last executing test programs: 37m46.00350021s ago: executing program 3 (id=94): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000140)="f3650f0134e03ef30f1ef2c4e1d5ef7200b8010000000f01d9b805000000b9882f00000f01c10f01cf6627f4c4c35d18ed9ac4c35d486e2c00"}], 0x1, 0x70, 0x0, 0xffffffffffffffeb) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 37m45.62889869s ago: executing program 3 (id=96): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000200000000000000000000000850000006d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) 37m45.37846216s ago: executing program 3 (id=101): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000300)={0x18, 0x0, 0x0, {0xfffffffffffffffa}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000002100)=ANY=[@ANYBLOB="b0000000"], 0xb0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000140)=ANY=[], 0x10) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl}]}}) 37m45.13386101s ago: executing program 3 (id=106): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x786, &(0x7f0000000800)="$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") creat(&(0x7f0000000580)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x8000c2, &(0x7f0000000740), 0x0, 0x5d1, &(0x7f0000000140)="$eJzs3U9sI1f9APDvOMk62c0229+vh4KALqWwoFWdTbZdVb20XJCgVCAVxKGHbeR4o1Wc9bJ2ShMikZw4cEWiEie4cOHEoRIHpIoD4tob3LiUA2JBC6iphJDRTMaJ7dixd5ONSfL5qFO/+ZP3fc/reeN5npkXwJl1OSI2I+JcRLwVETORZMuTfIpXd6Z0u48ebJS3H2yUk2g23/j7eJ7DRrm1fcuFiPhhZ5ikO259bX15oVqt3MvnZxsrd2fra+vP315ZWKosVe7Mz9+Yu3Htpesvzh9ZXZ9Z+dX9r9x+7du/+fWnP/xg80vfTwv1Sr4urVt7eZvN5uEDvtKq+ERM54sKEZG+c68dPvf/CWN5fc6NuiA8kvTz+H8R8Wye3jU5ujIBAI9XMWaiObM332xT6JhrNpMe2wAAJ096zj8dSaGUn/9PR6FQKmV9eJNPxflCtVZvXL1VW72zGFkf1qWYKNy6Xa1cy/oK0+8PE0k6P5ety9Zn8/Nd89cj4smI+HFxKpsvlWvVxVF96QGAM+5C1/H/X8X0+F8c5k/9QgAAJ9nwR/J91/EAACfU/uP/xEjKAQAcHz35AHD2tB3/h/rlHwA4+Sa77v3vqem3fwA4TXr2/795cS/9dOLaPwA4Zfz+DwBnyjdffz2dmtvNJHv+9eLba6vLtbefX6zUl0srq+VSuXbvbmmpNhnZM3tWemSx1T5TrdXuzr0Qq+/MNir1xmx9bf3mSm31TuNm9lzvmxXPiQaA0Xvymff/mETE5stT2RStsRwGXxAAnHB2czi7xkZdAGBkxkddAGBk2h7089dRlgMYnT4X9+7eDtzzEqGpiHi3f55TR1Au4PG58ok+/f/dDwHs7Cj8zxGMjg2MWL5b6waAM+hw/f8eEwwn2cEHfjcGwWnWbCbG8weAM2aIM3iXCMIpN+jhXnoCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYL/pbEoKpXws8OkoFEqliIsRcSkmklu3q5VrEfFERPyhOFFM5+dGXWgA4JAKf0ny8b+uzDw33b32XPJxMXuNiO/99I2fvLPQaA0duLu88W62vHFvvmeA4uOvAwDQZrx7Qes4nb22nch/9GCj3JqOs4D3v5wNLjoVEeXtBxvlvfGIx/PCz2RjFJ//Z9JRmST9b9CgpUPY3IqIp7vrX9hdfykf+bQ7/ljs9JEcOn72/+mIfe9/kvXN7MXv/BpVyNbtvKZvw/9PPUw8IPV+2v682qv9K8Tl7DXf/8Y7G9PJ+NH+xvUR5O1fbDc3svZvuy1+mv83Lk5mbU2P9i8vX1+7Qzbff+F3X91J/WB//K2x5ifHI1qxt9van1Y2SZ/4zw1Zxz996jPP9nuzmj+LuBIHxd9JzTZW7s7W19Z/+bX3fr9UWarcmZ+/MXfj2kvXX5yfzfqoZ1s91fv97eWrT/Qr2/2tiPN94k8OqP/n8/Sgz8HP//3Wm589IP4XP9crfiGeOiB+ekz8woC4LQvn3+s7fHcaf7FP/cc74p/r+Lt02dXuzPp8ID/88/qQJQUAjkN9bX15oVqt3BsmUYj15YXWiWa+KjazxHc/3lk6KJ+pYWM9SmJg9CNOTET7ksl92ySbEUcQ60KfVb946Awn4ljfn1bit+P/+PrQH7bv9Fi19RBBi21LPuj8rB6uFoUDd5mxqI7lGwzMMN9ucxT/Flni8hDbHGMjBIzE3k4/6pIAAAAAAAAAAAAAAAD91L+VP/LviO80ar8ZbtR1BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4PT6bwAAAP///H62LQ==") mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) lchown(&(0x7f0000000fc0)='./file0\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x14113e, 0x6ceac77f206eabb9) write$binfmt_script(r0, &(0x7f0000000080), 0x208e24b) stat(&(0x7f0000000140)='./file0\x00', 0x0) 37m44.64280409s ago: executing program 3 (id=111): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) dup2(r0, r1) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x4, 0x8, 0x6, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x10}, 0xe) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000001c0)={r3, @in={{0x2, 0x4e23, @empty}}}, 0x90) 37m43.936315537s ago: executing program 3 (id=119): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sigaltstack(&(0x7f0000000480)={&(0x7f0000004000)=""/4126, 0x80000001, 0x101e}, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 37m43.559734857s ago: executing program 32 (id=119): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sigaltstack(&(0x7f0000000480)={&(0x7f0000004000)=""/4126, 0x80000001, 0x101e}, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 36m12.023137336s ago: executing program 4 (id=774): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f0000000300)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000240)={0xaa, 0x50}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x3}) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000140)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}}) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xf) 36m11.908969056s ago: executing program 4 (id=775): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x5d032, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) openat$cuse(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioperm(0x2, 0x8, 0xa) 36m11.145489207s ago: executing program 4 (id=777): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}]}, 0x6c}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) 36m10.943816853s ago: executing program 4 (id=778): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRESOCT=0x0, @ANYRES8, @ANYRES64, @ANYRESOCT], 0x1, 0x6e7, &(0x7f0000001a40)="$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") r0 = fsopen(&(0x7f0000000280)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = open(&(0x7f00000003c0)='.\x00', 0x100, 0x97) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) 36m10.636540579s ago: executing program 4 (id=781): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@dev, 0x0, 0x2b}, 0x0, @in=@multicast1}}, 0xe8) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@multicast2, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0xe8) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="0203100802"], 0x10}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) sendmsg$key(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="020a000002"], 0x10}}, 0x0) 36m10.045047026s ago: executing program 4 (id=785): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = shmat(0xffffffffffffffff, &(0x7f0000ff8000/0x6000)=nil, 0x3000) shmdt(r0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x74}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) write$char_usb(0xffffffffffffffff, 0x0, 0x0) capset(0x0, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) keyctl$set_reqkey_keyring(0xe, 0x2) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='q\xa9', 0x0) 36m9.746201411s ago: executing program 33 (id=785): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = shmat(0xffffffffffffffff, &(0x7f0000ff8000/0x6000)=nil, 0x3000) shmdt(r0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x74}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) write$char_usb(0xffffffffffffffff, 0x0, 0x0) capset(0x0, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) keyctl$set_reqkey_keyring(0xe, 0x2) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='q\xa9', 0x0) 35m32.80838395s ago: executing program 0 (id=1017): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x40000ab, 0x10122, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) write$sndseq(r2, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @time={0x7ffffffd, 0x4}, {}, {}, @result={0x1f00}}], 0x1c) 35m29.59531061s ago: executing program 5 (id=1041): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') r0 = creat(&(0x7f0000001200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa) r1 = fanotify_init(0xf00, 0x0) fanotify_mark(r1, 0x105, 0x40009975, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x0, 0x1) 35m29.278939896s ago: executing program 5 (id=1042): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000540)={@fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x29}, @flat=@weak_binder}, &(0x7f0000000600)={0x33, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 35m28.84848296s ago: executing program 5 (id=1045): mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) write$FUSE_IOCTL(r1, &(0x7f0000000100)={0x20}, 0xfdef) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000000)='./bus\x00', 0x22000c43) r3 = open(&(0x7f00000002c0)='./bus\x00', 0x60102, 0x0) splice(r0, 0x0, r3, 0x0, 0xffffffe1, 0x0) read$FUSE(r3, &(0x7f0000000740)={0x2020}, 0x2020) 35m28.651795476s ago: executing program 5 (id=1048): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x1, 0x500, &(0x7f0000000500)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x6687e, 0x57) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x2fd801, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x84) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2000003, 0x28011, r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f00000007c0)={0x300, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=ANY=[@ANYRESOCT], 0x18}}, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) 35m27.907491727s ago: executing program 0 (id=1053): sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'erspan0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x3, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f031c00eee8140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) write$tun(r2, 0x0, 0x1d) 35m27.906730757s ago: executing program 5 (id=1054): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000080)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)="aa", 0x1}], 0x1}}], 0x3b, 0x4048044) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x6}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) sendto$inet6(r2, &(0x7f0000000400)="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", 0x1000, 0x4000, 0x0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x8, 0x11, r1, 0xf6690000) sendmsg$inet(r2, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)="304ea9", 0x3}], 0x1}, 0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, 0x0}, &(0x7f00000001c0)=0x15) 35m27.835234413s ago: executing program 0 (id=1056): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0x4, 0x4, 0xf, 0x0, 0x1}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000010000e1850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 35m27.356499911s ago: executing program 5 (id=1061): r0 = socket$netlink(0x10, 0x3, 0x0) unshare(0x22020600) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file1\x00', &(0x7f0000000240)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffff7}) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') setns(r2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 35m27.017713359s ago: executing program 34 (id=1061): r0 = socket$netlink(0x10, 0x3, 0x0) unshare(0x22020600) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file1\x00', &(0x7f0000000240)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffff7}) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') setns(r2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 35m26.939202515s ago: executing program 0 (id=1067): socket(0x28, 0x5, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x3000046, &(0x7f0000000280)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@nobh}, {@errors_remount}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200, 0x400000]}) chdir(&(0x7f0000000140)='./file0\x00') r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) 35m26.462102014s ago: executing program 0 (id=1074): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x32, 0x0, &(0x7f0000000400)=[@increfs], 0xfffffcb0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000540)={@fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x29}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1, 0xd2}}, &(0x7f0000000600)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 35m25.422595938s ago: executing program 0 (id=1080): mmap$dsp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000003, 0x2010, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000400), &(0x7f0000000500)=0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x1c}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/234) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000002240)=0x2) writev(r1, &(0x7f00000008c0)=[{&(0x7f0000000280)="41b978673dd8", 0x6}], 0x1) 35m25.076049106s ago: executing program 35 (id=1080): mmap$dsp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000003, 0x2010, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000400), &(0x7f0000000500)=0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x1c}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/234) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000002240)=0x2) writev(r1, &(0x7f00000008c0)=[{&(0x7f0000000280)="41b978673dd8", 0x6}], 0x1) 19m28.760281705s ago: executing program 1 (id=5190): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4000880) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffd}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0xe}, @TCA_CAKE_TARGET={0x8, 0x8, 0x3}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x3, 0x7, @loopback, 0x800000}, 0x1c) 19m27.328073951s ago: executing program 1 (id=5201): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x50) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100"], 0x9d) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x16, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0xffffffff}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0x7c8}, {}, {}, {0x5, 0x0, 0xd, 0x0}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x5, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 19m26.198997532s ago: executing program 1 (id=5196): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x12, 0x0, 0x0) socket(0x400000000010, 0x800, 0xfffffffd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x0, 0x5, 0x10, 0x1, 0x0, 0x5f, 0x4, 0x0, 0xa6, 0x3, 0x7, 0x1}, {0xfffffffc, 0x0, 0x0, 0x1, 0x0, 0xf6, 0x1, 0x8, 0x4, 0xff, 0x4, 0x0, 0x800000000000000}, {0xffffff01, 0x35, 0x0, 0x0, 0x4, 0x5, 0x4, 0xfe, 0x5, 0x0, 0x0, 0x4, 0x36}], 0x10000}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x3, 0x0, 0x4, 0x0, 0x2, 0x0, 0x7fffffff], 0x80a0000, 0x80}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19m25.900378227s ago: executing program 1 (id=5198): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c4159b364a4fd7013f34db173a4fdacf15229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be867a28f09c5877fc2355ecdc9c30dcb2d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff3a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb357b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50265a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000900), 0x0, 0x44088881, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x2000009) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) setreuid(0xffffffffffffffff, 0xee00) r1 = msgget$private(0x0, 0x1c0) msgctl$IPC_SET(r1, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x96}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) msgsnd(r1, &(0x7f0000000080)=ANY=[], 0x0, 0x0) msgctl$IPC_SET(r1, 0x1, &(0x7f0000258f88)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x9, 0xff, 0x5, 0xec, 0x2}) 19m25.753853008s ago: executing program 1 (id=5200): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="03", 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) recvmmsg(r1, &(0x7f0000001140), 0x700, 0x2, 0x0) 19m24.790774116s ago: executing program 1 (id=5202): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x7, 0xc, &(0x7f0000000380)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_io_uring_setup(0xcd8, &(0x7f0000000200)={0x0, 0x4661, 0x400, 0x3, 0x234}, &(0x7f0000000340), &(0x7f0000000300)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x50) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="5800000002060102000034e40000000000000003050001000600000005000400000000000900020073797a3100000000050005000200000011000300686173683a69702c706f7274000000000c000780050015"], 0x58}, 0x1, 0x0, 0x0, 0xc5dff1b4c279acea}, 0x2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x80) 19m9.584424637s ago: executing program 36 (id=5202): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x7, 0xc, &(0x7f0000000380)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_io_uring_setup(0xcd8, &(0x7f0000000200)={0x0, 0x4661, 0x400, 0x3, 0x234}, &(0x7f0000000340), &(0x7f0000000300)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x50) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="5800000002060102000034e40000000000000003050001000600000005000400000000000900020073797a3100000000050005000200000011000300686173683a69702c706f7274000000000c000780050015"], 0x58}, 0x1, 0x0, 0x0, 0xc5dff1b4c279acea}, 0x2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x80) 14.328549393s ago: executing program 6 (id=8171): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x6}, 0x7c) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) syz_mount_image$hfs(&(0x7f0000000100), &(0x7f00000062c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, &(0x7f0000000a80)=ANY=[@ANYBLOB="747970653d704351852c636f6465706167653d63703836332c00000000746f723db84f842468f8c5568bcf21a304fee0a339572c6469725f756d61736b3d30303030303030313030303030303030303030303030313000"], 0x1, 0x2e6, &(0x7f00000027c0)="$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") close_range(r5, 0xffffffffffffffff, 0x0) 13.241508721s ago: executing program 6 (id=8173): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04040a000000"], 0xd) 12.354683063s ago: executing program 7 (id=8183): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04040a000000"], 0xd) 10.608582214s ago: executing program 6 (id=8175): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000300)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0], 0x0, 0x1, r5}) 9.979917785s ago: executing program 2 (id=8177): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prlimit64(0x0, 0xb, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bind$alg(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) open$dir(&(0x7f0000000040)='./file0\x00', 0x4c002, 0x104) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001680)) r3 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000001c0)={0x0, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000000)={0x0, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) 9.927979709s ago: executing program 7 (id=8179): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[], 0x60}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) open(0x0, 0xe5000, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2a, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000002600), 0x101840, 0x0) ioctl$RTC_AIE_ON(r4, 0x7001) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000c0}, 0x20000014) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r2, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e00"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 9.814547938s ago: executing program 2 (id=8180): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000001a0001002cbd7000fbdbdf251c1480000000fd000001000008000100000031"], 0x30}}, 0x0) open_tree(r3, 0x0, 0x1) sendto$inet6(r0, &(0x7f0000000080)="b3019c28", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000080)={0x0, 0xf404}, 0x8) recvmmsg(r0, &(0x7f0000007900), 0x847, 0x10162, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) socket$key(0xf, 0x3, 0x2) 7.944413799s ago: executing program 7 (id=8184): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x6}, 0x7c) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) syz_mount_image$hfs(&(0x7f0000000100), &(0x7f00000062c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, &(0x7f0000000a80)=ANY=[@ANYBLOB="747970653d704351852c636f6465706167653d63703836332c00000000746f723db84f842468f8c5568bcf21a304fee0a339572c6469725f756d61736b3d30303030303030313030303030303030303030303030313000"], 0x1, 0x2e6, &(0x7f00000027c0)="$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") close_range(r5, 0xffffffffffffffff, 0x0) 6.832176869s ago: executing program 7 (id=8186): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file1\x00', 0x8000, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2b2, &(0x7f0000000880)="$eJzs3NFLU28cx/Hvz6mbE91+EEFB9aVu6uag6w+oEQrRoDAn1UVwzLMaO21yzlgsIncT3fZ3SJfdBdU/4E100313EgTdeBGd8Jwd3XTa1M2t+X6BnO/xeT4+jzrlewSf9XtvnhZyrpEzyzIUUxkSqcmGSHKzqvuvfh3y61FpVJMr4z+/nrt7/8GtdCYzM6c6m56/mlLVyQsfnr14e/FTeXzh3eT7qKwlH67/SH1bO712Zv33/JO8q3lXi6WymrpYKpXNRdvSpbxbMFTv2JbpWpovupbTNJ6zS8vLVTWLSxPxZcdyXTWLVS1YVS2XtOxU1Xxs5otqGIZOxOVkG25jTnZ1bs5M7znsRTq6I3RetPl2rNUcx0nXWg9mV7u1LwAA0L/27/+DXn/v/j+zEFw73P+L0P93Sa3p7i/9PwaC46TNeP3ntxn9PwAAAAAAAAAAAAAAAAAAAAAA/4INz0t4npcIr+FbVERiIhLe93qf6I5Dfv+v9Wi76LCGf9yLidivK9lKNrgG4+mc5MUWS6YkIb/810NdUM/ezMxMqW+k/iE38yuVbMQ/m8DPh5Kt8uf/nw7yKh83c5V6fkTijeunJCGnWq+f2s6HxyGsVLKjcvlSQ96QhHx+JCWxZcl/XW/nX06r3rid2bH+mD8PAAAAAIBBYOiWZPPzb3D2o+FPiMnu8SB/gL8P7Hi+Hpaz7RxRCQAAAAAAjsytPi+Ytm05hyiiInKE+KAWEemLbeworotIH2zjuIqYiATv0cPEv2/F20p5bcwZFpGef1kOUPT6NxMAAACATttu+g8Q+vKqizsCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODkafc8sHD+rqFwYJ94w3KRY/8EAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgD7yJwAA//+j7Rqj") socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lstat(0x0, 0x0) setresuid(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_clone3(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) 6.668320042s ago: executing program 8 (id=8187): r0 = memfd_create(&(0x7f0000000380)='\x103q}2\x9a\xce\xaf\x03\xdfyR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7R\x94\xaf\xbb\xdcM\x90k\xd6\x05\r\x84\x87\x1e?\x10\x95SWFO{\x1f\x1b!\xd5\x991D\x1c\b\x8c`\xeaSA\x90m\xb6&\xd0\xf1\xb3\xed:\x82\xbd\xe3i|BL\x1f\x9d\x00\x00\xc5\xb8$\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\r\xd6h\x80\x8fQ|\xf5d\x10\x10\xd7\t\x00\x00\x00\x00\x00\x00\x00<\xfeeS\xb2l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfaa\xd3\xf1\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7~x\xb8vo\xe6\x15@\xc9\"CY\x11\xb9u\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D4E^7%8\x94y\x90\xf0l\xa0\'L%\xd4\xda\xee\x81\x98\xcc\xfd\xa2\x89$\x9by\xf1\xbb\x01\xb7\xcd\xbf\x99\x1f\x90@b\x03\xb3\xe0CfU\x16{\xbey\xa1cs\x96U\x11\xdb*\xdf\xcdG\xc7z\x85\x8aE\xf7\xd5\x9dAj\xe3\xfb\xc4\xa0\x14\x87\x19\x17\xed\xd1\x185%Q%\x81\xfaK\x82\xec=\xa3\xb8~\xb6O\xbd\x19*\xdb\x1c\x10\xa4\x8dIl\xc1\xceG\xd0h\xa1\xab:dP\xb6\xa0BR\xbe\x03\xac\xd9\x87\x00@\x80\x94\xd88\xc9\x03\x97\x17r\x85#\x7f\x8cu\x8f\xcc\x7fF\xb5\xea\xa6\xc1\x9d\xac\x89\xc9\xa1tuJw\xee\x1a\xe73\xa8\xadS\xd1\x11#d\xc2\xcfdj\x9ec\x93\xd5K\x90*_3\x89\v\xab\x04ih\x12\x93\xc5m\x8f~{\xe5\x85\xa5g\x00\x00\x00\xe45Q\xab%\xa8[\xf3\x17\x94\xf8\xdfq\xff\xd2?\xafW\xde\x1bW]\x1f\aaV\xc5\xc82*\xc7\xc5\"C}L\x10e\xc6\x90\xc0\xf9z\xb6+/d\x86\xf2\xbe\xc9:u\t\\e\x05)\xe4\xd2\xc4\x1a\xc9\xac\xdb\x925\x02\x94@\xa2\xe1\xee\x16\xb4\x98\xff\x0f\xbb\xb2\x81\xcf\x13g6l\xcc\xc8\x02\v\xa2\xb2\xf6\xbf@d\xcecC\x9fVz\xf4\x14\xa5\x8b|\xe1\xc0\xfa3X\xf4\xd9L\xe6\x8f\x9dy\x0fX.\xc5EQ\xd1/\xa1\xd0\x03>\xf0\x90\x13B\xe2\x97\x8b!\xf7\"\xecX\x92\xab\xbc^\xb2\x80@\xcc+\xbbp\xdc|N\xd3[=G\xb2\xe1\x9c\xc5\x81y\x84\xef\xacQ\x01\xdd\xe7<\xb8\xf1Hn\x86\xa6\xe3\x18N\x19\"[-\xdb\xef\xc3\xe0\xa8}', 0x0) ftruncate(r0, 0x800799c) r1 = gettid() syz_pidfd_open(r1, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e20, 0xffffffff, @remote, 0x9}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendfile(r2, r0, 0x0, 0xfeff) 6.641005194s ago: executing program 6 (id=8188): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04040a000000"], 0xd) 5.625711426s ago: executing program 8 (id=8189): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04040a000000"], 0xd) 4.5936949s ago: executing program 8 (id=8190): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setresuid(0xee01, 0xee01, 0x0) setreuid(0xee01, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0) r4 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x9606, 0x100, 0x2, 0x13}, &(0x7f0000000680)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000140)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x2007, @fd=r3, 0x6, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r4, 0x74d1, 0x4c3, 0x43, 0x0, 0xfffffffffffffd1d) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="680000001000010400400000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="08910400000000003400128009000100766c616e000000002400028004000480100003800c60ca002d0a0000030000000c000200160000001700000014000300766c616e30"], 0x68}}, 0x0) 4.5934485s ago: executing program 6 (id=8191): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000003c0)='rcu_utilization\x00', r0}, 0x18) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_io_uring_setup(0x6f28, 0x0, &(0x7f00000001c0), &(0x7f0000000280)) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 4.488499208s ago: executing program 2 (id=8192): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000002800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xb}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$phonet_pipe(0x23, 0x5, 0x2) r4 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000040), 0x0) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmmsg$inet6(r4, &(0x7f0000002940), 0x40000000000017d, 0x811) 4.334307131s ago: executing program 8 (id=8193): syz_mount_image$minix(&(0x7f0000000600), &(0x7f0000000100)='./file1\x00', 0x1804002, &(0x7f0000000200)=ANY=[@ANYRES8=0x0, @ANYRESHEX=0x0, @ANYBLOB="28eab73baea79cebfbcb377495a5091fc0b79703c790e209a76c53adec0a444df808db4a70188c30fc5f9c81caa83f2882fced04170dc6602feb4f971fa7b7c3d8be7345ca210ed1a2e91f15f7cf9f851773d36f4149ae4855f777c47e1a9ffb174a9daee48821b82196b5336460ba85b4ca92c2fe9b7ae175cab7acdd2c107c335a67c1a38efd4a2a19b18fe8ca", @ANYRESOCT, @ANYRES32, @ANYRES16, @ANYRESDEC], 0x11, 0x1d6, &(0x7f0000000bc0)="$eJzs289ulFAUx/EfDANa/9S/GzddaKIbS0cT0Z19lElL66SMNtZNGxPjA/gQvoE+kQu3nUR3rsTMZToOSIVhOtDpfD9Jw71wD/fcUJjDAgFYWjckWbLUlhTH8YdXD2ytNZ0UgFq09DsGsKz0459dXlIMALjYBpstUwfsS/r28/3W8eivPVEh/M9g0zbbl5KOJ+LdkvXH4KNltvecdPzwEXSpRHz8OYl/mJn/8pTzr2TiV0rHJ+t/dD8df0XSVUnXJF2XtDp617op6VbO/NuZ+e8Od34tmQRQkaX1bD+1w9ZOLwo3xv226Xcmxqe55vjTcd8z/fWtN9H22ScPYCZ2wf3fytz/Tub+B7C4Dg6P9rpRFL7Nb3w5/VDNDbsoVdPwVO6E338VjLHPwZJnbgxf3c7khG6J/5bCMWsVZj95+Zw655O6tOlLkDQcSVXDndFKcsf0Z83Qy71e7l43Ou2J4czvYQSgVv67/r5/cHj0uNfv7oa74esnwYsg6DzvPAt8U/n7Oz1po+k0AczB3x/98jHx6jwzAgAAAAAAAAAAAAAA07ot6U6FuDj74Q8AAACAc6+OT6DGk31qdKkAAAAAAAAAAAAAAAAAAADAwvsTAAD//2QeNU0=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file0\x00', r4, &(0x7f0000000100)='./file5\x00') socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newlink={0x50, 0x10, 0x437, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40c89, 0x40410}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @private2}, @IFLA_IPTUN_TTL={0x5, 0x4, 0x10}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 2.171937645s ago: executing program 7 (id=8194): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000605000/0x3000)=nil, 0x3000, 0x14) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000008c0)='./file0\x00', 0xa0012, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x3e}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) read$FUSE(r3, &(0x7f0000002140)={0x2020}, 0x2100) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x27}, 0x0, 0x0, 0x0, 0xfffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x4, 0x4d35a72f, 0x0, 0x0, 0x0, 0xfffff7ffffffffff, 0x0, 0x40}, {0x2cf, 0xa00, 0x40800000000000}, 0x0, 0x6e6bc0, 0x0, 0x1}}, 0xb8}}, 0x0) 2.171787555s ago: executing program 2 (id=8195): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04040a000000"], 0xd) 2.156977386s ago: executing program 6 (id=8196): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000300)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0], 0x0, 0x1, r5}) 1.141883779s ago: executing program 2 (id=8197): syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket(0x15, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280), 0x0) getsockopt(r0, 0x200000000114, 0x2721, 0x0, &(0x7f0000000000)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) sendto$inet6(r4, &(0x7f0000000240)=':', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x8, @empty}, 0x1c) 1.140667619s ago: executing program 8 (id=8198): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04040a000000"], 0xd) 69.491605ms ago: executing program 8 (id=8199): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@allocspi={0xf8, 0x16, 0x629, 0x70bd2a, 0x25dfdbff, {{{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, @in=@local, 0x4e22, 0xd64c, 0x4e23, 0x4, 0x2, 0x20, 0x0, 0x73}, {@in=@loopback, 0x4d2, 0x33}, @in=@remote, {0x401, 0xd, 0x2, 0xffff, 0x4, 0x6, 0x0, 0xfffffffffffffffa}, {0x4554, 0x0, 0xffffffffffffffff, 0x1000}, {0x5, 0x8, 0x3}, 0x70bd2a, 0x0, 0xa, 0x3, 0xdf, 0x14}, 0x1, 0x6}}, 0xf8}}, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x2, 0x9, 0x6, 0x2, 0x2, 0x0, 0x70bd0b, 0x25dfdbff}, 0x10}}, 0x10) 61.836996ms ago: executing program 7 (id=8207): socket$inet_icmp(0x2, 0x2, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) readv(r2, &(0x7f0000002a40)=[{&(0x7f00000007c0)=""/4096, 0x1000}], 0x1) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, 0x0, 0x20000000) 0s ago: executing program 2 (id=8200): newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0) socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x10) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x1, 0x3, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x67, 0x0, 0x86, 0x4, 0x0, @loopback, @local}}}}) kernel console output (not intermixed with test programs): root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f02f4d8ec77 code=0x7ffc0000 [ 1091.779691][ T28] audit: type=1326 audit(1756432727.934:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21063 comm="syz.2.4901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f02f4d8d550 code=0x7ffc0000 [ 1091.848073][ T28] audit: type=1326 audit(1756432727.944:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21063 comm="syz.2.4901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f02f4d8e7eb code=0x7ffc0000 [ 1091.849528][T21072] team0: Port device dummy0 removed [ 1092.041620][ C1] net_ratelimit: 5 callbacks suppressed [ 1092.041640][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1092.121689][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1092.201623][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1092.556373][T21072] team0: Mode changed to "roundrobin" [ 1093.081723][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1093.161909][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1093.241679][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1094.121669][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1094.201650][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1094.291669][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1095.161716][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1097.251711][ C1] net_ratelimit: 5 callbacks suppressed [ 1097.251732][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1097.321723][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1097.401701][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1098.281626][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1098.361618][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1098.441608][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1098.489411][T21161] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4932'. [ 1098.504493][T21161] vlan0: entered promiscuous mode [ 1098.582721][T21161] team0: entered promiscuous mode [ 1099.321707][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1099.401733][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1099.491693][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1099.682188][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 1099.682259][ T28] audit: type=1326 audit(1756432736.724:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21178 comm="syz.7.4938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09a98ebe9 code=0x7ffc0000 [ 1100.361580][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1100.540833][ T28] audit: type=1326 audit(1756432736.724:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21178 comm="syz.7.4938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09a98ebe9 code=0x7ffc0000 [ 1100.688278][ T28] audit: type=1326 audit(1756432736.764:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21178 comm="syz.7.4938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb09a98ebe9 code=0x7ffc0000 [ 1100.813221][ T28] audit: type=1326 audit(1756432736.764:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21178 comm="syz.7.4938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09a98ebe9 code=0x7ffc0000 [ 1101.038792][ T28] audit: type=1326 audit(1756432736.764:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21178 comm="syz.7.4938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09a98ebe9 code=0x7ffc0000 [ 1101.351458][ T28] audit: type=1326 audit(1756432737.544:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21178 comm="syz.7.4938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb09a98ebe9 code=0x7ffc0000 [ 1101.864316][ T28] audit: type=1326 audit(1756432737.544:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21178 comm="syz.7.4938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09a98ebe9 code=0x7ffc0000 [ 1101.888463][ T28] audit: type=1326 audit(1756432737.544:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21178 comm="syz.7.4938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09a98ebe9 code=0x7ffc0000 [ 1102.441625][ C1] net_ratelimit: 5 callbacks suppressed [ 1102.441646][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1102.521645][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1102.547726][ T28] audit: type=1326 audit(1756432737.544:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21178 comm="syz.7.4938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb09a98ebe9 code=0x7ffc0000 [ 1102.601623][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1102.734865][ T28] audit: type=1326 audit(1756432737.544:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21178 comm="syz.7.4938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09a98ebe9 code=0x7ffc0000 [ 1103.481636][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1103.561635][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1103.564506][T21215] netlink: 'syz.2.4947': attribute type 4 has an invalid length. [ 1103.641731][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1103.707638][T21215] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4947'. [ 1103.717096][T21215] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4947'. [ 1103.727331][T21215] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4947'. [ 1105.195871][T21242] tipc: Failed to remove unknown binding: 66,1,1/1:840107121/840107123 [ 1105.222703][T21242] tipc: Failed to remove unknown binding: 66,1,1/1:840107121/840107123 [ 1105.252280][T21242] tipc: Failed to remove unknown binding: 66,1,1/1:840107121/840107123 [ 1109.657746][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 1109.657757][ T28] audit: type=1326 audit(1756432746.704:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21283 comm="syz.7.4968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09a98ebe9 code=0x7ffc0000 [ 1110.284256][ T28] audit: type=1326 audit(1756432746.744:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21283 comm="syz.7.4968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09a98ebe9 code=0x7ffc0000 [ 1110.451808][ T28] audit: type=1326 audit(1756432746.744:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21283 comm="syz.7.4968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb09a98ebe9 code=0x7ffc0000 [ 1110.492527][ T28] audit: type=1326 audit(1756432746.744:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21283 comm="syz.7.4968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09a98ebe9 code=0x7ffc0000 [ 1110.521621][ T28] audit: type=1326 audit(1756432746.744:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21283 comm="syz.7.4968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09a98ebe9 code=0x7ffc0000 [ 1110.602374][ T28] audit: type=1326 audit(1756432746.744:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21283 comm="syz.7.4968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fb09a98ebe9 code=0x7ffc0000 [ 1110.672524][ T28] audit: type=1326 audit(1756432746.744:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21283 comm="syz.7.4968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09a98ebe9 code=0x7ffc0000 [ 1110.727252][ T28] audit: type=1326 audit(1756432746.744:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21283 comm="syz.7.4968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09a98ebe9 code=0x7ffc0000 [ 1110.792093][ T28] audit: type=1326 audit(1756432746.744:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21283 comm="syz.7.4968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=90 compat=0 ip=0x7fb09a98ebe9 code=0x7ffc0000 [ 1110.850265][ T28] audit: type=1326 audit(1756432746.744:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21283 comm="syz.7.4968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09a98ebe9 code=0x7ffc0000 [ 1112.314746][T18744] page_pool_release_retry() stalled pool shutdown 1 inflight 242 sec [ 1114.681806][ T5868] page_pool_release_retry() stalled pool shutdown 1 inflight 246 sec [ 1116.209656][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.431487][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1119.166927][T21375] netlink: 'syz.2.4995': attribute type 3 has an invalid length. [ 1128.713702][T21438] netlink: 'syz.2.5013': attribute type 1 has an invalid length. [ 1133.560149][T21488] lo speed is unknown, defaulting to 1000 [ 1133.580278][T21488] lo speed is unknown, defaulting to 1000 [ 1134.685414][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 1134.685428][ T28] audit: type=1326 audit(1756432771.734:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21512 comm="syz.7.5034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09a98ebe9 code=0x7ffc0000 [ 1134.715993][T21511] netlink: 'syz.6.5033': attribute type 13 has an invalid length. [ 1134.738143][ T28] audit: type=1326 audit(1756432771.734:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21512 comm="syz.7.5034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09a98ebe9 code=0x7ffc0000 [ 1134.771537][T21511] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5033'. [ 1134.842355][ T28] audit: type=1326 audit(1756432771.764:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21512 comm="syz.7.5034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb09a98ebe9 code=0x7ffc0000 [ 1134.897766][ T28] audit: type=1326 audit(1756432771.764:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21512 comm="syz.7.5034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09a98ebe9 code=0x7ffc0000 [ 1134.933594][ T28] audit: type=1326 audit(1756432771.764:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21512 comm="syz.7.5034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09a98ebe9 code=0x7ffc0000 [ 1134.961527][ T28] audit: type=1326 audit(1756432771.774:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21512 comm="syz.7.5034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fb09a98ebe9 code=0x7ffc0000 [ 1135.016770][ T28] audit: type=1326 audit(1756432771.774:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21512 comm="syz.7.5034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09a98ebe9 code=0x7ffc0000 [ 1135.090459][ T28] audit: type=1326 audit(1756432771.774:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21512 comm="syz.7.5034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09a98ebe9 code=0x7ffc0000 [ 1135.269320][ T28] audit: type=1326 audit(1756432771.794:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21512 comm="syz.7.5034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb09a98ebe9 code=0x7ffc0000 [ 1135.320486][ T28] audit: type=1326 audit(1756432771.794:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21512 comm="syz.7.5034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09a98ebe9 code=0x7ffc0000 [ 1135.812144][T21527] netlink: 'syz.6.5039': attribute type 4 has an invalid length. [ 1135.891983][T21532] netlink: 'syz.7.5040': attribute type 1 has an invalid length. [ 1135.976505][T21532] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 1135.985981][T21532] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 1135.995605][T21532] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 1136.005052][T21532] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 1136.031639][T21532] bond8: (slave geneve3): making interface the new active one [ 1136.040213][T21532] bond8: (slave geneve3): Enslaving as an active interface with an up link [ 1136.088488][T21532] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5040'. [ 1136.103402][T21532] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1136.174195][T21540] netlink: 184 bytes leftover after parsing attributes in process `syz.1.5043'. [ 1136.364029][T21548] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5045'. [ 1136.383687][T21548] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5045'. [ 1139.006351][T21570] netlink: 'syz.6.5051': attribute type 1 has an invalid length. [ 1139.201868][T21572] bond11: (slave vxcan1): The slave device specified does not support setting the MAC address [ 1139.216078][T21572] bond11: (slave vxcan1): Error -95 calling set_mac_address [ 1139.889863][T21570] gretap2: entered promiscuous mode [ 1139.957613][T21570] bond11: (slave gretap2): making interface the new active one [ 1140.001096][T21570] bond11: (slave gretap2): Enslaving as an active interface with an up link [ 1140.027629][T21574] macvlan2: entered promiscuous mode [ 1140.173315][T21574] macvlan2: entered allmulticast mode [ 1140.186759][T21574] bond11: entered promiscuous mode [ 1140.194415][T21574] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1140.247993][T21574] bond11: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap2 [ 1140.904851][T21574] bond11: left promiscuous mode [ 1141.263605][T21587] netlink: 277 bytes leftover after parsing attributes in process `syz.2.5056'. [ 1142.306334][T21593] 9pnet: p9_errstr2errno: server reported unknown error 184467440737095 [ 1143.863193][T21613] netlink: 'syz.6.5065': attribute type 1 has an invalid length. [ 1144.045011][T21618] netlink: 277 bytes leftover after parsing attributes in process `syz.6.5066'. [ 1144.178714][T21620] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1146.745811][T21642] netlink: 'syz.6.5072': attribute type 10 has an invalid length. [ 1146.754115][T21642] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5072'. [ 1146.936345][T21644] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5073'. [ 1147.590889][T21647] netlink: 277 bytes leftover after parsing attributes in process `syz.1.5077'. [ 1149.328506][T21667] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1151.299344][T21687] 9pnet: p9_errstr2errno: server reported unknown error 184467440737095 [ 1152.374603][T21699] netlink: 277 bytes leftover after parsing attributes in process `syz.7.5089'. [ 1153.145891][T21705] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1154.604132][T21726] netlink: 184 bytes leftover after parsing attributes in process `syz.7.5096'. [ 1155.801077][T21744] tipc: Enabling of bearer rejected, already enabled [ 1155.846291][T21745] netlink: 'syz.6.5104': attribute type 1 has an invalid length. [ 1155.906406][T21748] netlink: 277 bytes leftover after parsing attributes in process `syz.2.5106'. [ 1155.928928][T21745] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1155.954907][T21750] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1155.977342][T21750] bond12: (slave vxcan1): The slave device specified does not support setting the MAC address [ 1156.449407][T21750] bond12: (slave vxcan1): Error -95 calling set_mac_address [ 1158.003089][T21745] veth17: entered promiscuous mode [ 1158.015477][T21745] bond12: (slave veth17): Enslaving as an active interface with a down link [ 1158.032069][T21757] gretap3: entered allmulticast mode [ 1158.041323][T21757] bond12: (slave gretap3): making interface the new active one [ 1158.056487][T21757] bond12: (slave gretap3): Enslaving as an active interface with an up link [ 1161.720357][T21812] netlink: 'syz.7.5119': attribute type 1 has an invalid length. [ 1161.751092][T21815] overlayfs: failed to clone upperpath [ 1161.765830][T21812] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1161.871245][T21819] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1161.883760][T21819] bond9: (slave vxcan1): The slave device specified does not support setting the MAC address [ 1161.896660][T21819] bond9: (slave vxcan1): Error -95 calling set_mac_address [ 1162.103668][T21812] veth11: entered promiscuous mode [ 1162.123066][T21812] bond9: (slave veth11): Enslaving as an active interface with a down link [ 1162.502244][T21828] netlink: 4096 bytes leftover after parsing attributes in process `syz.2.5126'. [ 1162.511613][T21828] openvswitch: netlink: ct_state flags 00030000 unsupported [ 1162.676344][T21812] gretap2: entered allmulticast mode [ 1162.694124][T21812] bond9: (slave gretap2): making interface the new active one [ 1162.706928][T21812] bond9: (slave gretap2): Enslaving as an active interface with an up link [ 1162.908056][T21830] bridge0: entered allmulticast mode [ 1163.198262][T21832] overlayfs: failed to clone upperpath [ 1163.819268][T21841] lo speed is unknown, defaulting to 1000 [ 1163.826926][T21841] lo speed is unknown, defaulting to 1000 [ 1166.160733][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 1166.160751][ T28] audit: type=1326 audit(1756432803.174:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21857 comm="syz.7.5136" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb09a98ebe9 code=0x0 [ 1167.856956][T21883] netlink: 'syz.1.5151': attribute type 1 has an invalid length. [ 1167.978107][T21883] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1167.995965][T21889] overlayfs: failed to clone upperpath [ 1168.141866][T21887] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1168.741924][T21887] bond8: (slave vxcan1): The slave device specified does not support setting the MAC address [ 1168.777972][T21887] bond8: (slave vxcan1): Error -95 calling set_mac_address [ 1168.904488][T21883] veth27: entered promiscuous mode [ 1168.932451][T21883] bond8: (slave veth27): Enslaving as an active interface with a down link [ 1168.964984][T21890] gretap1: entered allmulticast mode [ 1173.482615][T18744] page_pool_release_retry() stalled pool shutdown 1 inflight 303 sec [ 1173.744186][T21941] netlink: 'syz.7.5159': attribute type 1 has an invalid length. [ 1173.803982][T21941] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1174.019503][T21949] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1174.027455][T21949] bond10: (slave vxcan1): The slave device specified does not support setting the MAC address [ 1174.039974][T21949] bond10: (slave vxcan1): Error -95 calling set_mac_address [ 1175.091651][ T5868] page_pool_release_retry() stalled pool shutdown 1 inflight 306 sec [ 1175.154057][T21941] veth13: entered promiscuous mode [ 1175.167288][T21941] bond10: (slave veth13): Enslaving as an active interface with a down link [ 1176.810362][T21979] netlink: 'syz.7.5169': attribute type 10 has an invalid length. [ 1176.818335][T21979] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5169'. [ 1176.829039][T21979] netdevsim netdevsim7 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 1176.841028][T21979] netdevsim netdevsim7 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 1176.850540][T21979] netdevsim netdevsim7 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 1176.860730][T21979] netdevsim netdevsim7 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 1176.878333][T21979] team0: Port device geneve0 added [ 1177.648802][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.656136][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1182.656808][T22034] netlink: 116 bytes leftover after parsing attributes in process `syz.1.5186'. [ 1182.692464][T22034] bond8: (slave veth27): Releasing active interface [ 1182.768879][T22034] team0: Mode changed to "broadcast" [ 1182.934451][T22036] netlink: 'syz.6.5187': attribute type 10 has an invalid length. [ 1182.942536][T22036] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5187'. [ 1182.953762][T22036] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1182.963525][T22036] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1182.972975][T22036] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1182.981834][T22036] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1182.996032][T22036] team0: Port device geneve0 added [ 1183.869189][T22046] sch_tbf: burst 19872 is lower than device lo mtu (39799) ! [ 1192.006753][T22139] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1193.867483][T22143] lo speed is unknown, defaulting to 1000 [ 1193.874711][T22143] lo speed is unknown, defaulting to 1000 [ 1195.381574][T22151] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5222'. [ 1198.850770][T22174] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1199.544137][T22170] delete_channel: no stack [ 1201.038993][T22194] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5233'. [ 1203.561539][ T28] audit: type=1326 audit(1756432840.374:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22214 comm="syz.6.5241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c73d8ebe9 code=0x7ffc0000 [ 1203.615053][ T28] audit: type=1326 audit(1756432840.374:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22214 comm="syz.6.5241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c73d8ebe9 code=0x7ffc0000 [ 1203.672649][ T28] audit: type=1326 audit(1756432840.384:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22214 comm="syz.6.5241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7f7c73d8ebe9 code=0x7ffc0000 [ 1203.753229][ T28] audit: type=1326 audit(1756432840.384:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22214 comm="syz.6.5241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c73d8ebe9 code=0x7ffc0000 [ 1204.232653][ T28] audit: type=1326 audit(1756432840.384:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22214 comm="syz.6.5241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c73d8ebe9 code=0x7ffc0000 [ 1204.448166][ T28] audit: type=1326 audit(1756432840.384:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22214 comm="syz.6.5241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f7c73d8ebe9 code=0x7ffc0000 [ 1204.494838][ T28] audit: type=1326 audit(1756432840.384:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22214 comm="syz.6.5241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c73d8ebe9 code=0x7ffc0000 [ 1204.518618][ T28] audit: type=1326 audit(1756432840.384:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22214 comm="syz.6.5241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c73d8ebe9 code=0x7ffc0000 [ 1204.573362][ T28] audit: type=1326 audit(1756432840.384:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22214 comm="syz.6.5241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f7c73d8ebe9 code=0x7ffc0000 [ 1204.651604][ T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1204.675225][ T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1204.688451][ T28] audit: type=1326 audit(1756432840.384:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22214 comm="syz.6.5241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c73d8ebe9 code=0x7ffc0000 [ 1204.712130][ T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1204.732735][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1204.742436][ T50] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1204.749834][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1204.810024][T22228] lo speed is unknown, defaulting to 1000 [ 1204.833797][T22228] lo speed is unknown, defaulting to 1000 [ 1206.666553][T22228] chnl_net:caif_netlink_parms(): no params data found [ 1206.844117][ T5784] Bluetooth: hci4: command tx timeout [ 1208.563791][T22269] netlink: 116 bytes leftover after parsing attributes in process `syz.6.5253'. [ 1208.650865][T22269] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1208.684305][T22269] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1208.694791][T22269] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1208.707766][T22269] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1208.803676][T22269] team0: Port device geneve0 removed [ 1208.867491][T22269] bond11: (slave gretap2): Releasing active interface [ 1208.890134][T22269] bond12: (slave veth17): Releasing active interface [ 1208.908718][T22269] gretap3: entered promiscuous mode [ 1208.921766][ T5784] Bluetooth: hci4: command tx timeout [ 1208.961225][T22269] bond12: (slave gretap3): Releasing active interface [ 1208.968758][T22269] gretap3: left promiscuous mode [ 1208.988423][T22275] team0: Mode changed to "broadcast" [ 1209.014046][T22228] bridge0: port 1(bridge_slave_0) entered blocking state [ 1209.021234][T22228] bridge0: port 1(bridge_slave_0) entered disabled state [ 1209.042224][T22228] bridge_slave_0: entered allmulticast mode [ 1209.067633][T22228] bridge_slave_0: entered promiscuous mode [ 1209.158066][T22276] A link change request failed with some changes committed already. Interface bond2 may have been left with an inconsistent configuration, please check. [ 1209.211572][T22228] bridge0: port 2(bridge_slave_1) entered blocking state [ 1209.243120][T22228] bridge0: port 2(bridge_slave_1) entered disabled state [ 1209.259687][T22228] bridge_slave_1: entered allmulticast mode [ 1209.295133][T22228] bridge_slave_1: entered promiscuous mode [ 1209.306179][T22287] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5255'. [ 1209.424327][T22289] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1209.443367][T22289] bond11: (slave bond12): Enslaving as an active interface with an up link [ 1209.452699][T22291] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5255'. [ 1209.464068][T22291] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1209.549724][T22228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1209.590784][T22228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1210.561962][T22228] team0: Port device team_slave_0 added [ 1210.587104][T22228] team0: Port device team_slave_1 added [ 1210.725813][T22228] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1210.776409][T22228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1210.824397][T22228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1210.839399][T22228] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1210.848312][T22228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1210.875999][T22228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1210.949504][T22308] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5262'. [ 1210.968923][T22308] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1210.988568][T22228] hsr_slave_0: entered promiscuous mode [ 1210.996172][T22228] hsr_slave_1: entered promiscuous mode [ 1211.002652][ T5784] Bluetooth: hci4: command tx timeout [ 1211.009013][T22228] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1211.016640][T22228] Cannot create hsr debugfs directory [ 1211.228092][T22088] Set syz1 is full, maxelem 65536 reached [ 1212.388351][T22228] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1212.445145][T22228] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1212.515626][T22228] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1212.599505][T22228] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1213.091876][ T5784] Bluetooth: hci4: command tx timeout [ 1214.562549][T22228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1214.910834][T22228] 8021q: adding VLAN 0 to HW filter on device team0 [ 1214.923687][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 1214.930829][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1215.570543][ T3464] bridge0: port 2(bridge_slave_1) entered blocking state [ 1215.577996][ T3464] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1216.015711][ T11] tipc: Disabling bearer [ 1216.050994][ T11] tipc: Left network mode [ 1217.105411][T22228] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1218.748135][T22387] No such timeout policy "syz1" [ 1221.110913][T22228] veth0_vlan: entered promiscuous mode [ 1222.031331][T22228] veth1_vlan: entered promiscuous mode [ 1222.252296][T22407] SET target dimension over the limit! [ 1222.463909][T22410] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1223.232205][T22228] veth0_macvtap: entered promiscuous mode [ 1223.256336][T22228] veth1_macvtap: entered promiscuous mode [ 1223.343410][T22228] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1223.704097][T22228] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1223.864130][T22228] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1223.966890][T22228] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1223.982927][T22228] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1224.003768][T22228] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1224.076528][T22419] netdevsim netdevsim7 netdevsim0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1224.087731][T22419] netdevsim netdevsim7 netdevsim1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1224.097380][T22419] netdevsim netdevsim7 netdevsim2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1224.107036][T22419] netdevsim netdevsim7 netdevsim3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1224.214557][T22419] team0: Port device geneve0 removed [ 1224.223418][T22419] bond8: (slave geneve3): Releasing active interface [ 1224.232398][T22419] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1224.241589][T22419] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1224.251049][T22419] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1224.452057][T22419] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1224.989994][T22419] bond9: (slave veth11): Releasing active interface [ 1225.005289][T22419] gretap2: entered promiscuous mode [ 1225.042137][T22419] bond9: (slave gretap2): Releasing active interface [ 1225.062099][T22419] gretap2: left promiscuous mode [ 1225.095103][T22419] bond10: (slave veth13): Releasing active interface [ 1225.127893][T22419] bond11: (slave bond12): Releasing backup interface [ 1225.226879][T22420] team0: Mode changed to "loadbalance" [ 1225.489533][ T11] hsr_slave_0: left promiscuous mode [ 1225.504777][ T11] hsr_slave_1: left promiscuous mode [ 1225.913333][ T11] bond8 (unregistering): Released all slaves [ 1226.036877][ T11] bond0 (unregistering): Released all slaves [ 1228.445944][ T11] bond7 (unregistering): Released all slaves [ 1229.766349][ T11] bond6 (unregistering): Released all slaves [ 1230.110512][ T11] bond5 (unregistering): Released all slaves [ 1230.492107][ T11] bond4 (unregistering): Released all slaves [ 1230.860372][ T11] bond3 (unregistering): Released all slaves [ 1231.132953][ T11] bond2 (unregistering): Released all slaves [ 1231.463896][ T11] bond1 (unregistering): Released all slaves [ 1233.300707][ T1131] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1233.330940][ T1131] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1233.368925][ T1131] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1233.377248][ T1131] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1235.482661][ T11] IPVS: stop unused estimator thread 0... [ 1236.813424][T22517] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5314'. [ 1237.184805][T22522] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1237.198669][T22523] loop8: detected capacity change from 0 to 64 [ 1239.122075][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.128591][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.406953][T22548] tipc: Failed to remove unknown binding: 66,1,1/1:2341320414/2341320416 [ 1239.415572][T22548] tipc: Failed to remove unknown binding: 66,1,1/1:2341320414/2341320416 [ 1239.813562][T22549] netlink: 'syz.2.5323': attribute type 5 has an invalid length. [ 1239.976848][T22549] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.5323'. [ 1240.691659][T22563] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5335'. [ 1240.700897][T22563] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5335'. [ 1244.531940][T22590] netlink: 'syz.7.5337': attribute type 5 has an invalid length. [ 1244.571643][T22590] netlink: 3657 bytes leftover after parsing attributes in process `syz.7.5337'. [ 1246.807792][T22630] 9pnet_fd: p9_fd_create_unix (22630): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1248.641681][T22632] netlink: 'syz.7.5344': attribute type 10 has an invalid length. [ 1249.980482][T22661] netlink: 'syz.8.5353': attribute type 5 has an invalid length. [ 1249.988622][T22661] netlink: 3657 bytes leftover after parsing attributes in process `syz.8.5353'. [ 1250.763474][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 1250.763498][ T28] audit: type=1326 audit(1756433143.815:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22664 comm="syz.2.5363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02f4d8ebe9 code=0x7ffc0000 [ 1251.018165][ T28] audit: type=1326 audit(1756433143.855:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22664 comm="syz.2.5363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02f4d8ebe9 code=0x7ffc0000 [ 1251.405549][ T28] audit: type=1326 audit(1756433143.855:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22664 comm="syz.2.5363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f02f4d8ebe9 code=0x7ffc0000 [ 1251.502137][ T28] audit: type=1326 audit(1756433143.855:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22664 comm="syz.2.5363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02f4d8ebe9 code=0x7ffc0000 [ 1251.585272][ T28] audit: type=1326 audit(1756433143.885:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22664 comm="syz.2.5363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02f4d8ebe9 code=0x7ffc0000 [ 1251.633697][ T28] audit: type=1326 audit(1756433143.885:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22664 comm="syz.2.5363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f02f4d8ebe9 code=0x7ffc0000 [ 1253.207186][ T28] audit: type=1326 audit(1756433143.885:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22664 comm="syz.2.5363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02f4d8ebe9 code=0x7ffc0000 [ 1253.561545][ T28] audit: type=1326 audit(1756433143.885:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22664 comm="syz.2.5363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02f4d8ebe9 code=0x7ffc0000 [ 1253.616344][ T28] audit: type=1326 audit(1756433143.895:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22664 comm="syz.2.5363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=90 compat=0 ip=0x7f02f4d8ebe9 code=0x7ffc0000 [ 1253.639594][ T28] audit: type=1326 audit(1756433143.895:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22664 comm="syz.2.5363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02f4d8ebe9 code=0x7ffc0000 [ 1259.779801][T22723] lo speed is unknown, defaulting to 1000 [ 1263.763444][T22764] bridge_slave_0: left allmulticast mode [ 1263.769258][T22764] bridge_slave_0: left promiscuous mode [ 1263.781806][T22764] bridge0: port 1(bridge_slave_0) entered disabled state [ 1263.817132][T22764] bridge_slave_1: left allmulticast mode [ 1263.834166][T22764] bridge_slave_1: left promiscuous mode [ 1263.844546][T22764] bridge0: port 2(bridge_slave_1) entered disabled state [ 1263.858571][T22764] bond0: (slave bond_slave_0): Releasing backup interface [ 1263.883406][T22764] bond0: (slave bond_slave_1): Releasing backup interface [ 1264.003293][T22764] team0: Port device team_slave_0 removed [ 1264.124500][T22764] team0: Port device team_slave_1 removed [ 1264.152104][T22764] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1264.163157][T22764] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1264.183452][T22764] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1264.200107][T22764] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1264.270329][T22772] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5384'. [ 1264.484440][T22772] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1264.615851][T22775] vlan0: entered promiscuous mode [ 1264.649537][T22775] bond13: entered promiscuous mode [ 1264.679527][T22775] vlan0: entered allmulticast mode [ 1264.724287][T22775] bond13: entered allmulticast mode [ 1266.675777][T22806] tipc: Started in network mode [ 1266.682798][T22806] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 1266.690105][T22806] tipc: Enabled bearer , priority 0 [ 1266.725748][T22812] bond10: (slave veth27): Releasing backup interface [ 1266.753573][T22812] bond11: (slave bond12): Releasing backup interface [ 1267.803691][T18745] tipc: Node number set to 11578026 [ 1270.629280][T22859] A link change request failed with some changes committed already. Interface bond3 may have been left with an inconsistent configuration, please check. [ 1271.873050][T22877] sch_tbf: burst 19872 is lower than device lo mtu (39799) ! [ 1274.699815][T22904] netlink: 'syz.8.5417': attribute type 4 has an invalid length. [ 1274.872709][T22905] netlink: 32 bytes leftover after parsing attributes in process `syz.8.5417'. [ 1275.011574][T22905] netlink: 3 bytes leftover after parsing attributes in process `syz.8.5417'. [ 1275.029697][T22905] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5417'. [ 1276.650200][T22937] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5423'. [ 1277.518182][T22942] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5427'. [ 1277.756959][T22946] tipc: Enabling of bearer rejected, failed to enable media [ 1281.011247][T22999] netlink: 'syz.7.5441': attribute type 9 has an invalid length. [ 1281.019244][T22999] netlink: 209836 bytes leftover after parsing attributes in process `syz.7.5441'. [ 1281.934454][T23011] tipc: Enabling of bearer rejected, failed to enable media [ 1285.144029][T23046] Cannot find add_set index 0 as target [ 1285.153523][T23043] netlink: 'syz.2.5454': attribute type 9 has an invalid length. [ 1285.162359][T23043] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.5454'. [ 1287.960899][T23062] tipc: Failed to remove unknown binding: 66,1,1/2886997162:175656079/175656081 [ 1288.083645][T23067] tipc: Failed to remove unknown binding: 66,1,1/2886997162:175656079/175656081 [ 1288.101624][T23067] tipc: Failed to remove unknown binding: 66,1,1/2886997162:175656079/175656081 [ 1288.417298][T23071] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1291.056180][T23111] netlink: 'syz.7.5471': attribute type 4 has an invalid length. [ 1294.137827][T23142] netlink: 'syz.8.5479': attribute type 9 has an invalid length. [ 1294.146311][T23142] netlink: 209836 bytes leftover after parsing attributes in process `syz.8.5479'. [ 1296.919344][T23184] netlink: 'syz.2.5493': attribute type 9 has an invalid length. [ 1296.927356][T23184] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.5493'. [ 1297.469548][T23188] netlink: 'syz.6.5485': attribute type 2 has an invalid length. [ 1300.005587][T23208] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5496'. [ 1300.524082][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.530550][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.715352][T23210] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5498'. [ 1309.167452][T23273] tipc: Enabling of bearer rejected, failed to enable media [ 1309.250208][T23281] netlink: 'syz.2.5519': attribute type 10 has an invalid length. [ 1310.898914][T23302] tipc: Enabling of bearer rejected, failed to enable media [ 1324.629719][T23400] netlink: 'syz.2.5551': attribute type 1 has an invalid length. [ 1324.947738][T23405] bond14: (slave vxcan1): The slave device specified does not support setting the MAC address [ 1325.234491][T23405] bond14: (slave vxcan1): Error -95 calling set_mac_address [ 1325.713335][T23400] gretap4: entered promiscuous mode [ 1325.800286][T23400] bond14: (slave gretap4): making interface the new active one [ 1325.992531][T23400] bond14: (slave gretap4): Enslaving as an active interface with an up link [ 1326.782951][T23417] macvlan2: entered promiscuous mode [ 1326.811474][T23417] macvlan2: entered allmulticast mode [ 1326.836924][T23417] bond14: entered promiscuous mode [ 1326.997411][T23417] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1327.145866][T23417] bond14: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap4 [ 1327.165112][T23417] bond14: left promiscuous mode [ 1328.762180][ T50] Bluetooth: hci4: command 0x0406 tx timeout [ 1330.946235][T23474] netem: change failed [ 1331.702004][T23488] ipt_REJECT: ECHOREPLY no longer supported. [ 1332.009891][T23494] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5574'. [ 1332.234905][T23499] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5574'. [ 1332.432109][T23503] netlink: 2384 bytes leftover after parsing attributes in process `syz.2.5583'. [ 1332.717720][T23499] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1332.811044][T23497] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1333.018270][T23497] bond13: (slave bond14): Enslaving as an active interface with an up link [ 1336.572392][T23534] netlink: 292 bytes leftover after parsing attributes in process `syz.7.5585'. [ 1337.368538][T23545] tipc: Enabling of bearer rejected, failed to enable media [ 1340.111689][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 1340.111705][ T28] audit: type=1326 audit(1756433234.136:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23589 comm="syz.8.5602" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbf1a58ebe9 code=0x0 [ 1341.123817][ T28] audit: type=1326 audit(1756433235.126:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23598 comm="syz.7.5604" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb09a98ebe9 code=0x0 [ 1342.591669][T23620] tipc: Enabling of bearer rejected, failed to enable media [ 1343.801840][T23637] xt_recent: hitcount (16385) is larger than allowed maximum (255) [ 1344.584708][T23641] netlink: 'syz.7.5619': attribute type 1 has an invalid length. [ 1344.627184][T23641] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1344.659014][T23645] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1344.679972][T23645] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1344.711425][T23645] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1344.732044][T23645] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1344.762672][T23645] bond13: (slave geneve4): making interface the new active one [ 1344.794218][T23645] bond13: (slave geneve4): Enslaving as an active interface with an up link [ 1347.137219][T23668] lo speed is unknown, defaulting to 1000 [ 1351.059880][T23707] tipc: Enabling of bearer rejected, failed to enable media [ 1352.623856][T23728] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1353.536451][T23741] xt_TCPMSS: Only works on TCP SYN packets [ 1356.660788][T23776] tipc: Enabling of bearer rejected, failed to enable media [ 1356.898211][T23783] /dev/nullb0: Can't lookup blockdev [ 1357.566225][T23787] netlink: 'syz.7.5664': attribute type 1 has an invalid length. [ 1357.591565][T23787] netlink: 'syz.7.5664': attribute type 2 has an invalid length. [ 1362.367827][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.374627][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1368.628893][T23885] netem: change failed [ 1370.129285][T23905] lo speed is unknown, defaulting to 1000 [ 1377.909722][ T28] audit: type=1326 audit(1756433271.956:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23973 comm="syz.7.5719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09a98ebe9 code=0x7ffc0000 [ 1378.901717][ T28] audit: type=1326 audit(1756433271.956:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23973 comm="syz.7.5719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb09a98ebe9 code=0x7ffc0000 [ 1378.999708][ T28] audit: type=1326 audit(1756433271.956:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23973 comm="syz.7.5719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09a98ebe9 code=0x7ffc0000 [ 1379.051850][T23982] tipc: Enabling of bearer rejected, failed to enable media [ 1379.091481][ T28] audit: type=1326 audit(1756433271.956:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23973 comm="syz.7.5719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09a98ebe9 code=0x7ffc0000 [ 1379.141484][ T28] audit: type=1326 audit(1756433271.986:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23973 comm="syz.7.5719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb09a98ebe9 code=0x7ffc0000 [ 1379.613888][ T28] audit: type=1326 audit(1756433271.986:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23973 comm="syz.7.5719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09a98ebe9 code=0x7ffc0000 [ 1380.493269][ T28] audit: type=1326 audit(1756433271.986:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23973 comm="syz.7.5719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09a98ebe9 code=0x7ffc0000 [ 1380.589842][ T28] audit: type=1326 audit(1756433271.986:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23973 comm="syz.7.5719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fb09a98ebe9 code=0x7ffc0000 [ 1380.635253][ T28] audit: type=1326 audit(1756433271.996:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23973 comm="syz.7.5719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09a98ebe9 code=0x7ffc0000 [ 1380.670332][ T28] audit: type=1326 audit(1756433271.996:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23973 comm="syz.7.5719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb09a98ebe9 code=0x7ffc0000 [ 1381.960805][T24013] xt_recent: hitcount (16385) is larger than allowed maximum (255) [ 1382.617932][T24009] delete_channel: no stack [ 1383.481431][T24036] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1386.039333][T24067] xt_recent: hitcount (16385) is larger than allowed maximum (255) [ 1386.194748][T24056] delete_channel: no stack [ 1386.432935][T24080] tipc: Enabling of bearer rejected, failed to enable media [ 1388.701811][T24108] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1391.703643][T24154] tipc: Enabling of bearer rejected, failed to enable media [ 1392.076240][T24155] tipc: Enabling of bearer rejected, failed to enable media [ 1392.441048][T24173] tipc: Enabling of bearer rejected, failed to enable media [ 1397.620362][T24231] netlink: 'syz.2.5776': attribute type 10 has an invalid length. [ 1397.629355][T24231] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5776'. [ 1397.652145][T24231] A link change request failed with some changes committed already. Interface ªªªªª» may have been left with an inconsistent configuration, please check. [ 1403.191280][T24273] tipc: Enabling of bearer rejected, failed to enable media [ 1404.430282][T24290] tipc: Enabling of bearer rejected, failed to enable media [ 1405.337459][T24301] netlink: 'syz.2.5797': attribute type 2 has an invalid length. [ 1405.346646][T24301] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.5797'. [ 1406.015054][T24310] tipc: Enabling of bearer rejected, failed to enable media [ 1408.272687][T24330] vlan2: entered promiscuous mode [ 1410.315005][T24351] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1411.355678][T24363] tipc: Enabling of bearer rejected, failed to enable media [ 1413.532189][T24382] tipc: Enabling of bearer rejected, failed to enable media [ 1414.560809][T24391] tipc: Enabling of bearer rejected, failed to enable media [ 1414.765958][T24398] tipc: Enabling of bearer rejected, failed to enable media [ 1415.605536][T24403] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5824'. [ 1417.961750][T24440] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1421.579651][T24470] overlayfs: failed to clone upperpath [ 1422.193102][T24470] overlayfs: failed to resolve './file1': -2 [ 1422.224775][T24483] tipc: Enabling of bearer rejected, failed to enable media [ 1424.658173][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1424.665934][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1427.059367][T24525] tipc: Enabling of bearer rejected, failed to enable media [ 1428.057763][T24534] tipc: Enabling of bearer rejected, failed to enable media [ 1428.223674][T24545] tipc: Enabling of bearer rejected, failed to enable media [ 1432.553943][T24581] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1433.820820][T24590] tipc: Enabling of bearer rejected, failed to enable media [ 1434.564564][T18745] IPVS: starting estimator thread 0... [ 1434.699570][T24606] IPVS: using max 21 ests per chain, 50400 per kthread [ 1434.778696][T24610] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5878'. [ 1435.539945][T24610] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5878'. [ 1436.467500][T24617] tipc: Enabling of bearer rejected, failed to enable media [ 1437.557029][T24636] netlink: 'syz.7.5884': attribute type 10 has an invalid length. [ 1437.565276][T24636] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5884'. [ 1437.576697][T24636] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1440.726134][T24660] tipc: Enabling of bearer rejected, failed to enable media [ 1442.849355][T24694] tipc: Enabling of bearer rejected, failed to enable media [ 1448.034497][T24748] tipc: Enabling of bearer rejected, failed to enable media [ 1449.979952][T24764] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1454.048074][T24796] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1455.140487][T24817] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1455.149478][T24817] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1455.158258][T24817] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1455.167717][T24817] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1455.605280][T24812] overlayfs: failed to clone upperpath [ 1455.901478][T24812] overlayfs: failed to resolve './file1': -2 [ 1456.926956][T24832] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1465.601677][T24894] tipc: Enabling of bearer rejected, failed to enable media [ 1468.801937][T24921] batadv_slave_1: entered promiscuous mode [ 1468.828771][T24921] hsr0: entered promiscuous mode [ 1469.365573][T24921] batadv_slave_1: left promiscuous mode [ 1469.384736][T24918] hsr0: left promiscuous mode [ 1469.510675][T24931] tipc: Enabling of bearer rejected, failed to enable media [ 1473.517171][T24967] tipc: Enabling of bearer rejected, failed to enable media [ 1474.884814][T24979] tipc: Enabling of bearer rejected, failed to enable media [ 1475.142708][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 1475.142721][ T28] audit: type=1326 audit(1756433620.670:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24956 comm="syz.6.5970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c73d8ebe9 code=0x7ffc0000 [ 1475.212103][ T28] audit: type=1326 audit(1756433620.670:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24956 comm="syz.6.5970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f7c73d8ebe9 code=0x7ffc0000 [ 1475.351943][T24988] overlayfs: failed to clone lowerpath [ 1475.436142][ T28] audit: type=1326 audit(1756433620.670:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24956 comm="syz.6.5970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c73d8ebe9 code=0x7ffc0000 [ 1475.815749][ T28] audit: type=1326 audit(1756433620.680:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24956 comm="syz.6.5970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c73d8ebe9 code=0x7ffc0000 [ 1478.298631][T25011] tipc: Enabling of bearer rejected, failed to enable media [ 1478.396436][T25017] tipc: Enabling of bearer rejected, failed to enable media [ 1479.698598][T25033] netem: change failed [ 1481.186768][T25058] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1481.370062][T25063] tipc: Enabling of bearer rejected, failed to enable media [ 1485.141685][T25091] tipc: Enabling of bearer rejected, failed to enable media [ 1486.524400][T25109] tipc: Enabling of bearer rejected, failed to enable media [ 1486.745605][T25117] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1487.705528][T25131] tipc: Enabling of bearer rejected, failed to enable media [ 1489.888235][T25152] tipc: Enabling of bearer rejected, failed to enable media [ 1490.440985][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1490.447760][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1490.806891][T25160] tipc: Enabling of bearer rejected, failed to enable media [ 1491.172598][T25175] xt_TCPMSS: Only works on TCP SYN packets [ 1493.592957][T25193] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1494.564922][T25209] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1496.563821][T25229] tipc: Enabling of bearer rejected, failed to enable media [ 1496.725228][T25237] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1497.763315][T25253] tipc: Enabling of bearer rejected, failed to enable media [ 1500.083898][T25276] tipc: Enabling of bearer rejected, failed to enable media [ 1501.072444][T25286] tipc: Enabling of bearer rejected, failed to enable media [ 1501.105237][T25288] tipc: Enabling of bearer rejected, failed to enable media [ 1501.351418][T25296] tipc: Enabling of bearer rejected, failed to enable media [ 1502.530956][T25308] tipc: Enabling of bearer rejected, failed to enable media [ 1503.842733][T25327] tipc: Enabling of bearer rejected, failed to enable media [ 1505.441783][T25343] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1509.299359][T25381] tipc: Enabling of bearer rejected, failed to enable media [ 1511.471194][T25422] netlink: 'syz.2.6090': attribute type 4 has an invalid length. [ 1511.692201][T25419] tipc: Enabling of bearer rejected, failed to enable media [ 1514.704686][T25468] tipc: Enabling of bearer rejected, failed to enable media [ 1515.136711][T25477] netlink: 'syz.8.6107': attribute type 1 has an invalid length. [ 1515.216674][T25477] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1515.302732][T25477] bond1: (slave veth3): Enslaving as an active interface with a down link [ 1515.367481][T25485] vlan0: entered allmulticast mode [ 1515.375282][T25485] macvtap0: entered allmulticast mode [ 1515.425388][T25485] veth0_macvtap: entered allmulticast mode [ 1515.460329][T25485] bond1: (slave vlan0): making interface the new active one [ 1515.494146][T25485] vlan0: entered promiscuous mode [ 1515.499721][T25485] macvtap0: entered promiscuous mode [ 1515.506270][T25485] bond1: (slave vlan0): Enslaving as an active interface with an up link [ 1515.530001][T25488] tipc: Enabling of bearer rejected, failed to enable media [ 1515.581289][T25476] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1516.945326][T25504] tipc: Enabling of bearer rejected, failed to enable media [ 1517.907941][ T5784] Bluetooth: hci1: unexpected event for opcode 0x2024 [ 1518.012282][T25526] ptrace attach of "./syz-executor exec"[5786] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ  "[25526] [ 1518.202816][T25531] tipc: Enabling of bearer rejected, failed to enable media [ 1518.331286][T25534] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6122'. [ 1518.409292][T25534] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6122'. [ 1518.635544][T25541] tipc: Enabling of bearer rejected, failed to enable media [ 1520.928568][T25573] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1521.098723][T25579] tipc: Enabling of bearer rejected, failed to enable media [ 1521.194587][T25583] tipc: Enabling of bearer rejected, failed to enable media [ 1524.437177][T25613] tipc: Enabling of bearer rejected, failed to enable media [ 1525.710335][T25624] tipc: Enabling of bearer rejected, failed to enable media [ 1528.163042][T25657] tipc: Enabling of bearer rejected, failed to enable media [ 1529.522209][T25673] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1529.704218][T25678] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6158'. [ 1529.713559][T25678] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6158'. [ 1530.881811][T25692] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1531.667715][T25725] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1531.692105][T25727] tipc: Enabling of bearer rejected, failed to enable media [ 1532.005822][T25744] tipc: Enabling of bearer rejected, failed to enable media [ 1532.714182][T25758] tipc: Enabling of bearer rejected, failed to enable media [ 1533.815694][T25770] tipc: Enabling of bearer rejected, failed to enable media [ 1534.775525][T25775] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6183'. [ 1534.832540][T23694] vlan0: left promiscuous mode [ 1534.849125][T23694] macvtap0: left promiscuous mode [ 1536.055095][T25795] overlayfs: failed to clone lowerpath [ 1537.007535][T25803] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6191'. [ 1537.172476][T25805] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1541.395045][T25848] netlink: 88 bytes leftover after parsing attributes in process `syz.6.6205'. [ 1544.945820][T25891] tipc: Enabling of bearer rejected, failed to enable media [ 1545.900760][T25912] Cannot find add_set index 4 as target [ 1547.856833][T25927] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1548.149543][ T28] audit: type=1326 audit(1756433688.970:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25942 comm="syz.7.6230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09a98ebe9 code=0x7ffc0000 [ 1548.177727][T25938] lo speed is unknown, defaulting to 1000 [ 1548.312613][ T28] audit: type=1326 audit(1756433688.998:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25942 comm="syz.7.6230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fb09a98ebe9 code=0x7ffc0000 [ 1548.412282][ T28] audit: type=1326 audit(1756433688.998:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25942 comm="syz.7.6230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09a98ebe9 code=0x7ffc0000 [ 1548.463732][ T28] audit: type=1326 audit(1756433688.998:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25942 comm="syz.7.6230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7fb09a98ebe9 code=0x7ffc0000 [ 1548.524476][T25951] tipc: Enabling of bearer rejected, failed to enable media [ 1548.563914][ T28] audit: type=1326 audit(1756433688.998:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25942 comm="syz.7.6230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09a98ebe9 code=0x7ffc0000 [ 1548.618687][ T28] audit: type=1326 audit(1756433688.998:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25942 comm="syz.7.6230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09a98ebe9 code=0x7ffc0000 [ 1548.626689][T25956] netlink: 'syz.7.6234': attribute type 1 has an invalid length. [ 1548.690766][ T28] audit: type=1326 audit(1756433688.998:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25942 comm="syz.7.6230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb09a98ebe9 code=0x7ffc0000 [ 1548.724042][T25956] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1548.750814][ T28] audit: type=1326 audit(1756433688.998:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25942 comm="syz.7.6230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09a98ebe9 code=0x7ffc0000 [ 1548.761314][T25961] bond14: (slave ip6erspan0): making interface the new active one [ 1548.784518][T25961] bond14: (slave ip6erspan0): Enslaving as an active interface with an up link [ 1548.804194][T25956] gretap3: entered promiscuous mode [ 1548.814089][T25956] bond14: (slave gretap3): Enslaving as an active interface with an up link [ 1548.839381][ T28] audit: type=1326 audit(1756433688.998:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25942 comm="syz.7.6230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09a98ebe9 code=0x7ffc0000 [ 1548.887408][T25956] macvlan2: entered promiscuous mode [ 1548.896783][T25956] macvlan2: entered allmulticast mode [ 1548.909627][ T28] audit: type=1326 audit(1756433688.998:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25942 comm="syz.7.6230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb09a98ebe9 code=0x7ffc0000 [ 1548.909763][T25956] bond14: entered promiscuous mode [ 1548.967827][T25956] ip6erspan0: entered promiscuous mode [ 1548.977078][T25956] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1549.001472][T25956] bond14: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1549.020646][T25956] bond14: left promiscuous mode [ 1549.025904][T25956] ip6erspan0: left promiscuous mode [ 1551.074353][T25996] tipc: Enabling of bearer rejected, failed to enable media [ 1551.341137][T26007] tipc: Enabling of bearer rejected, failed to enable media [ 1552.544496][T26022] o2cb: This node has not been configured. [ 1552.551086][T26022] o2cb: Cluster check failed. Fix errors before retrying. [ 1552.558575][T26022] (syz.8.6246,26022,0):user_dlm_register:674 ERROR: status = -22 [ 1552.566400][T26022] (syz.8.6246,26022,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1" [ 1556.042511][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1556.049704][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1559.295383][T26093] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1566.706249][T26145] netlink: zone id is out of range [ 1571.235772][ T5784] Bluetooth: hci4: unexpected event for opcode 0x1004 [ 1571.811483][T26209] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6306'. [ 1574.208535][T26244] overlayfs: failed to clone upperpath [ 1574.307296][T26258] xt_TCPMSS: Only works on TCP SYN packets [ 1574.915642][T26265] tipc: Enabling of bearer rejected, failed to enable media [ 1575.046864][T26272] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6325'. [ 1575.130519][T26272] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6325'. [ 1575.550586][ T5784] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1575.568147][ T5784] Bluetooth: hci4: Injecting HCI hardware error event [ 1575.594050][ T5784] Bluetooth: hci4: hardware error 0x00 [ 1577.603847][T26298] vlan0: entered promiscuous mode [ 1577.609134][T26298] macvtap0: entered promiscuous mode [ 1577.614966][T26298] vlan0: left allmulticast mode [ 1577.619924][T26298] macvtap0: left allmulticast mode [ 1577.625145][T26298] veth0_macvtap: left allmulticast mode [ 1577.641505][T23694] bond1: (slave vlan0): link status definitely down, disabling slave [ 1578.451648][ T5784] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1578.486999][T23694] bond1: now running without any active interface! [ 1578.584542][T26306] tipc: Enabling of bearer rejected, failed to enable media [ 1582.973401][T26363] tipc: Enabling of bearer rejected, failed to enable media [ 1585.349599][T26399] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1590.918126][T26442] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1592.535807][T26457] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6373'. [ 1595.551637][T26470] tipc: Enabling of bearer rejected, failed to enable media [ 1595.663936][T26475] netlink: 80 bytes leftover after parsing attributes in process `syz.2.6377'. [ 1595.678621][T26475] netlink: 80 bytes leftover after parsing attributes in process `syz.2.6377'. [ 1596.472729][T26478] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1599.703008][T26520] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1599.861906][T26527] @: renamed from vlan0 [ 1604.288706][T26579] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1604.649157][T26588] lo speed is unknown, defaulting to 1000 [ 1605.106706][T26597] syz.2.6407 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1605.478875][T26603] netlink: 'syz.2.6409': attribute type 1 has an invalid length. [ 1606.925960][T26614] syz.8.6411: vmalloc error: size 18874368, failed to allocated page array size 36864, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz8,mems_allowed=0-1 [ 1606.944829][T26614] CPU: 0 PID: 26614 Comm: syz.8.6411 Not tainted syzkaller #0 [ 1606.952510][T26614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1606.962704][T26614] Call Trace: [ 1606.966005][T26614] [ 1606.968971][T26614] dump_stack_lvl+0x16c/0x230 [ 1606.973849][T26614] ? show_regs_print_info+0x20/0x20 [ 1606.979261][T26614] ? load_image+0x3b0/0x3b0 [ 1606.983813][T26614] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1606.990274][T26614] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 1606.996803][T26614] warn_alloc+0x210/0x300 [ 1607.001166][T26614] ? zone_watermark_ok_safe+0x230/0x230 [ 1607.006991][T26614] ? _raw_spin_unlock+0x28/0x40 [ 1607.012033][T26614] __vmalloc_node_range+0x662/0x1320 [ 1607.017440][T26614] ? __asan_memset+0x22/0x40 [ 1607.022399][T26614] ? free_vm_area+0x50/0x50 [ 1607.026945][T26614] ? kvmalloc_node+0x70/0x180 [ 1607.031673][T26614] ? rcu_is_watching+0x15/0xb0 [ 1607.036462][T26614] ? kvmalloc_node+0x70/0x180 [ 1607.041160][T26614] ? trace_kmalloc+0x1f/0xa0 [ 1607.045779][T26614] kvmalloc_node+0x13f/0x180 [ 1607.050392][T26614] ? translate_table+0x19c/0x2020 [ 1607.055593][T26614] translate_table+0x19c/0x2020 [ 1607.060594][T26614] ? ip6t_register_table+0x7b0/0x7b0 [ 1607.066087][T26614] ? __might_fault+0xaa/0x120 [ 1607.070781][T26614] ? __lock_acquire+0x7c80/0x7c80 [ 1607.075829][T26614] ? __virt_addr_valid+0x18c/0x540 [ 1607.081066][T26614] ? __might_fault+0xaa/0x120 [ 1607.085782][T26614] ? __might_fault+0xc6/0x120 [ 1607.090495][T26614] ? __might_fault+0xaa/0x120 [ 1607.095279][T26614] do_ip6t_set_ctl+0x969/0xcd0 [ 1607.100063][T26614] ? ip6t_unregister_table_exit+0x230/0x230 [ 1607.106166][T26614] ? __lock_acquire+0x7c80/0x7c80 [ 1607.111209][T26614] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 1607.117061][T26614] ? mutex_unlock+0x10/0x10 [ 1607.121575][T26614] ? lockdep_hardirqs_on+0x98/0x150 [ 1607.126774][T26614] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1607.132449][T26614] ? ipv6_setsockopt+0x24/0x190 [ 1607.137424][T26614] nf_setsockopt+0x263/0x280 [ 1607.142228][T26614] ? sock_common_recvmsg+0x1b0/0x1b0 [ 1607.147674][T26614] do_sock_setsockopt+0x175/0x1a0 [ 1607.152806][T26614] ? __fdget+0x180/0x210 [ 1607.157150][T26614] __x64_sys_setsockopt+0x184/0x200 [ 1607.162349][T26614] do_syscall_64+0x55/0xb0 [ 1607.166777][T26614] ? clear_bhb_loop+0x40/0x90 [ 1607.171538][T26614] ? clear_bhb_loop+0x40/0x90 [ 1607.176423][T26614] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1607.182479][T26614] RIP: 0033:0x7fbf1a58ebe9 [ 1607.187023][T26614] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1607.207350][T26614] RSP: 002b:00007fbf1b38c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1607.216828][T26614] RAX: ffffffffffffffda RBX: 00007fbf1a7b6180 RCX: 00007fbf1a58ebe9 [ 1607.224978][T26614] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000005 [ 1607.232990][T26614] RBP: 00007fbf1a611e19 R08: 00000000000002f8 R09: 0000000000000000 [ 1607.240983][T26614] R10: 0000200000000440 R11: 0000000000000246 R12: 0000000000000000 [ 1607.248955][T26614] R13: 00007fbf1a7b6218 R14: 00007fbf1a7b6180 R15: 00007ffdc4e1d6b8 [ 1607.257289][T26614] [ 1607.261389][T26614] Mem-Info: [ 1607.264542][T26614] active_anon:19445 inactive_anon:75 isolated_anon:0 [ 1607.264542][T26614] active_file:18170 inactive_file:40796 isolated_file:0 [ 1607.264542][T26614] unevictable:17599 dirty:123 writeback:0 [ 1607.264542][T26614] slab_reclaimable:10674 slab_unreclaimable:104962 [ 1607.264542][T26614] mapped:27045 shmem:16897 pagetables:597 [ 1607.264542][T26614] sec_pagetables:0 bounce:0 [ 1607.264542][T26614] kernel_misc_reclaimable:0 [ 1607.264542][T26614] free:1285542 free_pcp:9850 free_cma:0 [ 1607.314507][T26614] Node 0 active_anon:77880kB inactive_anon:300kB active_file:72680kB inactive_file:162980kB unevictable:68860kB isolated(anon):0kB isolated(file):0kB mapped:108180kB dirty:492kB writeback:0kB shmem:66052kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12564kB pagetables:2488kB sec_pagetables:0kB all_unreclaimable? no [ 1607.321053][T26609] vlan2: entered allmulticast mode [ 1607.348398][T26614] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1607.385463][T26614] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1607.413127][T26614] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 1607.419016][T26614] Node 0 DMA32 free:1233424kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:78036kB inactive_anon:300kB active_file:72680kB inactive_file:161660kB unevictable:68860kB writepending:492kB present:3129332kB managed:2589592kB mlocked:0kB bounce:0kB free_pcp:16200kB local_pcp:1520kB free_cma:0kB [ 1607.450560][T26614] lowmem_reserve[]: 0 0 1 1 1 [ 1607.455614][T26614] Node 0 Normal free:20kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1320kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1607.483751][T26614] lowmem_reserve[]: 0 0 0 0 0 [ 1607.488605][T26614] Node 1 Normal free:3893364kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:22696kB local_pcp:8096kB free_cma:0kB [ 1607.518918][T26614] lowmem_reserve[]: 0 0 0 0 0 [ 1607.523775][T26614] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1607.536546][T26614] Node 0 DMA32: 1347*4kB (ME) 695*8kB (UME) 719*16kB (UME) 1119*32kB (UME) 582*64kB (UME) 196*128kB (UME) 90*256kB (UME) 44*512kB (UME) 14*1024kB (UME) 8*2048kB (UME) 253*4096kB (UM) = 1233172kB [ 1607.556131][T26614] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 1607.568609][T26614] Node 1 Normal: 201*4kB (UME) 66*8kB (UME) 36*16kB (UME) 110*32kB (UME) 25*64kB (UME) 8*128kB (UME) 3*256kB (UME) 1*512kB (E) 1*1024kB (E) 2*2048kB (UE) 947*4096kB (M) = 3893364kB [ 1607.586985][T26614] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1607.596882][T26614] Node 0 hugepages_total=3 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1607.606337][T26614] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1607.616014][T26614] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1607.625688][T26614] 95514 total pagecache pages [ 1607.630494][T26614] 75 pages in swap cache [ 1607.634988][T26614] Free swap = 124480kB [ 1607.639322][T26614] Total swap = 124996kB [ 1607.643754][T26614] 2097051 pages RAM [ 1607.647599][T26614] 0 pages HighMem/MovableOnly [ 1607.652587][T26614] 416139 pages reserved [ 1607.656885][T26614] 0 pages cma reserved [ 1607.672823][T26609] bond15: entered allmulticast mode [ 1608.649215][T26636] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1611.168139][T26670] overlayfs: failed to clone lowerpath [ 1612.473239][T26683] tipc: Enabling of bearer rejected, failed to enable media [ 1612.821142][T26690] tipc: Enabling of bearer rejected, failed to enable media [ 1616.528226][T26730] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1619.195181][T26773] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1620.381623][T26783] (null): rxe_set_mtu: Set mtu to 256 [ 1620.398750][T26783] rdma_rxe: rxe_newlink: failed to add lo [ 1620.525684][T26783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1620.558024][T26783] 8021q: adding VLAN 0 to HW filter on device team0 [ 1620.576187][T26783] tipc: Resetting bearer [ 1620.610807][T26783] tipc: Resetting bearer [ 1620.630799][T26783] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1621.422918][T26794] tipc: Enabling of bearer rejected, failed to enable media [ 1621.707256][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1621.714154][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1623.653547][T26819] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1624.266555][T26828] netlink: 'syz.6.6464': attribute type 10 has an invalid length. [ 1626.591354][T26861] xt_connbytes: Forcing CT accounting to be enabled [ 1626.598878][T26861] Cannot find set identified by id 0 to match [ 1627.191734][T26864] tipc: Enabling of bearer rejected, failed to enable media [ 1630.590260][T26898] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1632.070613][T26925] vlan2: entered promiscuous mode [ 1632.077606][T26925] dummy0: entered promiscuous mode [ 1632.850249][T26934] tipc: Enabling of bearer rejected, failed to enable media [ 1633.977583][T26950] tipc: Enabling of bearer rejected, failed to enable media [ 1634.621862][T26951] lo speed is unknown, defaulting to 1000 [ 1638.206812][T26987] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1641.940509][T27020] tipc: Enabling of bearer rejected, failed to enable media [ 1643.972180][T27038] tipc: Enabling of bearer rejected, failed to enable media [ 1645.290441][T27061] tipc: Enabling of bearer rejected, failed to enable media [ 1650.010229][T27108] UBIFS error (pid: 27108): cannot open "./file0", error -22 [ 1650.621661][T27118] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1653.489561][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 1653.489575][ T28] audit: type=1326 audit(1756433787.505:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27124 comm="syz.8.6541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf1a58ebe9 code=0x7ffc0000 [ 1653.744667][ T28] audit: type=1326 audit(1756433787.505:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27124 comm="syz.8.6541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fbf1a58ebe9 code=0x7ffc0000 [ 1653.832819][ T28] audit: type=1326 audit(1756433787.505:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27124 comm="syz.8.6541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf1a58ebe9 code=0x7ffc0000 [ 1653.909903][ T28] audit: type=1326 audit(1756433787.505:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27124 comm="syz.8.6541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf1a58ebe9 code=0x7ffc0000 [ 1656.748189][T27156] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1656.757093][T27156] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1656.766219][T27156] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1656.775159][T27156] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1663.824712][T26997] libceph: connect (1)[c::]:6789 error -101 [ 1663.945900][T26997] libceph: mon0 (1)[c::]:6789 connect error [ 1664.245383][T27241] ceph: No mds server is up or the cluster is laggy [ 1668.721866][T27295] tipc: Enabling of bearer rejected, failed to enable media [ 1669.682825][T27309] tipc: Enabling of bearer rejected, failed to enable media [ 1670.217238][ T28] audit: type=1326 audit(1756433803.154:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27303 comm="syz.7.6593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09a98ebe9 code=0x7ffc0000 [ 1670.240362][ T28] audit: type=1326 audit(1756433803.154:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27303 comm="syz.7.6593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fb09a98ebe9 code=0x7ffc0000 [ 1670.263480][ T28] audit: type=1326 audit(1756433803.154:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27303 comm="syz.7.6593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09a98ebe9 code=0x7ffc0000 [ 1671.038212][T27323] tipc: Enabling of bearer rejected, failed to enable media [ 1671.048348][ T28] audit: type=1326 audit(1756433803.154:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27303 comm="syz.7.6593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09a98ebe9 code=0x7ffc0000 [ 1678.624060][T27397] netlink: 'syz.6.6606': attribute type 4 has an invalid length. [ 1681.109682][T27433] ptrace attach of "./syz-executor exec"[22228] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ  "[27433] [ 1682.856814][T27453] xt_connbytes: Forcing CT accounting to be enabled [ 1682.864636][T27453] set match dimension is over the limit! [ 1687.479948][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1687.486404][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1687.910984][T27512] tipc: Enabling of bearer rejected, failed to enable media [ 1689.360108][T27536] overlayfs: failed to clone lowerpath [ 1691.259284][T27557] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6642'. [ 1692.677746][T27574] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1694.373975][T27594] Cannot find add_set index 4 as target [ 1698.815226][ T28] audit: type=1326 audit(1756433829.907:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27643 comm="syz.2.6670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02f4d8ebe9 code=0x7ffc0000 [ 1698.861723][ T28] audit: type=1326 audit(1756433829.907:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27643 comm="syz.2.6670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02f4d8ebe9 code=0x7ffc0000 [ 1698.930411][ T28] audit: type=1326 audit(1756433829.925:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27643 comm="syz.2.6670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f02f4d8ebe9 code=0x7ffc0000 [ 1698.992659][ T28] audit: type=1326 audit(1756433829.925:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27643 comm="syz.2.6670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02f4d8ebe9 code=0x7ffc0000 [ 1699.078206][ T28] audit: type=1326 audit(1756433829.925:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27643 comm="syz.2.6670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02f4d8ebe9 code=0x7ffc0000 [ 1699.131731][ T28] audit: type=1326 audit(1756433829.925:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27643 comm="syz.2.6670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7f02f4d8ebe9 code=0x7ffc0000 [ 1699.185929][ T28] audit: type=1326 audit(1756433829.925:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27643 comm="syz.2.6670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02f4d8ebe9 code=0x7ffc0000 [ 1699.249248][ T28] audit: type=1326 audit(1756433829.925:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27643 comm="syz.2.6670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02f4d8ebe9 code=0x7ffc0000 [ 1699.318176][ T28] audit: type=1326 audit(1756433829.935:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27643 comm="syz.2.6670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f02f4d8ebe9 code=0x7ffc0000 [ 1699.372257][ T28] audit: type=1326 audit(1756433829.935:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27643 comm="syz.2.6670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02f4d8ebe9 code=0x7ffc0000 [ 1707.628145][T27761] vlan0: left allmulticast mode [ 1707.634049][T27761] bond13: left allmulticast mode [ 1709.400379][T27784] xt_connbytes: Forcing CT accounting to be enabled [ 1709.407719][T27784] Cannot find set identified by id 0 to match [ 1714.074138][T27812] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6710'. [ 1716.283317][ T5784] Bluetooth: hci1: unexpected event for opcode 0x1004 [ 1719.207477][T27861] xt_connbytes: Forcing CT accounting to be enabled [ 1719.214374][T27861] set match dimension is over the limit! [ 1721.001112][ T5784] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1721.353200][ T5784] Bluetooth: hci1: Injecting HCI hardware error event [ 1721.362625][ T5784] Bluetooth: hci1: hardware error 0x00 [ 1722.110867][T27886] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6728'. [ 1722.310064][T27886] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6728'. [ 1724.667196][ T5784] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1725.855910][T27932] netlink: 80 bytes leftover after parsing attributes in process `syz.7.6739'. [ 1725.870397][T27932] netlink: 80 bytes leftover after parsing attributes in process `syz.7.6739'. [ 1738.194699][T28052] overlayfs: failed to clone lowerpath [ 1740.125361][T28070] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6772'. [ 1746.319484][T28149] overlayfs: failed to clone lowerpath [ 1753.070555][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1753.084529][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1758.994667][T28293] overlayfs: failed to clone lowerpath [ 1767.351611][T28383] xt_TCPMSS: Only works on TCP SYN packets [ 1768.708590][T28398] overlayfs: failed to clone lowerpath [ 1770.404812][T28416] overlayfs: failed to clone lowerpath [ 1770.960396][T28423] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6854'. [ 1771.036885][T28423] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6854'. [ 1774.687584][T28456] tipc: Enabling of bearer rejected, failed to enable media [ 1776.097819][T28477] overlayfs: failed to clone lowerpath [ 1783.802169][T28568] overlayfs: failed to clone lowerpath [ 1790.173077][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 1790.173091][ T28] audit: type=1326 audit(1756433915.355:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28621 comm="syz.7.6911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09a98ebe9 code=0x7ffc0000 [ 1790.244020][ T28] audit: type=1326 audit(1756433915.355:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28621 comm="syz.7.6911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09a98ebe9 code=0x7ffc0000 [ 1790.292607][ T28] audit: type=1326 audit(1756433915.355:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28621 comm="syz.7.6911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb09a98ebe9 code=0x7ffc0000 [ 1790.338065][ T28] audit: type=1326 audit(1756433915.355:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28621 comm="syz.7.6911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09a98ebe9 code=0x7ffc0000 [ 1790.362323][ T28] audit: type=1326 audit(1756433915.355:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28621 comm="syz.7.6911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb09a98ebe9 code=0x7ffc0000 [ 1790.390955][ T28] audit: type=1326 audit(1756433915.355:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28621 comm="syz.7.6911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09a98ebe9 code=0x7ffc0000 [ 1791.463550][T28631] ceph: No mds server is up or the cluster is laggy [ 1791.471150][T18169] libceph: connect (1)[c::]:6789 error -101 [ 1791.477419][T18169] libceph: mon0 (1)[c::]:6789 connect error [ 1791.492729][ T28] audit: type=1326 audit(1756433915.355:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28621 comm="syz.7.6911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb09a98ebe9 code=0x7ffc0000 [ 1791.523508][ T28] audit: type=1326 audit(1756433915.393:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28621 comm="syz.7.6911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09a98ebe9 code=0x7ffc0000 [ 1791.546241][ T28] audit: type=1326 audit(1756433915.393:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28621 comm="syz.7.6911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb09a98ebe9 code=0x7ffc0000 [ 1791.570632][ T28] audit: type=1326 audit(1756433915.393:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28621 comm="syz.7.6911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09a98ebe9 code=0x7ffc0000 [ 1794.804477][T28663] netlink: 'syz.2.6914': attribute type 12 has an invalid length. [ 1796.480365][T28675] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 1797.757051][T28692] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6924'. [ 1797.817719][T28692] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6924'. [ 1797.855436][T28693] netlink: 'syz.6.6924': attribute type 10 has an invalid length. [ 1797.863614][T28693] bridge0: port 1(team0) entered blocking state [ 1797.870201][T28693] bridge0: port 1(team0) entered disabled state [ 1797.898294][T28693] team0: entered allmulticast mode [ 1798.706002][T28710] netlink: 'syz.2.6929': attribute type 3 has an invalid length. [ 1798.714361][T28710] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6929'. [ 1803.922056][T28767] Device name cannot be null; rc = [-22] [ 1808.018173][T28816] trusted_key: encrypted_key: insufficient parameters specified [ 1811.552405][T28858] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6981'. [ 1817.958474][T28921] netlink: 'syz.7.6989': attribute type 10 has an invalid length. [ 1818.321397][T28935] bridge_slave_0: entered promiscuous mode [ 1818.846392][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1818.853566][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1823.336249][T28987] tipc: Enabling of bearer rejected, failed to enable media [ 1823.392846][T28990] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1828.292265][T29031] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7026'. [ 1828.781887][T29049] tipc: Enabling of bearer rejected, failed to enable media [ 1828.997767][T29056] tipc: Enabling of bearer rejected, failed to enable media [ 1830.752138][T29086] tipc: Enabling of bearer rejected, failed to enable media [ 1833.167107][T29126] netlink: 'syz.8.7042': attribute type 1 has an invalid length. [ 1833.729104][T29126] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 1833.752986][T19163] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1833.754019][T29132] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1834.304277][T29126] bond2 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 1834.332184][T29126] bond2 (unregistering): (slave ip6gretap1): Releasing backup interface [ 1834.372878][T29126] bond2 (unregistering): Released all slaves [ 1844.050387][T29272] debugfs: Directory 'netdev:nicvf0' with parent 'phy21' already present! [ 1860.173536][T29453] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7122'. [ 1875.919330][T29608] set match dimension is over the limit! [ 1877.483897][T29625] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7165'. [ 1880.122722][T29657] delete_channel: no stack [ 1884.454917][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1884.508123][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1884.535550][T29702] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1891.254932][T29749] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1893.864174][T29780] Option 'TX¼÷Æ®€' to dns_resolver key: bad/missing value [ 1897.300274][T29800] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1934.727882][T30087] set match dimension is over the limit! [ 1937.191033][T30114] netlink: 6336 bytes leftover after parsing attributes in process `syz.8.7281'. [ 1940.343567][T30138] netlink: 'syz.7.7290': attribute type 1 has an invalid length. [ 1940.486116][T30138] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1941.170419][T30138] bond15: (slave veth17): Enslaving as an active interface with a down link [ 1941.359308][T30138] bond15: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1941.400162][T30138] vlan0: entered allmulticast mode [ 1941.427882][T30138] bond15: (slave vlan0): Opening slave failed [ 1950.135428][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1950.142615][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1951.380630][T30236] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7320'. [ 1951.445776][T30236] IPVS: Error joining to the multicast group [ 1954.977400][T30270] lo speed is unknown, defaulting to 1000 [ 1958.014597][T30299] netlink: 'syz.7.7338': attribute type 4 has an invalid length. [ 1961.833414][T30339] tipc: Enabling of bearer rejected, already enabled [ 1967.307143][T30367] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7346'. [ 1972.096299][T30411] autofs4:pid:30411:autofs_fill_super: called with bogus options [ 1974.657383][T30442] netlink: 84 bytes leftover after parsing attributes in process `syz.2.7365'. [ 1977.682860][T30471] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7373'. [ 1988.482451][T30556] trusted_key: encrypted_key: insufficient parameters specified [ 1994.200457][T30611] tipc: Enabling of bearer rejected, failed to enable media [ 1996.797547][T30646] tipc: Enabling of bearer rejected, failed to enable media [ 2002.002125][T30707] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 2002.287942][T30710] tipc: Enabling of bearer rejected, failed to enable media [ 2005.763393][T30757] tipc: Enabling of bearer rejected, failed to enable media [ 2006.441931][T30765] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 2006.962171][T30776] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7449'. [ 2008.567034][T30806] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 2011.813750][T30831] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7464'. [ 2011.827808][T30831] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7464'. [ 2011.837201][T30831] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7464'. [ 2013.075948][T30842] tipc: Enabling of bearer rejected, failed to enable media [ 2015.804739][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 2015.812196][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 2016.959917][T30887] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 2017.363040][T30891] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7480'. [ 2022.504797][T30930] tipc: Enabling of bearer rejected, failed to enable media [ 2025.294956][T30955] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7493'. [ 2025.306613][T30955] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7493'. [ 2025.317485][T30955] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7493'. [ 2025.328225][T30955] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7493'. [ 2025.339138][T30955] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7493'. [ 2025.349803][T30955] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7493'. [ 2025.361192][T30955] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7493'. [ 2026.546191][T30963] mac80211_hwsim hwsim25 wlan0: entered promiscuous mode [ 2027.771245][T30974] tipc: Enabling of bearer rejected, failed to enable media [ 2034.945483][T31023] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 2036.103200][T31035] lo speed is unknown, defaulting to 1000 [ 2037.835023][T31049] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7519'. [ 2040.131563][T31071] tipc: Enabling of bearer rejected, failed to enable media [ 2041.281308][T31083] lo speed is unknown, defaulting to 1000 [ 2044.498125][T31113] tipc: Enabling of bearer rejected, failed to enable media [ 2046.771915][T31126] tipc: Enabling of bearer rejected, failed to enable media [ 2047.828521][T31147] tipc: Enabling of bearer rejected, failed to enable media [ 2049.171382][T31164] tipc: Enabling of bearer rejected, failed to enable media [ 2050.485331][T31180] tipc: Enabling of bearer rejected, failed to enable media [ 2054.783905][T31213] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 2054.996292][T31217] tipc: Enabling of bearer rejected, failed to enable media [ 2058.352197][T31258] tipc: Enabling of bearer rejected, failed to enable media [ 2059.928323][T31276] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7585'. [ 2060.076725][T31280] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7578'. [ 2060.088974][T31280] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7578'. [ 2060.099329][T31280] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7578'. [ 2060.110043][T31280] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7578'. [ 2060.120531][T31280] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7578'. [ 2060.131137][T31280] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7578'. [ 2060.141148][T31280] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7578'. [ 2061.060929][T31289] mac80211_hwsim hwsim22 wlan0: entered promiscuous mode [ 2063.138179][T31311] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 2064.937393][T31328] tipc: Enabling of bearer rejected, failed to enable media [ 2065.960467][T31347] tipc: Enabling of bearer rejected, failed to enable media [ 2066.273418][T31353] netlink: 'syz.6.7598': attribute type 1 has an invalid length. [ 2066.499374][T31353] 8021q: adding VLAN 0 to HW filter on device bond16 [ 2066.507042][T31356] tipc: Enabling of bearer rejected, failed to enable media [ 2066.976538][T31361] veth19: entered promiscuous mode [ 2066.987589][T31361] bond16: (slave veth19): Enslaving as an active interface with a down link [ 2067.018169][T31367] gtp0: entered promiscuous mode [ 2067.035266][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2067.050029][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2068.697555][T31390] tipc: Enabling of bearer rejected, failed to enable media [ 2069.794491][T31404] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 2074.708162][T31448] netlink: 'syz.8.7621': attribute type 10 has an invalid length. [ 2074.787024][T31448] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2074.797295][T31450] netlink: set zone limit has 8 unknown bytes [ 2074.811942][T31448] team0: Port device bond0 added [ 2079.346296][T31497] team0: Port device bond0 removed [ 2079.366577][T31497] tipc: Resetting bearer [ 2079.485466][T31497] bond1: (slave veth3): Releasing active interface [ 2079.492208][T31497] bond1: (slave veth3): the permanent HWaddr of slave - be:00:76:fd:3f:24 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 2079.522837][T31497] bond1: (slave vlan0): Releasing active interface [ 2081.489055][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 2081.495608][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 2083.629815][T31535] mac80211_hwsim hwsim20 wlan0: entered promiscuous mode [ 2086.378347][T31555] 9pnet_virtio: no channels available for device syz [ 2089.692638][T31584] mac80211_hwsim hwsim16 wlan0: entered promiscuous mode [ 2090.052113][T31591] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7663'. [ 2090.064446][T31591] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7663'. [ 2090.075788][T31591] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7663'. [ 2090.086415][T31591] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7663'. [ 2090.097028][T31591] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7663'. [ 2090.107420][T31591] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7663'. [ 2090.118576][T31591] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7663'. [ 2091.131539][T31597] tipc: Resetting bearer [ 2093.706836][T31597] team0: Failed to send options change via netlink (err -105) [ 2093.720028][T31597] team0: Mode changed to "loadbalance" [ 2093.887086][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 2093.887100][ T28] audit: type=1326 audit(1756434199.455:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31609 comm="syz.7.7668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09a98ebe9 code=0x7ffc0000 [ 2093.957650][ T28] audit: type=1326 audit(1756434199.483:1043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31609 comm="syz.7.7668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09a98ebe9 code=0x7ffc0000 [ 2094.034823][ T28] audit: type=1326 audit(1756434199.483:1044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31609 comm="syz.7.7668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7fb09a98ebe9 code=0x7ffc0000 [ 2094.110178][ T28] audit: type=1326 audit(1756434199.483:1045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31609 comm="syz.7.7668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09a98ebe9 code=0x7ffc0000 [ 2094.138774][ T28] audit: type=1326 audit(1756434199.483:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31609 comm="syz.7.7668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb09a98ebe9 code=0x7ffc0000 [ 2094.915799][ T28] audit: type=1326 audit(1756434199.483:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31609 comm="syz.7.7668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09a98ebe9 code=0x7ffc0000 [ 2094.949532][ T28] audit: type=1326 audit(1756434199.483:1048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31609 comm="syz.7.7668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09a98ebe9 code=0x7ffc0000 [ 2095.005953][ T28] audit: type=1326 audit(1756434199.661:1049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31609 comm="syz.7.7668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb09a98ebe9 code=0x7ffc0000 [ 2096.395120][ T28] audit: type=1326 audit(1756434199.661:1050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31609 comm="syz.7.7668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09a98ebe9 code=0x7ffc0000 [ 2096.441435][ T28] audit: type=1326 audit(1756434199.661:1051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31609 comm="syz.7.7668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09a98ebe9 code=0x7ffc0000 [ 2096.616551][T31636] lo speed is unknown, defaulting to 1000 [ 2096.711968][T31639] tipc: Resetting bearer [ 2097.238554][T31639] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2099.890818][T31670] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7682'. [ 2102.684284][T31684] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7686'. [ 2102.696366][T31684] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7686'. [ 2102.706617][T31684] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7686'. [ 2102.716851][T31684] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7686'. [ 2102.727108][T31684] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7686'. [ 2108.352050][T31731] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7698'. [ 2108.363258][T31731] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7698'. [ 2108.372696][T31731] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7698'. [ 2108.381860][T31731] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7698'. [ 2108.391417][T31731] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7698'. [ 2108.400560][T31731] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7698'. [ 2108.409663][T31731] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7698'. [ 2112.861634][T31775] tipc: Enabling of bearer rejected, failed to enable media [ 2114.292570][T31800] tipc: Enabling of bearer rejected, failed to enable media [ 2123.891239][ T28] audit: type=1326 audit(1756434227.489:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31883 comm="syz.6.7735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c73d8ebe9 code=0x7ffc0000 [ 2123.922510][ T28] audit: type=1326 audit(1756434227.489:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31883 comm="syz.6.7735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c73d8ebe9 code=0x7ffc0000 [ 2124.011779][ T28] audit: type=1326 audit(1756434227.489:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31883 comm="syz.6.7735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f7c73d8ebe9 code=0x7ffc0000 [ 2124.040094][ T28] audit: type=1326 audit(1756434227.489:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31883 comm="syz.6.7735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c73d8ebe9 code=0x7ffc0000 [ 2124.064458][ T28] audit: type=1326 audit(1756434227.498:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31883 comm="syz.6.7735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7c73d8ebe9 code=0x7ffc0000 [ 2124.169927][ T28] audit: type=1326 audit(1756434227.498:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31883 comm="syz.6.7735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c73d8ebe9 code=0x7ffc0000 [ 2124.495622][ T28] audit: type=1326 audit(1756434227.498:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31883 comm="syz.6.7735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7c73d8ebe9 code=0x7ffc0000 [ 2124.821238][ T28] audit: type=1326 audit(1756434227.498:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31883 comm="syz.6.7735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c73d8ebe9 code=0x7ffc0000 [ 2124.886284][ T28] audit: type=1326 audit(1756434227.498:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31883 comm="syz.6.7735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c73d8ebe9 code=0x7ffc0000 [ 2124.938985][ T28] audit: type=1326 audit(1756434227.498:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31883 comm="syz.6.7735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f7c73d8ebe9 code=0x7ffc0000 [ 2128.780067][T31920] tipc: Resetting bearer [ 2128.808263][T31920] bond15: (slave veth0_to_bond): Releasing active interface [ 2128.981072][T31920] bond13: (slave geneve4): Releasing active interface [ 2128.992239][T31920] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2129.001915][T31920] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2129.017378][T31920] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2129.665390][T31920] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2129.959805][T31920] bond14: (slave ip6erspan0): Releasing active interface [ 2129.969946][T31920] bond14: (slave ip6erspan0): the permanent HWaddr of slave - 5a:f9:b3:90:1a:6a - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 2129.989973][T31920] bond14: (slave gretap3): making interface the new active one [ 2130.494252][T31920] bond14: (slave gretap3): Releasing active interface [ 2130.713291][T31920] bond15: (slave veth17): Releasing active interface [ 2130.841080][T31923] tipc: Enabling of bearer rejected, failed to enable media [ 2131.234138][T31951] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 2135.324977][T31973] netlink: 60 bytes leftover after parsing attributes in process `syz.6.7757'. [ 2135.334498][T31973] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7757'. [ 2135.344346][T31973] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7757'. [ 2135.434902][T31978] team0: left allmulticast mode [ 2135.444118][T31978] bridge0: port 1(team0) entered disabled state [ 2135.461835][T31978] bond13: (slave bond14): Releasing backup interface [ 2135.481515][T31978] bond16: (slave veth19): Releasing active interface [ 2135.549903][T31978] team0: Failed to send options change via netlink (err -105) [ 2135.557662][T31978] team0: Mode changed to "loadbalance" [ 2140.218157][T32017] bond14: (slave gretap4): Releasing active interface [ 2140.279893][T32020] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 2140.364595][T32019] team0: Failed to send options change via netlink (err -105) [ 2140.419103][T32019] team0: Mode changed to "loadbalance" [ 2144.570400][T32069] Device name cannot be null; rc = [-22] [ 2147.168274][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 2147.174637][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 2148.916593][T32101] bridge6: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 2149.495136][T32104] netlink: 16 bytes leftover after parsing attributes in process `syz.8.7796'. [ 2149.507761][T32104] ksmbd: Unknown IPC event: 6, ignore. [ 2151.796316][T32129] tipc: Resetting bearer [ 2152.210224][T32129] team0: Unable to change to the same mode the team is in [ 2156.442005][T32166] tipc: Resetting bearer [ 2156.559769][T32168] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7814'. [ 2156.613892][T32166] team0: Unable to change to the same mode the team is in [ 2158.080205][T32184] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7820'. [ 2166.469577][T32265] o2cb: This node has not been configured. [ 2166.475700][T32265] o2cb: Cluster check failed. Fix errors before retrying. [ 2166.484167][T32265] (syz.8.7840,32265,0):user_dlm_register:674 ERROR: status = -22 [ 2166.492177][T32265] (syz.8.7840,32265,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1" [ 2170.383795][T32302] netlink: 324 bytes leftover after parsing attributes in process `syz.8.7848'. [ 2170.394008][T32302] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7848'. [ 2172.555632][T32320] netlink: 172 bytes leftover after parsing attributes in process `syz.8.7855'. [ 2174.651643][T32333] xt_bpf: check failed: parse error [ 2176.063274][T32348] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7864'. [ 2176.775265][T32348] bridge7: port 1(veth19) entered blocking state [ 2176.791480][T32348] bridge7: port 1(veth19) entered disabled state [ 2176.810343][T32348] veth19: entered allmulticast mode [ 2176.831507][T32348] veth19: entered promiscuous mode [ 2176.840991][T32354] bridge7: port 2(veth0_to_bond) entered blocking state [ 2176.889496][T32354] bridge7: port 2(veth0_to_bond) entered disabled state [ 2176.897272][T32354] veth0_to_bond: entered allmulticast mode [ 2176.939590][T32354] veth0_to_bond: entered promiscuous mode [ 2177.096988][T32348] vlan0: entered allmulticast mode [ 2177.125021][T32348] veth0_to_hsr: entered allmulticast mode [ 2177.140291][T32348] bridge7: port 3(vlan0) entered blocking state [ 2177.173714][T32348] bridge7: port 3(vlan0) entered disabled state [ 2177.182298][T32348] vlan0: entered promiscuous mode [ 2177.188577][T32348] veth0_to_hsr: entered promiscuous mode [ 2184.801052][T32425] bridge11: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 2190.004207][T32469] bridge12: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 2192.649726][T32485] xt_NFQUEUE: number of queues (8) out of range (got 65537) [ 2192.698820][T32485] lo speed is unknown, defaulting to 1000 [ 2210.875017][T18745] libceph: connect (1)[c::]:6789 error -101 [ 2210.917777][T32537] ceph: No mds server is up or the cluster is laggy [ 2210.929487][T18745] libceph: mon0 (1)[c::]:6789 connect error [ 2211.482009][T32561] netlink: 36 bytes leftover after parsing attributes in process `syz.7.7916'. [ 2212.944695][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 2212.951726][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 2215.164906][T32594] fuse: Bad value for 'rootmode' [ 2224.537404][T32635] bridge9: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 2233.708414][T32705] autofs4:pid:32705:autofs_fill_super: called with bogus options [ 2234.057399][T32713] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7958'. [ 2234.109712][T32713] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7958'. [ 2235.155280][T32725] netlink: 212 bytes leftover after parsing attributes in process `syz.7.7964'. [ 2235.324534][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 2235.336246][ T28] audit: type=1326 audit(1756434331.608:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32724 comm="syz.7.7964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09a98ebe9 code=0x7ffc0000 [ 2235.383624][ T28] audit: type=1326 audit(1756434331.608:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32724 comm="syz.7.7964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb09a98ebe9 code=0x7ffc0000 [ 2235.514857][ T28] audit: type=1326 audit(1756434331.618:1074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32724 comm="syz.7.7964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09a98ebe9 code=0x7ffc0000 [ 2235.540091][ T28] audit: type=1326 audit(1756434331.618:1075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32724 comm="syz.7.7964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb09a98ebe9 code=0x7ffc0000 [ 2235.563095][ T28] audit: type=1326 audit(1756434331.618:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32724 comm="syz.7.7964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09a98ebe9 code=0x7ffc0000 [ 2235.586028][ T28] audit: type=1326 audit(1756434331.618:1077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32724 comm="syz.7.7964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb09a98ebe9 code=0x7ffc0000 [ 2235.654374][T32735] netlink: 344 bytes leftover after parsing attributes in process `syz.2.7966'. [ 2235.663825][T32735] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7966'. [ 2236.490180][ T28] audit: type=1326 audit(1756434331.618:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32724 comm="syz.7.7964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09a98ebe9 code=0x7ffc0000 [ 2236.591796][ T28] audit: type=1326 audit(1756434331.618:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32724 comm="syz.7.7964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7fb09a98ebe9 code=0x7ffc0000 [ 2236.615975][ T28] audit: type=1326 audit(1756434331.618:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32724 comm="syz.7.7964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb09a98ebe9 code=0x7ffc0000 [ 2236.640123][ T28] audit: type=1326 audit(1756434331.618:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32724 comm="syz.7.7964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fb09a98ebe9 code=0x7ffc0000 [ 2237.243107][T32742] tipc: Enabling of bearer rejected, failed to enable media [ 2239.792412][ T305] netlink: 48 bytes leftover after parsing attributes in process `syz.8.7973'. [ 2240.683622][ T308] netlink: 84 bytes leftover after parsing attributes in process `syz.8.7975'. [ 2245.195990][ T339] tipc: Enabling of bearer rejected, failed to enable media [ 2248.133256][ T361] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 2249.222521][ T371] kAFS: unable to lookup cell '\/' [ 2251.906213][ T385] tipc: Enabling of bearer rejected, failed to enable media [ 2254.464742][ T415] tipc: Enabling of bearer rejected, failed to enable media [ 2257.706701][ T443] netlink: 416 bytes leftover after parsing attributes in process `syz.7.8005'. [ 2258.269754][ T447] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8007'. [ 2258.849828][ T447] bond16: (slave gretap5): Enslaving as an active interface with an up link [ 2258.944667][ T447] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8007'. [ 2258.978840][ T447] 8021q: adding VLAN 0 to HW filter on device bond16 [ 2267.472106][ T546] netlink: 'syz.6.8027': attribute type 10 has an invalid length. [ 2267.480262][ T546] hsr0: entered promiscuous mode [ 2267.485648][ T546] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2267.497925][ T546] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 2267.508841][ T546] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 2267.521614][ T546] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 2269.696776][ T564] bridge13: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 2272.342249][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 2272.342304][ T28] audit: type=1326 audit(1756434366.368:1084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=577 comm="syz.2.8037" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f02f4d8ebe9 code=0x0 [ 2273.319563][ T587] batadv_slave_0: entered promiscuous mode [ 2275.577957][ T601] bridge14: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 2278.676357][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 2278.684409][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 2279.478724][ T626] bridge0: port 1(netdevsim0) entered blocking state [ 2279.708779][ T626] bridge0: port 1(netdevsim0) entered disabled state [ 2279.716354][ T626] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 2279.726565][ T626] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 2284.507289][ T671] overlayfs: failed to clone upperpath [ 2284.987509][ T668] tipc: Bearer : already 2 bearers with priority 10 [ 2284.994906][ T668] tipc: Bearer : trying with adjusted priority [ 2285.001859][ T668] tipc: Enabling of bearer rejected, failed to enable media [ 2287.235244][ T681] kthread_run failed with err -4 [ 2287.472182][ T702] tipc: Enabling of bearer rejected, failed to enable media [ 2291.721243][ T734] tipc: Enabling of bearer rejected, failed to enable media [ 2297.173685][ T783] vlan0: entered allmulticast mode [ 2297.184267][ T783] bond0: entered allmulticast mode [ 2304.255243][ T815] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8097'. [ 2314.354889][ T890] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 2315.073602][ T900] netlink: 39 bytes leftover after parsing attributes in process `syz.2.8117'. [ 2315.291402][ T909] tipc: Enabling of bearer rejected, failed to enable media [ 2323.927463][ T1021] batadv_slave_0: entered promiscuous mode [ 2329.983013][ T1085] ecryptfs_parse_options: eCryptfs: unrecognized option [&@] [ 2329.990722][ T1085] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 2330.004088][ T1085] Error parsing options; rc = [-22] [ 2332.823602][ T1100] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8159'. [ 2333.083794][ T1103] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 2335.565552][ T1131] o2cb: This node has not been configured. [ 2335.571572][ T1131] o2cb: Cluster check failed. Fix errors before retrying. [ 2335.579225][ T1131] (syz.8.8164,1131,1):user_dlm_register:674 ERROR: status = -22 [ 2335.587049][ T1131] (syz.8.8164,1131,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 2337.308740][ T1140] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8170'. [ 2337.406784][ T1140] bridge2: port 1(veth5) entered blocking state [ 2337.424220][ T1140] bridge2: port 1(veth5) entered disabled state [ 2337.447137][ T1140] veth5: entered allmulticast mode [ 2337.453943][ T1140] veth5: entered promiscuous mode [ 2337.487178][ T1143] bridge2: port 2(veth0_to_bond) entered blocking state [ 2337.504652][ T1143] bridge2: port 2(veth0_to_bond) entered disabled state [ 2337.513220][ T1143] veth0_to_bond: entered allmulticast mode [ 2337.520818][ T1143] veth0_to_bond: entered promiscuous mode [ 2337.593811][ T1140] vlan2: entered allmulticast mode [ 2337.600573][ T1140] veth0_to_hsr: entered allmulticast mode [ 2337.606636][ T1140] bridge2: port 3(vlan2) entered blocking state [ 2337.613894][ T1140] bridge2: port 3(vlan2) entered disabled state [ 2337.635529][ T1140] vlan2: entered promiscuous mode [ 2337.645425][ T1140] veth0_to_hsr: entered promiscuous mode [ 2341.918100][ T1179] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8179'. [ 2341.949020][ T1176] netlink: 60 bytes leftover after parsing attributes in process `syz.8.8176'. [ 2343.218365][ T1191] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8180'. [ 2344.903673][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 2344.913850][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 2347.422943][ T1227] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8190'. [ 2347.555675][ T28] audit: type=1326 audit(1756434436.691:1085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1224 comm="syz.6.8191" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7c73d8ebe9 code=0x0 [ 2352.081509][ T1271] ================================================================== [ 2352.090162][ T1271] BUG: KASAN: slab-use-after-free in xfrm_alloc_spi+0x598/0x11f0 [ 2352.098006][ T1271] Read of size 4 at addr ffff88802e4484a0 by task syz.8.8199/1271 [ 2352.105907][ T1271] [ 2352.108232][ T1271] CPU: 1 PID: 1271 Comm: syz.8.8199 Not tainted syzkaller #0 [ 2352.115621][ T1271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2352.125942][ T1271] Call Trace: [ 2352.129241][ T1271] [ 2352.132186][ T1271] dump_stack_lvl+0x16c/0x230 [ 2352.136887][ T1271] ? __lock_acquire+0x7c80/0x7c80 [ 2352.142101][ T1271] ? show_regs_print_info+0x20/0x20 [ 2352.147654][ T1271] ? load_image+0x3b0/0x3b0 [ 2352.152174][ T1271] ? __virt_addr_valid+0x469/0x540 [ 2352.157292][ T1271] print_report+0xac/0x220 [ 2352.161800][ T1271] ? xfrm_alloc_spi+0x598/0x11f0 [ 2352.166741][ T1271] kasan_report+0x117/0x150 [ 2352.171259][ T1271] ? xfrm_alloc_spi+0x598/0x11f0 [ 2352.176209][ T1271] xfrm_alloc_spi+0x598/0x11f0 [ 2352.181035][ T1271] ? preempt_schedule_thunk+0x1a/0x30 [ 2352.186504][ T1271] ? xfrm_alloc_spi+0x2a1/0x11f0 [ 2352.191481][ T1271] ? verify_spi_info+0x120/0x120 [ 2352.196522][ T1271] ? xfrm_find_acq+0x79/0x90 [ 2352.201250][ T1271] xfrm_alloc_userspi+0x5d1/0xa90 [ 2352.206293][ T1271] ? end_current_label_crit_section+0x170/0x170 [ 2352.212728][ T1271] ? apparmor_capable+0x137/0x1a0 [ 2352.217937][ T1271] ? xfrm_dump_policy_done+0x90/0x90 [ 2352.223257][ T1271] ? __nla_parse+0x40/0x50 [ 2352.227743][ T1271] xfrm_user_rcv_msg+0x596/0x870 [ 2352.232704][ T1271] ? xfrm_netlink_rcv+0x90/0x90 [ 2352.237582][ T1271] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 2352.243595][ T1271] ? __mutex_trylock_common+0x153/0x250 [ 2352.249167][ T1271] netlink_rcv_skb+0x216/0x480 [ 2352.253943][ T1271] ? xfrm_netlink_rcv+0x90/0x90 [ 2352.258986][ T1271] ? netlink_ack+0x1110/0x1110 [ 2352.263815][ T1271] ? netlink_deliver_tap+0x2e/0x1b0 [ 2352.269028][ T1271] ? __lock_acquire+0x7c80/0x7c80 [ 2352.274118][ T1271] ? __rcu_read_unlock+0x7c/0xd0 [ 2352.279153][ T1271] xfrm_netlink_rcv+0x79/0x90 [ 2352.283842][ T1271] netlink_unicast+0x751/0x8d0 [ 2352.288624][ T1271] netlink_sendmsg+0x8c1/0xbe0 [ 2352.293399][ T1271] ? netlink_getsockopt+0x580/0x580 [ 2352.299127][ T1271] ? aa_sock_msg_perm+0x94/0x150 [ 2352.304074][ T1271] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2352.309454][ T1271] ? security_socket_sendmsg+0x80/0xa0 [ 2352.314924][ T1271] ? netlink_getsockopt+0x580/0x580 [ 2352.320156][ T1271] ____sys_sendmsg+0x5bf/0x950 [ 2352.324947][ T1271] ? __asan_memset+0x22/0x40 [ 2352.329649][ T1271] ? __sys_sendmsg_sock+0x30/0x30 [ 2352.334685][ T1271] ? __import_iovec+0x5f2/0x860 [ 2352.339672][ T1271] ? import_iovec+0x73/0xa0 [ 2352.344359][ T1271] ___sys_sendmsg+0x220/0x290 [ 2352.349145][ T1271] ? __sys_sendmsg+0x270/0x270 [ 2352.353938][ T1271] __se_sys_sendmsg+0x1a5/0x270 [ 2352.358812][ T1271] ? __x64_sys_sendmsg+0x80/0x80 [ 2352.363896][ T1271] ? lockdep_hardirqs_on+0x98/0x150 [ 2352.369153][ T1271] do_syscall_64+0x55/0xb0 [ 2352.373574][ T1271] ? clear_bhb_loop+0x40/0x90 [ 2352.378252][ T1271] ? clear_bhb_loop+0x40/0x90 [ 2352.383019][ T1271] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2352.388950][ T1271] RIP: 0033:0x7fbf1a58ebe9 [ 2352.393365][ T1271] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2352.413623][ T1271] RSP: 002b:00007fbf1b38c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2352.422075][ T1271] RAX: ffffffffffffffda RBX: 00007fbf1a7b6180 RCX: 00007fbf1a58ebe9 [ 2352.430076][ T1271] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000006 [ 2352.438309][ T1271] RBP: 00007fbf1a611e19 R08: 0000000000000000 R09: 0000000000000000 [ 2352.446286][ T1271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2352.454364][ T1271] R13: 00007fbf1a7b6218 R14: 00007fbf1a7b6180 R15: 00007ffdc4e1d6b8 [ 2352.462340][ T1271] [ 2352.465364][ T1271] [ 2352.467687][ T1271] Allocated by task 878: [ 2352.471915][ T1271] kasan_set_track+0x4e/0x70 [ 2352.476495][ T1271] __kasan_slab_alloc+0x6c/0x80 [ 2352.481434][ T1271] slab_post_alloc_hook+0x6e/0x4d0 [ 2352.486634][ T1271] kmem_cache_alloc+0x11e/0x2e0 [ 2352.491489][ T1271] xfrm_state_alloc+0x22/0x2a0 [ 2352.496380][ T1271] xfrm_state_find+0x2944/0x4510 [ 2352.501356][ T1271] xfrm_resolve_and_create_bundle+0x727/0x2c20 [ 2352.507502][ T1271] xfrm_lookup_with_ifid+0x261/0x19c0 [ 2352.513007][ T1271] xfrm_lookup_route+0x3c/0x1b0 [ 2352.517977][ T1271] rawv6_sendmsg+0xd07/0x17f0 [ 2352.522723][ T1271] ____sys_sendmsg+0x5bf/0x950 [ 2352.527499][ T1271] ___sys_sendmsg+0x220/0x290 [ 2352.532270][ T1271] __sys_sendmmsg+0x275/0x4a0 [ 2352.536953][ T1271] __x64_sys_sendmmsg+0xa0/0xb0 [ 2352.541798][ T1271] do_syscall_64+0x55/0xb0 [ 2352.546296][ T1271] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2352.552188][ T1271] [ 2352.554515][ T1271] Freed by task 18745: [ 2352.558657][ T1271] kasan_set_track+0x4e/0x70 [ 2352.563250][ T1271] kasan_save_free_info+0x2e/0x50 [ 2352.568316][ T1271] ____kasan_slab_free+0x126/0x1e0 [ 2352.573502][ T1271] slab_free_freelist_hook+0x130/0x1b0 [ 2352.578972][ T1271] kmem_cache_free+0xf8/0x280 [ 2352.583653][ T1271] xfrm_state_gc_task+0x10a/0x160 [ 2352.588947][ T1271] process_scheduled_works+0xa45/0x15b0 [ 2352.594500][ T1271] worker_thread+0xa55/0xfc0 [ 2352.599082][ T1271] kthread+0x2fa/0x390 [ 2352.603139][ T1271] ret_from_fork+0x48/0x80 [ 2352.607708][ T1271] ret_from_fork_asm+0x11/0x20 [ 2352.612472][ T1271] [ 2352.614824][ T1271] The buggy address belongs to the object at ffff88802e448400 [ 2352.614824][ T1271] which belongs to the cache xfrm_state of size 848 [ 2352.628808][ T1271] The buggy address is located 160 bytes inside of [ 2352.628808][ T1271] freed 848-byte region [ffff88802e448400, ffff88802e448750) [ 2352.642607][ T1271] [ 2352.645003][ T1271] The buggy address belongs to the physical page: [ 2352.651494][ T1271] page:ffffea0000b91200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2e448 [ 2352.661729][ T1271] head:ffffea0000b91200 order:2 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 2352.670735][ T1271] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 2352.678700][ T1271] page_type: 0xffffffff() [ 2352.683218][ T1271] raw: 00fff00000000840 ffff88801bec5b40 dead000000000122 0000000000000000 [ 2352.691835][ T1271] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 2352.700398][ T1271] page dumped because: kasan: bad access detected [ 2352.706820][ T1271] page_owner tracks the page as allocated [ 2352.712517][ T1271] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x152820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 27783, tgid 27776 (syz.7.6711), ts 1711103077637, free_ts 1392186584034 [ 2352.733626][ T1271] post_alloc_hook+0x1cd/0x210 [ 2352.738391][ T1271] get_page_from_freelist+0x195c/0x19f0 [ 2352.743926][ T1271] __alloc_pages+0x1e3/0x460 [ 2352.748610][ T1271] alloc_slab_page+0x5d/0x170 [ 2352.753285][ T1271] new_slab+0x87/0x2e0 [ 2352.757425][ T1271] ___slab_alloc+0xc6d/0x12f0 [ 2352.762268][ T1271] kmem_cache_alloc+0x1b7/0x2e0 [ 2352.767152][ T1271] xfrm_state_alloc+0x22/0x2a0 [ 2352.772177][ T1271] xfrm_state_find+0x2944/0x4510 [ 2352.777200][ T1271] xfrm_resolve_and_create_bundle+0x727/0x2c20 [ 2352.783544][ T1271] xfrm_lookup_with_ifid+0x261/0x19c0 [ 2352.789095][ T1271] xfrm_lookup_route+0x3c/0x1b0 [ 2352.793966][ T1271] rawv6_sendmsg+0xd07/0x17f0 [ 2352.798667][ T1271] ____sys_sendmsg+0x5bf/0x950 [ 2352.803449][ T1271] ___sys_sendmsg+0x220/0x290 [ 2352.808168][ T1271] __sys_sendmmsg+0x275/0x4a0 [ 2352.812851][ T1271] page last free stack trace: [ 2352.817528][ T1271] free_unref_page_prepare+0x7ce/0x8e0 [ 2352.823000][ T1271] free_unref_page+0x32/0x2e0 [ 2352.827684][ T1271] __unfreeze_partials+0x1cf/0x210 [ 2352.832805][ T1271] put_cpu_partial+0x17c/0x250 [ 2352.837577][ T1271] __slab_free+0x31d/0x410 [ 2352.841995][ T1271] qlist_free_all+0x75/0xe0 [ 2352.846494][ T1271] kasan_quarantine_reduce+0x143/0x160 [ 2352.851947][ T1271] __kasan_slab_alloc+0x22/0x80 [ 2352.856810][ T1271] slab_post_alloc_hook+0x6e/0x4d0 [ 2352.861970][ T1271] kmem_cache_alloc+0x11e/0x2e0 [ 2352.866814][ T1271] vm_area_dup+0x27/0x270 [ 2352.871142][ T1271] __split_vma+0x19f/0xc00 [ 2352.875573][ T1271] mprotect_fixup+0xaad/0xc90 [ 2352.880245][ T1271] do_mprotect_pkey+0x76e/0xc30 [ 2352.885176][ T1271] __x64_sys_mprotect+0x80/0x90 [ 2352.890045][ T1271] do_syscall_64+0x55/0xb0 [ 2352.894460][ T1271] [ 2352.896902][ T1271] Memory state around the buggy address: [ 2352.902535][ T1271] ffff88802e448380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 2352.910695][ T1271] ffff88802e448400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2352.918805][ T1271] >ffff88802e448480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2352.926886][ T1271] ^ [ 2352.932171][ T1271] ffff88802e448500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2352.940410][ T1271] ffff88802e448580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2352.948477][ T1271] ================================================================== [ 2352.956949][ T1271] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 2352.964171][ T1271] CPU: 1 PID: 1271 Comm: syz.8.8199 Not tainted syzkaller #0 [ 2352.971552][ T1271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2352.981612][ T1271] Call Trace: [ 2352.984977][ T1271] [ 2352.988385][ T1271] dump_stack_lvl+0x16c/0x230 [ 2352.993099][ T1271] ? show_regs_print_info+0x20/0x20 [ 2352.998292][ T1271] ? load_image+0x3b0/0x3b0 [ 2353.003183][ T1271] panic+0x2c0/0x710 [ 2353.007089][ T1271] ? bpf_jit_dump+0xd0/0xd0 [ 2353.011591][ T1271] ? _raw_spin_unlock_irqrestore+0xa9/0x110 [ 2353.017588][ T1271] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 2353.023502][ T1271] ? _raw_spin_unlock+0x40/0x40 [ 2353.028469][ T1271] ? print_memory_metadata+0x314/0x400 [ 2353.033927][ T1271] ? xfrm_alloc_spi+0x598/0x11f0 [ 2353.038885][ T1271] check_panic_on_warn+0x84/0xa0 [ 2353.043834][ T1271] ? xfrm_alloc_spi+0x598/0x11f0 [ 2353.048849][ T1271] end_report+0x6f/0x140 [ 2353.053098][ T1271] kasan_report+0x128/0x150 [ 2353.057770][ T1271] ? xfrm_alloc_spi+0x598/0x11f0 [ 2353.062895][ T1271] xfrm_alloc_spi+0x598/0x11f0 [ 2353.067652][ T1271] ? preempt_schedule_thunk+0x1a/0x30 [ 2353.073210][ T1271] ? xfrm_alloc_spi+0x2a1/0x11f0 [ 2353.078172][ T1271] ? verify_spi_info+0x120/0x120 [ 2353.083301][ T1271] ? xfrm_find_acq+0x79/0x90 [ 2353.088107][ T1271] xfrm_alloc_userspi+0x5d1/0xa90 [ 2353.093123][ T1271] ? end_current_label_crit_section+0x170/0x170 [ 2353.099564][ T1271] ? apparmor_capable+0x137/0x1a0 [ 2353.104590][ T1271] ? xfrm_dump_policy_done+0x90/0x90 [ 2353.109872][ T1271] ? __nla_parse+0x40/0x50 [ 2353.114394][ T1271] xfrm_user_rcv_msg+0x596/0x870 [ 2353.119341][ T1271] ? xfrm_netlink_rcv+0x90/0x90 [ 2353.124207][ T1271] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 2353.130201][ T1271] ? __mutex_trylock_common+0x153/0x250 [ 2353.135859][ T1271] netlink_rcv_skb+0x216/0x480 [ 2353.141291][ T1271] ? xfrm_netlink_rcv+0x90/0x90 [ 2353.146277][ T1271] ? netlink_ack+0x1110/0x1110 [ 2353.151147][ T1271] ? netlink_deliver_tap+0x2e/0x1b0 [ 2353.156516][ T1271] ? __lock_acquire+0x7c80/0x7c80 [ 2353.161568][ T1271] ? __rcu_read_unlock+0x7c/0xd0 [ 2353.166733][ T1271] xfrm_netlink_rcv+0x79/0x90 [ 2353.171511][ T1271] netlink_unicast+0x751/0x8d0 [ 2353.176371][ T1271] netlink_sendmsg+0x8c1/0xbe0 [ 2353.181129][ T1271] ? netlink_getsockopt+0x580/0x580 [ 2353.186319][ T1271] ? aa_sock_msg_perm+0x94/0x150 [ 2353.191272][ T1271] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2353.196568][ T1271] ? security_socket_sendmsg+0x80/0xa0 [ 2353.202019][ T1271] ? netlink_getsockopt+0x580/0x580 [ 2353.207226][ T1271] ____sys_sendmsg+0x5bf/0x950 [ 2353.212114][ T1271] ? __asan_memset+0x22/0x40 [ 2353.216709][ T1271] ? __sys_sendmsg_sock+0x30/0x30 [ 2353.221741][ T1271] ? __import_iovec+0x5f2/0x860 [ 2353.226608][ T1271] ? import_iovec+0x73/0xa0 [ 2353.231302][ T1271] ___sys_sendmsg+0x220/0x290 [ 2353.235973][ T1271] ? __sys_sendmsg+0x270/0x270 [ 2353.240782][ T1271] __se_sys_sendmsg+0x1a5/0x270 [ 2353.245718][ T1271] ? __x64_sys_sendmsg+0x80/0x80 [ 2353.250652][ T1271] ? lockdep_hardirqs_on+0x98/0x150 [ 2353.255844][ T1271] do_syscall_64+0x55/0xb0 [ 2353.260250][ T1271] ? clear_bhb_loop+0x40/0x90 [ 2353.264958][ T1271] ? clear_bhb_loop+0x40/0x90 [ 2353.269627][ T1271] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2353.275612][ T1271] RIP: 0033:0x7fbf1a58ebe9 [ 2353.280017][ T1271] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2353.299968][ T1271] RSP: 002b:00007fbf1b38c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2353.308486][ T1271] RAX: ffffffffffffffda RBX: 00007fbf1a7b6180 RCX: 00007fbf1a58ebe9 [ 2353.316546][ T1271] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000006 [ 2353.324520][ T1271] RBP: 00007fbf1a611e19 R08: 0000000000000000 R09: 0000000000000000 [ 2353.332567][ T1271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2353.340552][ T1271] R13: 00007fbf1a7b6218 R14: 00007fbf1a7b6180 R15: 00007ffdc4e1d6b8 [ 2353.348721][ T1271] [ 2353.352071][ T1271] Kernel Offset: disabled [ 2353.356599][ T1271] Rebooting in 86400 seconds..