cb001e3c661656959ab665462be436f79b14076903fe18921d25393d770b8f2039b2791167ace1d95fee3534ab872e639196a5364bd79ddc91d2c049a83eb7c0add3e3fabcb070d475bf544327d908fc8df486ffb040db05a5bbcf34f23a65b69f31b65bb2e2f960430d3abe9172738fe647521a2760975174f549cce5d1f6ce51cc96a47596cd171322e18c183813fa58fca62a1841083c210957709b68f46bd4c5aaf893dbba8fc9556f419e49f4afeedf3f70d182a5626b7a655b41773180f32b80e259bc6136680752c88d877df708e578fc515522ae69fce6e871ed20a38457fcc176f7e359011a43bf67cd31251a152a1ff6ab7ba2ea4c0c2a142f6b02f711befd521b32a35b00a38b4dbc00c7c773e4677129ee43a94061a5d1258ae10f13ec26bf3f9dd509fbbf401a957b76c5bea039c552b72151a7e6d4c00c599e9b39c13171b1ceb5949a34b2fe3fd3e56a9dbeb7cbdc82ae928a90b65d9f533075dd0d7cba12ffee7b3650373137fa8ae25f0e4237355e4a65577234f3f1345294234ae62ff1c899bbe6869afab2132dfc5e3c71670e59c488de7b8da39e9e29f64abd5151e486bf178ec193b72cfc93b362b41e099c78f22e81e6cb1b74922d715037ae015ea3c3834dd516221c5a446c34ac71aebdd8d8de9ad0d2e2c1d4a039c23f99a7256cbb9ccd8450d7a5a49854ce6f4b1f108824a7339c08ee6d21329a04f7024ffd48f081496e210a56e437ec073b78c7ed0ed0e235f256c18a680854195f450f733f6b0208fa2f9aa4d8d9d4c53690d02acc9d3f5f84a12eb2b27de105106e1f45ed8380001932b7b112d2137fc57be3d684260bea8c216249479ee578ca14de22622d54f7c0ccaa9486fe447d36116ad2b51d13a473c732c068244d6b6065ef191eae289a8c1dcc1264c5e9395996bdbdce6a6c8c303ed9a272c0f1e058e921e7d2cf83dd21a356ac9b1c2e8d4a6da22cfa3c6ae6c3b3ce3ce38bd569be66f0f30ccbff5930783d8f048874c36a6f1ea8b028c8cd1acaf828dabc10f2d912087bd4fc0bb016f90b06cc2d9cefec47daaf618dc4e44e2fb9dc11796dffc70316c990418a16752a42d31d0001d975d884e55fb46ae694bfa83be7d7537ce98525391376e844fe8fee3f7170fdcd05b09a2211a957f8e16c1ccb485d21c186bd88c383dda7731efc6e6fd7dc931b1517199af8d7cf8c3a3d5222c419e3c27d27872689df26bf65c9dd63110f12c9d03b4ebc661b7dc69da1e22575860220a3f54108a7bf08d2f48e5cbe473de2fda525c8a64a60561f6f5c1a15a0ffffba7adb488c6362f4914f2e6ead87dd5ea0a824b5b486755a24838f32b9dd00e92bfa0480a21b6562cb2e04fbb8a7c5dad3bbe5ac5f4d6213719e347961d198bbcfb99a50d7327c0f4f68058d0b46d71a4d64402062405dda774dca879920b2785a313e3c616e791c8687f54cb66fc4dc121dc0af9fcbbed360d180aee5008e604977873738b8d2f2400cc6cc0270541c0fee88430e01e201b917e151b2efbb332d66ace606edbe66ec49b911c1639d2b911c95ce00e82b01438bfd698fa271d18a1d6504529b7a113dbd3494365aa0112f4b350495f76c1529063744457b6518721eefbe8e27781467f63846cb0f4a5b48c184201d95d70e9d7423311f3c3833035bb47ba629ca707f42271d3cf7c47fc5266eb1dca27f5d70b2a177b64c6d5628c5764717d1db6d2ae13e13b9a8217e2f3d64d735bf2f19d68250d553ece5214b499b0ebb0d75fcaf8f6a46de37bac2155677582f419ef84f7e41a80fdc48c773269627f331c42afc2aa46712b55f3fc2c7e36b26add96fe03a56122042453e9a890ec3bc6bbb1813d90f0fa37d8551cab8862fe75171a01d1af4efa6be9146e521f704180a0da228b222e81de07c9b1f65415c4794a2a2a50c0385233ac19cf2a4236f5e526231867dded0869fb44b5762925a6416f660b5ed55608c1dbe1cfaa4706e181cdfb103a8e466c5c679322e22b911d0278f6105c402f39f28311bd1f64a47b3eb4d5a2d99e28308ebcf43581a654f647df956aabca459d146eb96ececad853babd92eb34a901488b56f3726641432ad334fa20accd363894fba5212247e6d8ef4c7f20e54ef1f1c81dfe2c6610231491b53856c0ba97ff7de37754ce0af03cb823630477decef2fdd2ae96f97dc5aae788be8be7b5d5e44239e7b39c75885869c00948de5261ec9e62d18ea80256e111e7f2ca6484270d13c29451b65096d526360c118129800367dd8debb2542594465e484eff349cc18c058d6dc5d91b2cac0b1293aaa58c9f4f816d3aac353c32b1d25d313072cc3e114fffdc2dea9cb133719467d8cb957e0d029ce0b82e77e7ffa2e98c8f4fa975680f996a8db08bfff8e9e7bbabed5d4572c43d22877b45b3fdefc90d61b0362258acd5950bd1ec7eaee8f2703ef50eab471580ad221e1437ca7b10234fa9ee59ffdddd1461612926a1557b79833039e72d39af31396448c03560355762195fe4b44c4d33e8aeca85b039bd2d79318d677bc4dfc9bbba27bb63adfb6e2f8e5933b9d2353bee5def42c89d5a6d9fc9f17066591cda89eae9e44a5b5e716eeba79fbbf176852758ed06b970b2ebc108f20a89c0e3eab82bd38aef15ba04f59ba97dc7f354bf5515d459b0890e0af945a5c7168001b9ecfc8c8509420916380bc790c3a26b16cb997002ee62539bc2216c0316676cab658fe812c94e72651627c501672271ef002870f887d9c574afbdd0887c32c190bea374044a2314377ce44090f18c946864be712bda210731eb4fb8a01e9c614bbe30772dee15f4504595fecf8729e52bf428ff9505c58c4ab296164ac092ffbf40f27e2c9f9865d7bab3692b6b3ef7ce96dedf87750b020ef58b4aeea1a881ceda3da5126545a468f7becea1d53533ad94930ee278f699301830d7e58aac459b7c3288c377c2be063ad501856b0b7b3e2270c2d830ca7c44c060dd70bdb91edd964b6c7fbcf1c772a559076fed0014b2f5a8678cae521a31e2c48ea75076894e3d1abfbbe16f14f6c0ce29e701fd339e2e7554f646128ae86999f766f294311318227a81eae02db71fe92f80c6aab822fcfb650e49d55ff38f972a2cdef50d244326bdb756cf28c4a84b7f5d8d0aa0876adacf20105db6bedc08838f125fc7409ea1f023fd375237a3b78dc9ef1e788e355be1ab9f827ccc1bdb140bd2230a9d5a6c0fff37ee521b9a5c0b7e5a5afc8d70cbf27715865411c517f8dcf0a8607f49db91dd763f1964be2caea29a763d8ca0c7bb53fb57b5e25d056916b756e255cca8cbd85d891ae9d9068ad6c267c1a7fca6582918f23c423773bc2fbf1a3db5a36b30f8386621de5d204591bc0aed068b60d11db8791f40a432c08334cdcacf6d1c63cb39a9c149c03cf7477a85b178ab2d5d87593cdcb4bfb13f90411dd8bd8917599e51a484f9d41139b257691a586c062933f29dcbefc012f4b940a995704ecf86542404da548f3915f21f33b56239177f6e4064d921094e1295de8fc30900000000000000eec9a49947327d7693da0ea4de8551d2145910baa3305bc9dd1e1e6eabf911e893f3e0dc7b2e44120ac6ca6497d8fc6301d96be488b01ceabb30e4d03c9b29bed0f506a8ea698411c53dbb066bff7e7104b377cccc3efcc2fcbd17f5a969efa8fb785cd5f1409c81d77ecc3dd09ee9d3cc7fef504a69c22701997bd2f8c27dcaf7f5a19e276db7e8d39383f3a6033b74176aa70fe6393dd9c743317336635ce216ff72d495b8687b5e637bffdcc2d3d9d97a982281f4c0212eaa34f0d54a17431689c037aa9cbd5cfb2d4bf08a69cde84459b181f66b7547b0a4d885e525ba107148c882e2ba555c8a19b55b34a73f36bd191ee16668a981f27df9d360dd555a99f033361493112ef201d7eda6ebee01dc87c10a8cdc63918eb554908fbfb309f2fe8890814ee97ec5d9832db8805805782a1e0dba713c6856308381bb6601c00b4c58c8729251a35595ff05e09951e89bd97996bb4a30c5af662ede04a252b514bb4040bceab78af8579fc2942ce5bcc4d68c68a8144a3adb438ecb74bff0056d298a6eaaa4654f97cd8bf3e87e168e900fee7e8ed0cd3632af256169e51c9f33431849a95d77c9798ffe846e8e193f401c69898ceb9bbd47062f545c65dcbdb3df046ee4e9b6671ed5035e09c886597a8a46eff7c4d972ff675e4428f08bac45659e423d00587cd31175f63e5f44fbb4a4084cb6af8425c9a77d8195de6888f7f911665cec1a222d20da812c9cba09194b2fc377326ccfb70a5b763f4a6fe7d6eec17362f5f6bcfd95de88832c8ba2ca04f241d02ae35acc945fd752bc5aad95b140102dee269fa26eaff2c2204022ca5a5feea60155dd274cf5d869fa0d40b13f72c0c839c1c39fbd0b0d645675670f2576e47118b395a916c64abca51478afa5b30796ec275501a6a826a47122f2ded90d121fc78f21807c9ec78e113de68496b7d9e713e19374edb69060e8562153aa10e587a61f73879084a8ed5e3614b79cf25ac9296d723c1344fff24639a93ca3304fd8a710b80199a7fb2086927e4f1c296e5daeadad06825a04476365a317ed74847c7bda20c00484ab599a415bfa26799d041e2ae28844a65a4469b842038f1b935b1c0d49cc6111afcb44e0d193da83d95f358e68fc03fae5e00d33b440876fb7dfd83ca760d61ac4ae3e3cfdea9286d4fb26876d7382ef947f91f318c6b393a678d66f191c9c4110cf177ada12fd907382b83047defe3a9bc357fceac8724afe9c2cca4f79f44e9acd1860676597b5f7325b96786e2c437ecb15ab8ca3cdb26d79d2557e858528638ca5322e3e37a180a4706ae5b780827f61e0f9d8bffe2d732418d891faa2cbbb33b29e6bdc93ebcccf3f3017cb265318d4d31afbeb43049a6f136448b5cbdeb9bfe34ca7d3c612dbf43df6a8868c8d8f7a3615238d3e9ab83e2be4df5d2be3c4ea640399e62f361ee1f34553afbf88f33972da827864af0589a0dc71e9b79802c021266b2107fe007c12842b1ed0bf1a77529e5a5bd9ca7a9e39a78dcf5b4723d66bb9791adecaadb8375410b8d5cc5823f339f0a1f3de3d84804b5014f1048473e719ea12d81aef9292f99c39f71d6ead8921942641c008a5ef87e752397579e6333ed2d889e6acf393e8c8e4577cd2c659ba2a6c58d8862215b5630dce04953b26c2403ee3dde05c9f71f8ec3577ea83cdc7fc889e264882fa4d9131ad58eb796f20ab1832bef5ace5db774f05b02f11a81aad9153785de483d4da2e917010bee84cc9a09e4b9a87966965ef5df1832ae1d52b80e1d931a2835f772524541ba1b71d9aba451782cb20be59cd13bc44ac41855643f614bec40167cce4336776517087921e6abe792ef61219852db78b49facb620f5157d6a78dca85c5c5ccdfa10ad0ed77844727294be6ae102a608e863b0ed0668e634729925714143d8126f3654f34171a91e35cae62d495ba4c48ed2b291c792d6b750c9fdbc5fd4ba7e8b28d5ab46fa91a1f3d345784eb4c1f558619e77f5a4840c584303a499eff1c2b100356a5bdf32dd4ada98329e6fc6383272e3e89f4d18a56b7cbb88e942d464702fea7d9f91912a901b2422c906c481c427659e91e62305b227635556b9d9f7d4771108044464aaab87bfc430671103b256975f097530cc46ddd14eeea17c17e285c10146322617ea20d6816f7a7a4b6fc9b90dd98e7b83c9aa3b1b8fc98cef0f74aad62ea2fc3e4fdf51832f3384b3b4a6b6b72d523052d8d933fc8e464e6766f95a19e29212d4b149e36501252554616b72e5d2c113c86530d2a43daf4ef4af38ad4f5009cac453a6ee507d39d30ba98cde7c798c7201a83391f4c8c2dbd0c6914974b24782ee78790cafa96bc661f3b51e8b68d3a24b859e5c127e0326ff5c14093015e24f5f8fdd940f31f6b583f1e4af4f7999b30b154f8f9971aea81d66b401850610ec11ce9b067f285b19cf3d12393ce1bb922b898899a946605e52f4f81493172050f24ee0b3e1aace86f66d7029c7cd91dcd6dc06dde09110a074b61e7a9b4d475336863dfd501246202454bef5898b3896ae378f09f9ac34f921d251c46a80f57dd6421751b00beacc8e09911f73eb5628da767d1cf46c46348092496350b1021be8dc4f6f82f26d6e7115845c1227f0252cfcf73155b75676ef6fe3451e8a2439408a71167f75796399b8c78e018ec155b7146a23bca3a3b13822a1f60063257404f119652a57a44b907063476a69d7b4ed675521690bf629c07290b3f5f3bd5624d043f94d25140c1f631d011f990c26b1f8b55ee5430a0914ba56d7e0b122a7f8c60b7cd8e5267336f01945d927ecc84cdbcc576643d2d9a4f812cd7027735d95fecf00e85e1865a6c493600a37ab3ca94542954dd19c91380692da8596f06f17a164396c505748e2e7a9f719d865ecbea331c6e6a2f6aa90443f3c952b2c5326b96ba1c2f060c6bd5947e06650b40b2ffda56ca869e5d2a1052a9923c85000d45226315d5b8d49f6d729a87cc5f1de62c6ad9e5e347e8540f6d685a2444e180f5dc388a0c02191d6a918e12e9cf5a802eac59ca6390258730e639daca48affa58665fd42e0286775eed9592352a3785cde2515f370960bb289ca8d3a0c7cac66274aba329e215a9b2be57696b71775cb55b2f836ec7408bb48006c512963d07a68d705cc2f1615a2a198d3517d3324502c67f035abc0f739d8398e0820aacb40b5e86bf0c21a34cd5a069e2653c9cee3245ae17eeb7517c1caddc385fc870acc86d951c7348710832ca5d2542f5a0b8467310dbb1b0874af96f92f0d3ab477ab49b9b0ef41ccb5e7a27d6c1e40cd47ecbf5304e8334ec3cbb56ddb0796a1a64a10b1971776f0ec30113ee266b59526dcdb3016d26e0c02001551c4f5b4293854a0b40da0945492da0ffc6010dadafc5f9e57bd24d5c95374387d8362240adbfa1a4c75a891059062042de77902dd557612a35a699924a909bf522a1a357e8c44ac3da80850ef071146d5dca52a21a9996d68a061891500ba7e60f400baf058004c7c226da0500dc172d611fb227f1ae4e49c93b97fd05e3854a7994676e1481579918257d9e76167ad1fa3e7dfd5982295e75177f6fbdab76e1dfc91d3b9fe9f272d981692e7947adecbfd5c821348f371d5cea4d13dabdaea04869376c742d18fd419f2d18e3f74b8ecd256ea02f15377a11004c21b61adfa6fed9391ae5336abb03b62f098f5985f257812a2c35aeb9ca5ff68a40838e2d2fbc4896724bcd84114ac6739b6fef9aa1c7b9d5ba0e7eb96679aa0974ee4d7093c818b3d3e01b5bb301abd95ac86acbc18d3e4162f3ac99f86f4df9e63b6a58c9d41afc903a1a7ac53f0b5f6e31b802367cef00c03d142f23a8bec76d62ffdf7cc8810e34230f76ce60970932aebb9d35f9f90f662f332c5e9226b7008c31c250082c6762214a14ae1ef73d1d7464d11adcafbe9ff4e163a8f8502ede5a9fb322a59a0647c4bbf7d5019ef994187069cd4a4a3a9598544521f64848a9b92dc8b4b1d16c0528db1da87a1edcae6e05d63bd6603c6ab177f398019b5c3c8c807ae46e4f301a553b73be391e21f06d8cba49886416d508187918d2f16d8085ab07612ab6499bd9fd1c4ee6d33ffc49b5588a54fe3d362a914094ecfc76fae5685f2d919a651c35c31954756dc6d5d369754755ac248851ab108c0284e0c69683c1a97206a85cc694b7b369e7bd07aa3c7d47f03f744ffe08ce7c3366ec1f8e320d1f85d832934688206ffeb203119a03fea67ed52fbdf91df4f2a1aef49e69f242766c1b3abd25d0d8f3b91b361107ac74a0c898593cba83754a55b78988ad1059f4bc8007a6643ea53e297e5e1e506e0d11ecf73d21e15a9182db19304aa0c057790e56f940159d1b0748d14e4986d15b2ad364f85db37724e6e3111ce291f35050cf3dcf50ec09100cbd7f3ad25306527423eb4d899d7f99e8d5b88ddf9be36d9a12a69fb5bffb8b539a3c20e7c83398c637f3d77d2a101b783833e71ab9f856a1f48c6ab164438f823419145af131f62c53ff3b95316c3d2a55c18e7df0b30f74208ec60abcbc671342328e70201c76192a9d33de0a7f5e17aaf4284096d86c3a8f86b1bf1c82191842a6015b0f29d3d4d85b92401200ee99190827f25e0b96c7be32a910d955d0f69d7b08bc0935b4cfb4ae7d2d6abfc94741b202717b5f7648bbc52993573449b455b425bb40b047d6e4bd4044ba93614efcf1ecc11e30ebd593fb", 0x2000, &(0x7f0000005040)={&(0x7f0000005100)={0x50, 0xffffffffffffffda, 0x5, {0x7, 0x2d, 0xf3, 0x4804182, 0x8, 0x7ff, 0x3, 0x6, 0x0, 0x0, 0x10, 0xa4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$trusted_overlay_opaque(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, 0x0, 0x2) 10m19.076940298s ago: executing program 0 (id=2148): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000700)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0) mount$fuse(0x0, &(0x7f0000000740)='./file0/file0\x00', 0x0, 0x88000, 0x0) mount$bind(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000800)='.\x00', &(0x7f0000000840)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) 10m18.647083403s ago: executing program 0 (id=2161): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x2, 0x1000, 0x1}, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000700)={0x6, 0x8, 0x5, 0x1, 0x7f, 0x7fff, 0x8, 0x7f}, &(0x7f0000000740)={0x8, 0x401, 0x7, 0x1, 0x7fff, 0x7, 0x3, 0x5}, 0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)={[0x1]}, 0x8}) 10m18.376058731s ago: executing program 0 (id=2154): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r0, 0xfffff789) accept(r0, 0x0, 0x0) 10m17.99748966s ago: executing program 36 (id=2154): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r0, 0xfffff789) accept(r0, 0x0, 0x0) 9m54.308483569s ago: executing program 8 (id=2311): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x55}, 0x94) r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000100)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 9m53.194316584s ago: executing program 8 (id=2318): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2}, 0x50) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/power/sync_on_suspend', 0x200a00, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000080)="fb", &(0x7f0000000000)=""/6, 0x2}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x18, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1}, {0xfff3}}}, 0x24}}, 0x800) 9m52.320885654s ago: executing program 8 (id=2325): unshare(0x26020480) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002000)=@base={0x5, 0x40, 0x6, 0x8}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000002080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000020c0)='./proc\x00', &(0x7f0000002100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000002140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r1, &(0x7f0000002180)='7', 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000002200)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r0}, 0x50) 9m51.680759291s ago: executing program 8 (id=2328): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/class/net\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000c00)=""/1024, 0x400) socket$inet6(0xa, 0x2, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) getdents64(r0, &(0x7f0000001000)=""/254, 0xfe) 9m51.3968683s ago: executing program 8 (id=2330): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 9m51.082489562s ago: executing program 8 (id=2333): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) setresuid(0x0, 0xee00, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xfffffffc}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) 9m43.095008948s ago: executing program 6 (id=2393): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@gettclass={0x24, 0x2a, 0x315, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x8, 0x4}, {0xe, 0x8}, {0xd, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20008880) 9m40.624493934s ago: executing program 6 (id=2399): r0 = epoll_create1(0x80000) r1 = socket(0xa, 0x2, 0x0) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x1e9, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x40d1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r2, &(0x7f00000000c0), &(0x7f0000000100)=@udp6=r1}, 0x20) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000140)) shutdown(r1, 0x0) 9m39.844843874s ago: executing program 6 (id=2401): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000180)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000001c0)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000200)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x2}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000280)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f00000002c0)={@hyper, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000300)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0xfffffffffffffff9}) 9m39.535033206s ago: executing program 6 (id=2403): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000040)={0x1, 0x1, 0x0, &(0x7f0000000080)='\x00'/51, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000000c0)) r2 = dup(r0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000100)={0x1, r2}) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000140)={0x1, r2}) 9m39.255195045s ago: executing program 6 (id=2406): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 9m39.099630232s ago: executing program 6 (id=2408): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000004c0)={0xa, 0xe22, 0x0, @empty}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000500)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x30, r3, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xff}]}, 0x30}}, 0x0) syz_emit_ethernet(0x4c, &(0x7f0000000640)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "ffb00afe4e70"}}}}}}}, 0x0) 9m36.095283442s ago: executing program 37 (id=2333): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) setresuid(0x0, 0xee00, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xfffffffc}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) 9m23.920727921s ago: executing program 38 (id=2408): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000004c0)={0xa, 0xe22, 0x0, @empty}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000500)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x30, r3, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xff}]}, 0x30}}, 0x0) syz_emit_ethernet(0x4c, &(0x7f0000000640)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "ffb00afe4e70"}}}}}}}, 0x0) 6m1.359329962s ago: executing program 5 (id=3980): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x3, &(0x7f0000000b00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000b40)='syzkaller\x00'}, 0x80) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000b80)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000bc0)={r0, r2, 0x25, 0x4, @val=@netfilter={0x7, 0x0, 0x9}}, 0x20) syz_emit_ethernet(0x11, &(0x7f0000000c00)=ANY=[], 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c40)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d00)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x0, 0xfff2}, {0xfff3}}}, 0x24}}, 0x0) 6m0.526392078s ago: executing program 5 (id=3983): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x1) r1 = userfaultfd(0x80001) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000000)=0x8002, 0x6, 0x1) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000200)=0x21b, 0x2, 0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, 0x1000}) 6m0.249432166s ago: executing program 5 (id=3988): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x4e21, 0x2, @loopback, 0x5}}, 0x0, 0x0, 0x46, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000400)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) ioctl$int_in(r0, 0x5421, &(0x7f0000000480)=0xffff) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000500)="ec", 0xfdef}], 0x1) close(0x3) 5m59.935369019s ago: executing program 5 (id=3992): mkdir(&(0x7f0000000000)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000240)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f00000002c0)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000340)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000000000, &(0x7f0000001f00)='.\x00', 0x0, 0x8b7840, 0x0) 5m59.608731063s ago: executing program 5 (id=3996): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000080)={&(0x7f00000000c0)={0xa, 0x4e24, 0xb, @loopback, 0x5}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000140)="13", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='team_slave_1\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x48, 0xff}, 0x9c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0xfffffff7, 0x6, 0xffff1896, 0x3, 0x2e, 0xffffffb9, 0x1a}, 0x9c) 5m59.24656322s ago: executing program 5 (id=3998): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/128, 0x80}], 0x1f) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000200)={0x0, 0x30b5, 0x0, 0x2, 0x158}, 0x0, 0x0, 0x0) 5m58.658122141s ago: executing program 39 (id=3998): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/128, 0x80}], 0x1f) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000200)={0x0, 0x30b5, 0x0, 0x2, 0x158}, 0x0, 0x0, 0x0) 3m47.061005196s ago: executing program 3 (id=4881): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) listen(r1, 0xc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f070000000000000058000b480400945f64009400050038923944000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) 3m46.040046741s ago: executing program 3 (id=4884): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) sendmsg$sock(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x40000) r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDDELIO(r4, 0x4b35, 0x8) splice(r0, 0x0, r3, 0x0, 0x84ffe8, 0x8) 3m44.963845152s ago: executing program 3 (id=4890): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000000c0)=0xcde, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1374}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1}, @NL80211_ATTR_VENDOR_DATA={0xc, 0x80c5, "0800080001000000"}]}, 0x38}}, 0x0) 3m44.691575381s ago: executing program 3 (id=4892): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x214802, &(0x7f0000000800)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@nolazytime}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f00000008c0)="$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") open(&(0x7f0000000e40)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000e80)=@loop={'/dev/loop', 0x0}, &(0x7f0000000ec0)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000f00)='./bus\x00', 0x0, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000f40)=0x3f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000f80)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x0, 0x5, 0x8ffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file1\x00', 0x42, 0xc8) pwrite64(r2, &(0x7f0000001000)='\"', 0x1, 0x4fed0) 3m44.180372203s ago: executing program 3 (id=4900): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ffff000000000009bd5aaae3aa7f4d00"/27], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x11, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x64}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x1, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100, 0x3}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020267b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fffffff8850000002d000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'macsec0\x00', @random="b5066971c56c"}) 3m43.320167702s ago: executing program 3 (id=4908): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0a00000004000000080000000a"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0e00000004000000040000000001"], 0x50) close(r1) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xb, 0x7, 0x7ff, 0x9, 0x1, r0, 0xfffffff8}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) 3m42.847502331s ago: executing program 40 (id=4908): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0a00000004000000080000000a"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0e00000004000000040000000001"], 0x50) close(r1) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xb, 0x7, 0x7ff, 0x9, 0x1, r0, 0xfffffff8}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) 9.292631039s ago: executing program 9 (id=6258): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0xa0}, 0x40000180) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe700, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x2, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x89a0, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 7.415612143s ago: executing program 9 (id=6270): r0 = memfd_create(&(0x7f0000000580)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc5\x1d\xe7jDf\x87@\x8fg\x15RJw\x82\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7g\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05', 0x0) ftruncate(r0, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x2000000, 0x12, r0, 0x2000) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f00003fe000/0x4000)=nil, 0x4000}}) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) syz_clone(0x16040000, 0x0, 0x0, 0x0, 0x0, 0x0) 6.780672139s ago: executing program 9 (id=6277): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x200000000000000) r1 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r1, &(0x7f0000000480)=[{{&(0x7f00000004c0)={0xa, 0x0, 0x5, @mcast2}, 0x1c, 0x0}}], 0x1, 0x20000000) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r2, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x80000, 0x1000000, 0x33d, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x20, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6a6c, 0x6449, 0x0, 0xfffffffd, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x40, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0) 6.687276058s ago: executing program 7 (id=6278): close(0x3) ioctl$USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000001600), 0x318, 0x0) recvmmsg(r0, &(0x7f0000001640), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = memfd_create(&(0x7f0000001680)='\x00\x0e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\xb5\xf5\xe8\x18h\xb4\xa71\xa8\x85s\xaf\x8a\xe5\xca\'\xfc>\x98\xaa\x8e\x02\xf6rY\xc4\xecB5\vX\'\xe7\xdd\x9d\x9e_\x00\xa1^Yx\x0eF\x98S\xdf\"\xa4\xc2T\xfa\x9f\xac|\xa0\xc5\x9d\xec\xa3\xe9c`j\xbf\x19\xc5\xc7c\xaer\x10\\BCo\x86\xe8X\x1c\x05E%\xb0\x85\xd0\x1e\xa7\xc9w\xa3D\xad<\xcc\x90`\xa8<1\xa1\x04\x0f\a\r\xe4H\x95\a\x80{\x1eJW\x8b\x93\x05\xa2\x85\x95\xdf\x87\xf6+\x0e\xff\xff\x00\x00\x00\x00\x00\x00\xff\xd6h\x8b\xc5\xb9\x10\xa4\x0e\xff\xfak\xf1{\xb7{', 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r2, 0x0) syz_clone(0x80001000, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 6.128649626s ago: executing program 2 (id=6281): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000880)=ANY=[@ANYBLOB="20000000010401000000000000000000020000000a0002000000ffff020000004304b9c3374691b3776fa9332ad3a77da12609474f01e060cde8998dcdc9eadf6d4fc31cf0b9ce276d5d7a2abc643ba18bd3c330d830afc43374c73914ff716ccd6f64744c452580176c73be62050fa56fe3764e8cebe960fcb287160c03cfb21fbbcaa21e444d30f199d0c87eafb1d040084496a0c8d3d8faf7a58e2542b8715f99781760c1068b063e63fddde3b8f8a9a77e4e333da6e78438c8922aae7359774fcb0cdc06695f707c6b9c8456f4402793ea4c498d56de7d88435d8fe995658e6d9a0aa268d78433e819"], 0x20}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd0}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000600)="00112233445566778899", 0xa, 0x0, &(0x7f0000000700)={0x2, 0x1234, @loopback}, 0x10) nanosleep(&(0x7f0000000800)={0x0, 0x5f5e100}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a0000000400000008000000"], 0x48) close(0x3) 6.128276596s ago: executing program 4 (id=6282): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001400010028bd7000fcdbdf2502202fc8", @ANYRES32=r3, @ANYBLOB="08000200ac1414aa"], 0x20}, 0x1, 0x0, 0x0, 0x823be637d8173150}, 0x40000c0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x22b96}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}}, 0x2400c000) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 5.697811931s ago: executing program 2 (id=6284): write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)={'#! ', './mnt'}, 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r2 = accept4(r0, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0x8000, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xfe1b) 5.268624875s ago: executing program 4 (id=6286): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xa0090199) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x2f6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 5.2194614s ago: executing program 2 (id=6287): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) r3 = dup3(r1, r2, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = socket$unix(0x1, 0x2, 0x0) connect$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r4, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) mount$9p_fd(0x0, &(0x7f0000000700)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000240), 0x2, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) connect$unix(r3, &(0x7f0000000100)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 4.882359205s ago: executing program 7 (id=6288): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000540)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000580)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000600)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000680), 0x651, 0x0) recvmmsg(r1, &(0x7f00000006c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000700)=0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000001400)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001440)={r3, 0x18000000000002a0, 0xe80, 0x0, &(0x7f00000014c0)="b9ff03030018698cb89e40f089066000000e00002f00630677", 0x0, 0xfa, 0x2000000, 0x3f, 0xc0, &(0x7f0000001500), &(0x7f0000001540), 0x4}, 0x50) 4.792409784s ago: executing program 9 (id=6289): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000640)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRESOCT, @ANYRES8=0x0, @ANYRES32=0x0, @ANYRES64, @ANYRESDEC=0x0], 0x1, 0x304, &(0x7f0000000bc0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) mkdirat(0xffffffffffffff9c, 0x0, 0x68) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x804800, &(0x7f0000000100)=ANY=[@ANYRES8=0x0, @ANYRES8], 0x10, 0x1218, &(0x7f0000000f00)="$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") inotify_init1(0x800) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 3.890376207s ago: executing program 7 (id=6290): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) unshare(0x42000000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f00000006c0)={0x18, 0x2, {0x0, @loopback}}, 0x1e) connect$pptp(r0, &(0x7f0000000700)={0x18, 0x2, {0x5678, @loopback}}, 0x1e) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, 0x0, 0x0) 3.485521799s ago: executing program 1 (id=6291): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil) sendmsg$inet(r1, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) sendmsg$rds(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0x1}], 0x1}, 0x80d1) 3.464249802s ago: executing program 4 (id=6292): r0 = fanotify_init(0x40, 0x40000) syz_mount_image$udf(&(0x7f0000000b00), &(0x7f0000000b40)='./file0\x00', 0x0, &(0x7f0000000b80)=ANY=[@ANYRES16=0x0], 0x1, 0xc5f, &(0x7f0000000bc0)="$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") syz_mount_image$exfat(0x0, &(0x7f0000001840)='./bus\x00', 0x20020c0, 0x0, 0x0, 0x0, &(0x7f0000001880)) syz_mount_image$ext4(0x0, &(0x7f00000018c0)='./bus/file0\x00', 0x80008, 0x0, 0x0, 0x0, &(0x7f0000001900)) rename(&(0x7f0000001940)='./bus/file0\x00', &(0x7f0000001980)='./file0\x00') readv(r0, &(0x7f0000000000)=[{&(0x7f0000000240)=""/175, 0xaf}], 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000001880)='./file0\x00', 0x101000, 0x97) fanotify_mark(r0, 0x1, 0x40001019, r1, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) getdents64(r1, &(0x7f0000000340)=""/163, 0xba974ed140df4995) getdents(r1, 0x0, 0x0) 3.304691038s ago: executing program 2 (id=6293): r0 = syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x800000, &(0x7f0000000080)=ANY=[], 0xfc, 0x24a, &(0x7f0000000340)="$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") r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280), 0x8d6f113ff25daa0e, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0xffffff81}}, './lower\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='./lower\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000180)='ecryptfs\x00', 0x0, &(0x7f00000001c0)='ecryptfs_sig=0123456789abcdef,ecryptfs_cipher=aes,ecryptfs_key_bytes=16,ecryptfs_passthrough\x00') r2 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000600)='./file0\x00', 0x200049, &(0x7f0000000640)=ANY=[@ANYRES8=r2, @ANYRES32, @ANYRES64=r2], 0x1, 0x39a, &(0x7f0000000680)="$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") r3 = open(&(0x7f0000000a40)='./file1\x00', 0x4000, 0x122) read$FUSE(r3, &(0x7f0000000a80)={0x2020}, 0xfffffe06) r4 = fsopen(&(0x7f00000000c0)='ecryptfs\x00', 0x0) ioctl$FICLONERANGE(r4, 0x4020940d, &(0x7f0000000240)={{r4}, 0xffff, 0x0, 0x8}) 3.254467933s ago: executing program 7 (id=6294): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x1800c10, &(0x7f0000000540)=ANY=[@ANYRES64=r0, @ANYRES16, @ANYBLOB="da2b390afffdae51adf4f4ec951acb4c1a2531de6b3ced9fe28b255886754b9145c212602fe6d01a5b806e97c283b8d6bc499a5f88f3eb59ff03960c3bf37fc9e0240172d5a27826746b9d786ff85527f8c0f02144cadada1bb78ebd3fc9a9ba8a786522ee88b20b841ca76bfb36121bc4bb8cfaf8f41e0547c93d096893e57ae6fd2ce133ea46cd0ecd3426713c99683603908f5cb68739e0d86e385651cb473b5067fb0ca8938d03e080eb6a9f2e", @ANYRES8=0x0, @ANYBLOB="d9cd3bba99656213c9bdb6ad25829865e2b093446735a7c79832913d0e551fd4a79514d8cb4c2db49bb6488f55766f25ab190595c0f81e7c5928ef3a518e86e4c4412871c86c04d4e87e2e07100992c35fb1d429ccbdd39a3abbaf652ba590a4a25b078ca6f4236447e05f21205f42a1a0d8d478861b9cd4019d49f2023ca04c14e773cf774fd38e9a7f1b6e18d9288ffd23d922719f8d9a49287cfdb56a527f5cad89e3e257a6b22243139d97cd9b41642eff023b3ba3bed69af42c0fa9d8700dbd4ffdf61bf86d164ff52542aa807e9b29908c4a774dec46a68182c39bcb52a98bbb", @ANYRES64, @ANYRES8], 0x1, 0x304, &(0x7f0000000700)="$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") open(&(0x7f0000000a40)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) openat$dm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) openat(0xffffffffffffff9c, &(0x7f0000000e00)='./file1\x00', 0x101042, 0x15) r1 = fsopen(&(0x7f0000000e40)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000e80), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000ec0)=ANY=[@ANYRES32=r2], 0x5) 2.914343618s ago: executing program 7 (id=6295): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x800c42, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x100) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) 2.732667107s ago: executing program 4 (id=6296): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000840)={0x1, &(0x7f0000000880)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x200000000000000) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000dc0)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x3}, 0x1c) syz_ublk_setup_io_uring(0x20, &(0x7f0000000900)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000980), &(0x7f00000009c0), &(0x7f0000000a00)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r2, &(0x7f0000000a40)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000ac0)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000b00)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, 0x0, &(0x7f0000000b40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x80000, 0x1000000, 0x33d, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x1, 0x0, 0x242, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe7b9, 0x6449, 0x0, 0xfffffffd}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1092, 0x40, 0x0, 0xffffffff}}], 0x1, 0x0, 0x0) 2.665362804s ago: executing program 2 (id=6297): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000002740)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x200000000000000) openat$dir(0xffffffffffffff9c, &(0x7f0000002780)='./file0\x00', 0x8880, 0x85) syz_ublk_setup_io_uring(0x20, &(0x7f00000027c0)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, &(0x7f0000002840), &(0x7f0000002880), &(0x7f00000028c0)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r1, &(0x7f0000002900)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000002980)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f00000029c0)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, 0x0, &(0x7f0000002a00)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x80000, 0x1000000, 0x33d, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x20, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6a6c, 0x6449, 0x0, 0xfffffffd}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x40, 0x0, 0xffffffff}}], 0x1, 0x0, 0x0) 2.576854163s ago: executing program 7 (id=6298): r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@abs, 0x6e) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmmsg$unix(r2, &(0x7f00000001c0), 0x17a, 0x0) recvmmsg(r1, &(0x7f0000000200), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000240)={0x20000014}) epoll_wait(r0, &(0x7f0000000280)=[{}], 0x1, 0x400) pselect6(0x40, &(0x7f0000000300)={0xa, 0x7ffffffe, 0x2, 0x1000000000000a, 0x80, 0x8, 0x80000002, 0x8}, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$uac2(0x2, 0x0, 0x0, 0x0) 2.232722739s ago: executing program 4 (id=6299): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000108117980800000000000109022400"], 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0xe, 0xc100) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) socket$inet_udp(0x2, 0x2, 0x0) fchdir(r1) getdents64(0xffffffffffffffff, 0x0, 0x34) syz_read_part_table(0x604, &(0x7f00000008c0)="$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") 2.177026634s ago: executing program 1 (id=6300): r0 = socket$netlink(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40000000000000071115300000000008510000002000000850000008800000095000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x70) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@ipv6_newnexthop={0x28, 0x68, 0x1, 0x0, 0xfffffffd, {0x2, 0x0, 0x4, 0x0, 0x4}, [@NHA_OIF={0x8, 0x5, r2}, @NHA_ID={0x8, 0x6, 0xffffffff}]}, 0x28}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4f}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x37}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa4}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e20, @empty}}, 0x3, 0x8000}, &(0x7f00000002c0)=0x90) 2.067203106s ago: executing program 2 (id=6301): bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, 0x0, 0x0) socketpair(0x1, 0x100000005, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000580)={'syztnl1\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x2f, 0x2, 0x1, 0x9, 0x42, @private0, @local, 0x7, 0x8000, 0x7, 0x80000000}}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv4_newnexthop={0x28, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_OIF={0x8, 0x5, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv4_newnexthop={0x20, 0x68, 0x401, 0x70bd25, 0x0, {}, [@NHA_OIF={0x8, 0x5, 0x1}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newnexthop={0x34, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x3}, @NHA_GROUP={0x14, 0x2, [{0x2, 0x1}, {0x1, 0x1}]}]}, 0x34}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x21120, 0x68591}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x4000804) 1.944798319s ago: executing program 1 (id=6302): r0 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x1ec5, 0x40, 0x8000003, 0x184}) ioctl$XFS_IOC_OPEN_BY_HANDLE(r0, 0xc038586b, 0x0) close(0x3) r1 = mq_open(&(0x7f0000000000)='batadv_slave_1\xbb', 0x8c2, 0x30, &(0x7f0000000080)={0x3, 0x8, 0x6, 0xc07}) mq_getsetattr(r1, &(0x7f0000000040)={0x0, 0x40, 0x4, 0xffff}, 0x0) rseq(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(r1, &(0x7f00000001c0)=""/105, 0x69, 0x8001, &(0x7f0000000240)={r2, r3+60000000}) io_setup(0x1, 0x0) io_submit(0x0, 0x0, 0x0) 1.615913573s ago: executing program 1 (id=6303): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0) sendfile(r3, r1, 0x0, 0x100000000) 1.371645238s ago: executing program 1 (id=6304): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000004c0)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000540)=[@acquire]}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000006c0)='./binderfs/binder0\x00', 0x2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000740)='./binderfs/binder0\x00', 0x0, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000880)={0x8, 0x0, &(0x7f00000008c0)=[@acquire]}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, 0x0) 1.136712512s ago: executing program 1 (id=6305): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x6}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000480)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000900)=ANY=[@ANYBLOB="000086dd000011000008040000004125062e0064000001329078e00000017f000001863900000001070774c94d98820002070ee0dd4ab57e1e97"], 0x63c) 600.177388ms ago: executing program 9 (id=6306): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r0, &(0x7f0000000540), 0x4) close(r0) execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) epoll_create(0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, 0x0) 529.232035ms ago: executing program 4 (id=6307): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000004c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000600)={'wlan0\x00', 0x1}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000900) pipe2$9p(&(0x7f0000000740), 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 0s ago: executing program 9 (id=6308): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000240)='\x00', 0x1}], 0x1}}], 0x1, 0x24000005) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) kernel console output (not intermixed with test programs): 7 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.741660][T18021] netdevsim netdevsim3 eth6 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.272103][T18021] netdevsim netdevsim3 eth5 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.722483][T18021] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 640.751080][T18021] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 640.770822][T18021] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 640.791354][T18021] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 640.959188][T18021] 8021q: adding VLAN 0 to HW filter on device bond0 [ 640.992426][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 641.010817][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 641.025865][T18021] 8021q: adding VLAN 0 to HW filter on device team0 [ 641.053995][T10605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 641.064353][T10605] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 641.073706][T10605] bridge0: port 1(bridge_slave_0) entered blocking state [ 641.080843][T10605] bridge0: port 1(bridge_slave_0) entered forwarding state [ 641.089897][T10605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 641.099636][T10605] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 641.109266][T10605] bridge0: port 2(bridge_slave_1) entered blocking state [ 641.116464][T10605] bridge0: port 2(bridge_slave_1) entered forwarding state [ 641.136646][T10605] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 641.145060][T10605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 641.156764][T10605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 641.174396][T10605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 641.187828][T10605] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 641.197998][T10605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 641.208497][T10605] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 641.228467][T10605] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 641.238032][T10605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 641.258322][T10605] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 641.277725][T10605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 641.287246][T10605] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 641.299004][T18021] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 641.642885][T10605] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 641.661925][T10605] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 641.680408][T18021] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 641.709017][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 641.719016][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 641.757253][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 641.771210][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 641.782759][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 641.797757][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 641.814827][T18021] device veth0_vlan entered promiscuous mode [ 641.839496][T18021] device veth1_vlan entered promiscuous mode [ 641.898191][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan0: link becomes ready [ 641.919466][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan1: link becomes ready [ 641.931605][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 641.949500][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 641.962366][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 641.983088][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 642.005323][T18021] device veth0_macvtap entered promiscuous mode [ 642.023499][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 642.034655][T18021] device veth1_macvtap entered promiscuous mode [ 642.071779][T18021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 642.092232][T18021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 642.111184][T18021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 642.122051][T18021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 642.141266][T18021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 642.161776][T18021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 642.184333][T18021] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 642.194944][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 642.213004][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 642.244260][T18021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 642.257017][T18021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 642.267811][T18021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 642.283361][T18021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 642.295536][T18021] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 642.305384][T10605] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 642.324418][T10605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 642.345177][T18021] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.354618][T18021] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.364947][T18021] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.374049][T18021] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.499756][T10611] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 642.521890][T10611] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 642.534821][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 642.568846][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 642.577727][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 642.588157][T10605] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 642.822046][T18412] wg1 speed is unknown, defaulting to 1000 [ 643.288853][T18427] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 643.362698][T18427] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 643.434930][T18412] dummy0 speed is unknown, defaulting to 1000 [ 643.456172][T18412] rxe_eth0 speed is unknown, defaulting to 1000 [ 645.169723][T18464] overlayfs: failed to resolve './file0': -2 [ 646.380021][T18496] device bridge_slave_0 left promiscuous mode [ 646.413726][T18496] bridge0: port 1(bridge_slave_0) entered disabled state [ 646.434892][T18496] device bridge_slave_1 left promiscuous mode [ 646.441214][T18496] bridge0: port 2(bridge_slave_1) entered disabled state [ 646.499581][T18496] bond0: (slave bond_slave_0): Releasing backup interface [ 646.573663][T18496] bond0: (slave bond_slave_1): Releasing backup interface [ 646.830660][T18496] team0: Port device team_slave_0 removed [ 646.892023][T18496] team0: Port device team_slave_1 removed [ 646.917607][T18496] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 646.945628][T18496] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 646.967589][T18496] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 646.983075][T18496] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 647.061733][T18496] bond2: (slave bridge1): Releasing backup interface [ 647.090875][T18496] device bridge1 left promiscuous mode [ 647.173610][T18498] team0: Mode changed to "loadbalance" [ 650.872864][T18591] overlayfs: failed to clone upperpath [ 652.654803][T18640] overlayfs: failed to clone upperpath [ 653.553215][ T4431] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 653.684024][ T26] kauditd_printk_skb: 37 callbacks suppressed [ 653.684040][ T26] audit: type=1326 audit(2000000261.950:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18674 comm="syz.7.4175" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1277fa94d9 code=0x7ffc0000 [ 653.763273][ T4431] usb 4-1: Using ep0 maxpacket: 8 [ 653.788913][ T4431] usb 4-1: unable to get BOS descriptor or descriptor too short [ 653.822507][ T4431] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 653.831117][ T26] audit: type=1326 audit(2000000261.950:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18674 comm="syz.7.4175" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1277fa94d9 code=0x7ffc0000 [ 653.862449][ T4431] usb 4-1: can't read configurations, error -71 [ 653.993833][ T26] audit: type=1326 audit(2000000261.950:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18674 comm="syz.7.4175" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1277fa94d9 code=0x7ffc0000 [ 654.108133][ T26] audit: type=1326 audit(2000000261.950:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18674 comm="syz.7.4175" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1277fa94d9 code=0x7ffc0000 [ 654.222350][ T26] audit: type=1326 audit(2000000261.950:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18674 comm="syz.7.4175" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1277fa94d9 code=0x7ffc0000 [ 654.370648][ T26] audit: type=1326 audit(2000000261.980:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18674 comm="syz.7.4175" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1277fa94d9 code=0x7ffc0000 [ 654.530889][ T26] audit: type=1326 audit(2000000261.980:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18674 comm="syz.7.4175" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1277fa94d9 code=0x7ffc0000 [ 654.633405][ T26] audit: type=1326 audit(2000000261.980:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18674 comm="syz.7.4175" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1277fa94d9 code=0x7ffc0000 [ 654.743426][ T26] audit: type=1326 audit(2000000261.980:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18674 comm="syz.7.4175" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1277fa94d9 code=0x7ffc0000 [ 654.892541][ T26] audit: type=1326 audit(2000000261.980:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18674 comm="syz.7.4175" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f1277fa94d9 code=0x7ffc0000 [ 654.967370][T18703] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 655.711824][T18722] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4188'. [ 655.834797][T18726] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 655.876846][T18693] loop3: detected capacity change from 0 to 40427 [ 655.884685][T18726] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 655.892657][T18726] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 655.919043][T18693] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 655.955234][T18693] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 655.972646][T18726] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 656.006236][T18693] F2FS-fs (loop3): invalid crc value [ 656.023397][T18726] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 656.041373][T18726] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 656.051270][T18693] F2FS-fs (loop3): Found nat_bits in checkpoint [ 656.070097][T18726] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 656.124966][T18726] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 656.221190][T18726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 656.266469][T18726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 656.301796][T18693] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 656.318057][T18693] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 656.339442][T18726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 656.377800][T18726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 656.428190][T18726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 656.484433][T18726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 656.536649][T18726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 656.576223][T18726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 656.611526][T18726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 656.726327][T18726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 659.287514][T18817] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4217'. [ 660.237475][T10605] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 660.266813][T10605] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 660.484510][T10605] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 660.566420][T10605] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 660.697447][T10605] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 660.736043][T10605] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.082173][T10605] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 661.102738][T10605] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.424341][T10605] netdevsim netdevsim8 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.515502][T10605] netdevsim netdevsim8 eth6: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.588242][T10605] netdevsim netdevsim8 eth7: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.618411][T18891] tipc: Started in network mode [ 661.633344][T18891] tipc: Node identity ac14140f, cluster identity 4711 [ 661.650817][T18891] tipc: New replicast peer: 255.255.255.255 [ 661.724618][T18891] tipc: Enabled bearer , priority 10 [ 661.737183][T10605] netdevsim netdevsim8 eth8: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.422170][T18917] overlayfs: failed to clone upperpath [ 662.759675][T15686] tipc: Node number set to 2886997007 [ 662.832281][T18932] overlayfs: failed to clone upperpath [ 662.868081][T18932] overlayfs: failed to clone upperpath [ 666.811926][T10605] device hsr_slave_0 left promiscuous mode [ 666.843576][T10605] device hsr_slave_1 left promiscuous mode [ 666.908517][T19037] overlayfs: failed to clone upperpath [ 666.937426][T10605] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 666.967717][T10605] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 667.011076][T10605] device bridge_slave_1 left promiscuous mode [ 667.043663][T10605] bridge0: port 2(bridge_slave_1) entered disabled state [ 667.093946][T10605] device bridge_slave_0 left promiscuous mode [ 667.136335][T10605] bridge0: port 1(bridge_slave_0) entered disabled state [ 667.603062][T10605] device veth1_macvtap left promiscuous mode [ 667.623465][T10605] device veth0_macvtap left promiscuous mode [ 667.629840][T10605] device veth1_vlan left promiscuous mode [ 667.662703][T10605] device veth0_vlan left promiscuous mode [ 668.418255][T10605] bond1 (unregistering): Released all slaves [ 669.722111][T19101] 9pnet: p9_errstr2errno: server reported unknown error @c0x0000000000000006 [ 670.134787][T10605] team0 (unregistering): Port device team_slave_1 removed [ 670.238652][T10605] team0 (unregistering): Port device team_slave_0 removed [ 670.360081][T10605] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 670.456778][T10605] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 671.196653][T10605] bond0 (unregistering): Released all slaves [ 671.365294][T19068] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4290'. [ 671.444846][T19076] netlink: 15231 bytes leftover after parsing attributes in process `syz.3.4292'. [ 671.472518][T19106] netlink: 'syz.1.4305': attribute type 1 has an invalid length. [ 671.562945][T19108] device veth0_virt_wifi entered promiscuous mode [ 671.958998][T19132] bridge0: port 1(syz_tun) entered blocking state [ 671.969157][T19130] netlink: 'syz.9.4322': attribute type 11 has an invalid length. [ 672.007872][T19132] bridge0: port 1(syz_tun) entered disabled state [ 672.521422][T19132] device syz_tun entered promiscuous mode [ 672.826024][T19132] bridge0: port 1(syz_tun) entered blocking state [ 672.832697][T19132] bridge0: port 1(syz_tun) entered forwarding state [ 673.578416][ T26] kauditd_printk_skb: 87 callbacks suppressed [ 673.578434][ T26] audit: type=1326 audit(2000000281.840:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19162 comm="syz.7.4324" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1277fa94d9 code=0x7ffc0000 [ 673.713477][ T26] audit: type=1326 audit(2000000281.840:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19162 comm="syz.7.4324" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1277fa94d9 code=0x7ffc0000 [ 673.884127][ T26] audit: type=1326 audit(2000000281.840:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19162 comm="syz.7.4324" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1277fa94d9 code=0x7ffc0000 [ 673.919753][ T26] audit: type=1326 audit(2000000281.840:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19162 comm="syz.7.4324" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1277fa94d9 code=0x7ffc0000 [ 674.023514][ T26] audit: type=1326 audit(2000000281.840:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19162 comm="syz.7.4324" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f1277fa94d9 code=0x7ffc0000 [ 674.152373][ T26] audit: type=1326 audit(2000000281.840:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19162 comm="syz.7.4324" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1277fa94d9 code=0x7ffc0000 [ 674.184710][ T26] audit: type=1326 audit(2000000281.850:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19162 comm="syz.7.4324" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1277f69d0e code=0x7ffc0000 [ 674.250012][ T26] audit: type=1326 audit(2000000281.850:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19162 comm="syz.7.4324" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1277fa94d9 code=0x7ffc0000 [ 674.297372][ T26] audit: type=1326 audit(2000000281.890:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19162 comm="syz.7.4324" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1277f69d0e code=0x7ffc0000 [ 674.354471][ T26] audit: type=1326 audit(2000000281.910:1127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19162 comm="syz.7.4324" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1277f69d0e code=0x7ffc0000 [ 674.653477][T19183] 9pnet: p9_errstr2errno: server reported unknown error @c0x0000000000000006 [ 676.288148][T19233] netlink: 'syz.3.4344': attribute type 1 has an invalid length. [ 676.405330][T19233] 8021q: adding VLAN 0 to HW filter on device bond1 [ 676.568198][T19238] bond1: (slave veth3): Enslaving as an active interface with a down link [ 676.654567][T19240] device veth0_virt_wifi entered promiscuous mode [ 676.718023][T19240] bond1: (slave veth0_virt_wifi): making interface the new active one [ 676.764966][T19240] bond1: (slave veth0_virt_wifi): Enslaving as an active interface with an up link [ 676.798078][T19233] bond1: (slave veth0_virt_wifi): Releasing active interface [ 677.234306][T19255] netlink: 'syz.3.4351': attribute type 11 has an invalid length. [ 677.807738][T19263] loop3: detected capacity change from 0 to 40427 [ 677.848621][T19263] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 677.856847][T19263] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 677.866372][T19263] F2FS-fs (loop3): invalid crc value [ 677.912491][T19263] F2FS-fs (loop3): Found nat_bits in checkpoint [ 678.003247][T19263] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 678.010368][T19263] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 678.682151][T19291] netlink: 'syz.2.4362': attribute type 4 has an invalid length. [ 679.479490][T19308] overlayfs: failed to clone upperpath [ 679.684977][T19312] netlink: 'syz.9.4367': attribute type 1 has an invalid length. [ 679.759005][T19312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 679.972086][T19315] bond0: (slave veth7): Enslaving as an active interface with a down link [ 680.041640][T19318] device veth0_virt_wifi entered promiscuous mode [ 680.075907][T19318] bond0: (slave veth0_virt_wifi): Enslaving as an active interface with a down link [ 680.112030][T19319] bond0: (slave veth0_virt_wifi): Releasing active interface [ 680.412705][T19334] fuse: Bad value for 'fd' [ 680.643000][T19343] device syz_tun left promiscuous mode [ 680.672622][T19343] bridge0: port 1(syz_tun) entered disabled state [ 680.945065][T19354] netlink: 'syz.1.4377': attribute type 4 has an invalid length. [ 681.328522][ T26] kauditd_printk_skb: 60 callbacks suppressed [ 681.328541][ T26] audit: type=1800 audit(2000000289.590:1188): pid=19341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4373" name="/" dev="fuse" ino=4 res=0 errno=0 [ 681.421319][T19370] overlayfs: failed to clone upperpath [ 681.735099][T19383] fuse: Bad value for 'fd' [ 681.772039][T19387] device ÿÿÿÿÿÿ left promiscuous mode [ 681.797919][T19387] bridge0: port 1(ÿÿÿÿÿÿ) entered disabled state [ 681.828994][T19389] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4389'. [ 681.858516][T19387] device bridge_slave_1 left promiscuous mode [ 681.893653][T19387] bridge0: port 2(bridge_slave_1) entered disabled state [ 681.926591][T19387] team0: Port device team_slave_0 removed [ 681.945025][T19387] team0: Port device team_slave_1 removed [ 681.964133][T19387] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 681.991330][T19387] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 682.004061][T19387] device vlan2 left promiscuous mode [ 682.019687][T19387] device geneve0 left promiscuous mode [ 682.033876][T19387] bridge0: port 3(vlan2) entered disabled state [ 682.053583][T19387] bond1: (slave geneve2): Releasing active interface [ 682.082413][T19387] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 682.120898][T19390] team0: Mode changed to "loadbalance" [ 682.308839][T19408] netlink: 'syz.3.4392': attribute type 4 has an invalid length. [ 682.788462][T19426] overlayfs: failed to clone upperpath [ 682.904507][T19430] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4398'. [ 683.993946][T19446] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 685.666312][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.672684][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.362385][T19539] loop3: detected capacity change from 0 to 128 [ 687.420610][T19539] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 687.441771][T19544] fuse: Bad value for 'fd' [ 687.622523][ T26] audit: type=1804 audit(2000000295.880:1189): pid=19549 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.4425" name="/newroot/53/file1/bus" dev="loop3" ino=116 res=1 errno=0 [ 688.225681][T19580] ip_tables: iptables: counters copy to user failed while replacing table [ 688.983994][T19598] netlink: 36 bytes leftover after parsing attributes in process `syz.9.4444'. [ 689.351869][T19602] loop3: detected capacity change from 0 to 8192 [ 689.402639][T19602] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 689.490838][T19602] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 689.503713][T19602] REISERFS (device loop3): using ordered data mode [ 689.510343][T19602] reiserfs: using flush barriers [ 689.552905][T19602] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 689.611071][T19602] REISERFS (device loop3): checking transaction log (loop3) [ 689.789861][T19602] REISERFS (device loop3): Using tea hash to sort names [ 689.798148][T19602] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 690.175490][T19635] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4463'. [ 690.916972][ T26] audit: type=1326 audit(2000000299.180:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19652 comm="syz.7.4455" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1277fa94d9 code=0x7fc00000 [ 690.997880][ T26] audit: type=1326 audit(2000000299.210:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19652 comm="syz.7.4455" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1277fa94d9 code=0x7fc00000 [ 691.088886][ T26] audit: type=1326 audit(2000000299.230:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19652 comm="syz.7.4455" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1277fa94d9 code=0x7fc00000 [ 691.513491][T19675] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4465'. [ 692.773052][T19703] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4468'. [ 692.784251][ T5759] rpcbind: server 127.0.0.1 not responding, timed out [ 692.882740][T19703] 8021q: adding VLAN 0 to HW filter on device bond1 [ 692.965855][T19710] bond1: (slave ipip0): refused to change device type [ 693.196239][T19709] bond3: (slave syz_tun): Releasing active interface [ 693.234205][T19709] bridge0: port 2(syz_tun) entered blocking state [ 693.253551][T19709] bridge0: port 2(syz_tun) entered disabled state [ 693.261251][T19709] device syz_tun entered promiscuous mode [ 693.300869][T19711] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4470'. [ 693.549479][T19720] netlink: 11575 bytes leftover after parsing attributes in process `syz.9.4471'. [ 693.680837][ T26] audit: type=1326 audit(2000000301.940:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19726 comm="syz.1.4473" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc12fa94d9 code=0x7fc00000 [ 693.733946][ T26] audit: type=1326 audit(2000000301.940:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19726 comm="syz.1.4473" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbc12fa94d9 code=0x7fc00000 [ 693.875768][T19739] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 693.920325][T19739] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 693.942702][T19739] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 693.968058][T19739] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 694.005630][T19739] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 694.029304][T19739] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 694.065397][T19739] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 694.100437][T19739] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 694.145766][T19739] device veth0 left promiscuous mode [ 694.191885][T19739] bridge0: port 2(veth0) entered disabled state [ 694.216699][T19739] device bridge_slave_0 left promiscuous mode [ 694.239680][T19739] bridge0: port 1(bridge_slave_0) entered disabled state [ 694.268570][T19739] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 694.297533][T19739] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 694.325445][T19739] bond0: (slave veth7): Releasing active interface [ 694.805328][T19763] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4484'. [ 694.872231][T19763] 8021q: adding VLAN 0 to HW filter on device bond2 [ 694.906285][T19763] bond2: (slave ipip0): refused to change device type [ 694.964633][T19771] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4485'. [ 695.255738][T19777] bridge0: port 3(syz_tun) entered blocking state [ 695.262412][T19777] bridge0: port 3(syz_tun) entered disabled state [ 695.300791][T19777] device syz_tun entered promiscuous mode [ 695.311452][T19777] bridge0: port 3(syz_tun) entered blocking state [ 695.318088][T19777] bridge0: port 3(syz_tun) entered forwarding state [ 696.097112][T19797] netlink: 11575 bytes leftover after parsing attributes in process `syz.7.4491'. [ 696.523729][T19806] netlink: 'syz.3.4493': attribute type 4 has an invalid length. [ 696.553331][ T26] audit: type=1326 audit(2000000304.810:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19726 comm="syz.1.4473" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc12fa94d9 code=0x7fc00000 [ 696.928412][T19815] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4494'. [ 697.369228][T19823] overlayfs: failed to clone upperpath [ 697.487967][T19825] device syz_tun left promiscuous mode [ 697.543815][T19825] bridge0: port 3(syz_tun) entered disabled state [ 697.623010][T19825] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 697.695770][T19825] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 697.722582][T19825] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 697.781537][T19825] device bridge_slave_0 left promiscuous mode [ 697.808614][T19825] bridge0: port 1(bridge_slave_0) entered disabled state [ 697.866339][T19825] device bridge_slave_1 left promiscuous mode [ 697.885115][T19825] bridge0: port 2(bridge_slave_1) entered disabled state [ 697.923952][T19825] bond0: (slave bond_slave_0): Releasing backup interface [ 698.047014][T19825] bond0: (slave bond_slave_1): Releasing backup interface [ 698.428532][T19825] team0: Port device team_slave_0 removed [ 698.528229][T19825] team0: Port device team_slave_1 removed [ 698.563492][T19825] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 698.580049][T19825] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 698.598423][T19825] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 698.625173][T19825] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 698.707200][T19825] bond1: (slave veth3): Releasing active interface [ 698.771426][T19836] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4498'. [ 700.038594][ T4431] libceph: connect (1)[c::]:6789 error -101 [ 700.053826][ T4431] libceph: mon0 (1)[c::]:6789 connect error [ 700.112508][T19900] ceph: No mds server is up or the cluster is laggy [ 700.373414][T15688] libceph: connect (1)[c::]:6789 error -101 [ 700.379525][T15688] libceph: mon0 (1)[c::]:6789 connect error [ 702.044241][T19966] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4537'. [ 702.357618][T19980] md: couldn't update array info. -22 [ 702.372052][T19980] md: could not open device unknown-block(1,18). [ 702.388217][T19980] md: md_import_device returned -16 [ 703.634219][T20007] block device autoloading is deprecated and will be removed. [ 704.361653][T20035] netlink: 'syz.2.4560': attribute type 39 has an invalid length. [ 704.473406][T15688] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 704.725225][T15688] usb 4-1: not running at top speed; connect to a high speed hub [ 704.749025][T15688] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 704.790240][T15688] usb 4-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 704.824698][T20051] fuse: Invalid rootmode [ 704.833606][T15688] usb 4-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 704.867496][T15688] usb 4-1: Product: syz [ 704.886398][T15688] usb 4-1: Manufacturer: syz [ 704.956184][T15688] usb 4-1: Found UVC 1.00 device syz (225a:e1d4) [ 705.154829][T15688] usb 4-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 705.202271][T15688] uvcvideo 4-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 705.233899][T15688] uvcvideo 4-1:1.1: Failed to initialize the device (-5). [ 705.303294][T15688] usb 4-1: USB disconnect, device number 8 [ 705.688620][T20074] Error parsing options; rc = [-22] [ 705.957477][T20080] overlayfs: failed to resolve './file0': -2 [ 707.700515][T20126] wg1 speed is unknown, defaulting to 1000 [ 708.512628][T20126] dummy0 speed is unknown, defaulting to 1000 [ 708.537091][T20126] rxe_eth0 speed is unknown, defaulting to 1000 [ 711.171674][T20220] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4612'. [ 711.344992][T20220] bond9 (unregistering): Released all slaves [ 711.510254][T20234] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 711.567325][T20234] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 711.596986][T20234] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 711.623402][T20234] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 711.653527][T20234] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 711.661222][T20234] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 711.699508][T20234] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 711.730398][T20234] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 712.252425][T20257] device syz_tun left promiscuous mode [ 712.258567][T20257] bridge0: port 2(syz_tun) entered disabled state [ 712.296854][T20257] bond5: (slave bond0): Releasing backup interface [ 712.322726][T20257] bond4: (slave team0): Releasing backup interface [ 712.372344][T20257] device bridge_slave_0 left promiscuous mode [ 712.409574][T20257] bridge0: port 1(bridge_slave_0) entered disabled state [ 712.460485][T20257] bond0: (slave bridge_slave_1): Releasing backup interface [ 712.541946][T20257] bond0: (slave bond_slave_0): Releasing backup interface [ 712.613745][T20257] bond0: (slave bond_slave_1): Releasing backup interface [ 712.696205][T20257] team0: Port device team_slave_0 removed [ 712.743583][T20257] team0: Port device team_slave_1 removed [ 712.749814][T20257] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 712.796545][T20257] bond1: (slave gretap1): Releasing active interface [ 712.832778][T20257] bond2: (slave geneve2): Releasing active interface [ 712.872973][T20257] batman_adv: batadv0: Removing interface: gretap2 [ 712.884941][T20257] bond6: (slave geneve3): Releasing active interface [ 712.924285][T20257] bond8: (slave bridge2): Releasing backup interface [ 712.945294][T20257] device bridge2 left promiscuous mode [ 713.872177][T20299] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 713.956038][T20299] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 713.980047][T20299] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 715.384719][T20304] team0: Mode changed to "loadbalance" [ 716.595799][T20332] netlink: 'syz.2.4642': attribute type 3 has an invalid length. [ 716.658733][T20332] netlink: 'syz.2.4642': attribute type 3 has an invalid length. [ 717.777725][T20359] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4650'. [ 717.884657][T20359] device team1 entered promiscuous mode [ 717.933249][T20359] 8021q: adding VLAN 0 to HW filter on device team1 [ 718.170179][T20362] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 718.276088][T20362] CIFS: Attempting to mount \\127.0.0.1\share [ 718.325679][T20362] CIFS: VFS: Error connecting to socket. Aborting operation. [ 718.367119][T15697] libceph: connect (1)[c::]:6789 error -101 [ 718.383337][T15697] libceph: mon0 (1)[c::]:6789 connect error [ 718.394838][T20362] CIFS: VFS: cifs_mount failed w/return code = -101 [ 718.457686][T20369] ceph: No mds server is up or the cluster is laggy [ 718.536031][T20377] netlink: 156 bytes leftover after parsing attributes in process `syz.9.4656'. [ 718.665021][T15697] libceph: connect (1)[c::]:6789 error -101 [ 718.671134][T15697] libceph: mon0 (1)[c::]:6789 connect error [ 719.346774][T20394] jffs2: notice: (20394) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 720.633857][T20423] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4666'. [ 720.690963][T20423] device bond0 entered promiscuous mode [ 720.705206][T20423] 8021q: adding VLAN 0 to HW filter on device bond0 [ 720.789390][T20423] 8021q: adding VLAN 0 to HW filter on device bond0 [ 720.798063][T20423] bond0: (slave sit3): The slave device specified does not support setting the MAC address [ 720.810983][T20423] bond0: (slave sit3): Error -95 calling set_mac_address [ 720.848656][T20433] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4669'. [ 720.872772][T20433] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4669'. [ 720.938425][T20433] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4669'. [ 721.557098][T20453] jffs2: notice: (20453) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 722.428365][T20471] TC_ACT_REPEAT abuse ? [ 722.732687][T20477] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 722.769722][T20477] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 722.790154][T20477] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 722.830358][T20477] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 722.875158][T20477] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 722.882813][T20477] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 722.940206][T20477] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 722.993976][T20477] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 723.035465][T20483] netlink: 'syz.1.4684': attribute type 4 has an invalid length. [ 724.044581][T20517] jffs2: notice: (20517) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 726.130338][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880548b2800: rx timeout, send abort [ 726.139903][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880548b0800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 726.638728][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880548b2800: abort rx timeout. Force session deactivation [ 727.931293][T20531] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.943405][T20531] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.955024][T20531] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.964589][T20531] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.342474][T20536] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4695'. [ 728.829429][T20580] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4711'. [ 728.952916][T20580] device bond3 entered promiscuous mode [ 728.959183][T20580] 8021q: adding VLAN 0 to HW filter on device bond3 [ 729.174469][T20580] 8021q: adding VLAN 0 to HW filter on device bond3 [ 729.224038][T20580] bond3: (slave sit1): The slave device specified does not support setting the MAC address [ 729.262763][T20580] bond3: (slave sit1): Error -95 calling set_mac_address [ 730.293871][T20617] jffs2: notice: (20617) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 730.367542][T20622] overlayfs: failed to clone upperpath [ 731.741066][T20647] block device autoloading is deprecated and will be removed. [ 731.869899][T20647] md: invalid raid superblock magic on ram2 [ 731.928436][T20647] md: ram2 does not have a valid v0.0 superblock, not importing! [ 731.993354][T20647] md: md_import_device returned -22 [ 732.051250][T20652] md: invalid raid superblock magic on ram3 [ 732.073702][T20652] md: ram3 does not have a valid v0.0 superblock, not importing! [ 732.106038][T20652] md: md_import_device returned -22 [ 732.127183][T20655] md: md1 stopped. [ 733.216139][T20673] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 734.070957][T20613] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.080609][T20613] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.090246][T20613] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.106645][T20613] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.781540][T20737] loop3: detected capacity change from 0 to 32768 [ 737.905502][T20737] XFS (loop3): Mounting V5 Filesystem [ 738.002157][T20737] XFS (loop3): Ending clean mount [ 738.699557][T18021] XFS (loop3): Unmounting Filesystem [ 739.931907][T20805] netlink: 64 bytes leftover after parsing attributes in process `syz.7.4768'. [ 740.966016][T20831] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4775'. [ 742.923425][T20882] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4794'. [ 743.685318][T20895] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4790'. [ 743.713545][T20902] netlink: 'syz.3.4791': attribute type 1 has an invalid length. [ 743.825461][T20902] 8021q: adding VLAN 0 to HW filter on device bond3 [ 743.927770][T20905] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.953667][T20905] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 744.048895][T20905] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 744.105573][T20905] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 744.198986][T20905] bond3: (slave geneve2): making interface the new active one [ 744.298448][T20905] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 744.349604][T14894] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 744.977385][T20937] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4796'. [ 745.390764][T20944] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4802'. [ 746.785988][T20979] loop3: detected capacity change from 0 to 256 [ 747.107763][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.114293][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.781123][T21039] loop3: detected capacity change from 0 to 33280 [ 748.868974][T21039] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 748.900018][T21039] System zones: 1-12 [ 749.000995][T21039] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #12: comm syz.3.4826: missing EA_INODE flag [ 749.031483][T21039] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.4826: error while reading EA inode 12 err=-117 [ 749.053688][T21039] EXT4-fs (loop3): 1 orphan inode deleted [ 749.064851][T21039] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 749.183366][ T4295] Bluetooth: hci2: command 0x0406 tx timeout [ 749.228030][T18021] EXT4-fs (loop3): unmounting filesystem. [ 749.283181][ T26] audit: type=1326 audit(2000000613.596:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21048 comm="syz.2.4832" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7c1ba94d9 code=0x7fc00000 [ 749.365395][T21056] ip_tables: iptables: counters copy to user failed while replacing table [ 749.822795][T21072] netlink: 'syz.2.4838': attribute type 1 has an invalid length. [ 749.906905][T21072] 8021q: adding VLAN 0 to HW filter on device bond5 [ 749.956823][T21072] bond4: (slave bond5): making interface the new active one [ 750.004131][T21072] bond4: (slave bond5): Enslaving as an active interface with an up link [ 750.035076][T21077] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4838'. [ 750.062115][T21077] device bond4 entered promiscuous mode [ 750.090133][T21077] device bond5 entered promiscuous mode [ 750.115671][T21077] 8021q: adding VLAN 0 to HW filter on device bond4 [ 750.691285][T21093] netlink: 64 bytes leftover after parsing attributes in process `syz.7.4844'. [ 750.882182][ T5758] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready [ 752.036598][T21138] netlink: 'syz.2.4857': attribute type 1 has an invalid length. [ 752.066844][T21138] netlink: 64363 bytes leftover after parsing attributes in process `syz.2.4857'. [ 752.972728][T21173] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4865'. [ 753.859004][T21182] infiniband syz1: set down [ 753.873449][T21182] infiniband syz1: added ipvlan1 [ 753.946608][T21182] RDS/IB: syz1: added [ 753.950766][T21182] smc: adding ib device syz1 with port count 1 [ 754.001883][T21182] smc: ib device syz1 port 1 has pnetid [ 754.028863][T21192] ip_tables: iptables: counters copy to user failed while replacing table [ 754.094468][T21196] tipc: Enabling of bearer rejected, failed to enable media [ 754.851469][ T26] audit: type=1326 audit(2000000619.166:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21198 comm="syz.3.4873" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90335a94d9 code=0x7ffc0000 [ 754.926206][ T26] audit: type=1326 audit(2000000619.166:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21198 comm="syz.3.4873" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90335a94d9 code=0x7ffc0000 [ 755.029988][ T26] audit: type=1326 audit(2000000619.166:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21198 comm="syz.3.4873" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f90335a94d9 code=0x7ffc0000 [ 755.137799][ T26] audit: type=1326 audit(2000000619.166:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21198 comm="syz.3.4873" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90335a94d9 code=0x7ffc0000 [ 755.249338][ T26] audit: type=1326 audit(2000000619.166:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21198 comm="syz.3.4873" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90335a94d9 code=0x7ffc0000 [ 755.312729][ T26] audit: type=1326 audit(2000000619.176:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21198 comm="syz.3.4873" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f90335a94d9 code=0x7ffc0000 [ 755.396734][ T26] audit: type=1326 audit(2000000619.186:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21198 comm="syz.3.4873" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90335a94d9 code=0x7ffc0000 [ 755.480256][ T26] audit: type=1326 audit(2000000619.186:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21198 comm="syz.3.4873" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90335a94d9 code=0x7ffc0000 [ 755.571247][ T26] audit: type=1326 audit(2000000619.186:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21198 comm="syz.3.4873" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f90335a94d9 code=0x7ffc0000 [ 755.625001][ T26] audit: type=1326 audit(2000000619.186:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21198 comm="syz.3.4873" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90335a94d9 code=0x7ffc0000 [ 756.833692][T21253] overlayfs: failed to clone upperpath [ 757.216878][T21266] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4889'. [ 757.845473][T21276] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4893'. [ 757.855691][T21279] loop3: detected capacity change from 0 to 33792 [ 757.882449][T21279] EXT4-fs: Ignoring removed bh option [ 757.960545][T21279] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 758.676536][ T5759] Trying to write to read-only block-device loop3 [ 758.700215][T18021] Trying to write to read-only block-device loop3 [ 758.707958][ T5759] Trying to write to read-only block-device loop3 [ 758.723209][T18021] Trying to write to read-only block-device loop3 [ 758.738749][ T5759] Trying to write to read-only block-device loop3 [ 758.761292][T18021] Trying to write to read-only block-device loop3 [ 758.803265][T18021] Trying to write to read-only block-device loop3 [ 758.826841][T18021] Trying to write to read-only block-device loop3 [ 758.862272][ T5759] Trying to write to read-only block-device loop3 [ 758.885233][T18021] EXT4-fs (loop3): unmounting filesystem. [ 758.974578][T18021] Trying to write to read-only block-device loop3 [ 758.993039][ T9] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 759.297601][ T9] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 759.490906][ T9] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 759.700041][ T9] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 759.997036][ T9] netdevsim netdevsim3 eth17: set [1, 0] type 2 family 0 port 6081 - 0 [ 760.098419][ T9] netdevsim netdevsim3 eth18: set [1, 0] type 2 family 0 port 6081 - 0 [ 760.181657][ T9] netdevsim netdevsim3 eth19: set [1, 0] type 2 family 0 port 6081 - 0 [ 760.241270][ T9] netdevsim netdevsim3 eth20: set [1, 0] type 2 family 0 port 6081 - 0 [ 760.417585][ T9] tipc: Disabling bearer [ 760.426087][ T9] tipc: Left network mode [ 760.538857][ T4295] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 760.553018][ T4295] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 760.566323][ T4295] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 760.581434][ T4295] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 760.590361][ T4295] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 760.597825][ T4295] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 760.975647][T21349] wg1 speed is unknown, defaulting to 1000 [ 761.420750][T21349] dummy0 speed is unknown, defaulting to 1000 [ 761.439912][T21349] rxe_eth0 speed is unknown, defaulting to 1000 [ 761.819664][T21380] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000 [ 762.703427][ T4290] Bluetooth: hci2: command 0x0409 tx timeout [ 762.787518][T21349] chnl_net:caif_netlink_parms(): no params data found [ 763.048601][T21349] bridge0: port 1(bridge_slave_0) entered blocking state [ 763.092076][T21349] bridge0: port 1(bridge_slave_0) entered disabled state [ 763.132109][T21349] device bridge_slave_0 entered promiscuous mode [ 763.165547][T21349] bridge0: port 2(bridge_slave_1) entered blocking state [ 763.172723][T21349] bridge0: port 2(bridge_slave_1) entered disabled state [ 763.255163][T21349] device bridge_slave_1 entered promiscuous mode [ 763.356563][T21349] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 763.422969][T21349] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 763.560375][ T9] device hsr_slave_0 left promiscuous mode [ 763.595557][ T9] device hsr_slave_1 left promiscuous mode [ 763.706472][ T9] bond3 (unregistering): (slave geneve2): Releasing active interface [ 764.433029][T21440] netlink: 168 bytes leftover after parsing attributes in process `syz.1.4944'. [ 764.691229][ T9] bond3 (unregistering): Released all slaves [ 764.783238][ T4290] Bluetooth: hci2: command 0x041b tx timeout [ 765.317950][ T9] bond2 (unregistering): Released all slaves [ 765.881862][ T9] bond1 (unregistering): Released all slaves [ 766.867043][ T4290] Bluetooth: hci2: command 0x040f tx timeout [ 768.491216][ T9] bond0 (unregistering): Released all slaves [ 768.566771][T21349] team0: Port device team_slave_0 added [ 768.591330][T21443] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 768.702171][T21443] 8021q: adding VLAN 0 to HW filter on device bond0 [ 768.714600][T21443] 8021q: adding VLAN 0 to HW filter on device team0 [ 768.730248][T21443] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 768.774467][T21349] team0: Port device team_slave_1 added [ 768.924475][T21349] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 768.931677][T21349] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 768.958465][ T4290] Bluetooth: hci2: command 0x0419 tx timeout [ 768.998180][T21349] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 769.011360][T21349] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 769.020493][T21349] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 769.047710][T21349] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 769.161141][T21349] device hsr_slave_0 entered promiscuous mode [ 769.186506][T21349] device hsr_slave_1 entered promiscuous mode [ 769.199230][T21349] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 769.220631][T21349] Cannot create hsr debugfs directory [ 769.465604][T21505] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4966'. [ 769.499784][T21505] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4966'. [ 769.523477][T21505] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4966'. [ 769.808182][T21349] netdevsim netdevsim4 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.084478][T21349] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.158881][T21521] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4971'. [ 770.370854][T21349] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.652531][T21349] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 771.071346][T21349] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 771.107138][T21349] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 771.145057][T21349] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 771.168981][T21349] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 771.195716][T21552] netlink: 48 bytes leftover after parsing attributes in process `syz.9.4982'. [ 771.221480][T21552] (unnamed net_device) (uninitialized): peer notification delay (2365) is not a multiple of miimon (80), value rounded to 2320 ms [ 771.398052][T21556] netlink: 48 bytes leftover after parsing attributes in process `syz.9.4982'. [ 771.481013][T21556] bond2: Unable to set peer notification delay as MII monitoring is disabled [ 771.685439][T21349] 8021q: adding VLAN 0 to HW filter on device bond0 [ 771.748337][ T4836] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 771.766779][ T4836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 771.798186][T21349] 8021q: adding VLAN 0 to HW filter on device team0 [ 771.864453][ T5759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 771.886704][ T5759] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 771.912902][ T5759] bridge0: port 1(bridge_slave_0) entered blocking state [ 771.920189][ T5759] bridge0: port 1(bridge_slave_0) entered forwarding state [ 771.957560][ T5759] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 771.997059][ T5759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 772.022775][ T5759] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 772.043894][ T5759] bridge0: port 2(bridge_slave_1) entered blocking state [ 772.051066][ T5759] bridge0: port 2(bridge_slave_1) entered forwarding state [ 772.101022][ T5759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 772.120318][ T5759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 772.164961][ T5759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 772.187544][ T5759] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 772.215247][ T5759] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 772.246482][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 772.274999][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 772.310063][T21349] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 772.353621][T21349] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 772.401829][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 772.425673][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 772.463898][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 772.489351][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 772.512781][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 773.344345][ T5759] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 773.351964][ T5759] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 773.404668][T21349] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 773.638743][T21624] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 773.694147][T21624] batman_adv: batadv0: Adding interface: gretap2 [ 773.700562][T21624] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 773.828686][T21624] batman_adv: batadv0: Interface activated: gretap2 [ 774.134832][T21646] overlayfs: failed to clone upperpath [ 774.470532][ T5758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 774.506680][ T5758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 774.583765][ T5758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 774.633914][ T5758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 774.653232][ T5758] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 774.693659][ T5758] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 774.713774][T21349] device veth0_vlan entered promiscuous mode [ 774.751239][T21349] device veth1_vlan entered promiscuous mode [ 774.836630][ T5758] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan0: link becomes ready [ 774.878421][ T5758] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan1: link becomes ready [ 774.898692][ T5758] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 774.941246][ T5758] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 774.970605][ T5758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 775.022268][ T5758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 775.044859][T21349] device veth0_macvtap entered promiscuous mode [ 775.055704][T21349] device veth1_macvtap entered promiscuous mode [ 775.145054][T21349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 775.183670][T21349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 775.228021][T21349] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 775.243721][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 775.275563][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 775.314504][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 775.354118][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 775.387413][T21349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 775.430999][T21349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 775.475062][T21349] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 775.507494][T21349] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 775.548497][T21349] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 775.597484][T21349] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 775.633986][T21349] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 775.654665][ T5759] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 775.673862][ T5759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 775.737449][T21685] tipc: Enabling of bearer rejected, failed to enable media [ 775.975915][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 776.002945][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 776.030938][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 776.088004][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 776.111647][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 776.140215][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 778.186910][T21764] netlink: 'syz.1.5040': attribute type 1 has an invalid length. [ 778.318441][T21764] 8021q: adding VLAN 0 to HW filter on device bond9 [ 778.447087][T21771] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.463286][T21771] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.481705][T21771] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.499755][T21771] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.517389][T21771] bond9: (slave geneve4): making interface the new active one [ 778.544773][T21771] bond9: (slave geneve4): Enslaving as an active interface with an up link [ 778.583374][T14894] IPv6: ADDRCONF(NETDEV_CHANGE): bond9: link becomes ready [ 781.264577][T21852] netlink: 'syz.4.5064': attribute type 1 has an invalid length. [ 781.277311][T21853] ip_tables: iptables: counters copy to user failed while replacing table [ 781.947175][T21876] loop4: detected capacity change from 0 to 33280 [ 782.096284][T21876] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 782.105637][T21876] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 783.739365][T21349] EXT4-fs (loop4): unmounting filesystem. [ 784.961349][T21904] loop4: detected capacity change from 0 to 32768 [ 785.058469][T21904] XFS (loop4): Mounting V5 Filesystem [ 785.243241][T21904] XFS (loop4): Ending clean mount [ 785.278350][T21904] XFS (loop4): Quotacheck needed: Please wait. [ 785.422703][T21904] XFS (loop4): Quotacheck: Done. [ 786.019295][T21349] XFS (loop4): Unmounting Filesystem [ 786.154247][T21957] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5087'. [ 788.157985][T22016] overlayfs: failed to clone upperpath [ 788.222208][T22018] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5100'. [ 788.258989][T22018] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 788.268382][T22018] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 788.277208][T22018] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 788.285985][T22018] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 788.399933][T22018] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5100'. [ 788.443895][T22018] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5100'. [ 789.275966][T22049] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 789.316005][T22049] batman_adv: batadv0: Adding interface: gretap1 [ 789.339256][T22049] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 789.447980][T22049] batman_adv: batadv0: Interface activated: gretap1 [ 790.059909][ T4362] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 790.260765][ T4362] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 790.287737][ T4362] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 790.324516][ T4362] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.351973][ T4362] usb 5-1: config 0 descriptor?? [ 790.587919][ T4362] usbhid 5-1:0.0: can't add hid device: -71 [ 790.605367][ T4362] usbhid: probe of 5-1:0.0 failed with error -71 [ 790.651910][ T4362] usb 5-1: USB disconnect, device number 7 [ 791.163340][ T4362] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 791.357632][ T4362] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 791.389092][ T4362] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 791.421762][ T4362] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 791.481458][ T4362] usb 5-1: config 0 descriptor?? [ 792.313935][ T4362] aiptek 5-1:0.0: Aiptek using 400 ms programming speed [ 792.322321][ T4362] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input9 [ 792.619133][T22115] overlayfs: failed to clone lowerpath [ 792.647477][T22115] overlayfs: failed to clone lowerpath [ 792.669379][ T4362] usb 5-1: USB disconnect, device number 8 [ 792.675351][ C1] aiptek 5-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 793.196547][T22134] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5123'. [ 794.405181][T22159] netlink: 'syz.9.5127': attribute type 1 has an invalid length. [ 794.738789][T22159] 8021q: adding VLAN 0 to HW filter on device bond3 [ 794.848548][T22160] bond3: (slave gretap1): making interface the new active one [ 794.984915][T22160] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 795.023348][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 795.118100][T22176] ip_tables: iptables: counters copy to user failed while replacing table [ 795.496947][T22183] loop4: detected capacity change from 0 to 32896 [ 795.684222][T22183] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 795.742021][T22183] ext4 filesystem being mounted at /21/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 796.786469][T22183] fscrypt: Adiantum using implementation "adiantum(xchacha12-simd,aes-aesni,nhpoly1305-avx2)" [ 796.958561][T22183] fscrypt: loop4: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 797.102449][T21349] EXT4-fs (loop4): unmounting filesystem. [ 803.748785][T22407] loop4: detected capacity change from 0 to 33280 [ 803.800623][T22407] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 804.163420][T22407] EXT4-fs (loop4): 1 truncate cleaned up [ 804.263849][T22407] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 806.120714][T21349] EXT4-fs (loop4): unmounting filesystem. [ 806.263721][T22439] overlayfs: failed to clone lowerpath [ 807.334658][T22476] loop8: detected capacity change from 0 to 7 [ 807.354630][T22476] loop8: [ 807.357683][T22476] loop8: partition table partially beyond EOD, truncated [ 808.547416][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.554124][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.805038][T22512] netlink: 'syz.2.5222': attribute type 1 has an invalid length. [ 808.911965][T22512] 8021q: adding VLAN 0 to HW filter on device bond7 [ 809.085013][T22512] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.183104][T22512] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.233185][T22512] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.242102][T22512] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.333109][T22512] bond7: (slave geneve2): making interface the new active one [ 809.366251][T22512] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 809.403459][ T5759] IPv6: ADDRCONF(NETDEV_CHANGE): bond7: link becomes ready [ 809.921163][T22542] netlink: 'syz.7.5229': attribute type 2 has an invalid length. [ 810.313652][T14894] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 810.363592][T22546] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 810.932918][T22573] netlink: 'syz.7.5237': attribute type 1 has an invalid length. [ 811.050969][T22573] 8021q: adding VLAN 0 to HW filter on device bond2 [ 811.137491][T22576] bond2: (slave gretap1): making interface the new active one [ 811.234749][T22576] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 811.293388][ T5759] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 813.519510][T22633] loop4: detected capacity change from 0 to 2048 [ 813.563524][T22633] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 813.921074][T22643] netlink: 'syz.2.5254': attribute type 4 has an invalid length. [ 813.969415][T22643] netlink: 'syz.2.5254': attribute type 4 has an invalid length. [ 816.853214][T22732] netlink: 'syz.7.5274': attribute type 1 has an invalid length. [ 816.977954][T22732] 8021q: adding VLAN 0 to HW filter on device bond3 [ 817.203635][ T5635] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 817.212927][T22754] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.311581][T22754] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.383406][T22754] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.396968][ T5635] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 817.410036][T22754] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.427236][T22754] bond3: (slave geneve3): making interface the new active one [ 817.453251][ T5635] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 817.533649][T22754] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 817.571885][ T5635] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 817.572087][T22748] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 817.597591][ T5635] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 817.631226][ T5635] usb 5-1: config 0 descriptor?? [ 818.136429][ T4396] usb 5-1: USB disconnect, device number 9 [ 818.713661][T22812] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 818.910517][T22812] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 818.975761][T22812] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 818.999526][T22812] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 819.060533][T22812] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 819.101887][T22812] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 819.127950][T22812] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 819.258845][T22812] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 819.296793][T22812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 819.326049][T22812] 8021q: adding VLAN 0 to HW filter on device team0 [ 819.357870][T22812] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 819.731427][T22827] netlink: 'syz.2.5289': attribute type 1 has an invalid length. [ 819.836779][T22827] 8021q: adding VLAN 0 to HW filter on device bond8 [ 820.942962][T22858] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5293'. [ 821.127160][T22833] bond8: (slave veth13): Enslaving as a backup interface with a down link [ 821.174927][T22827] netlink: 'syz.2.5289': attribute type 10 has an invalid length. [ 821.182944][T22827] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5289'. [ 821.192207][T22827] device dummy0 entered promiscuous mode [ 821.206507][T22856] wg1 speed is unknown, defaulting to 1000 [ 821.312280][T22856] dummy0 speed is unknown, defaulting to 1000 [ 821.319621][T22856] rxe_eth0 speed is unknown, defaulting to 1000 [ 822.161696][T22877] batman_adv: batadv0: Adding interface: dummy0 [ 822.179298][T22877] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 822.250119][T22877] batman_adv: batadv0: Interface activated: dummy0 [ 822.301164][T22878] batadv0: mtu less than device minimum [ 822.315354][T22878] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 822.330085][T22878] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 822.342600][T22878] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 822.355357][T22878] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 822.370860][T22878] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 822.383912][T22878] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 822.396658][T22878] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 822.409169][T22878] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 823.238457][T22894] tipc: Failed to remove unknown binding: 66,0,0/0:3316916703/3316916704 [ 823.252867][T22894] tipc: Failed to remove unknown binding: 66,0,0/0:3316916703/3316916704 [ 825.679904][T22934] loop4: detected capacity change from 0 to 32768 [ 827.844887][T23023] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 827.919530][T23023] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 828.052759][T23023] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 828.070372][T23023] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 828.079855][T23023] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 828.106201][T23023] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 828.200971][T23023] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 828.326817][T23023] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 828.402793][T23023] bond3: (slave gretap1): Releasing active interface [ 832.242882][T23138] MPTCP: kernel_bind error, err=-99 [ 832.694338][T23148] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5380'. [ 832.730431][T23148] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 832.939373][T23158] netlink: 'syz.2.5383': attribute type 4 has an invalid length. [ 834.418706][T23187] batman_adv: batadv0: Adding interface: dummy0 [ 834.538090][T23187] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 834.977492][T23187] batman_adv: batadv0: Interface activated: dummy0 [ 835.152420][T23193] net_ratelimit: 11 callbacks suppressed [ 835.152445][T23193] batadv0: mtu less than device minimum [ 835.371790][T23193] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 835.384338][T23193] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 835.396957][T23193] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 835.409436][T23193] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 835.421909][T23193] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 835.434547][T23193] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 835.447011][T23193] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 835.459676][T23193] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 835.472338][T23193] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 835.581177][T23191] loop4: detected capacity change from 0 to 40427 [ 835.626346][T23191] F2FS-fs (loop4): invalid crc value [ 835.690112][T23191] F2FS-fs (loop4): Found nat_bits in checkpoint [ 836.078915][T23191] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 836.474819][T21349] syz-executor: attempt to access beyond end of device [ 836.474819][T21349] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 838.558904][T23299] netlink: 'syz.1.5412': attribute type 4 has an invalid length. [ 838.612461][T23299] netlink: 'syz.1.5412': attribute type 4 has an invalid length. [ 843.675833][T23409] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.700271][T23409] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.730547][T23409] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.753600][T23409] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 844.203942][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056b74400: rx timeout, send abort [ 844.212778][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888056b74400: 0x2ff01: (3) A timeout occurred and this is the connection abort to close the session. [ 844.228668][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880552a9000: rx timeout, send abort [ 844.237207][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880552a8800: rx timeout, send abort [ 844.253308][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880552a8800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 844.267829][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880552a9000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 846.824729][T22766] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 846.842732][T23499] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 846.855876][T23501] netlink: 'syz.7.5462': attribute type 4 has an invalid length. [ 846.910214][T23501] netlink: 'syz.7.5462': attribute type 4 has an invalid length. [ 848.849808][T23579] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5481'. [ 848.965427][T23579] HTB: quantum of class 800E0002 is big. Consider r2q change. [ 849.384587][T23592] loop4: detected capacity change from 0 to 33280 [ 849.491559][T23592] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 849.504326][T23592] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 850.779570][T21349] EXT4-fs (loop4): unmounting filesystem. [ 851.381150][T23640] wg1 speed is unknown, defaulting to 1000 [ 851.732796][T23640] dummy0 speed is unknown, defaulting to 1000 [ 851.750787][T23640] rxe_eth0 speed is unknown, defaulting to 1000 [ 854.057736][T23672] md/raid:md2: device ram5 operational as raid disk 1 [ 854.385230][T23693] net_ratelimit: 10 callbacks suppressed [ 854.385252][T23693] ip_tables: iptables: counters copy to user failed while replacing table [ 854.396375][T23672] md/raid:md2: not enough operational devices (2/3 failed) [ 854.779583][T23672] md/raid:md2: failed to run raid set. [ 854.793883][T23672] md: pers->run() failed ... [ 858.593886][T23759] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 859.553133][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 859.553149][ T26] audit: type=1326 audit(2000000723.866:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23800 comm="syz.7.5536" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1277fa94d9 code=0x7ffc0000 [ 859.661440][ T26] audit: type=1326 audit(2000000723.866:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23800 comm="syz.7.5536" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1277fa94d9 code=0x7ffc0000 [ 859.736890][ T26] audit: type=1326 audit(2000000723.866:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23800 comm="syz.7.5536" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1277fa94d9 code=0x7ffc0000 [ 859.835615][ T26] audit: type=1326 audit(2000000723.876:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23800 comm="syz.7.5536" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1277fa94d9 code=0x7ffc0000 [ 859.922720][ T26] audit: type=1326 audit(2000000723.886:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23800 comm="syz.7.5536" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1277fa94d9 code=0x7ffc0000 [ 860.008362][ T26] audit: type=1326 audit(2000000723.886:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23800 comm="syz.7.5536" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1277fa94d9 code=0x7ffc0000 [ 860.104403][ T26] audit: type=1326 audit(2000000723.886:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23800 comm="syz.7.5536" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1277fa94d9 code=0x7ffc0000 [ 860.203211][ T26] audit: type=1326 audit(2000000723.886:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23800 comm="syz.7.5536" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f1277fa94d9 code=0x7ffc0000 [ 860.296718][ T26] audit: type=1326 audit(2000000723.896:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23800 comm="syz.7.5536" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1277fa94d9 code=0x7ffc0000 [ 860.386604][ T26] audit: type=1326 audit(2000000723.896:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23800 comm="syz.7.5536" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1277fa94d9 code=0x7ffc0000 [ 861.198476][T23841] loop4: detected capacity change from 0 to 32896 [ 861.330340][T23841] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 861.378934][T23841] ext4 filesystem being mounted at /104/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 861.567305][T23841] EXT4-fs error (device loop4): dx_make_map:1328: inode #2: block 33: comm syz.4.5546: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 861.667847][T23841] EXT4-fs (loop4): Remounting filesystem read-only [ 861.684977][T23841] EXT4-fs error (device loop4) in do_split:2097: Corrupt filesystem [ 861.745060][T23841] EXT4-fs (loop4): Remounting filesystem read-only [ 861.752481][T23856] EXT4-fs error (device loop4): htree_dirblock_to_tree:1112: inode #2: block 33: comm syz.4.5546: bad entry in directory: inode out of bounds - offset=2012, inode=128, rec_len=36, size=1024 fake=1 [ 861.823231][T23856] EXT4-fs (loop4): Remounting filesystem read-only [ 862.004447][T21349] EXT4-fs (loop4): unmounting filesystem. [ 863.529412][T23887] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 863.672018][T23892] sch_tbf: burst 1024 is lower than device veth1_virt_wifi mtu (1514) ! [ 864.261396][T23900] sch_tbf: burst 1024 is lower than device veth1_virt_wifi mtu (1514) ! [ 867.211454][T23968] netlink: 'syz.2.5579': attribute type 2 has an invalid length. [ 867.220623][T23968] netlink: 11575 bytes leftover after parsing attributes in process `syz.2.5579'. [ 867.230870][T23968] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5579'. [ 868.411693][ T4362] kernel write not supported for file bpf-prog (pid: 4362 comm: kworker/1:7) [ 869.987113][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.993572][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.162812][T24047] netlink: 'syz.9.5600': attribute type 1 has an invalid length. [ 870.363438][T24047] device bond4 entered promiscuous mode [ 870.369540][T24047] 8021q: adding VLAN 0 to HW filter on device bond4 [ 870.466789][T24048] 8021q: adding VLAN 0 to HW filter on device bond5 [ 870.475598][T24048] bond4: (slave bond5): making interface the new active one [ 870.483340][T24048] device bond5 entered promiscuous mode [ 870.491266][T24048] bond4: (slave bond5): Enslaving as an active interface with an up link [ 870.503394][T16231] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready [ 871.239934][T24070] netlink: 11575 bytes leftover after parsing attributes in process `syz.4.5608'. [ 871.636893][T24079] netlink: 'syz.1.5611': attribute type 12 has an invalid length. [ 872.355763][T24106] loop4: detected capacity change from 0 to 1024 [ 875.484937][T24120] batman_adv: batadv0: Interface deactivated: gretap2 [ 875.627309][T24120] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 875.643149][T24120] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 875.672641][T24120] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 875.692811][T24120] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 876.695746][T24173] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5633'. [ 876.949122][T24184] kvm: pic: single mode not supported [ 876.949550][T24184] kvm: pic: single mode not supported [ 876.956875][T24184] kvm: pic: level sensitive irq not supported [ 876.976961][T24184] kvm: pic: level sensitive irq not supported [ 876.990819][T24184] kvm: pic: non byte write [ 877.009633][T24184] kvm: pic: non byte write [ 877.020752][T24184] kvm: pic: non byte write [ 877.035201][T24184] kvm: pic: non byte write [ 877.040207][T24184] kvm: pic: non byte write [ 877.055262][T24184] kvm: pic: non byte write [ 877.069293][T24184] kvm: pic: single mode not supported [ 877.069317][T24184] kvm: pic: level sensitive irq not supported [ 877.077417][T24184] kvm: pic: non byte write [ 877.099470][T24184] kvm: pic: non byte write [ 877.114579][T24184] kvm: pic: non byte write [ 877.120798][T24184] kvm: pic: non byte write [ 877.138770][ T26] kauditd_printk_skb: 31 callbacks suppressed [ 877.138786][ T26] audit: type=1326 audit(2000000741.456:1255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24187 comm="syz.9.5634" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f625c5a94d9 code=0x0 [ 879.679856][T24263] tipc: Started in network mode [ 879.697867][T24263] tipc: Node identity 4, cluster identity 4711 [ 879.723143][T24263] tipc: Node number set to 4 [ 879.911955][T24277] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5661'. [ 880.774863][T24301] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5666'. [ 881.721379][T24324] bond4: (slave bond5): Releasing backup interface [ 881.756322][T24324] device bond5 left promiscuous mode [ 881.790569][T24324] batman_adv: batadv0: Removing interface: gretap2 [ 881.817153][T24324] bond7: (slave geneve2): Releasing active interface [ 881.859311][T24324] bond8: (slave veth13): Releasing backup interface [ 881.935101][T24326] team0: Unable to change to the same mode the team is in [ 883.743685][T22766] rpcbind: server 127.0.0.1 not responding, timed out [ 884.447933][T24383] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 887.423295][ T4290] Bluetooth: hci2: command 0x0406 tx timeout [ 887.503568][T24461] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5711'. [ 888.663943][T24501] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 888.781516][T24505] jffs2: notice: (24505) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 890.200759][T24546] netlink: 'syz.1.5735': attribute type 1 has an invalid length. [ 890.263873][T24546] 8021q: adding VLAN 0 to HW filter on device bond10 [ 890.303804][T24550] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 890.404850][T24550] bond10: (slave batadv0): making interface the new active one [ 890.451577][T24550] bond10: (slave batadv0): Enslaving as an active interface with an up link [ 890.513495][T22766] IPv6: ADDRCONF(NETDEV_CHANGE): bond10: link becomes ready [ 890.679845][T24546] bond10: (slave batadv0): Releasing active interface [ 890.736626][T24546] bond9: (slave geneve4): Releasing active interface [ 891.876134][T24606] netlink: 52 bytes leftover after parsing attributes in process `syz.9.5742'. [ 892.015226][T24607] netlink: 76 bytes leftover after parsing attributes in process `syz.9.5742'. [ 892.141907][T24607] netlink: 52 bytes leftover after parsing attributes in process `syz.9.5742'. [ 892.334248][T24611] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5747'. [ 892.359083][T24622] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 892.415659][T24611] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 892.439571][T24622] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 892.517876][T24614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 894.053522][T24664] wg1 speed is unknown, defaulting to 1000 [ 894.437847][T24674] ip_tables: iptables: counters copy to user failed while replacing table [ 894.505953][T24664] dummy0 speed is unknown, defaulting to 1000 [ 894.554259][T24664] rxe_eth0 speed is unknown, defaulting to 1000 [ 895.401138][T24705] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 895.641431][T24710] syz.2.5775: attempt to access beyond end of device [ 895.641431][T24710] loop4: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 895.701245][T24710] EXT4-fs (loop4): unable to read superblock [ 896.209809][T24731] 9pnet_fd: Insufficient options for proto=fd [ 896.250830][T24733] batman_adv: batadv0: Adding interface: veth0 [ 896.267958][T24733] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 896.318953][T24733] batman_adv: batadv0: Interface activated: veth0 [ 896.347593][T24733] batman_adv: batadv0: Interface deactivated: veth0 [ 896.366963][T24733] batman_adv: batadv0: Removing interface: veth0 [ 897.634423][T24784] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5800'. [ 898.052892][T24797] (unnamed net_device) (uninitialized): up delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 898.121714][T24797] 8021q: adding VLAN 0 to HW filter on device bond1 [ 898.217006][T24800] device bridge1 entered promiscuous mode [ 898.227577][T24800] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 898.324081][T22739] bond1: (slave bridge1): link status definitely up, 0 Mbps full duplex [ 898.361915][T22739] bond1: active interface up! [ 898.375741][ T4836] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 902.399492][T24880] loop4: detected capacity change from 0 to 34816 [ 902.500669][T24880] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 902.615608][T24880] EXT4-fs error (device loop4): ext4_iget_extra_inode:4766: inode #12: comm syz.4.5827: corrupted in-inode xattr [ 902.710099][T24888] overlayfs: failed to clone lowerpath [ 902.731456][T24892] EXT4-fs error (device loop4): ext4_iget_extra_inode:4766: inode #12: comm syz.4.5827: corrupted in-inode xattr [ 902.905103][T21349] EXT4-fs (loop4): unmounting filesystem. [ 903.115169][ T26] audit: type=1326 audit(2000000767.436:1256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24900 comm="syz.2.5831" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7c1ba94d9 code=0x7ffc0000 [ 903.152606][ T26] audit: type=1326 audit(2000000767.436:1257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24900 comm="syz.2.5831" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7c1ba94d9 code=0x7ffc0000 [ 903.186114][ T26] audit: type=1326 audit(2000000767.466:1258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24900 comm="syz.2.5831" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff7c1ba94d9 code=0x7ffc0000 [ 903.241522][ T26] audit: type=1326 audit(2000000767.466:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24900 comm="syz.2.5831" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7c1ba94d9 code=0x7ffc0000 [ 903.267952][ C1] vkms_vblank_simulate: vblank timer overrun [ 903.309054][ T26] audit: type=1326 audit(2000000767.466:1260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24900 comm="syz.2.5831" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff7c1ba94d9 code=0x7ffc0000 [ 903.333264][ C1] vkms_vblank_simulate: vblank timer overrun [ 903.383187][ T26] audit: type=1326 audit(2000000767.466:1261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24900 comm="syz.2.5831" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7c1ba94d9 code=0x7ffc0000 [ 903.433181][ T26] audit: type=1326 audit(2000000767.466:1262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24900 comm="syz.2.5831" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7c1ba94d9 code=0x7ffc0000 [ 903.459883][ T26] audit: type=1326 audit(2000000767.466:1263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24900 comm="syz.2.5831" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7ff7c1ba94d9 code=0x7ffc0000 [ 903.483937][ C1] vkms_vblank_simulate: vblank timer overrun [ 903.500641][ T26] audit: type=1326 audit(2000000767.466:1264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24900 comm="syz.2.5831" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7c1ba94d9 code=0x7ffc0000 [ 903.536051][ T26] audit: type=1326 audit(2000000767.466:1265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24900 comm="syz.2.5831" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7c1ba94d9 code=0x7ffc0000 [ 903.561445][T24911] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5832'. [ 904.326275][T24930] loop4: detected capacity change from 0 to 164 [ 905.030967][T24940] ip_tables: iptables: counters copy to user failed while replacing table [ 906.033796][T24966] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5852'. [ 906.053931][T24966] netlink: 43 bytes leftover after parsing attributes in process `syz.1.5852'. [ 906.071759][T24966] netlink: 'syz.1.5852': attribute type 6 has an invalid length. [ 906.083192][T24966] netlink: 'syz.1.5852': attribute type 5 has an invalid length. [ 906.092581][T24966] netlink: 43 bytes leftover after parsing attributes in process `syz.1.5852'. [ 908.742206][T25047] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 910.481782][T25065] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5879'. [ 911.019264][T25093] ip_tables: iptables: counters copy to user failed while replacing table [ 911.049317][T25093] device syzkaller1 entered promiscuous mode [ 913.421192][T25171] netlink: 1319 bytes leftover after parsing attributes in process `syz.1.5899'. [ 914.800060][T25200] v: renamed from macvlan1 [ 915.247117][T25218] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5910'. [ 915.527601][T25230] ip_tables: iptables: counters copy to user failed while replacing table [ 915.777653][T25224] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5910'. [ 915.868695][T25237] netlink: 'syz.4.5916': attribute type 1 has an invalid length. [ 915.962234][T25238] bond2: Error: No native XDP support for the current bonding mode [ 916.238367][T25257] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5924'. [ 916.428739][T25257] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5924'. [ 916.799641][T25268] md: couldn't update array info. -22 [ 916.889101][T25274] md: could not open device unknown-block(1,19). [ 916.941291][T25274] md: md_import_device returned -16 [ 918.570624][T25268] md9: detected capacity change from 4096 to 0 [ 918.657870][T25268] md: md9 stopped. [ 918.673963][ T4362] kernel write not supported for file bpf-prog (pid: 4362 comm: kworker/1:7) [ 921.407478][T25380] netlink: 'syz.7.5952': attribute type 10 has an invalid length. [ 921.463141][T25380] team0: Failed to send options change via netlink (err -105) [ 921.484858][T25380] team0: Port device geneve1 added [ 922.106914][T25395] md/raid:md7: device ram15 operational as raid disk 1 [ 922.299241][T25395] md/raid:md7: not enough operational devices (2/3 failed) [ 922.558962][T25395] md/raid:md7: failed to run raid set. [ 922.584896][T25395] md: pers->run() failed ... [ 922.878015][T25399] md: md7 stopped. [ 923.204517][T25419] tipc: Failed to remove unknown binding: 66,0,0/0:1453148060/1453148061 [ 923.244115][T25419] tipc: Failed to remove unknown binding: 66,0,0/0:1453148060/1453148061 [ 923.414696][T25425] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5965'. [ 923.457486][T25425] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5965'. [ 924.003113][T25442] syz.7.5971 (25442) used greatest stack depth: 18096 bytes left [ 927.857600][T25473] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5982'. [ 927.906212][T25474] ip_tables: iptables: counters copy to user failed while replacing table [ 928.608751][T25495] netlink: 'syz.4.5987': attribute type 10 has an invalid length. [ 928.726112][T25495] team0: Failed to send options change via netlink (err -105) [ 928.734924][T25495] team0: Port device geneve1 added [ 929.737954][T25510] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5995'. [ 929.906650][T25513] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5996'. [ 929.935849][T25513] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5996'. [ 929.978028][T25513] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5996'. [ 930.129166][T25516] tipc: Failed to remove unknown binding: 66,1,1/2886997162:2940487004/2940487006 [ 930.170200][T25516] tipc: Failed to remove unknown binding: 66,1,1/2886997162:2940487004/2940487006 [ 930.199312][T25516] tipc: Failed to remove unknown binding: 66,1,1/2886997162:2940487004/2940487006 [ 931.000011][T25532] ip_tables: iptables: counters copy to user failed while replacing table [ 931.052448][T25537] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6005'. [ 931.427354][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.433846][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.726273][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 931.726294][ T26] audit: type=1326 audit(2000000796.046:1269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25546 comm="syz.2.6009" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7c1ba94d9 code=0x7ffc0000 [ 931.817529][ T26] audit: type=1326 audit(2000000796.046:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25546 comm="syz.2.6009" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7c1ba94d9 code=0x7ffc0000 [ 931.891225][ T26] audit: type=1326 audit(2000000796.046:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25546 comm="syz.2.6009" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7c1ba94d9 code=0x7ffc0000 [ 931.965494][T22767] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 932.003148][ T26] audit: type=1326 audit(2000000796.076:1272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25546 comm="syz.2.6009" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7ff7c1ba94d9 code=0x7ffc0000 [ 932.103388][ T26] audit: type=1326 audit(2000000796.076:1273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25546 comm="syz.2.6009" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7c1ba94d9 code=0x7ffc0000 [ 932.173679][ T26] audit: type=1326 audit(2000000796.076:1274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25546 comm="syz.2.6009" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7c1ba94d9 code=0x7ffc0000 [ 932.253485][ T26] audit: type=1326 audit(2000000796.076:1275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25546 comm="syz.2.6009" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7c1ba94d9 code=0x7ffc0000 [ 932.356758][ T26] audit: type=1326 audit(2000000796.076:1276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25546 comm="syz.2.6009" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7c1ba94d9 code=0x7ffc0000 [ 932.476523][ T26] audit: type=1326 audit(2000000796.076:1277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25546 comm="syz.2.6009" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7ff7c1ba94d9 code=0x7ffc0000 [ 932.572765][ T26] audit: type=1326 audit(2000000796.076:1278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25546 comm="syz.2.6009" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7c1ba94d9 code=0x7ffc0000 [ 933.945186][T25583] wg1 speed is unknown, defaulting to 1000 [ 934.049639][T25583] dummy0 speed is unknown, defaulting to 1000 [ 934.056965][T25583] rxe_eth0 speed is unknown, defaulting to 1000 [ 937.071946][T25643] syz.7.6034: attempt to access beyond end of device [ 937.071946][T25643] loop14: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 937.150340][T25643] EXT4-fs (loop14): unable to read superblock [ 937.334058][T25648] tipc: Failed to remove unknown binding: 66,1,1/0:521516407/521516409 [ 937.432015][T25648] tipc: Failed to remove unknown binding: 66,1,1/0:521516407/521516409 [ 937.493493][T25648] tipc: Failed to remove unknown binding: 66,1,1/0:521516407/521516409 [ 939.951235][T25687] (unnamed net_device) (uninitialized): up delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 939.986668][T25683] netlink: 156 bytes leftover after parsing attributes in process `syz.7.6049'. [ 940.054324][T25689] device bridge4 entered promiscuous mode [ 940.156597][T25689] bond11: (slave bridge4): Enslaving as an active interface with an up link [ 942.472748][T25752] overlayfs: failed to clone lowerpath [ 942.623356][ T4355] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 942.813508][ T4355] usb 5-1: Using ep0 maxpacket: 32 [ 942.821239][ T4355] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 942.854920][ T4355] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 942.896295][ T4355] usb 5-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice= 0.40 [ 942.923093][ T4355] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 942.941570][ T4355] usb 5-1: Product: syz [ 942.951703][ T4355] usb 5-1: Manufacturer: syz [ 942.963109][ T4355] usb 5-1: SerialNumber: syz [ 943.070999][T25779] netlink: 'syz.7.6081': attribute type 11 has an invalid length. [ 943.206951][ T4355] snd-usb-audio: probe of 5-1:1.0 failed with error -71 [ 943.247314][ T4355] snd-usb-audio: probe of 5-1:1.1 failed with error -71 [ 943.272284][ T4355] usb 5-1: USB disconnect, device number 10 [ 949.181278][T25865] ip_tables: iptables: counters copy to user failed while replacing table [ 949.318342][T25879] bridge0: port 1(ip6gretap0) entered blocking state [ 949.337073][T25879] bridge0: port 1(ip6gretap0) entered disabled state [ 949.345833][T25879] device ip6gretap0 entered promiscuous mode [ 949.358477][T25879] bridge0: port 2(team0) entered blocking state [ 949.365487][T25879] bridge0: port 2(team0) entered disabled state [ 949.373731][T25879] device team0 entered promiscuous mode [ 949.379611][T25879] device geneve1 entered promiscuous mode [ 949.677959][T25885] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6122'. [ 949.760694][T25885] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6122'. [ 949.903348][T25888] netlink: 168 bytes leftover after parsing attributes in process `syz.2.6124'. [ 950.160640][T25900] block device autoloading is deprecated and will be removed. [ 950.423195][T25913] tipc: Failed to remove unknown binding: 66,0,0/0:1795314550/1795314552 [ 950.452190][T25913] tipc: Failed to remove unknown binding: 66,0,0/0:1795314550/1795314551 [ 950.491499][T25918] tipc: Failed to remove unknown binding: 66,0,0/0:1795314550/1795314552 [ 950.516750][T25918] tipc: Failed to remove unknown binding: 66,0,0/0:1795314550/1795314551 [ 952.387699][T25953] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 954.172709][ T26] kauditd_printk_skb: 37 callbacks suppressed [ 954.172726][ T26] audit: type=1326 audit(2000000818.486:1316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25966 comm="syz.4.6151" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b4cda94d9 code=0x7ffc0000 [ 954.372034][ T26] audit: type=1326 audit(2000000818.496:1317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25966 comm="syz.4.6151" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b4cda94d9 code=0x7ffc0000 [ 954.452077][ T26] audit: type=1326 audit(2000000818.526:1318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25966 comm="syz.4.6151" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b4cda94d9 code=0x7ffc0000 [ 954.539013][ T26] audit: type=1326 audit(2000000818.526:1319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25966 comm="syz.4.6151" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b4cda94d9 code=0x7ffc0000 [ 954.642865][ T26] audit: type=1326 audit(2000000818.526:1320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25966 comm="syz.4.6151" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f7b4cda94d9 code=0x7ffc0000 [ 954.718216][ T26] audit: type=1326 audit(2000000818.526:1321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25966 comm="syz.4.6151" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b4cda94d9 code=0x7ffc0000 [ 954.784755][ T26] audit: type=1326 audit(2000000818.526:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25966 comm="syz.4.6151" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b4cda94d9 code=0x7ffc0000 [ 954.813552][ T26] audit: type=1326 audit(2000000818.526:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25966 comm="syz.4.6151" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b4cda94d9 code=0x7ffc0000 [ 954.894739][ T26] audit: type=1326 audit(2000000818.526:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25966 comm="syz.4.6151" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b4cda94d9 code=0x7ffc0000 [ 955.007702][ T26] audit: type=1326 audit(2000000818.546:1325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25966 comm="syz.4.6151" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7f7b4cda94d9 code=0x7ffc0000 [ 955.231069][T25996] netlink: 84 bytes leftover after parsing attributes in process `syz.2.6158'. [ 955.275938][T25999] jffs2: notice: (25999) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 955.481221][T26009] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6162'. [ 959.830434][T26112] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 960.180580][T26127] ip6t_REJECT: ECHOREPLY is not supported [ 961.141930][T26138] fuse: Unknown parameter '0x0000000000000003' [ 961.196831][T26140] netlink: 'syz.7.6190': attribute type 2 has an invalid length. [ 961.740318][T26161] wg1 speed is unknown, defaulting to 1000 [ 961.832617][T26166] netlink: 'syz.4.6197': attribute type 11 has an invalid length. [ 961.981840][T26168] loop4: detected capacity change from 0 to 33280 [ 962.003536][T26168] EXT4-fs (loop4): Test dummy encryption mode enabled [ 962.065025][T26168] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 962.100878][T26161] dummy0 speed is unknown, defaulting to 1000 [ 962.150163][T26161] rxe_eth0 speed is unknown, defaulting to 1000 [ 963.440138][T26187] overlayfs: failed to clone upperpath [ 963.549799][T21349] EXT4-fs (loop4): unmounting filesystem. [ 964.995973][T26216] netlink: 'syz.4.6213': attribute type 1 has an invalid length. [ 965.032077][T26216] 8021q: adding VLAN 0 to HW filter on device bond3 [ 965.154810][T26216] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 965.165283][ T26] kauditd_printk_skb: 15 callbacks suppressed [ 965.165300][ T26] audit: type=1326 audit(2000000829.486:1341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26218 comm="syz.2.6214" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7c1ba94d9 code=0x7fc00000 [ 965.223975][ T4903] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 965.329447][T26224] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6213'. [ 965.379885][T26224] device bridge2 entered promiscuous mode [ 965.411837][T26224] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 965.949693][ T26] audit: type=1326 audit(2000000830.266:1342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26218 comm="syz.2.6214" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7ff7c1ba94d9 code=0x7fc00000 [ 966.707270][T26243] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 966.734842][T26243] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 966.816261][T26243] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 966.827630][T26243] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 966.839344][T26243] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 966.853982][T26243] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 966.875729][T26243] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 966.894859][T26243] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 966.902812][T26243] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 966.911355][T26243] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 966.923714][T26243] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 966.935931][T26243] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 966.949488][T26243] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 966.957870][T26243] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 966.976042][T26243] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 967.007468][T26243] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 967.467252][T26272] x_tables: ip6_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 968.097307][T26283] loop4: detected capacity change from 0 to 1024 [ 970.073172][T26301] netlink: 14 bytes leftover after parsing attributes in process `syz.9.6241'. [ 970.082321][T26301] batman_adv: batadv0: Interface deactivated: dummy0 [ 970.680087][T26319] loop4: detected capacity change from 0 to 33280 [ 971.060052][T26319] EXT4-fs error (device loop4): ext4_orphan_get:1409: inode #15: comm syz.4.6249: inode has both inline data and extents flags [ 971.113485][T26319] EXT4-fs error (device loop4): ext4_orphan_get:1414: comm syz.4.6249: couldn't read orphan inode 15 (err -117) [ 971.214486][T26319] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 971.265272][T26319] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 7952 vs 220 free clusters [ 971.298663][T26301] batman_adv: batadv0: Removing interface: dummy0 [ 971.455050][T21349] EXT4-fs (loop4): unmounting filesystem. [ 971.779976][ T4295] Bluetooth: hci2: unexpected cc 0x1407 length: 11 > 9 [ 973.975177][ T26] audit: type=1326 audit(2000000838.286:1344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26380 comm="syz.1.6265" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc12fa94d9 code=0x7ffc0000 [ 974.318308][ T26] audit: type=1326 audit(2000000838.326:1345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26380 comm="syz.1.6265" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc12fa94d9 code=0x7ffc0000 [ 974.462776][ T26] audit: type=1326 audit(2000000838.256:1343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26380 comm="syz.1.6265" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc12fa94d9 code=0x7ffc0000 [ 974.506699][ T26] audit: type=1326 audit(2000000838.346:1346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26380 comm="syz.1.6265" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc12fa94d9 code=0x7ffc0000 [ 974.639185][ T26] audit: type=1326 audit(2000000838.346:1347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26380 comm="syz.1.6265" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fbc12fa94d9 code=0x7ffc0000 [ 974.703713][ T26] audit: type=1326 audit(2000000838.346:1348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26380 comm="syz.1.6265" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc12fa94d9 code=0x7ffc0000 [ 974.778612][ T26] audit: type=1326 audit(2000000838.356:1349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26380 comm="syz.1.6265" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc12fa94d9 code=0x7ffc0000 [ 974.822671][ T26] audit: type=1326 audit(2000000838.366:1350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26380 comm="syz.1.6265" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc12fa94d9 code=0x7ffc0000 [ 974.847246][ T26] audit: type=1326 audit(2000000838.366:1351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26380 comm="syz.1.6265" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7fbc12fa94d9 code=0x7ffc0000 [ 974.872148][ T26] audit: type=1326 audit(2000000838.366:1352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26380 comm="syz.1.6265" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc12fa94d9 code=0x7ffc0000 [ 975.075242][T26393] netlink: 'syz.2.6269': attribute type 7 has an invalid length. [ 975.096272][T26393] netlink: 'syz.2.6269': attribute type 7 has an invalid length. [ 976.333534][T26424] netlink: 'syz.4.6282': attribute type 1 has an invalid length. [ 976.378905][T26424] device bond4 entered promiscuous mode [ 976.386294][T26424] 8021q: adding VLAN 0 to HW filter on device bond4 [ 976.510554][T26430] ip_tables: iptables: counters copy to user failed while replacing table [ 976.552657][T26424] 8021q: adding VLAN 0 to HW filter on device bond4 [ 976.602822][T26424] bond4: (slave wireguard0): The slave device specified does not support setting the MAC address [ 976.648774][T26424] bond4: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 976.723086][T26424] bond4: (slave wireguard0): making interface the new active one [ 976.788637][T26424] device wireguard0 entered promiscuous mode [ 976.829683][T26424] bond4: (slave wireguard0): Enslaving as an active interface with an up link [ 976.903466][T22739] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready [ 977.197255][T26439] futex_wake_op: syz.4.6286 tries to shift op by 144; fix this program [ 978.579064][T26450] wg1 speed is unknown, defaulting to 1000 [ 978.655639][T26450] dummy0 speed is unknown, defaulting to 1000 [ 978.662519][T26450] rxe_eth0 speed is unknown, defaulting to 1000 [ 979.163651][T26455] loop4: detected capacity change from 0 to 2048 [ 979.211429][T26455] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 979.297771][T26463] Could not find key with description: [0123456789abcdef] [ 979.343107][T26463] process_request_key_err: No key [ 979.363059][T26463] Could not find valid key in user session keyring for sig specified in mount option: [0123456789abcdef] [ 979.473375][T26463] One or more global auth toks could not properly register; rc = [-2] [ 979.481765][T26463] Error parsing options; rc = [-2] [ 980.447062][T26487] device lo entered promiscuous mode [ 980.461561][T26487] device tunl0 entered promiscuous mode [ 980.472186][T26487] device gre0 entered promiscuous mode [ 980.493139][ T4355] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 980.501277][T26487] device gretap0 entered promiscuous mode [ 980.515755][T26487] device erspan0 entered promiscuous mode [ 980.532097][T26487] device ip_vti0 entered promiscuous mode [ 980.546139][T26487] device ip6_vti0 entered promiscuous mode [ 980.552419][T26487] device sit0 entered promiscuous mode [ 980.585956][T26487] device ip6tnl0 entered promiscuous mode [ 980.608285][T26487] device ip6gre0 entered promiscuous mode [ 980.633122][T26487] device ip6gretap0 entered promiscuous mode [ 980.648697][T26487] device bond0 entered promiscuous mode [ 980.658381][T26487] device team0 entered promiscuous mode [ 980.671021][T26487] device nlmon0 entered promiscuous mode [ 980.677443][T26487] device caif0 entered promiscuous mode [ 980.683539][ T4355] usb 5-1: Using ep0 maxpacket: 16 [ 980.687845][ T4355] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 980.701788][T26487] device batadv0 entered promiscuous mode [ 980.718049][ T4355] usb 5-1: config 0 has no interfaces? [ 980.726592][T26487] device veth0 entered promiscuous mode [ 980.733746][ T4355] usb 5-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 980.748030][T26487] device veth1 entered promiscuous mode [ 980.769699][ T4355] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 980.774308][T26487] device wg1 entered promiscuous mode [ 980.807625][ T4355] usb 5-1: config 0 descriptor?? [ 980.809672][T26487] device wg2 entered promiscuous mode [ 980.850714][T26487] device veth0_to_bridge entered promiscuous mode [ 980.887523][T26487] device bridge_slave_0 entered promiscuous mode [ 980.914584][T26487] device veth1_to_bridge entered promiscuous mode [ 980.951808][T26487] device bridge_slave_1 entered promiscuous mode [ 980.983186][T26487] device veth0_to_bond entered promiscuous mode [ 981.006599][T26487] device bond_slave_0 entered promiscuous mode [ 981.033877][T26487] device veth1_to_bond entered promiscuous mode [ 981.040448][T26487] device bond_slave_1 entered promiscuous mode [ 981.082918][T26487] device veth0_to_team entered promiscuous mode [ 981.111001][T26487] device team_slave_0 entered promiscuous mode [ 981.122469][T26481] loop4: detected capacity change from 0 to 2048 [ 981.158775][T26487] device veth1_to_team entered promiscuous mode [ 981.173252][T26487] device team_slave_1 entered promiscuous mode [ 981.191039][T26481] loop4: p2 < > p4 [ 981.197860][T26487] device veth0_to_batadv entered promiscuous mode [ 981.215314][T26481] loop4: p4 size 262144 extends beyond EOD, truncated [ 981.223474][T26487] device batadv_slave_0 entered promiscuous mode [ 981.243875][T26487] device xfrm0 entered promiscuous mode [ 981.260867][ T4396] usb 5-1: USB disconnect, device number 11 [ 981.321292][T26487] device veth0_to_hsr entered promiscuous mode [ 981.359913][T26487] device veth1_to_hsr entered promiscuous mode [ 981.385672][T26487] device hsr0 entered promiscuous mode [ 981.413754][T26487] device veth1_virt_wifi entered promiscuous mode [ 981.420423][T26487] device veth0_virt_wifi entered promiscuous mode [ 981.477971][T26487] device virt_wifi0 entered promiscuous mode [ 981.515821][T26487] device veth1_vlan entered promiscuous mode [ 981.535280][T26487] device vlan0 entered promiscuous mode [ 981.559260][T26487] device vlan1 entered promiscuous mode [ 981.584842][T26487] device macvlan1 entered promiscuous mode [ 981.617792][T26487] device ipvtap0 entered promiscuous mode [ 981.649119][T26487] device ipvlan0 entered promiscuous mode [ 981.674465][T26487] device ipvlan1 entered promiscuous mode [ 981.700196][T26487] device macvtap0 entered promiscuous mode [ 981.729179][T26487] device macsec0 entered promiscuous mode [ 981.777576][T26487] device geneve0 entered promiscuous mode [ 981.811242][T26487] device geneve1 entered promiscuous mode [ 981.853610][T26487] device netdevsim0 entered promiscuous mode [ 981.859968][T26487] device netdevsim1 entered promiscuous mode [ 981.884803][T26487] device netdevsim2 entered promiscuous mode [ 981.902749][T26487] device netdevsim3 entered promiscuous mode [ 981.939301][T26487] device wlan0 entered promiscuous mode [ 981.954757][T26487] device wlan1 entered promiscuous mode [ 981.960567][T26487] device gretap1 entered promiscuous mode [ 981.987422][T26487] device veth2 entered promiscuous mode [ 982.018953][T26487] device veth3 entered promiscuous mode [ 982.039855][T26487] device veth4 entered promiscuous mode [ 982.045867][T26487] device veth5 entered promiscuous mode [ 982.082416][T26487] device bond1 entered promiscuous mode [ 982.089845][T26487] device veth6 entered promiscuous mode [ 982.117122][T26487] device veth7 entered promiscuous mode [ 982.133310][T26487] device veth8 entered promiscuous mode [ 982.147645][T26487] device veth9 entered promiscuous mode [ 982.163852][T26487] device bridge1 entered promiscuous mode [ 982.169772][T26487] device bridge2 entered promiscuous mode [ 982.193401][T26487] device veth10 entered promiscuous mode [ 982.210691][T26487] device veth11 entered promiscuous mode [ 982.229525][T26487] device syztnl1 entered promiscuous mode [ 982.244169][T26487] device bond5 entered promiscuous mode [ 982.258317][T26487] device bond6 entered promiscuous mode [ 982.281988][T26487] device gretap2 entered promiscuous mode [ 982.296203][T26487] device bond7 entered promiscuous mode [ 982.310122][T26487] device vlan2 entered promiscuous mode [ 982.324534][T26487] device geneve2 entered promiscuous mode [ 982.338589][T26487] device bond8 entered promiscuous mode [ 982.352540][T26487] device veth12 entered promiscuous mode [ 982.369062][T26487] device veth13 entered promiscuous mode [ 982.386209][T26487] device syzkaller0 entered promiscuous mode [ 982.420680][T26487] device dvmrp6 entered promiscuous mode [ 982.500825][T26510] ------------[ cut here ]------------ [ 982.507946][T26510] WARNING: CPU: 0 PID: 26510 at net/mac80211/chan.c:2038 ieee80211_link_release_channel+0x150/0x180 [ 982.518863][T26510] Modules linked in: [ 982.522986][T26510] CPU: 0 PID: 26510 Comm: syz.4.6307 Not tainted syzkaller #0 [ 982.530497][T26510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 982.540808][T26510] RIP: 0010:ieee80211_link_release_channel+0x150/0x180 [ 982.547998][T26510] Code: 7c 2d 00 00 74 08 48 89 df e8 ec f7 14 f8 bf 18 1e 00 00 48 03 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 65 6b 81 00 e8 00 94 c3 f7 <0f> 0b eb c5 48 c7 c1 34 76 22 8f 80 e1 07 80 c1 03 38 c1 0f 8c 51 [ 982.568093][T26510] RSP: 0018:ffffc90003387250 EFLAGS: 00010283 [ 982.574389][T26510] RAX: ffffffff89bed4a0 RBX: ffff888055369588 RCX: 0000000000080000 [ 982.582416][T26510] RDX: ffffc90015849000 RSI: 00000000000066cf RDI: 00000000000066d0 [ 982.590576][T26510] RBP: 0000000000000000 R08: ffffffff8f22416f R09: 1ffffffff1e4482d [ 982.598689][T26510] R10: dffffc0000000000 R11: fffffbfff1e4482e R12: ffff88805536aa90 [ 982.606810][T26510] R13: 1ffff1100aa6d2b1 R14: ffff88805536a208 R15: dffffc0000000000 [ 982.614935][T26510] FS: 00007f7b4dc476c0(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 982.624330][T26510] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 982.630969][T26510] CR2: 00002000001f2030 CR3: 00000000811e7000 CR4: 00000000003506f0 [ 982.639069][T26510] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 982.647172][T26510] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 982.655271][T26510] Call Trace: [ 982.658604][T26510] [ 982.661615][T26510] ieee80211_if_change_type+0x205/0xa80 [ 982.667321][T26510] ? cfg80211_mgmt_registrations_update_wk+0xa0/0xa0 [ 982.674257][T26510] ? cfg80211_mlme_purge_registrations+0x1d0/0x200 [ 982.680854][T26510] ieee80211_change_iface+0x58/0x4c0 [ 982.686328][T26510] cfg80211_change_iface+0x786/0xf10 [ 982.691696][T26510] nl80211_set_interface+0x601/0x860 [ 982.697181][T26510] ? nl80211_dump_interface+0x560/0x560 [ 982.702834][T26510] genl_family_rcv_msg_doit+0x22f/0x350 [ 982.708641][T26510] ? end_current_label_crit_section+0x170/0x170 [ 982.715087][T26510] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 982.721070][T26510] ? bpf_lsm_capable+0x5/0x10 [ 982.725989][T26510] ? security_capable+0x85/0xb0 [ 982.731111][T26510] genl_rcv_msg+0x601/0x790 [ 982.735793][T26510] ? genl_bind+0x360/0x360 [ 982.740278][T26510] ? nl80211_dump_interface+0x560/0x560 [ 982.745987][T26510] netlink_rcv_skb+0x1ef/0x440 [ 982.750837][T26510] ? genl_bind+0x360/0x360 [ 982.755425][T26510] ? netlink_ack+0x1160/0x1160 [ 982.760267][T26510] ? down_read+0x1a8/0x2d0 [ 982.764867][T26510] genl_rcv+0x24/0x40 [ 982.768925][T26510] netlink_unicast+0x7ad/0x920 [ 982.773837][T26510] netlink_sendmsg+0x8ad/0xbd0 [ 982.778777][T26510] ? netlink_getsockopt+0x550/0x550 [ 982.784295][T26510] ? apparmor_socket_sendmsg+0x8a/0x330 [ 982.789923][T26510] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 982.795522][T26510] ? security_socket_sendmsg+0x7c/0xa0 [ 982.801047][T26510] ? netlink_getsockopt+0x550/0x550 [ 982.806510][T26510] ____sys_sendmsg+0x5ed/0x9a0 [ 982.811356][T26510] ? __sys_sendmsg_sock+0x30/0x30 [ 982.816517][T26510] ? __import_iovec+0x306/0x510 [ 982.821496][T26510] ? import_iovec+0x6f/0xa0 [ 982.826139][T26510] ___sys_sendmsg+0x2a2/0x360 [ 982.831021][T26510] ? __lock_acquire+0x7ea0/0x7ea0 [ 982.836251][T26510] ? __sys_sendmsg+0x2a0/0x2a0 [ 982.841171][T26510] __se_sys_sendmsg+0x1c3/0x2b0 [ 982.846210][T26510] ? __x64_sys_sendmsg+0x80/0x80 [ 982.851244][T26510] ? lockdep_hardirqs_on+0x94/0x140 [ 982.856612][T26510] do_syscall_64+0x4c/0xa0 [ 982.861104][T26510] ? clear_bhb_loop+0x60/0xb0 [ 982.866011][T26510] ? clear_bhb_loop+0x60/0xb0 [ 982.870792][T26510] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 982.876824][T26510] RIP: 0033:0x7f7b4cda94d9 [ 982.881401][T26510] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 982.901554][T26510] RSP: 002b:00007f7b4dc47028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 982.910193][T26510] RAX: ffffffffffffffda RBX: 00007f7b4d026090 RCX: 00007f7b4cda94d9 [ 982.918339][T26510] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000003 [ 982.926462][T26510] RBP: 00007f7b4ce3804e R08: 0000000000000000 R09: 0000000000000000 [ 982.934833][T26510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 982.943174][T26510] R13: 00007f7b4d026128 R14: 00007f7b4d026090 R15: 00007ffd4fc274b8 [ 982.951283][T26510] [ 982.954491][T26510] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 982.961957][T26510] CPU: 0 PID: 26510 Comm: syz.4.6307 Not tainted syzkaller #0 [ 982.969463][T26510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 982.979651][T26510] Call Trace: [ 982.982957][T26510] [ 982.985960][T26510] dump_stack_lvl+0x188/0x24e [ 982.990739][T26510] ? memcpy+0x3c/0x60 [ 982.994749][T26510] ? show_regs_print_info+0x12/0x12 [ 982.999989][T26510] ? load_image+0x410/0x410 [ 983.004531][T26510] panic+0x2d3/0x710 [ 983.008456][T26510] ? bpf_jit_dump+0xd0/0xd0 [ 983.013017][T26510] __warn+0x2f8/0x4f0 [ 983.017047][T26510] ? ieee80211_link_release_channel+0x150/0x180 [ 983.023324][T26510] ? ieee80211_link_release_channel+0x150/0x180 [ 983.029617][T26510] report_bug+0x2ba/0x4f0 [ 983.034001][T26510] ? ieee80211_link_release_channel+0x150/0x180 [ 983.040295][T26510] handle_bug+0x3a/0x70 [ 983.044478][T26510] exc_invalid_op+0x16/0x40 [ 983.049025][T26510] asm_exc_invalid_op+0x16/0x20 [ 983.053908][T26510] RIP: 0010:ieee80211_link_release_channel+0x150/0x180 [ 983.060790][T26510] Code: 7c 2d 00 00 74 08 48 89 df e8 ec f7 14 f8 bf 18 1e 00 00 48 03 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 65 6b 81 00 e8 00 94 c3 f7 <0f> 0b eb c5 48 c7 c1 34 76 22 8f 80 e1 07 80 c1 03 38 c1 0f 8c 51 [ 983.080504][T26510] RSP: 0018:ffffc90003387250 EFLAGS: 00010283 [ 983.086601][T26510] RAX: ffffffff89bed4a0 RBX: ffff888055369588 RCX: 0000000000080000 [ 983.094634][T26510] RDX: ffffc90015849000 RSI: 00000000000066cf RDI: 00000000000066d0 [ 983.102799][T26510] RBP: 0000000000000000 R08: ffffffff8f22416f R09: 1ffffffff1e4482d [ 983.110796][T26510] R10: dffffc0000000000 R11: fffffbfff1e4482e R12: ffff88805536aa90 [ 983.118790][T26510] R13: 1ffff1100aa6d2b1 R14: ffff88805536a208 R15: dffffc0000000000 [ 983.126796][T26510] ? ieee80211_link_release_channel+0x150/0x180 [ 983.133073][T26510] ieee80211_if_change_type+0x205/0xa80 [ 983.138648][T26510] ? cfg80211_mgmt_registrations_update_wk+0xa0/0xa0 [ 983.145358][T26510] ? cfg80211_mlme_purge_registrations+0x1d0/0x200 [ 983.152247][T26510] ieee80211_change_iface+0x58/0x4c0 [ 983.157876][T26510] cfg80211_change_iface+0x786/0xf10 [ 983.163471][T26510] nl80211_set_interface+0x601/0x860 [ 983.168817][T26510] ? nl80211_dump_interface+0x560/0x560 [ 983.174670][T26510] genl_family_rcv_msg_doit+0x22f/0x350 [ 983.180257][T26510] ? end_current_label_crit_section+0x170/0x170 [ 983.186530][T26510] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 983.192465][T26510] ? bpf_lsm_capable+0x5/0x10 [ 983.197168][T26510] ? security_capable+0x85/0xb0 [ 983.202055][T26510] genl_rcv_msg+0x601/0x790 [ 983.206625][T26510] ? genl_bind+0x360/0x360 [ 983.211072][T26510] ? nl80211_dump_interface+0x560/0x560 [ 983.217184][T26510] netlink_rcv_skb+0x1ef/0x440 [ 983.221982][T26510] ? genl_bind+0x360/0x360 [ 983.226554][T26510] ? netlink_ack+0x1160/0x1160 [ 983.231477][T26510] ? down_read+0x1a8/0x2d0 [ 983.236321][T26510] genl_rcv+0x24/0x40 [ 983.240340][T26510] netlink_unicast+0x7ad/0x920 [ 983.245140][T26510] netlink_sendmsg+0x8ad/0xbd0 [ 983.250926][T26510] ? netlink_getsockopt+0x550/0x550 [ 983.256191][T26510] ? apparmor_socket_sendmsg+0x8a/0x330 [ 983.261808][T26510] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 983.267148][T26510] ? security_socket_sendmsg+0x7c/0xa0 [ 983.272666][T26510] ? netlink_getsockopt+0x550/0x550 [ 983.277901][T26510] ____sys_sendmsg+0x5ed/0x9a0 [ 983.282707][T26510] ? __sys_sendmsg_sock+0x30/0x30 [ 983.287762][T26510] ? __import_iovec+0x306/0x510 [ 983.292673][T26510] ? import_iovec+0x6f/0xa0 [ 983.297218][T26510] ___sys_sendmsg+0x2a2/0x360 [ 983.301930][T26510] ? __lock_acquire+0x7ea0/0x7ea0 [ 983.306989][T26510] ? __sys_sendmsg+0x2a0/0x2a0 [ 983.311825][T26510] __se_sys_sendmsg+0x1c3/0x2b0 [ 983.316704][T26510] ? __x64_sys_sendmsg+0x80/0x80 [ 983.321835][T26510] ? lockdep_hardirqs_on+0x94/0x140 [ 983.327347][T26510] do_syscall_64+0x4c/0xa0 [ 983.331953][T26510] ? clear_bhb_loop+0x60/0xb0 [ 983.336934][T26510] ? clear_bhb_loop+0x60/0xb0 [ 983.342350][T26510] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 983.348453][T26510] RIP: 0033:0x7f7b4cda94d9 [ 983.352895][T26510] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 983.373873][T26510] RSP: 002b:00007f7b4dc47028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 983.383413][T26510] RAX: ffffffffffffffda RBX: 00007f7b4d026090 RCX: 00007f7b4cda94d9 [ 983.392608][T26510] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000003 [ 983.400840][T26510] RBP: 00007f7b4ce3804e R08: 0000000000000000 R09: 0000000000000000 [ 983.409020][T26510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 983.417119][T26510] R13: 00007f7b4d026128 R14: 00007f7b4d026090 R15: 00007ffd4fc274b8 [ 983.425232][T26510] [ 983.428858][T26510] Kernel Offset: disabled [ 983.433466][T26510] Rebooting in 86400 seconds..