last executing test programs: 23m58.849249746s ago: executing program 32 (id=83): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB='@0\f'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000009c0)={0x2c, &(0x7f00000006c0)={0x40, 0xb, 0x28, "4222d7350e8fa8644c28e73063a3f65be48d0e3a13c71311db90aa392d163f8cb83ff041feae3c7e"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f00000002c0)={0x20, 0x9, 0x31, "39253b3d2fee8b9ac727b8f8121e90f96656baab0a0211c512b2aabd839ad6607a323abd920595889a0ee4d1968099bcbd"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 23m19.342349004s ago: executing program 33 (id=486): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r0, 0x0) r1 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x35, 0xffffffffffffffff) keyctl$describe(0x6, r1, &(0x7f00000020c0)=""/4093, 0xffd) 21m54.671911197s ago: executing program 34 (id=1219): io_uring_setup(0x661d, &(0x7f0000000140)={0x0, 0x48cd, 0x10, 0x3, 0xfd5d}) r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x561, &(0x7f0000000f80)="$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") lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[], 0x361, 0x0) lsetxattr$security_ima(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000200)=ANY=[], 0x9, 0x1) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000280)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYRESHEX=r0, @ANYRESHEX], 0xfe37, 0x0) 21m51.008066894s ago: executing program 35 (id=1244): socket$inet_sctp(0x2, 0x1, 0x84) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0x50) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r0, &(0x7f0000000000)='\"', 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 21m7.940241791s ago: executing program 36 (id=1559): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0x16040000, 0x0, 0x0, 0x0, 0x0, 0x0) setuid(0xee01) tgkill(r2, r2, 0x3c) 20m53.550640015s ago: executing program 37 (id=1678): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0x5) setns(r1, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) 20m37.203082194s ago: executing program 38 (id=1819): write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x1b, 0xfa00, {0x0, {0xa, 0x9, 0xfffffffd, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0xb970}}}, 0x30) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x2f7}) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 18m4.149392267s ago: executing program 39 (id=3533): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x2005}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3cb140bb}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f0000000080), 0x4) sendmsg$kcm(r1, &(0x7f0000000040)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x4, @loopback, 0xffffffff, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000280)="f4000900062b2b25fe80000000000000dc8b850f2323fcb11ea3548466cc00007a000000ad", 0x25}, {&(0x7f0000000100)="42e9462c9bfb9b", 0x7}], 0x2}, 0x0) 16m29.286939825s ago: executing program 40 (id=4456): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000100)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 15m46.628434599s ago: executing program 41 (id=4858): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth1_macvtap\x00', 0x0}) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_SET(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x18, 0x3f9, 0x800, 0x70bd2c, 0x25dfdbfd, {0x0, 0x1}}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x200000c4) setsockopt$sock_int(r0, 0x1, 0x27, &(0x7f0000000000)=0xcd, 0x4) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) 15m21.256472415s ago: executing program 42 (id=5087): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82) r2 = fanotify_init(0x81, 0x40000) fanotify_mark(r2, 0x105, 0x40001032, r1, 0x0) read$FUSE(r2, &(0x7f0000002300)={0x2020}, 0x2020) open(&(0x7f0000000140)='./bus\x00', 0x143bc2, 0x1c0) 14m40.067127513s ago: executing program 43 (id=5297): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x15, 0x0, 0xb, 0xb, 0xfffffffe}) write$bt_hci(r1, &(0x7f0000000080)=ANY=[], 0x6) 14m27.695803724s ago: executing program 5 (id=5548): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1001}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff"], 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x43}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) 14m25.45496003s ago: executing program 5 (id=5566): r0 = syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000000)='map_files\x00') fchdir(r2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) 14m25.124511495s ago: executing program 5 (id=5570): r0 = landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x2}, 0x18, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) r2 = open(&(0x7f0000000280)='.\x00', 0x141080, 0x0) landlock_restrict_self(r0, 0x0) fcntl$notify(r2, 0x402, 0x8000003d) open(&(0x7f0000000040)='./bus\x00', 0x240, 0x0) 14m24.633767898s ago: executing program 5 (id=5572): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@nogrpid}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@debug}, {@nombcache}, {@quota}, {@nolazytime}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a) open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7ffffffffffffffb, 0x3, 0x0, 0x0, 0x17, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]}) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file1\x00', 0x42, 0x0) 14m23.428335448s ago: executing program 5 (id=5579): rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8) r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x12, 0x4, @tid=r0}, &(0x7f0000000380)=0x0) timer_settime(r1, 0x1, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0) timer_delete(r1) r2 = gettid() tkill(r2, 0x16) 14m22.479754431s ago: executing program 5 (id=5585): r0 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xa) setresgid(0x0, 0xffffffffffffffff, r1) setfsgid(r1) r2 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xa) setfsgid(r3) 14m21.873835449s ago: executing program 44 (id=5585): r0 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xa) setresgid(0x0, 0xffffffffffffffff, r1) setfsgid(r1) r2 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xa) setfsgid(r3) 13m55.141146892s ago: executing program 8 (id=5792): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0xd0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000001440)=[{&(0x7f0000001a00)="ce", 0x1}], 0x1, 0x4) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) 13m53.992923164s ago: executing program 8 (id=5801): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x20000, 0x4) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000), 0x204000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000040)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000002c0)={0x2c, 0x18, r2}, 0x10) 13m52.151239369s ago: executing program 8 (id=5810): mkdir(&(0x7f0000000380)='./file1\x00', 0xa) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0x9360, 0x0) 13m51.981597386s ago: executing program 8 (id=5814): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xc40a, &(0x7f0000000100)={[{@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xf49}}, {@nobh}, {@nojournal_checksum}, {@noquota}, {@usrjquota, 0x2e}, {@grpquota}, {@barrier_val={'barrier', 0x3d, 0x8}}, {@jqfmt_vfsv0}, {@noload}], [], 0x2c}, 0x1, 0x472, &(0x7f0000000ec0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc13, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x2020) 13m51.451020405s ago: executing program 8 (id=5820): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r1}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 13m50.948952561s ago: executing program 8 (id=5825): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file2\x00', 0x900008, &(0x7f0000000540)=ANY=[], 0xff, 0xa4a, &(0x7f00000007c0)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000fd2900008400"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000280), 0x800, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000100)={0x0, &(0x7f0000000040)=""/129, &(0x7f0000000680), &(0x7f0000000000), 0x6c, r0}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45}, 0x94) 13m50.3912219s ago: executing program 45 (id=5825): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file2\x00', 0x900008, &(0x7f0000000540)=ANY=[], 0xff, 0xa4a, &(0x7f00000007c0)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000fd2900008400"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000280), 0x800, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000100)={0x0, &(0x7f0000000040)=""/129, &(0x7f0000000680), &(0x7f0000000000), 0x6c, r0}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45}, 0x94) 12m25.90978104s ago: executing program 9 (id=6552): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000005880)=ANY=[@ANYBLOB="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"], 0x1, 0x5512, &(0x7f0000005a00)="$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") unlink(0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0xf8) syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000000)='./file1\x00', 0x980c, &(0x7f0000000800)=ANY=[@ANYRESHEX, @ANYRESDEC, @ANYBLOB="8c4ebe380f0c740f05aa22a177183fb4d2378985259603f864a80ac1039976d16e0ed09eee356633f9c7daf0b27ed03f402265c065634de3e307c10a978e761f83a30faf2d723876c187714679d4179479ec1bccbf1194c120b1e6d287e8f86f7f230baf6f2f3c499388ab90b6d46c1b673d1bd0b32287892d220e94620bebe375993f1ba8045a9ebf5907dbe1c26ea8b6f0e085c0289e024bbd1dc767e51719717999e5b758baef911d1d1b9f319791e81c8a7e4c", @ANYRES64, @ANYRESHEX, @ANYBLOB="ad0f5dde95781191b817a9e79a8232b47bdc7dd820a94e6d8adf11ea3c494aa7b111fcb3aedfdfa0be8b09aca0bbfd1f9b1577190fda47a7e33eccfb11b36f7d445e30e90a12a864c4ca124945822fcb580a41696910aaa2992e0b0609bdd65ab166b5e7045369c4c2f433b16ae4e5256ab6f70aa547cadf4e3e407514f2862c3a80cb10f93954d76e12a5052d3fcc609a89d59d10350ebfeef23bcda961dd367fcc2ac7feb58633ecb284ca0806ca1250632e1ae6f2ae65a76588319b044e2d1efebc7de5789f3f3f10d7", @ANYRESDEC, @ANYRESDEC], 0x2, 0xc33, &(0x7f0000001780)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r0, &(0x7f0000000180)='Q', 0x1, 0x4fed3) 12m25.011198329s ago: executing program 9 (id=6560): socket$packet(0x11, 0x3, 0x300) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r0, r2, 0x25, 0x0, @void}, 0x10) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000140)={'team_slave_0\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) 12m23.031651681s ago: executing program 9 (id=6581): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_io_uring_setup(0x3130, &(0x7f0000000000)={0x0, 0x5042, 0x40, 0x1, 0x3df}, &(0x7f0000000080), &(0x7f00000000c0)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) syz_80211_join_ibss(&(0x7f0000000200)='wlan1\x00', 0x0, 0x0, 0x2) 12m22.468366276s ago: executing program 9 (id=6586): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000880)={[{@noauto_da_alloc}, {@inode_readahead_blks}, {@grpid}, {@barrier}]}, 0xfe, 0x57f, &(0x7f0000000900)="$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") creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x40403, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) openat(0xffffffffffffff9c, 0x0, 0xa0000, 0x0) r1 = open(&(0x7f00000000c0)='.\x00', 0x800, 0x50) getdents(r1, 0x0, 0x0) 12m21.486178873s ago: executing program 9 (id=6599): syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x951a, 0x3010, 0x1}, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'bridge_slave_0\x00', &(0x7f00000000c0)=@ethtool_sset_info={0x37, 0x1, 0x1005}}) r0 = syz_io_uring_setup(0x24f9, &(0x7f0000000400)={0x0, 0x100000, 0x10100, 0x6, 0xcb}, &(0x7f0000000280)=0x0, &(0x7f0000000480)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='rdma.current\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000000c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 12m18.591753685s ago: executing program 9 (id=6624): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="71756965742c636f6465706167653d69736f383835392d31352c706172743d3078303030303030300000000000000000662c00a20000000700000000ede9debf530c3cc4d04b548919aca0c2937d4da1fc31dc42fc2e3e", @ANYRESDEC=0x0, @ANYRESOCT, @ANYRES16, @ANYRES16], 0x11, 0x2d2, &(0x7f0000000bc0)="$eJzs3U1rE1scx/HfmaRteht6pw+XC3fZa0E3UutG3KRIXoS4ELWJUAwVbQV1YxVXIrp371vwLQhuFN+Arlz5AiIII+fMZJJJJzMxNDMNfj9gmMycM+d/Mg/n/AfsCMAf60rzy9uL3+w/I1VUkV5cljxJNakq6R/9W3uwf7h32Gm3MvbTDRxbyyisaY4V2t1vp9WtKaoR8e23quqD6zAdQRDsfJV0UHYgKJW7+lN40kJ0dbrttcIjy/Z0wnpHJxzHrDFddfVQy2XHAQAoVzT+e9E4X4/m754nbUbD/qkc/yfVLTuAqQsytw6M/y7LCow9vn+7Tf18z6VwdrvXyxLHaXlu6Pu8wjMrMcE0eVmli8VbvL3XaZ/fvdtpeXqmRmSg2Lr7bIWnbk9OtBspuWmGMfpu0meUS64Pc7YP2yPiX5uwxYmZD+aTuW58vVErnv9VA2MPkztS/tCRCuPfGr1H10vfllJ022g0Gl6iyIpr5L+ohUhOL2vpGYl6Z9SKkg8I/Lw4Xa3VoVph7y7k1FoLa+0sJmpt976NqLWeaMv2Jj6bR7c3beaVuWo29F3v1ByY/3s2vk1lXpn9q8ZshkOB+8XD/synN1d1+/SPjRxHulZProl/xYVRof/IvqdhyJOMbS91S5e0fPDo8Z1Kp9O+bxdupizcq8dr5p5LqWVKWPDUX6Oj/qYFhQ8ij9XqDUpFhnruRHdo7x+5he1VVkgHT82ZUMZC82OxJ1IZCwXdo1Cq/kHPLfq+kIBQNDfvCvO/gXxly0327IefMU/PnZBFewzsHDvOgGqJ+qtu6a/fyuCWRmdw4+Zc/5+VzsSrfgY5LfpRnLMhyJr6Waapz7rB838AAAAAAAAAAAAAAAAAAIBZU8R/Jyi7jwAAAAAAAAAAAAAAAAAAAAAAzLr4/b/qvf9X473/d/gvf1fCN7ycyPt/X++L9/8C0/crAAD//zZmik0=") openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x101042, 0x1db) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mknod$loop(&(0x7f00000001c0)='./bus\x00', 0x200, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.kill\x00', 0x275a, 0x0) 12m17.708092542s ago: executing program 46 (id=6624): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="71756965742c636f6465706167653d69736f383835392d31352c706172743d3078303030303030300000000000000000662c00a20000000700000000ede9debf530c3cc4d04b548919aca0c2937d4da1fc31dc42fc2e3e", @ANYRESDEC=0x0, @ANYRESOCT, @ANYRES16, @ANYRES16], 0x11, 0x2d2, &(0x7f0000000bc0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x101042, 0x1db) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mknod$loop(&(0x7f00000001c0)='./bus\x00', 0x200, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.kill\x00', 0x275a, 0x0) 3m52.486960292s ago: executing program 2 (id=9180): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) 3m51.239712104s ago: executing program 2 (id=9183): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001e00)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000d80)={0x4, 0x0, [{0xf000, 0x60, &(0x7f00000002c0)=""/96}, {0x8000000, 0xc5, &(0x7f0000000940)=""/197}, {0xd000, 0x13, &(0x7f0000000000)=""/19}, {0x0, 0x71, &(0x7f0000000c00)=""/113}]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) 3m50.731921457s ago: executing program 2 (id=9186): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) shutdown(r2, 0x0) syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x440f8, 0x80, 0x0, 0x224}, 0x0, 0x0) recvmmsg(r2, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 3m46.21397066s ago: executing program 2 (id=9199): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x15) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f00000002c0)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}}) 3m45.966059963s ago: executing program 2 (id=9202): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000000)=0xfffffffe, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000480)=0x17fe, 0x4) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4c, 0xf3, 0x8, [0x0, 0x0, 0x0, 0xc, 0x5, 0x0, 0x0, 0x40000002]}}) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000100)={0x38, r4, 0x91b, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x240048d0) 3m44.837114622s ago: executing program 2 (id=9206): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01005ee1fadefcdbdf250100000008000100", @ANYRES32=r4, @ANYBLOB="3c00028038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004"], 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) 3m28.20231245s ago: executing program 47 (id=9206): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01005ee1fadefcdbdf250100000008000100", @ANYRES32=r4, @ANYBLOB="3c00028038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004"], 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) 1m47.758078358s ago: executing program 1 (id=9571): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000240)) unshare(0x400) r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x50d942, 0x8db7ba406fe7897f) fchmod(r2, 0x6) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f00000003c0)) semop(0x0, &(0x7f0000000200)=[{0x1, 0x8001, 0x3000}, {0x1, 0x80, 0x800}], 0x2) semop(0x0, &(0x7f00000001c0)=[{0x1, 0xbbdd, 0x1000}], 0x1) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000140)=[0x6, 0x7fff]) 1m46.430288302s ago: executing program 1 (id=9576): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000640)=[{0x0}], 0x178) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff02000000711069000322000095"], 0x0}, 0x94) io_uring_register$IORING_REGISTER_FILES(r3, 0x1e, &(0x7f0000000000)=[r3], 0x1) 1m45.095803264s ago: executing program 1 (id=9578): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, r0, 0x1000) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x4000012, r0, 0x0) 1m43.861589639s ago: executing program 1 (id=9584): r0 = landlock_create_ruleset(&(0x7f0000000080)={0x8601, 0x2}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = syz_io_uring_setup(0x1238, &(0x7f0000000380)={0x0, 0x80fd, 0x80, 0x2, 0xab9}, &(0x7f0000000040)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r1, 0x0, 0x0}) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) dup2(r5, r1) syz_usb_connect(0x6, 0xe6, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 1m40.647445213s ago: executing program 1 (id=9600): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000001140)=[@in={0x2, 0x4e24, @loopback}, @in={0x2, 0x4e21, @multicast1}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r3, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) 1m37.961255496s ago: executing program 1 (id=9606): socket$can_j1939(0x1d, 0x2, 0x7) recvmmsg(0xffffffffffffffff, &(0x7f0000001840)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x10020, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x11, 0x2, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) unshare(0x2c020400) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x21, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) io_uring_enter(r2, 0x2219, 0x7724, 0x50, 0x0, 0x0) 1m22.803030591s ago: executing program 48 (id=9606): socket$can_j1939(0x1d, 0x2, 0x7) recvmmsg(0xffffffffffffffff, &(0x7f0000001840)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x10020, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x11, 0x2, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) unshare(0x2c020400) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x21, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) io_uring_enter(r2, 0x2219, 0x7724, 0x50, 0x0, 0x0) 17.171294432s ago: executing program 0 (id=9816): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x4d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x200000, &(0x7f0000000000)={[{@dioread_lock}, {@noquota}, {@errors_remount}, {@grpquota}]}, 0xfc, 0x579, &(0x7f0000000680)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$P9_RFLUSH(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 13.336337524s ago: executing program 3 (id=9820): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000480)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="05"], 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NFC_CMD_DEACTIVATE_TARGET(0xffffffffffffffff, 0x0, 0x80) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 11.370180933s ago: executing program 7 (id=9828): socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x5) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='\r'], 0x50) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x880) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x4, 0xc4}, 0x0) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x20) 11.120817528s ago: executing program 6 (id=9829): getsockname$llc(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@jqfmt_vfsv1}]}, 0xc1, 0x7da, &(0x7f0000000fc0)="$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") r0 = gettid() socket$xdp(0x2c, 0x3, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) getpgid(r0) 10.016399633s ago: executing program 0 (id=9831): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001600), 0x1}, 0x38) r1 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0xc0}, &(0x7f00000002c0)=0x0, &(0x7f0000000640)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x8, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r1, 0x47bc, 0x20, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 9.317020283s ago: executing program 4 (id=9832): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) unlinkat(0xffffffffffffffff, 0x0, 0x200) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) socket$inet(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) mount(&(0x7f0000000100)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000300)='romfs\x00', 0x5, 0x0) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000f5a000/0x2000)=nil, 0x1, 0x0, 0x0, 0xdff, 0x38, 0x0, 0x8, 0x4}) 9.286411894s ago: executing program 7 (id=9833): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f0", @ANYRES32=r1, @ANYBLOB="0000000000000000280012000c0001007665"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4000001}, 0x8000) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000003200)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 9.173274579s ago: executing program 6 (id=9834): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r3, &(0x7f0000000b80)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x7ffe, @mcast2, 0x4}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000080)="8000102e7577d401", 0x8}], 0x1, &(0x7f00000006c0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x9}}], 0x18}}], 0x1, 0x4000084) 9.126652067s ago: executing program 4 (id=9835): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x30}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x98}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0xfffffffc}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xa0}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x9, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x5d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 9.009125641s ago: executing program 3 (id=9836): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r3, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x8, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) 7.990576455s ago: executing program 6 (id=9837): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) mmap(&(0x7f00004b8000/0x2000)=nil, 0x2000, 0xb635773f04ebbee1, 0x12, r0, 0x12969000) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) rseq(&(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x4, 0x1, 0x40}}, 0x20, 0x0, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000440)={0x6621}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) 7.309605356s ago: executing program 0 (id=9838): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x5, 0x20}, 0xc) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0xffff, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 6.959974171s ago: executing program 7 (id=9839): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r2 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r2, 0x2) r3 = open(&(0x7f0000000300)='.\x00', 0x102000, 0x0) flock(r3, 0x1) r4 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r4, 0x2) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 6.301450958s ago: executing program 0 (id=9840): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') lsetxattr$security_capability(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200), &(0x7f00000002c0)=@v3={0x3000000, [{0x2, 0x9}, {0x3, 0x3ff}]}, 0x18, 0x1) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 6.217626897s ago: executing program 6 (id=9841): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000600)=0x8001, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x1f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) openat(0xffffffffffffff9c, 0x0, 0x6042, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) futex(0x0, 0x6, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 6.084976254s ago: executing program 4 (id=9842): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x81}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x6) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file2\x00', 0x800008, &(0x7f0000000540)=ANY=[@ANYBLOB='de=0x00000000800000b1,norock,overriderockperm,gid=', @ANYRESHEX=0x0, @ANYBLOB=',mode=0x0000000000000401,norock,showassoc,hide,hide,norock,gid=', @ANYRESHEX=0x0, @ANYBLOB=',mode=0x0000000000001000,check=strict,iocharset=cp949,cruft,uid=', @ANYRESHEX=0x0, @ANYBLOB=',\x00'], 0xff, 0xa4a, &(0x7f00000007c0)="$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") r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x29fd, 0x84, 0x105}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000280), 0x800, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000100)={0x0, &(0x7f0000000040)=""/129, &(0x7f0000000680), &(0x7f0000000000), 0x6c, r3}, 0x38) 5.651768807s ago: executing program 3 (id=9843): ioctl$SG_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000700)={'\x00', 0x6, 0x6bd, 0x4, 0x9, 0x2}) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) syz_usb_connect(0x17aff7a88c855ce9, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x6, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x2, &(0x7f00000001c0)=ANY=[]}]}) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0x97, &(0x7f0000000040)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000480)={0x0, 0x15, 0x2, "efe6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000180)={0x60, 0xa, 0x10, "6e56f55f13ba3b119fd04cadd22c96ec"}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="24ed83030000002382e5"], 0x0, 0x0}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x10}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x5c}}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000000000)) write$binfmt_misc(r2, &(0x7f0000001280), 0x6) 5.073877375s ago: executing program 7 (id=9844): socket(0x80000000000000a, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) socket$inet6(0xa, 0x3, 0xff) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f00000000c0), &(0x7f0000000100)=r2}, 0x20) 4.566478183s ago: executing program 0 (id=9845): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) request_key(&(0x7f0000000180)='pkcs7_test\x00', 0x0, &(0x7f00000002c0)='GPL\x00', 0xfffffffffffffffb) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x84, &(0x7f00000008c0)={0x0, @in6={{0xa, 0x4e23, 0xffffffff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1}}, 0x653, 0xb}, 0x90) 4.251882742s ago: executing program 7 (id=9846): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_nanosleep(0xfffffff2, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x2, 0x922000000001, 0x106) sendmsg$inet(r3, &(0x7f0000001180)={0x0, 0x0, 0x0}, 0x20000400) setsockopt$sock_attach_bpf(r3, 0x6, 0x4, &(0x7f0000000b80), 0x4) 3.575884759s ago: executing program 4 (id=9847): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='rxrpc_local\x00', r3}, 0x10) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000100000051d833483cc75dd6900000000000000004000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319e2e66d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) 3.368180025s ago: executing program 6 (id=9848): openat$snapshot(0xffffffffffffff9c, &(0x7f0000001180), 0x88003, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6a72c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unlinkat(0xffffffffffffff9c, 0x0, 0x200) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x48) close(0x3) 3.32741245s ago: executing program 3 (id=9849): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_int(r3, 0x29, 0xb, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e05, 0x1, @mcast1, 0x7}, 0x1c) sendto$inet6(r3, &(0x7f00000001c0)="80006466d3805699", 0x8, 0x20004840, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/7, 0x7}, 0x1}], 0x40000000000025b, 0x40000002, 0x0) 954.603767ms ago: executing program 7 (id=9850): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x80000024) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r3, 0x10e, 0xa, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) 749.759869ms ago: executing program 6 (id=9851): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x200000, &(0x7f0000000200), 0x25, 0x4be, &(0x7f0000001080)="$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") fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r0 = syz_open_procfs(0x0, 0x0) read$FUSE(r0, &(0x7f0000003800)={0x2020}, 0xfda3) preadv(r0, &(0x7f0000000440), 0x0, 0x1fe, 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) ioctl$SNDCTL_SYNTH_MEMAVL(r0, 0xc004510e, &(0x7f00000000c0)=0x1000) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r1, 0x10c, 0x2, &(0x7f0000000200), &(0x7f0000000280)=0x4) 748.509227ms ago: executing program 4 (id=9852): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x10005, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r1 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000005c0)=r1, 0x12) r4 = openat$cgroup_ro(r2, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r6}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r5}, 0x10) write$cgroup_int(r4, &(0x7f0000000040)=0x1, 0x12) 684.330325ms ago: executing program 3 (id=9853): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000380)='./file0\x00', 0x800, &(0x7f0000000940)=ANY=[], 0x1, 0x2fa, &(0x7f0000000080)="$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") r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000001500)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001940)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000017c0)=0x1) r1 = eventfd2(0x0, 0x80800) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000540)={0x0, r1}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000001580)=0xfffffffc) 487.126974ms ago: executing program 0 (id=9854): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x800) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x3, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x8004, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) ioctl$TFD_IOC_SET_TICKS(r3, 0x40085400, &(0x7f0000000200)=0x7fffffff) socket$unix(0x1, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) clock_adjtime(0x0, &(0x7f0000000280)={0xc979, 0x1, 0xbf, 0x8, 0x8, 0x1, 0x0, 0x4, 0xf27, 0x80000000, 0x6, 0x3ff, 0x8a8, 0x6, 0x5, 0x413, 0x69, 0x2, 0x6, 0x6, 0x10000, 0x168, 0x2cbf, 0x7, 0xe, 0x5}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1f, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) 64.350958ms ago: executing program 3 (id=9855): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000680)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400000000000000000080000000000000000000000000000000044000500ac1414aa000000000000000000000000000000003c"], 0xfc}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x50, 0x11, [{@in=@loopback, @in=@private=0xa010100, @in=@private=0xa010100, @in=@rand_addr=0x64010100, 0x3c, 0x0, 0x0, 0x0, 0xa, 0x2}]}]}, 0xa0}}, 0x0) 0s ago: executing program 4 (id=9856): lseek(0xffffffffffffffff, 0x6, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0xf2ffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) kernel console output (not intermixed with test programs): ng attributes in process `syz.0.6510'. [ 795.713271][ T30] audit: type=1804 audit(1761864380.890:319): pid=23443 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.6514" name="file0" dev="hugetlbfs" ino=68843 res=1 errno=0 [ 796.206266][ T30] audit: type=1326 audit(1761864381.390:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23463 comm="syz.9.6524" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd87b78efc9 code=0x0 [ 797.989461][T23520] netlink: 'syz.9.6544': attribute type 5 has an invalid length. [ 798.011926][T23523] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6545'. [ 798.230921][T23527] loop9: detected capacity change from 0 to 1764 [ 798.247594][T23529] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6548'. [ 798.255105][T23527] iso9660: Bad value for 'map' [ 798.287835][T23529] netlink: 'syz.6.6548': attribute type 11 has an invalid length. [ 798.304990][T23529] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6548'. [ 798.317739][T23529] netlink: 'syz.6.6548': attribute type 11 has an invalid length. [ 798.798697][T23536] loop9: detected capacity change from 0 to 40427 [ 798.838416][T23536] F2FS-fs (loop9): build fault injection rate: 14 [ 798.844980][T23536] F2FS-fs (loop9): build fault injection type: 0x3bfe8c [ 798.874256][T23536] F2FS-fs (loop9): invalid crc value [ 798.909551][ C1] F2FS-fs (loop9): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60 [ 798.939014][ C0] F2FS-fs (loop9): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60 [ 798.999272][T23536] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 799.011372][T23536] F2FS-fs (loop9): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x157/0x4f0 [ 799.024368][T23536] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 799.114476][T23536] F2FS-fs (loop9): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40 [ 799.126026][ T30] audit: type=1800 audit(1761864384.310:321): pid=23536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.6552" name="file1" dev="loop9" ino=10 res=0 errno=0 [ 799.202434][T23536] F2FS-fs (loop9): inject inconsistent footer in sanity_check_node_footer of read_inline_xattr+0x1af/0x320 [ 799.215613][T23536] F2FS-fs (loop9): inconsistent node block, node_type:1, nid:10, node_footer[nid:10,ino:10,ofs:0,cpver:0,blkaddr:0] [ 799.424952][T21617] syz-executor: attempt to access beyond end of device [ 799.424952][T21617] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 799.464264][T21617] CPU: 0 UID: 0 PID: 21617 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 799.464302][T21617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 799.464319][T21617] Call Trace: [ 799.464331][T21617] [ 799.464343][T21617] dump_stack_lvl+0x189/0x250 [ 799.464391][T21617] ? __pfx_dump_stack_lvl+0x10/0x10 [ 799.464428][T21617] ? __pfx_queue_work_on+0x10/0x10 [ 799.464457][T21617] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 799.464491][T21617] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 799.464539][T21617] f2fs_handle_critical_error+0x37c/0x540 [ 799.464588][T21617] f2fs_write_end_io+0x886/0xb60 [ 799.464639][T21617] __submit_merged_bio+0x27a/0x6a0 [ 799.464685][T21617] __submit_merged_write_cond+0x255/0x530 [ 799.464731][T21617] f2fs_write_data_pages+0x261d/0x3000 [ 799.464800][T21617] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 799.464882][T21617] ? __mod_zone_page_state+0xd7/0x140 [ 799.464933][T21617] ? srso_alias_return_thunk+0x5/0xfbef5 [ 799.464963][T21617] ? folios_put_refs+0x58b/0x670 [ 799.465009][T21617] ? srso_alias_return_thunk+0x5/0xfbef5 [ 799.465038][T21617] ? __lock_acquire+0xab9/0xd20 [ 799.465075][T21617] ? srso_alias_return_thunk+0x5/0xfbef5 [ 799.465104][T21617] ? do_raw_spin_lock+0x121/0x290 [ 799.465147][T21617] ? srso_alias_return_thunk+0x5/0xfbef5 [ 799.465181][T21617] ? srso_alias_return_thunk+0x5/0xfbef5 [ 799.465216][T21617] ? do_raw_spin_unlock+0x122/0x240 [ 799.465253][T21617] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 799.465280][T21617] do_writepages+0x32e/0x550 [ 799.465322][T21617] ? srso_alias_return_thunk+0x5/0xfbef5 [ 799.465355][T21617] ? srso_alias_return_thunk+0x5/0xfbef5 [ 799.465384][T21617] ? do_raw_spin_unlock+0x122/0x240 [ 799.465426][T21617] filemap_fdatawrite+0x199/0x240 [ 799.465462][T21617] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 799.465549][T21617] ? srso_alias_return_thunk+0x5/0xfbef5 [ 799.465584][T21617] ? do_raw_spin_unlock+0x122/0x240 [ 799.465628][T21617] f2fs_sync_dirty_inodes+0x31f/0x830 [ 799.465675][T21617] f2fs_write_checkpoint+0x93e/0x2440 [ 799.465701][T21617] ? srso_alias_return_thunk+0x5/0xfbef5 [ 799.465729][T21617] ? __lock_acquire+0xab9/0xd20 [ 799.465788][T21617] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 799.465881][T21617] kill_f2fs_super+0x2cc/0x6d0 [ 799.465909][T21617] ? srso_alias_return_thunk+0x5/0xfbef5 [ 799.465946][T21617] ? __pfx_kill_f2fs_super+0x10/0x10 [ 799.465995][T21617] ? srso_alias_return_thunk+0x5/0xfbef5 [ 799.466023][T21617] ? shrinker_free+0x2ce/0x3e0 [ 799.466056][T21617] deactivate_locked_super+0xbc/0x130 [ 799.466092][T21617] cleanup_mnt+0x425/0x4c0 [ 799.466123][T21617] ? srso_alias_return_thunk+0x5/0xfbef5 [ 799.466151][T21617] ? lockdep_hardirqs_on+0x9c/0x150 [ 799.466187][T21617] task_work_run+0x1d4/0x260 [ 799.466234][T21617] ? __pfx_task_work_run+0x10/0x10 [ 799.466269][T21617] ? __x64_sys_umount+0x122/0x160 [ 799.466311][T21617] ? exit_to_user_mode_loop+0x40/0x130 [ 799.466341][T21617] exit_to_user_mode_loop+0xe9/0x130 [ 799.466365][T21617] do_syscall_64+0x2bd/0xfa0 [ 799.466397][T21617] ? lockdep_hardirqs_on+0x9c/0x150 [ 799.466429][T21617] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 799.466452][T21617] ? srso_alias_return_thunk+0x5/0xfbef5 [ 799.466481][T21617] ? exc_page_fault+0xab/0x100 [ 799.466517][T21617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 799.466542][T21617] RIP: 0033:0x7fd87b7902f7 [ 799.466565][T21617] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 799.466587][T21617] RSP: 002b:00007ffc37fd55c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 799.466614][T21617] RAX: 0000000000000000 RBX: 00007fd87b811d7d RCX: 00007fd87b7902f7 [ 799.466631][T21617] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc37fd5680 [ 799.466647][T21617] RBP: 00007ffc37fd5680 R08: 0000000000000000 R09: 0000000000000000 [ 799.466664][T21617] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc37fd6710 [ 799.466681][T21617] R13: 00007fd87b811d7d R14: 00000000000c31f7 R15: 00007ffc37fd6750 [ 799.466722][T21617] [ 799.466733][T21617] F2FS-fs (loop9): Stopped filesystem due to reason: 3 [ 800.477783][T23577] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6569'. [ 800.884299][ T30] audit: type=1326 audit(1761864386.040:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23566 comm="syz.0.6565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3d458efc9 code=0x7fc00000 [ 800.927518][ T30] audit: type=1326 audit(1761864386.040:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23566 comm="syz.0.6565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe3d458efc9 code=0x7fc00000 [ 801.917718][T23619] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6584'. [ 802.019345][T23624] loop9: detected capacity change from 0 to 1024 [ 802.173894][T23624] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 802.294344][T23624] loop9: detected capacity change from 1024 to 0 [ 802.335233][T23624] EXT4-fs error (device loop9): ext4_get_inode_loc:4970: inode #2: block 5: comm syz.9.6586: unable to read itable block [ 802.444450][T23624] Buffer I/O error on dev loop9, logical block 1, lost sync page write [ 802.504804][T23624] EXT4-fs (loop9): I/O error while writing superblock [ 802.511618][T23624] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6313: IO failure [ 802.534255][T23624] Buffer I/O error on dev loop9, logical block 1, lost sync page write [ 802.559923][T23624] EXT4-fs (loop9): I/O error while writing superblock [ 802.580342][T23624] EXT4-fs error (device loop9): ext4_dirty_inode:6517: inode #2: comm syz.9.6586: mark_inode_dirty error [ 802.611656][T23624] Buffer I/O error on dev loop9, logical block 1, lost sync page write [ 802.643528][T23624] EXT4-fs (loop9): I/O error while writing superblock [ 802.676259][T23647] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6594'. [ 802.876334][T23652] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6596'. [ 803.269199][T23665] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6603'. [ 803.349657][T23665] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6603'. [ 804.741285][T23408] EXT4-fs error (device loop9): __ext4_get_inode_loc_noinmem:4955: inode #2: block 5: comm kworker/u8:19: unable to read itable block [ 804.771331][T23408] Buffer I/O error on dev loop9, logical block 1, lost sync page write [ 804.798127][T23408] EXT4-fs (loop9): I/O error while writing superblock [ 804.842042][T23466] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 804.879962][T23466] Buffer I/O error on dev loop9, logical block 1, lost sync page write [ 804.899028][T23466] EXT4-fs (loop9): I/O error while writing superblock [ 804.931461][T23626] Buffer I/O error on dev loop9, logical block 64, lost sync page write [ 806.736794][ T7358] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.000053][T23725] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6630'. [ 807.052624][T23731] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6630'. [ 807.096157][ T7358] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.459967][ T7358] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.574435][ T5831] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 807.586415][ T5831] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 807.615288][ T5831] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 807.623273][ T5831] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 807.646194][ T5831] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 807.911874][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 807.924451][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.016278][ T7358] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.924466][T23775] netlink: 'syz.1.6649': attribute type 4 has an invalid length. [ 809.745000][T20593] Bluetooth: hci5: command tx timeout [ 809.760443][ T7358] bridge_slave_1: left allmulticast mode [ 809.778545][ T7358] bridge_slave_1: left promiscuous mode [ 809.796560][ T7358] bridge0: port 2(bridge_slave_1) entered disabled state [ 809.855190][ T7358] bridge_slave_0: left allmulticast mode [ 809.878506][ T7358] bridge_slave_0: left promiscuous mode [ 809.898536][ T7358] bridge0: port 1(bridge_slave_0) entered disabled state [ 809.988239][T20593] Bluetooth: hci2: command 0x0406 tx timeout [ 810.829684][ T7358] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 810.853474][ T7358] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 810.873337][ T7358] bond0 (unregistering): Released all slaves [ 811.008869][T23749] chnl_net:caif_netlink_parms(): no params data found [ 811.039019][T23344] IPVS: starting estimator thread 0... [ 811.135378][T23819] IPVS: using max 26 ests per chain, 62400 per kthread [ 811.299724][T23825] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6665'. [ 811.421007][T23828] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6665'. [ 811.824863][ T5833] Bluetooth: hci5: command tx timeout [ 811.865446][T23749] bridge0: port 1(bridge_slave_0) entered blocking state [ 811.895110][T23749] bridge0: port 1(bridge_slave_0) entered disabled state [ 811.902451][T23749] bridge_slave_0: entered allmulticast mode [ 811.911646][T23749] bridge_slave_0: entered promiscuous mode [ 811.976914][T23843] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6674'. [ 811.998498][ T7358] hsr_slave_0: left promiscuous mode [ 812.027088][ T7358] hsr_slave_1: left promiscuous mode [ 812.035792][T23843] netlink: 'syz.4.6674': attribute type 3 has an invalid length. [ 812.040179][ T7358] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 812.072843][ T7358] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 812.153579][ T7358] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 812.171455][ T7358] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 812.278261][ T7358] veth1_macvtap: left promiscuous mode [ 812.292836][ T7358] veth0_macvtap: left promiscuous mode [ 812.323168][ T7358] veth1_vlan: left promiscuous mode [ 812.337604][ T7358] veth0_vlan: left promiscuous mode [ 813.573441][T23871] overlayfs: failed to clone lowerpath [ 813.915367][ T5833] Bluetooth: hci5: command tx timeout [ 814.420472][T23889] overlayfs: failed to clone upperpath [ 814.733670][T23901] overlayfs: failed to clone upperpath [ 814.770998][T23901] overlayfs: failed to clone lowerpath [ 814.777444][ T30] audit: type=1326 audit(1761864399.960:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23879 comm="syz.3.6688" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe2d078efc9 code=0x0 [ 814.918585][ T7358] team0 (unregistering): Port device team_slave_1 removed [ 814.989542][ T7358] team0 (unregistering): Port device team_slave_0 removed [ 815.522342][ T7358] team0 (unregistering): Port device dummy0 removed [ 815.796300][T23749] bridge0: port 2(bridge_slave_1) entered blocking state [ 815.804360][T23749] bridge0: port 2(bridge_slave_1) entered disabled state [ 815.811578][T23749] bridge_slave_1: entered allmulticast mode [ 815.820242][T23749] bridge_slave_1: entered promiscuous mode [ 816.054148][ T5833] Bluetooth: hci5: command tx timeout [ 816.214484][T23749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 816.281655][T23749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 816.726739][T23749] team0: Port device team_slave_0 added [ 816.746035][T23749] team0: Port device team_slave_1 added [ 817.095998][T23749] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 817.119078][T23749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 817.193324][T23749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 817.278348][T23749] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 817.320122][T23749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 817.438576][T23749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 817.739503][T23749] hsr_slave_0: entered promiscuous mode [ 817.777114][T23749] hsr_slave_1: entered promiscuous mode [ 817.805370][T23749] debugfs: 'hsr0' already exists in 'hsr' [ 817.827536][T23952] overlayfs: failed to clone upperpath [ 817.840646][T23749] Cannot create hsr debugfs directory [ 819.004006][T23981] JFS: charset not found [ 820.619488][T23749] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 820.680072][T23749] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 820.749239][T23749] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 820.800103][T23749] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 821.264073][T23749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 821.332448][T23749] 8021q: adding VLAN 0 to HW filter on device team0 [ 821.422017][T22526] bridge0: port 1(bridge_slave_0) entered blocking state [ 821.429186][T22526] bridge0: port 1(bridge_slave_0) entered forwarding state [ 821.512392][T19695] bridge0: port 2(bridge_slave_1) entered blocking state [ 821.519606][T19695] bridge0: port 2(bridge_slave_1) entered forwarding state [ 822.258465][ T30] audit: type=1326 audit(1761864663.431:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24061 comm="syz.1.6757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad54d8efc9 code=0x50000 [ 822.307065][ T30] audit: type=1326 audit(1761864663.431:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24061 comm="syz.1.6757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad54d8efc9 code=0x50000 [ 822.313785][T23749] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 822.387213][T24065] overlayfs: failed to clone lowerpath [ 822.415803][T24065] overlayfs: failed to clone lowerpath [ 822.422680][ T30] audit: type=1326 audit(1761864663.431:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24061 comm="syz.1.6757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fad54d8efc9 code=0x50000 [ 822.457609][T23749] veth0_vlan: entered promiscuous mode [ 822.491370][ T30] audit: type=1326 audit(1761864663.431:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24061 comm="syz.1.6757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fad54dc1885 code=0x50000 [ 822.504833][T23749] veth1_vlan: entered promiscuous mode [ 822.550831][ T30] audit: type=1326 audit(1761864663.431:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24061 comm="syz.1.6757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fad54d8efc9 code=0x50000 [ 822.655149][ T30] audit: type=1326 audit(1761864663.491:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24061 comm="syz.1.6757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x50000 [ 822.672722][T23749] veth0_macvtap: entered promiscuous mode [ 822.714781][ T30] audit: type=1326 audit(1761864663.521:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24061 comm="syz.1.6757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fad54d8efc9 code=0x50000 [ 822.732608][T23749] veth1_macvtap: entered promiscuous mode [ 823.332468][T24083] syz_tun: entered allmulticast mode [ 823.371377][T24081] syz_tun: left allmulticast mode [ 823.591838][T23749] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 823.722508][T23749] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 823.831250][T23411] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.851532][T23411] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.931911][T23411] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.984842][T23411] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.335927][T24074] Set syz1 is full, maxelem 65536 reached [ 826.299616][T24115] 9pnet_fd: Insufficient options for proto=fd [ 826.874347][ T7365] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 826.923111][ T7365] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 827.108451][T23411] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 827.149464][T23411] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 829.559530][T24151] loop2: detected capacity change from 0 to 32768 [ 829.575889][T24151] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.6625 (24151) [ 829.604320][T24151] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 829.629150][T24151] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm [ 829.756970][T24151] BTRFS info (device loop2): enabling ssd optimizations [ 829.801937][T24151] BTRFS info (device loop2): turning on async discard [ 829.827695][T24151] BTRFS info (device loop2): enabling free space tree [ 830.597347][T24192] overlayfs: failed to clone upperpath [ 830.851836][T24151] BTRFS info (device loop2): balance: start -d -m [ 830.887094][T24151] BTRFS info (device loop2): relocating block group 6881280 flags data|metadata [ 830.976091][T24151] BTRFS info (device loop2): relocating block group 5242880 flags data|metadata [ 831.025056][T24201] netlink: 'syz.4.6802': attribute type 21 has an invalid length. [ 831.077785][T24201] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6802'. [ 831.436206][T24151] BTRFS info (device loop2): found 9 extents, stage: move data extents [ 831.753423][T24151] BTRFS info (device loop2): found 1 extents, stage: update data pointers [ 832.048152][T24151] BTRFS info (device loop2): balance: ended with status: 0 [ 832.373954][T23749] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 832.713298][T24216] netlink: 'syz.0.6808': attribute type 83 has an invalid length. [ 837.018528][T24296] overlayfs: failed to clone upperpath [ 839.116885][T24277] overlayfs: failed to clone upperpath [ 840.784529][ T5936] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 841.019856][ T5936] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 841.078688][ T5936] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 841.131791][ T5936] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 841.164105][ T5936] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 841.240888][ T5936] usb 3-1: SerialNumber: syz [ 841.518289][ T5936] usb 3-1: 0:2 : does not exist [ 841.523294][ T5936] usb 3-1: unit 5: unexpected type 0x0a [ 841.607010][ T5936] usb 3-1: USB disconnect, device number 2 [ 841.982603][T24395] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6886'. [ 843.924568][T24449] fuse: Bad value for 'fd' [ 845.525974][T24467] fuse: Bad value for 'fd' [ 845.542483][T24433] loop2: detected capacity change from 0 to 40427 [ 845.606828][T24433] F2FS-fs (loop2): build fault injection rate: 14 [ 845.613316][T24433] F2FS-fs (loop2): build fault injection type: 0x3bfe8c [ 845.642210][T24433] F2FS-fs (loop2): invalid crc value [ 845.708862][ C1] F2FS-fs (loop2): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60 [ 845.738082][ C0] F2FS-fs (loop2): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60 [ 845.828469][T24476] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6918'. [ 846.169441][T24433] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 846.241276][T24433] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x157/0x4f0 [ 846.435224][T24487] overlayfs: failed to clone upperpath [ 847.080653][T24502] netlink: 'syz.6.6926': attribute type 1 has an invalid length. [ 847.088583][T24502] netlink: 'syz.6.6926': attribute type 4 has an invalid length. [ 847.096722][T24502] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.6926'. [ 847.118780][T24502] netlink: 'syz.6.6926': attribute type 1 has an invalid length. [ 847.145364][T24502] netlink: 'syz.6.6926': attribute type 4 has an invalid length. [ 847.162011][T24502] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.6926'. [ 848.020233][T24523] fuse: Bad value for 'fd' [ 848.034756][T24524] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6933'. [ 848.094700][T24519] 8021q: adding VLAN 0 to HW filter on device bond2 [ 848.108457][T24519] bond0: (slave bond2): Enslaving as an active interface with an up link [ 848.208165][T24533] netlink: 2028 bytes leftover after parsing attributes in process `syz.4.6938'. [ 848.227884][T24533] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6938'. [ 848.787978][T24524] bond0 (unregistering): (slave bond2): Releasing backup interface [ 848.811267][T24524] bond0 (unregistering): Released all slaves [ 849.038133][T24548] fuse: Bad value for 'fd' [ 850.133876][T24570] overlayfs: failed to clone upperpath [ 856.743618][T24666] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6992'. [ 856.879788][T24666] team1: entered promiscuous mode [ 856.885064][T24666] team1: entered allmulticast mode [ 856.890608][T24666] 8021q: adding VLAN 0 to HW filter on device team1 [ 858.084531][T24691] bridge2: entered promiscuous mode [ 858.099023][T24693] netlink: 'syz.3.7004': attribute type 4 has an invalid length. [ 858.108382][T24691] bridge2: entered allmulticast mode [ 858.131741][T24691] team0: Port device bridge2 added [ 858.158886][T24694] bridge0: port 1(team0) entered blocking state [ 858.169872][T24694] bridge0: port 1(team0) entered disabled state [ 858.207251][T24691] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7003'. [ 858.221628][T24694] team0: entered allmulticast mode [ 858.275235][T24691] team0: left allmulticast mode [ 858.306617][T24691] bridge0: port 1(team0) entered disabled state [ 860.743068][T24737] fuse: Bad value for 'fd' [ 861.566837][T24759] overlayfs: failed to clone upperpath [ 863.632146][T23323] libceph: connect (1)[c::]:6789 error -101 [ 863.644454][T23323] libceph: mon0 (1)[c::]:6789 connect error [ 863.715458][T24801] ceph: No mds server is up or the cluster is laggy [ 864.824383][T23323] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 864.996502][T23323] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 865.014269][T23323] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 865.042577][T23323] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 865.055953][T23323] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 865.065889][T23323] usb 3-1: Manufacturer: syz [ 865.073266][T23323] usb 3-1: config 0 descriptor?? [ 866.465905][T23323] uclogic 0003:256C:006D.0022: v1 frame probing failed: -71 [ 867.024247][T23323] uclogic 0003:256C:006D.0022: failed probing parameters: -71 [ 867.101368][T23323] uclogic 0003:256C:006D.0022: probe with driver uclogic failed with error -71 [ 867.139051][T23323] usb 3-1: USB disconnect, device number 3 [ 868.743097][T24907] loop2: detected capacity change from 0 to 4096 [ 868.939851][T24907] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512). [ 869.022430][T24907] ntfs3(loop2): Failed to initialize $Extend/$ObjId. [ 869.128259][T24919] overlayfs: failed to clone upperpath [ 869.365235][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.371982][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 869.497962][T24925] fuse: Bad value for 'fd' [ 869.544574][T22526] bridge_slave_1: left allmulticast mode [ 869.550293][T22526] bridge_slave_1: left promiscuous mode [ 869.571345][T22526] bridge0: port 2(bridge_slave_1) entered disabled state [ 869.605901][ T5833] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 869.735353][T22526] bridge_slave_0: left allmulticast mode [ 869.740999][T22526] bridge_slave_0: left promiscuous mode [ 869.814377][T22526] bridge0: port 1(bridge_slave_0) entered disabled state [ 870.689332][T24943] netlink: 'syz.6.7100': attribute type 1 has an invalid length. [ 870.938428][T24954] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7102'. [ 871.225746][T24929] loop2: detected capacity change from 0 to 32768 [ 871.294901][T24929] (syz.2.7094,24929,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 871.369366][T24929] (syz.2.7094,24929,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 871.388014][T24959] overlayfs: failed to clone upperpath [ 871.451679][T24929] JBD2: Ignoring recovery information on journal [ 871.609615][T24944] delete_channel: no stack [ 871.756604][T24929] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 873.154785][T24982] netlink: 'syz.0.7107': attribute type 10 has an invalid length. [ 873.357210][T22526] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 873.415007][T22526] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 873.450543][T22526] bond0 (unregistering): Released all slaves [ 873.514642][T24943] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 874.438772][T22526] hsr_slave_0: left promiscuous mode [ 874.439828][T23749] ocfs2: Unmounting device (7,2) on (node local) [ 874.564576][T22526] hsr_slave_1: left promiscuous mode [ 874.578935][T22526] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 874.611293][T22526] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 874.643101][T22526] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 874.659341][T22526] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 874.822608][T22526] veth1_macvtap: left promiscuous mode [ 874.862916][T22526] veth0_macvtap: left promiscuous mode [ 874.876763][T22526] veth1_vlan: left promiscuous mode [ 875.165601][T22526] veth0_vlan: left promiscuous mode [ 877.347405][T25046] loop2: detected capacity change from 0 to 32768 [ 877.356198][T25046] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.7134 (25046) [ 877.400037][T25046] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 877.416471][T25046] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm [ 877.717839][T25046] BTRFS info (device loop2): enabling ssd optimizations [ 877.726719][T25046] BTRFS info (device loop2): turning on async discard [ 877.747598][T25046] BTRFS info (device loop2): enabling free space tree [ 877.814674][T25046] kernel write not supported for file task/89/net/ip_tables_matches (pid: 25046 comm: syz.2.7134) [ 877.832177][T22526] team0 (unregistering): Port device team_slave_1 removed [ 877.912492][T23749] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 878.028792][T22526] team0 (unregistering): Port device team_slave_0 removed [ 879.557025][T25085] overlayfs: failed to clone upperpath [ 879.674185][T25014] tipc: Enabling of bearer rejected, failed to enable media [ 879.851537][T25091] overlayfs: failed to clone upperpath [ 879.898089][T25087] loop2: detected capacity change from 0 to 2048 [ 880.005725][T25098] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 880.495503][T25113] netlink: 2028 bytes leftover after parsing attributes in process `syz.1.7153'. [ 880.510104][T25113] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7153'. [ 881.016236][T23424] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 881.186662][T23424] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 881.349007][T23424] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 881.420917][T23424] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 881.430579][T23424] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 881.443591][T23424] usb 3-1: config 0 descriptor?? [ 881.620404][T25145] veth6: entered promiscuous mode [ 881.625851][T25145] veth6: entered allmulticast mode [ 882.192235][T23424] usb 3-1: string descriptor 0 read error: -22 [ 882.408044][T23424] uclogic 0003:256C:006D.0023: interface is invalid, ignoring [ 882.640924][T23323] usb 3-1: USB disconnect, device number 4 [ 882.853334][T25165] overlayfs: failed to clone upperpath [ 882.979116][T25169] netlink: 'syz.4.7175': attribute type 12 has an invalid length. [ 883.353122][ T30] audit: type=1326 audit(1761864980.532:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25185 comm="syz.0.7183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3d458efc9 code=0x7ffc0000 [ 883.404139][ T30] audit: type=1326 audit(1761864980.532:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25185 comm="syz.0.7183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3d458efc9 code=0x7ffc0000 [ 883.474365][ T30] audit: type=1326 audit(1761864980.532:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25185 comm="syz.0.7183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe3d458efc9 code=0x7ffc0000 [ 883.761183][ T30] audit: type=1326 audit(1761864980.532:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25185 comm="syz.0.7183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3d458efc9 code=0x7ffc0000 [ 883.888358][ T30] audit: type=1326 audit(1761864980.532:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25185 comm="syz.0.7183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3d458efc9 code=0x7ffc0000 [ 883.973994][ T30] audit: type=1326 audit(1761864980.532:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25185 comm="syz.0.7183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7fe3d458efc9 code=0x7ffc0000 [ 884.019957][ T30] audit: type=1326 audit(1761864980.532:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25185 comm="syz.0.7183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3d458efc9 code=0x7ffc0000 [ 884.109697][ T30] audit: type=1326 audit(1761864980.532:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25185 comm="syz.0.7183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3d458efc9 code=0x7ffc0000 [ 884.352025][ T30] audit: type=1326 audit(1761864980.532:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25185 comm="syz.0.7183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=281 compat=0 ip=0x7fe3d458efc9 code=0x7ffc0000 [ 884.979184][T25213] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7190'. [ 887.030602][T25229] overlayfs: failed to clone upperpath [ 889.185901][T25275] team0: Port device team_slave_0 removed [ 889.342333][T25286] vxcan3: entered allmulticast mode [ 895.882086][T25364] netlink: 156 bytes leftover after parsing attributes in process `syz.0.7240'. [ 897.697939][ T5936] libceph: connect (1)[c::]:6789 error -101 [ 897.704291][ T5936] libceph: mon0 (1)[c::]:6789 connect error [ 897.852463][T25393] ceph: No mds server is up or the cluster is laggy [ 897.981491][ T5936] libceph: connect (1)[c::]:6789 error -101 [ 897.989288][ T5936] libceph: mon0 (1)[c::]:6789 connect error [ 900.450216][T25434] overlayfs: failed to clone upperpath [ 900.684386][T25437] syz_tun: entered allmulticast mode [ 900.770269][T25436] syz_tun: left allmulticast mode [ 902.902065][T25464] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7278'. [ 903.008898][T25464] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7278'. [ 904.013088][T25486] overlayfs: workdir and upperdir must reside under the same mount [ 904.139086][T25491] overlayfs: failed to clone upperpath [ 904.172721][T25491] overlayfs: failed to clone lowerpath [ 904.909519][T25512] wg2: entered promiscuous mode [ 904.964242][T25512] wg2: entered allmulticast mode [ 905.355538][T25524] ceph: No mds server is up or the cluster is laggy [ 907.225001][T23368] libceph: connect (1)[c::]:6789 error -101 [ 907.231105][T23368] libceph: mon0 (1)[c::]:6789 connect error [ 907.288274][T25570] ceph: No mds server is up or the cluster is laggy [ 907.714009][T25589] bond2: entered allmulticast mode [ 907.819133][T25589] ip6gretap1: entered allmulticast mode [ 907.899689][T25589] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 908.003480][T25600] overlayfs: failed to clone upperpath [ 908.602309][T25559] openvswitch: netlink: Key 32 has unexpected len 0 expected 2 [ 909.922191][T25639] tipc: Failed to remove unknown binding: 66,1,1/754974721:1739997428/1739997430 [ 909.936365][T25639] tipc: Failed to remove unknown binding: 66,1,1/754974721:1739997428/1739997430 [ 909.962272][T25639] tipc: Failed to remove unknown binding: 66,1,1/754974721:1739997428/1739997430 [ 910.221471][T25644] overlayfs: failed to clone upperpath [ 911.125582][T25660] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7351'. [ 911.164262][T25660] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7351'. [ 913.787947][T25707] loop2: detected capacity change from 0 to 2048 [ 913.966466][T25707] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 914.025429][T25707] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 916.509933][T25750] 9pnet_fd: Insufficient options for proto=fd [ 919.674134][T25793] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 920.041345][T25800] loop2: detected capacity change from 0 to 1024 [ 920.135441][T25793] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 920.146355][T25800] EXT4-fs: Ignoring removed nobh option [ 920.146384][T25800] EXT4-fs: inline encryption not supported [ 920.346243][T25800] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 920.423161][T25793] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 920.848564][T25793] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 920.867400][T23749] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 921.852988][T23408] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 921.873739][T23408] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 922.087347][ T36] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 922.188108][T23408] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 922.675992][T25840] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 922.682543][T25840] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 922.702483][T25840] vhci_hcd vhci_hcd.0: Device attached [ 922.713558][T25844] overlayfs: failed to clone upperpath [ 922.803840][T25840] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(5) [ 922.810365][T25840] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 922.848063][T25849] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 922.871012][T25849] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 922.881652][T25849] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 922.893509][T25849] vhci_hcd vhci_hcd.0: pdev(2) rhport(5) sockfd(14) [ 922.900118][T25849] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 922.907681][T23344] vhci_hcd: vhci_device speed not set [ 923.005209][T25858] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 923.008210][T25840] vhci_hcd vhci_hcd.0: Device attached [ 923.029015][T23344] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 923.121459][T25849] vhci_hcd vhci_hcd.0: Device attached [ 923.147552][T25861] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 923.302264][T25840] vhci_hcd vhci_hcd.0: port 0 already used [ 923.312630][T25853] vhci_hcd: connection closed [ 923.312990][T22526] vhci_hcd: stop threads [ 923.316182][T25845] vhci_hcd: connection closed [ 923.326845][T25842] vhci_hcd: connection reset by peer [ 923.338620][T22526] vhci_hcd: release socket [ 923.383444][T22526] vhci_hcd: disconnect device [ 923.384382][T25867] netlink: 'syz.0.7422': attribute type 4 has an invalid length. [ 923.425544][T22526] vhci_hcd: stop threads [ 923.437998][T22526] vhci_hcd: release socket [ 923.474342][T22526] vhci_hcd: disconnect device [ 923.501693][T22526] vhci_hcd: stop threads [ 923.518484][T22526] vhci_hcd: release socket [ 923.542973][T22526] vhci_hcd: disconnect device [ 923.898744][ T5833] Bluetooth: hci5: command tx timeout [ 925.169951][T25887] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7429'. [ 926.139947][ T30] audit: type=1326 audit(1761865279.331:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25906 comm="syz.6.7435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2ad8efc9 code=0x7ffc0000 [ 926.797192][ T30] audit: type=1326 audit(1761865279.331:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25906 comm="syz.6.7435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f7c2ad8efc9 code=0x7ffc0000 [ 926.972943][ T30] audit: type=1326 audit(1761865279.331:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25906 comm="syz.6.7435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2ad8efc9 code=0x7ffc0000 [ 927.049183][ T30] audit: type=1326 audit(1761865279.331:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25906 comm="syz.6.7435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2ad8efc9 code=0x7ffc0000 [ 927.272289][ T30] audit: type=1326 audit(1761865279.361:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25906 comm="syz.6.7435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7f7c2ad8efc9 code=0x7ffc0000 [ 927.406914][ T30] audit: type=1326 audit(1761865279.381:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25906 comm="syz.6.7435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2ad8efc9 code=0x7ffc0000 [ 927.508356][ T30] audit: type=1326 audit(1761865279.381:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25906 comm="syz.6.7435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2ad8efc9 code=0x7ffc0000 [ 928.126615][T23344] vhci_hcd: vhci_device speed not set [ 929.221415][T25949] loop2: detected capacity change from 0 to 512 [ 929.377954][T25949] EXT4-fs (loop2): orphan cleanup on readonly fs [ 929.436169][T25949] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.7451: iget: bad i_size value: 38620345925642 [ 929.493712][T25949] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.7451: couldn't read orphan inode 15 (err -117) [ 929.540624][T25949] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 929.640236][T25949] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 929.803469][T25949] loop2: detected capacity change from 0 to 512 [ 929.843933][T25949] EXT4-fs (loop2): Test dummy encryption mode enabled [ 929.874599][T25949] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #11: comm syz.2.7451: iget: bad extra_isize 31 (inode size 256) [ 929.946205][T25949] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.7451: couldn't read orphan inode 11 (err -117) [ 929.981561][T25949] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 930.401260][T25949] EXT4-fs error (device loop2): ext4_nfs_get_inode:1540: inode #11: comm syz.2.7451: iget: bad extra_isize 31 (inode size 256) [ 930.599994][T23749] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 930.785615][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 930.792568][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 933.063744][T26016] usb usb5: usbfs: process 26016 (syz.2.7468) did not claim interface 0 before use [ 933.727191][T26020] overlayfs: failed to clone upperpath [ 935.493822][T26052] loop2: detected capacity change from 0 to 4096 [ 935.612910][T26052] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 935.689171][T26052] ntfs3(loop2): volume is dirty and "force" flag is not set! [ 936.467818][T26081] overlayfs: failed to clone upperpath [ 938.251008][T26120] uprobe: syz.6.7515:26120 failed to unregister, leaking uprobe [ 938.755189][T26152] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7527'. [ 941.882334][T26202] netlink: 'syz.1.7546': attribute type 13 has an invalid length. [ 942.383122][T26202] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 943.959880][T26232] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7558'. [ 944.114262][T26234] overlayfs: failed to clone upperpath [ 944.284605][T26239] overlayfs: failed to clone upperpath [ 946.493569][T26282] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 946.578110][T26282] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 946.617717][T26282] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 946.625745][T26282] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 950.020938][T26345] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7605'. [ 951.884656][T20593] Bluetooth: hci1: command 0x0406 tx timeout [ 952.573487][T26361] delete_channel: no stack [ 952.859609][T26372] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7616'. [ 954.154736][T26404] ref_ctr_offset mismatch. inode: 0x1aa3 offset: 0x0 ref_ctr_offset(old): 0x68 ref_ctr_offset(new): 0x0 [ 954.291562][T26408] overlayfs: failed to clone upperpath [ 954.410069][T26412] netem: change failed [ 956.796997][ T30] audit: type=1804 audit(1761865310.007:348): pid=26446 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.7642" name="file0" dev="tmpfs" ino=6850 res=1 errno=0 [ 956.969710][T26450] overlayfs: failed to clone upperpath [ 957.724877][T26475] ipip1: left promiscuous mode [ 957.892538][T26475] geneve2: left promiscuous mode [ 957.960860][T23405] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 957.987093][T23405] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 958.089349][T23405] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 958.131474][T23405] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 958.296459][T23405] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 958.329797][T23405] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 958.389664][T23405] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 958.595083][T23405] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 958.666710][T26505] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7661'. [ 958.688332][T26505] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7661'. [ 962.116919][T26553] overlayfs: failed to clone upperpath [ 962.617639][T26566] tipc: Enabling of bearer rejected, failed to enable media [ 962.677751][T26568] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7684'. [ 962.833474][T26575] overlayfs: failed to clone lowerpath [ 964.781037][T26610] team0: Caught tx_queue_len zero misconfig [ 965.356491][T26625] loop2: detected capacity change from 0 to 512 [ 965.672137][T26632] overlayfs: failed to clone upperpath [ 965.882423][T26614] tipc: Enabled bearer , priority 0 [ 969.398815][T26724] sctp: [Deprecated]: syz.1.7739 (pid 26724) Use of int in max_burst socket option. [ 969.398815][T26724] Use struct sctp_assoc_value instead [ 970.639487][T26740] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 970.646399][T26740] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 970.652941][T26740] comedi comedi3: 8255: I/O port conflict (0x16,4) [ 970.660140][T26740] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 970.669224][T26740] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 970.676034][T26740] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 970.682570][T26740] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 970.689181][T26740] comedi comedi3: 8255: I/O port conflict (0xa,4) [ 970.698361][T26740] comedi comedi3: 8255: I/O port conflict (0xfd,4) [ 970.705987][T26740] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 970.712685][T26740] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 970.719594][T26740] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 970.726466][T26740] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 970.733106][T26740] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 970.740234][T26740] comedi comedi3: 8255: I/O port conflict (0x80009,4) [ 970.748941][T26740] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 970.757260][T26740] comedi comedi3: 8255: I/O port conflict (0x7f,4) [ 970.764057][T26740] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 970.770993][T26740] comedi comedi3: 8255: I/O port conflict (0x40000004,4) [ 970.778586][T26740] comedi comedi3: 8255: I/O port conflict (0x89,4) [ 970.788958][T26740] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 970.796603][T26740] comedi comedi3: 8255: I/O port conflict (0x20001e58,4) [ 970.804188][T26740] comedi comedi3: 8255: I/O port conflict (0xb,4) [ 970.812759][T26740] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 970.819637][T26740] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 970.826518][T26740] comedi comedi3: 8255: I/O port conflict (0x995d000,4) [ 971.745717][T26743] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7746'. [ 971.925695][T26744] netlink: 'syz.0.7746': attribute type 1 has an invalid length. [ 975.954181][T26818] loop2: detected capacity change from 0 to 4096 [ 977.668114][T26838] sctp: [Deprecated]: syz.1.7785 (pid 26838) Use of struct sctp_assoc_value in delayed_ack socket option. [ 977.668114][T26838] Use struct sctp_sack_info instead [ 978.543430][T26859] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7794'. [ 979.959731][T26886] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 981.058011][T26896] loop2: detected capacity change from 0 to 64 [ 981.101967][T26896] MINIX-fs: bad superblock or unable to read bitmaps [ 981.250223][T26896] loop2: detected capacity change from 0 to 512 [ 981.321930][T26896] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 981.745435][T26896] ext4 filesystem being mounted at /135/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 982.162210][T23749] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 982.655017][T26919] bridge: RTM_NEWNEIGH with invalid ether address [ 986.894650][T26988] netlink: 'syz.6.7841': attribute type 1 has an invalid length. [ 987.071385][T26991] overlayfs: failed to clone upperpath [ 987.120453][T26990] bond6: entered promiscuous mode [ 987.145218][T26990] bond6: entered allmulticast mode [ 987.167633][T26990] 8021q: adding VLAN 0 to HW filter on device bond6 [ 987.258079][T26988] bridge4: entered promiscuous mode [ 987.273086][T26988] bridge4: entered allmulticast mode [ 987.335558][T26988] bond6: (slave bridge4): Enslaving as a backup interface with an up link [ 987.347000][T23405] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 987.559644][ T7365] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 988.901469][T27037] overlayfs: failed to clone upperpath [ 988.920229][T27038] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7858'. [ 989.489636][T27047] overlayfs: failed to clone upperpath [ 989.840158][T27054] overlayfs: failed to clone upperpath [ 991.800246][T27075] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7870'. [ 991.872549][T27075] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7870'. [ 992.121132][ T30] audit: type=1800 audit(1761865345.334:349): pid=27080 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.7872" name="bus" dev="overlay" ino=812 res=0 errno=0 [ 992.188543][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.194940][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.799759][ T5833] Bluetooth: hci3: unexpected cc 0x204b length: 9 > 3 [ 992.806719][ T5833] Bluetooth: hci3: unexpected event for opcode 0x204b [ 995.455633][T27116] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7885'. [ 996.522640][ T30] audit: type=1326 audit(1761865349.736:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27112 comm="syz.6.7883" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7c2ad8efc9 code=0x0 [ 997.582625][T27146] netlink: 'syz.6.7893': attribute type 4 has an invalid length. [ 997.643914][T27147] netlink: 'syz.6.7893': attribute type 4 has an invalid length. [ 999.428969][T27166] loop2: detected capacity change from 0 to 16 [ 999.474471][T27166] erofs (device loop2): mounted with root inode @ nid 36. [ 999.602293][T27166] erofs (device loop2): read error -117 @ 72 of nid 36 [ 999.628674][ T5833] Bluetooth: hci2: unexpected cc 0x2039 length: 9 > 1 [ 999.636919][ T5833] Bluetooth: hci2: unexpected event for opcode 0x2039 [ 1000.651103][ C1] vcan0: j1939_tp_rxtimer: 0xffff888051884800: rx timeout, send abort [ 1001.150961][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880519a7c00: rx timeout, send abort [ 1001.159209][ C1] vcan0: j1939_tp_rxtimer: 0xffff888051884800: abort rx timeout. Force session deactivation [ 1001.651298][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880519a4000: rx timeout, send abort [ 1001.659904][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880519a7c00: abort rx timeout. Force session deactivation [ 1002.159568][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880519a4000: abort rx timeout. Force session deactivation [ 1002.608187][T27203] loop2: detected capacity change from 0 to 32768 [ 1002.615774][T27203] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.7915 (27203) [ 1002.631187][T27203] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1002.641919][T27203] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm [ 1003.070349][T27203] BTRFS info (device loop2): enabling ssd optimizations [ 1003.077364][T27203] BTRFS info (device loop2): turning on async discard [ 1003.084426][T27203] BTRFS info (device loop2): enabling free space tree [ 1003.709778][ T5833] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1003.719759][ T5833] Bluetooth: hci2: Injecting HCI hardware error event [ 1003.739766][T20593] Bluetooth: hci2: hardware error 0x00 [ 1003.951187][T23749] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1004.296780][T27236] netlink: 248 bytes leftover after parsing attributes in process `syz.4.7923'. [ 1005.290483][T27243] overlayfs: failed to clone upperpath [ 1006.017632][T20593] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1006.753903][T27255] netlink: 'syz.2.7921': attribute type 4 has an invalid length. [ 1006.887146][T27255] netlink: 'syz.2.7921': attribute type 4 has an invalid length. [ 1007.096323][T27264] overlayfs: failed to clone upperpath [ 1007.275266][T27270] loop2: detected capacity change from 0 to 128 [ 1012.202725][T27341] syz_tun: entered allmulticast mode [ 1013.733314][T27366] netlink: 'syz.3.7969': attribute type 4 has an invalid length. [ 1014.605212][T27383] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7977'. [ 1015.565901][T27406] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7983'. [ 1016.610775][T27432] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7991'. [ 1024.604901][T27508] overlayfs: failed to clone upperpath [ 1028.674107][T27551] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8028'. [ 1028.684902][T27551] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8028'. [ 1028.888983][T27557] bridge0: port 1(gretap0) entered blocking state [ 1028.895595][T27557] bridge0: port 1(gretap0) entered disabled state [ 1028.932971][T27557] gretap0: entered allmulticast mode [ 1028.959526][T27557] gretap0: entered promiscuous mode [ 1028.995949][T27560] gretap0: left allmulticast mode [ 1029.015112][T27560] gretap0: left promiscuous mode [ 1029.032826][T27560] bridge0: port 1(gretap0) entered disabled state [ 1029.423713][T27569] overlayfs: failed to clone upperpath [ 1031.787631][ T30] audit: type=1804 audit(1761865385.034:351): pid=27600 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.8046" name="file0" dev="tmpfs" ino=2159 res=1 errno=0 [ 1032.857944][T27593] loop2: detected capacity change from 0 to 32768 [ 1033.029686][T27612] netlink: 64 bytes leftover after parsing attributes in process `syz.0.8051'. [ 1033.223238][T27621] netlink: 128 bytes leftover after parsing attributes in process `syz.6.8055'. [ 1033.439617][T27634] sctp: [Deprecated]: syz.0.8062 (pid 27634) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1033.439617][T27634] Use struct sctp_sack_info instead [ 1034.748993][T27659] tipc: Failed to remove unknown binding: 66,1,1/0:1164381392/1164381394 [ 1034.759425][T27659] tipc: Failed to remove unknown binding: 66,1,1/0:1164381392/1164381394 [ 1034.767940][T27659] tipc: Failed to remove unknown binding: 66,1,1/0:1164381392/1164381394 [ 1044.136002][T27753] overlayfs: failed to clone upperpath [ 1045.677874][T27772] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1048.467167][T27820] overlayfs: failed to clone upperpath [ 1048.509285][T27822] overlayfs: failed to clone lowerpath [ 1050.233250][T27836] overlayfs: failed to clone upperpath [ 1053.598903][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1053.605458][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.096042][T27900] overlayfs: failed to clone upperpath [ 1056.101274][T27911] overlayfs: failed to clone upperpath [ 1056.447253][T27913] ref_ctr increment failed for inode: 0x1c70 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88801a05d600 [ 1058.913139][T27969] netlink: 'syz.4.8176': attribute type 1 has an invalid length. [ 1059.076368][T27972] bond6: (slave gretap3): making interface the new active one [ 1059.084727][T27972] bond6: (slave gretap3): Enslaving as an active interface with an up link [ 1066.668251][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806a464000: rx timeout, send abort [ 1067.168105][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806a465800: rx timeout, send abort [ 1067.176401][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806a464000: abort rx timeout. Force session deactivation [ 1067.676157][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806a465800: abort rx timeout. Force session deactivation [ 1069.204278][T28085] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8218'. [ 1070.415604][T28120] tipc: Failed to remove unknown binding: 66,1,1/0:3392917546/3392917547 [ 1074.207545][T28162] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8240'. [ 1075.326001][T28168] Invalid ELF header magic: != ELF [ 1076.751924][T28190] loop2: detected capacity change from 0 to 64 [ 1076.803599][T28190] hfs: unable to locate alternate MDB [ 1076.809451][T28190] hfs: continuing without an alternate MDB [ 1077.651651][ T30] audit: type=1326 audit(1761865430.897:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28187 comm="syz.1.8253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad54d8efc9 code=0x7fc00000 [ 1077.781590][ T30] audit: type=1326 audit(1761865430.897:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28187 comm="syz.1.8253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fad54d8efc9 code=0x7fc00000 [ 1077.955662][T28210] overlayfs: failed to clone upperpath [ 1077.961265][ T30] audit: type=1326 audit(1761865430.897:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28187 comm="syz.1.8253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad54d8efc9 code=0x7fc00000 [ 1078.947871][T28222] ref_ctr increment failed for inode: 0x1cb2 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888026ec0ac0 [ 1080.042420][T28246] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1080.285453][T28246] overlayfs: failed to set xattr on upper [ 1080.303085][T28246] overlayfs: ...falling back to redirect_dir=nofollow. [ 1080.328791][T28246] overlayfs: ...falling back to index=off. [ 1080.379933][T28246] overlayfs: ...falling back to uuid=null. [ 1081.082071][T28262] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8276'. [ 1081.673534][ T30] audit: type=1326 audit(1761865434.939:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28279 comm="syz.1.8283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad54d8efc9 code=0x7ffc0000 [ 1081.825589][ T30] audit: type=1326 audit(1761865434.959:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28279 comm="syz.1.8283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fad54d8efc9 code=0x7ffc0000 [ 1081.937224][ T30] audit: type=1326 audit(1761865434.969:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28279 comm="syz.1.8283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad54d8efc9 code=0x7ffc0000 [ 1082.078350][ T30] audit: type=1326 audit(1761865434.969:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28279 comm="syz.1.8283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fad54d8efc9 code=0x7ffc0000 [ 1082.123433][ T30] audit: type=1326 audit(1761865434.969:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28279 comm="syz.1.8283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad54d8efc9 code=0x7ffc0000 [ 1082.149585][ T30] audit: type=1326 audit(1761865434.979:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28279 comm="syz.1.8283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7fad54d8efc9 code=0x7ffc0000 [ 1082.188233][ T30] audit: type=1326 audit(1761865434.979:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28279 comm="syz.1.8283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad54d8efc9 code=0x7ffc0000 [ 1085.412911][T28332] netlink: 'syz.6.8300': attribute type 13 has an invalid length. [ 1086.719580][ T7362] netdevsim netdevsim6 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1086.761145][ T7362] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1086.797292][ T7362] netdevsim netdevsim6 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1086.847812][ T7362] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1086.877504][T23405] netdevsim netdevsim6 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1086.907018][T15557] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1086.917024][T23405] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1086.967456][T23405] netdevsim netdevsim6 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1087.107507][T15557] usb 3-1: Using ep0 maxpacket: 8 [ 1087.136043][T23405] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1087.260531][T15557] usb 3-1: config 0 has an invalid interface number: 218 but max is 0 [ 1087.401779][T15557] usb 3-1: config 0 has no interface number 0 [ 1087.520412][T15557] usb 3-1: config 0 interface 218 has no altsetting 0 [ 1087.761982][T15557] usb 3-1: New USB device found, idVendor=06cd, idProduct=011c, bcdDevice=b3.4b [ 1087.772153][T15557] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1087.780044][T28366] overlayfs: failed to clone upperpath [ 1087.780737][T15557] usb 3-1: Product: syz [ 1087.790582][T15557] usb 3-1: Manufacturer: syz [ 1087.795670][T15557] usb 3-1: SerialNumber: syz [ 1087.806789][T15557] usb 3-1: config 0 descriptor?? [ 1088.042197][T15557] keyspan 3-1:0.218: Keyspan 1 port adapter converter detected [ 1088.100490][T15557] keyspan 3-1:0.218: found no endpoint descriptor for endpoint 84 [ 1088.141473][T15557] keyspan 3-1:0.218: found no endpoint descriptor for endpoint 81 [ 1088.176744][T15557] keyspan 3-1:0.218: found no endpoint descriptor for endpoint 82 [ 1088.200929][T15557] keyspan 3-1:0.218: found no endpoint descriptor for endpoint 1 [ 1088.239474][T15557] keyspan 3-1:0.218: found no endpoint descriptor for endpoint 2 [ 1088.329306][T15557] keyspan 3-1:0.218: found no endpoint descriptor for endpoint 83 [ 1088.349285][T15557] keyspan 3-1:0.218: found no endpoint descriptor for endpoint 3 [ 1088.359530][T15557] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1088.381227][T15557] usb 3-1: USB disconnect, device number 5 [ 1088.407812][T15557] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1088.433675][T15557] keyspan 3-1:0.218: device disconnected [ 1089.657324][T28392] loop2: detected capacity change from 0 to 512 [ 1093.225809][T28420] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8329'. [ 1095.429577][T28457] vxcan2: entered allmulticast mode [ 1098.499483][T28506] overlayfs: failed to clone upperpath [ 1098.809835][T28514] netlink: 'syz.2.8360': attribute type 10 has an invalid length. [ 1098.849683][T28514] bridge0: port 2(bridge_slave_1) entered disabled state [ 1098.857173][T28514] bridge0: port 1(bridge_slave_0) entered disabled state [ 1099.136923][T28514] bridge0: port 2(bridge_slave_1) entered blocking state [ 1099.144219][T28514] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1099.151891][T28514] bridge0: port 1(bridge_slave_0) entered blocking state [ 1099.159097][T28514] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1099.178416][T28514] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1099.266138][T28523] netlink: 2028 bytes leftover after parsing attributes in process `syz.1.8364'. [ 1099.275644][T28523] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8364'. [ 1099.481705][T28529] loop2: detected capacity change from 0 to 47 [ 1099.915229][T28535] overlayfs: failed to clone upperpath [ 1100.605648][T28549] netlink: 'syz.3.8373': attribute type 83 has an invalid length. [ 1100.836229][T28555] overlayfs: failed to clone upperpath [ 1100.881316][T28555] overlayfs: failed to clone lowerpath [ 1101.599389][T26492] libceph: connect (1)[c::]:6789 error -101 [ 1101.606271][T26492] libceph: mon0 (1)[c::]:6789 connect error [ 1101.773926][T28571] ceph: No mds server is up or the cluster is laggy [ 1103.383645][T28596] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1105.344406][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 1105.344431][ T30] audit: type=1326 audit(1761865458.541:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28625 comm="syz.2.8401" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2a74b8efc9 code=0x0 [ 1106.497327][T28650] wireguard0: entered promiscuous mode [ 1106.502832][T28650] wireguard0: entered allmulticast mode [ 1106.610374][T28655] vlan2: entered promiscuous mode [ 1106.616604][T28655] vlan2: entered allmulticast mode [ 1106.625444][T28655] hsr_slave_1: entered allmulticast mode [ 1107.862829][T28686] overlayfs: failed to clone upperpath [ 1108.629692][T28694] 9pnet_fd: Insufficient options for proto=fd [ 1112.084525][T28734] dvmrp1: entered allmulticast mode [ 1115.006971][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.015483][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.499897][T28795] overlayfs: failed to clone upperpath [ 1116.594062][T28796] overlayfs: failed to clone upperpath [ 1116.985878][T28800] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8465'. [ 1121.533932][T28831] loop2: detected capacity change from 0 to 2048 [ 1121.660409][T28831] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1121.701030][T28831] ext4 filesystem being mounted at /234/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1122.018182][T28842] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.8473: bg 0: block 345: padding at end of block bitmap is not set [ 1122.123666][T28842] EXT4-fs (loop2): Remounting filesystem read-only [ 1122.131221][T28836] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 1122.552095][T23749] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1122.754969][T28856] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1124.461970][T28883] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8488'. [ 1128.171711][T28915] bridge0: vlan filtering disabled, automatically disabling multicast vlan snooping [ 1128.226111][T28918] overlayfs: failed to clone upperpath [ 1131.408177][ T30] audit: type=1800 audit(1761865484.694:373): pid=28968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.8516" name="nullb0" dev="tmpfs" ino=4572 res=0 errno=0 [ 1132.035185][T20593] Bluetooth: hci0: command 0x0406 tx timeout [ 1133.040445][T28993] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8526'. [ 1133.097430][T28993] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8526'. [ 1133.483687][T29000] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1133.529210][T29000] batadv_slave_0: entered promiscuous mode [ 1138.199589][T29061] netlink: 'syz.6.8549': attribute type 10 has an invalid length. [ 1144.373403][T29132] netlink: 'syz.2.8570': attribute type 1 has an invalid length. [ 1147.539524][T29149] loop2: detected capacity change from 0 to 8 [ 1147.550051][T29149] unable to read id index table [ 1155.786813][T29215] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8594'. [ 1159.957894][T29254] overlayfs: failed to clone upperpath [ 1164.520607][T29315] netlink: 'syz.3.8623': attribute type 10 has an invalid length. [ 1164.558309][T29315] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 1164.601650][T29315] bond1: (slave netdevsim0): Releasing active interface [ 1164.635038][T29315] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1164.692814][T29322] overlayfs: failed to clone upperpath [ 1164.709250][T29320] loop2: detected capacity change from 0 to 1764 [ 1166.875611][T29353] netlink: 'syz.4.8635': attribute type 1 has an invalid length. [ 1166.968196][T29355] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8635'. [ 1167.186638][T29355] bond7: entered allmulticast mode [ 1170.179300][T29403] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8653'. [ 1170.239872][T29403] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8653'. [ 1172.137086][T29444] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1172.914114][T26493] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1173.154373][T26493] usb 3-1: Using ep0 maxpacket: 8 [ 1173.191762][T26493] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1173.264815][T26493] usb 3-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice=d2.54 [ 1173.323420][T26493] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1173.379906][T26493] usb 3-1: Product: syz [ 1173.393301][T26493] usb 3-1: Manufacturer: syz [ 1173.408476][T26493] usb 3-1: SerialNumber: syz [ 1173.428665][T26493] usb 3-1: config 0 descriptor?? [ 1173.467016][T26493] usb 3-1: invalid MIDI EP [ 1173.481672][T26493] usb 3-1: snd-bcd2000: error during probing [ 1173.500136][T26493] snd-bcd2000 3-1:0.0: probe with driver snd-bcd2000 failed with error -22 [ 1177.068364][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.074754][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.941533][T15559] usb 3-1: USB disconnect, device number 6 [ 1183.752225][T29588] uprobe: syz.4.8718:29588 failed to unregister, leaking uprobe [ 1183.822718][T29593] loop2: detected capacity change from 0 to 2048 [ 1187.189370][T29645] overlayfs: failed to clone upperpath [ 1188.455228][T29659] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8743'. [ 1189.937363][T29695] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8755'. [ 1190.070166][T29695] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8755'. [ 1192.234473][T26492] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1192.474365][T26492] usb 3-1: Using ep0 maxpacket: 32 [ 1192.902864][T26492] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 1192.960518][T26492] usb 3-1: config 0 has no interface number 0 [ 1193.052889][T26492] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1193.078860][T26492] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1193.117549][T26492] usb 3-1: Product: syz [ 1193.122602][T26492] usb 3-1: Manufacturer: syz [ 1193.144390][T26492] usb 3-1: SerialNumber: syz [ 1193.168781][T26492] usb 3-1: config 0 descriptor?? [ 1193.206724][T26492] smsc95xx v2.0.0 [ 1193.611690][T26492] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1193.779807][T29752] netlink: 'syz.6.8774': attribute type 10 has an invalid length. [ 1193.788993][T26492] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1193.835474][T29752] 8021q: adding VLAN 0 to HW filter on device team0 [ 1195.939343][T26492] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -71 [ 1195.962774][T26492] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 1196.001104][T26492] usb 3-1: USB disconnect, device number 7 [ 1198.132940][T29811] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8789'. [ 1198.504807][T29811] netlink: 'syz.4.8789': attribute type 5 has an invalid length. [ 1198.531689][T29811] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8789'. [ 1198.792338][T29816] batadv_slave_1: entered promiscuous mode [ 1199.048894][T29815] batadv_slave_1: left promiscuous mode [ 1199.179724][T29821] overlayfs: failed to clone lowerpath [ 1201.276745][T29843] netlink: 'syz.1.8800': attribute type 27 has an invalid length. [ 1201.315164][T29843] netlink: 'syz.1.8800': attribute type 4 has an invalid length. [ 1201.341880][T29843] netlink: 144 bytes leftover after parsing attributes in process `syz.1.8800'. [ 1209.504918][T29922] batadv_slave_0: entered promiscuous mode [ 1209.689691][T29921] batadv_slave_0: left promiscuous mode [ 1211.058401][ T5936] Process accounting resumed [ 1211.095123][T29928] loop2: detected capacity change from 0 to 512 [ 1211.180429][T29928] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.8829: invalid indirect mapped block 27 (level 1) [ 1211.285916][T29928] EXT4-fs (loop2): Remounting filesystem read-only [ 1211.311511][T29928] EXT4-fs (loop2): 1 truncate cleaned up [ 1211.496378][T29928] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1212.494803][T29928] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1224.146480][T30073] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8872'. [ 1224.156294][T30073] bridge_slave_1: left promiscuous mode [ 1224.168381][T30073] vxlan0: left promiscuous mode [ 1224.174514][T30073] ip6gretap1: left promiscuous mode [ 1231.918309][T30245] xt_TCPMSS: Only works on TCP SYN packets [ 1233.243515][ T5936] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1233.460451][ T5936] usb 3-1: Using ep0 maxpacket: 8 [ 1233.473632][ T5936] usb 3-1: config index 0 descriptor too short (expected 5924, got 36) [ 1233.490163][ T5936] usb 3-1: config 250 has an invalid interface number: 228 but max is -1 [ 1233.513450][ T5936] usb 3-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 1233.570622][ T5936] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1233.579669][ T5936] usb 3-1: config 250 has no interface number 0 [ 1233.630178][ T5936] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1233.682298][ T5936] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1233.743517][ T5936] usb 3-1: config 250 interface 228 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1233.807671][ T5936] usb 3-1: config 250 interface 228 has no altsetting 0 [ 1233.841625][ T5936] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1233.879307][ T5936] usb 3-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1233.889644][ T5936] usb 3-1: Product: syz [ 1233.900597][ T5936] usb 3-1: SerialNumber: syz [ 1234.112543][ T5936] hub 3-1:250.228: bad descriptor, ignoring hub [ 1234.218151][ T30] audit: type=1326 audit(1761865843.539:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30259 comm="syz.2.8903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a74b8efc9 code=0x7ffc0000 [ 1234.300358][ T5936] hub 3-1:250.228: probe with driver hub failed with error -5 [ 1234.306524][ T30] audit: type=1326 audit(1761865843.539:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30259 comm="syz.2.8903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7f2a74b8efc9 code=0x7ffc0000 [ 1234.460545][ T30] audit: type=1326 audit(1761865843.539:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30259 comm="syz.2.8903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a74b8efc9 code=0x7ffc0000 [ 1234.575664][ T30] audit: type=1326 audit(1761865843.539:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30259 comm="syz.2.8903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a74b8efc9 code=0x7ffc0000 [ 1234.792290][ T5936] usb 3-1: reset high-speed USB device number 8 using dummy_hcd [ 1234.809340][ T30] audit: type=1326 audit(1761865843.539:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30259 comm="syz.2.8903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f2a74b8efc9 code=0x7ffc0000 [ 1234.940146][ T30] audit: type=1326 audit(1761865843.539:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30259 comm="syz.2.8903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a74b8efc9 code=0x7ffc0000 [ 1235.056049][ T30] audit: type=1326 audit(1761865843.539:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30259 comm="syz.2.8903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2a74b8d810 code=0x7ffc0000 [ 1235.152784][ T30] audit: type=1326 audit(1761865843.539:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30259 comm="syz.2.8903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2a74b8ebcb code=0x7ffc0000 [ 1235.275145][ T30] audit: type=1326 audit(1761865843.539:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30259 comm="syz.2.8903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2a74b8ebcb code=0x7ffc0000 [ 1235.407400][ T5936] usb 3-1: failed to restore interface 228 altsetting 255 (error=-71) [ 1235.451249][ T5936] usb 3-1: USB disconnect, device number 8 [ 1235.501842][ T30] audit: type=1326 audit(1761865843.539:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30259 comm="syz.2.8903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2a74b8ebcb code=0x7ffc0000 [ 1237.064144][T30304] netlink: 64 bytes leftover after parsing attributes in process `syz.0.8915'. [ 1237.202610][ T5936] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1237.419992][ T5936] usb 3-1: Using ep0 maxpacket: 8 [ 1237.446652][ T5936] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1237.476449][ T5936] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1237.525925][ T5936] usb 3-1: Product: syz [ 1237.534735][ T5936] usb 3-1: Manufacturer: syz [ 1237.539342][ T5936] usb 3-1: SerialNumber: syz [ 1237.860598][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1237.867358][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.249747][ T5936] usb 3-1: config 0 descriptor?? [ 1238.278294][ T5936] gspca_main: se401-2.14.0 probing 047d:5003 [ 1239.409049][ T5936] gspca_se401: read req failed req 0x06 error -19 [ 1239.441892][ T5936] usb 3-1: USB disconnect, device number 9 [ 1239.935777][T30346] loop2: detected capacity change from 0 to 32768 [ 1239.943530][T30346] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.8930 (30346) [ 1239.958851][T30346] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1239.969068][T30346] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm [ 1240.133416][T30346] BTRFS info (device loop2): setting nodatasum [ 1240.139662][T30346] BTRFS info (device loop2): allowing degraded mounts [ 1240.146564][T30346] BTRFS info (device loop2): enabling ssd optimizations [ 1240.153675][T30346] BTRFS info (device loop2): disabling tree log [ 1240.160053][T30346] BTRFS info (device loop2): turning on async discard [ 1240.166828][T30346] BTRFS info (device loop2): enabling free space tree [ 1240.173677][T30346] BTRFS info (device loop2): max_inline set to 0 [ 1240.347544][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 1240.347572][ T30] audit: type=1800 audit(1761865849.669:401): pid=30346 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.8930" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 1240.354513][T30346] BTRFS error (device loop2): balance: invalid convert system profile single [ 1240.550515][T23749] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1246.033389][T30443] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8957'. [ 1254.415376][T30511] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8978'. [ 1258.853539][T30563] delete_channel: no stack [ 1264.846681][T30637] sctp: [Deprecated]: syz.6.9015 (pid 30637) Use of int in max_burst socket option deprecated. [ 1264.846681][T30637] Use struct sctp_assoc_value instead [ 1264.912439][T30645] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9015'. [ 1267.720619][T30678] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1268.386433][T30695] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9032'. [ 1268.395482][T30695] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9032'. [ 1268.421260][T30695] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9032'. [ 1268.430269][T30695] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9032'. [ 1268.439358][T30695] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9032'. [ 1268.448418][T30695] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9032'. [ 1270.755375][T30716] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9039'. [ 1271.461736][T30716] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9039'. [ 1271.491322][T30724] netlink: 'syz.4.9040': attribute type 1 has an invalid length. [ 1271.663019][T30729] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9040'. [ 1272.312749][T30725] bond8: (slave geneve3): making interface the new active one [ 1272.395371][T30725] bond8: (slave geneve3): Enslaving as an active interface with an up link [ 1272.427172][T30729] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1272.467035][ T7358] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 1272.500368][ T7358] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 1272.509135][ T7358] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 1272.621465][ T7358] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 1278.349911][T30809] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1281.768106][T30842] bridge3: entered promiscuous mode [ 1281.768128][T30842] bridge3: entered allmulticast mode [ 1281.770503][T30842] team0: Port device bridge3 added [ 1281.770984][T30844] bridge0: port 1(team0) entered blocking state [ 1281.771097][T30844] bridge0: port 1(team0) entered disabled state [ 1281.771199][T30844] team0: entered allmulticast mode [ 1281.771214][T30844] team_slave_0: entered allmulticast mode [ 1281.771229][T30844] team_slave_1: entered allmulticast mode [ 1281.803445][T30844] team0: entered promiscuous mode [ 1281.803463][T30844] team_slave_0: entered promiscuous mode [ 1281.803601][T30844] team_slave_1: entered promiscuous mode [ 1284.808998][T30879] xt_connbytes: Forcing CT accounting to be enabled [ 1291.908343][T30948] overlayfs: failed to clone upperpath [ 1292.435323][T30953] overlayfs: missing 'lowerdir' [ 1292.675730][T30956] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1292.732984][T30956] bond_slave_0: entered promiscuous mode [ 1292.738872][T30956] bond_slave_1: entered promiscuous mode [ 1292.744593][T30956] bridge0: entered promiscuous mode [ 1292.761448][T30956] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1292.787559][T30956] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 1294.373129][T15559] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1295.252721][T15559] usb 3-1: Using ep0 maxpacket: 32 [ 1295.332676][T15559] usb 3-1: config 0 has no interfaces? [ 1295.552711][T15559] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1296.356191][T15559] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1296.651339][T15559] usb 3-1: Product: syz [ 1296.655535][T15559] usb 3-1: Manufacturer: syz [ 1296.670488][T15559] usb 3-1: SerialNumber: syz [ 1296.914822][T15559] usb 3-1: config 0 descriptor?? [ 1296.972466][T15559] usb 3-1: can't set config #0, error -71 [ 1297.060002][T15559] usb 3-1: USB disconnect, device number 10 [ 1298.022571][T30994] 9pnet_fd: Insufficient options for proto=fd [ 1299.310701][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1299.320015][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1299.492520][T31021] netlink: 'syz.6.9134': attribute type 12 has an invalid length. [ 1300.582344][T31030] netlink: 'syz.4.9137': attribute type 12 has an invalid length. [ 1300.673667][T31039] netlink: 24 bytes leftover after parsing attributes in process `syz.6.9141'. [ 1302.244533][T31059] overlayfs: failed to resolve './file0': -2 [ 1305.810639][T31091] overlayfs: failed to clone upperpath [ 1305.864550][T31090] netlink: 'syz.2.9158': attribute type 21 has an invalid length. [ 1305.872974][T31090] netlink: 'syz.2.9158': attribute type 22 has an invalid length. [ 1305.881427][T31090] netlink: 'syz.2.9158': attribute type 23 has an invalid length. [ 1305.889663][T31090] netlink: 'syz.2.9158': attribute type 25 has an invalid length. [ 1305.900536][T31090] netlink: 'syz.2.9158': attribute type 26 has an invalid length. [ 1305.900822][T31090] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9158'. [ 1306.502396][T31109] IPVS: Unknown mcast interface: vcan0 [ 1317.970534][ T30] audit: type=1326 audit(1761866183.305:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31224 comm="syz.0.9195" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe3d458efc9 code=0x0 [ 1322.360333][T31255] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1323.863743][T31255] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1324.959141][T31255] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1325.232737][T31302] TCP: TCP_TX_DELAY enabled [ 1328.996190][T31347] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9228'. [ 1329.901279][T31255] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1330.004678][ T36] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1330.053489][ T36] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1330.085197][ T36] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1330.142026][ T36] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1330.178652][ T36] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1330.205738][ T36] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1330.248936][ T36] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1330.277859][ T36] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1330.481337][T23405] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1332.217988][T31255] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1337.306356][T31413] ip6t_rpfilter: unknown options [ 1337.317001][T31415] tipc: Started in network mode [ 1337.324519][T31415] tipc: Node identity 4, cluster identity 4711 [ 1337.375297][T31415] tipc: Node number set to 4 [ 1337.649912][ T30] audit: type=1326 audit(1761866202.785:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31416 comm="syz.3.9249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2d078efc9 code=0x7ffc0000 [ 1338.450102][ T30] audit: type=1326 audit(1761866202.785:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31416 comm="syz.3.9249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fe2d078efc9 code=0x7ffc0000 [ 1338.472951][ T30] audit: type=1326 audit(1761866202.785:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31416 comm="syz.3.9249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2d078efc9 code=0x7ffc0000 [ 1338.520032][ T30] audit: type=1326 audit(1761866202.795:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31416 comm="syz.3.9249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7fe2d078efc9 code=0x7ffc0000 [ 1338.616408][ T30] audit: type=1326 audit(1761866203.915:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31416 comm="syz.3.9249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2d078efc9 code=0x7ffc0000 [ 1338.943445][T31428] xt_socket: unknown flags 0x4c [ 1339.604627][ T30] audit: type=1326 audit(1761866203.915:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31416 comm="syz.3.9249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2d078efc9 code=0x7ffc0000 [ 1339.663867][ T5833] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1339.674116][ T5833] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1340.164255][ T5833] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1340.184903][ T5833] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1340.197531][ T5833] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1342.099783][T31429] chnl_net:caif_netlink_parms(): no params data found [ 1342.377928][T31461] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9263'. [ 1342.963296][ T5833] Bluetooth: hci6: command tx timeout [ 1343.089546][T31461] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1344.380417][T31429] bridge0: port 1(bridge_slave_0) entered blocking state [ 1344.387611][T31429] bridge0: port 1(bridge_slave_0) entered disabled state [ 1344.489960][T31429] bridge_slave_0: entered allmulticast mode [ 1344.556592][T31429] bridge_slave_0: entered promiscuous mode [ 1344.701562][T31429] bridge0: port 2(bridge_slave_1) entered blocking state [ 1344.708735][T31429] bridge0: port 2(bridge_slave_1) entered disabled state [ 1344.745396][T31429] bridge_slave_1: entered allmulticast mode [ 1344.762177][T31429] bridge_slave_1: entered promiscuous mode [ 1344.846355][ T30] audit: type=1326 audit(1761866210.175:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31492 comm="syz.4.9274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f692a78efc9 code=0x7ffc0000 [ 1345.050173][ T5833] Bluetooth: hci6: command tx timeout [ 1346.549723][ T30] audit: type=1326 audit(1761866210.175:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31492 comm="syz.4.9274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f692a78efc9 code=0x7ffc0000 [ 1346.621084][ T30] audit: type=1326 audit(1761866210.365:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31492 comm="syz.4.9274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f692a78efc9 code=0x7ffc0000 [ 1346.680244][T31510] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1346.822110][T31511] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9277'. [ 1346.963502][T31512] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9277'. [ 1347.269244][T31429] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1347.389970][ T30] audit: type=1326 audit(1761866210.365:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31492 comm="syz.4.9274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f692a78efc9 code=0x7ffc0000 [ 1347.415858][ T30] audit: type=1326 audit(1761866210.365:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31492 comm="syz.4.9274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f692a78efc9 code=0x7ffc0000 [ 1347.479279][T31255] syz_tun (unregistering): left allmulticast mode [ 1347.489022][ T30] audit: type=1326 audit(1761866210.375:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31492 comm="syz.4.9274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f692a78efc9 code=0x7ffc0000 [ 1347.512762][ T30] audit: type=1326 audit(1761866210.375:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31492 comm="syz.4.9274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f692a78efc9 code=0x7ffc0000 [ 1347.581853][ T30] audit: type=1326 audit(1761866210.375:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31492 comm="syz.4.9274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f692a78efc9 code=0x7ffc0000 [ 1347.586247][T31429] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1347.650558][ T30] audit: type=1326 audit(1761866211.195:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31492 comm="syz.4.9274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7f692a78efc9 code=0x7ffc0000 [ 1347.752447][ T30] audit: type=1326 audit(1761866211.195:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31492 comm="syz.4.9274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f692a78efc9 code=0x7ffc0000 [ 1347.845235][T31322] libceph: connect (1)[c::]:6789 error -101 [ 1347.851789][T31322] libceph: mon0 (1)[c::]:6789 connect error [ 1347.856640][T31429] team0: Port device team_slave_0 added [ 1347.889019][T31524] ceph: No mds server is up or the cluster is laggy [ 1347.896118][T31429] team0: Port device team_slave_1 added [ 1347.921740][ T5833] Bluetooth: hci6: command tx timeout [ 1348.013040][T31429] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1348.020314][T31429] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1348.048632][T31429] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1348.780173][T31429] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1348.788350][T31429] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1349.590588][T31429] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1350.043524][T31429] hsr_slave_0: entered promiscuous mode [ 1350.050969][T31429] hsr_slave_1: entered promiscuous mode [ 1350.057505][T31429] debugfs: 'hsr0' already exists in 'hsr' [ 1350.063934][T31429] Cannot create hsr debugfs directory [ 1350.070534][ T5833] Bluetooth: hci6: command tx timeout [ 1350.180727][T31553] netlink: set zone limit has 8 unknown bytes [ 1351.012702][ T36] bridge_slave_1: left allmulticast mode [ 1351.031239][ T36] bridge_slave_1: left promiscuous mode [ 1351.050188][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 1351.389563][ T36] bridge_slave_0: left allmulticast mode [ 1351.405458][ T36] bridge_slave_0: left promiscuous mode [ 1351.427540][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 1351.535677][ T36] bond_slave_0: left promiscuous mode [ 1351.552181][ T36] bond_slave_1: left promiscuous mode [ 1353.353277][T31579] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1353.365915][ T5833] Bluetooth: hci3: unexpected event for opcode 0x2041 [ 1353.366181][T31578] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1356.683123][ T36] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1359.158926][T31642] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9318'. [ 1359.368122][ T36] bond1 (unregistering): (slave macvlan2): Removing an active aggregator [ 1359.379152][ T36] bond1 (unregistering): (slave macvlan2): Releasing backup interface [ 1359.412895][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1359.454992][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1359.526665][ T36] bond0 (unregistering): Released all slaves [ 1360.725659][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1360.732243][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1360.787770][ T36] bond1 (unregistering): Released all slaves [ 1361.767300][T31638] netlink: 'syz.1.9316': attribute type 12 has an invalid length. [ 1363.271373][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 1363.271394][ T30] audit: type=1326 audit(1761866228.605:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31681 comm="syz.6.9332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2ad8efc9 code=0x7ffc0000 [ 1363.970757][ T30] audit: type=1326 audit(1761866228.635:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31681 comm="syz.6.9332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f7c2ad8efc9 code=0x7ffc0000 [ 1364.112224][ T30] audit: type=1326 audit(1761866228.635:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31681 comm="syz.6.9332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2ad8efc9 code=0x7ffc0000 [ 1364.147832][ T30] audit: type=1326 audit(1761866228.635:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31681 comm="syz.6.9332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7c2ad8d810 code=0x7ffc0000 [ 1364.170827][ T30] audit: type=1326 audit(1761866228.635:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31681 comm="syz.6.9332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7c2ad8d810 code=0x7ffc0000 [ 1364.210124][ T30] audit: type=1326 audit(1761866228.635:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31681 comm="syz.6.9332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2ad8efc9 code=0x7ffc0000 [ 1364.248117][T31682] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9332'. [ 1364.288980][ T30] audit: type=1326 audit(1761866228.635:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31681 comm="syz.6.9332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7c2ad8efc9 code=0x7ffc0000 [ 1364.320711][ T30] audit: type=1326 audit(1761866228.635:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31681 comm="syz.6.9332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c2ad8efc9 code=0x7ffc0000 [ 1365.071250][ T30] audit: type=1326 audit(1761866228.635:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31681 comm="syz.6.9332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7c2ad90ee7 code=0x7ffc0000 [ 1365.108024][ T30] audit: type=1326 audit(1761866228.635:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31681 comm="syz.6.9332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f7c2ad90e5c code=0x7ffc0000 [ 1366.101079][T31699] netlink: 64 bytes leftover after parsing attributes in process `syz.0.9336'. [ 1366.320683][ T36] hsr_slave_0: left promiscuous mode [ 1366.344530][ T36] hsr_slave_1: left promiscuous mode [ 1366.406692][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1366.467674][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1366.484118][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1366.594325][ T36] veth1_macvtap: left promiscuous mode [ 1366.619856][ T36] veth0_macvtap: left promiscuous mode [ 1366.623435][T31711] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9338'. [ 1366.663024][ T36] veth1_vlan: left promiscuous mode [ 1366.668391][ T36] veth0_vlan: left promiscuous mode [ 1368.189008][T31719] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9342'. [ 1368.443012][ T36] team0 (unregistering): Port device team_slave_1 removed [ 1368.959152][T31715] netlink: 96 bytes leftover after parsing attributes in process `syz.6.9340'. [ 1370.894142][T31429] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1370.929758][T31429] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1370.965525][T31429] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1371.122381][T31429] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1371.450464][T31429] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1371.501484][T31773] xt_time: unknown flags 0xf4 [ 1371.591288][T31429] 8021q: adding VLAN 0 to HW filter on device team0 [ 1371.676155][T23405] bridge0: port 1(bridge_slave_0) entered blocking state [ 1371.683358][T23405] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1371.789573][T23405] bridge0: port 2(bridge_slave_1) entered blocking state [ 1371.796725][T23405] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1372.096391][T31429] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1372.112923][T31780] fuse: Bad value for 'fd' [ 1372.128860][T31429] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1373.300485][T31803] netlink: 'syz.1.9365': attribute type 8 has an invalid length. [ 1373.560524][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 1373.560549][ T30] audit: type=1326 audit(1761866238.885:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31808 comm="syz.4.9367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f692a78efc9 code=0x7ffc0000 [ 1373.705323][ T30] audit: type=1326 audit(1761866238.885:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31808 comm="syz.4.9367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f692a78efc9 code=0x7ffc0000 [ 1373.768083][ T30] audit: type=1326 audit(1761866238.895:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31808 comm="syz.4.9367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7f692a78efc9 code=0x7ffc0000 [ 1373.984795][ T30] audit: type=1326 audit(1761866238.895:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31808 comm="syz.4.9367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f692a78efc9 code=0x7ffc0000 [ 1374.056490][T31429] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1374.063683][ T30] audit: type=1326 audit(1761866238.895:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31808 comm="syz.4.9367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f692a78d810 code=0x7ffc0000 [ 1374.826593][ T30] audit: type=1326 audit(1761866238.895:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31808 comm="syz.4.9367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f692a78d810 code=0x7ffc0000 [ 1374.851257][ T30] audit: type=1326 audit(1761866238.895:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31808 comm="syz.4.9367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f692a78efc9 code=0x7ffc0000 [ 1374.874682][ T30] audit: type=1326 audit(1761866238.895:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31808 comm="syz.4.9367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f692a78efc9 code=0x7ffc0000 [ 1374.937038][ T30] audit: type=1326 audit(1761866238.925:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31808 comm="syz.4.9367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f692a78efc9 code=0x7ffc0000 [ 1374.967058][ T30] audit: type=1326 audit(1761866238.925:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31808 comm="syz.4.9367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f692a78efc9 code=0x7ffc0000 [ 1376.341726][T31843] bridge: RTM_NEWNEIGH with invalid ether address [ 1377.772994][T31429] veth0_vlan: entered promiscuous mode [ 1377.786895][T31429] veth1_vlan: entered promiscuous mode [ 1378.643677][T31429] veth0_macvtap: entered promiscuous mode [ 1378.656187][T31429] veth1_macvtap: entered promiscuous mode [ 1378.739771][T31429] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1378.785008][T31429] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1378.862858][T23408] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1378.900023][T23408] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1378.928677][T23408] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1378.984448][T23408] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1379.267182][T19695] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1379.319642][T19695] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1379.612488][T19695] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1380.755253][T19695] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1381.152114][T31905] binder: BINDER_SET_CONTEXT_MGR already set [ 1381.169592][T31905] binder: 31904:31905 ioctl 4018620d 200000004a80 returned -16 [ 1383.854475][T31919] input: syz1 as /devices/virtual/input/input26 [ 1384.795068][T31949] netlink: 40 bytes leftover after parsing attributes in process `syz.7.9407'. [ 1388.728238][T31976] vlan2: entered promiscuous mode [ 1388.785449][T31976] vlan2: entered allmulticast mode [ 1388.838106][T31976] hsr_slave_1: entered allmulticast mode [ 1388.860835][T31981] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9418'. [ 1389.533989][T31993] fuse: Unknown parameter '0xffffffffffffffff00000000000000000000' [ 1389.585979][T31990] veth0_to_team: entered promiscuous mode [ 1389.612480][T31990] veth0_to_team: entered allmulticast mode [ 1390.133007][T32002] overlayfs: failed to clone upperpath [ 1399.146516][T32078] netlink: 1335 bytes leftover after parsing attributes in process `syz.1.9447'. [ 1401.700148][T32097] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9451'. [ 1401.788823][T32097] veth9: entered promiscuous mode [ 1401.806928][T32097] veth9: entered allmulticast mode [ 1401.830787][T32097] bridge5: port 1(veth9) entered blocking state [ 1401.862858][T32097] bridge5: port 1(veth9) entered disabled state [ 1401.937403][T32097] bridge5: port 1(veth9) entered blocking state [ 1401.944125][T32097] bridge5: port 1(veth9) entered forwarding state [ 1402.172195][T31940] bridge5: port 1(veth9) entered disabled state [ 1403.189680][T32099] veth11: entered promiscuous mode [ 1403.194985][T32099] veth11: entered allmulticast mode [ 1403.240912][T32099] bridge5: port 2(veth11) entered blocking state [ 1403.260228][T32099] bridge5: port 2(veth11) entered disabled state [ 1403.305032][T32099] bridge5: port 2(veth11) entered blocking state [ 1403.311506][T32099] bridge5: port 2(veth11) entered forwarding state [ 1403.402755][T31940] bridge5: port 2(veth11) entered disabled state [ 1406.841070][T32133] netlink: 'syz.4.9463': attribute type 10 has an invalid length. [ 1406.901685][T32133] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1411.705491][T32186] overlayfs: failed to clone upperpath [ 1411.743691][T32199] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9478'. [ 1411.756848][T32199] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9478'. [ 1411.786868][T32199] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9478'. [ 1411.820385][T32199] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9478'. [ 1413.035693][T32210] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9483'. [ 1413.297570][T32218] netlink: 96 bytes leftover after parsing attributes in process `syz.0.9486'. [ 1413.315695][T32212] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9483'. [ 1414.659405][T32236] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9494'. [ 1414.919176][T32236] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9494'. [ 1415.663565][T32241] sctp: [Deprecated]: syz.6.9496 (pid 32241) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1415.663565][T32241] Use struct sctp_sack_info instead [ 1419.092342][T32290] overlayfs: overlapping lowerdir path [ 1421.188300][T32331] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9521'. [ 1422.175412][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.181998][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1422.229094][T32341] netlink: 4280 bytes leftover after parsing attributes in process `syz.6.9522'. [ 1422.238920][T32341] netlink: 4280 bytes leftover after parsing attributes in process `syz.6.9522'. [ 1425.261642][T32363] futex_wake_op: syz.6.9530 tries to shift op by -1; fix this program [ 1426.572488][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 1426.572511][ T30] audit: type=1326 audit(1761866291.885:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32388 comm="syz.3.9539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2d078efc9 code=0x7ffc0000 [ 1426.623762][ T30] audit: type=1326 audit(1761866291.885:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32388 comm="syz.3.9539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2d078efc9 code=0x7ffc0000 [ 1426.991656][ T30] audit: type=1326 audit(1761866291.935:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32388 comm="syz.3.9539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe2d078efc9 code=0x7ffc0000 [ 1427.732273][ T30] audit: type=1326 audit(1761866291.935:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32388 comm="syz.3.9539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2d078efc9 code=0x7ffc0000 [ 1427.758154][ T30] audit: type=1326 audit(1761866291.935:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32388 comm="syz.3.9539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2d078efc9 code=0x7ffc0000 [ 1428.000185][ T30] audit: type=1326 audit(1761866291.935:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32388 comm="syz.3.9539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fe2d078efc9 code=0x7ffc0000 [ 1428.033519][ T30] audit: type=1326 audit(1761866291.935:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32388 comm="syz.3.9539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2d078efc9 code=0x7ffc0000 [ 1428.729057][ T30] audit: type=1326 audit(1761866291.935:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32388 comm="syz.3.9539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2d078efc9 code=0x7ffc0000 [ 1428.757265][ T30] audit: type=1326 audit(1761866291.945:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32388 comm="syz.3.9539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fe2d078efc9 code=0x7ffc0000 [ 1428.795529][ T30] audit: type=1326 audit(1761866291.945:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32388 comm="syz.3.9539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2d078efc9 code=0x7ffc0000 [ 1429.035302][T32412] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 1433.015757][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 1433.015775][ T30] audit: type=1326 audit(1761866297.895:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32451 comm="syz.3.9559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2d078efc9 code=0x7ffc0000 [ 1433.070262][ T30] audit: type=1326 audit(1761866297.905:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32451 comm="syz.3.9559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7fe2d078efc9 code=0x7ffc0000 [ 1433.105307][ T30] audit: type=1326 audit(1761866297.905:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32451 comm="syz.3.9559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2d078efc9 code=0x7ffc0000 [ 1433.513882][ T30] audit: type=1326 audit(1761866297.915:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32451 comm="syz.3.9559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2d078efc9 code=0x7ffc0000 [ 1433.676994][T32470] ptrace attach of "./syz-executor exec"[20978] was attempted by "./syz-executor exec"[32470] [ 1434.620243][T32475] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9564'. [ 1436.636373][ T30] audit: type=1326 audit(1761866301.965:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32490 comm="syz.1.9571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad54d8efc9 code=0x7ffc0000 [ 1436.719964][ T5833] Bluetooth: hci3: command 0x0406 tx timeout [ 1436.747692][ T30] audit: type=1326 audit(1761866302.025:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32490 comm="syz.1.9571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7fad54d8efc9 code=0x7ffc0000 [ 1437.000004][ T30] audit: type=1326 audit(1761866302.025:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32490 comm="syz.1.9571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad54d8efc9 code=0x7ffc0000 [ 1437.032900][ T30] audit: type=1326 audit(1761866302.025:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32490 comm="syz.1.9571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad54d8efc9 code=0x7ffc0000 [ 1437.803351][ T30] audit: type=1326 audit(1761866302.075:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32490 comm="syz.1.9571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fad54d8efc9 code=0x7ffc0000 [ 1437.849915][ T30] audit: type=1326 audit(1761866302.075:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32490 comm="syz.1.9571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad54d8efc9 code=0x7ffc0000 [ 1437.907561][T20593] Bluetooth: hci3: unexpected event for opcode 0x0c2d [ 1437.926170][T32501] netlink: 'syz.4.9573': attribute type 10 has an invalid length. [ 1440.604169][T32528] syz_tun: entered allmulticast mode [ 1443.355379][T32555] 9pnet_fd: Insufficient options for proto=fd [ 1446.957173][T32593] netlink: set zone limit has 8 unknown bytes [ 1452.183612][T32628] overlayfs: failed to clone upperpath [ 1458.640892][T32674] netlink: 'syz.7.9629': attribute type 11 has an invalid length. [ 1465.265065][T32748] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1465.275948][T32748] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1465.285001][T32748] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1465.368260][T32748] Bluetooth: hci6: command 0x0406 tx timeout [ 1465.520194][T32748] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1465.537094][T32748] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1468.620030][ T5833] Bluetooth: hci5: command tx timeout [ 1469.720077][ T308] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9657'. [ 1470.689923][ T5833] Bluetooth: hci5: command tx timeout [ 1471.036687][ T318] netlink: 'syz.4.9659': attribute type 3 has an invalid length. [ 1471.470769][T32744] chnl_net:caif_netlink_parms(): no params data found [ 1472.739673][ T5833] Bluetooth: hci5: command tx timeout [ 1474.169246][ T349] 8021q: VLANs not supported on ip6gre0 [ 1474.211657][T32744] bridge0: port 1(bridge_slave_0) entered blocking state [ 1474.248340][T32744] bridge0: port 1(bridge_slave_0) entered disabled state [ 1474.270014][T32744] bridge_slave_0: entered allmulticast mode [ 1474.287570][T32744] bridge_slave_0: entered promiscuous mode [ 1474.304353][T32744] bridge0: port 2(bridge_slave_1) entered blocking state [ 1474.314408][T32744] bridge0: port 2(bridge_slave_1) entered disabled state [ 1474.383786][T32744] bridge_slave_1: entered allmulticast mode [ 1474.404989][T32744] bridge_slave_1: entered promiscuous mode [ 1474.801930][ T5833] Bluetooth: hci5: command tx timeout [ 1474.835690][T32744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1474.928550][T32744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1477.110528][ T387] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9680'. [ 1477.617444][ T388] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9682'. [ 1477.626498][ T388] netlink: 'syz.7.9682': attribute type 3 has an invalid length. [ 1477.923758][T32744] team0: Port device team_slave_0 added [ 1478.524954][T32744] team0: Port device team_slave_1 added [ 1478.758644][T32744] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1478.786088][T32744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1478.890943][T32744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1478.933800][T32744] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1478.946851][T32744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1479.137828][T32744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1480.263174][T32744] hsr_slave_0: entered promiscuous mode [ 1480.292379][T32744] hsr_slave_1: entered promiscuous mode [ 1480.317318][T32744] debugfs: 'hsr0' already exists in 'hsr' [ 1480.340378][T32744] Cannot create hsr debugfs directory [ 1480.464137][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 1480.464160][ T30] audit: type=1326 audit(1761866345.795:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=420 comm="syz.4.9694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f692a78efc9 code=0x7ffc0000 [ 1480.579719][ T30] audit: type=1326 audit(1761866345.825:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=420 comm="syz.4.9694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f692a78efc9 code=0x7ffc0000 [ 1480.661867][ T30] audit: type=1326 audit(1761866345.825:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=420 comm="syz.4.9694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f692a78efc9 code=0x7ffc0000 [ 1480.780050][ T30] audit: type=1326 audit(1761866345.825:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=420 comm="syz.4.9694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f692a78efc9 code=0x7ffc0000 [ 1480.920876][ T30] audit: type=1326 audit(1761866345.825:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=420 comm="syz.4.9694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f692a78efc9 code=0x7ffc0000 [ 1481.014322][ T30] audit: type=1326 audit(1761866345.825:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=420 comm="syz.4.9694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f692a78efc9 code=0x7ffc0000 [ 1481.110152][ T30] audit: type=1326 audit(1761866345.825:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=420 comm="syz.4.9694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f692a78efc9 code=0x7ffc0000 [ 1481.157508][T23405] bond2 (unregistering): (slave ip6gretap1): Releasing backup interface [ 1481.176518][T23405] ip6gretap1 (unregistering): left allmulticast mode [ 1481.190056][ T30] audit: type=1326 audit(1761866345.825:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=420 comm="syz.4.9694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f692a78efc9 code=0x7ffc0000 [ 1481.286113][ T30] audit: type=1326 audit(1761866345.825:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=420 comm="syz.4.9694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f692a78efc9 code=0x7ffc0000 [ 1481.772281][ T30] audit: type=1326 audit(1761866345.825:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=420 comm="syz.4.9694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f692a78efc9 code=0x7ffc0000 [ 1483.608698][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1483.622222][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.350062][ T469] delete_channel: no stack [ 1485.671492][T23405] team0: Port device bridge2 removed [ 1487.450431][T23405] bond0 (unregistering): Released all slaves [ 1487.914070][T23405] bond1 (unregistering): Released all slaves [ 1488.035930][T23405] bond2 (unregistering): Released all slaves [ 1488.902973][ T512] __vm_enough_memory: pid: 512, comm: syz.6.9718, bytes: 21200128573440 not enough memory for the allocation [ 1491.387861][ T531] No such timeout policy "syz1" [ 1499.459307][T23405] hsr_slave_0: left promiscuous mode [ 1508.506464][T32744] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1508.614103][T32744] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1508.626724][T32744] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1508.723645][T32744] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1509.052494][T23405] IPVS: stop unused estimator thread 0... [ 1510.738001][T32744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1510.760887][T32744] 8021q: adding VLAN 0 to HW filter on device team0 [ 1510.936236][T23408] bridge0: port 1(bridge_slave_0) entered blocking state [ 1510.943469][T23408] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1510.961292][T23408] bridge0: port 2(bridge_slave_1) entered blocking state [ 1510.968448][T23408] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1511.678911][T32744] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1515.138184][T32744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1521.202007][T32744] veth0_vlan: entered promiscuous mode [ 1522.023625][T32744] veth1_vlan: entered promiscuous mode [ 1526.884187][T20593] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1526.990230][T20593] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1527.100337][T20593] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1527.109168][T20593] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1527.117325][T20593] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1529.200452][T32748] Bluetooth: hci2: command tx timeout [ 1529.994089][ T865] autofs: Bad value for 'fd' [ 1531.294011][T32748] Bluetooth: hci2: command tx timeout [ 1532.321448][ T854] chnl_net:caif_netlink_parms(): no params data found [ 1533.390263][T32748] Bluetooth: hci2: command tx timeout [ 1535.061667][ T854] bridge0: port 1(bridge_slave_0) entered blocking state [ 1535.070081][ T854] bridge0: port 1(bridge_slave_0) entered disabled state [ 1535.077230][ T854] bridge_slave_0: entered allmulticast mode [ 1535.097469][ T854] bridge_slave_0: entered promiscuous mode [ 1535.161258][ T946] MTD: Couldn't look up '/dev/nullb0': -15 [ 1535.188418][ T854] bridge0: port 2(bridge_slave_1) entered blocking state [ 1535.203335][ T854] bridge0: port 2(bridge_slave_1) entered disabled state [ 1535.222348][ T854] bridge_slave_1: entered allmulticast mode [ 1535.258735][ T949] netlink: 20 bytes leftover after parsing attributes in process `syz.7.9833'. [ 1535.270277][ T854] bridge_slave_1: entered promiscuous mode [ 1536.312815][T32748] Bluetooth: hci2: command tx timeout [ 1537.309776][T23408] bridge_slave_1: left allmulticast mode [ 1537.322241][T23408] bridge_slave_1: left promiscuous mode [ 1537.328052][T23408] bridge0: port 2(bridge_slave_1) entered disabled state [ 1537.988126][T23408] bridge_slave_0: left allmulticast mode [ 1537.995463][T23408] bridge_slave_0: left promiscuous mode [ 1538.007085][T23408] bridge0: port 1(bridge_slave_0) entered disabled state [ 1649.379830][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1649.386817][ C0] rcu: 1-...!: (0 ticks this GP) idle=068c/1/0x4000000000000000 softirq=222066/222066 fqs=0 [ 1649.399050][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P1020/1:b..l [ 1649.406966][ C0] rcu: (detected by 0, t=10506 jiffies, g=170449, q=210 ncpus=2) [ 1649.414768][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1649.414801][ C1] NMI backtrace for cpu 1 [ 1649.414817][ C1] CPU: 1 UID: 0 PID: 1031 Comm: syz.6.9851 Not tainted syzkaller #0 PREEMPT(full) [ 1649.414842][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1649.414856][ C1] RIP: 0010:lock_is_held_type+0x6c/0x190 [ 1649.414890][ C1] Code: 8b 2c 25 08 20 6e 92 41 83 bd 2c 0b 00 00 00 0f 85 d8 00 00 00 89 f5 49 89 fe 48 c7 04 24 00 00 00 00 9c 8f 04 24 4c 8b 24 24 48 c7 c7 9a 02 72 8d e8 07 17 00 00 65 ff 05 10 4b 28 07 41 83 [ 1649.414910][ C1] RSP: 0018:ffffc90000a08c28 EFLAGS: 00000046 [ 1649.414929][ C1] RAX: 0000000000000000 RBX: 00000000ffffffff RCX: 0000000000010000 [ 1649.414944][ C1] RDX: ffff88808d168000 RSI: 00000000ffffffff RDI: ffff88807a197300 [ 1649.414962][ C1] RBP: 00000000ffffffff R08: 0000000000000003 R09: 0000000000000004 [ 1649.414976][ C1] R10: dffffc0000000000 R11: fffff5200014117c R12: 0000000000000046 [ 1649.414993][ C1] R13: ffff88808d168000 R14: ffff88807a197300 R15: ffff888052e47c00 [ 1649.415013][ C1] FS: 0000000000000000(0000) GS:ffff88812623e000(0000) knlGS:0000000000000000 [ 1649.415033][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1649.415048][ C1] CR2: 0000200000089030 CR3: 000000003106b000 CR4: 0000000000350ef0 [ 1649.415067][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1649.415081][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1649.415095][ C1] Call Trace: [ 1649.415104][ C1] [ 1649.415118][ C1] advance_sched+0x1d2/0xc90 [ 1649.415144][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1649.415171][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1649.415199][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1649.415233][ C1] ? __pfx_advance_sched+0x10/0x10 [ 1649.415254][ C1] __hrtimer_run_queues+0x52c/0xc60 [ 1649.415279][ C1] ? ktime_get_update_offsets_now+0x67/0x3d0 [ 1649.415314][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1649.415352][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1649.415376][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1649.415403][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1649.415435][ C1] hrtimer_interrupt+0x45b/0xaa0 [ 1649.415480][ C1] __sysvec_apic_timer_interrupt+0x10b/0x410 [ 1649.415509][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 1649.415538][ C1] [ 1649.415546][ C1] [ 1649.415555][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1649.415579][ C1] RIP: 0010:rcu_is_watching+0x55/0xb0 [ 1649.415605][ C1] Code: bd 92 8d 4c 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 1c 6b 7f 00 48 c7 c3 d8 4f 6f 92 49 03 1e 48 89 d8 48 c1 e8 03 <42> 0f b6 04 38 84 c0 75 34 8b 03 65 ff 0d 99 d1 c7 10 74 11 83 e0 [ 1649.415624][ C1] RSP: 0018:ffffc90003ae6cf0 EFLAGS: 00000212 [ 1649.415642][ C1] RAX: 1ffff110171265fb RBX: ffff8880b8932fd8 RCX: 836e724877319000 [ 1649.415660][ C1] RDX: ffffc90003ae6e01 RSI: ffffffff8bbf05c0 RDI: ffffffff8bbf0580 [ 1649.415677][ C1] RBP: dffffc0000000000 R08: ffffc90003ae7a10 R09: ffffc90003ae6e98 [ 1649.415694][ C1] R10: dffffc0000000000 R11: fffff5200075cdd5 R12: ffffc90003ae7a20 [ 1649.415711][ C1] R13: ffffffff81738d25 R14: ffffffff8d92bdd8 R15: dffffc0000000000 [ 1649.415736][ C1] ? unwind_next_frame+0xa5/0x2390 [ 1649.415774][ C1] ? unwind_next_frame+0xa5/0x2390 [ 1649.415800][ C1] lock_release+0x4b/0x3e0 [ 1649.415822][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1649.415848][ C1] ? deref_stack_reg+0x19f/0x230 [ 1649.415877][ C1] ? unwind_next_frame+0xa5/0x2390 [ 1649.415903][ C1] unwind_next_frame+0x19a9/0x2390 [ 1649.415934][ C1] ? unwind_next_frame+0xa5/0x2390 [ 1649.415961][ C1] ? __fput+0x68e/0xa70 [ 1649.415991][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1649.416023][ C1] arch_stack_walk+0x11c/0x150 [ 1649.416055][ C1] ? task_work_run+0x1d4/0x260 [ 1649.416091][ C1] stack_trace_save+0x9c/0xe0 [ 1649.416121][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1649.416156][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1649.416184][ C1] save_stack+0xf5/0x1f0 [ 1649.416218][ C1] ? __pfx_save_stack+0x10/0x10 [ 1649.416249][ C1] ? free_unref_folios+0xdb3/0x14f0 [ 1649.416282][ C1] ? folios_put_refs+0x584/0x670 [ 1649.416307][ C1] ? shmem_undo_range+0x49e/0x14b0 [ 1649.416334][ C1] ? shmem_evict_inode+0x272/0xa70 [ 1649.416354][ C1] ? evict+0x504/0x9c0 [ 1649.416380][ C1] ? __dentry_kill+0x209/0x660 [ 1649.416400][ C1] ? dput+0x19f/0x2b0 [ 1649.416418][ C1] ? __fput+0x68e/0xa70 [ 1649.416446][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1649.416474][ C1] ? page_ext_put+0x97/0xc0 [ 1649.416510][ C1] __reset_page_owner+0x71/0x1f0 [ 1649.416544][ C1] free_unref_folios+0xdb3/0x14f0 [ 1649.416582][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1649.416611][ C1] ? folio_unqueue_deferred_split+0x93/0x230 [ 1649.416638][ C1] folios_put_refs+0x584/0x670 [ 1649.416671][ C1] ? __pfx_folios_put_refs+0x10/0x10 [ 1649.416700][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1649.416730][ C1] ? folio_batch_remove_exceptionals+0x18c/0x1f0 [ 1649.416762][ C1] shmem_undo_range+0x49e/0x14b0 [ 1649.416802][ C1] ? __pfx_shmem_undo_range+0x10/0x10 [ 1649.416850][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1649.416894][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1649.416922][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 1649.416951][ C1] ? percpu_counter_add_batch+0xea/0x1e0 [ 1649.416989][ C1] shmem_evict_inode+0x272/0xa70 [ 1649.417015][ C1] ? inode_wait_for_writeback+0xf9/0x290 [ 1649.417043][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 1649.417064][ C1] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 1649.417094][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1649.417122][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1649.417148][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 1649.417181][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 1649.417201][ C1] evict+0x504/0x9c0 [ 1649.417235][ C1] ? __pfx_evict+0x10/0x10 [ 1649.417260][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1649.417286][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 1649.417318][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1649.417344][ C1] ? _raw_spin_unlock+0x28/0x50 [ 1649.417368][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1649.417394][ C1] ? iput+0x946/0xc50 [ 1649.417421][ C1] __dentry_kill+0x209/0x660 [ 1649.417443][ C1] ? dput+0x37/0x2b0 [ 1649.417463][ C1] dput+0x19f/0x2b0 [ 1649.417484][ C1] __fput+0x68e/0xa70 [ 1649.417517][ C1] task_work_run+0x1d4/0x260 [ 1649.417553][ C1] ? __pfx_task_work_run+0x10/0x10 [ 1649.417584][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1649.417614][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1649.417643][ C1] do_exit+0x6b5/0x2300 [ 1649.417679][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1649.417704][ C1] ? do_raw_spin_lock+0x121/0x290 [ 1649.417741][ C1] ? __pfx_do_exit+0x10/0x10 [ 1649.417783][ C1] do_group_exit+0x21c/0x2d0 [ 1649.417815][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1649.417841][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1649.417872][ C1] get_signal+0x1285/0x1340 [ 1649.417910][ C1] arch_do_signal_or_restart+0xa0/0x790 [ 1649.417948][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1649.417984][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1649.418009][ C1] ? __se_sys_futex+0x36f/0x400 [ 1649.418048][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1649.418077][ C1] ? exit_to_user_mode_loop+0x40/0x130 [ 1649.418101][ C1] exit_to_user_mode_loop+0x72/0x130 [ 1649.418123][ C1] do_syscall_64+0x2bd/0xfa0 [ 1649.418153][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1649.418182][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1649.418203][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1649.418229][ C1] ? exc_page_fault+0xab/0x100 [ 1649.418259][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1649.418281][ C1] RIP: 0033:0x7f7c2ad8efc9 [ 1649.418299][ C1] Code: Unable to access opcode bytes at 0x7f7c2ad8ef9f. [ 1649.418311][ C1] RSP: 002b:00007f7c2bcc70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1649.418332][ C1] RAX: fffffffffffffe00 RBX: 00007f7c2afe6098 RCX: 00007f7c2ad8efc9 [ 1649.418349][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7c2afe6098 [ 1649.418364][ C1] RBP: 00007f7c2afe6090 R08: 0000000000000000 R09: 0000000000000000 [ 1649.418379][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1649.418393][ C1] R13: 00007f7c2afe6128 R14: 00007ffc28c303c0 R15: 00007ffc28c304a8 [ 1649.418423][ C1] [ 1649.418792][ C0] task:syz.7.9850 state:R running task stack:25064 pid:1020 tgid:1018 ppid:31429 task_flags:0x400040 flags:0x00080001 [ 1650.235509][ C0] Call Trace: [ 1650.238790][ C0] [ 1650.241724][ C0] __schedule+0x1798/0x4cc0 [ 1650.246252][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1650.251901][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1650.257540][ C0] ? __pfx___schedule+0x10/0x10 [ 1650.262398][ C0] ? finish_task_switch+0x32b/0x950 [ 1650.267607][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1650.273253][ C0] ? rcu_is_watching+0x15/0xb0 [ 1650.278019][ C0] ? trace_sched_exit_tp+0x36/0x110 [ 1650.283228][ C0] ? preempt_schedule_irq+0xaa/0x150 [ 1650.288521][ C0] preempt_schedule_irq+0xb5/0x150 [ 1650.293637][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 1650.299370][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1650.305001][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 1650.310814][ C0] irqentry_exit+0x6f/0x90 [ 1650.315235][ C0] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1650.320689][ C0] RIP: 0010:lock_release+0x2b5/0x3e0 [ 1650.325970][ C0] Code: 51 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 75 56 f7 c3 00 02 00 00 74 01 fb 65 48 8b 05 4b ba d0 10 <48> 3b 44 24 28 0f 85 8b 00 00 00 48 83 c4 30 5b 41 5c 41 5d 41 5e [ 1650.345577][ C0] RSP: 0018:ffffc90003ccf278 EFLAGS: 00000206 [ 1650.351650][ C0] RAX: f6c4db2818268100 RBX: 0000000000000206 RCX: f6c4db2818268100 [ 1650.359618][ C0] RDX: 0000000000000001 RSI: ffffffff8d8f29f0 RDI: ffffffff8bbf05e0 [ 1650.367587][ C0] RBP: ffff88807c45e618 R08: ffff88807e3be1e3 R09: 1ffff1100fc77c3c [ 1650.375558][ C0] R10: dffffc0000000000 R11: ffffed100fc77c3d R12: 0000000000000001 [ 1650.383530][ C0] R13: 0000000000000001 R14: ffffffff8df3d2e0 R15: ffff88807c45dac0 [ 1650.391523][ C0] ? do_wp_page+0x103a/0x5800 [ 1650.396213][ C0] do_wp_page+0x1046/0x5800 [ 1650.400723][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1650.406356][ C0] ? __lock_acquire+0xab9/0xd20 [ 1650.411213][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1650.416860][ C0] ? __pfx_do_wp_page+0x10/0x10 [ 1650.421716][ C0] ? do_raw_spin_lock+0x121/0x290 [ 1650.426746][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1650.432385][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1650.437762][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1650.443411][ C0] __handle_mm_fault+0x1033/0x5400 [ 1650.448552][ C0] ? __pfx___handle_mm_fault+0x10/0x10 [ 1650.454039][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1650.459669][ C0] ? find_vma+0xe7/0x160 [ 1650.463915][ C0] ? __pfx_find_vma+0x10/0x10 [ 1650.468601][ C0] handle_mm_fault+0x40a/0x8e0 [ 1650.473384][ C0] do_user_addr_fault+0x764/0x1380 [ 1650.478513][ C0] exc_page_fault+0x82/0x100 [ 1650.483112][ C0] asm_exc_page_fault+0x26/0x30 [ 1650.487958][ C0] RIP: 0010:__put_user_nocheck_4+0x3/0x10 [ 1650.493684][ C0] Code: d9 0f 01 cb 89 01 31 c9 0f 01 ca e9 72 b4 ca f5 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 01 cb <89> 01 31 c9 0f 01 ca e9 4c b4 ca f5 90 90 90 90 90 90 90 90 90 90 [ 1650.513288][ C0] RSP: 0018:ffffc90003ccf8b8 EFLAGS: 00050202 [ 1650.519358][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000200000089030 [ 1650.527322][ C0] RDX: ffff88807c45dac0 RSI: 0000000000000002 RDI: 00000000ffffffff [ 1650.535284][ C0] RBP: ffffc90003ccfa30 R08: ffffc90003ccf667 R09: 1ffff92000799ecc [ 1650.543251][ C0] R10: dffffc0000000000 R11: fffff52000799ecd R12: 0000000000000002 [ 1650.551216][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000200000089000 [ 1650.559207][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1650.564845][ C0] ____sys_recvmsg+0x2ab/0x460 [ 1650.569620][ C0] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1650.574925][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1650.580558][ C0] ? import_iovec+0x74/0xa0 [ 1650.585070][ C0] ___sys_recvmsg+0x1b5/0x510 [ 1650.589754][ C0] ? __pfx____sys_recvmsg+0x10/0x10 [ 1650.594988][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1650.600623][ C0] ? __might_fault+0xb0/0x130 [ 1650.605315][ C0] do_recvmmsg+0x307/0x770 [ 1650.609752][ C0] ? __pfx_do_recvmmsg+0x10/0x10 [ 1650.614705][ C0] ? count_memcg_event_mm+0x21/0x260 [ 1650.620014][ C0] __x64_sys_recvmmsg+0x190/0x240 [ 1650.625044][ C0] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1650.630596][ C0] ? do_syscall_64+0xbe/0xfa0 [ 1650.635282][ C0] do_syscall_64+0xfa/0xfa0 [ 1650.639788][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1650.644990][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1650.651051][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1650.656683][ C0] ? exc_page_fault+0xab/0x100 [ 1650.661454][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1650.667342][ C0] RIP: 0033:0x7f0712f8efc9 [ 1650.671750][ C0] RSP: 002b:00007f0713e19038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1650.680163][ C0] RAX: ffffffffffffffda RBX: 00007f07131e6090 RCX: 00007f0712f8efc9 [ 1650.688129][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000004 [ 1650.696092][ C0] RBP: 00007f0713011f91 R08: 0000000000000000 R09: 0000000000000000 [ 1650.704056][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1650.712017][ C0] R13: 00007f07131e6128 R14: 00007f07131e6090 R15: 00007ffd62c97848 [ 1650.720011][ C0] [ 1650.723021][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10505 jiffies! g170449 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 1650.735423][ C0] rcu: Possible timer handling issue on cpu=1 timer-softirq=97348 [ 1650.743299][ C0] rcu: rcu_preempt kthread starved for 10506 jiffies! g170449 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 1650.754746][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1650.764702][ C0] rcu: RCU grace-period kthread stack dump: [ 1650.770574][ C0] task:rcu_preempt state:I stack:27288 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1650.782507][ C0] Call Trace: [ 1650.785776][ C0] [ 1650.788707][ C0] __schedule+0x1798/0x4cc0 [ 1650.793244][ C0] ? __lock_acquire+0xab9/0xd20 [ 1650.798093][ C0] ? __pfx___schedule+0x10/0x10 [ 1650.802962][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1650.808610][ C0] ? schedule+0x91/0x360 [ 1650.812858][ C0] schedule+0x165/0x360 [ 1650.817018][ C0] schedule_timeout+0x12b/0x270 [ 1650.821868][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1650.827239][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1650.832533][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1650.838163][ C0] ? prepare_to_swait_event+0x341/0x380 [ 1650.843724][ C0] rcu_gp_fqs_loop+0x301/0x1540 [ 1650.848583][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 1650.853515][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1650.858717][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1650.864000][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1650.869203][ C0] ? finish_swait+0xcd/0x1f0 [ 1650.873801][ C0] rcu_gp_kthread+0x99/0x390 [ 1650.878389][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1650.883581][ C0] ? __kthread_parkme+0x7b/0x200 [ 1650.888518][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1650.894147][ C0] ? __kthread_parkme+0x1a1/0x200 [ 1650.899178][ C0] kthread+0x711/0x8a0 [ 1650.903256][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1650.908448][ C0] ? __pfx_kthread+0x10/0x10 [ 1650.913038][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1650.918671][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1650.923869][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1650.929498][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1650.934698][ C0] ? __pfx_kthread+0x10/0x10 [ 1650.939295][ C0] ret_from_fork+0x4bc/0x870 [ 1650.943891][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1650.949010][ C0] ? __switch_to_asm+0x39/0x70 [ 1650.953766][ C0] ? __switch_to_asm+0x33/0x70 [ 1650.958523][ C0] ? __pfx_kthread+0x10/0x10 [ 1650.963120][ C0] ret_from_fork_asm+0x1a/0x30 [ 1650.967896][ C0]