last executing test programs: 16m52.605662287s ago: executing program 32 (id=49): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x2800050, &(0x7f0000003240)=ANY=[], 0x6, 0x33c, &(0x7f0000000340)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') r1 = fanotify_init(0x1, 0x40000) r2 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x50) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000040)=""/175, 0xaf}], 0x1) fanotify_mark(r1, 0x1, 0x40001019, r2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) getdents(r0, &(0x7f0000000180)=""/154, 0x18) 16m52.208513265s ago: executing program 33 (id=51): r0 = socket(0xa, 0x3, 0xff) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={r2, 0x7, 0x6, 0x5}, 0x10) 16m25.897269492s ago: executing program 34 (id=148): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) socket$packet(0x11, 0x2, 0x300) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r1, 0x0, 0x0, 0x404c0c6, &(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10) capset(0x0, &(0x7f0000000200)={0x0, 0x0, 0x3, 0xfffffff9, 0x0, 0xfb6}) sendto$inet(r1, &(0x7f0000000100), 0x0, 0x4004084, 0x0, 0x0) 16m23.063946686s ago: executing program 35 (id=165): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) syz_clone(0xfdba2180, 0x0, 0x0, 0x0, 0x0, 0x0) 16m15.248153577s ago: executing program 36 (id=203): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x522, &(0x7f00000006c0)="$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") r0 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r1 = fanotify_init(0xf00, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124) fanotify_init(0x2, 0x1000) fanotify_mark(r1, 0x541, 0x40001019, r2, 0x0) fanotify_mark(r1, 0x105, 0x40009975, r0, 0x0) 15m48.147075499s ago: executing program 37 (id=338): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3044009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000380)='./bus\x00', 0x322020, &(0x7f0000000140)=ANY=[], 0x1, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) lstat(&(0x7f0000000400)='./file7\x00', &(0x7f0000000580)) 15m23.6982334s ago: executing program 38 (id=462): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x3, 0x10000, 0x0, 0x3, 0x9, 0x6, 0x30002, 0x739, 0x1, 0x73e, 0x7, 0x100000000, 0x1000008, 0x6, 0x3ff, 0xf6], 0x1001, 0x80440}) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101080, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0}) 15m19.294834764s ago: executing program 39 (id=485): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree\x00', r1}, 0x18) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'lblcr\x00', 0x15, 0x88, 0xc000067}, 0x2c) 15m13.31005423s ago: executing program 40 (id=506): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'veth0_vlan\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@private2, 0x32, r3}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000040)={@private2, r3}, 0x14) close_range(r0, 0xffffffffffffffff, 0x0) 15m1.676826713s ago: executing program 41 (id=535): r0 = syz_io_uring_setup(0x40f, &(0x7f0000000000), &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x211, &(0x7f0000000340)={0x0, 0xba9b}, &(0x7f0000000100)=0x0, &(0x7f0000000180)) r4 = syz_io_uring_setup(0x88e, &(0x7f0000000080)={0x0, 0x44b6b, 0x10, 0x4, 0x26a}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2a, 0x0, @fd_index=0x3}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x80000004, 0x0, 0x4) io_uring_enter(r0, 0x1469, 0x0, 0x0, 0x0, 0x0) 14m30.317348777s ago: executing program 42 (id=613): r0 = inotify_init1(0x0) dup(0xffffffffffffffff) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r1, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000040)="e0", 0x1}], 0x1}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 14m14.930813654s ago: executing program 43 (id=674): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x2000, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x4}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) 14m3.320329608s ago: executing program 44 (id=706): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r4, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0x85, 0x20000}, 0x20) 13m56.309964582s ago: executing program 45 (id=739): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f0000000200)='m', 0x1) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) r2 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2465) write$snddsp(r2, &(0x7f0000000200)="a3", 0x1) ioctl$SNDRV_PCM_IOCTL_DRAIN(r2, 0x4144, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r2, 0x40084146, &(0x7f0000000140)=0x1ff) 13m24.139362492s ago: executing program 46 (id=864): syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x8488, &(0x7f0000000780), 0xfe, 0x10fd, &(0x7f0000001140)="$eJzs2T9rFEEYBvBnds8/3cqmXwQtLCQknF8ghcK1ttqIpDJVrlL8OH4cTWUf0msRsF9Zb/dO5UTwTm1+PzjmvYd9Z2fKmQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMZsmnkhxUSTtlVZKSdN3F4ipJN+V33tdVSp6eLpaPz+dPlknqb4+XZ0kZuoa2tMf3brfzdt4et48OTu5/WL5+8+rF2dnp+ThNSZfL6/1vpYzrAQAAAH7U76z5z+8HAAAAfmdvFwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf6hvNnU7FVWSknTdxeIqSbel78Y/Wh8AAACwu5Iqz5tt+eoaYONhPjZlnQ/jlzLUR3m3pR8AAAD4pf7WWHz/fb3c3JzHH2S2PpcP2d3Mcni4+j8O+XyS1EmOfpr88vrty+lX+vpv7wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAAAAAPYKAAD///F61s8=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ftruncate(r0, 0x3af001) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000300)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x3a6000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) write$uinput_user_dev(r1, &(0x7f0000000cc0)={'syz0\x00', {0xd, 0x6, 0x2}, 0x1e, [0x1b000, 0xf3b, 0x9, 0x2, 0x1, 0x6, 0x5, 0xa, 0x5, 0x3, 0x7, 0x10, 0xef5b, 0x9, 0x4, 0x7fffffff, 0x6271, 0x4f32, 0x9, 0x9, 0x3, 0x2, 0x5, 0xe, 0x5, 0xfffffffa, 0x10000, 0x80, 0x4, 0x7, 0x629, 0x3, 0x9, 0x100, 0x50000000, 0x6, 0x80000000, 0xffff8001, 0x1ff, 0x800, 0x2, 0x5, 0x9, 0x400, 0x6, 0x200, 0x1, 0xd, 0x8, 0xa, 0xe06f, 0x6df, 0x5, 0x4, 0x101, 0x6, 0x3, 0x7, 0x7, 0xe4000000, 0x8, 0x1, 0xb, 0x1], [0x40, 0x4, 0xf, 0xe, 0x84, 0x9, 0xf110, 0x81, 0x8, 0x2, 0x3, 0x81, 0x8ae7, 0x1000, 0x6, 0x2, 0x3, 0x8, 0x0, 0x378a, 0xe, 0x81, 0x3ff, 0x6, 0x8, 0x8, 0x10001, 0x4, 0x8, 0x6, 0x6, 0x1f73e26, 0x5, 0xf, 0x5, 0xb2, 0x6, 0x6, 0x4, 0x2, 0x4, 0x9, 0x6, 0xfffffffc, 0xed, 0x6b16bb85, 0x5, 0x6, 0x28ba, 0x3, 0x7, 0x0, 0x2, 0x5, 0x7ff, 0xfffffffa, 0x10000, 0x334b, 0x5, 0x8ef, 0x0, 0x2, 0x7ff, 0x1], [0x80, 0x0, 0x6, 0x49, 0x81, 0x3, 0x1, 0x3, 0x3, 0x6, 0x4, 0x9, 0x5, 0x8, 0x40, 0x3, 0x3, 0x7, 0x9, 0x6, 0x3, 0x5, 0x8, 0x1, 0x9, 0x3, 0x1, 0x0, 0xfffffff8, 0x38ee, 0x1, 0x6a21, 0xffffad33, 0x3, 0x2c616b56, 0x9, 0x3d, 0x7, 0x8000, 0xe, 0x4, 0x3, 0x56, 0x1, 0x7, 0x1, 0x100, 0xc, 0x800, 0x0, 0x4, 0x31d, 0xc894, 0xa, 0x7fff, 0x7, 0x1a3, 0x5, 0xc, 0x1, 0x6, 0x40, 0x1, 0x6], [0x8, 0x4, 0x6, 0x5d2f, 0x1, 0x5, 0x8, 0x200, 0x101, 0x6, 0x800, 0x3, 0x9, 0xfffffff7, 0x2, 0x10001, 0xfffff4e2, 0x3, 0x7fffffff, 0x2, 0x9, 0xf, 0x2a34, 0x1, 0x7, 0xfff, 0x2, 0x0, 0x0, 0x8, 0xe686, 0x4, 0x9, 0x4, 0x9, 0xe10, 0x6, 0x6, 0x7, 0x5, 0x4, 0x0, 0x42f876e1, 0xff7, 0x773d, 0xfff, 0x3, 0x1, 0x800, 0x2, 0x9, 0x8, 0x2, 0x1, 0xff, 0x83ea, 0x6, 0x1, 0x3ff, 0xfa2, 0x46, 0x4, 0x4, 0x4]}, 0x45c) 12m56.648587851s ago: executing program 47 (id=968): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x4}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}], 0x10) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x5}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000140)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x4000891) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='vlan0\x00', 0x10) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000300)={0x0, 0xd}, 0x8) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000003c0)={0x0, 0x6}, 0x8) 12m41.67587108s ago: executing program 48 (id=1023): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) close(r1) r2 = socket$unix(0x1, 0x5, 0x0) bind$unix(r2, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x12) listen(r2, 0x786) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x40, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 12m30.003117815s ago: executing program 49 (id=1049): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) r3 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000fee000/0x1000)=nil, r3, 0x2, 0x21011, r2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12m18.361092449s ago: executing program 50 (id=1102): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000080), 0x8000002000000, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendfile(r0, r1, 0x0, 0x200002) 12m3.842033039s ago: executing program 51 (id=1134): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000000), 0xff, 0x50d4, &(0x7f00000051c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x42, 0x18) fallocate(r0, 0x0, 0x0, 0x8ffff) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) 11m7.15177126s ago: executing program 52 (id=1383): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 10m59.37881257s ago: executing program 53 (id=1425): openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002980)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x2000, 0x0, 0xffbc, 0x6, 0x6, 0x10000000, 0x0, 0x0, 0x40, 0x9}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x68cc, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r2, 0x0, 0x0) 10m51.978441032s ago: executing program 54 (id=1382): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="66baa100b000ee2e450f01cbb805000000b99c888e670f01c1440f8fd6f70000430f07c7442400c0000000c744240293330cccff2c24c48161fa7a0066baf80cb80f0d728aef66bafc0cec0fc7ae1d000000b9800000c00f3235000800000f30", 0x60}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10m32.967611398s ago: executing program 55 (id=1534): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000300)={0x0, 0xfffffffffffffe7a, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000600)={r3, 0x0, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0, 0x0], [0x800000], [0x0, 0x1001000], [0x0, 0x0, 0xe8a6]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r4, 0x0, 0x0, r5], [0x2b8, 0x0, 0x0, 0xfffffffe]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) 9m38.681845124s ago: executing program 56 (id=1886): r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000240)={0x1, 0x0, 0x203, 0xfffd, 0xffffffffffffffff, 0x200000000000008, 0xfffffffffffffffd, 0x200, 0x8, 0x2c, 0x80000005, 0x2}) ioctl$SNDRV_PCM_IOCTL_REWIND(r2, 0x40084146, &(0x7f0000000000)=0xd00) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r2, 0xc0884123, &(0x7f0000000300)={0x1, "244689261a3365eb47c14247a532ccbd3bf3b29282987c7cc12acb8ae6d2fbd3428a0df873e1d58af8bf70c05fc6c43edcdaa8e7db0700", {0x2, 0x2}}) 7m38.194024643s ago: executing program 2 (id=2706): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48284b70043dc6124d877142a48448b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d4023f210fa34b63a715a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f01000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb796ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab04000000ffe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890decace0200f404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef29cd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf0100483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6c354463d7d0917fc80e5009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab4000000000000000028df75cf43f8ecc8d37b126602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be2901"], 0x0}, 0x94) syz_emit_vhci(0x0, 0xd) syz_emit_vhci(&(0x7f00000007c0)=ANY=[@ANYBLOB="040e06006220"], 0x9) syz_open_dev$evdev(&(0x7f00000010c0), 0x9e5, 0x8501) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) 7m37.102436394s ago: executing program 2 (id=2714): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1, 0x7}}}, &(0x7f0000000000)=0x84) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000440), 0x1000a) sendfile(r0, r3, &(0x7f0000000180)=0x2, 0x2001001) 7m36.817588s ago: executing program 2 (id=2716): r0 = fsopen(&(0x7f0000000400)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='\xd1S{O', &(0x7f0000000080)='\x1e\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000001680)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 7m35.172068231s ago: executing program 2 (id=2728): r0 = socket(0x10, 0x80002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x200, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70b524, 0x25dfdbf9, {0x0, 0x0, 0x0, r4, {0xfff3, 0xffe0}, {0x0, 0xfff1}, {0xfff3, 0x1}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008849}, 0x10000000) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 7m34.68741396s ago: executing program 57 (id=2728): r0 = socket(0x10, 0x80002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x200, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70b524, 0x25dfdbf9, {0x0, 0x0, 0x0, r4, {0xfff3, 0xffe0}, {0x0, 0xfff1}, {0xfff3, 0x1}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008849}, 0x10000000) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 7m31.727374487s ago: executing program 7 (id=2757): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000480)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r2, &(0x7f0000000540)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x0, {{0x42}, 0x2}}, 0x10, 0x0}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) 7m31.367024744s ago: executing program 7 (id=2760): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000001740)={0x38, 0xd, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1000}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}]}, 0x38}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x3, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {0x2}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x240000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000084}, 0x84) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, 0x0, 0x0) 7m30.645791228s ago: executing program 7 (id=2764): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x3, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newtfilter={0x44, 0x28, 0xd27, 0x1003ffd, 0x0, {0x0, 0x0, 0x0, r4, {0xffe0, 0x9}, {0x4, 0x9}, {0x2, 0xb}}, [@filter_kind_options=@f_fw={{0x7}, {0x18, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'geneve0\x00'}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x810}, 0x200008c0) 7m29.835054524s ago: executing program 7 (id=2769): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x9, &(0x7f0000000300)={[{@dioread_nolock}, {@jqfmt_vfsv0}, {@abort}, {}, {@nojournal_checksum}, {@grpjquota, 0x2e}], [], 0x2e}, 0x6, 0x48d, &(0x7f0000000980)="$eJzs3EtvG1UbAOB3xnV6/5qv3wV6AQIFEXFJmrRAF2xAIHWDhARIZRnStCpNG9QEiVYVTREqS9RfACyR+AWsYIOAFYgtSGyQEFKFuqGwGjT2TOpcHGzHjil+HsntOTNnfM47M8c+MyfjAAbWSP5PErErIr4fithTzy4vMFL/79bNy9O/37w8nUSWvfRrUiv3283L02XRcrudRWY0jUjfTeLAGvXOX7x0dmp2duZCkR9fOPfG+PzFS4+fOTd1eub0zPnJY8eOHpl46snJJ7oS5+68rfvfnju47/ir11+YPnH9ta8+yZfvKtY3xlE33PJ7b2+yfCRGlu/LBg9F/JRlWct1/N3tbkgnW/rYENpSiYj8cFXz/h97ohK3D96eeP6dvjYO6Kksy7Ktq5ZWysRiBvyDJdF0VbqpDQE2WflFn1//lq9NHH703Y1n6hdAedy3ild9zZZIizLVFde33TQSEScW//ggf8Wa9yEAALrrs3z889ha4780/t9Q7l9Rnxsajoh/R8TeiPhPRPw3Iv4XUSt7V0Tc3Wb9Iyvyq8c/3zabXumKfPz3dDG3dXv8N1SLvzBcKXK7a/FXk1NnZmcOF/tkNKpb8/zEOnV8/tx37y9lti1f1zj+y195/eVYsC79ZcuKG3QnpxamuhB6zY2rS4GuGP8mSzMBSUTsi4j9Hbx/vs/OPPLxwWbr/zr+dXRhnin7KOLh+vFfjBXxl5L15yfHt8XszOHx8qxY7etvrr3YrP4Nxd8FN65G7Fh1/kdj/MNJ43ztfPt1XPvhvabXNJ2e/0PJy7X0ULHsramFhQsTEUPJ4urlk7e3LfNl+Tz+0UNrxZ/W3uPDYrsDEZGfxPdExL0RcV/R9vsj4oGIOLRO/F8+++DrncffW3n8J9s6/u0nKme/+LRZ/a0d/6O11GixpJXPv1YbuJF9BwAAAHeKtPY38Ek6tpRO07GxiFdq93Z3pLNz8wuPnpp78/zJ+t/KD0c1Le90pQ33QyeKe8NlfnJF/kjtvnGWZdn2Wn5sem62V3PqQGt2Nun/uZ8r/W4d0HNtzaM1e6INuCO11f9XPy0E3ME8rw2Dq9X+X+1xO4DN5/sfBtda/f9KxK0+NAXYZL7/YXDp/zC49H8YXPo/DKSNPNe/XmLv8Y43zzZUe/n7Kh1u/mNP9sZ6iUqnm29t42cOepCIdM1V1YjoS3vaSqS9qyI/+drbKj+QrRa+0umJ3XZi2cfEUD8+mwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALrhzwAAAP//dNfhIw==") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x31486c, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r1 = fspick(r0, &(0x7f0000000000)='.\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) 7m29.138757897s ago: executing program 7 (id=2773): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r0}, 0x18) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r1) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000600)={r4, 0x3, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0, 0x0], [0x800000], [0x0, 0x1001000], [0x0, 0x0, 0xe8a6]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r5, 0x0, 0x0, r6], [0x2b8]}) 7m22.417652067s ago: executing program 7 (id=2809): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000240), 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r2}, 0x18) listen(r0, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) 7m21.914496936s ago: executing program 58 (id=2809): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000240), 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r2}, 0x18) listen(r0, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) 6m27.17085896s ago: executing program 4 (id=3203): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x1a, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffd}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0xf, 0x10}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x3}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x55}, 0x4000) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) 6m26.718866789s ago: executing program 4 (id=3209): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='stat\x00') read$FUSE(r1, &(0x7f0000000440)={0x2020}, 0x2020) 6m25.896001124s ago: executing program 4 (id=3212): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) r0 = syz_io_uring_setup(0x304, &(0x7f0000000240)={0x0, 0x0, 0x80, 0x0, 0x8e1}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0, 0x1, 0x7, 0x1}) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x1, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x102, 0x1}) io_uring_enter(r0, 0x2d3e, 0x0, 0x8, 0x0, 0x0) 6m25.5961091s ago: executing program 4 (id=3216): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800002, &(0x7f0000000000)={[{@noblock_validity}, {@dioread_nolock}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x22}, 0x84, 0x464, &(0x7f0000000ac0)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r0, &(0x7f0000003440)={0x2020}, 0x2020) 6m25.223859417s ago: executing program 4 (id=3219): bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @private}}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x9}, @CTA_SEQADJ_OFFSET_BEFORE={0x4}, @CTA_SEQADJ_OFFSET_AFTER={0x8}]}]}, 0x80}}, 0x0) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x40047451, 0x0) 6m24.501574061s ago: executing program 4 (id=3226): r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r1, 0xa, 0x12) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) poll(&(0x7f0000b2c000)=[{r2}], 0x2c, 0xffffffffffbffff8) dup2(r1, r2) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x13) 6m24.225963606s ago: executing program 59 (id=3226): r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r1, 0xa, 0x12) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) poll(&(0x7f0000b2c000)=[{r2}], 0x2c, 0xffffffffffbffff8) dup2(r1, r2) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x13) 6m1.509211074s ago: executing program 3 (id=3417): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x3b0428, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000380)='./bus\x00') readlinkat(r0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000680)=""/206, 0xce) readlinkat(r0, &(0x7f0000000000)='./bus\x00', &(0x7f00000002c0)=""/163, 0xa3) 6m1.345594406s ago: executing program 3 (id=3419): r0 = fsopen(&(0x7f0000000100)='pipefs\x00', 0x0) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x921}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 6m1.106762291s ago: executing program 3 (id=3422): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x1, 0x442d, &(0x7f0000004480)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r0, 0x2007ffa) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) ftruncate(r3, 0x2007ffb) sendfile(r2, r3, 0x0, 0x1000000201005) copy_file_range(r1, 0x0, r0, 0x0, 0xfffffbffa003e458, 0x700000000000000) 6m0.246859627s ago: executing program 3 (id=3423): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000180)={[{@grpid}, {@mblk_io_submit}, {@nodioread_nolock}, {@test_dummy_encryption}, {@inode_readahead_blks}, {@nodelalloc}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x4, 0xbaf, &(0x7f00000017c0)="$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") openat(0xffffffffffffff9c, 0x0, 0x82400, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) 5m59.060250961s ago: executing program 3 (id=3438): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0xc0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) 5m57.925151352s ago: executing program 3 (id=3443): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f00000002c0)={0x100, r2}, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x100, r3}, 0x0) 5m42.641415297s ago: executing program 60 (id=3443): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f00000002c0)={0x100, r2}, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x100, r3}, 0x0) 5m2.408929941s ago: executing program 1 (id=3757): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0x240, 0x7}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r2, 0x0, 0xa0028000}, 0x38) syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e"], 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) fanotify_mark(0xffffffffffffffff, 0x201, 0x4000003e, r3, 0x0) 4m57.190528991s ago: executing program 1 (id=3778): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r0}, 0x18) epoll_create1(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x4, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb58}, 0x94) close(0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r1, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) syz_genetlink_get_family_id$nl80211(0x0, r1) 4m56.74416603s ago: executing program 1 (id=3786): ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x10000007fffffff) syz_mount_image$reiserfs(&(0x7f0000001100), &(0x7f00000002c0)='./file0\x00', 0x98, &(0x7f0000001180), 0x1, 0x10f6, &(0x7f00000022c0)="$eJzs2LFqFEEYB/D/7J6C1cmkXwJaKEhIOF8ghcI1FtZ2h5WdVyn3OD6OpLIPeYAUAXtlb10NIki4JQfH7wfL7vyZb76dciYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQmyUPkxw1SR2zJklJuu5ieZWkG/PHX9smJW/fL9evPi5er4dp6bMmpa/ajuvZk1oXdVHP6suj86d1/enzh/ZWy5Iulzeb1aM315Nupe/dTroiAAAAHIYfO5vvuT8AAADwP5NdJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMoI4fTZKSdN3F8ipJt9/fAgAAAHZU0uTd/F/5cA3wx4t8m5dtPvpe+jmn+TLUP7979wd3LwEAAIADVW6dx59l9vtc3mfHmeXkZBj/euX6PGmTnP61zuXNZrV9jjercp8bAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB+sgPHAgAAAADC/K3T6NgAAAAAAAAAAAAAAACAqQIAAP//I7HRJg==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080), 0xfea7) ftruncate(r0, 0xf88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x275a, 0x0) write$cgroup_pid(r1, &(0x7f00000003c0), 0x12) write$cgroup_int(r1, &(0x7f0000000080)=0x9, 0x12) write$UHID_CREATE(r0, &(0x7f0000000100)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', 0x0, 0x0, 0x8000, 0x3, 0x10001, 0x6, 0x3230206d}}, 0x120) 4m54.958902734s ago: executing program 1 (id=3800): syz_io_uring_setup(0x8d2, 0x0, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r2}, 0x10) sync() 4m54.268576178s ago: executing program 1 (id=3808): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0xc0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) 4m53.217913717s ago: executing program 1 (id=3815): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4880) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x18, 0x0, 0x709, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000014}, 0xc444) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="6a6f8e5e", 0x4}], 0x2}, 0x0) 4m38.04759137s ago: executing program 61 (id=3815): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4880) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x18, 0x0, 0x709, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000014}, 0xc444) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="6a6f8e5e", 0x4}], 0x2}, 0x0) 10.150593814s ago: executing program 0 (id=5416): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b700000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000800)=ANY=[@ANYBLOB="1201000000000040c50f80b0ff0700000001090224000100000000000000000009210000000122030009058103000000000000000000069b6f003a47d3083dfc56cb542567eb888b3d1de4cadef9290bc65b85033a935871bd9b5ecfcb1ee18bf6f2457005b63cb3ba16baa71f780eb09b66465dab6622455775a9d529e39567ddbb76514e13cd143045612c8057d5d87671d33fbd602692f51582a00dd5d3d90a1cf94f3e152176810379e1f4c8aa673816bb67ebe748bff251b7f5804d3e61862a8a"], 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) syz_clone3(&(0x7f0000000b40)={0x80, &(0x7f00000001c0), &(0x7f0000000580), &(0x7f0000000900), {0x3d}, &(0x7f0000000940)=""/43, 0x2b, &(0x7f0000000a40)=""/243, &(0x7f0000000980)=[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0], 0xa}, 0x58) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000480)={'bridge0\x00', 0x0}) sendto$packet(r3, &(0x7f00000002c0)="05030500d3fc030000004788800509101128", 0x100f, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) 10.105443576s ago: executing program 8 (id=5417): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r1, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="c4000000190001000000000000000000e0000002000000000000000000000000ff02000000000000000000000000000100000000200000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000082000000000000000000000fbffffffffffffff0000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000c001500590735008200"], 0xc4}}, 0x2c000010) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) syz_emit_ethernet(0x32, &(0x7f0000000840)={@broadcast, @broadcast, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x2, 0x9, 0x24, 0x68, 0x0, 0x5, 0x21, 0x0, @empty, @loopback}, {{0x4e20, 0x4e21, 0x4, 0x1, 0x2, 0x0, 0x0, 0x9, 0x6, "e3322c", 0x12, "f0431e"}}}}}}, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x6a) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="b8000000190001000000000000000000e000000200000000000000000000000000000000000000000000ffffac1414bb00000000000000000a"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@loopback, 0x0, 0x0, 0x4e23, 0x0, 0xa, 0x10}, {0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffa}, 0x4, 0x6e6bb5, 0x0, 0x1, 0x3, 0x3}}, 0xb8}}, 0x0) 8.938456548s ago: executing program 6 (id=5420): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socket$packet(0x11, 0x2, 0x300) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}, 0x1, 0x0, 0x0, 0xf00}, 0x0) 8.925462208s ago: executing program 0 (id=5423): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_clone(0x400c0000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000380)={r1, r3, 0x0, r1}, 0x10) 8.406702998s ago: executing program 6 (id=5427): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r3, &(0x7f00000000c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x4, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x40) 8.223719562s ago: executing program 9 (id=5429): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x242, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) dup(r0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r1}, 0x18) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000), 0x20000328) r3 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r3, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) 6.439973206s ago: executing program 6 (id=5430): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x3}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x20000000, 0x0, 0x0, 0x0, 0x3}, {0xfffffffffffffffc}, 0xffffffff, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) 6.322942638s ago: executing program 9 (id=5431): r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r1, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r2}], 0x1, 0x0, &(0x7f0000000080)={[0x8001a0efffffff]}, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) dup2(r1, r2) fcntl$setown(r2, 0x8, r0) tkill(r0, 0x13) 5.230808309s ago: executing program 0 (id=5434): bpf$PROG_LOAD(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') ppoll(&(0x7f0000001280)=[{r0, 0x100}], 0x1, 0x0, 0x0, 0x0) r1 = dup(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0xe, 0xb}, {0xd, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$KVM_SET_MSRS(r1, 0xc008ae88, 0x0) r2 = getpid() openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x80f00, 0x160) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) 5.19999757s ago: executing program 8 (id=5435): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$packet(0x11, 0x2, 0x300) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$ENABLE_STATS(0x20, 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180), 0x4) syz_emit_ethernet(0x16, &(0x7f00000004c0)=ANY=[], 0x0) 4.828033417s ago: executing program 8 (id=5436): socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001dc00)=""/102392, 0x18ff8) mount(&(0x7f0000000140)=@filename='./file0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000680)='btrfs\x00', 0x208000, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000800)=[{{&(0x7f0000000680)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/138, 0x8a}], 0x1}}], 0x1, 0x10020, 0x0) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_restrict_self(r1, 0x0) 4.634197641s ago: executing program 9 (id=5437): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) semop(0x0, &(0x7f0000000040)=[{0x1, 0xbbdd, 0x1000}], 0x1f4) 4.633585161s ago: executing program 5 (id=5447): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x3, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x2}, 0x50) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2, 0x40) open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0xf00, 0x0) socket$netlink(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x6, 0xd, 0x0, 0x0, 0x10000, 0xfffffffffffffffc}, 0x0, &(0x7f00000002c0)={0x3fc, 0x9, 0x100000, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) fanotify_mark(r1, 0x1, 0x10001011, r0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file2\x00', 0x100, 0xfffffffc) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x2) 4.539284763s ago: executing program 8 (id=5438): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socket$packet(0x11, 0x2, 0x300) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}, 0x1, 0x0, 0x0, 0xf00}, 0x0) 3.564465051s ago: executing program 9 (id=5439): pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x5412, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) close_range(r0, 0xffffffffffffffff, 0x0) 3.557362021s ago: executing program 6 (id=5450): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000180)={0x10000, 0x8000, 0x2000000}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) r5 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) mount(0x0, &(0x7f00000001c0)='.\x00', 0x0, 0x32e5c2a, 0x0) 3.499985612s ago: executing program 0 (id=5440): pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mkdir(&(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1048001, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000000)='./file1\x00') r1 = syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0) syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[], 0x1, 0x14f, &(0x7f0000000900)="$eJzs2r9Kw1AUBvAzFCodHZ0KlSho/mtddRQ33yC0uWnwxpREkPYFxElwuA6+hOAT+AgZ3XQR9CUi197aNhXrUBuL32/pR05IT28ut8vRkziyWaoTbXevj19WkziqN929FrOZRwOHRFSXIcvzG4OmPH3Ws5yML274VZVZN6y/DT4bm4E4umQh950FtAUAAAAAAAAAAAAAAAAAAAAAAPOg1VSodUR0wULu22PVtNc/8Tj3k7Sk9kqn1dUMFzHBb+X6uBP1rVcibV+mUBwksm5N1KvDsNER/Lm4vuZZ1DXTXl8PIy/wA//UcdymtWNZu4758Syz+ETtTvVEWX5vTY+TaWPzZo8/mTdT77+yFoqr8+K3jd4/wvxCProit0fp/fzbsKK2+V/pZ4nCzHNlWQz//9pVt/Egzz+jFfO2uriI5SzxtwPAN94DAAD//zRDNTE=") mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./file0/file0\x00', 0x40) setpgid(r1, r1) r2 = getpgid(r1) setpgid(0x0, r2) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) 3.499734053s ago: executing program 5 (id=5441): sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x8000) set_mempolicy(0x4005, &(0x7f0000000040)=0x10000000005, 0x4) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, 0x0, &(0x7f0000000100)) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000280)=0x400, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x18) syz_open_procfs(0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="5000000010000104000000000000000036000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067726574617000000c0002800600020020"], 0x50}, 0x1, 0x0, 0x0, 0xc845}, 0x0) 3.428094244s ago: executing program 8 (id=5442): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x242, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) dup(r0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r1}, 0x18) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000), 0x20000328) r3 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r3, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) 3.379437945s ago: executing program 9 (id=5443): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000940)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000000140)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x6, 0x80000, 0x2d63, 0x6c2, 0xffffffff, 0x8000, 0x0, 0x0, 0x8}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) fstat(r3, 0x0) 3.205935578s ago: executing program 5 (id=5444): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$l2tp6(0xa, 0x2, 0x73) socket$unix(0x1, 0x2, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="740000001000ffff25bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="17200000212000004c0012800c0001006d6163766c616e003c00028008000300030000000800010010000000280005800a00040096aaaaaaaaaa00000a000400aaaaaaaaaaaa00000a000400aaaaaaaaaab0000008000500", @ANYRES64=r1], 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x26004411}, 0x800) 3.155193989s ago: executing program 8 (id=5445): socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r0, 0x6) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x40000000000, 0x3, 0x4, 0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x4, 0x0, 0x9, 0x0, 0x0, 0x80000003}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x4) 3.067830691s ago: executing program 9 (id=5446): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_mount_image$udf(&(0x7f0000000480), &(0x7f00000004c0)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00b96fa236bfd596c74e808dd7b85a97c6ab3f6173849702311b635ac7a4e02bb352424c"], 0x1, 0x46f, &(0x7f00000009c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_int(r1, 0x0, 0x1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r0, 0x0, 0x40001) sendfile(r3, r2, 0x0, 0x7ffff000) ioctl$VIDIOC_TRY_DECODER_CMD(r2, 0xc0485661, 0x0) 3.023845962s ago: executing program 6 (id=5448): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r0}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0xf3a, 0x0) tee(r4, r2, 0x8, 0x0) write$binfmt_script(r5, 0x0, 0xfffffe48) 2.423412503s ago: executing program 0 (id=5449): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0)={[{@usrquota}, {@acl}]}, 0xfe, 0x244, &(0x7f0000000400)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file5\x00', 0x82c0, 0x0) r1 = fanotify_init(0xf00, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB='iocharset=cp865,utf8=1,utf8=0,utf8=1,iocharset=utf8,sys_immutable,uni_xlate=0,uni_xlate=1,uni_xlate=1,gid=', @ANYRESHEX, @ANYBLOB='A\x00'], 0x1, 0x1b1, &(0x7f0000000280)="$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") r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000000)='.\x00', 0x400017e) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x48, 0x0, 0x8) fanotify_mark(r1, 0x105, 0x5000003a, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x101042, 0x40) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file7\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x2) 2.419655183s ago: executing program 5 (id=5451): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) openat$uinput(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="0100000000", 0x5}], 0x1) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0xe) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x64, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0xd}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 2.218043247s ago: executing program 5 (id=5452): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20020008008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) 254.640425ms ago: executing program 5 (id=5453): syz_clone(0x638c1100, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r1, 0xa, 0x11) fcntl$setlease(r1, 0x400, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = getpid() fcntl$setownex(r2, 0xf, &(0x7f0000000100)={0x2, r3}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000001c0)=0x0) fcntl$setown(r1, 0x8, r4) truncate(&(0x7f0000000040)='./file0\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 173.045217ms ago: executing program 0 (id=5454): r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_mtu(r0, 0x29, 0x17, 0x0, 0x0) 0s ago: executing program 6 (id=5455): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socket$packet(0x11, 0x2, 0x300) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}, 0x1, 0x0, 0x0, 0xf00}, 0x0) kernel console output (not intermixed with test programs): attributes in process `syz.9.3398'. [ 753.897531][ T27] kauditd_printk_skb: 29 callbacks suppressed [ 753.897550][ T27] audit: type=1326 audit(1759266575.688:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14789 comm="syz.8.3399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b8758eec9 code=0x7ffc0000 [ 753.985327][ T27] audit: type=1326 audit(1759266575.688:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14789 comm="syz.8.3399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b8758eec9 code=0x7ffc0000 [ 754.039293][T14798] bond0: (slave dummy0): Releasing backup interface [ 754.061709][ T27] audit: type=1326 audit(1759266575.688:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14789 comm="syz.8.3399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b8758eec9 code=0x7ffc0000 [ 754.102270][ T27] audit: type=1326 audit(1759266575.688:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14789 comm="syz.8.3399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f7b8758eec9 code=0x7ffc0000 [ 754.168406][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 754.176289][T14798] bond2: (slave macvlan0): Releasing active interface [ 754.251078][T14799] team0: Mode changed to "loadbalance" [ 754.277559][ T27] audit: type=1326 audit(1759266575.688:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14789 comm="syz.8.3399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b8758eec9 code=0x7ffc0000 [ 754.308989][T14800] netlink: 'syz.9.3402': attribute type 10 has an invalid length. [ 754.355325][T14800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 754.378998][ T27] audit: type=1326 audit(1759266575.688:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14789 comm="syz.8.3399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b8758eec9 code=0x7ffc0000 [ 754.384828][T14800] team0: Port device bond0 added [ 754.466804][ T27] audit: type=1326 audit(1759266575.688:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14789 comm="syz.8.3399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b8758eec9 code=0x7ffc0000 [ 754.524314][T14811] overlayfs: failed to clone upperpath [ 754.551063][ T27] audit: type=1326 audit(1759266575.688:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14789 comm="syz.8.3399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b8758eec9 code=0x7ffc0000 [ 754.575622][ T27] audit: type=1326 audit(1759266575.688:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14789 comm="syz.8.3399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7b8758eec9 code=0x7ffc0000 [ 754.624885][ T27] audit: type=1326 audit(1759266575.688:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14789 comm="syz.8.3399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b8758eec9 code=0x7ffc0000 [ 755.431240][T14839] syz.5.3418[14839] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 755.431411][T14839] syz.5.3418[14839] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 755.686289][ T8797] wlan1: Trigger new scan to find an IBSS to join [ 756.026455][T14845] loop3: detected capacity change from 0 to 32768 [ 756.114516][T14845] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 756.398553][T14846] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 756.508068][T14845] syz.3.3422 (14845) used greatest stack depth: 19688 bytes left [ 756.613784][T13009] ocfs2: Unmounting device (7,3) on (node local) [ 756.692774][T14860] netlink: 'syz.9.3437': attribute type 10 has an invalid length. [ 756.721637][T14860] team0: Failed to send options change via netlink (err -105) [ 756.730057][T14860] team0: Port device dummy0 added [ 756.740277][T14860] netlink: 'syz.9.3437': attribute type 10 has an invalid length. [ 756.751329][T14860] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 756.792318][T14860] team0: Failed to send options change via netlink (err -105) [ 756.800422][T14860] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 756.816710][T14860] team0: Port device dummy0 removed [ 756.835383][T14860] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 756.867034][ T8756] team0: Failed to send port change of device bond0 via netlink (err -105) [ 756.903061][ T8756] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 756.969319][T14862] lo speed is unknown, defaulting to 1000 [ 757.022093][T14864] loop3: detected capacity change from 0 to 4096 [ 757.038846][T14864] EXT4-fs: Ignoring removed mblk_io_submit option [ 757.081494][T14864] EXT4-fs (loop3): Test dummy encryption mode enabled [ 757.162454][T14864] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 757.691181][T13009] EXT4-fs (loop3): unmounting filesystem. [ 758.743409][ T8775] wlan1: Trigger new scan to find an IBSS to join [ 759.561933][T14917] lo speed is unknown, defaulting to 1000 [ 759.588136][T14919] device wg2 entered promiscuous mode [ 759.648724][T10511] wlan1: Creating new IBSS network, BSSID 4e:2c:93:fd:87:22 [ 759.764855][T14923] tipc: Started in network mode [ 759.780550][T14923] tipc: Node identity 7ad77430fd92, cluster identity 4711 [ 759.788833][T14923] tipc: Enabled bearer , priority 0 [ 759.846265][T14925] tipc: Enabling of bearer rejected, already enabled [ 760.736220][T14946] overlayfs: failed to clone upperpath [ 760.905949][ T6083] tipc: Node number set to 2269475888 [ 761.671647][T14938] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 761.721150][T14938] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 761.818730][T14938] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 761.828500][T14938] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 761.845339][T14938] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 761.867303][T14938] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 761.954601][T14938] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 761.964789][T14938] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 761.974574][T14938] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 761.984003][T14938] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 762.063036][T14939] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3454'. [ 762.119628][T14950] device lo entered promiscuous mode [ 762.130738][T14950] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 762.295160][T14961] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3470'. [ 762.408601][T14969] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3470'. [ 763.480987][T14984] netlink: 830 bytes leftover after parsing attributes in process `syz.9.3468'. [ 763.499052][T14985] netlink: 892 bytes leftover after parsing attributes in process `syz.6.3478'. [ 763.586579][T14988] netlink: 892 bytes leftover after parsing attributes in process `syz.6.3478'. [ 763.786467][T14990] netlink: 'syz.9.3469': attribute type 10 has an invalid length. [ 763.812134][T14990] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3469'. [ 763.879571][T14990] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.915065][T14990] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.945015][T14990] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.975495][T14990] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.001537][T14990] team0: Failed to send options change via netlink (err -105) [ 764.009294][T14990] team0: Port device geneve0 added [ 764.312131][T15000] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 764.486498][T15007] overlayfs: failed to clone upperpath [ 764.666367][T15011] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 765.681898][T15036] IPv6: NLM_F_REPLACE set, but no existing node found! [ 766.837418][T15049] lo speed is unknown, defaulting to 1000 [ 767.195195][T15063] overlayfs: failed to clone upperpath [ 768.484043][T15080] loop8: detected capacity change from 0 to 256 [ 770.752003][T15113] loop8: detected capacity change from 0 to 32768 [ 770.798183][ T27] kauditd_printk_skb: 13 callbacks suppressed [ 770.798200][ T27] audit: type=1800 audit(1759266592.588:271): pid=15113 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3518" name="file2" dev="loop8" ino=12 res=0 errno=0 [ 775.491444][ T48] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 775.508574][ T48] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 775.519887][ T48] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 775.535523][ T48] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 775.547580][ T48] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 775.555327][ T48] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 775.703102][T15146] lo speed is unknown, defaulting to 1000 [ 777.083591][T15146] chnl_net:caif_netlink_parms(): no params data found [ 777.370035][T15146] bridge0: port 1(bridge_slave_0) entered blocking state [ 777.401453][ T4279] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 777.414184][T15146] bridge0: port 1(bridge_slave_0) entered disabled state [ 777.415920][ T4279] CPU: 1 PID: 4279 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 777.430337][ T4279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 777.440715][ T4279] Workqueue: hci2 hci_rx_work [ 777.445811][ T4279] Call Trace: [ 777.449271][ T4279] [ 777.452470][ T4279] dump_stack_lvl+0x168/0x22e [ 777.457562][ T4279] ? show_regs_print_info+0x12/0x12 [ 777.462834][ T4279] ? load_image+0x3b0/0x3b0 [ 777.467428][ T4279] sysfs_create_dir_ns+0x252/0x280 [ 777.472590][ T4279] ? hci_rx_work+0x3eb/0xd40 [ 777.477305][ T4279] ? sysfs_warn_dup+0xa0/0xa0 [ 777.482025][ T4279] ? do_raw_spin_unlock+0x11d/0x230 [ 777.487375][ T4279] kobject_add_internal+0x6b8/0xc80 [ 777.493332][ T4279] kobject_add+0x152/0x210 [ 777.497799][ T4279] ? kobject_init+0x1d0/0x1d0 [ 777.502877][ T4279] ? klist_children_get+0x50/0x50 [ 777.508131][ T4279] ? get_device_parent+0x121/0x3f0 [ 777.513718][ T4279] device_add+0x483/0xfb0 [ 777.518126][ T4279] ? kmem_cache_free+0xf7/0x290 [ 777.523224][ T4279] hci_conn_add_sysfs+0xd1/0x1e0 [ 777.528546][ T4279] le_conn_complete_evt+0xd1d/0x1320 [ 777.533995][ T4279] ? hci_le_big_info_adv_report_evt+0x310/0x310 [ 777.540298][ T4279] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 777.546304][ T4279] ? skb_pull_data+0xf7/0x200 [ 777.551127][ T4279] hci_le_conn_complete_evt+0x183/0x440 [ 777.556802][ T4279] ? hci_remote_host_features_evt+0x270/0x270 [ 777.563245][ T4279] hci_event_packet+0x791/0x1210 [ 777.568272][ T4279] ? bis_list+0x280/0x280 [ 777.572761][ T4279] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 777.578811][ T4279] ? kcov_remote_start+0x4c7/0x7e0 [ 777.584642][ T4279] ? msr_initialize_bdw+0x80/0xb0 [ 777.589724][ T4279] ? hci_send_to_monitor+0x9c/0x4a0 [ 777.595048][ T4279] hci_rx_work+0x3eb/0xd40 [ 777.599510][ T4279] ? _raw_spin_unlock+0x40/0x40 [ 777.604504][ T4279] ? process_one_work+0x7a1/0x1160 [ 777.609645][ T4279] process_one_work+0x898/0x1160 [ 777.614764][ T4279] ? worker_detach_from_pool+0x240/0x240 [ 777.620523][ T4279] ? _raw_spin_lock_irq+0xab/0xe0 [ 777.625675][ T4279] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 777.631437][ T4279] ? kthread_data+0x4b/0xc0 [ 777.635983][ T4279] worker_thread+0xaa2/0x1250 [ 777.640713][ T4279] kthread+0x29d/0x330 [ 777.644903][ T4279] ? worker_clr_flags+0x1a0/0x1a0 [ 777.650235][ T4279] ? kthread_blkcg+0xd0/0xd0 [ 777.655058][ T4279] ret_from_fork+0x1f/0x30 [ 777.660017][ T4279] [ 777.664035][ T4280] Bluetooth: hci3: command 0x0409 tx timeout [ 777.673471][ T4279] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 777.687669][ T4279] Bluetooth: hci2: failed to register connection device [ 777.700416][T15146] device bridge_slave_0 entered promiscuous mode [ 777.710656][T15146] bridge0: port 2(bridge_slave_1) entered blocking state [ 777.718485][T15146] bridge0: port 2(bridge_slave_1) entered disabled state [ 777.727439][T15146] device bridge_slave_1 entered promiscuous mode [ 777.785771][T15146] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 777.798579][T15146] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 777.824660][T15190] device vlan2 entered promiscuous mode [ 777.942514][T15146] team0: Port device team_slave_0 added [ 777.991222][T15146] team0: Port device team_slave_1 added [ 778.114416][T15146] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 778.123565][T15146] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 778.171571][T15146] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 778.204919][T15146] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 778.223107][T15146] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 778.280698][T15146] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 778.396381][T15146] device hsr_slave_0 entered promiscuous mode [ 778.403984][T15146] device hsr_slave_1 entered promiscuous mode [ 778.420579][T15146] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 778.467539][T15146] Cannot create hsr debugfs directory [ 779.597661][T15146] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 779.622287][T15146] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 779.647765][T15146] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 779.663278][T15146] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 779.686107][ T4279] Bluetooth: hci3: command 0x041b tx timeout [ 779.801122][T15146] 8021q: adding VLAN 0 to HW filter on device bond0 [ 779.826398][T15146] 8021q: adding VLAN 0 to HW filter on device team0 [ 779.836038][T10502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 779.852049][T10502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 779.882717][ T8797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 779.904623][ T8797] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 779.922330][ T8797] bridge0: port 1(bridge_slave_0) entered blocking state [ 779.929594][ T8797] bridge0: port 1(bridge_slave_0) entered forwarding state [ 779.940271][ T8797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 779.958654][ T8797] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 779.977062][ T8797] bridge0: port 2(bridge_slave_1) entered blocking state [ 779.984799][ T8797] bridge0: port 2(bridge_slave_1) entered forwarding state [ 780.016702][ T8797] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 780.028131][ T8797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 780.041050][ T8797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 780.067600][ T8797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 780.106766][ T8797] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 780.130731][ T8797] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 780.168276][ T8797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 780.213835][ T8797] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 780.238880][ T8797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 780.274897][ T8797] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 780.320356][T15227] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3564'. [ 780.550251][T10502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 780.565004][T10502] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 780.631261][T15146] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 780.912792][T15237] device vlan2 entered promiscuous mode [ 780.968505][T15237] device hsr_slave_1 entered promiscuous mode [ 781.240098][T15231] loop8: detected capacity change from 0 to 32768 [ 781.264221][T15231] XFS: noikeep mount option is deprecated. [ 781.343725][T15231] XFS (loop8): Mounting V5 Filesystem [ 781.432038][T15231] XFS (loop8): Ending clean mount [ 781.453097][T15231] XFS (loop8): Quotacheck needed: Please wait. [ 781.538910][ T4576] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 781.554998][ T4576] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 781.601804][T15146] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 781.649962][T15231] XFS (loop8): Quotacheck: Done. [ 781.671485][ T8785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 781.683821][ T8785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 781.721555][ T4576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 781.737239][ T4576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 781.751373][T15146] device veth0_vlan entered promiscuous mode [ 781.760922][ T4576] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 781.768749][ T4279] Bluetooth: hci3: command 0x040f tx timeout [ 781.780481][ T4576] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 781.804865][T15146] device veth1_vlan entered promiscuous mode [ 781.869117][T15146] device veth0_macvtap entered promiscuous mode [ 781.877425][T10510] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 781.904591][T10510] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 781.924499][T10510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 781.948845][T10510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 781.958483][T10510] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 781.974210][T15146] device veth1_macvtap entered promiscuous mode [ 781.999144][T15146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 782.010478][T15146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 782.022880][T15146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 782.036141][T15146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 782.047614][T15146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 782.061001][T15146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 782.072213][T15146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 782.083615][T15146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 782.097073][T15146] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 782.105153][ T4576] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 782.116574][ T4576] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 782.130638][T14326] XFS (loop8): Unmounting Filesystem [ 782.137076][ T4576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 782.154534][T15146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 782.166384][T15146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 782.176736][T15146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 782.187952][T15146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 782.211440][T15146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 782.222849][T15146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 782.233301][T15146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 782.244441][T15146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 782.285898][T15146] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 782.301559][T15146] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.312134][T15146] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.324155][T15146] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.334364][T15146] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.353753][ T8797] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 782.364259][ T8797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 782.581524][T10510] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 782.603506][T10502] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 782.612630][T10510] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 782.632375][T10502] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 782.644818][ T4576] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 782.669467][T10510] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 783.846214][ T4279] Bluetooth: hci3: command 0x0419 tx timeout [ 784.214414][T15274] lo speed is unknown, defaulting to 1000 [ 784.591059][ T6079] libceph: connect (1)[c::]:6789 error -101 [ 784.592288][ T6050] libceph: connect (1)[c::]:6789 error -101 [ 784.607709][ T6050] libceph: mon0 (1)[c::]:6789 connect error [ 784.612259][ T6079] libceph: mon0 (1)[c::]:6789 connect error [ 784.626569][ T6050] libceph: connect (1)[c::]:6789 error -101 [ 784.633240][ T6050] libceph: mon0 (1)[c::]:6789 connect error [ 784.657776][T15271] loop8: detected capacity change from 0 to 32768 [ 784.672786][ T6050] libceph: connect (1)[c::]:6789 error -101 [ 784.701794][ T6050] libceph: mon0 (1)[c::]:6789 connect error [ 784.744970][T15271] XFS (loop8): Mounting V5 Filesystem [ 784.887427][ T4364] libceph: connect (1)[c::]:6789 error -101 [ 784.894284][ T4364] libceph: mon0 (1)[c::]:6789 connect error [ 784.926002][ T6050] libceph: connect (1)[c::]:6789 error -101 [ 784.932254][ T6050] libceph: mon0 (1)[c::]:6789 connect error [ 784.939764][T15271] XFS (loop8): Ending clean mount [ 784.976712][ T6050] libceph: connect (1)[c::]:6789 error -101 [ 784.983174][ T6050] libceph: mon0 (1)[c::]:6789 connect error [ 785.334656][T15288] ceph: No mds server is up or the cluster is laggy [ 785.341797][T15292] ceph: No mds server is up or the cluster is laggy [ 785.353442][T15286] ceph: No mds server is up or the cluster is laggy [ 785.426369][ T4364] libceph: connect (1)[c::]:6789 error -101 [ 785.440661][ T4364] libceph: mon0 (1)[c::]:6789 connect error [ 785.491587][ T7977] libceph: connect (1)[c::]:6789 error -101 [ 785.504521][ T7977] libceph: mon0 (1)[c::]:6789 connect error [ 785.542249][ T7977] libceph: connect (1)[c::]:6789 error -101 [ 785.565408][ T7977] libceph: mon0 (1)[c::]:6789 connect error [ 786.365044][T15336] netlink: 128 bytes leftover after parsing attributes in process `syz.9.3580'. [ 786.764072][T14326] XFS (loop8): Unmounting Filesystem [ 787.564930][T15348] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3586'. [ 788.552539][T15374] loop8: detected capacity change from 0 to 1764 [ 789.745043][T15400] loop8: detected capacity change from 0 to 512 [ 789.791860][T15400] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 789.841971][T15400] EXT4-fs (loop8): 1 truncate cleaned up [ 789.898613][T15406] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3607'. [ 789.917457][T15400] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 790.013816][T15406] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3607'. [ 790.120758][T15408] loop1: detected capacity change from 0 to 1764 [ 790.554683][T15416] lo speed is unknown, defaulting to 1000 [ 791.562100][T14326] EXT4-fs (loop8): unmounting filesystem. [ 792.979669][T15459] loop1: detected capacity change from 0 to 256 [ 793.150886][T15459] syz.1.3633: attempt to access beyond end of device [ 793.150886][T15459] loop1: rw=2049, sector=256, nr_sectors = 68 limit=256 [ 793.263467][T15464] syz.1.3633: attempt to access beyond end of device [ 793.263467][T15464] loop1: rw=34817, sector=261, nr_sectors = 27 limit=256 [ 795.152578][T15522] netlink: 128 bytes leftover after parsing attributes in process `syz.8.3644'. [ 795.355078][T15530] loop1: detected capacity change from 0 to 128 [ 795.435503][T15530] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 795.486709][T15538] loop8: detected capacity change from 0 to 1024 [ 795.499153][T15538] EXT4-fs: Ignoring removed nomblk_io_submit option [ 795.508312][T15530] ext4 filesystem being mounted at /18/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 795.519260][T15538] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 795.531445][ T4279] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 795.541235][ T4279] Bluetooth: hci2: Injecting HCI hardware error event [ 795.554503][ T4280] Bluetooth: hci2: hardware error 0x00 [ 795.597606][T15530] EXT4-fs (loop1): shut down requested (1) [ 795.625616][T15538] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 795.655290][T15538] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 795.733471][T14326] EXT4-fs (loop8): unmounting filesystem. [ 796.178961][T15565] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3660'. [ 796.287250][T15146] EXT4-fs (loop1): unmounting filesystem. [ 796.305046][T15567] xt_hashlimit: size too large, truncated to 1048576 [ 797.686702][ T4280] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 798.141490][T15599] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 798.993408][T15608] loop8: detected capacity change from 0 to 128 [ 799.057760][T15608] FAT-fs (loop8): Directory bread(block 414) failed [ 799.064996][T15608] FAT-fs (loop8): Directory bread(block 415) failed [ 799.130272][T15608] FAT-fs (loop8): Directory bread(block 416) failed [ 799.148335][T15608] FAT-fs (loop8): Directory bread(block 417) failed [ 799.156163][T15608] FAT-fs (loop8): Directory bread(block 418) failed [ 799.194273][T15608] FAT-fs (loop8): Directory bread(block 419) failed [ 799.225891][T15608] FAT-fs (loop8): Directory bread(block 420) failed [ 799.245855][T15608] FAT-fs (loop8): Directory bread(block 421) failed [ 799.414787][T15618] FAT-fs (loop8): Directory bread(block 414) failed [ 799.455993][T15618] FAT-fs (loop8): Directory bread(block 415) failed [ 799.549920][T15622] netlink: 33836 bytes leftover after parsing attributes in process `syz.1.3682'. [ 800.363609][T15638] netlink: 156 bytes leftover after parsing attributes in process `syz.5.3688'. [ 800.791442][ T4364] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 800.819896][ T4364] hid-generic 0000:0000:0000.0021: hidraw0: HID v0.00 Device [syz1] on syz0 [ 802.354166][T15658] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 802.475493][ T4327] libceph: connect (1)[c::]:6789 error -101 [ 802.482477][ T4327] libceph: mon0 (1)[c::]:6789 connect error [ 802.532535][ T4327] libceph: connect (1)[c::]:6789 error -101 [ 802.538994][ T4327] libceph: mon0 (1)[c::]:6789 connect error [ 802.606183][ T4364] libceph: connect (1)[c::]:6789 error -101 [ 802.612406][ T4364] libceph: mon0 (1)[c::]:6789 connect error [ 802.746137][ T4327] libceph: connect (1)[c::]:6789 error -101 [ 802.753803][ T4327] libceph: mon0 (1)[c::]:6789 connect error [ 802.796273][ T4327] libceph: connect (1)[c::]:6789 error -101 [ 802.807452][ T4327] libceph: mon0 (1)[c::]:6789 connect error [ 802.896437][ T4318] libceph: connect (1)[c::]:6789 error -101 [ 802.905026][ T4318] libceph: mon0 (1)[c::]:6789 connect error [ 803.269012][ T4327] libceph: connect (1)[c::]:6789 error -101 [ 803.275127][ T4327] libceph: mon0 (1)[c::]:6789 connect error [ 803.304781][T15662] ceph: No mds server is up or the cluster is laggy [ 803.304812][T15668] ceph: No mds server is up or the cluster is laggy [ 803.337485][ T4327] libceph: connect (1)[c::]:6789 error -101 [ 803.343599][ T4327] libceph: mon0 (1)[c::]:6789 connect error [ 803.358244][T15665] ceph: No mds server is up or the cluster is laggy [ 803.447831][ T4318] libceph: connect (1)[c::]:6789 error -101 [ 803.454062][ T4318] libceph: mon0 (1)[c::]:6789 connect error [ 804.006095][ T4280] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 804.016090][ T4280] Bluetooth: hci3: Injecting HCI hardware error event [ 804.028531][ T4279] Bluetooth: hci3: hardware error 0x00 [ 804.147786][T15695] overlayfs: failed to clone upperpath [ 804.434818][T15702] netlink: 'syz.6.3707': attribute type 4 has an invalid length. [ 804.532644][T15702] netlink: 'syz.6.3707': attribute type 17 has an invalid length. [ 804.575567][T15702] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 804.619996][ T6080] lo speed is unknown, defaulting to 1000 [ 805.166240][T15724] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 805.732081][ T8791] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 805.931551][ T8791] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.057229][T15746] loop1: detected capacity change from 0 to 256 [ 806.086193][ T4279] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 806.102270][ T8791] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.145571][T15746] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 806.300774][ T8791] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.960163][T15756] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3732'. [ 806.974715][T15756] IPv6: ADDRCONF(NETDEV_CHANGE): gre3: link becomes ready [ 807.236495][ T4318] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 807.357154][T15763] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 807.426061][ T4318] usb 2-1: Using ep0 maxpacket: 32 [ 807.434749][ T4318] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 807.462551][ T4318] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 807.483683][ T4318] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 807.504475][ T4318] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 807.547008][ T4318] usb 2-1: config 0 descriptor?? [ 807.767427][T15773] netlink: 'syz.6.3736': attribute type 4 has an invalid length. [ 808.029674][ T4318] ft260 0003:0403:6030.0022: unknown main item tag 0x0 [ 808.038287][ T6053] lo speed is unknown, defaulting to 1000 [ 808.048438][ T4318] ft260 0003:0403:6030.0022: unknown main item tag 0x0 [ 808.106303][ T4318] ft260 0003:0403:6030.0022: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.1-1/input0 [ 808.181060][T15781] overlayfs: failed to clone upperpath [ 808.227501][ T4318] ft260 0003:0403:6030.0022: chip code: 6424 8183 [ 808.452533][T15779] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3739'. [ 808.481001][T15779] IPv6: ADDRCONF(NETDEV_CHANGE): gre2: link becomes ready [ 808.584276][ T8791] device hsr_slave_0 left promiscuous mode [ 808.597197][ T8791] device hsr_slave_1 left promiscuous mode [ 808.622035][ T8791] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 808.630022][ T4318] ft260 0003:0403:6030.0022: failed to retrieve status: -32 [ 808.649479][ T8791] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 808.700338][ T8791] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 808.720672][ T8791] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 808.766655][ T8791] device bridge_slave_1 left promiscuous mode [ 808.772991][ T8791] bridge0: port 2(bridge_slave_1) entered disabled state [ 808.832772][ T8791] device bridge_slave_0 left promiscuous mode [ 808.856649][T15759] ft260 0003:0403:6030.0022: ft260_hid_output_report_check_status: failed to start transfer, ret -38 [ 808.873087][ T8791] bridge0: port 1(bridge_slave_0) entered disabled state [ 808.954592][ T8791] device veth1_macvtap left promiscuous mode [ 808.981824][ T8791] device veth0_macvtap left promiscuous mode [ 809.001958][ T8791] device veth1_vlan left promiscuous mode [ 809.022164][ T8791] device veth0_vlan left promiscuous mode [ 809.236492][T15759] ft260 0003:0403:6030.0022: failed to reset I2C controller: -108 [ 810.089828][ T6053] usb 2-1: USB disconnect, device number 6 [ 810.271717][ T8791] team0 (unregistering): Port device team_slave_1 removed [ 810.385887][ T8791] team0 (unregistering): Port device team_slave_0 removed [ 810.496503][ T8791] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 810.601970][ T8791] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 811.149232][ T8791] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 811.904844][ T8791] bond0 (unregistering): Released all slaves [ 812.036666][T15795] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3747'. [ 812.051842][T15795] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 812.082101][T15803] device hsr_slave_0 left promiscuous mode [ 812.338373][T15813] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 812.470393][T15818] loop1: detected capacity change from 0 to 2048 [ 812.572971][T15818] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 812.996338][T15146] EXT4-fs (loop1): unmounting filesystem. [ 813.682655][T15832] netlink: 'syz.5.3755': attribute type 4 has an invalid length. [ 815.025795][ T4318] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 815.256692][ T4318] usb 2-1: Using ep0 maxpacket: 8 [ 815.264130][ T4318] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 815.296679][ T4318] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 815.339612][ T4318] usb 2-1: config 0 has no interface number 0 [ 815.365173][ T4318] usb 2-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 815.435176][ T4318] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 815.528335][ T4318] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 815.545407][ T4318] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 815.566995][ T4318] usb 2-1: config 0 descriptor?? [ 816.336128][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 816.444958][ T4318] ldusb 2-1:0.55: Interrupt in endpoint not found [ 816.592362][T15859] netlink: 'syz.9.3765': attribute type 4 has an invalid length. [ 816.652990][T15859] netlink: 'syz.9.3765': attribute type 17 has an invalid length. [ 816.716757][T15859] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 819.375595][T15893] overlayfs: failed to clone upperpath [ 819.399571][ T27] audit: type=1326 audit(1759266641.188:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15890 comm="syz.6.3774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd17e98eec9 code=0x7ffc0000 [ 819.512172][ T6050] usb 2-1: USB disconnect, device number 7 [ 819.573034][ T27] audit: type=1326 audit(1759266641.208:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15890 comm="syz.6.3774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd17e98eec9 code=0x7ffc0000 [ 819.635716][ T27] audit: type=1326 audit(1759266641.208:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15890 comm="syz.6.3774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd17e98eec9 code=0x7ffc0000 [ 819.718643][ T27] audit: type=1326 audit(1759266641.208:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15890 comm="syz.6.3774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd17e98eec9 code=0x7ffc0000 [ 819.785781][ T27] audit: type=1326 audit(1759266641.208:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15890 comm="syz.6.3774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd17e98eec9 code=0x7ffc0000 [ 819.855476][ T27] audit: type=1326 audit(1759266641.208:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15890 comm="syz.6.3774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd17e98eec9 code=0x7ffc0000 [ 819.927416][ T27] audit: type=1326 audit(1759266641.208:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15890 comm="syz.6.3774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd17e98eec9 code=0x7ffc0000 [ 820.063301][ T27] audit: type=1326 audit(1759266641.208:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15890 comm="syz.6.3774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd17e98eec9 code=0x7ffc0000 [ 820.063374][T15912] tipc: Enabling of bearer rejected, already enabled [ 820.154644][ T27] audit: type=1326 audit(1759266641.208:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15890 comm="syz.6.3774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd17e98eec9 code=0x7ffc0000 [ 820.201828][ T27] audit: type=1326 audit(1759266641.208:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15890 comm="syz.6.3774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd17e98eec9 code=0x7ffc0000 [ 820.329633][T15915] loop1: detected capacity change from 0 to 8192 [ 820.379818][T15915] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 820.440744][T15915] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 820.488003][T15915] REISERFS (device loop1): using ordered data mode [ 820.519757][T15915] reiserfs: using flush barriers [ 820.526601][T15928] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 820.551818][T15915] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 820.585329][T15915] REISERFS (device loop1): checking transaction log (loop1) [ 820.604767][T15928] bond0: (slave dummy0): Releasing backup interface [ 820.687453][T15928] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 820.730161][T15928] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 820.752222][T15928] device bridge_slave_0 left promiscuous mode [ 820.806126][T15928] bridge0: port 1(bridge_slave_0) entered disabled state [ 820.821527][T15928] device bridge_slave_1 left promiscuous mode [ 820.836235][T15928] bridge0: port 2(bridge_slave_1) entered disabled state [ 820.884555][T15928] bond0: (slave bond_slave_0): Releasing backup interface [ 820.925376][T15915] REISERFS (device loop1): Using tea hash to sort names [ 820.949568][T15928] bond0: (slave bond_slave_1): Releasing backup interface [ 820.953800][T15915] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 820.984720][T15915] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 821.125565][T15928] team0: Port device team_slave_0 removed [ 821.196777][T15928] team0: Port device team_slave_1 removed [ 821.218009][T15946] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 821.245441][T15928] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 821.273701][T15928] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 821.301760][T15928] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 821.313556][T15928] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 821.364746][T15928] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 821.398922][T15932] team0: Mode changed to "loadbalance" [ 821.416848][T15933] netlink: 'syz.8.3792': attribute type 10 has an invalid length. [ 821.553161][T15933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 821.584240][T15933] team0: Port device bond0 added [ 822.443202][T15955] loop8: detected capacity change from 0 to 32768 [ 822.605325][T15955] XFS (loop8): Mounting V5 Filesystem [ 822.740054][T15955] XFS (loop8): Ending clean mount [ 823.363387][T15990] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 823.455564][T14326] XFS (loop8): Unmounting Filesystem [ 826.711560][T16029] bond0: (slave syz_tun): Releasing backup interface [ 826.745734][ T6053] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 826.767548][T16029] bond0: (slave dummy0): Releasing backup interface [ 826.834123][T16029] device bridge_slave_0 left promiscuous mode [ 826.857778][T16029] bridge0: port 1(bridge_slave_0) entered disabled state [ 826.885263][T16029] device bridge_slave_1 left promiscuous mode [ 826.902490][T16029] bridge0: port 2(bridge_slave_1) entered disabled state [ 826.929967][T16029] bond0: (slave bond_slave_0): Releasing backup interface [ 826.937878][ T6053] usb 9-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 40960, setting to 1024 [ 826.962333][ T6053] usb 9-1: config 0 interface 0 has no altsetting 0 [ 826.970478][T16029] bond0: (slave bond_slave_1): Releasing backup interface [ 826.978893][ T6053] usb 9-1: New USB device found, idVendor=056a, idProduct=00ba, bcdDevice= 0.00 [ 826.989080][ T6053] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 827.001192][ T6053] usb 9-1: config 0 descriptor?? [ 827.031577][T16029] team0: Port device team_slave_0 removed [ 827.055087][T16029] team0: Port device team_slave_1 removed [ 827.079481][T16029] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 827.106785][T16029] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 827.135430][T16029] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 827.166264][T16029] IPv6: ADDRCONF(NETDEV_CHANGE): gre2: link becomes ready [ 827.241571][T16030] team0: Mode changed to "loadbalance" [ 827.271608][T16033] netlink: 'syz.6.3825': attribute type 10 has an invalid length. [ 827.289207][T16033] 8021q: adding VLAN 0 to HW filter on device bond0 [ 827.352736][T16033] team0: Port device bond0 added [ 827.456200][ T6053] wacom 0003:056A:00BA.0023: Unknown device_type for 'HID 056a:00ba'. Assuming pen. [ 827.487413][ T6053] wacom 0003:056A:00BA.0023: hidraw0: USB HID v10.00 Device [HID 056a:00ba] on usb-dummy_hcd.8-1/input0 [ 827.531088][ T6053] input: Wacom Intuos4 8x13 Pen as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:056A:00BA.0023/input/input26 [ 827.692850][ T4327] usb 9-1: USB disconnect, device number 5 [ 827.823009][T16039] fido_id[16039]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/9-1/report_descriptor': No such file or directory [ 828.105941][T16042] device lo entered promiscuous mode [ 828.111569][T16042] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 829.975270][T16067] netlink: 830 bytes leftover after parsing attributes in process `syz.5.3842'. [ 832.026426][ T27] kauditd_printk_skb: 10 callbacks suppressed [ 832.026444][ T27] audit: type=1326 audit(1759266653.818:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16092 comm="syz.9.3854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149d78eec9 code=0x7ffc0000 [ 832.110126][ T27] audit: type=1326 audit(1759266653.848:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16092 comm="syz.9.3854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f149d78eec9 code=0x7ffc0000 [ 832.168907][ T27] audit: type=1326 audit(1759266653.848:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16092 comm="syz.9.3854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149d78eec9 code=0x7ffc0000 [ 832.241168][ T27] audit: type=1326 audit(1759266653.848:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16092 comm="syz.9.3854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f149d78eec9 code=0x7ffc0000 [ 832.321173][ T27] audit: type=1326 audit(1759266653.848:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16092 comm="syz.9.3854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149d78eec9 code=0x7ffc0000 [ 832.390738][ T27] audit: type=1326 audit(1759266653.848:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16092 comm="syz.9.3854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f149d78eec9 code=0x7ffc0000 [ 832.607787][ T27] audit: type=1326 audit(1759266653.858:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16092 comm="syz.9.3854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149d78eec9 code=0x7ffc0000 [ 833.676098][ T27] audit: type=1326 audit(1759266653.858:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16092 comm="syz.9.3854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f149d78eec9 code=0x7ffc0000 [ 833.746964][ T27] audit: type=1326 audit(1759266653.858:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16092 comm="syz.9.3854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149d78eec9 code=0x7ffc0000 [ 833.867963][ T27] audit: type=1326 audit(1759266653.858:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16092 comm="syz.9.3854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f149d78eec9 code=0x7ffc0000 [ 835.804167][T16132] syz.5.3869 (16132) used greatest stack depth: 18176 bytes left [ 839.631709][ T4280] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 839.644484][ T4280] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 839.676094][ T4280] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 839.689229][ T4280] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 839.697954][ T4280] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 839.705588][ T4280] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 839.884716][T16163] lo speed is unknown, defaulting to 1000 [ 840.061312][T16176] overlayfs: failed to clone upperpath [ 840.387798][T16163] chnl_net:caif_netlink_parms(): no params data found [ 840.612473][T16163] bridge0: port 1(bridge_slave_0) entered blocking state [ 840.646192][T16163] bridge0: port 1(bridge_slave_0) entered disabled state [ 840.655069][T16163] device bridge_slave_0 entered promiscuous mode [ 840.771732][T16163] bridge0: port 2(bridge_slave_1) entered blocking state [ 840.795490][T16163] bridge0: port 2(bridge_slave_1) entered disabled state [ 840.837591][T16163] device bridge_slave_1 entered promiscuous mode [ 841.009448][T16163] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 841.034158][T16205] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3896'. [ 841.045254][T16205] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3896'. [ 841.091740][T16163] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 841.211553][T16163] team0: Port device team_slave_0 added [ 841.251313][T16212] overlayfs: failed to clone upperpath [ 841.263330][T16163] team0: Port device team_slave_1 added [ 841.467263][ T8791] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.693378][ T8791] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.762662][T16163] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 841.775894][ T4279] Bluetooth: hci3: command 0x0409 tx timeout [ 841.799375][T16163] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 841.829136][T16163] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 842.024726][ T8791] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 842.066713][T16163] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 842.073735][T16163] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 842.109418][T16163] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 842.133509][T16234] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3909'. [ 842.171132][T16234] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 842.178625][T16234] IPv6: NLM_F_CREATE should be set when creating new route [ 842.186203][T16234] IPv6: NLM_F_CREATE should be set when creating new route [ 842.372942][ T8791] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 842.465150][T16247] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3913'. [ 842.485076][T16247] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3913'. [ 842.623513][T16163] device hsr_slave_0 entered promiscuous mode [ 842.668612][T16163] device hsr_slave_1 entered promiscuous mode [ 843.326398][T16263] binder: BINDER_SET_CONTEXT_MGR already set [ 843.333396][T16263] binder: 16262:16263 ioctl 4018620d 200000000040 returned -16 [ 843.748979][T16272] device erspan0 entered promiscuous mode [ 843.848824][ T4279] Bluetooth: hci3: command 0x041b tx timeout [ 845.042709][T16163] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 845.066308][T16163] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 845.436362][T16163] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 845.460784][T16163] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 845.868544][T16327] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3941'. [ 845.946042][ T4279] Bluetooth: hci3: command 0x040f tx timeout [ 846.331680][T16327] bridge3: port 1(vlan0) entered blocking state [ 846.347277][T16327] bridge3: port 1(vlan0) entered disabled state [ 846.365424][T16327] device vlan0 entered promiscuous mode [ 846.379826][T16327] device bridge0 entered promiscuous mode [ 846.487521][ T8791] device hsr_slave_0 left promiscuous mode [ 846.497664][ T8791] device hsr_slave_1 left promiscuous mode [ 846.512821][ T8791] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 846.524950][ T8791] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 846.560645][ T8791] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 846.578792][ T8791] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 846.596962][ T8791] device bridge_slave_1 left promiscuous mode [ 846.609858][ T8791] bridge0: port 2(bridge_slave_1) entered disabled state [ 846.629874][ T8791] device bridge_slave_0 left promiscuous mode [ 846.639568][ T8791] bridge0: port 1(bridge_slave_0) entered disabled state [ 846.784301][ T8791] device veth1_macvtap left promiscuous mode [ 846.806258][ T8791] device veth0_macvtap left promiscuous mode [ 846.812557][ T8791] device veth1_vlan left promiscuous mode [ 846.819788][ T8791] device veth0_vlan left promiscuous mode [ 848.016128][ T4279] Bluetooth: hci3: command 0x0419 tx timeout [ 848.653209][ T8791] team0 (unregistering): Port device team_slave_1 removed [ 848.774532][ T8791] team0 (unregistering): Port device team_slave_0 removed [ 848.877550][ T8791] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 848.986839][ T8791] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 850.269322][ T8791] bond0 (unregistering): Released all slaves [ 850.430023][T16349] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 850.693355][T16163] 8021q: adding VLAN 0 to HW filter on device bond0 [ 850.749980][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 850.758993][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 850.779017][T16163] 8021q: adding VLAN 0 to HW filter on device team0 [ 850.810965][T16383] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 850.843376][ T8816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 850.864954][ T8816] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 850.889958][ T8816] bridge0: port 1(bridge_slave_0) entered blocking state [ 850.897248][ T8816] bridge0: port 1(bridge_slave_0) entered forwarding state [ 850.938494][ T8816] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 850.948138][ T8816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 850.958838][ T8816] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 850.968368][ T8816] bridge0: port 2(bridge_slave_1) entered blocking state [ 850.975781][ T8816] bridge0: port 2(bridge_slave_1) entered forwarding state [ 851.005864][ T8816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 851.021734][ T8816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 851.043169][T16386] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3963'. [ 851.074684][ T8816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 851.094781][ T8816] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 851.105599][ T8816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 851.123787][ T8816] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 851.142488][ T8816] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 851.160470][ T8756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 851.201013][ T8756] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 851.324186][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 851.347744][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 851.367290][T16163] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 852.876588][T16413] 8021q: adding VLAN 0 to HW filter on device bond1 [ 852.918384][ T8816] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 852.978003][ T8816] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 853.094584][T16163] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 853.160723][ T8816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 853.184117][ T8816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 853.279257][ T4576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 853.298613][ T4576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 853.370400][ T4576] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 853.401636][ T4576] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 853.494560][T16163] device veth0_vlan entered promiscuous mode [ 853.508830][T16163] device veth1_vlan entered promiscuous mode [ 853.555245][ T4576] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 853.577143][ T4576] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 853.615722][ T4576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 853.733800][ T4576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 854.038940][T16163] device veth0_macvtap entered promiscuous mode [ 854.333922][T16163] device veth1_macvtap entered promiscuous mode [ 854.393824][T16163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 854.433260][T16163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 854.490692][T16163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 854.502265][T16163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 854.514560][T16163] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 854.573548][ T8775] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 854.621671][ T8775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 854.654426][T16163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 854.674584][T16163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 854.687540][T16163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 854.699195][T16163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 854.719504][T16163] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 854.743449][ T8775] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 854.767426][ T8775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 854.806009][T16163] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.830425][T16447] overlayfs: failed to clone upperpath [ 854.845783][T16163] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.854654][T16163] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.898099][T16163] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 855.182955][ T8791] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 855.202481][ T8791] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 855.298276][ T8775] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 855.298311][ T8756] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 855.332290][ T8756] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 855.381976][ T8791] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 855.576803][ T27] kauditd_printk_skb: 9 callbacks suppressed [ 855.576822][ T27] audit: type=1326 audit(1759266677.368:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16467 comm="syz.0.3877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f2c18eec9 code=0x7ffc0000 [ 855.657701][ T27] audit: type=1326 audit(1759266677.378:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16467 comm="syz.0.3877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f2c18eec9 code=0x7ffc0000 [ 855.684536][T16471] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3995'. [ 855.699168][ T27] audit: type=1326 audit(1759266677.378:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16467 comm="syz.0.3877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f2c18eec9 code=0x7ffc0000 [ 855.779071][ T27] audit: type=1326 audit(1759266677.378:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16467 comm="syz.0.3877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f2c18eec9 code=0x7ffc0000 [ 855.856797][ T27] audit: type=1326 audit(1759266677.378:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16467 comm="syz.0.3877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f2c18eec9 code=0x7ffc0000 [ 855.900476][ T27] audit: type=1326 audit(1759266677.378:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16467 comm="syz.0.3877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f2c18eec9 code=0x7ffc0000 [ 855.953718][ T27] audit: type=1326 audit(1759266677.378:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16467 comm="syz.0.3877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f2c18eec9 code=0x7ffc0000 [ 856.039695][ T27] audit: type=1326 audit(1759266677.388:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16467 comm="syz.0.3877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f2c18eec9 code=0x7ffc0000 [ 856.107101][ T27] audit: type=1326 audit(1759266677.398:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16467 comm="syz.0.3877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f2c18eec9 code=0x7ffc0000 [ 856.175193][ T27] audit: type=1326 audit(1759266677.398:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16467 comm="syz.0.3877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f5f2c18eec9 code=0x7ffc0000 [ 856.562312][T16493] device vlan0 entered promiscuous mode [ 856.951066][T16507] Bluetooth: (null): Invalid header checksum [ 858.393540][T16541] lo speed is unknown, defaulting to 1000 [ 858.646111][ T4280] Bluetooth: hci1: command 0x0406 tx timeout [ 860.425778][ T6079] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 860.617781][ T6079] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 860.645808][ T6079] usb 1-1: config 0 has no interfaces? [ 860.665749][ T6079] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 860.695829][ T6079] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 860.735233][ T6079] usb 1-1: config 0 descriptor?? [ 860.955856][ T6079] usb 1-1: USB disconnect, device number 8 [ 862.128370][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802ee9a800: rx timeout, send abort [ 862.226068][ T4338] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 862.400430][T16621] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 862.416036][ T4338] usb 1-1: Using ep0 maxpacket: 8 [ 862.426918][ T4338] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 862.448307][ T4338] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 862.476852][ T4338] usb 1-1: config 0 descriptor?? [ 862.510906][T16621] 8021q: adding VLAN 0 to HW filter on device team0 [ 862.521776][T16621] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 862.636688][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802ee9a800: abort rx timeout. Force session deactivation [ 862.707578][ T4338] asix 1-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 863.051643][T16629] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 863.091484][ T6079] lo speed is unknown, defaulting to 1000 [ 864.505986][ T6050] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 864.567030][ T4338] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x8001: -71 [ 864.593937][ T4338] asix: probe of 1-1:0.0 failed with error -71 [ 864.630660][ T4338] usb 1-1: USB disconnect, device number 9 [ 864.742979][ T6050] usb 9-1: Using ep0 maxpacket: 8 [ 864.768191][ T6050] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 864.802544][ T6050] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 864.836015][ T6050] usb 9-1: config 0 has no interface number 0 [ 864.844868][ T6050] usb 9-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 864.863658][ T6050] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 864.882317][ T6050] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 864.893866][ T6050] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 864.915180][ T6050] usb 9-1: config 0 descriptor?? [ 864.935095][ T6050] ldusb 9-1:0.55: Interrupt in endpoint not found [ 865.685966][T16684] bond0: (slave dummy0): Releasing backup interface [ 865.779309][T16684] batman_adv: batadv0: Adding interface: dummy0 [ 865.808038][T16684] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 865.923949][T16684] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 867.390618][T16714] device vlan0 entered promiscuous mode [ 867.606462][T16722] netlink: 'syz.0.4087': attribute type 4 has an invalid length. [ 867.714588][ T6053] usb 9-1: USB disconnect, device number 6 [ 867.822351][T16721] lo speed is unknown, defaulting to 1000 [ 870.936982][T16766] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4102'. [ 870.953340][T16766] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4102'. [ 871.790584][T16778] kvm: pic: non byte write [ 872.470645][T16793] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4111'. [ 872.574774][T16797] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4114'. [ 872.855058][T16802] lo speed is unknown, defaulting to 1000 [ 874.585833][ T6079] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 874.614456][T16851] lo speed is unknown, defaulting to 1000 [ 874.775977][ T6079] usb 1-1: Using ep0 maxpacket: 8 [ 874.784496][ T6079] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 874.803610][ T6079] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 874.830152][ T6079] usb 1-1: config 0 has no interface number 0 [ 874.877649][ T6079] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 874.959388][ T6079] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 875.009011][ T6079] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 875.070306][ T6079] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 875.139961][ T6079] usb 1-1: config 0 descriptor?? [ 875.216859][ T6079] ldusb 1-1:0.55: Interrupt in endpoint not found [ 876.162910][T16874] 9pnet_fd: Insufficient options for proto=fd [ 877.049072][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 877.700763][ T4338] usb 1-1: USB disconnect, device number 10 [ 877.812240][T16903] syz.6.4167[16903] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 877.812408][T16903] syz.6.4167[16903] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 877.923468][T16909] lo speed is unknown, defaulting to 1000 [ 878.054615][T16919] overlayfs: failed to clone upperpath [ 878.133613][T16913] lo speed is unknown, defaulting to 1000 [ 880.157447][T16959] lo speed is unknown, defaulting to 1000 [ 880.862850][T16971] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 883.152823][T17002] lo speed is unknown, defaulting to 1000 [ 884.492947][T17031] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4199'. [ 885.299023][T17033] lo speed is unknown, defaulting to 1000 [ 887.325246][T17095] netlink: 'syz.0.4228': attribute type 39 has an invalid length. [ 888.228291][T17111] netlink: 'syz.0.4234': attribute type 4 has an invalid length. [ 891.060466][T17175] netlink: 'syz.5.4256': attribute type 10 has an invalid length. [ 891.071638][T17179] overlayfs: failed to clone upperpath [ 891.093305][T17175] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 891.111179][T17175] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 894.979949][T17270] device batadv_slave_0 entered promiscuous mode [ 895.015576][T17270] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 895.208340][T17270] device batadv_slave_0 left promiscuous mode [ 895.235156][T17270] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 897.516330][T17317] netlink: 156 bytes leftover after parsing attributes in process `syz.9.4312'. [ 897.551681][T17317] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4312'. [ 897.776991][T17320] ptrace attach of "./syz-executor exec"[14326] was attempted by " [ 898.563102][T17335] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4320'. [ 899.021978][T17338] bridge1: port 1(veth5) entered blocking state [ 899.040112][T17338] bridge1: port 1(veth5) entered disabled state [ 899.057503][T17338] device veth5 entered promiscuous mode [ 899.064553][T17338] bridge1: port 1(veth5) entered blocking state [ 899.071134][T17338] bridge1: port 1(veth5) entered forwarding state [ 899.099612][T10510] bridge1: port 1(veth5) entered disabled state [ 899.666108][T17355] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4325'. [ 899.705894][T17355] netlink: 3 bytes leftover after parsing attributes in process `syz.5.4325'. [ 901.341006][T17384] xt_connbytes: Forcing CT accounting to be enabled [ 901.348440][T17384] Cannot find set identified by id 0 to match [ 901.436680][T17386] batman_adv: batadv0: Adding interface: dummy0 [ 901.454683][T17386] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 901.481338][T17386] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 901.507479][T17386] netlink: 'syz.6.4335': attribute type 10 has an invalid length. [ 901.526637][T17386] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 901.536072][T17386] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 901.551389][T17390] lo speed is unknown, defaulting to 1000 [ 901.557194][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 901.587057][T17392] tipc: Started in network mode [ 901.592140][T17392] tipc: Node identity aaaaaaaaaa34, cluster identity 4711 [ 901.604172][T17392] tipc: Enabled bearer , priority 10 [ 901.614067][T17388] lo speed is unknown, defaulting to 1000 [ 902.877630][ T6050] tipc: Node number set to 10398378 [ 904.806264][ T4279] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 904.816426][ T4279] Bluetooth: hci1: Injecting HCI hardware error event [ 904.830612][ T4279] Bluetooth: hci1: hardware error 0x00 [ 905.662152][T17447] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4358'. [ 906.481535][T17469] netlink: 'syz.9.4366': attribute type 1 has an invalid length. [ 906.538992][T17469] 8021q: adding VLAN 0 to HW filter on device bond3 [ 906.636632][T17473] bond3: (slave vlan2): Opening slave failed [ 906.966114][ T4279] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 907.071659][ T27] kauditd_printk_skb: 15 callbacks suppressed [ 907.071678][ T27] audit: type=1326 audit(1759266984.852:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17484 comm="syz.9.4371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149d78eec9 code=0x7ffc0000 [ 907.189113][ T27] audit: type=1326 audit(1759266984.852:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17484 comm="syz.9.4371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149d78eec9 code=0x7ffc0000 [ 907.212043][T17490] batman_adv: batadv0: Adding interface: dummy0 [ 907.248826][T17490] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 907.294434][ T27] audit: type=1326 audit(1759266984.892:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17484 comm="syz.9.4371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7f149d78eec9 code=0x7ffc0000 [ 907.358838][T17490] batman_adv: batadv0: Interface activated: dummy0 [ 907.374600][ T27] audit: type=1326 audit(1759266984.892:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17484 comm="syz.9.4371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149d78eec9 code=0x7ffc0000 [ 907.436513][T17495] batadv0: mtu less than device minimum [ 907.443947][T17495] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 907.457654][T17495] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 907.470281][T17495] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 907.482738][T17495] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 907.495163][T17495] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 907.507788][T17495] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 907.520490][T17495] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 907.533091][T17495] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 907.545725][T17495] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 907.597328][ T27] audit: type=1326 audit(1759266984.892:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17484 comm="syz.9.4371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149d78eec9 code=0x7ffc0000 [ 907.670859][T17490] netlink: 'syz.0.4373': attribute type 10 has an invalid length. [ 907.761924][T17490] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 907.807399][T17490] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 908.417384][T17514] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 908.457230][T17514] bridge0: port 2(bridge_slave_1) entered disabled state [ 908.465094][T17514] bridge0: port 1(bridge_slave_0) entered disabled state [ 908.833138][T17520] lo speed is unknown, defaulting to 1000 [ 911.195869][T17543] bond0: (slave dummy0): Releasing backup interface [ 911.688169][T17543] batman_adv: batadv0: Adding interface: dummy0 [ 911.716656][T17543] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 911.782427][T17543] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 911.825504][T17549] netlink: 'syz.9.4392': attribute type 10 has an invalid length. [ 911.847373][T17549] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 911.878934][T17549] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 912.741709][T17556] MPTCP: kernel_bind error, err=-99 [ 913.414807][T17571] lo speed is unknown, defaulting to 1000 [ 914.082456][T17598] batman_adv: batadv0: Adding interface: dummy0 [ 914.107407][T17598] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 914.160800][T17598] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 914.249369][T17598] netlink: 'syz.8.4413': attribute type 10 has an invalid length. [ 914.373663][T17598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 914.418020][T17598] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 914.483895][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 914.604801][T17609] netlink: 'syz.5.4418': attribute type 4 has an invalid length. [ 914.651136][T17609] netlink: 'syz.5.4418': attribute type 4 has an invalid length. [ 915.228850][T17620] lo speed is unknown, defaulting to 1000 [ 915.313212][T17622] tipc: Enabled bearer , priority 10 [ 916.374782][T17628] tipc: Failed to remove unknown binding: 66,1,1/10398378:961412445/961412447 [ 916.517968][T17637] netlink: 'syz.0.4428': attribute type 4 has an invalid length. [ 916.527986][T17637] netlink: 'syz.0.4428': attribute type 4 has an invalid length. [ 916.653027][T17641] netlink: 'syz.9.4430': attribute type 10 has an invalid length. [ 917.650536][T17652] overlayfs: failed to clone upperpath [ 918.828674][T17673] tipc: Failed to remove unknown binding: 66,1,1/2269475888:86360489/86360491 [ 919.135498][T17682] tipc: Failed to remove unknown binding: 66,1,1/2886997007:3466863871/3466863873 [ 919.224144][T17686] netlink: 'syz.8.4441': attribute type 1 has an invalid length. [ 919.329028][T17686] 8021q: adding VLAN 0 to HW filter on device bond1 [ 919.390554][T17688] bond1: (slave vlan4): making interface the new active one [ 919.415098][T17688] bond1: (slave vlan4): Enslaving as an active interface with an up link [ 919.424920][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 920.333252][T17703] tipc: Enabling of bearer rejected, already enabled [ 920.399877][T17703] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4448'. [ 920.426129][T17703] tipc: Disabling bearer [ 920.579101][T17708] lo speed is unknown, defaulting to 1000 [ 920.822995][T17716] overlayfs: failed to clone upperpath [ 920.846962][T17719] netlink: 'syz.5.4456': attribute type 1 has an invalid length. [ 920.996106][T17719] 8021q: adding VLAN 0 to HW filter on device bond2 [ 921.077710][T17723] bond2: (slave vlan4): Opening slave failed [ 922.446771][T17742] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4463'. [ 922.914729][T17758] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4470'. [ 923.174691][T17764] netlink: 'syz.0.4473': attribute type 1 has an invalid length. [ 923.252039][T17764] 8021q: adding VLAN 0 to HW filter on device bond1 [ 923.418539][T17769] bond1: (slave vlan2): making interface the new active one [ 923.464924][T17769] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 923.500645][ T8760] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 924.801990][T17789] lo speed is unknown, defaulting to 1000 [ 925.745413][T17812] netlink: 'syz.6.4489': attribute type 1 has an invalid length. [ 925.826394][T17812] 8021q: adding VLAN 0 to HW filter on device bond1 [ 925.943067][T17815] bond1: (slave vlan2): Opening slave failed [ 926.715873][T17834] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4499'. [ 926.807850][T17834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 926.825840][T17834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 926.856761][T17834] bridge1: port 1(vlan3) entered blocking state [ 926.873518][T17834] bridge1: port 1(vlan3) entered disabled state [ 926.885085][T17834] device vlan3 entered promiscuous mode [ 926.902620][T17834] device dummy0 entered promiscuous mode [ 927.841980][T17857] netlink: 'syz.8.4507': attribute type 1 has an invalid length. [ 928.113756][T17859] 8021q: adding VLAN 0 to HW filter on device bond3 [ 928.169534][T17859] bond2: (slave bond3): making interface the new active one [ 928.245528][T17859] bond2: (slave bond3): Enslaving as an active interface with an up link [ 928.295113][T17860] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 928.366388][T17860] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 928.449403][T17864] tipc: Enabling of bearer rejected, already enabled [ 930.077943][ T27] audit: type=1326 audit(1759267519.866:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17894 comm="syz.5.4521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff20c58eec9 code=0x7ffc0000 [ 930.111928][ T27] audit: type=1326 audit(1759267519.866:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17894 comm="syz.5.4521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff20c58eec9 code=0x7ffc0000 [ 930.143120][ T27] audit: type=1326 audit(1759267519.896:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17894 comm="syz.5.4521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7ff20c58eec9 code=0x7ffc0000 [ 930.179193][ T27] audit: type=1326 audit(1759267519.896:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17894 comm="syz.5.4521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff20c58eec9 code=0x7ffc0000 [ 930.224368][ T27] audit: type=1326 audit(1759267519.896:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17894 comm="syz.5.4521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff20c58eec9 code=0x7ffc0000 [ 930.319686][ T27] audit: type=1326 audit(1759267519.896:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17894 comm="syz.5.4521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff20c58eec9 code=0x7ffc0000 [ 930.354204][ T27] audit: type=1326 audit(1759267519.896:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17894 comm="syz.5.4521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff20c58eec9 code=0x7ffc0000 [ 930.495903][ T27] audit: type=1326 audit(1759267519.896:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17894 comm="syz.5.4521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff20c58eec9 code=0x7ffc0000 [ 930.585789][ T27] audit: type=1326 audit(1759267519.896:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17894 comm="syz.5.4521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7ff20c58eec9 code=0x7ffc0000 [ 930.627653][ T27] audit: type=1326 audit(1759267519.896:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17894 comm="syz.5.4521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff20c58eec9 code=0x7ffc0000 [ 930.780108][T17906] netlink: 'syz.9.4525': attribute type 10 has an invalid length. [ 930.812858][T17906] netlink: 40 bytes leftover after parsing attributes in process `syz.9.4525'. [ 930.856917][T17906] batman_adv: batadv0: Adding interface: virt_wifi0 [ 930.877324][T17906] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560. [ 930.937106][T17906] batman_adv: batadv0: Interface activated: virt_wifi0 [ 931.213613][T17924] lo speed is unknown, defaulting to 1000 [ 932.607969][T17953] net_ratelimit: 13 callbacks suppressed [ 932.608050][T17953] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 932.622206][T17953] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 933.884860][T17956] netlink: 14 bytes leftover after parsing attributes in process `syz.8.4545'. [ 933.918573][T17956] device hsr_slave_0 left promiscuous mode [ 935.178589][T17979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 935.206198][T17979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 935.436983][ T27] kauditd_printk_skb: 12 callbacks suppressed [ 935.437002][ T27] audit: type=1326 audit(1759267525.226:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17985 comm="syz.8.4556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b8758eec9 code=0x7fc00000 [ 935.497010][ T27] audit: type=1326 audit(1759267525.286:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17985 comm="syz.8.4556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b8758eec9 code=0x7fc00000 [ 935.556944][ T27] audit: type=1326 audit(1759267525.346:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17985 comm="syz.8.4556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b8758eec9 code=0x7fc00000 [ 935.620695][ T27] audit: type=1326 audit(1759267525.406:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17985 comm="syz.8.4556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b8758eec9 code=0x7fc00000 [ 935.633816][T17992] netlink: 'syz.5.4559': attribute type 4 has an invalid length. [ 935.696010][ T27] audit: type=1326 audit(1759267525.466:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17985 comm="syz.8.4556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b8758eec9 code=0x7fc00000 [ 935.745861][ T27] audit: type=1326 audit(1759267525.526:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17985 comm="syz.8.4556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b8758eec9 code=0x7fc00000 [ 935.810550][ T27] audit: type=1326 audit(1759267525.586:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17985 comm="syz.8.4556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b8758eec9 code=0x7fc00000 [ 935.885967][ T27] audit: type=1326 audit(1759267525.646:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17985 comm="syz.8.4556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b8758eec9 code=0x7fc00000 [ 935.957729][ T27] audit: type=1326 audit(1759267525.706:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17985 comm="syz.8.4556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b8758eec9 code=0x7fc00000 [ 936.036985][ T27] audit: type=1326 audit(1759267525.776:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17985 comm="syz.8.4556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b8758eec9 code=0x7fc00000 [ 936.397430][T18010] overlayfs: failed to clone upperpath [ 936.692884][T18023] device vlan2 entered promiscuous mode [ 938.143994][T18064] lo speed is unknown, defaulting to 1000 [ 938.488689][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 938.888400][T18093] netlink: 'syz.5.4599': attribute type 10 has an invalid length. [ 938.909852][T18093] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4599'. [ 938.959182][T18093] batman_adv: batadv0: Adding interface: virt_wifi0 [ 939.006054][T18093] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560. [ 939.100193][T18093] batman_adv: batadv0: Interface activated: virt_wifi0 [ 940.030321][T18119] overlayfs: unrecognized mount option "\']*=°¢°©æ[\1\" or missing value [ 940.724303][T18132] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4612'. [ 941.343745][T18158] overlayfs: failed to clone upperpath [ 941.603929][T18162] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4622'. [ 941.632457][T18162] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4622'. [ 941.845044][T18165] netlink: 168864 bytes leftover after parsing attributes in process `syz.5.4627'. [ 941.883533][T18165] netlink: zone id is out of range [ 941.900694][T18165] netlink: zone id is out of range [ 941.929420][T18165] netlink: zone id is out of range [ 941.934687][T18165] netlink: zone id is out of range [ 941.948319][T18165] netlink: zone id is out of range [ 941.973639][T18165] netlink: zone id is out of range [ 941.979828][T18165] netlink: zone id is out of range [ 941.995747][T18165] netlink: zone id is out of range [ 942.011262][T18165] netlink: zone id is out of range [ 942.025762][T18165] netlink: zone id is out of range [ 943.654556][T18203] overlayfs: failed to clone upperpath [ 944.970057][T18223] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4643'. [ 945.348386][T18230] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4647'. [ 946.153302][T18248] lo speed is unknown, defaulting to 1000 [ 946.703488][T18257] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4656'. [ 947.227861][T18268] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4660'. [ 947.823428][T18280] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4667'. [ 947.833634][T18280] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4667'. [ 947.843223][T18280] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4667'. [ 947.853056][T18280] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4667'. [ 947.862749][T18280] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4667'. [ 948.952192][T18302] overlayfs: failed to clone upperpath [ 949.464015][T18315] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4677'. [ 951.223743][T18332] lo speed is unknown, defaulting to 1000 [ 951.339073][T18337] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4685'. [ 951.405041][T18337] device bridge_slave_1 left promiscuous mode [ 951.425948][T18337] bridge0: port 2(bridge_slave_1) entered disabled state [ 953.998006][T18372] overlayfs: failed to clone upperpath [ 954.212265][T18382] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4701'. [ 954.370431][T18386] netlink: 'syz.6.4702': attribute type 1 has an invalid length. [ 954.417807][T18386] 8021q: adding VLAN 0 to HW filter on device bond2 [ 954.539298][T18387] bond2: (slave gretap1): making interface the new active one [ 954.558387][T18387] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 954.568118][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 954.610592][T18387] syz.6.4702 (18387) used greatest stack depth: 18120 bytes left [ 954.875365][T18392] netlink: 'syz.6.4704': attribute type 13 has an invalid length. [ 954.933280][T18392] netlink: 'syz.6.4704': attribute type 17 has an invalid length. [ 954.967979][T18392] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 955.011143][T18392] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 955.400387][T18392] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 955.759092][T18392] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 955.973731][T18392] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 955.997732][T18392] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 956.061157][T18392] 8021q: adding VLAN 0 to HW filter on device team0 [ 956.142293][T18392] batman_adv: batadv0: Interface activated: dummy0 [ 956.161792][T18392] net_ratelimit: 21 callbacks suppressed [ 956.161814][T18392] batadv0: mtu less than device minimum [ 956.192688][T18392] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 956.205485][T18392] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 956.218522][T18392] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 956.231096][T18392] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 956.242912][T18392] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 956.255353][T18392] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 956.267540][T18392] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 956.280427][T18392] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 956.292324][T18392] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 956.335206][T18392] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 956.347485][T18392] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 956.629405][T18414] overlayfs: failed to clone upperpath [ 960.473749][T18472] 9pnet_fd: Insufficient options for proto=fd [ 960.840919][T18480] lo speed is unknown, defaulting to 1000 [ 964.601043][T18531] lo speed is unknown, defaulting to 1000 [ 965.361008][T18554] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4758'. [ 965.374197][T18554] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4758'. [ 965.384140][T18554] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4758'. [ 965.394181][T18554] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4758'. [ 965.885880][T18558] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4761'. [ 965.939933][T18558] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 966.106321][T18565] netlink: 'syz.6.4762': attribute type 1 has an invalid length. [ 966.166115][ T4279] Bluetooth: hci3: command 0x0406 tx timeout [ 966.207127][T18558] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4761'. [ 969.024355][T18600] "syz.6.4773" (18600) uses obsolete ecb(arc4) skcipher [ 969.156156][T18604] capability: warning: `syz.9.4786' uses 32-bit capabilities (legacy support in use) [ 970.758001][T18623] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4779'. [ 970.837783][T18623] device bridge_slave_1 left promiscuous mode [ 971.014104][T18623] bridge0: port 2(bridge_slave_1) entered disabled state [ 971.753195][T18623] device bridge_slave_0 left promiscuous mode [ 971.776151][T18623] bridge0: port 1(bridge_slave_0) entered disabled state [ 973.450853][T18655] xt_CT: You must specify a L4 protocol and not use inversions on it [ 976.708109][T18684] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4802'. [ 976.931404][T18684] bridge3: port 1(vlan0) entered disabled state [ 977.639650][ T27] kauditd_printk_skb: 39 callbacks suppressed [ 977.639669][ T27] audit: type=1326 audit(1759267567.426:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18701 comm="syz.6.4809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd17e98eec9 code=0x7ffc0000 [ 977.705134][ T27] audit: type=1326 audit(1759267567.466:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18701 comm="syz.6.4809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd17e98eec9 code=0x7ffc0000 [ 977.765918][ T27] audit: type=1326 audit(1759267567.466:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18701 comm="syz.6.4809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fd17e98eec9 code=0x7ffc0000 [ 977.829604][ T27] audit: type=1326 audit(1759267567.466:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18701 comm="syz.6.4809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd17e98eec9 code=0x7ffc0000 [ 977.908754][ T27] audit: type=1326 audit(1759267567.466:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18701 comm="syz.6.4809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd17e98eec9 code=0x7ffc0000 [ 977.952430][ T27] audit: type=1326 audit(1759267567.466:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18701 comm="syz.6.4809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fd17e98eec9 code=0x7ffc0000 [ 977.994855][ T27] audit: type=1326 audit(1759267567.466:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18701 comm="syz.6.4809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd17e98eec9 code=0x7ffc0000 [ 978.050287][ T27] audit: type=1326 audit(1759267567.476:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18701 comm="syz.6.4809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd17e98eec9 code=0x7ffc0000 [ 978.107906][ T27] audit: type=1326 audit(1759267567.476:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18701 comm="syz.6.4809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd17e98eec9 code=0x7ffc0000 [ 978.161069][ T27] audit: type=1326 audit(1759267567.476:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18701 comm="syz.6.4809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd17e98eec9 code=0x7ffc0000 [ 978.307847][T18683] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4801'. [ 979.688279][T18721] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 979.718901][T18721] batman_adv: batadv0: Interface deactivated: dummy0 [ 979.755230][T18721] batman_adv: batadv0: Removing interface: dummy0 [ 979.939581][T18721] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 981.508019][T18721] bond0: (slave batadv0): Releasing backup interface [ 981.606342][T18721] device bridge_slave_0 left promiscuous mode [ 981.612777][T18721] bridge0: port 1(bridge_slave_0) entered disabled state [ 981.683287][T18721] bond0: (slave bond_slave_0): Releasing backup interface [ 981.749138][T18721] bond0: (slave bond_slave_1): Releasing backup interface [ 982.007771][T18721] team0: Port device team_slave_0 removed [ 982.076336][T18721] team0: Port device team_slave_1 removed [ 982.094477][T18721] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 982.110423][T18721] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 982.122849][T18721] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 982.141703][T18721] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 982.174939][T18721] bond1: (slave vlan2): Releasing active interface [ 982.262998][T18721] device vlan3 left promiscuous mode [ 982.288562][T18721] device dummy0 left promiscuous mode [ 982.303549][T18721] bridge1: port 1(vlan3) entered disabled state [ 982.338465][T18725] team0: Mode changed to "activebackup" [ 982.514533][T18743] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4822'. [ 983.350440][T18766] 8021q: adding VLAN 0 to HW filter on device bond4 [ 983.424286][T18771] bond4: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 983.468820][ T8816] net_ratelimit: 11 callbacks suppressed [ 983.468843][ T8816] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 983.491526][ T8785] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready [ 983.661437][ T4576] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 984.363734][T18805] overlayfs: failed to clone upperpath [ 985.206272][ C0] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:1a [ 987.130738][T18851] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4858'. [ 988.918371][T18877] tipc: Failed to remove unknown binding: 66,1,1/2886997007:3569343224/3569343226 [ 988.955752][T18877] tipc: Failed to remove unknown binding: 66,1,1/2886997007:3569343224/3569343226 [ 990.523652][ T27] kauditd_printk_skb: 16 callbacks suppressed [ 990.523671][ T27] audit: type=1326 audit(1759267580.306:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18921 comm="syz.5.4886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff20c58eec9 code=0x7ffc0000 [ 990.613329][ T27] audit: type=1326 audit(1759267580.346:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18921 comm="syz.5.4886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff20c58eec9 code=0x7ffc0000 [ 990.672620][ T27] audit: type=1326 audit(1759267580.356:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18921 comm="syz.5.4886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff20c58eec9 code=0x7ffc0000 [ 990.785422][ T27] audit: type=1326 audit(1759267580.356:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18921 comm="syz.5.4886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff20c58eec9 code=0x7ffc0000 [ 991.026166][ T27] audit: type=1326 audit(1759267580.356:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18921 comm="syz.5.4886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff20c58eec9 code=0x7ffc0000 [ 991.050678][ T27] audit: type=1326 audit(1759267580.356:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18921 comm="syz.5.4886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff20c58eec9 code=0x7ffc0000 [ 991.087910][ T27] audit: type=1326 audit(1759267580.356:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18921 comm="syz.5.4886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff20c58eec9 code=0x7ffc0000 [ 991.113805][ T27] audit: type=1326 audit(1759267580.356:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18921 comm="syz.5.4886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff20c58eec9 code=0x7ffc0000 [ 991.848075][ T27] audit: type=1326 audit(1759267580.356:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18921 comm="syz.5.4886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff20c58eec9 code=0x7ffc0000 [ 991.977522][ T27] audit: type=1326 audit(1759267580.356:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18921 comm="syz.5.4886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff20c58eec9 code=0x7ffc0000 [ 992.681257][T18958] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 993.023055][T18958] team0: Failed to send options change via netlink (err -105) [ 993.053459][T18958] team0: Failed to send port change of device bond0 via netlink (err -105) [ 993.083958][T18958] team0: Port device bond0 removed [ 993.110453][T18958] batman_adv: batadv0: Removing interface: dummy0 [ 993.153219][T18958] bond0: (slave batadv0): Releasing backup interface [ 993.183462][T18958] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 993.219952][T18958] batman_adv: batadv0: Removing interface: virt_wifi0 [ 993.272355][T18958] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 993.308842][T18958] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 993.343867][T18958] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 993.394444][T18958] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 993.442588][T18958] team0: Failed to send options change via netlink (err -105) [ 993.479219][T18958] team0: Failed to send port change of device geneve0 via netlink (err -105) [ 993.507782][T18958] team0: Port device geneve0 removed [ 993.524417][T18958] IPv6: ADDRCONF(NETDEV_CHANGE): gre2: link becomes ready [ 993.558104][T18960] team0: Failed to send options change via netlink (err -105) [ 993.674390][T18960] team0: Failed to send options change via netlink (err -105) [ 993.764992][T18960] team0: Mode changed to "activebackup" [ 993.789679][T18959] netlink: 'syz.0.4898': attribute type 10 has an invalid length. [ 995.883563][T19016] ptrace attach of "./syz-executor exec"[8311] was attempted by "./syz-executor exec"[19016] [ 999.373431][T19056] netlink: 165 bytes leftover after parsing attributes in process `syz.9.4927'. [ 999.384317][T19056] netlink: 277 bytes leftover after parsing attributes in process `syz.9.4927'. [ 1000.056214][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1001.073492][T19092] overlayfs: failed to clone upperpath [ 1002.203562][T19125] netlink: 'syz.0.4955': attribute type 29 has an invalid length. [ 1002.211910][T19125] netlink: 'syz.0.4955': attribute type 3 has an invalid length. [ 1002.220176][T19125] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4955'. [ 1004.946529][T19171] netlink: 'syz.5.4971': attribute type 10 has an invalid length. [ 1006.372875][T19193] netlink: 'syz.6.4978': attribute type 1 has an invalid length. [ 1006.431273][T19193] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1006.479763][T19196] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4978'. [ 1009.128577][T19196] bond3 (unregistering): Released all slaves [ 1009.253037][T19233] netlink: 'syz.8.4991': attribute type 13 has an invalid length. [ 1009.266305][T19233] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4991'. [ 1009.941813][T19247] netlink: 'syz.5.4996': attribute type 1 has an invalid length. [ 1009.974805][T19247] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1009.983436][T19243] lo speed is unknown, defaulting to 1000 [ 1010.072393][T19247] bond3: (slave gretap2): making interface the new active one [ 1010.118298][T19247] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 1010.135992][T19229] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 1010.766112][T19266] SET target dimension over the limit! [ 1011.943773][T19278] team0: Failed to send options change via netlink (err -105) [ 1011.960697][T19278] team0: Failed to send port change of device bond0 via netlink (err -105) [ 1012.015000][T19278] team0: Port device bond0 removed [ 1012.052051][T19278] batman_adv: batadv0: Removing interface: dummy0 [ 1012.111453][T19278] bond0: (slave batadv0): Releasing backup interface [ 1012.159704][T19278] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1012.192809][T19278] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1012.304827][T19278] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 1012.353617][T19278] bond1: (slave vlan4): Releasing active interface [ 1012.439346][T19278] bond2: (slave bond3): Releasing backup interface [ 1012.485189][T19278] bond4: (slave ip6gretap1): Removing an active aggregator [ 1012.516797][ T8756] bond4: Warning: Found an uninitialized port [ 1012.543730][T19278] bond4: (slave ip6gretap1): Releasing backup interface [ 1012.612115][T19279] team0: Failed to send options change via netlink (err -105) [ 1012.700234][T19279] team0: Failed to send options change via netlink (err -105) [ 1012.739312][T19279] team0: Mode changed to "activebackup" [ 1012.797294][T19285] netlink: 'syz.9.5007': attribute type 4 has an invalid length. [ 1012.839825][T19287] netlink: 'syz.9.5007': attribute type 4 has an invalid length. [ 1014.015119][T19308] lo speed is unknown, defaulting to 1000 [ 1014.512175][T19332] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5020'. [ 1014.620921][T19335] bridge0: port 1(veth0_to_bond) entered blocking state [ 1014.654730][T19335] bridge0: port 1(veth0_to_bond) entered disabled state [ 1014.676600][T19335] device veth0_to_bond entered promiscuous mode [ 1014.918253][T19342] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5021'. [ 1015.019678][T19343] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5021'. [ 1015.642426][T19350] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1015.732875][T19350] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 1016.043561][T19350] team0: Failed to send options change via netlink (err -105) [ 1016.069765][T19350] team0: Failed to send port change of device bond0 via netlink (err -105) [ 1016.101509][T19350] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: be:b5:fe:56:7f:8c [ 1016.165112][T19350] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: be:b5:fe:56:7f:8c [ 1016.204716][T19350] team0: Port device bond0 removed [ 1016.224122][T19350] batman_adv: batadv0: Interface deactivated: dummy0 [ 1016.244603][T19350] batman_adv: batadv0: Removing interface: dummy0 [ 1016.344411][T19350] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 1016.370094][T19350] bond0: (slave batadv0): Releasing backup interface [ 1016.407471][T19350] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 1016.429158][T19350] IPv6: ADDRCONF(NETDEV_CHANGE): gre2: link becomes ready [ 1016.517746][T19350] bond2: (slave gretap1): Releasing active interface [ 1016.709661][T19352] team0: Mode changed to "activebackup" [ 1017.073746][T19358] tipc: Disabling bearer [ 1018.036266][T19376] netlink: 'syz.6.5034': attribute type 29 has an invalid length. [ 1018.044432][T19376] netlink: 'syz.6.5034': attribute type 3 has an invalid length. [ 1018.052418][T19376] netlink: 76 bytes leftover after parsing attributes in process `syz.6.5034'. [ 1019.194806][T19385] sock: sock_set_timeout: `syz.8.5046' (pid 19385) tries to set negative timeout [ 1020.174184][T19390] lo speed is unknown, defaulting to 1000 [ 1023.107839][T19408] xt_CT: No such helper "pptp" [ 1023.576367][T19419] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5047'. [ 1023.813423][T19429] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 1023.813423][T19429] The task syz.9.5050 (19429) triggered the difference, watch for misbehavior. [ 1024.351439][T19438] tipc: Started in network mode [ 1024.363448][T19438] tipc: Node identity 4, cluster identity 4711 [ 1024.382877][T19438] tipc: Node number set to 4 [ 1026.831092][T19470] IPv6: sit1: Disabled Multicast RS [ 1026.869446][T19465] lo speed is unknown, defaulting to 1000 [ 1027.255911][T19476] device lo left promiscuous mode [ 1027.306618][T19476] device sit0 left promiscuous mode [ 1027.378373][T19476] device team_slave_1 left promiscuous mode [ 1027.406004][T19476] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 1027.610373][T19476] device vlan0 left promiscuous mode [ 1027.637365][T19476] device vlan2 left promiscuous mode [ 1027.643946][T19476] device hsr_slave_1 left promiscuous mode [ 1027.875491][T19479] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5066'. [ 1030.621602][T19514] lo speed is unknown, defaulting to 1000 [ 1031.147499][T19534] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap0 [ 1031.170254][T19534] device macsec1 entered promiscuous mode [ 1031.197555][T19534] device ip6gretap0 entered promiscuous mode [ 1031.243144][T19534] device ip6gretap0 left promiscuous mode [ 1032.288013][T19548] lo speed is unknown, defaulting to 1000 [ 1033.844391][T19554] netlink: 36 bytes leftover after parsing attributes in process `syz.8.5095'. [ 1033.878776][T19556] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5095'. [ 1035.459267][T19569] lo speed is unknown, defaulting to 1000 [ 1035.909405][T19584] netlink: 'syz.9.5105': attribute type 10 has an invalid length. [ 1035.935823][T19584] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1039.931255][T19633] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5114'. [ 1041.803148][T19657] netlink: 180 bytes leftover after parsing attributes in process `syz.0.5122'. [ 1041.950648][T19662] netlink: 180 bytes leftover after parsing attributes in process `syz.0.5122'. [ 1043.564065][T19666] lo speed is unknown, defaulting to 1000 [ 1046.092342][T19702] netlink: 1347 bytes leftover after parsing attributes in process `syz.8.5139'. [ 1047.821681][T19730] syz.9.5151[19730] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1047.821799][T19730] syz.9.5151[19730] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1047.863742][T19730] netlink: 40 bytes leftover after parsing attributes in process `syz.9.5151'. [ 1047.972217][T19747] lo speed is unknown, defaulting to 1000 [ 1048.145756][T19750] bridge: RTM_NEWNEIGH with invalid ether address [ 1048.284253][T19756] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5158'. [ 1051.752350][T19802] netlink: 'syz.8.5169': attribute type 1 has an invalid length. [ 1051.828560][T19802] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1051.924068][T19807] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5169'. [ 1052.263751][T19799] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5168'. [ 1052.794416][ T6079] Process accounting resumed [ 1054.560737][T19850] overlayfs: failed to clone upperpath [ 1061.416373][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1062.345405][T19909] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5194'. [ 1062.437743][T19909] IPv6: ADDRCONF(NETDEV_CHANGE): gre3: link becomes ready [ 1062.703143][T19909] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5194'. [ 1062.871159][T19925] netlink: 1347 bytes leftover after parsing attributes in process `syz.0.5201'. [ 1063.860657][T19955] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5209'. [ 1064.602512][T19969] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1064.675079][T19975] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1064.808861][T19975] bond4: (slave macvlan2): making interface the new active one [ 1064.882913][T19975] bond4: (slave macvlan2): Enslaving as an active interface with an up link [ 1064.936305][ T8756] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready [ 1064.993670][T19984] overlayfs: failed to clone upperpath [ 1068.314697][T20023] netlink: 'syz.5.5234': attribute type 1 has an invalid length. [ 1068.483103][T20023] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1068.522321][T20030] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5233'. [ 1068.550521][T20028] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5234'. [ 1068.584824][T20024] lo speed is unknown, defaulting to 1000 [ 1068.860930][T20046] overlayfs: failed to clone upperpath [ 1070.149238][T20068] netlink: 'syz.0.5248': attribute type 10 has an invalid length. [ 1070.217463][T20068] 8021q: adding VLAN 0 to HW filter on device team0 [ 1070.253942][T20068] bond0: (slave team0): Enslaving as an active interface with an up link [ 1071.694760][T20069] infiniband syz!: set down [ 1071.754462][T20069] infiniband syz!: added team_slave_0 [ 1071.777514][T20069] rdma_rxe: unable to create cq [ 1071.794267][T20069] infiniband syz!: Couldn't create ib_mad CQ [ 1071.820141][T20069] infiniband syz!: Couldn't open port 1 [ 1071.933045][T20069] RDS/IB: syz!: added [ 1071.957351][T20069] smc: adding ib device syz! with port count 1 [ 1071.984956][T20069] smc: ib device syz! port 1 has pnetid [ 1072.057978][T20096] netlink: 'syz.5.5258': attribute type 1 has an invalid length. [ 1072.274879][T20096] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1072.338674][T20099] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1072.395270][T20099] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1072.425143][T20099] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1072.465816][T20099] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1072.498619][T20099] bond5: (slave geneve2): making interface the new active one [ 1072.548258][T20099] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 1072.599843][ T8797] IPv6: ADDRCONF(NETDEV_CHANGE): bond5: link becomes ready [ 1072.640375][T20098] lo speed is unknown, defaulting to 1000 [ 1072.936954][T20114] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5263'. [ 1074.157823][T20129] netlink: 176 bytes leftover after parsing attributes in process `syz.8.5265'. [ 1075.100961][T20155] netlink: 'syz.8.5277': attribute type 10 has an invalid length. [ 1075.442029][T20146] lo speed is unknown, defaulting to 1000 [ 1076.286671][T20179] netlink: 'syz.5.5284': attribute type 12 has an invalid length. [ 1076.394317][T20183] netlink: 'syz.9.5286': attribute type 1 has an invalid length. [ 1076.442193][T20183] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1076.501587][T20186] bond5: (slave vlan0): Error -34 calling dev_set_mtu [ 1076.550892][T20181] lo speed is unknown, defaulting to 1000 [ 1076.900935][T20191] tipc: Failed to remove unknown binding: 66,1,1/4:4136924536/4136924538 [ 1076.911199][T20188] IPv6: ADDRCONF(NETDEV_CHANGE): gre2: link becomes ready [ 1076.911532][T20191] tipc: Failed to remove unknown binding: 66,1,1/4:4136924536/4136924538 [ 1076.936889][T20191] tipc: Failed to remove unknown binding: 66,1,1/4:4136924536/4136924538 [ 1080.058735][T20238] lo speed is unknown, defaulting to 1000 [ 1080.688231][T20260] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5315'. [ 1083.960008][T20287] IPv6: sit3: Disabled Multicast RS [ 1084.351124][T20302] netlink: 180 bytes leftover after parsing attributes in process `syz.8.5328'. [ 1084.463626][T20305] netlink: 180 bytes leftover after parsing attributes in process `syz.8.5328'. [ 1084.513028][T20306] netlink: 'syz.5.5331': attribute type 10 has an invalid length. [ 1084.551743][T20306] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5331'. [ 1084.695827][T20306] team0: Failed to send port change of device geneve0 via netlink (err -105) [ 1084.800208][T20306] team0: Failed to send options change via netlink (err -105) [ 1084.851536][T20306] team0: Port device geneve0 added [ 1089.219746][ T27] kauditd_printk_skb: 22 callbacks suppressed [ 1089.219764][ T27] audit: type=1326 audit(1759267679.006:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20345 comm="syz.6.5345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd17e98eec9 code=0x7ffc0000 [ 1089.346000][ T27] audit: type=1326 audit(1759267679.076:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20345 comm="syz.6.5345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd17e98eec9 code=0x7ffc0000 [ 1089.400044][ T27] audit: type=1326 audit(1759267679.096:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20345 comm="syz.6.5345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd17e98eec9 code=0x7ffc0000 [ 1089.460984][ T27] audit: type=1326 audit(1759267679.096:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20345 comm="syz.6.5345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd17e98eec9 code=0x7ffc0000 [ 1089.583269][ T27] audit: type=1326 audit(1759267679.096:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20345 comm="syz.6.5345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd17e98eec9 code=0x7ffc0000 [ 1089.656296][ T27] audit: type=1326 audit(1759267679.106:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20345 comm="syz.6.5345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fd17e98eec9 code=0x7ffc0000 [ 1089.682250][ T27] audit: type=1326 audit(1759267679.106:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20345 comm="syz.6.5345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd17e98eec9 code=0x7ffc0000 [ 1089.795805][ T27] audit: type=1326 audit(1759267679.106:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20345 comm="syz.6.5345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd17e98eec9 code=0x7ffc0000 [ 1089.866176][ T27] audit: type=1326 audit(1759267679.146:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20345 comm="syz.6.5345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd17e98eec9 code=0x7ffc0000 [ 1089.941654][ T27] audit: type=1326 audit(1759267679.146:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20345 comm="syz.6.5345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd17e98eec9 code=0x7ffc0000 [ 1091.716138][T20377] lo speed is unknown, defaulting to 1000 [ 1093.174785][T20404] lo speed is unknown, defaulting to 1000 [ 1094.011318][T20417] netlink: 'syz.5.5366': attribute type 1 has an invalid length. [ 1094.171173][T20417] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1094.203867][T20425] bond6: (slave vlan3): Error -34 calling dev_set_mtu [ 1094.592290][T20440] tipc: Failed to remove unknown binding: 66,1,1/2269475888:1053235543/1053235545 [ 1094.641237][T20440] tipc: Failed to remove unknown binding: 66,1,1/2269475888:1053235543/1053235545 [ 1094.666659][T20440] tipc: Failed to remove unknown binding: 66,1,1/2269475888:1053235543/1053235545 [ 1096.688188][T20463] lo speed is unknown, defaulting to 1000 [ 1100.698578][T20482] netlink: 'syz.8.5384': attribute type 1 has an invalid length. [ 1100.779951][T20482] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1104.694678][T20532] netlink: 'syz.0.5401': attribute type 1 has an invalid length. [ 1105.513311][T20532] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1105.611986][T20537] bond2: (slave vlan4): Opening slave failed [ 1105.659957][T20539] lo speed is unknown, defaulting to 1000 [ 1105.837641][T20552] netlink: 44 bytes leftover after parsing attributes in process `syz.8.5405'. [ 1105.875703][T20552] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5405'. [ 1105.884916][T20552] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5405'. [ 1105.949108][T20555] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5407'. [ 1106.297282][T20567] netlink: 'syz.6.5413': attribute type 1 has an invalid length. [ 1106.340463][T20567] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1106.411237][T20567] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1106.427991][T20567] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address [ 1106.440660][T20567] bond3: (slave vxcan1): Error -95 calling set_mac_address [ 1106.470313][T20573] device macvlan2 entered promiscuous mode [ 1106.478717][T20573] device bond3 entered promiscuous mode [ 1106.485284][T20573] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1106.502701][T20573] device bond3 left promiscuous mode [ 1106.799245][T20580] netlink: 104 bytes leftover after parsing attributes in process `syz.8.5417'. [ 1106.827780][ T27] kauditd_printk_skb: 21 callbacks suppressed [ 1106.827799][ T27] audit: type=1326 audit(1759267696.616:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20581 comm="syz.6.5418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd17e98eec9 code=0x7ffc0000 [ 1106.861481][T20579] ipt_CLUSTERIP: Please specify destination IP [ 1106.947121][ T27] audit: type=1326 audit(1759267696.616:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20581 comm="syz.6.5418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd17e98eec9 code=0x7ffc0000 [ 1107.047055][ T27] audit: type=1326 audit(1759267696.646:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20581 comm="syz.6.5418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fd17e98eec9 code=0x7ffc0000 [ 1107.112664][ T27] audit: type=1326 audit(1759267696.706:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20581 comm="syz.6.5418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd17e98eec9 code=0x7ffc0000 [ 1107.139982][ T27] audit: type=1326 audit(1759267696.706:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20581 comm="syz.6.5418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd17e98eec9 code=0x7ffc0000 [ 1107.174048][ T27] audit: type=1326 audit(1759267696.716:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20583 comm="syz.6.5418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd17e9c1785 code=0x7ffc0000 [ 1107.222413][ T27] audit: type=1326 audit(1759267696.786:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20581 comm="syz.6.5418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fd17e98db2a code=0x7ffc0000 [ 1107.298862][ T27] audit: type=1326 audit(1759267696.786:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20581 comm="syz.6.5418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd17e9c1785 code=0x7ffc0000 [ 1107.336794][ T27] audit: type=1326 audit(1759267696.866:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20583 comm="syz.6.5418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fd17e98eec9 code=0x7ffc0000 [ 1107.385616][ T27] audit: type=1326 audit(1759267696.986:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20581 comm="syz.6.5418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd17e98eec9 code=0x7ffc0000 [ 1107.903341][T20595] netlink: 'syz.6.5420': attribute type 1 has an invalid length. [ 1108.015400][T20595] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1108.051602][T20599] bond4: (slave vlan2): Opening slave failed [ 1108.159679][T20591] lo speed is unknown, defaulting to 1000 [ 1112.231806][T20654] netlink: 'syz.8.5438': attribute type 1 has an invalid length. [ 1113.080557][T20654] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1113.386459][T20671] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5441'. [ 1113.699050][T20682] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap0 [ 1113.817719][T20685] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap0 [ 1116.736861][T20707] [ 1116.739357][T20707] ===================================================== [ 1116.746328][T20707] WARNING: HARDIRQ-safe -> HARDIRQ-unsafe lock order detected [ 1116.753917][T20705] lo speed is unknown, defaulting to 1000 [ 1116.754077][T20707] syzkaller #0 Not tainted [ 1116.764506][T20707] ----------------------------------------------------- [ 1116.771578][T20707] syz.5.5453/20707 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1116.779387][T20707] ffffffff8c80a058 (tasklist_lock){.+.+}-{2:2}, at: send_sigio+0xf5/0x360 [ 1116.788099][T20707] [ 1116.788099][T20707] and this task is already holding: [ 1116.795602][T20707] ffff888024026630 (&f->f_owner.lock){...-}-{2:2}, at: send_sigio+0x2f/0x360 [ 1116.804632][T20707] which would create a new lock dependency: [ 1116.810715][T20707] (&f->f_owner.lock){...-}-{2:2} -> (tasklist_lock){.+.+}-{2:2} [ 1116.818705][T20707] [ 1116.818705][T20707] but this new dependency connects a HARDIRQ-irq-safe lock: [ 1116.828467][T20707] (&dev->event_lock#2){-...}-{2:2} [ 1116.828506][T20707] [ 1116.828506][T20707] ... which became HARDIRQ-irq-safe at: [ 1116.841437][T20707] lock_acquire+0x1b4/0x490 [ 1116.846275][T20707] _raw_spin_lock_irqsave+0xa4/0xf0 [ 1116.851608][T20707] input_event+0x76/0xb0 [ 1116.855981][T20707] psmouse_report_standard_packet+0x4f/0x200 [ 1116.862176][T20707] psmouse_process_byte+0x42b/0x620 [ 1116.867585][T20707] psmouse_handle_byte+0x43/0x490 [ 1116.872825][T20707] psmouse_interrupt+0x699/0x1130 [ 1116.877976][T20707] serio_interrupt+0x87/0x130 [ 1116.882958][T20707] i8042_interrupt+0x36b/0x720 [ 1116.888016][T20707] __handle_irq_event_percpu+0x298/0xa30 [ 1116.893931][T20707] handle_irq_event+0x87/0x1e0 [ 1116.899074][T20707] handle_edge_irq+0x243/0xb20 [ 1116.904566][T20707] __common_interrupt+0xd7/0x1e0 [ 1116.909656][T20707] common_interrupt+0xb0/0xd0 [ 1116.914460][T20707] asm_common_interrupt+0x22/0x40 [ 1116.919628][T20707] kernfs_link_sibling+0xee/0x380 [ 1116.925049][T20707] kernfs_add_one+0x36b/0x8f0 [ 1116.929931][T20707] kernfs_create_dir_ns+0xda/0x120 [ 1116.935152][T20707] sysfs_create_dir_ns+0x120/0x280 [ 1116.940475][T20707] kobject_add_internal+0x6b8/0xc80 [ 1116.945817][T20707] kobject_init_and_add+0x122/0x190 [ 1116.951194][T20707] bus_add_driver+0x1dc/0x5a0 [ 1116.956179][T20707] driver_register+0x32d/0x430 [ 1116.961072][T20707] usb_register_driver+0x202/0x3d0 [ 1116.966307][T20707] do_one_initcall+0x214/0x7a0 [ 1116.971182][T20707] do_initcall_level+0x137/0x1e4 [ 1116.976261][T20707] do_initcalls+0x4b/0x8a [ 1116.980825][T20707] kernel_init_freeable+0x3fa/0x5ac [ 1116.986235][T20707] kernel_init+0x19/0x1b0 [ 1116.990768][T20707] ret_from_fork+0x1f/0x30 [ 1116.995476][T20707] [ 1116.995476][T20707] to a HARDIRQ-irq-unsafe lock: [ 1117.003133][T20707] (tasklist_lock){.+.+}-{2:2} [ 1117.003160][T20707] [ 1117.003160][T20707] ... which became HARDIRQ-irq-unsafe at: [ 1117.016173][T20707] ... [ 1117.016183][T20707] lock_acquire+0x1b4/0x490 [ 1117.023422][T20707] _raw_read_lock+0x32/0x40 [ 1117.028053][T20707] do_wait+0x2b6/0xb60 [ 1117.032247][T20707] kernel_wait+0xa8/0x160 [ 1117.036931][T20707] call_usermodehelper_exec_work+0xb5/0x220 [ 1117.042939][T20707] process_one_work+0x898/0x1160 [ 1117.048175][T20707] worker_thread+0xaa2/0x1250 [ 1117.052977][T20707] kthread+0x29d/0x330 [ 1117.057181][T20707] ret_from_fork+0x1f/0x30 [ 1117.061725][T20707] [ 1117.061725][T20707] other info that might help us debug this: [ 1117.061725][T20707] [ 1117.072423][T20707] Chain exists of: [ 1117.072423][T20707] &dev->event_lock#2 --> &f->f_owner.lock --> tasklist_lock [ 1117.072423][T20707] [ 1117.086260][T20707] Possible interrupt unsafe locking scenario: [ 1117.086260][T20707] [ 1117.094811][T20707] CPU0 CPU1 [ 1117.100565][T20707] ---- ---- [ 1117.106155][T20707] lock(tasklist_lock); [ 1117.110422][T20707] local_irq_disable(); [ 1117.117988][T20707] lock(&dev->event_lock#2); [ 1117.125498][T20707] lock(&f->f_owner.lock); [ 1117.132680][T20707] [ 1117.136171][T20707] lock(&dev->event_lock#2); [ 1117.141143][T20707] [ 1117.141143][T20707] *** DEADLOCK *** [ 1117.141143][T20707] [ 1117.149666][T20707] 6 locks held by syz.5.5453/20707: [ 1117.154896][T20707] #0: ffff888060d42460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 1117.166356][T20707] #1: ffffffff8cc68c10 (file_rwsem){++++}-{0:0}, at: __break_lease+0x17f/0x1420 [ 1117.176399][T20707] #2: ffff888027f2fbc8 (&ctx->flc_lock){+.+.}-{2:2}, at: __break_lease+0x18c/0x1420 [ 1117.186767][T20707] #3: ffffffff8cb2abe0 (rcu_read_lock){....}-{1:2}, at: kill_fasync+0x4f/0x4b0 [ 1117.195947][T20707] #4: ffff88807cef29f0 (&new->fa_lock){....}-{2:2}, at: kill_fasync+0x18e/0x4b0 [ 1117.205727][T20707] #5: ffff888024026630 (&f->f_owner.lock){...-}-{2:2}, at: send_sigio+0x2f/0x360 [ 1117.215443][T20707] [ 1117.215443][T20707] the dependencies between HARDIRQ-irq-safe lock and the holding lock: [ 1117.226105][T20707] -> (&dev->event_lock#2){-...}-{2:2} { [ 1117.232330][T20707] IN-HARDIRQ-W at: [ 1117.236971][T20707] lock_acquire+0x1b4/0x490 [ 1117.244741][T20707] _raw_spin_lock_irqsave+0xa4/0xf0 [ 1117.252816][T20707] input_event+0x76/0xb0 [ 1117.259843][T20707] psmouse_report_standard_packet+0x4f/0x200 [ 1117.268824][T20707] psmouse_process_byte+0x42b/0x620 [ 1117.276440][T20707] psmouse_handle_byte+0x43/0x490 [ 1117.284105][T20707] psmouse_interrupt+0x699/0x1130 [ 1117.291467][T20707] serio_interrupt+0x87/0x130 [ 1117.299046][T20707] i8042_interrupt+0x36b/0x720 [ 1117.306307][T20707] __handle_irq_event_percpu+0x298/0xa30 [ 1117.314494][T20707] handle_irq_event+0x87/0x1e0 [ 1117.321642][T20707] handle_edge_irq+0x243/0xb20 [ 1117.328987][T20707] __common_interrupt+0xd7/0x1e0 [ 1117.336264][T20707] common_interrupt+0xb0/0xd0 [ 1117.343153][T20707] asm_common_interrupt+0x22/0x40 [ 1117.350721][T20707] kernfs_link_sibling+0xee/0x380 [ 1117.357935][T20707] kernfs_add_one+0x36b/0x8f0 [ 1117.364796][T20707] kernfs_create_dir_ns+0xda/0x120 [ 1117.372215][T20707] sysfs_create_dir_ns+0x120/0x280 [ 1117.379554][T20707] kobject_add_internal+0x6b8/0xc80 [ 1117.387222][T20707] kobject_init_and_add+0x122/0x190 [ 1117.394882][T20707] bus_add_driver+0x1dc/0x5a0 [ 1117.402065][T20707] driver_register+0x32d/0x430 [ 1117.409468][T20707] usb_register_driver+0x202/0x3d0 [ 1117.416952][T20707] do_one_initcall+0x214/0x7a0 [ 1117.424364][T20707] do_initcall_level+0x137/0x1e4 [ 1117.431598][T20707] do_initcalls+0x4b/0x8a [ 1117.438224][T20707] kernel_init_freeable+0x3fa/0x5ac [ 1117.445719][T20707] kernel_init+0x19/0x1b0 [ 1117.452260][T20707] ret_from_fork+0x1f/0x30 [ 1117.459763][T20707] INITIAL USE at: [ 1117.464201][T20707] lock_acquire+0x1b4/0x490 [ 1117.471073][T20707] _raw_spin_lock_irqsave+0xa4/0xf0 [ 1117.478400][T20707] input_inject_event+0xa7/0x310 [ 1117.485485][T20707] led_trigger_event+0x12f/0x210 [ 1117.492546][T20707] kbd_led_trigger_activate+0xb9/0x100 [ 1117.500289][T20707] led_trigger_set+0x504/0x900 [ 1117.507278][T20707] led_trigger_set_default+0x19c/0x1e0 [ 1117.514857][T20707] led_classdev_register_ext+0x5d3/0x7a0 [ 1117.522604][T20707] input_leds_connect+0x4e7/0x6b0 [ 1117.530054][T20707] input_register_device+0xdfd/0x1310 [ 1117.537662][T20707] atkbd_connect+0x6e9/0x980 [ 1117.544456][T20707] serio_driver_probe+0x76/0x90 [ 1117.551541][T20707] really_probe+0x2aa/0xc70 [ 1117.558281][T20707] __driver_probe_device+0x18c/0x330 [ 1117.565678][T20707] driver_probe_device+0x4f/0x420 [ 1117.572809][T20707] __driver_attach+0x44a/0x6e0 [ 1117.579694][T20707] bus_for_each_dev+0x175/0x1e0 [ 1117.587020][T20707] serio_handle_event+0x29c/0x840 [ 1117.594526][T20707] process_one_work+0x898/0x1160 [ 1117.601857][T20707] worker_thread+0xaa2/0x1250 [ 1117.608746][T20707] kthread+0x29d/0x330 [ 1117.615053][T20707] ret_from_fork+0x1f/0x30 [ 1117.621588][T20707] } [ 1117.624354][T20707] ... key at: [] input_allocate_device.__key.5+0x0/0x20 [ 1117.633930][T20707] -> (&client->buffer_lock){....}-{2:2} { [ 1117.639957][T20707] INITIAL USE at: [ 1117.644121][T20707] lock_acquire+0x1b4/0x490 [ 1117.651257][T20707] _raw_spin_lock+0x2a/0x40 [ 1117.657824][T20707] evdev_pass_values+0xcb/0xab0 [ 1117.664817][T20707] evdev_events+0x1d4/0x320 [ 1117.671548][T20707] input_pass_values+0x907/0x1300 [ 1117.678686][T20707] input_event_dispose+0x346/0x6c0 [ 1117.685747][T20707] input_inject_event+0x1f5/0x310 [ 1117.692714][T20707] evdev_write+0x326/0x470 [ 1117.699246][T20707] vfs_write+0x2c4/0x960 [ 1117.705438][T20707] ksys_write+0x143/0x240 [ 1117.711993][T20707] do_syscall_64+0x4c/0xa0 [ 1117.718358][T20707] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1117.726293][T20707] } [ 1117.729170][T20707] ... key at: [] evdev_open.__key.29+0x0/0x20 [ 1117.737590][T20707] ... acquired at: [ 1117.741688][T20707] _raw_spin_lock+0x2a/0x40 [ 1117.748338][T20707] evdev_pass_values+0xcb/0xab0 [ 1117.753400][T20707] evdev_events+0x1d4/0x320 [ 1117.758220][T20707] input_pass_values+0x907/0x1300 [ 1117.763626][T20707] input_event_dispose+0x346/0x6c0 [ 1117.769035][T20707] input_inject_event+0x1f5/0x310 [ 1117.774288][T20707] evdev_write+0x326/0x470 [ 1117.779097][T20707] vfs_write+0x2c4/0x960 [ 1117.783718][T20707] ksys_write+0x143/0x240 [ 1117.788380][T20707] do_syscall_64+0x4c/0xa0 [ 1117.793004][T20707] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1117.799093][T20707] [ 1117.801462][T20707] -> (&new->fa_lock){....}-{2:2} { [ 1117.806812][T20707] INITIAL USE at: [ 1117.810917][T20707] lock_acquire+0x1b4/0x490 [ 1117.817190][T20707] _raw_write_lock_irq+0x9f/0xe0 [ 1117.823891][T20707] fasync_remove_entry+0xf0/0x1c0 [ 1117.830757][T20707] lease_modify+0x1a2/0x390 [ 1117.837029][T20707] locks_remove_file+0x492/0xdf0 [ 1117.843813][T20707] __fput+0x188/0x920 [ 1117.849647][T20707] task_work_run+0x1ca/0x250 [ 1117.856185][T20707] exit_to_user_mode_loop+0xe6/0x110 [ 1117.863518][T20707] exit_to_user_mode_prepare+0xee/0x180 [ 1117.870918][T20707] syscall_exit_to_user_mode+0x16/0x40 [ 1117.878239][T20707] do_syscall_64+0x58/0xa0 [ 1117.884571][T20707] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1117.892314][T20707] INITIAL READ USE at: [ 1117.896833][T20707] lock_acquire+0x1b4/0x490 [ 1117.903537][T20707] _raw_read_lock_irqsave+0xac/0xf0 [ 1117.911026][T20707] kill_fasync+0x18e/0x4b0 [ 1117.917824][T20707] sock_wake_async+0x128/0x150 [ 1117.924898][T20707] sk_wake_async+0x184/0x280 [ 1117.931958][T20707] unix_release_sock+0x881/0xee0 [ 1117.939372][T20707] unix_release+0x88/0xc0 [ 1117.946000][T20707] sock_close+0xd5/0x240 [ 1117.952812][T20707] __fput+0x22c/0x920 [ 1117.959545][T20707] task_work_run+0x1ca/0x250 [ 1117.966464][T20707] get_signal+0x11a6/0x1350 [ 1117.974408][T20707] arch_do_signal_or_restart+0xb0/0x1230 [ 1117.982482][T20707] exit_to_user_mode_loop+0x70/0x110 [ 1117.990274][T20707] exit_to_user_mode_prepare+0xee/0x180 [ 1117.998355][T20707] syscall_exit_to_user_mode+0x16/0x40 [ 1118.006486][T20707] do_syscall_64+0x58/0xa0 [ 1118.013376][T20707] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1118.021470][T20707] } [ 1118.024145][T20707] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 1118.033345][T20707] ... acquired at: [ 1118.037524][T20707] _raw_read_lock_irqsave+0xac/0xf0 [ 1118.043023][T20707] kill_fasync+0x18e/0x4b0 [ 1118.047768][T20707] evdev_pass_values+0x54b/0xab0 [ 1118.053445][T20707] evdev_events+0x1d4/0x320 [ 1118.058271][T20707] input_pass_values+0x907/0x1300 [ 1118.064060][T20707] input_event_dispose+0x346/0x6c0 [ 1118.069418][T20707] input_inject_event+0x1f5/0x310 [ 1118.074901][T20707] evdev_write+0x326/0x470 [ 1118.079540][T20707] vfs_write+0x2c4/0x960 [ 1118.084266][T20707] ksys_write+0x143/0x240 [ 1118.088982][T20707] do_syscall_64+0x4c/0xa0 [ 1118.094302][T20707] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1118.100920][T20707] [ 1118.103535][T20707] -> (&f->f_owner.lock){...-}-{2:2} { [ 1118.109389][T20707] IN-SOFTIRQ-R at: [ 1118.113525][T20707] lock_acquire+0x1b4/0x490 [ 1118.119887][T20707] _raw_read_lock_irqsave+0xac/0xf0 [ 1118.127023][T20707] send_sigurg+0x25/0x3c0 [ 1118.133266][T20707] sk_send_sigurg+0x6b/0xc0 [ 1118.139841][T20707] tcp_check_urg+0x200/0x750 [ 1118.146270][T20707] tcp_urg+0x15d/0x3e0 [ 1118.152018][T20707] tcp_rcv_established+0xde4/0x1d30 [ 1118.158940][T20707] tcp_v4_do_rcv+0x48d/0xb00 [ 1118.165305][T20707] tcp_v4_rcv+0x2789/0x2e30 [ 1118.171598][T20707] ip_protocol_deliver_rcu+0x3ad/0x780 [ 1118.178838][T20707] ip_local_deliver_finish+0x2c7/0x510 [ 1118.186174][T20707] NF_HOOK+0x2ff/0x390 [ 1118.192012][T20707] NF_HOOK+0x2ff/0x390 [ 1118.197756][T20707] __netif_receive_skb+0xcc/0x290 [ 1118.204629][T20707] process_backlog+0x37c/0x6e0 [ 1118.211245][T20707] __napi_poll+0xc0/0x460 [ 1118.217445][T20707] net_rx_action+0x5b1/0xad0 [ 1118.223791][T20707] handle_softirqs+0x2a1/0x920 [ 1118.230457][T20707] run_ksoftirqd+0x98/0xf0 [ 1118.236567][T20707] smpboot_thread_fn+0x64a/0xa40 [ 1118.243178][T20707] kthread+0x29d/0x330 [ 1118.249020][T20707] ret_from_fork+0x1f/0x30 [ 1118.255118][T20707] INITIAL USE at: [ 1118.259027][T20707] lock_acquire+0x1b4/0x490 [ 1118.265993][T20707] _raw_write_lock_irq+0x9f/0xe0 [ 1118.272792][T20707] __f_setown+0x37/0x330 [ 1118.278806][T20707] generic_setlease+0xf2c/0x13c0 [ 1118.285330][T20707] fcntl_setlease+0x25e/0x330 [ 1118.291773][T20707] do_fcntl+0x10c/0x11c0 [ 1118.297873][T20707] __se_sys_fcntl+0xc9/0x190 [ 1118.304190][T20707] do_syscall_64+0x4c/0xa0 [ 1118.310280][T20707] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1118.317849][T20707] INITIAL READ USE at: [ 1118.322325][T20707] lock_acquire+0x1b4/0x490 [ 1118.328950][T20707] _raw_read_lock_irqsave+0xac/0xf0 [ 1118.336160][T20707] send_sigurg+0x25/0x3c0 [ 1118.342516][T20707] sk_send_sigurg+0x6b/0xc0 [ 1118.349053][T20707] tcp_check_urg+0x200/0x750 [ 1118.355673][T20707] tcp_urg+0x15d/0x3e0 [ 1118.361833][T20707] tcp_rcv_established+0xde4/0x1d30 [ 1118.369253][T20707] tcp_v4_do_rcv+0x48d/0xb00 [ 1118.375988][T20707] __release_sock+0x1b9/0x420 [ 1118.382777][T20707] release_sock+0x5b/0x1b0 [ 1118.389414][T20707] sk_stream_wait_memory+0x6ed/0xec0 [ 1118.396721][T20707] tcp_sendmsg_locked+0x15b6/0x3f10 [ 1118.403955][T20707] tcp_sendmsg+0x2b/0x40 [ 1118.410226][T20707] __sys_sendto+0x44f/0x5c0 [ 1118.416742][T20707] __x64_sys_sendto+0xda/0xf0 [ 1118.423730][T20707] do_syscall_64+0x4c/0xa0 [ 1118.430167][T20707] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1118.438233][T20707] } [ 1118.440781][T20707] ... key at: [] __alloc_file.__key+0x0/0x10 [ 1118.448980][T20707] ... acquired at: [ 1118.452803][T20707] _raw_read_lock_irqsave+0xac/0xf0 [ 1118.458221][T20707] send_sigio+0x2f/0x360 [ 1118.462657][T20707] kill_fasync+0x224/0x4b0 [ 1118.467272][T20707] sock_wake_async+0x128/0x150 [ 1118.472319][T20707] sk_wake_async+0x184/0x280 [ 1118.477122][T20707] unix_release_sock+0x881/0xee0 [ 1118.482302][T20707] unix_release+0x88/0xc0 [ 1118.486929][T20707] sock_close+0xd5/0x240 [ 1118.491372][T20707] __fput+0x22c/0x920 [ 1118.495577][T20707] task_work_run+0x1ca/0x250 [ 1118.500736][T20707] get_signal+0x11a6/0x1350 [ 1118.505601][T20707] arch_do_signal_or_restart+0xb0/0x1230 [ 1118.511544][T20707] exit_to_user_mode_loop+0x70/0x110 [ 1118.517156][T20707] exit_to_user_mode_prepare+0xee/0x180 [ 1118.523013][T20707] syscall_exit_to_user_mode+0x16/0x40 [ 1118.528723][T20707] do_syscall_64+0x58/0xa0 [ 1118.533784][T20707] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1118.540055][T20707] [ 1118.542428][T20707] [ 1118.542428][T20707] the dependencies between the lock to be acquired [ 1118.542436][T20707] and HARDIRQ-irq-unsafe lock: [ 1118.556174][T20707] -> (tasklist_lock){.+.+}-{2:2} { [ 1118.561309][T20707] HARDIRQ-ON-R at: [ 1118.565384][T20707] lock_acquire+0x1b4/0x490 [ 1118.571732][T20707] _raw_read_lock+0x32/0x40 [ 1118.577909][T20707] do_wait+0x2b6/0xb60 [ 1118.583645][T20707] kernel_wait+0xa8/0x160 [ 1118.590167][T20707] call_usermodehelper_exec_work+0xb5/0x220 [ 1118.597868][T20707] process_one_work+0x898/0x1160 [ 1118.604838][T20707] worker_thread+0xaa2/0x1250 [ 1118.611673][T20707] kthread+0x29d/0x330 [ 1118.617487][T20707] ret_from_fork+0x1f/0x30 [ 1118.623679][T20707] SOFTIRQ-ON-R at: [ 1118.627700][T20707] lock_acquire+0x1b4/0x490 [ 1118.633888][T20707] _raw_read_lock+0x32/0x40 [ 1118.640378][T20707] do_wait+0x2b6/0xb60 [ 1118.646132][T20707] kernel_wait+0xa8/0x160 [ 1118.652248][T20707] call_usermodehelper_exec_work+0xb5/0x220 [ 1118.659923][T20707] process_one_work+0x898/0x1160 [ 1118.666536][T20707] worker_thread+0xaa2/0x1250 [ 1118.673237][T20707] kthread+0x29d/0x330 [ 1118.678993][T20707] ret_from_fork+0x1f/0x30 [ 1118.685152][T20707] INITIAL USE at: [ 1118.689052][T20707] lock_acquire+0x1b4/0x490 [ 1118.695586][T20707] _raw_write_lock_irq+0x9f/0xe0 [ 1118.702312][T20707] copy_process+0x2531/0x4020 [ 1118.708659][T20707] kernel_clone+0x225/0x8b0 [ 1118.714950][T20707] user_mode_thread+0xda/0x130 [ 1118.721481][T20707] rest_init+0x23/0x300 [ 1118.727509][T20707] start_kernel+0x0/0x539 [ 1118.733529][T20707] start_kernel+0x490/0x539 [ 1118.739798][T20707] secondary_startup_64_no_verify+0xcf/0xdb [ 1118.747284][T20707] INITIAL READ USE at: [ 1118.751648][T20707] lock_acquire+0x1b4/0x490 [ 1118.758264][T20707] _raw_read_lock+0x32/0x40 [ 1118.764787][T20707] do_wait+0x2b6/0xb60 [ 1118.770882][T20707] kernel_wait+0xa8/0x160 [ 1118.777346][T20707] call_usermodehelper_exec_work+0xb5/0x220 [ 1118.785455][T20707] process_one_work+0x898/0x1160 [ 1118.792889][T20707] worker_thread+0xaa2/0x1250 [ 1118.799916][T20707] kthread+0x29d/0x330 [ 1118.806133][T20707] ret_from_fork+0x1f/0x30 [ 1118.812852][T20707] } [ 1118.815666][T20707] ... key at: [] tasklist_lock+0x18/0x40 [ 1118.823502][T20707] ... acquired at: [ 1118.827444][T20707] _raw_read_lock+0x32/0x40 [ 1118.832159][T20707] send_sigio+0xf5/0x360 [ 1118.836619][T20707] kill_fasync+0x224/0x4b0 [ 1118.841261][T20707] lease_break_callback+0x22/0x30 [ 1118.846473][T20707] __break_lease+0x4a3/0x1420 [ 1118.851430][T20707] vfs_truncate+0x1fb/0x2f0 [ 1118.856305][T20707] do_sys_truncate+0xdc/0x190 [ 1118.861174][T20707] do_syscall_64+0x4c/0xa0 [ 1118.865891][T20707] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1118.872106][T20707] [ 1118.874495][T20707] [ 1118.874495][T20707] stack backtrace: [ 1118.880407][T20707] CPU: 1 PID: 20707 Comm: syz.5.5453 Not tainted syzkaller #0 [ 1118.887966][T20707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1118.898156][T20707] Call Trace: [ 1118.901471][T20707] [ 1118.904417][T20707] dump_stack_lvl+0x168/0x22e [ 1118.909216][T20707] ? load_image+0x3b0/0x3b0 [ 1118.913744][T20707] ? show_regs_print_info+0x12/0x12 [ 1118.919048][T20707] ? load_image+0x3b0/0x3b0 [ 1118.923683][T20707] ? print_shortest_lock_dependencies+0xf0/0x160 [ 1118.930146][T20707] __lock_acquire+0x660b/0x7c50 [ 1118.935296][T20707] ? verify_lock_unused+0x140/0x140 [ 1118.940527][T20707] ? verify_lock_unused+0x140/0x140 [ 1118.945751][T20707] lock_acquire+0x1b4/0x490 [ 1118.950637][T20707] ? send_sigio+0xf5/0x360 [ 1118.955085][T20707] ? read_lock_is_recursive+0x10/0x10 [ 1118.960502][T20707] ? do_raw_read_lock+0x39/0x80 [ 1118.965469][T20707] ? _raw_read_lock_irqsave+0xb8/0xf0 [ 1118.971238][T20707] ? _raw_read_lock+0x40/0x40 [ 1118.976121][T20707] ? _raw_read_lock_irqsave+0xb8/0xf0 [ 1118.981536][T20707] _raw_read_lock+0x32/0x40 [ 1118.986128][T20707] ? send_sigio+0xf5/0x360 [ 1118.990572][T20707] send_sigio+0xf5/0x360 [ 1118.994841][T20707] kill_fasync+0x224/0x4b0 [ 1118.999280][T20707] ? kill_fasync+0x4f/0x4b0 [ 1119.003818][T20707] lease_break_callback+0x22/0x30 [ 1119.008865][T20707] __break_lease+0x4a3/0x1420 [ 1119.013732][T20707] ? lease_modify+0x390/0x390 [ 1119.018462][T20707] ? privileged_wrt_inode_uidgid+0x1ed/0x240 [ 1119.024560][T20707] ? generic_permission+0x30e/0x510 [ 1119.029980][T20707] ? inode_permission+0xef/0x480 [ 1119.035051][T20707] ? bpf_lsm_inode_permission+0x5/0x10 [ 1119.040574][T20707] vfs_truncate+0x1fb/0x2f0 [ 1119.045224][T20707] do_sys_truncate+0xdc/0x190 [ 1119.050021][T20707] ? break_lease+0xd0/0xd0 [ 1119.054693][T20707] ? lockdep_hardirqs_on+0x94/0x140 [ 1119.060193][T20707] do_syscall_64+0x4c/0xa0 [ 1119.065115][T20707] ? clear_bhb_loop+0x60/0xb0 [ 1119.070392][T20707] ? clear_bhb_loop+0x60/0xb0 [ 1119.075204][T20707] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1119.081255][T20707] RIP: 0033:0x7ff20c58eec9 [ 1119.085910][T20707] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1119.105807][T20707] RSP: 002b:00007ff20d42d038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 1119.114501][T20707] RAX: ffffffffffffffda RBX: 00007ff20c7e6090 RCX: 00007ff20c58eec9 [ 1119.122575][T20707] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040 [ 1119.130740][T20707] RBP: 00007ff20c611f91 R08: 0000000000000000 R09: 0000000000000000 [ 1119.138826][T20707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1119.146804][T20707] R13: 00007ff20c7e6128 R14: 00007ff20c7e6090 R15: 00007fffdb6a0618 [ 1119.154880][T20707] [ 1119.678599][T20713] netlink: 'syz.6.5455': attribute type 1 has an invalid length. [ 1119.768878][T20713] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1119.813840][T20715] bond5: (slave vlan2): Opening slave failed [ 1122.808166][ T1277] ieee802154 phy0 wpan0: encryption failed: -22