last executing test programs: 9m36.183785076s ago: executing program 1 (id=347): openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x2082, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000280)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64e9f4080003fe0601000004000200", 0x58}, {&(0x7f0000000300)="ffd10d212ffb16bc23bf59fa8ec4acf5e9f7a0fb27e789ae959153cf59acc7897305fa13cabb", 0x26}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x4080) 9m34.88959314s ago: executing program 1 (id=349): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r0}, &(0x7f0000000000), &(0x7f00000000c0)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_connect$uac1(0x69a90eab3db9c902, 0x87, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x3, 0x1, 0x4, 0xa0, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xfff7, 0x7}, [@output_terminal={0x9, 0x24, 0x3, 0x3, 0x300, 0x3, 0x3, 0xb}, @selector_unit={0x5, 0x24, 0x5, 0x8, 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0xff, 0xc8, 0x3, {0x7, 0x25, 0x1, 0x0, 0x4, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x6, 0x1, 0x8, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x50, 0x5, 0x8, 0x1, {0x7, 0x25, 0x1, 0x82, 0xfe, 0x7}}}}}}}]}}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCFLSH(r1, 0x4b63, 0x3) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x1}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x20, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000007000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020737200000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 9m30.930644408s ago: executing program 1 (id=360): r0 = memfd_create(&(0x7f0000000480)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\x00\x00{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9dp]\xc9H\x94\x0e\xf1v\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0xd}}, @NFT_MSG_NEWSET={0x20, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWOBJ={0x18, 0x12, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x3}, @NFT_OBJECT_CONNLIMIT=@NFTA_OBJ_DATA={0x4}}], {0x14}}, 0xa8}, 0x1, 0x0, 0x0, 0x44810}, 0x44000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0), 0x10, 0x746}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f00000000c0)) close(r1) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x88081, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r1, 0x4010744d, &(0x7f0000000180)) r4 = dup(r0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd74) 9m29.915071231s ago: executing program 1 (id=366): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x40, 0x20}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000006c0), r0) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fcdbdf251800000018000180140002"], 0x2c}}, 0x4040) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x13, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x4000, &(0x7f0000000580)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000102,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000011,fileset=00000000000000000011,uid=', @ANYBLOB="d6d84c0df937ed4a0cd30000f2e9ea9568eab74a46c525dc386983eade0b0ce5f1dd911706cf7d32d7d508d1823b8871e001000000eb4ce0a008f5cdea622fc6675e5486860a752ed0298a948efa72b2c8d8525181644a3124f3544a50f192b98f055ad125fd4674534413c6044136ea5aefac5267e43739626ea9391d8f346c4694f70400000000000000cee1f628d1cec3462830606bb612bfed91181cdc107bb91a2e86de2ad5", @ANYBLOB="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"], 0x12, 0xc49, &(0x7f0000001cc0)="$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") syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}, {@jqfmt_vfsold}]}, 0x4, 0x4fc, &(0x7f0000000fc0)="$eJzs3b9vW1sdAPDvdeImL8996YM3AAJeeRQKqur8aBtVZaBdQKiqhKiYGNqQuFEUu47ipDShQzqyI1GJCf4ENgakTgxsbLCxlAGpQAVqkBiM7vVt6iZxYl5+uLU/H+nm3nOu4+85ds85vqe5PgEMrLMRsRkRpyLibkSM5/lJvsX11pY+7uWLR3NbLx7NJdFs3v5Hkp1P86Ltd1Lv5885GhE/+G7Ej5PdcRvrG0uz1WplJU9PrNaWJxrrGxcXC3nO9MzUzOTVS1emj6yuH9d+8/w7izd/+LvffunZHze/+dO0WKWfnc7OtdfjKLWqXoxSW95wRNw8jmA9Mpz/++Hdk7a2z0TEJ1n7H4+h7N0EAPpZszkezfH2NADQ79Lr/1IkhXI+F1CKQqFcbs3hfRRjhWq9sXphvL52fz6yOawzUSzcW6xWJvO5wjNRTNL0VHb8Oj0dm2+kL0XEhxHx85H3snR5rl6d7+UHHwAYYO/vGP//PdIa/wGAPjfa6wIAACfO+A8Ag8f4DwCD5/8Y/90dCAB9wvU/AAwe4z8ADJ4Dx//HJ1MOAOBEfP/WrXRrbuXffz3/YH3tW6UHF+crjaVybW2uPFdfWS4v1OsL1Up5rtnMf63j1z1X6/Xlqcvbycb6xp1afe3+6p3F2uxC5U6leAJ1AgD29+HHT/+cRMTmtfeyLdoGd2M19LdCrwsA9MxQrwsA9Iz7eWBwdXGNbxoA+tweS/S+oeOfCD2x+Cu8q85/3vw/DKpu5//dIgT959PN/3/7yMsBnDzz/zC4ms3Emv8AMGDM8QOH+v9/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGFClbEsK5Wwt8M30Z6FcjjgdEWeimNxbrFYmI+KDiPjTSHEkTU/1utAAwCEV/pbk63+dHz9X2nn2VPKfkWwfET/55e1fPJxdXV2ZSvP/uZ2/+iTPnz7ViwoAAO2u785qjdP5vu1C/uWLR3OvtpMs4vMbrcVF07hb+dY6MxzD2X40ihEx9q8kT7ekn1eGjiD+5uOI+Nzr+j9si1DK5kBaK5/ujJ/GPn0M8V+//jvjF96IX8jOpfti9lp89gjKAoPm6Y1WP5m3vbSJ5e2vEGez/d7tfzTroQ7vVf+3tav/K2z3f0O74idZmz+7nd6/JM8v//57uzKb461zjyO+MLxX/GQ7ftKh/z3XZR3/8sUvf9LpXPNXEedj7/gttaybnVitLU801jcuLtZmFyoLlfvT0zNTM5NXL12ZnsjmqFs//7BXjL9fu/BBp/hp/cc6xB89oP5f67L+v/7v3R99ZZ/43/jq3u//R/vET8fEr3cZf3bsesflu9P48x3qf9D7f6HL+M/+ujHf5UMBgBPQWN9Ymq1WKysHHKSfNQ96jIOeHEQc8nliM6LntejLg2LX7evtO+h1zwQct/ZhBAAAAAAAAAAAAAAAeDs11jeWRqLDbUClo7pBDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI7H/wIAAP//L93NTg==") creat(&(0x7f0000000580)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14113e, 0x6ceac77f206eabb9) semctl$SEM_STAT_ANY(0x0, 0x0, 0x14, &(0x7f00000001c0)=""/51) write$binfmt_script(r2, &(0x7f0000000080), 0x208e24b) unlink(&(0x7f0000000180)='./file1\x00') 9m26.676507722s ago: executing program 1 (id=377): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4000000000000001}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="9802"], 0x298) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x13c) fchownat(r3, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) getdents64(r3, 0x0, 0x0) 9m24.515756966s ago: executing program 1 (id=385): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x1, 0x4, 0x8}, 0x48) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) listen(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaef2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xffffbffc, 0x0, 0x4) r4 = socket(0x18, 0x803, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x40010002}) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x0) 9m24.351838199s ago: executing program 32 (id=385): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x1, 0x4, 0x8}, 0x48) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) listen(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaef2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xffffbffc, 0x0, 0x4) r4 = socket(0x18, 0x803, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x40010002}) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x0) 5m30.33840377s ago: executing program 3 (id=1132): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, 0x0) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0xffd8) 5m23.164920077s ago: executing program 3 (id=1143): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffff00208500000070000000850000002a00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r2}, 0x10) bind$vsock_stream(r1, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0xa) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1d64, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d00000018010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r4}, 0x18) close_range(r0, r3, 0x0) 5m22.89166656s ago: executing program 3 (id=1147): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[], 0x98}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) 5m20.496441713s ago: executing program 3 (id=1152): syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x30008c0, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x11, 0x2c6, &(0x7f0000000a00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents(r3, &(0x7f0000000480)=""/4096, 0x1000) 5m18.645173102s ago: executing program 3 (id=1159): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file1\x00', 0x8000, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2b2, &(0x7f0000000880)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lstat(&(0x7f00000001c0)='./file1\x00', 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) 5m16.599889566s ago: executing program 3 (id=1164): r0 = accept$unix(0xffffffffffffffff, &(0x7f0000000600), &(0x7f0000000680)=0x6e) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x28, 0x0, 0x8, 0xfffff032}]}, 0x10) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000cc0)={0x2, 0x3, 0x0, 0x3, 0x5, 0x0, 0x700, 0x0, [@sadb_address={0x3, 0x17, 0x0, 0x80, 0x0, @in={0x2, 0x0, @private}}]}, 0x28}, 0x1, 0x7}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r4, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) openat$full(0xffffffffffffff9c, 0x0, 0xd85080, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 5m15.720402717s ago: executing program 33 (id=1164): r0 = accept$unix(0xffffffffffffffff, &(0x7f0000000600), &(0x7f0000000680)=0x6e) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x28, 0x0, 0x8, 0xfffff032}]}, 0x10) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000cc0)={0x2, 0x3, 0x0, 0x3, 0x5, 0x0, 0x700, 0x0, [@sadb_address={0x3, 0x17, 0x0, 0x80, 0x0, @in={0x2, 0x0, @private}}]}, 0x28}, 0x1, 0x7}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r4, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) openat$full(0xffffffffffffff9c, 0x0, 0xd85080, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 14.857199383s ago: executing program 2 (id=2011): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x7018c0, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f00000001c0)=0x11d, 0x4) socket$netlink(0x10, 0x3, 0x0) socket(0x1d, 0x2, 0x6) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) socket$inet(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f000080000000140012800a00010076786c616e0000000400028008000a00", @ANYRES64=r3], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) 14.614389333s ago: executing program 2 (id=2013): fsopen(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x3, 0x0, 0x0, 0x2, 0xba, &(0x7f0000000600)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) io_uring_setup(0x3067, &(0x7f00000006c0)={0x0, 0xaf9b, 0x2000, 0x1, 0x390}) syz_io_uring_setup(0x24f9, 0x0, &(0x7f00000000c0), &(0x7f0000000140)=0x0) r4 = memfd_secret(0x0) ftruncate(r4, 0x5) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x11, r4, 0x0) syz_io_uring_submit(r5, r3, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040)={0x34840, 0x0, 0x27}, 0x0, 0x18, 0x0, 0x0, {0x1f}}) 13.258814902s ago: executing program 2 (id=2016): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$netlink(r0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) 12.283560041s ago: executing program 5 (id=2018): socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$inet6(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000000700)={{r0}, "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"}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r1, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f"], 0x6c}}, 0x840) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x0, 0x0, {0x7, r4}, [@MDBA_SET_ENTRY={0x20, 0x1, {r6, 0x1, 0x0, 0x0, {@ip4=@broadcast}}}]}, 0x38}}, 0x0) 12.282660481s ago: executing program 2 (id=2028): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) 12.096091496s ago: executing program 5 (id=2021): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x3800813, &(0x7f0000000100)=ANY=[@ANYBLOB='iocharset=cp1251,utf8,overriderockperm,nojoliet,nojoliet,overriderockperm,dmode=0x0000000000000003,dmode=0x0000000000000002,mode=0x0000000000000080,hide,block=0x0000000000000200,map=acorn,overriderockperm,check=relaxed,gid=', @ANYRESHEX=0x0, @ANYBLOB="643d100c6d6dbbc81c8e538d99489f928a3a41fa82abea23950b1ddb250302889397762fad8b78200a020aa14db0b0b1cc37e9e28e2ff100859da4da049cda39", @ANYRESHEX=0x0, @ANYBLOB=',check=relaxed,overriderockperm,dmode=0x0000000000000050,\x00'], 0x5, 0xa51, &(0x7f0000001240)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x446102) dup(0xffffffffffffffff) close(0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$tcp_congestion(r5, &(0x7f0000000100)='reno\x00', 0x5) 12.064934278s ago: executing program 6 (id=2022): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) r1 = socket$l2tp(0x2, 0x2, 0x73) r2 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) write$binfmt_script(r2, &(0x7f00000001c0)={'#! ', './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0'}, 0x1002) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x4d}, [@ldst={0x6, 0x2}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x48) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) sendmmsg(r1, &(0x7f000000dd80)=[{{&(0x7f00000000c0)=@in={0x2, 0x4e22, @remote}, 0x80, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000200)="97ff", 0x2}], 0x2}}], 0x1, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000000)=0x1) 9.985592606s ago: executing program 5 (id=2024): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x8488, &(0x7f0000000780), 0xfe, 0x10fd, &(0x7f0000002240)="$eJzs2T+LE0EcBuB3ds8/3cpevwhaWMhxR/wCVyiktdVG5CqvulSKH8ePo1fZh/RaBOxXYrKJSEQwiXLwPLDMb9/dmdkpZzYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQpCT5UpLjKmmHsFo+6Lrr8SxJN+T3PtZVSp5fjCdPr0bPJknqH6+XF0mphvHaswd321E7as/aJ8fnDz9N3r578+ry8uJqPWeX6fwwa6n3PywAAADceP3Omv88PwAAAPAneztIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPhLfbOp26GokpSk667HsyTdln63/tH3AQAAALsrqfKy2ZYvjwE2HudzU9b5ov1WFvVpPmzpDwAAAPxWf2dV/Px/vdze7Mcf5Wi9L19k93OUk5Pl/arJ1/OkTnL6y+DT+fvXw1X6+tBrAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL6zA8cCAAAAAML8rdPo2AAAAAAAAAAAAAAAAACAvQIAAP//5mvWzA==") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) ptrace$peeksig(0x4209, r1, &(0x7f0000000100)={0x100000001, 0x1, 0x4}, &(0x7f00000005c0)=[{}, {}, {}, {}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x80) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, &(0x7f0000000380)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r5 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x1000000000003, 0x3, 0x8000000000007, 0xaa, 0x3, 0x1, {0x0, 0x180, 0x20fe, 0x5, 0x87, 0xd617, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) sendfile(r5, r5, &(0x7f0000000080), 0x7f03) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x128, 0xc8, 0x8, 0x128, 0x5803, 0x2d0, 0x2e8, 0x2e8, 0x2d0, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0xf8, 0x128, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@addrtype1={{0x28}, {0x0, 0x845}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0x140, 0x1a8, 0x0, {}, [@common=@unspec=@rateest={{0x68}, {'bond0\x00', 'veth1_virt_wifi\x00'}}, @common=@frag={{0x30}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) 9.958816378s ago: executing program 6 (id=2025): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_CONFIG(r1, 0x0, 0x4000) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000880)={{0x1}, &(0x7f0000000800), 0x0}, 0x20) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x244001, 0x68) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000040)={0x4, r2, 0x2}) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f0000000080)=0x7) 9.045951922s ago: executing program 0 (id=2027): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, 0x0, 0x0) listen(r0, 0x4) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000002000f000000050030000000000005002f000000000008000300", @ANYRES32=r3], 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, 0x0, 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000200)=ANY=[], 0xa) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 9.045701262s ago: executing program 4 (id=2029): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$netlink(r0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) 7.365453257s ago: executing program 4 (id=2030): close(0xffffffffffffffff) ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, &(0x7f0000000100)) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000480)=ANY=[@ANYBLOB='utf8,namecase=1,errors=remount-ro,iocharset=cp936,fmask=00000000000000000000005,errors=continue,gid=', @ANYRESHEX=0x0, @ANYBLOB=',umask=00000000000000000000005,discard,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c0050c35bbdf6e6676a040548815bacf0216692ad31a5138fd14fbc3661de238cdd59188a2e17907a52562a761a2e39724a43799b5928922cb2488257225676b71712ab75744a1881e1a5bf08ba2cfd473ce93c213b01096104295c82eab0030df0fca6a1a99b26b00d9370c26d8ebea7bca06bdfe7cd76f6d2f0179e488f7b86e4efc03866519f83d83f0999d31771dfc48af454d0ecbd27a464357d2d28d89e02e019caa8638495b20c4f3a530000000000000000"], 0x3, 0x152f, &(0x7f00000037c0)="$eJzs3AucTVX7OPDnWWvtMSSdJrkMa61nc5LLIklySZJLkiRJkltC0iSvJCSG3JKGJCSXIbkMIblMTBr3+/2SkCRNkoTklqz/Z8r81Vvv/33f39svv/9vnu/nsz+znrP2s/ba85yzz977nJlvug6r1aR29UZEBP8R/OVHIgDEAsAgALgGAAIAKB9XPi6zP6fExP9sI+zP9VDKlZ4Bu5K4/tkb1z974/pnb1z/7I3rn71x/bM3rn/2xvVnLDvbMqPgtbxk34Xv/2dn/P7/v0hG6XFfrCt9fTeAmH81hev//z/8D3K5/v9rBf/KSlz/7I3rn13FXukJsP8B+PWfHeT4hz1c/+yN689Ydvbre8GxcOXvR//VC0Sy92cgV/r5xxhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGMsezjrL1MAkNW+0vNijDHGGGOMMcbYn8fnuNIzYIwxxhhjjDHG2H8/BAESFAQQAzkgFnJCLhAAMVn910IcXAd54XrIB/mhABSEeCgEhUGDAQsEIRSBohCFG6AY3AjFoQSUhFLgoDSUgZugLNwM5eAWKA+3QgW4DSpCJagMVeB2qAp3QDW4E6rDXVADakItqA13Qx24B+rCvVAP7oP6cD80gAegITwIjeAhaAwPQxN4BJrCo9AMmkMLaAmt/kv5L0BPeBF6QW9IhD7QF16CftAfBsBAGAQvw2B4BYbAq5AEQ2EYvAbD4XUYAW/ASBgFo+FNGANvwVgYB+NhAiTDRJgEb8NkeAemwFSYBtMhBWbATHgXZsFsmAPvwVx4H+bBfFgACyEVPoBFsBjS4ENYAh9BOiyFZbAcVsBKWAWrYQ2shXWwHjbARtgEm2ELbIVtsB12wE7YBR/DbvgE9sBe2Aefwn747N/MP/N3+d0QEFCgQIUKYzAGYzEWc2EuzI25MQ/mwQhGMA7jMC/mxXyYDwtgAYzHeCyMhdGgQULCIlgEoxjFYlgMi2NxLIkl0aHDMlgGy+LNWA7LYXksjxWwAlbESlgJq2AVrIpVsRpWw+pYHWtgDayFtfBuvBv7YF2si/WwHtbH+lm3p7ARNsLG2BibYBNsik2xGTbDFtgCW2ErbI2tsQ22wXbYDttje+yAHTABE7AjdsRO2Ak7Y2fsgl2wK3bFbtgdu2e8kAPwRXwRe2MN0Qf7Yl/sh0k5BuBAHIgv42B8BV/BVzEJh+IwfA1fw9dxBJ7GkTgKR+NorCrewrE4DklMwGRMxkk4CSfjZJyCU3EqTscUnIEzcSbOwtk4G9/Dufg+vo/zcT4uxFRMxUW4GNMwDZfgGUzHpbgMl+MKXIkrcDWuwdW4DtfjOtyIG3EzbsatuBW343bciTvxY1QA+Anuxb2YhPtxPx7AA3gQD+IhPIQZmIGH8TAewSN4FI/iMTyGx/EEnsQTeApP4Wk8g2fxLJ7H83gBn4v/qvHHJdYmgcikhBIxIkbEiliRS+QSuUVukUfkEREREXEiTuQVeUU+kU8UEAVEvIgXhUVhYYQRJMLMI4WIiqgoJoqJ4qK4KClKCiecKCPKiLKirCgnyony4lZRQdwmKopKoq2rIqqIqqKdqybuFNVFdVFD1BS1RG1RW9QRdURdUVfUE/VEfVFfNBAPiIaiDw7Ah0RmZZqIodhUDMNmormQl45QrcUIbCPainbiCTEKR2IH0doliKdFRzEWO4m/iXH4rOgiJmBX8bzoJrqLHuIF0VO0cb1EbzEF+4i+Yjr2E/3FADFQzMKa4j2cm7OWeFUkiaFimHhNLMTXxQjxhhgpRonR4k0xRrwlxopxYryYIJLFRDFJvC0mi3fEFDFVTBPTRYqYIWaKd8UsMVvMEe+JueJ9MU/MFwvEQpEqPhCLxGKRJj4US8RHIl0sFcvEcrFCrBSrxGqxRqwV68R6sUFsFJvEZrFFbBXbxHaxQ+wUu8THYrf4ROwRe8U+8anYLz4TB8Tn4qD4QhwSX4oM8ZU4LL4WR8Q34qj4VhwT34nj4oQ4Kb4Xp8QP4rQ4I86Kc+K8+FFcED+Ji8ILkCiFlFLJQMbIHDJW5pS55FUytwyyjv8yTl4n88rrZT6ZXxaQBWW8LCQLSy2NtJJkKIvIojIqb5DF5I2yuCwhS8pS0snSsoy8SZaVN8ty8hZZXt4qK8jbZEVZSVaWVeTtsqq8Q0Lkl23UkDVlLVlb3i0T4R5ZV94r68n7ZH15v2wgH5AN5YOykXxINpYPyybyEdlUPiqbyeayhWwpW8nHZGv5uGwj28p28gnZXj4pO8inZIJ8WnaU/tJT5FnZRT4nu8rnZTfZXfaQP8mL0stesreEPiD7ypdkP9lfDpAD5SD5shwsX5FD5KsySQ6Vw+Rrcrh8XY6Qb8iRcpQcLd+UY+RbcqwcJ8fLCTJZTpST5NtysnxHTpFT5TQ5XabIGXLApZHmSPlP89/+g/whP299s9wit8ptcrvcIXfKXfJjuVvulnvkHrlP7pP75X55QB6QB+VBeUgekhkyQx6Wh+UReUQelUflMXlMHpcn5Dn5vTwlf5Cn5Rl5Rp6T5+V5eeHS7wAUKqGkUipQMSqHilU5VS51lcqtrlZ51DUqoq5Vceo6lVddr/Kp/KqAKqjiVSFVWGlllFWkQlVEFVVRdQNeesKokqqUcqq0KqNu+nfyVTF1oyquSvwmP2t+if9gfq1UK9VatVZtVBvVTrVT7VV71UF1UAkqQXVUHVUn1Ul1Vp1VF9VFdVVdVTfVTfVQPVRP1VP1Ur1UokpUfdVLqp/qrwaogWqQellk7sMQNUQlqSQ1TA1Tw9VwNUKNUCPVSDVajVZj1Bg1Vo1V49V4layS1SQ1SU1Wk9UUNUVNU9NUikpRM9VMNUvNUnPUHDVXzVXz1Dy1QC1QqSpVLVKLVJpKU0vUEpWulqqlarlarlaqlWq1Wq3WqrVqvVqvNqqNKl1tUVvUNrVN7VA71C61S+1Wu9UetUftU/vUfrVfHVAH1EF1UB1Sh1SGylCH1WF1RB1RR9VRdUwdU8fVcXVSnVSn1Cl1Wp1WZ9VZdV6dVxfUBXVRXcw87QtEIAIVqCAmiAlig9ggV5AryB3kDvIEeYJIEAnigrggb3B9kC/IHxQICgbxQaGgcKADE9hAXCp6NLghKBbcGBQPSgQlg1KBC0oHZYKbgrLBzUG54JagfHBrUCG4LagYVAoqB1WC24OqwR1BteDOoHpwV1AjqBnUCmoHdwd1gnuCusG9Qb3gvqB+cH/QIHggaBg8GDQKHgoaBw8HTYJHgqbBo0GzoHnQImgZtPpTx/f+dP7HXS/dWyfqPrqvfkn30/31AD1QD9Iv68H6FT1Ev6qT9FA9TL+mh+vX9Qj9hh6pR+nR+k09Rr+lx+pxeryeoJP1RD1Jv60n63f0FD1VT9PTdYqeoWfqd/UsPVvP0e/pufp9PU/P1wv0Qp2qP9CL9GKdpj/US/RHOl0v1cv0cr1Cr9Sr9Gq9Rq/V6/R6vUFv1Jv0Zr1Fb9Xb9Ha9Q+/Uu/THerf+RO/Re/U+/anerz/TB/Tn+qD+Qh/SX+oM/ZU+rL/WR/Q3+qj+Vh/T3+nj+oQ+qb/Xp/QP+rQ+o8/qc/q8/lFf0D/pi9pnntxnvr0bZZSJMTEm1sSaXCaXyW1ymzwmj4mYiIkzcSavyWvymXymgClg4k28KWwKm0xkyBQxRUzURE0xU8wUN8VNSVPSOONMGVPGlDVlTTlTzpQ35U0FU8FUNBVNZVPZ3G5uN3eYO8yd5k5zl7nL1DQ1TW1T29QxdUxdU9fUM/VMfVPfNDANTEPT0DQyjUxj09g0MU1MU9PUNDPNTAvTwrQyrUxr09q0MW1MO9POtDftTQfTwSSYBNPRdDSdTCfT2XQ2XUwX09V0Nd1MN9PD9DA9TU/Ty/QyiSbR9DV9TT/TzwwwA8wgM8gMNoPNEDPEJJkkM8wMM8PNcDPCjDAjzSgzOvNE1bxlxppxZryZYJJNsplkJpnJZrKZYqaYaWaaSTEpZqaZaWaZWWaOmWPmmrlmnplnFpgFJtWkmkVmkUkzaWaJWWLSTbpZZpaZFWaFWWVWmTVmjVln1pkNsMFsMpvMFrPFbDPbzA6zw+wyu8xus9vsMXvMPrPP7Df7zQFzwBw0B80hc8hkmAxz2Bw2R8wRc9QcNcfMMXPcHDcnzUlzypwyp81pc9acNedN/kvvl97E2pw2l73K5rZX2zz2Gvv3cQFb0MbbQraw1Tafzf+b2Fhri9sStqQtZZ0tbcvYm34XV7SVbGVbxd5uq9o7bLXfxXXsPbauvdfWs/fZ2vbu38T17f22gX3ENkQEsM1tY9vSNrGP2Kb2UdvMNrctbEvb3j5pO9inbIJ92na0z/wuXmQX2zV2rV1n19s9dq89a8/ZI/Ybe97+aHvZ3naQfdkOtq/YIfZVm2SH/i4ebd+0Y+xbdqwdZ8fbCb+Lp9npNsXOsDPtu3aWnf27ONV+YOfaNDvPzrcL7MKf48w5pdkP7RL7kU23ASyzy+0Ku9Kusqv/71yX2412k91sd9tP7Da73e6wO+2urBNhu9fus5/a/fYze9h+bQ/aL+whe9Rm2K9+jjP376j91h6z39nj9oQ9ab+3p+wPKis7c9+/tz/Zi9ZbICQgSYoCiqEcFEs5KRddRbnpaspD11CErqU4uo7y0vWUj/JTASpI8VSICpMmQ5aIQipCRSlKN1DW9EpSKXJUmsrQTVSWbqZydAuVp1upAt1GFakSVaYqdDtVpTuoGt1J1ekuqkE1qRbVprupDt1Ddeleqkf3UX26nxrQA9SQHqRG9BA1poepCT1CTelRakbNqQW1pFb0GLWmx6kNtaV29AS1pyepAz1FCfQ0daRnqBP9jTrTs9SFnqOu9Dx1o+7Ug16gnvQi9aLelEh9qC+9RP2oPw2ggTSIXqbB9AoNoVcpiYbSMHqNhtPrNILeoJE0ikbTmzSG3qKxNI7G0wRKpok0id6myfQOTaGpNI2mUwrNoJn0Ls2i2TSH3qO59D7No/m0gBZSKn1Ai2gxpdGHtIQ+onRaSstoOa2glbSKVtMaWkvraD1toI20iTbTFtpK22g77aCdtIs+pt30Ce2hvbSPPqX99BkdoM/pIH1Bh+hLyqCv6DB9TUfoGzpK3/re9B0dpxN0kr6nU/QDnaYzdJbO0Xn6kS7QT3SRPEGIoQhlqMIgjAlzhLFhzjBXeFWYO7w6zBNeE0bCa8O48Lowb3h9mC/MHxYIC4bxYaGwcKhDE9qQwjAsEhYNo+ENYbHwxrB4WCIsGZYKXVg6LBPeFJYNbw7LhbeE5cNbwwrhbWHFsFL4yH1VwtvDquEdYbXwzrB6eFdYI6wZ1gprh3eHdcJ7wrrhvWG98L6wXHh/2CB8IGwYPhg2Ch8KG4cPh03CR8Km4aNhs7B52CJsGbYKHwtbh4+HbcK2YbvwqrB9+GTYIXwqTAifDjuGz/zcf//irP4nftefGPYJ+4YvhS+F3t8rF0QXRlOjH0QXRRdH06IfRpdEP4qmR5dGl0WXR1dEV0ZXRVdH10TXRtdF10c3RDdGN0U3R72vnQMcOuGkUy5wMS6Hi3U5XS53lcvtrnZ53DUu4q51ce46l9dd7/K5/K6AK+jiXSFX2GlnnHXkQlfEFXVRd4Mr5m50xV0JV9KVcs6VdmVcS9fKtXKt3eOujWvr2rkn3BPuSfeke8o95Z52Hd0zrpP7m+vsnnVd3HPuOfe86+a6ux7uBdfTTczzy2sy0fV1fV0/188NcAPcIDfIDXaD3RA3xCW5JDfMDXPD3XA3wo1wI91IN9qNdmPcGDfWjXXj3XiX7JLdJDfJTXaT3RQ3xU1z01yKS3Ez3Uw3y81yVWf/spV5bp5b4Ba4VJfqFrnMc8Y0t8Qtceku3S1zy9wKt8KtcqvcGrfGrXPr3Aa3wW1ym9wWt8Vtc9vcDrfD7XK73G632+3x1/wyqNvvDrgD7qA76A65L12G+8oddl+7I+4bd9R9646579xxd8KddN+7U+4Hd9qdcWfdOXfe/eguuJ/cReddcmRiZFLk7cjkyDuRKZGpkWmR6ZGUyIzIzMi7kVmR2ZE5kfcicyPvR+ZF5kcWRBZGUiMfRBZFFkfSIh9GlkQ+iqRHlkaWRZZHVkRWRrwvtC30RXxRH/U3+GL+Rl/cl/AlfSnvfGlfxt/ky/qbfTl/iy/vb/UV/G2+oq/kK/tHfTPf3LfwLX0r/5hv7R/3bXxb384/4dv7J30H/5RP8E/7jv4Z38n/zXf2z/ou/jnf1T/vu/nuvod/wff0L/pevrdP9H18X/+S7+f7+wF+oB/kX/aD/St+iH/VJ/mhfph/zQ/3r/sR/g0/0o/yo2Pe9GOyLpFhgk/2E/0k/7af7N/xU/xUP81P9yl+hp/p3/Wz/Gw/x7/n5/r3/Tw/3y/wC32q/8Av8ot9mv/QL/Ef+XS/NOumsV/lV/s1fq1f59f7DX6j3+Q3+y1+q9/mt/sdfqff5T/2u/0nfo/f6/f5T/1+/5k/4D/3B/0X/pD/0mf4r/xh/7U/4r/xR/23/pj/zh/3J/xJ/70/5X/wp/0Zf9af8+f9j/6C/8lf5L9ZY4wxxhj7l0y83BS/7fnldn6fP8gRv1q5LwBcvb1gxq/7M88oN+T7pd1fxLePAMDTvbs+lLXUqJGYmHhp3XQJQdH5AFmfBGX6+asHl+Kl0A6ehARoC2X/cP79Rffz9E/Gj94KkOtXObFwOb48/ucAmPgH4z/2xOhFFcKzcf+P8ecDFC96OScnXI6XQruf76+0hXL/YP75W/+T+ef8Ihmgza9ycsPl+PL8y8Dj8Awk/GZNxhhjjDHGGGPsF/1F5c5Z159Z3/j8o+vzeHU5Jwdcjv/Z9TljjDHGGGOMMcauvGe793jqsYSEtp3//Ua1/1LWv9xoCv9dI3PjDxveA2Q9ogDgPxwQILMh/8q92PqXbCvp0kvn77tWnPMB/M8o5Z/RuMIHJsYYY4wxxtif7vJJ/28fV1dqQowxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGWDb0V/w7sSu9j4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxtiV9n8CAAD//7wUAB0=") newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x181242, 0x0) syz_mount_image$cramfs(&(0x7f0000000440), &(0x7f00000005c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000240)=ANY=[], 0xfc, 0x161, &(0x7f00000002c0)="$eJzs0buLE1EUx/Hvnbl5gAlRjBAsTDqjQcgD7SRkxGDAOKAIYhWIIwoJEQNqabC1CNim8NHK/gub3S2WXZJm/4pt0i1sscVd7syEYf+H8+nuOZffuY+nj9dVReLJZPzpczCdBu8qL/1+99XprrkwBtJA9ko/2r/swAc0Sw2bGdjyQR7efxwFznAysutNBzKAdy2uMy5s53lFzUxDA+Nua/uZcJ8Tj4xqt+ANo6BFKlzf1uAVory6gdUfuIvBuxHVGijOABeUsoc3mSioVyvfVPBtUdv5f/xiddR7cL8d/Gx25/dyJbcG/MVT2UMneZL1qv/c7/vrVrP5KFtvODw8sYF8n1N4lvsCbxVom+cQ5qUp3dGv4YeCX+GszZ7K20v8PvfH0TnaNuCrWwFVXgwHpdS/QfG6g1vVtmsgvmfMflHYSV5ECCGEEEIIIYQQQgghhBBCCCGESFwGAAD//3QlUb0=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x80) getdents64(r3, &(0x7f0000001f80)=""/4102, 0x1006) 7.319742161s ago: executing program 5 (id=2040): io_uring_register$IORING_REGISTER_ENABLE_RINGS(0xffffffffffffffff, 0xc, 0xf0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00}, 0x94) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x3, @empty}, 0x1c) socket$netlink(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x10) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r2, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="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"/373], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) socket$packet(0x11, 0x3, 0x300) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={r3, 0x0, 0x25, 0x0, @val=@uprobe_multi={&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=[0x9, 0x5, 0x6, 0x258], &(0x7f0000000440)=[0x3, 0x2, 0x5, 0x3, 0x5], 0x7, 0x4}}, 0x40) shutdown(r2, 0x1) 7.168460203s ago: executing program 2 (id=2031): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = socket$inet6(0xa, 0x3, 0x2c) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x558, 0x320, 0xffffff80, 0x178, 0x0, 0x178, 0x488, 0x22b, 0x258, 0x488, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x300, 0x320, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{0x94}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}]}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1_to_bridge\x00', 'geneve1\x00'}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@ah={{0x30}}, @common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)="d1152a72ad6dd178929a38282feacce806475c3e7c883de58ead33fd09225b9093350cb253152e723760dd3c4cfc652c1fa120437773e16b67942c63f8c87404220c252c8a545fef26a27193a67e849e47db1c187f520c6b396d9c0cf18de14dbf3389883edd10b337d8687d2db4b499e8506b2fcef8cc17f6900651d949ae03ea2dcb2e75a33b868e52bcdbfe1f98271a7cef5fc6cc19ecf658652f67cd2b0394b7", 0xa2}], 0x1) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000000000001000000"]) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000056000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="100001"], 0x28}}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000080)={'ipvlan0\x00', @random='..\b\x00'}) 7.165058973s ago: executing program 0 (id=2032): socket$inet6_sctp(0xa, 0x5, 0x84) epoll_create1(0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb080003"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0) sendfile(r3, r1, 0x0, 0x100000000) 6.423604423s ago: executing program 4 (id=2033): socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$inet6(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000000700)={{r0}, "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"}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r1, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f"], 0x6c}}, 0x840) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x0, 0x0, {0x7, r4}, [@MDBA_SET_ENTRY={0x20, 0x1, {r6, 0x1, 0x0, 0x0, {@ip4=@broadcast}}}]}, 0x38}}, 0x0) 6.397490815s ago: executing program 5 (id=2034): syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c646973636172642c646973636172642c63703d307830303030303030303030303030303033b1a3f8a2fee170f42cf46f626172726965722c6e6f7265636f766572792c6f7264657374726963742c00"], 0x1, 0xa0d, &(0x7f0000002080)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)={0x14, r4, 0x711, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x24004894}, 0x0) 6.396692015s ago: executing program 6 (id=2035): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x800, 0x70) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x1, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) dup(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0xf59}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x6) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0f00000004000000040000"], 0x50) unlink(&(0x7f0000000040)='./bus\x00') 6.285434534s ago: executing program 0 (id=2036): prlimit64(0x0, 0xe, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x6, 0x4, 0x3, 0x7}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) io_cancel(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='page_pool_update_nid\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'gre0\x00'}) socket$packet(0x11, 0x2, 0x300) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, &(0x7f0000000100)={{}, {0xe}, 0xbf00, 0xbf}) 4.073338802s ago: executing program 4 (id=2037): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000160000000000001f0000000c00018008000100", @ANYRES32=r4], 0x20}}, 0x0) 4.031764325s ago: executing program 6 (id=2038): setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000), 0x8) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ptrace$ARCH_SHSTK_DISABLE(0x1e, r0, 0x2, 0x5002) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) rt_sigprocmask(0x2, &(0x7f0000000040)={[0x4]}, 0x0, 0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="540000000a0601020000000000000000020000000900020073797a310000000005000100070000002c0007800c00018008000140ffffffff0500070006000000060004404e2100000c00028008000140"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 4.025499156s ago: executing program 0 (id=2039): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000140)='bbr\x00', 0x4) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) semget(0x1, 0x4, 0x206) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1d, 0x2, 0x6) syz_io_uring_setup(0x1869, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r4, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) r6 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000040)={0x1d, r7, 0x2, {0x2, 0xff, 0x2}, 0xfe}, 0x18) r8 = syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r8, 0xc0405668, &(0x7f0000000100)={0x0, 0x1, 0x2}) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r5, {}, {0x6}, {0x0, 0xa}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 3.026266127s ago: executing program 4 (id=2041): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$netlink(r0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) 2.065273465s ago: executing program 4 (id=2042): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) 2.034390727s ago: executing program 6 (id=2043): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="02000000040000000800"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFCONF(r2, 0x8912, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x18) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r5}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x24048180) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) 1.963920652s ago: executing program 0 (id=2044): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000001180), 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f00000000c0), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r3, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) listen(0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 1.961183962s ago: executing program 2 (id=2045): openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$F2FS_IOC_RESIZE_FS(0xffffffffffffffff, 0x4008f510, &(0x7f0000000080)=0x7) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) socket$packet(0x11, 0x2, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r4, 0x10e, 0x5, &(0x7f0000000040)=""/162, &(0x7f0000000100)=0xa2) 1.723827321s ago: executing program 5 (id=2046): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeda}, 0x94) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$cgroup(0x0, &(0x7f0000000600)='.\x00', &(0x7f0000000640), 0x2208010, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) setgroups(0x0, 0x0) lseek(r3, 0x10000000005, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0xd) 400.891508ms ago: executing program 6 (id=2047): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000004340)=""/102376, 0x18fe8) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r2 = getpid() kcmp(r2, r2, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x34524742, 0x0, 0x7, [{}, {0xfffffff7}, {}, {}, {}, {0x0, 0x4}, {0x2000000}, {0xc28f}], 0x2}}) fcntl$getflags(0xffffffffffffffff, 0xb) bind$phonet(0xffffffffffffffff, &(0x7f0000000040)={0x23, 0x19, 0x6, 0x7}, 0x10) getrlimit(0xd, &(0x7f0000000100)) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@mask_cswp={0x58, 0x114, 0x9, {{0x8, 0x8}, &(0x7f0000000140)=0x6, 0x0, 0x6, 0x2, 0x7ff, 0x4, 0x22, 0xfffffffffffffffa}}], 0x58, 0x8004}, 0x0) socket$kcm(0x29, 0x5, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) 0s ago: executing program 0 (id=2048): socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080fffffffe0000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000c00)={0x0, 0x0, 0x0}, 0x2000) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800060000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES64=r6], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x88010) kernel console output (not intermixed with test programs): 23] usb 2-1: not running at top speed; connect to a high speed hub [ 185.994915][ T5615] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 186.020370][ T5620] bridge0: port 4(vlan2) entered blocking state [ 186.045374][ T5615] EXT4-fs (loop0): mounted filesystem without journal. Opts: discard,bh,noblock_validity,,errors=continue. Quota mode: none. [ 186.074264][ T5620] bridge0: port 4(vlan2) entered disabled state [ 186.091842][ T23] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 186.109656][ T5620] device vlan2 entered promiscuous mode [ 186.125572][ T23] usb 2-1: config 1 has no interface number 1 [ 186.159960][ T5615] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.351: bg 0: block 353: padding at end of block bitmap is not set [ 186.177965][ T5620] device bond0 entered promiscuous mode [ 186.187425][ T5620] device bond_slave_0 entered promiscuous mode [ 186.194048][ T5620] device bond_slave_1 entered promiscuous mode [ 186.209869][ T5620] device vxlan0 entered promiscuous mode [ 186.217642][ T5620] device macvlan2 entered promiscuous mode [ 186.235665][ T5626] netlink: 'syz.4.355': attribute type 1 has an invalid length. [ 186.278859][ T5617] loop2: detected capacity change from 0 to 32768 [ 186.294071][ T26] audit: type=1326 audit(1756477862.002:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5614 comm="syz.0.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe356dbebe9 code=0x7ffc0000 [ 186.321939][ T26] audit: type=1326 audit(1756477862.002:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5614 comm="syz.0.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe356dbebe9 code=0x7ffc0000 [ 186.346825][ T26] audit: type=1326 audit(1756477862.032:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5614 comm="syz.0.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7fe356dbebe9 code=0x7ffc0000 [ 186.348453][ T23] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 186.371165][ C0] vkms_vblank_simulate: vblank timer overrun [ 186.384002][ T26] audit: type=1326 audit(1756477862.082:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5614 comm="syz.0.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe356dbebe9 code=0x7ffc0000 [ 186.391219][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.442866][ T26] audit: type=1326 audit(1756477862.082:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5614 comm="syz.0.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe356dbebe9 code=0x7ffc0000 [ 186.468770][ C0] vkms_vblank_simulate: vblank timer overrun [ 186.473699][ T23] usb 2-1: Product: syz [ 186.482863][ T23] usb 2-1: Manufacturer: syz [ 186.491134][ T23] usb 2-1: SerialNumber: syz [ 186.562341][ T5617] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 187.528555][ T23] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 188.355545][ T23] usb 2-1: USB disconnect, device number 3 [ 188.660735][ T5657] bridge0: port 5(batadv1) entered blocking state [ 188.672294][ T5657] bridge0: port 5(batadv1) entered disabled state [ 188.688270][ T5657] device batadv1 entered promiscuous mode [ 188.753428][ T5662] netlink: 4 bytes leftover after parsing attributes in process `syz.0.364'. [ 188.815015][ T4176] udevd[4176]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 188.994512][ T5617] syz.2.353 (5617) used greatest stack depth: 19104 bytes left [ 189.039470][ T5664] overlayfs: failed to resolve './file0': -2 [ 189.068054][ T5668] loop1: detected capacity change from 0 to 2048 [ 189.270109][ C0] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:1b [ 189.379439][ T4903] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 189.389440][ T4903] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 189.706313][ C1] ip6_tunnel: ip6gretap0 xmit: Routing loop! Remote address found on this node! [ 189.828815][ T5668] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 189.909171][ T5668] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 189.948822][ T5676] fuse: Bad value for 'group_id' [ 190.779614][ T4193] ocfs2: Unmounting device (7,2) on (node local) [ 191.967030][ T5704] tipc: Started in network mode [ 192.009304][ T5704] tipc: Node identity , cluster identity 4711 [ 192.028590][ T5704] tipc: Failed to obtain node identity [ 192.036195][ T5704] tipc: Enabling of bearer rejected, failed to enable media [ 192.086067][ T4184] UDF-fs: error (device loop1): udf_verify_fi: directory (ino 1376) has entry at pos 0 with incorrect tag 0 [ 192.190119][ T4184] UDF-fs: error (device loop1): udf_verify_fi: directory (ino 1376) has entry at pos 0 with incorrect tag 0 [ 192.669280][ T5701] device syzkaller0 entered promiscuous mode [ 194.388174][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.394785][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.423062][ T4899] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.602379][ T5732] loop3: detected capacity change from 0 to 512 [ 195.695816][ T5732] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.388: casefold flag without casefold feature [ 195.729677][ T5732] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.388: couldn't read orphan inode 15 (err -117) [ 195.795249][ T4899] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.808606][ T5732] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 195.843144][ T5739] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 195.852894][ T5739] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 195.862733][ T5739] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 195.874752][ T26] audit: type=1800 audit(1756477871.552:58): pid=5739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.387" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 196.160873][ T4899] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.167756][ T5732] overlayfs: failed to resolve './file0': -2 [ 196.200870][ T5742] lo speed is unknown, defaulting to 1000 [ 196.227021][ T5742] lo speed is unknown, defaulting to 1000 [ 196.269218][ T4899] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.752581][ T5767] loop0: detected capacity change from 0 to 256 [ 197.994741][ T1326] Bluetooth: hci2: command 0x0409 tx timeout [ 198.070742][ T5742] chnl_net:caif_netlink_parms(): no params data found [ 198.203967][ T5780] overlayfs: failed to clone upperpath [ 198.883377][ T5777] netlink: 'syz.3.400': attribute type 4 has an invalid length. [ 199.073082][ T4734] lo speed is unknown, defaulting to 1000 [ 199.166262][ T5742] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.314392][ T5742] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.436146][ T5742] device bridge_slave_0 entered promiscuous mode [ 200.064674][ T4185] Bluetooth: hci2: command 0x041b tx timeout [ 200.285404][ T5742] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.324493][ T5742] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.367060][ T5742] device bridge_slave_1 entered promiscuous mode [ 200.390696][ T5809] netlink: 'syz.2.407': attribute type 10 has an invalid length. [ 200.448381][ T5809] netlink: 40 bytes leftover after parsing attributes in process `syz.2.407'. [ 200.499287][ T5809] netlink: 'syz.2.407': attribute type 10 has an invalid length. [ 200.514734][ T5809] netlink: 40 bytes leftover after parsing attributes in process `syz.2.407'. [ 200.570720][ T5742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.627384][ T5742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.736337][ T5742] team0: Port device team_slave_0 added [ 201.807188][ T5831] netlink: 'syz.4.413': attribute type 10 has an invalid length. [ 201.839526][ T5831] netlink: 40 bytes leftover after parsing attributes in process `syz.4.413'. [ 201.969305][ T5831] team0: Failed to send port change of device geneve0 via netlink (err -105) [ 201.984790][ T5831] team0: Failed to send options change via netlink (err -105) [ 202.002389][ T5831] team0: Port device geneve0 added [ 202.022394][ T5742] team0: Port device team_slave_1 added [ 202.032870][ T5835] loop2: detected capacity change from 0 to 32768 [ 202.117630][ T5742] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 202.117988][ T5835] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.414 (5835) [ 202.139685][ T5742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.173425][ T4734] Bluetooth: hci2: command 0x040f tx timeout [ 202.212607][ T5742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 202.354493][ T5844] usb usb1: usbfs: process 5844 (syz.3.415) did not claim interface 6 before use [ 202.368717][ T5844] loop3: detected capacity change from 0 to 256 [ 202.399692][ T5835] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 202.421904][ T5742] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 202.461260][ T5742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.635063][ T5835] BTRFS info (device loop2): using free space tree [ 202.657561][ T5835] BTRFS info (device loop2): has skinny extents [ 202.987564][ T5742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 203.654638][ T5835] BTRFS info (device loop2): enabling ssd optimizations [ 203.677487][ T5742] device hsr_slave_0 entered promiscuous mode [ 203.849371][ T5742] device hsr_slave_1 entered promiscuous mode [ 203.890742][ T26] audit: type=1800 audit(1756477879.602:59): pid=5835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.414" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 203.915553][ T5742] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 203.937048][ T5742] Cannot create hsr debugfs directory [ 203.988528][ T26] audit: type=1800 audit(1756477879.702:60): pid=5886 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.414" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 204.233957][ T4899] device hsr_slave_0 left promiscuous mode [ 204.251360][ T4899] device hsr_slave_1 left promiscuous mode [ 204.325732][ T1111] Bluetooth: hci2: command 0x0419 tx timeout [ 204.352126][ T4899] batman_adv: batadv0: Interface deactivated: dummy0 [ 204.376516][ T4899] batman_adv: batadv0: Removing interface: dummy0 [ 204.523377][ T4899] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.561036][ T4899] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 204.687971][ T4899] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.048036][ T4899] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 205.068086][ T4899] device bridge_slave_1 left promiscuous mode [ 205.085064][ T4899] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.159819][ T4899] device bridge_slave_0 left promiscuous mode [ 205.180541][ T4899] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.435196][ T4899] device veth1_macvtap left promiscuous mode [ 205.453287][ T4899] device veth0_macvtap left promiscuous mode [ 205.462745][ T4899] device veth1_vlan left promiscuous mode [ 205.476828][ T4899] device veth0_vlan left promiscuous mode [ 205.913171][ T4899] team0 (unregistering): Port device team_slave_1 removed [ 205.935806][ T4899] team0 (unregistering): Port device team_slave_0 removed [ 205.960471][ T4899] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 205.977362][ T4899] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 206.090003][ T4899] bond0 (unregistering): Released all slaves [ 206.182785][ T5895] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 206.191591][ T5895] batman_adv: batadv0: Interface deactivated: dummy0 [ 206.198945][ T5895] batman_adv: batadv0: Removing interface: dummy0 [ 206.213634][ T5895] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 206.222432][ T5895] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 206.239337][ T5895] device bridge_slave_0 left promiscuous mode [ 206.246019][ T5895] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.260905][ T5895] device bridge_slave_1 left promiscuous mode [ 206.271345][ T5895] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.282882][ T5895] bond0: (slave bond_slave_0): Releasing backup interface [ 206.304305][ T5895] bond0: (slave bond_slave_1): Releasing backup interface [ 206.349731][ T5895] team0: Port device team_slave_0 removed [ 206.370420][ T5895] team0: Port device team_slave_1 removed [ 206.378404][ T5895] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 206.387304][ T5895] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 206.397029][ T5895] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 206.405312][ T5895] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 206.419086][ T5895] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 206.428131][ T5895] bond1: (slave bridge1): Releasing active interface [ 206.449700][ T5897] team0: Mode changed to "loadbalance" [ 206.503765][ T5908] netlink: 'syz.3.426': attribute type 10 has an invalid length. [ 206.814266][ T5742] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 206.841272][ T5742] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 206.862437][ T5742] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 206.890326][ T5742] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 207.368908][ T5958] SET target dimension over the limit! [ 207.434840][ T26] audit: type=1326 audit(1756477883.132:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5955 comm="syz.4.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe67a87ebe9 code=0x7ffc0000 [ 207.504193][ T26] audit: type=1326 audit(1756477883.182:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5955 comm="syz.4.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe67a87ebe9 code=0x7ffc0000 [ 207.597357][ T5742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.622544][ T26] audit: type=1326 audit(1756477883.182:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5955 comm="syz.4.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe67a87ebe9 code=0x7ffc0000 [ 207.678228][ T5972] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 207.683059][ T5957] tipc: New replicast peer: 255.255.255.255 [ 207.716370][ T5957] tipc: Enabled bearer , priority 10 [ 207.736280][ T5970] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 207.749229][ T5972] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 207.772192][ T5972] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 207.779869][ T5024] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 207.799332][ T26] audit: type=1326 audit(1756477883.182:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5955 comm="syz.4.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe67a87ebe9 code=0x7ffc0000 [ 207.829834][ T5024] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 207.835643][ T5972] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 207.851343][ T5742] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.855635][ T5972] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 207.916038][ T5972] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 207.930281][ T26] audit: type=1326 audit(1756477883.192:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5955 comm="syz.4.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe67a87ebe9 code=0x7ffc0000 [ 207.944741][ T5972] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 207.987518][ T5026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 208.007924][ T5026] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 208.033877][ T26] audit: type=1326 audit(1756477883.192:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5955 comm="syz.4.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe67a87ebe9 code=0x7ffc0000 [ 208.065153][ T5972] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 208.085414][ T5026] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.092691][ T5026] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.109100][ T5972] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 208.146685][ T5972] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 208.165993][ T5026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 208.189549][ T5026] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 208.211717][ T5026] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.219384][ T5026] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.242953][ T5026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 208.280358][ T26] audit: type=1326 audit(1756477883.192:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5955 comm="syz.4.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe67a87ebe9 code=0x7ffc0000 [ 208.312389][ T5026] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 208.343423][ T5991] netlink: 'syz.2.439': attribute type 12 has an invalid length. [ 208.390774][ T4920] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 210.185526][ T4920] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 210.323003][ T26] audit: type=1326 audit(1756477883.192:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5955 comm="syz.4.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe67a87ebe9 code=0x7ffc0000 [ 210.349819][ T26] audit: type=1326 audit(1756477883.192:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5955 comm="syz.4.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe67a87ebe9 code=0x7ffc0000 [ 210.444877][ T4920] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 210.446510][ T26] audit: type=1326 audit(1756477883.212:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5955 comm="syz.4.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe67a87ebe9 code=0x7ffc0000 [ 210.464953][ T4920] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 211.161812][ T26] audit: type=1326 audit(1756477883.272:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5955 comm="syz.4.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe67a87ebe9 code=0x7ffc0000 [ 211.194361][ T26] audit: type=1326 audit(1756477883.272:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5955 comm="syz.4.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe67a87ebe9 code=0x7ffc0000 [ 211.218353][ T4914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 211.240260][ T4914] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 211.280952][ T4914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 211.339553][ T4914] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 211.372274][ T26] audit: type=1326 audit(1756477883.322:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5955 comm="syz.4.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe67a880b07 code=0x7ffc0000 [ 211.403757][ T4914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 211.463953][ T26] audit: type=1326 audit(1756477883.322:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5955 comm="syz.4.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fe67a880a7c code=0x7ffc0000 [ 211.466112][ T4914] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 211.487191][ T26] audit: type=1326 audit(1756477883.322:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5955 comm="syz.4.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fe67a8809b4 code=0x7ffc0000 [ 211.548059][ T26] audit: type=1326 audit(1756477883.322:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5955 comm="syz.4.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fe67a8809b4 code=0x7ffc0000 [ 211.970275][ T5742] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 212.031912][ T26] audit: type=1326 audit(1756477883.322:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5955 comm="syz.4.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe67a87d84a code=0x7ffc0000 [ 212.281721][ T6025] loop3: detected capacity change from 0 to 512 [ 213.035138][ T6025] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 213.122663][ T6025] System zones: 0-2, 18-18, 34-35 [ 213.216385][ T6025] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 213.236301][ T6025] ext4 filesystem being mounted at /93/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 213.264325][ T4903] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 213.295985][ T4903] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 213.309864][ T5742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.962384][ T6062] netlink: 4 bytes leftover after parsing attributes in process `syz.0.463'. [ 215.373653][ T6076] loop0: detected capacity change from 0 to 128 [ 216.158297][ T6076] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 216.193902][ T6081] loop3: detected capacity change from 0 to 512 [ 216.296623][ T6081] EXT4-fs (loop3): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 216.298845][ T6076] nftables ruleset with unbound chain [ 216.356798][ T6081] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 216.387995][ T6081] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 216.403586][ T6081] EXT4-fs (loop3): DAX unsupported by block device. [ 217.639842][ T6076] UDF-fs: error (device loop0): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 217.666399][ T5026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 217.743239][ T5026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 219.144404][ T4920] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 219.196133][ T4920] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 219.267869][ T4920] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 219.285017][ T6107] loop3: detected capacity change from 0 to 2048 [ 219.328648][ T4920] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 219.391683][ T5742] device veth0_vlan entered promiscuous mode [ 219.535838][ T6120] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20000 [ 219.563661][ T6107] EXT4-fs (loop3): failed to initialize system zone (-117) [ 219.581189][ T6107] EXT4-fs (loop3): mount failed [ 219.593035][ T6114] ÿÿÿÿÿÿ: renamed from vlan1 [ 219.617921][ T6124] netlink: 'syz.0.468': attribute type 16 has an invalid length. [ 219.652038][ T6124] netlink: 'syz.0.468': attribute type 3 has an invalid length. [ 219.673528][ T6124] netlink: 132 bytes leftover after parsing attributes in process `syz.0.468'. [ 219.768631][ T5742] device veth1_vlan entered promiscuous mode [ 219.911909][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 219.944217][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 220.011364][ T5742] device veth0_macvtap entered promiscuous mode [ 220.063826][ T5742] device veth1_macvtap entered promiscuous mode [ 220.076819][ T6140] overlayfs: failed to clone upperpath [ 220.149778][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 220.171644][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 220.215287][ T6144] netlink: 92 bytes leftover after parsing attributes in process `syz.2.474'. [ 220.226687][ T6143] binfmt_misc: register: failed to install interpreter file ./file1 [ 220.262602][ T5742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.283207][ T5742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.295610][ T5742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.306732][ T5742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.317996][ T5742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.331629][ T5742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.356234][ T5742] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.365751][ T4903] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 220.383248][ T4903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 220.435405][ T5742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.463510][ T5742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.599656][ T5742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.620133][ T5742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.631545][ T5742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.642804][ T5742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.661224][ T5742] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.700576][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 221.147226][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 221.287531][ T5742] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.310804][ T5742] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.321631][ T5742] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.349842][ T5742] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.617366][ T6173] netlink: 60 bytes leftover after parsing attributes in process `syz.0.482'. [ 221.755938][ T4920] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.019904][ T4920] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.627207][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 222.763009][ T6188] syz.0.486 sent an empty control message without MSG_MORE. [ 223.631027][ T5019] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.654320][ T5019] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.880852][ T4903] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 224.106079][ T6199] device bridge3 entered promiscuous mode [ 224.175011][ T6199] team0: Port device bridge3 added [ 225.213426][ T6219] netlink: 12 bytes leftover after parsing attributes in process `syz.4.504'. [ 225.994808][ T6226] loop2: detected capacity change from 0 to 128 [ 226.046947][ T6226] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 226.206784][ T6238] usb usb1: usbfs: process 6238 (syz.0.494) did not claim interface 6 before use [ 226.290348][ T6238] loop0: detected capacity change from 0 to 256 [ 226.639022][ T6250] xt_CT: You must specify a L4 protocol and not use inversions on it [ 228.573359][ T6261] 9pnet: Insufficient options for proto=fd [ 228.577262][ T6259] net_ratelimit: 28 callbacks suppressed [ 228.577282][ T6259] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 228.619456][ T6259] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 228.880026][ T6259] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 229.240003][ T6259] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 229.264175][ T6259] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 229.349212][ T6259] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 229.386454][ T6259] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 229.397466][ T6259] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 229.551739][ T6259] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 229.607256][ T6259] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 231.548943][ T6317] SET target dimension over the limit! [ 232.354117][ T5914] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 232.618395][ T6334] netlink: 'syz.3.522': attribute type 12 has an invalid length. [ 232.630461][ T5914] usb 6-1: Using ep0 maxpacket: 8 [ 233.943517][ T5914] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 233.994461][ T5914] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 234.033005][ T5914] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 234.089910][ T6352] loop0: detected capacity change from 0 to 128 [ 234.099462][ T5914] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 234.114988][ T5914] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 234.124697][ T5914] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.172486][ T6352] ADFS-fs (loop0): unrecognised mount option "ownmask=00000000000000000ÛV×”006126" or missing value [ 234.872872][ T5914] usb 6-1: can't set config #1, error -71 [ 234.914122][ T5914] usb 6-1: USB disconnect, device number 2 [ 235.087387][ T6352] loop0: detected capacity change from 0 to 8192 [ 235.095758][ T6365] loop3: detected capacity change from 0 to 64 [ 235.233280][ T6352] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 235.503974][ T6352] REISERFS (device loop0): using ordered data mode [ 235.620235][ T6352] reiserfs: using flush barriers [ 235.913210][ T6352] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 235.978127][ T6352] REISERFS (device loop0): checking transaction log (loop0) [ 236.099502][ T6352] REISERFS (device loop0): Using r5 hash to sort names [ 236.225131][ T6352] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 236.302041][ T6365] overlayfs: filesystem on './file1' not supported [ 237.036673][ T6352] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 3669, free_space(entry_count) 2 [ 237.088746][ T6352] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 532. Fsck? [ 237.110427][ T6352] REISERFS (device loop0): Remounting filesystem read-only [ 237.143237][ T6352] REISERFS error (device loop0): vs-5350 reiserfs_delete_solid_item: i/o failure occurred trying to delete [-1 2 0x1 IND] [ 237.241581][ T6352] REISERFS warning (device loop0): clm-6006 reiserfs_dirty_inode: writing inode 2 on readonly FS [ 237.258110][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 237.258123][ T26] audit: type=1326 audit(1756480490.975:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6394 comm="syz.3.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd63dbacbe9 code=0x7ffc0000 [ 237.329282][ T6395] tipc: Started in network mode [ 237.371975][ T6395] tipc: Node identity ac14140f, cluster identity 4711 [ 237.387146][ T6395] tipc: New replicast peer: 255.255.255.255 [ 237.396253][ T26] audit: type=1326 audit(1756480490.975:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6394 comm="syz.3.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd63dbacbe9 code=0x7ffc0000 [ 237.411509][ T1111] Process accounting resumed [ 237.433662][ T6395] tipc: Enabled bearer , priority 10 [ 237.452050][ T26] audit: type=1326 audit(1756480491.005:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6394 comm="syz.3.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7fd63dbacbe9 code=0x7ffc0000 [ 237.481881][ T6401] Process accounting resumed [ 237.575241][ T26] audit: type=1326 audit(1756480491.005:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6394 comm="syz.3.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd63dbacbe9 code=0x7ffc0000 [ 237.656358][ T26] audit: type=1326 audit(1756480491.005:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6394 comm="syz.3.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd63dbacbe9 code=0x7ffc0000 [ 237.748071][ T26] audit: type=1326 audit(1756480491.005:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6394 comm="syz.3.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd63dbacbe9 code=0x7ffc0000 [ 237.792513][ T26] audit: type=1326 audit(1756480491.005:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6394 comm="syz.3.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd63dbacbe9 code=0x7ffc0000 [ 238.051149][ T6410] net_ratelimit: 104 callbacks suppressed [ 238.051218][ T6410] netlink: zone id is out of range [ 238.353349][ T26] audit: type=1326 audit(1756480491.005:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6394 comm="syz.3.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd63dbacbe9 code=0x7ffc0000 [ 238.425447][ T26] audit: type=1326 audit(1756480491.005:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6394 comm="syz.3.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd63dbacbe9 code=0x7ffc0000 [ 238.510900][ T26] audit: type=1326 audit(1756480491.005:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6394 comm="syz.3.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd63dbacbe9 code=0x7ffc0000 [ 238.728951][ T1111] tipc: Node number set to 2886997007 [ 239.550611][ T6434] netlink: 12 bytes leftover after parsing attributes in process `syz.0.543'. [ 242.368451][ T6455] loop5: detected capacity change from 0 to 64 [ 242.387572][ T6458] device batadv2 entered promiscuous mode [ 242.531295][ T6455] overlayfs: filesystem on './file1' not supported [ 242.559827][ T6459] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 242.803267][ T6473] ÿÿÿÿÿÿ: renamed from vlan1 [ 242.889442][ T6472] netlink: 4 bytes leftover after parsing attributes in process `syz.0.551'. [ 247.718742][ T6509] netlink: 12 bytes leftover after parsing attributes in process `syz.3.560'. [ 249.796259][ T6535] overlayfs: failed to clone upperpath [ 249.810107][ T6540] overlayfs: failed to clone lowerpath [ 249.825270][ T6538] loop5: detected capacity change from 0 to 1024 [ 249.863028][ T6543] fuse: Bad value for 'group_id' [ 250.021497][ T6545] netlink: 28 bytes leftover after parsing attributes in process `syz.0.567'. [ 250.195214][ T6538] hfsplus: invalid extended attribute record [ 250.569905][ T5030] hfsplus: b-tree write err: -5, ino 4 [ 254.746570][ T6598] loop5: detected capacity change from 0 to 512 [ 254.762155][ T6593] overlayfs: failed to clone upperpath [ 254.858127][ T6598] EXT4-fs error (device loop5): ext4_orphan_get:1401: inode #15: comm syz.5.578: casefold flag without casefold feature [ 254.885993][ T6598] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.578: couldn't read orphan inode 15 (err -117) [ 254.988071][ T6598] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 255.009136][ T6610] device team0 entered promiscuous mode [ 255.025880][ T6614] overlayfs: failed to clone lowerpath [ 255.035510][ T6610] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 255.078325][ T6614] fuse: Bad value for 'group_id' [ 255.094802][ T6610] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 255.176972][ T6616] bridge0: port 1(vlan3) entered blocking state [ 255.211419][ T6616] bridge0: port 1(vlan3) entered disabled state [ 255.234145][ T6618] netlink: 'syz.4.583': attribute type 10 has an invalid length. [ 255.244069][ T6616] device vlan3 entered promiscuous mode [ 255.258568][ T6616] device bond0 entered promiscuous mode [ 255.270368][ T6618] netlink: 40 bytes leftover after parsing attributes in process `syz.4.583'. [ 255.288324][ T6616] device macvlan2 entered promiscuous mode [ 255.314882][ T6618] netlink: 'syz.4.583': attribute type 10 has an invalid length. [ 255.330581][ T6618] netlink: 40 bytes leftover after parsing attributes in process `syz.4.583'. [ 255.497357][ T6628] tipc: Started in network mode [ 255.510712][ T6628] tipc: Node identity , cluster identity 4711 [ 255.517829][ T6628] tipc: Failed to obtain node identity [ 255.530708][ T6628] tipc: Enabling of bearer rejected, failed to enable media [ 255.592127][ T6630] device syzkaller0 entered promiscuous mode [ 255.661517][ T6627] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 255.875577][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.884322][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.377296][ T6620] loop3: detected capacity change from 0 to 32768 [ 256.438966][ T6632] syz.4.587 (6632) used greatest stack depth: 17216 bytes left [ 256.638753][ T6620] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 258.211369][ T26] kauditd_printk_skb: 19 callbacks suppressed [ 258.211387][ T26] audit: type=1800 audit(1756480511.927:112): pid=6620 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.584" name="file1" dev="loop3" ino=17058 res=0 errno=0 [ 258.367566][ T6660] loop0: detected capacity change from 0 to 256 [ 259.026407][ T6635] loop5: detected capacity change from 0 to 32768 [ 259.206974][ T6635] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 259.301509][ T6635] JBD2: recovery failed [ 259.342700][ T6635] (syz.5.585,6635,0):ocfs2_journal_load:1105 ERROR: Failed to load journal! [ 259.890232][ T6635] (syz.5.585,6635,0):ocfs2_check_volume:2437 ERROR: ocfs2 journal load failed! -5 [ 260.029858][ T6635] (syz.5.585,6635,1):ocfs2_check_volume:2493 ERROR: status = -5 [ 260.109699][ T6635] (syz.5.585,6635,0):ocfs2_mount_volume:1824 ERROR: status = -5 [ 260.111065][ T4183] ocfs2: Unmounting device (7,3) on (node local) [ 260.139604][ T6635] (syz.5.585,6635,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 260.480186][ T6686] fuse: Bad value for 'group_id' [ 263.540273][ T26] audit: type=1326 audit(1756480517.258:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6703 comm="syz.4.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe67a87ebe9 code=0x7ffc0000 [ 263.635978][ T26] audit: type=1326 audit(1756480517.348:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6703 comm="syz.4.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7fe67a87ebe9 code=0x7ffc0000 [ 263.700017][ T6725] netlink: 'syz.0.607': attribute type 4 has an invalid length. [ 263.723898][ T26] audit: type=1326 audit(1756480517.348:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6703 comm="syz.4.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe67a87ebe9 code=0x7ffc0000 [ 263.835918][ T26] audit: type=1326 audit(1756480517.348:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6703 comm="syz.4.601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe67a87ebe9 code=0x7ffc0000 [ 264.708668][ T26] audit: type=1326 audit(1756480518.418:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6737 comm="syz.2.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb04f8b7be9 code=0x7ffc0000 [ 264.819718][ T26] audit: type=1326 audit(1756480518.488:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6737 comm="syz.2.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb04f8b7be9 code=0x7ffc0000 [ 264.842439][ T26] audit: type=1326 audit(1756480518.488:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6737 comm="syz.2.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb04f8b7be9 code=0x7ffc0000 [ 264.865465][ T26] audit: type=1326 audit(1756480518.488:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6737 comm="syz.2.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb04f8b7be9 code=0x7ffc0000 [ 264.889444][ T26] audit: type=1326 audit(1756480518.488:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6737 comm="syz.2.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fb04f8b7be9 code=0x7ffc0000 [ 264.913679][ T26] audit: type=1326 audit(1756480518.488:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6737 comm="syz.2.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb04f8b7be9 code=0x7ffc0000 [ 271.094219][ T6816] device batadv1 entered promiscuous mode [ 271.357444][ T6824] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 271.617994][ T6820] bridge0: port 3(batadv1) entered blocking state [ 271.654276][ T6820] bridge0: port 3(batadv1) entered disabled state [ 271.765843][ T6820] device batadv1 entered promiscuous mode [ 272.257004][ T4899] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 272.266429][ T4899] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 272.446600][ T6838] loop3: detected capacity change from 0 to 2048 [ 273.506405][ T6838] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 273.583605][ T6859] loop5: detected capacity change from 0 to 128 [ 273.597507][ T6860] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 273.701236][ T6859] ADFS-fs (loop5): unrecognised mount option "ownmask=00000000000000000ÛV×”006126" or missing value [ 274.575944][ T6859] loop5: detected capacity change from 0 to 8192 [ 274.585996][ T4183] NILFS (loop3): DAT doesn't have a block to manage vblocknr = 147 [ 274.635304][ T4183] NILFS error (device loop3): nilfs_bmap_truncate: broken bmap (inode number=15) [ 274.713438][ T6859] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 274.728431][ T6859] REISERFS (device loop5): using ordered data mode [ 274.730943][ T4183] Remounting filesystem read-only [ 274.760657][ T4183] NILFS (loop3): error -5 truncating bmap (ino=15) [ 274.864731][ T6859] reiserfs: using flush barriers [ 275.167587][ T6859] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 275.301774][ T4183] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 275.307453][ T6859] REISERFS (device loop5): checking transaction log (loop5) [ 275.320565][ T6859] REISERFS (device loop5): Using r5 hash to sort names [ 275.348055][ T6859] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 275.572606][ T6859] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 3669, free_space(entry_count) 2 [ 275.697120][ T6859] REISERFS error (device loop5): vs-5150 search_by_key: invalid format found in block 532. Fsck? [ 275.708681][ T6859] REISERFS (device loop5): Remounting filesystem read-only [ 275.716093][ T6859] REISERFS error (device loop5): vs-5350 reiserfs_delete_solid_item: i/o failure occurred trying to delete [-1 2 0x1 IND] [ 276.758652][ T6859] REISERFS warning (device loop5): clm-6006 reiserfs_dirty_inode: writing inode 2 on readonly FS [ 278.182345][ T6908] bridge0: port 2(batadv1) entered blocking state [ 278.191558][ T6908] bridge0: port 2(batadv1) entered disabled state [ 278.200014][ T6908] device batadv1 entered promiscuous mode [ 278.418913][ T6928] device batadv1 entered promiscuous mode [ 278.448247][ T6931] loop3: detected capacity change from 0 to 256 [ 278.615580][ T6931] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 278.723057][ T4903] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 278.734900][ T4903] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 278.742894][ T6933] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 278.802873][ T6943] netlink: 24 bytes leftover after parsing attributes in process `syz.2.657'. [ 278.961173][ T6948] loop5: detected capacity change from 0 to 512 [ 279.168392][ T6948] Illegal XDP return value 4294967274, expect packet loss! [ 280.417527][ T6976] netlink: 4 bytes leftover after parsing attributes in process `syz.0.663'. [ 280.630054][ T6978] loop5: detected capacity change from 0 to 32768 [ 281.154422][ T6978] XFS (loop5): Mounting V5 Filesystem [ 282.134590][ T6978] XFS (loop5): Ending clean mount [ 282.155121][ T6978] XFS (loop5): Quotacheck needed: Please wait. [ 285.698131][ T6978] XFS (loop5): Quotacheck: Done. [ 285.825407][ T5742] XFS (loop5): Unmounting Filesystem [ 289.277869][ T7077] loop3: detected capacity change from 0 to 512 [ 291.656427][ C0] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:0c [ 292.107462][ T7119] overlayfs: failed to clone upperpath [ 292.431863][ T7132] overlayfs: failed to clone upperpath [ 292.541397][ T7130] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 295.184049][ T4894] wlan1: Trigger new scan to find an IBSS to join [ 297.297753][ T7189] loop3: detected capacity change from 0 to 256 [ 298.179641][ T7200] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 298.270903][ T7200] batman_adv: batadv0: Interface deactivated: dummy0 [ 298.279079][ T7200] batman_adv: batadv0: Removing interface: dummy0 [ 299.094243][ T7200] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 299.259055][ T7200] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 299.353374][ T7200] device bridge_slave_0 left promiscuous mode [ 299.364219][ T7200] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.597760][ T7200] device bridge_slave_1 left promiscuous mode [ 299.693554][ T7220] xt_time: unknown flags 0xc [ 299.771794][ T7220] loop0: detected capacity change from 0 to 2048 [ 299.814924][ T7200] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.283379][ T4914] wlan1: Trigger new scan to find an IBSS to join [ 300.426450][ T6667] GPT:first_usable_lbas don't match. [ 300.433081][ T6667] GPT:34 != 290 [ 300.438186][ T6667] GPT: Use GNU Parted to correct GPT errors. [ 300.456090][ T7200] bond0: (slave bond_slave_0): Releasing backup interface [ 300.459475][ T6667] loop0: p1 p2 p3 [ 300.548945][ T7220] GPT:first_usable_lbas don't match. [ 300.554765][ T7220] GPT:34 != 290 [ 300.558791][ T7220] GPT: Use GNU Parted to correct GPT errors. [ 300.564890][ T7220] loop0: p1 p2 p3 [ 300.666093][ T7200] bond0: (slave bond_slave_1): Releasing backup interface [ 301.252474][ T7235] loop0: detected capacity change from 0 to 32768 [ 301.659960][ T7200] team0: Port device team_slave_0 removed [ 301.681270][ T7235] XFS (loop0): Mounting V5 Filesystem [ 301.712943][ T4914] wlan1: Creating new IBSS network, BSSID 72:2e:9c:a3:af:01 [ 301.763340][ T7235] XFS (loop0): Ending clean mount [ 302.352235][ T7235] XFS (loop0): Quotacheck needed: Please wait. [ 302.377394][ T6601] udevd[6601]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 302.390598][ T6590] udevd[6590]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 302.404393][ T7200] team0: Port device team_slave_1 removed [ 302.425015][ T6672] udevd[6672]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 302.436673][ T7200] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 302.492451][ T7200] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 302.513701][ T7200] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 302.524674][ T7253] loop3: detected capacity change from 0 to 1764 [ 302.535241][ T7200] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 302.562515][ T7235] XFS (loop0): Quotacheck: Done. [ 302.680275][ T7200] bond1: (slave bridge1): Releasing active interface [ 303.629845][ T7200] device batadv1 left promiscuous mode [ 303.635891][ T7200] bridge0: port 3(batadv1) entered disabled state [ 303.669550][ T7205] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 303.680005][ T7205] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 303.687786][ T7205] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 303.811730][ T4182] XFS (loop0): Unmounting Filesystem [ 304.074139][ T6672] udevd[6672]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 304.087372][ T6601] udevd[6601]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 304.135005][ T6667] udevd[6667]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 305.228553][ T7276] loop5: detected capacity change from 0 to 32768 [ 306.170015][ T7276] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 306.179483][ T7276] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 306.220731][ T7283] siw: device registration error -23 [ 306.244561][ T7276] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 306.260836][ T4185] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 306.270314][ T4185] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 306.337590][ T4185] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 67ms [ 306.356900][ T4185] gfs2: fsid=syz:syz.0: jid=0: Done [ 306.366252][ T7276] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 306.399412][ T7276] attempt to access beyond end of device [ 306.399412][ T7276] loop5: rw=12288, want=9007199254757624, limit=32768 [ 306.412888][ T7276] gfs2: fsid=syz:syz.0: can't lock local "qc" file: -5 [ 307.018313][ C0] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:1c [ 307.668695][ T7324] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 307.715447][ T7324] Error parsing options; rc = [-22] [ 307.771888][ T7317] netlink: 'syz.4.741': attribute type 10 has an invalid length. [ 307.924333][ T7317] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.932062][ T7317] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.990832][ T7317] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.998579][ T7317] bridge0: port 2(bridge_slave_1) entered forwarding state [ 309.006863][ T7317] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.014072][ T7317] bridge0: port 1(bridge_slave_0) entered forwarding state [ 309.872638][ T7317] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 309.885051][ T7327] netlink: 4 bytes leftover after parsing attributes in process `syz.4.741'. [ 309.906936][ T7327] device bridge_slave_1 left promiscuous mode [ 309.913532][ T7327] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.993315][ T7327] device bridge_slave_0 left promiscuous mode [ 310.043247][ T7327] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.814055][ T7327] bond0: (slave bridge0): Releasing backup interface [ 310.942154][ T7338] netlink: 8 bytes leftover after parsing attributes in process `syz.2.745'. [ 311.828143][ T7371] binder_alloc: 7370: pid 7370 spamming oneway? 1 buffers allocated for a total size of 4096 [ 312.006248][ T7374] overlayfs: failed to clone upperpath [ 312.919214][ T7389] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 313.655409][ T1108] Bluetooth: hci5: command 0x1003 tx timeout [ 313.672253][ T4199] Bluetooth: hci5: sending frame failed (-49) [ 314.084326][ T7415] netlink: 12 bytes leftover after parsing attributes in process `syz.4.767'. [ 314.093812][ T7415] device vlan0 entered promiscuous mode [ 314.930526][ T7424] loop3: detected capacity change from 0 to 256 [ 315.735207][ T4241] Bluetooth: hci5: command 0x1001 tx timeout [ 315.741859][ T4199] Bluetooth: hci5: sending frame failed (-49) [ 316.557427][ T7447] overlayfs: failed to clone lowerpath [ 317.149445][ T7457] loop3: detected capacity change from 0 to 40427 [ 317.259393][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.326877][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.360729][ T7457] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 317.368795][ T7457] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 317.406103][ T7457] F2FS-fs (loop3): Unrecognized mount option "fauçQ_injection=0000000000000004 ‰Û!+LJZ@™†xŸ11160" or missing value [ 317.822075][ T4241] Bluetooth: hci5: command 0x1009 tx timeout [ 321.422384][ T26] kauditd_printk_skb: 22 callbacks suppressed [ 321.422402][ T26] audit: type=1326 audit(1756480576.136:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7489 comm="syz.4.789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe67a87ebe9 code=0x7ffc0000 [ 322.015736][ T26] audit: type=1326 audit(1756480576.186:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7489 comm="syz.4.789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe67a87ebe9 code=0x7ffc0000 [ 322.038534][ T26] audit: type=1326 audit(1756480576.346:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7489 comm="syz.4.789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fe67a87ebe9 code=0x7ffc0000 [ 322.062034][ T26] audit: type=1326 audit(1756480576.346:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7489 comm="syz.4.789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe67a87ebe9 code=0x7ffc0000 [ 322.146189][ T26] audit: type=1326 audit(1756480576.356:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7489 comm="syz.4.789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe67a87ebe9 code=0x7ffc0000 [ 322.230419][ T7499] tipc: Failed to remove unknown binding: 66,1,1/0:495080019/495080021 [ 322.270438][ T26] audit: type=1326 audit(1756480576.356:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7489 comm="syz.4.789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7fe67a87ebe9 code=0x7ffc0000 [ 322.372374][ T7499] tipc: Failed to remove unknown binding: 66,1,1/0:495080019/495080021 [ 322.383221][ C1] ip6_tunnel: ip6gretap0 xmit: Routing loop! Remote address found on this node! [ 322.389034][ C0] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:1b [ 322.435600][ T26] audit: type=1326 audit(1756480576.386:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7489 comm="syz.4.789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe67a87ebe9 code=0x7ffc0000 [ 322.464329][ T7499] tipc: Failed to remove unknown binding: 66,1,1/0:495080019/495080021 [ 322.513619][ T7509] netlink: 'syz.2.795': attribute type 29 has an invalid length. [ 323.591158][ T7509] netlink: 'syz.2.795': attribute type 29 has an invalid length. [ 323.632264][ T7514] netlink: 'syz.2.795': attribute type 29 has an invalid length. [ 323.672173][ T26] audit: type=1326 audit(1756480576.386:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7489 comm="syz.4.789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe67a87ebe9 code=0x7ffc0000 [ 323.715672][ T7511] netlink: 'syz.2.795': attribute type 29 has an invalid length. [ 323.777490][ T7514] netlink: 'syz.2.795': attribute type 29 has an invalid length. [ 323.823964][ T26] audit: type=1326 audit(1756480576.406:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7489 comm="syz.4.789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe67a87ebe9 code=0x7ffc0000 [ 323.847579][ T26] audit: type=1326 audit(1756480576.406:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7489 comm="syz.4.789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe67a87ebe9 code=0x7ffc0000 [ 323.873998][ T7514] netlink: 'syz.2.795': attribute type 29 has an invalid length. [ 323.896877][ T7522] siw: device registration error -23 [ 323.920599][ T7514] netlink: 'syz.2.795': attribute type 29 has an invalid length. [ 323.945706][ T7514] netlink: 'syz.2.795': attribute type 29 has an invalid length. [ 325.687083][ T7550] loop0: detected capacity change from 0 to 2048 [ 326.752911][ T7550] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 328.616541][ T7588] loop3: detected capacity change from 0 to 128 [ 331.772092][ T5021] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 332.500584][ T7622] loop3: detected capacity change from 0 to 4096 [ 332.989251][ T7622] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 334.099874][ T4183] ntfs3: loop3: ntfs_sync_fs r=9 failed, -22. [ 334.406411][ T4183] ntfs3: loop3: ntfs_evict_inode r=9 failed, -22. [ 335.325008][ T7690] loop3: detected capacity change from 0 to 512 [ 335.834917][ T7575] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.849419][ T7575] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.882930][ T7575] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.903456][ T7575] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.848000][ T4185] lo speed is unknown, defaulting to 1000 [ 336.880477][ T7600] device vlan4 entered promiscuous mode [ 338.296612][ T7608] netlink: 4 bytes leftover after parsing attributes in process `syz.0.821'. [ 338.687416][ T7736] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_team, syncid = 0, id = 0 [ 340.189841][ T7746] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 340.437465][ T7743] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 340.521351][ T7743] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 340.566493][ T7743] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 344.935315][ T4185] Bluetooth: hci2: command 0x0406 tx timeout [ 345.679239][ T7811] netlink: 'syz.2.863': attribute type 4 has an invalid length. [ 345.834440][ T7818] netlink: 'syz.4.864': attribute type 39 has an invalid length. [ 346.073736][ T7823] tipc: Enabling of bearer rejected, failed to enable media [ 346.287272][ T7830] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 347.294404][ T7836] loop0: detected capacity change from 0 to 4096 [ 347.366436][ T7836] ntfs3: Unknown parameter 'windows_names' [ 350.824526][ T7888] loop3: detected capacity change from 0 to 4096 [ 352.091376][ T7905] loop0: detected capacity change from 0 to 40427 [ 352.229429][ T7905] F2FS-fs (loop0): invalid crc value [ 352.263677][ T7905] F2FS-fs (loop0): Found nat_bits in checkpoint [ 352.322488][ T7905] F2FS-fs (loop0): Start checkpoint disabled! [ 352.373914][ T7905] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 353.567183][ T7927] IPVS: Error connecting to the multicast addr [ 353.976155][ T4888] attempt to access beyond end of device [ 353.976155][ T4888] loop0: rw=2049, want=45104, limit=40427 [ 355.083919][ T7949] xt_CT: You must specify a L4 protocol and not use inversions on it [ 356.537070][ T7959] tipc: Started in network mode [ 356.549163][ T7959] tipc: Node identity 6ea401d296e4, cluster identity 4711 [ 356.563042][ T7959] tipc: Enabled bearer , priority 0 [ 356.579777][ T7959] device syzkaller0 entered promiscuous mode [ 357.367649][ T7958] tipc: Resetting bearer [ 357.422762][ T7958] tipc: Disabling bearer [ 361.292687][ T8008] tipc: Enabled bearer , priority 0 [ 361.327570][ T8008] device syzkaller0 entered promiscuous mode [ 361.360695][ T8008] tipc: Resetting bearer [ 361.399650][ T8006] tipc: Resetting bearer [ 361.422462][ T8006] tipc: Disabling bearer [ 363.875412][ T4903] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 366.224801][ T8062] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 366.893216][ T8070] gfs2: not a GFS2 filesystem [ 368.396398][ T8093] mmap: syz.2.942 (8093) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 369.532494][ T8106] device geneve2 entered promiscuous mode [ 376.697629][ T8193] loop3: detected capacity change from 0 to 128 [ 377.291365][ T8193] EXT4-fs (loop3): Ignoring removed nobh option [ 377.417963][ T8193] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobh,usrjquota=,,errors=continue. Quota mode: none. [ 377.425576][ T8200] loop0: detected capacity change from 0 to 128 [ 377.435582][ T8193] ext4 filesystem being mounted at /192/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 378.156667][ T8200] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 378.278268][ T8200] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 378.776749][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.786717][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.395493][ T8241] netlink: 'syz.5.987': attribute type 10 has an invalid length. [ 381.420148][ T8241] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 381.440297][ T8249] netlink: 'syz.4.990': attribute type 10 has an invalid length. [ 381.522944][ T8249] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 384.605562][ T8284] tipc: Enabling of bearer rejected, failed to enable media [ 385.504671][ T8298] tipc: Enabling of bearer rejected, failed to enable media [ 385.895332][ T8311] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 387.050490][ T8316] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1007'. [ 387.083079][ T8316] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1007'. [ 390.044020][ T8340] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 390.102137][ T8340] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.257972][ T8348] tipc: Enabling of bearer rejected, failed to enable media [ 390.408931][ T7708] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:0c [ 391.042949][ T7708] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:0c [ 391.059218][ T7708] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:0c [ 392.398328][ T7703] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:0c [ 392.446983][ T26] kauditd_printk_skb: 62 callbacks suppressed [ 392.447001][ T26] audit: type=1326 audit(1756480903.167:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8380 comm="syz.2.1027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb04f8b7be9 code=0x7ffc0000 [ 392.460751][ T7703] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:0c [ 392.580233][ T26] audit: type=1326 audit(1756480903.197:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8380 comm="syz.2.1027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7fb04f8b7be9 code=0x7ffc0000 [ 392.657049][ T8393] tipc: Enabling of bearer rejected, failed to enable media [ 392.723507][ T26] audit: type=1326 audit(1756480903.197:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8380 comm="syz.2.1027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb04f8b7be9 code=0x7ffc0000 [ 393.186010][ T7705] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:0c [ 393.600455][ T26] audit: type=1326 audit(1756480903.197:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8380 comm="syz.2.1027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb04f8b7be9 code=0x7ffc0000 [ 395.988322][ T4892] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 396.935523][ C1] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:0c [ 398.752753][ T8461] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 398.855582][ T8460] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1044'. [ 401.840299][ T8491] lo speed is unknown, defaulting to 1000 [ 401.854875][ T8491] lo speed is unknown, defaulting to 1000 [ 402.870410][ T8489] netlink: 'syz.5.1053': attribute type 4 has an invalid length. [ 403.840613][ T8517] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1058'. [ 404.357803][ T8517] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1058'. [ 405.585394][ C1] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:0c [ 405.717412][ T8540] tipc: Enabling of bearer rejected, failed to enable media [ 405.963393][ T8550] loop3: detected capacity change from 0 to 128 [ 406.462145][ T8550] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 406.575422][ T8550] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 406.799268][ T8562] tipc: Enabled bearer , priority 0 [ 407.001761][ T8568] device syzkaller0 entered promiscuous mode [ 407.202618][ T8562] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 407.288878][ T8568] tipc: Resetting bearer [ 407.314933][ T8573] syz.4.1075[8573] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 407.316912][ T8573] syz.4.1075[8573] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 407.356154][ T8560] tipc: Resetting bearer [ 407.423087][ T8560] tipc: Disabling bearer [ 410.369840][ T8609] netlink: 'syz.0.1082': attribute type 10 has an invalid length. [ 411.228824][ T8609] device wlan1 entered promiscuous mode [ 411.277420][ T8609] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 411.556210][ T8622] MTD: Couldn't look up './file0': -15 [ 413.404373][ T8637] vcan0: tx drop: invalid sa for name 0x00000000000000f0 [ 413.715058][ T26] audit: type=1326 audit(1756480924.397:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8646 comm="syz.5.1093" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6536959be9 code=0x0 [ 416.066255][ T8668] loop0: detected capacity change from 0 to 256 [ 416.118967][ T8667] loop3: detected capacity change from 0 to 2048 [ 416.244879][ T8667] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 416.259187][ T8676] netlink: 'syz.5.1102': attribute type 10 has an invalid length. [ 420.047151][ T8693] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1106'. [ 420.104167][ T8693] loop3: detected capacity change from 0 to 1024 [ 420.295605][ T8693] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 420.323525][ T8695] syz.5.1107[8695] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 420.324380][ T8695] syz.5.1107[8695] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 420.338206][ T8693] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 421.454406][ T8693] JBD2: no valid journal superblock found [ 421.487311][ T8693] EXT4-fs (loop3): error loading journal [ 421.648101][ T8709] lo speed is unknown, defaulting to 1000 [ 421.659384][ T8709] lo speed is unknown, defaulting to 1000 [ 424.209714][ C1] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:0c [ 424.252219][ T8730] loop0: detected capacity change from 0 to 64 [ 427.520366][ T8750] tipc: Enabled bearer , priority 0 [ 427.555500][ T8750] device syzkaller0 entered promiscuous mode [ 427.662451][ T8750] tipc: Resetting bearer [ 427.828630][ T8760] syz.2.1126[8760] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 427.829560][ T8760] syz.2.1126[8760] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 428.464259][ T8769] tipc: Enabling of bearer rejected, failed to enable media [ 428.857298][ T8782] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1129'. [ 428.965496][ T8782] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1129'. [ 429.693856][ T4360] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 433.260127][ T8819] loop0: detected capacity change from 0 to 8 [ 433.754567][ T8819] SQUASHFS error: xz decompression failed, data probably corrupt [ 433.767489][ T8819] SQUASHFS error: Failed to read block 0x108: -5 [ 433.774156][ T8819] SQUASHFS error: Unable to read metadata cache entry [106] [ 433.782064][ T8819] SQUASHFS error: Unable to read inode 0x11f [ 433.805385][ T8825] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 433.870341][ T8825] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 434.011558][ T8825] batman_adv: batadv0: Interface deactivated: dummy0 [ 434.138456][ T8825] batman_adv: batadv0: Removing interface: dummy0 [ 434.275973][ T8825] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 435.036416][ T8825] bond0: (slave bond_slave_0): Releasing backup interface [ 435.075974][ T8825] bond0: (slave bond_slave_1): Releasing backup interface [ 435.228936][ T8825] team0: Port device team_slave_0 removed [ 435.386871][ T8825] team0: Port device team_slave_1 removed [ 435.393420][ T8825] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 435.415975][ T8825] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 435.425043][ T8825] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 435.434779][ T8825] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 435.524096][ T8825] team0: Port device geneve0 removed [ 435.567396][ T8825] bond0: (slave wlan1): Releasing backup interface [ 435.636110][ T8825] bond1: (slave bridge2): Releasing active interface [ 435.663813][ T8849] syz.3.1143[8849] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 435.663956][ T8849] syz.3.1143[8849] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 437.313984][ T8871] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1147'. [ 437.355258][ T8871] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1147'. [ 438.217429][ T5918] Bluetooth: hci5: command 0x1003 tx timeout [ 438.241768][ T4198] Bluetooth: hci5: sending frame failed (-49) [ 439.027514][ T8875] loop3: detected capacity change from 0 to 64 [ 440.088045][ T4183] hfs: walked past end of dir [ 440.140924][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.147868][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.836550][ T5918] Bluetooth: hci5: command 0x1001 tx timeout [ 440.842722][ T4198] Bluetooth: hci5: sending frame failed (-49) [ 440.982889][ T8900] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 441.248391][ T8907] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 442.059651][ T8907] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 442.108714][ T8907] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 442.153029][ T8913] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 442.936841][ T1111] Bluetooth: hci5: command 0x1009 tx timeout [ 447.430979][ T8988] lo speed is unknown, defaulting to 1000 [ 448.715604][ T8988] lo speed is unknown, defaulting to 1000 [ 449.418802][ T5918] Bluetooth: hci0: command 0x0409 tx timeout [ 451.579035][ T5914] Bluetooth: hci0: command 0x041b tx timeout [ 451.669631][ T8988] chnl_net:caif_netlink_parms(): no params data found [ 452.721201][ T8988] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.762333][ T8988] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.953608][ T8988] device bridge_slave_0 entered promiscuous mode [ 453.723401][ T8988] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.813367][ T5914] Bluetooth: hci0: command 0x040f tx timeout [ 453.820113][ T8988] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.828674][ T8988] device bridge_slave_1 entered promiscuous mode [ 453.910392][ T8988] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 453.947781][ T8988] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 454.030606][ T8988] team0: Port device team_slave_0 added [ 454.047590][ T8988] team0: Port device team_slave_1 added [ 456.128573][ T5914] Bluetooth: hci0: command 0x0419 tx timeout [ 456.251329][ T8988] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 456.271605][ T8988] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 456.486480][ T8988] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 456.502239][ T8988] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 456.510483][ T8988] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 456.976956][ T8988] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 457.579445][ T8988] device hsr_slave_0 entered promiscuous mode [ 457.606040][ T8988] device hsr_slave_1 entered promiscuous mode [ 458.705338][ C1] batman_adv: batadv0: Local translation table size (100) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:0c [ 459.379024][ T9103] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1204'. [ 459.584074][ T9106] xt_hashlimit: Unknown mode mask 80FF, kernel too old? [ 462.252126][ T9123] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.260670][ T9123] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.297350][ T26] audit: type=1326 audit(1756480973.017:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9141 comm="syz.2.1215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb04f8b7be9 code=0x7ffc0000 [ 462.558854][ T26] audit: type=1326 audit(1756480973.077:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9141 comm="syz.2.1215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb04f8b7be9 code=0x7ffc0000 [ 462.868334][ T26] audit: type=1326 audit(1756480973.097:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9141 comm="syz.2.1215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fb04f8b7be9 code=0x7ffc0000 [ 462.904331][ T26] audit: type=1326 audit(1756480973.107:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9141 comm="syz.2.1215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb04f8b7be9 code=0x7ffc0000 [ 462.904367][ T26] audit: type=1326 audit(1756480973.107:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9141 comm="syz.2.1215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb04f8b7be9 code=0x7ffc0000 [ 462.960728][ T26] audit: type=1326 audit(1756480973.117:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9141 comm="syz.2.1215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7fb04f8b7be9 code=0x7ffc0000 [ 462.986586][ T26] audit: type=1326 audit(1756480973.117:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9141 comm="syz.2.1215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb04f8b7be9 code=0x7ffc0000 [ 463.029051][ T26] audit: type=1326 audit(1756480973.137:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9141 comm="syz.2.1215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb04f8b7be9 code=0x7ffc0000 [ 463.052715][ T26] audit: type=1326 audit(1756480973.157:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9141 comm="syz.2.1215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb04f8b7be9 code=0x7ffc0000 [ 463.078260][ T26] audit: type=1326 audit(1756480973.157:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9141 comm="syz.2.1215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb04f8b7be9 code=0x7ffc0000 [ 463.259198][ T9123] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 463.289070][ T9123] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 463.581605][ T9123] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.591707][ T9123] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.601573][ T9123] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.611044][ T9123] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.709095][ T9143] tipc: Enabled bearer , priority 10 [ 463.995426][ T4894] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 464.065873][ T9154] tipc: Enabled bearer , priority 0 [ 464.076812][ T8988] 8021q: adding VLAN 0 to HW filter on device bond0 [ 464.097028][ T9154] device syzkaller0 entered promiscuous mode [ 464.173256][ T9158] IPVS: Error connecting to the multicast addr [ 464.286769][ T4894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 464.340773][ T4894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 464.479238][ T8988] 8021q: adding VLAN 0 to HW filter on device team0 [ 464.723999][ T9160] tipc: Resetting bearer [ 464.781027][ T4903] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 464.801753][ T4903] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.822938][ T9150] tipc: Resetting bearer [ 464.834776][ T9150] tipc: Disabling bearer [ 464.852403][ T9164] tipc: Enabling of bearer rejected, failed to enable media [ 464.880970][ T4903] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 464.900220][ T4903] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.915999][ T4894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 464.926880][ T4894] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 464.936074][ T4894] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.943773][ T4894] bridge0: port 1(bridge_slave_0) entered forwarding state [ 464.954645][ T4894] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 464.982584][ T4903] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 464.993762][ T4903] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.013940][ T4894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 465.026737][ T4894] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 465.046663][ T4894] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.053991][ T4894] bridge0: port 2(bridge_slave_1) entered forwarding state [ 465.072009][ T4894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 465.082544][ T4894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 465.098551][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 465.128972][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 465.165326][ T7709] tipc: Node number set to 4164944338 [ 466.026121][ T4903] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 466.231061][ T4903] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.285690][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 466.296254][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 466.316373][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 466.449411][ T4905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 466.583857][ T4905] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 466.689915][ T4905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 466.798778][ T4905] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 466.966470][ T8988] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 467.701050][ T26] kauditd_printk_skb: 15 callbacks suppressed [ 467.701067][ T26] audit: type=1326 audit(1756480978.417:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9196 comm="syz.0.1229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe356dbebe9 code=0x7ffc0000 [ 467.855213][ T26] audit: type=1326 audit(1756480978.437:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9196 comm="syz.0.1229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe356dbebe9 code=0x7ffc0000 [ 467.901462][ T4903] tipc: Disabling bearer [ 467.921909][ T4903] tipc: Disabling bearer [ 467.939346][ T4903] tipc: Left network mode [ 468.726756][ T4905] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 468.794767][ T4905] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 468.857909][ T8988] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 468.902284][ T9225] delete_channel: no stack [ 468.985540][ T9234] loop0: detected capacity change from 0 to 512 [ 469.096188][ T9234] EXT4-fs (loop0): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 469.165914][ T9234] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 469.173987][ T9234] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 469.231683][ T9234] EXT4-fs (loop0): DAX unsupported by block device. [ 470.697279][ T5027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 470.708402][ T9261] loop0: detected capacity change from 0 to 512 [ 470.753949][ T5027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 471.131765][ T5027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 471.172894][ T5027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 471.185899][ T9261] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,max_dir_size_kb=0x0000000000000002,. Quota mode: writeback. [ 471.241048][ T9261] ext4 filesystem being mounted at /238/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 471.257911][ T8988] device veth0_vlan entered promiscuous mode [ 471.320622][ T8988] device veth1_vlan entered promiscuous mode [ 471.460717][ T5027] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 471.472408][ T5027] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 471.492387][ T5027] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 471.564827][ T9261] EXT4-fs error (device loop0): ext4_dx_csum_verify:502: inode #2: comm syz.0.1245: dir seems corrupt? Run e2fsck -D. [ 471.595798][ T9261] EXT4-fs (loop0): Remounting filesystem read-only [ 471.602761][ T9261] EXT4-fs error (device loop0): dx_probe:823: inode #2: comm syz.0.1245: Directory index failed checksum [ 471.695077][ T9261] EXT4-fs (loop0): Remounting filesystem read-only [ 471.710860][ T5027] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 471.715659][ T9275] EXT4-fs error (device loop0): ext4_dx_csum_verify:502: inode #2: comm syz.0.1245: dir seems corrupt? Run e2fsck -D. [ 471.720187][ T5027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 471.746132][ T5027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 471.761615][ T8988] device veth0_macvtap entered promiscuous mode [ 471.768682][ T9275] EXT4-fs (loop0): Remounting filesystem read-only [ 471.776904][ T9275] EXT4-fs error (device loop0): dx_probe:823: inode #2: comm syz.0.1245: Directory index failed checksum [ 471.812053][ T8988] device veth1_macvtap entered promiscuous mode [ 471.813869][ T9275] EXT4-fs (loop0): Remounting filesystem read-only [ 471.868801][ T9277] EXT4-fs error (device loop0): ext4_dx_csum_verify:502: inode #2: comm syz.0.1245: dir seems corrupt? Run e2fsck -D. [ 471.908481][ T9277] EXT4-fs (loop0): Remounting filesystem read-only [ 471.938453][ T8988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 471.955973][ T9277] EXT4-fs error (device loop0): dx_probe:823: inode #2: comm syz.0.1245: Directory index failed checksum [ 471.983074][ T8988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.002766][ T9277] EXT4-fs (loop0): Remounting filesystem read-only [ 472.025039][ T8988] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 472.109524][ T9261] EXT4-fs error (device loop0): ext4_dx_csum_verify:502: inode #2: comm syz.0.1245: dir seems corrupt? Run e2fsck -D. [ 472.206631][ T9261] EXT4-fs (loop0): Remounting filesystem read-only [ 472.235375][ T9261] EXT4-fs error (device loop0): dx_probe:823: inode #2: comm syz.0.1245: Directory index failed checksum [ 472.323142][ T5027] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 472.331462][ T9261] EXT4-fs (loop0): Remounting filesystem read-only [ 472.341764][ T5027] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 472.358155][ T9277] EXT4-fs error (device loop0): ext4_dx_csum_verify:502: inode #2: comm syz.0.1245: dir seems corrupt? Run e2fsck -D. [ 472.362571][ T5027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 472.668992][ T8988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 472.746251][ T9277] EXT4-fs (loop0): Remounting filesystem read-only [ 472.885393][ T8988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.897937][ T8988] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 472.917652][ T9277] EXT4-fs error (device loop0): dx_probe:823: inode #2: comm syz.0.1245: Directory index failed checksum [ 472.942226][ T9277] EXT4-fs (loop0): Remounting filesystem read-only [ 472.950827][ T4903] device hsr_slave_1 left promiscuous mode [ 472.978314][ T4903] batman_adv: batadv0: Interface deactivated: dummy0 [ 473.012267][ T4903] batman_adv: batadv0: Removing interface: dummy0 [ 473.060837][ T4903] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 473.103890][ T4903] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 473.154845][ T4903] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 473.179725][ T4903] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 473.202124][ T4903] device batadv1 left promiscuous mode [ 473.228997][ T4903] bridge0: port 5(batadv1) entered disabled state [ 473.250448][ T4903] device vlan2 left promiscuous mode [ 473.279460][ T4903] device bond0 left promiscuous mode [ 473.284926][ T4903] device bond_slave_0 left promiscuous mode [ 473.301891][ T4903] device bond_slave_1 left promiscuous mode [ 473.375046][ T4903] device vxlan0 left promiscuous mode [ 473.392270][ T4903] device macvlan2 left promiscuous mode [ 474.333888][ T4903] bridge0: port 4(vlan2) entered disabled state [ 474.361671][ T4897] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 474.387664][ T4903] bridge0: port 3(batadv0) entered disabled state [ 474.462133][ T4903] device bridge_slave_1 left promiscuous mode [ 474.540764][ T4903] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.783689][ T4903] device team0 left promiscuous mode [ 474.825513][ T4903] device team_slave_0 left promiscuous mode [ 474.982141][ T4903] device team_slave_1 left promiscuous mode [ 475.158309][ T4903] device veth1_macvtap left promiscuous mode [ 475.354462][ T4897] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 475.386016][ T4903] device veth0_macvtap left promiscuous mode [ 475.392384][ T4903] device veth1_vlan left promiscuous mode [ 475.696195][ T4903] device veth0_vlan left promiscuous mode [ 476.137743][ T9337] 9pnet: p9_fd_create_unix (9337): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 476.511583][ T4360] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 476.772947][ T4903] bond1 (unregistering): Released all slaves [ 476.818024][ T4903] team0 (unregistering): Port device bridge3 removed [ 477.445333][ T4903] bond0 (unregistering): (slave macvlan2): Releasing backup interface [ 479.267568][ T4903] bond0 (unregistering): (slave vxlan0): Releasing backup interface [ 479.345519][ T5920] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 479.965333][ T5920] usb 1-1: Using ep0 maxpacket: 8 [ 480.066710][ T4903] team0 (unregistering): Port device team_slave_1 removed [ 480.085585][ T5920] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 480.099709][ T4903] team0 (unregistering): Port device team_slave_0 removed [ 480.122996][ T4903] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 480.156482][ T4903] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 480.359919][ T4903] bond0 (unregistering): Released all slaves [ 480.405655][ T5920] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 480.419641][ T5920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.430623][ T5920] usb 1-1: Product: syz [ 480.445875][ T5920] usb 1-1: Manufacturer: syz [ 480.451331][ T5920] usb 1-1: SerialNumber: syz [ 480.458186][ T4894] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 480.472235][ T4894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 480.500746][ T5920] usb 1-1: config 0 descriptor?? [ 480.547480][ T5920] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 480.550129][ T9371] tipc: Enabling of bearer rejected, failed to enable media [ 480.875031][ T4897] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 481.212891][ T4897] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 481.303971][ T4905] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 481.368926][ T4905] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 481.488233][ T4905] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.101893][ T5023] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 482.935659][ T9421] IPVS: Error connecting to the multicast addr [ 482.987962][ T5920] gspca_zc3xx: reg_w_i err -110 [ 483.979574][ T9435] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1165'. [ 483.998099][ T9435] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1165'. [ 484.518910][ T5920] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 484.723528][ T9441] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1290'. [ 485.424812][ T5920] gspca_zc3xx: probe of 1-1:0.0 failed with error -110 [ 485.502562][ T5920] usb 1-1: USB disconnect, device number 3 [ 485.813155][ T9455] tipc: Enabling of bearer rejected, failed to enable media [ 487.117993][ T9479] loop0: detected capacity change from 0 to 64 [ 488.686829][ T9501] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1303'. [ 488.696048][ T9501] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1303'. [ 489.048156][ T9505] IPVS: Error connecting to the multicast addr [ 489.143277][ T9496] tipc: Enabling of bearer rejected, failed to enable media [ 490.433623][ T9525] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1308'. [ 490.446440][ T9525] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1308'. [ 491.659485][ T9533] loop6: detected capacity change from 0 to 16 [ 491.924590][ T9533] erofs: (device loop6): erofs_read_superblock: blkszbits 9 isn't supported on this platform [ 493.511790][ T9543] ceph: No source [ 496.726693][ T9572] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1327'. [ 497.366383][ T9581] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1327'. [ 498.971288][ T9623] xt_recent: Unsupported userspace flags (000000de) [ 498.980268][ T9613] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 499.757780][ T9633] tipc: Enabling of bearer rejected, failed to enable media [ 501.004470][ T9651] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1342'. [ 501.030469][ T9649] tipc: Enabling of bearer rejected, failed to enable media [ 501.051182][ T9646] loop0: detected capacity change from 0 to 2048 [ 501.113436][ T9651] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1342'. [ 501.146121][ T9646] NILFS (loop0): unrecognized mount option "cp=0x0000000000000003±£ø¢þápô" [ 501.764856][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.765139][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.066802][ T9670] tipc: Started in network mode [ 502.074230][ T9672] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 502.089539][ T9673] loop0: detected capacity change from 0 to 1024 [ 502.129771][ T9670] tipc: Node identity ac14141b, cluster identity 4711 [ 502.145806][ T9672] xt_TPROXY: Can be used only with -p tcp or -p udp [ 502.148972][ T9670] tipc: New replicast peer: 255.255.255.255 [ 502.167792][ T9670] tipc: Enabled bearer , priority 10 [ 502.220795][ T9670] fuse: Bad value for 'fd' [ 503.157624][ T9682] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 503.175444][ T7706] tipc: Node number set to 2886997019 [ 505.060181][ T9719] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1356'. [ 505.126373][ T9719] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1356'. [ 506.149098][ T9726] loop0: detected capacity change from 0 to 1024 [ 506.309909][ T9726] EXT4-fs (loop0): Ignoring removed nobh option [ 506.475582][ T9726] EXT4-fs (loop0): Ignoring removed bh option [ 506.783315][ T9726] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,data_err=abort,barrier=0x0000000000000002,i_version,noinit_itable,max_dir_size_kb=0x00000000004007b1,data_err=ignore,noload,nobh,user_xattr,bh,noload,,errors=continue. Quota mode: none. [ 507.024844][ T9745] loop6: detected capacity change from 0 to 1024 [ 507.331883][ T9752] overlayfs: conflicting lowerdir path [ 508.430212][ C1] vkms_vblank_simulate: vblank timer overrun [ 511.063394][ T9795] loop6: detected capacity change from 0 to 256 [ 513.256577][ T9814] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1381'. [ 514.118171][ T9826] loop6: detected capacity change from 0 to 2048 [ 515.385401][ T9833] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1394'. [ 515.658197][ T9826] NILFS (loop6): unrecognized mount option "cp=0x0000000000000003±£ø¢þápô" [ 518.671878][ T9873] loop6: detected capacity change from 0 to 1024 [ 519.231109][ T9873] EXT4-fs (loop6): Ignoring removed nobh option [ 519.475914][ T9873] EXT4-fs (loop6): Ignoring removed bh option [ 519.712009][ T9873] EXT4-fs (loop6): mounted filesystem without journal. Opts: noload,data_err=abort,barrier=0x0000000000000002,i_version,noinit_itable,max_dir_size_kb=0x00000000004007b1,data_err=ignore,noload,nobh,user_xattr,bh,noload,,errors=continue. Quota mode: none. [ 519.751541][ T9886] loop0: detected capacity change from 0 to 4096 [ 519.817970][ T9892] ptrace attach of "./syz-executor exec"[5742] was attempted by "./syz-executor exec"[9892] [ 520.298809][ T9886] EXT4-fs (loop0): Test dummy encryption mode enabled [ 520.426876][ T9886] EXT4-fs (loop0): unsupported descriptor size 255 [ 520.758571][ T9900] overlayfs: conflicting lowerdir path [ 524.204640][ T9917] netlink: 'syz.6.1404': attribute type 12 has an invalid length. [ 525.065519][ T9919] smb3: Bad value for 'uid' [ 525.121107][ T9919] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1405'. [ 527.225323][ T9944] siw: device registration error -23 [ 528.168361][ T9953] device batadv_slave_0 entered promiscuous mode [ 529.621224][ T9985] loop0: detected capacity change from 0 to 16 [ 529.859680][ T9985] erofs: (device loop0): erofs_read_superblock: blkszbits 9 isn't supported on this platform [ 531.210817][ T9996] ceph: No source [ 531.656938][ T9998] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1424'. [ 531.789684][T10000] loop0: detected capacity change from 0 to 40427 [ 531.830330][ T9998] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1424'. [ 532.096360][T10000] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 532.104219][T10000] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 532.554973][T10000] F2FS-fs (loop0): invalid crc value [ 532.610677][T10000] F2FS-fs (loop0): Found nat_bits in checkpoint [ 534.214064][T10000] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 534.222402][T10000] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 536.282109][T10045] ceph: No source [ 538.915347][T10063] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1440'. [ 539.635815][T10072] device vlan1 entered promiscuous mode [ 539.651972][T10072] device wlan1 entered promiscuous mode [ 541.751415][T10093] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1447'. [ 544.697753][T10134] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1454'. [ 546.565232][T10150] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1460'. [ 546.565241][T10149] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1459'. [ 546.591591][T10150] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1460'. [ 548.035966][T10167] overlayfs: failed to resolve './file0': -2 [ 551.485666][T10195] netlink: 'syz.5.1467': attribute type 8 has an invalid length. [ 552.444639][T10214] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1473'. [ 553.681641][T10223] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1474'. [ 553.692270][T10223] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1474'. [ 559.606398][T10295] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1491'. [ 559.617883][T10295] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1491'. [ 563.151279][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.157758][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.344824][T10339] netlink: 'syz.2.1499': attribute type 12 has an invalid length. [ 563.500219][T10361] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1506'. [ 563.510170][T10361] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1506'. [ 565.551368][T10379] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1518'. [ 567.276146][T10397] loop6: detected capacity change from 0 to 2048 [ 567.330634][T10397] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=3932051, location=3932051 [ 567.440729][T10397] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 568.308381][T10406] loop0: detected capacity change from 0 to 4096 [ 570.498894][ T5918] Bluetooth: hci0: command 0x0406 tx timeout [ 570.834068][T10437] delete_channel: no stack [ 574.993206][T10500] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1541'. [ 575.251519][T10488] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1542'. [ 578.977050][T10542] device batadv_slave_0 entered promiscuous mode [ 579.336838][T10551] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1556'. [ 580.920202][T10558] netlink: 'syz.2.1559': attribute type 10 has an invalid length. [ 580.959922][T10558] team0: Failed to send options change via netlink (err -105) [ 580.974047][T10558] team0: Port device dummy0 added [ 582.893747][T10573] loop0: detected capacity change from 0 to 32768 [ 582.971992][T10573] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.1561 (10573) [ 583.774787][T10573] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 583.783802][T10573] BTRFS info (device loop0): using free space tree [ 583.790599][T10573] BTRFS info (device loop0): has skinny extents [ 584.995770][T10573] BTRFS error (device loop0): open_ctree failed: -12 [ 585.208660][T10611] loop6: detected capacity change from 0 to 32768 [ 585.266061][T10611] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.1567 (10611) [ 585.416336][T10621] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1568'. [ 585.947494][T10611] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 585.957216][T10611] BTRFS info (device loop6): enabling disk space caching [ 585.964383][T10611] BTRFS info (device loop6): setting nodatasum [ 585.971304][T10611] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_LZO (0x8) [ 585.982257][T10611] BTRFS info (device loop6): force lzo compression, level 0 [ 585.990854][T10611] BTRFS info (device loop6): unrecognized rescue option 'ignoremetacsums' [ 586.000349][T10611] BTRFS error (device loop6): unrecognized rescue value ignoremetacsums [ 586.009659][T10611] BTRFS error (device loop6): cannot disable free space tree [ 586.327603][T10631] device batadv_slave_0 entered promiscuous mode [ 586.360502][T10611] BTRFS error (device loop6): open_ctree failed: -22 [ 586.368133][ T8987] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by udevd (8987) [ 588.515670][T10657] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_team, syncid = 0, id = 0 [ 588.773695][T10665] binder_alloc: 10660: binder_alloc_buf, no vma [ 589.977818][T10685] loop0: detected capacity change from 0 to 32768 [ 590.369250][T10680] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 590.528604][T10680] device batadv_slave_0 entered promiscuous mode [ 590.557621][T10689] overlayfs: failed to clone upperpath [ 590.644541][T10685] XFS (loop0): Mounting V5 Filesystem [ 590.845174][T10708] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1589'. [ 590.861794][T10685] XFS (loop0): Ending clean mount [ 591.094290][ T4182] XFS (loop0): Unmounting Filesystem [ 591.567546][T10705] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1586'. [ 591.876556][T10716] netlink: 'syz.5.1588': attribute type 29 has an invalid length. [ 591.955505][T10716] netlink: 'syz.5.1588': attribute type 29 has an invalid length. [ 592.005627][T10716] netlink: 'syz.5.1588': attribute type 29 has an invalid length. [ 592.151832][T10734] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_team, syncid = 0, id = 0 [ 595.342687][T10768] loop0: detected capacity change from 0 to 2048 [ 595.521425][T10768] NILFS (loop0): unrecognized mount option "cp=0x0000000000000003±£ø¢þápô" [ 599.635310][T10828] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1624'. [ 599.745311][T10828] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1624'. [ 600.058070][T10829] overlayfs: failed to clone upperpath [ 600.241420][T10835] loop0: detected capacity change from 0 to 2048 [ 600.638975][T10835] NILFS (loop0): unrecognized mount option "cp=0x0000000000000003±£ø¢þápô" [ 601.657904][T10847] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 603.160871][T10841] netlink: 'syz.4.1619': attribute type 29 has an invalid length. [ 603.186285][T10841] netlink: 'syz.4.1619': attribute type 29 has an invalid length. [ 603.228062][T10841] netlink: 'syz.4.1619': attribute type 29 has an invalid length. [ 603.538675][T10883] gfs2: gfs2 mount does not exist [ 605.353854][T10904] loop6: detected capacity change from 0 to 2048 [ 605.583150][T10904] NILFS (loop6): unrecognized mount option "cp=0x0000000000000003±£ø¢þápô" [ 606.873871][T10919] loop0: detected capacity change from 0 to 4096 [ 609.247246][T10919] ntfs3: Bad value for 'umask' [ 609.292766][T10919] netlink: 'syz.0.1639': attribute type 29 has an invalid length. [ 609.310892][T10919] netlink: 'syz.0.1639': attribute type 29 has an invalid length. [ 609.335319][T10919] netlink: 'syz.0.1639': attribute type 29 has an invalid length. [ 611.538874][T10985] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 611.784262][T10987] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1655'. [ 611.795990][T10987] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1655'. [ 612.476971][T10994] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1659'. [ 612.585314][T10994] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1659'. [ 617.669270][T11039] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1670'. [ 617.695341][T11039] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1670'. [ 619.585555][T11054] loop0: detected capacity change from 0 to 2048 [ 620.583305][T11054] NILFS (loop0): unrecognized mount option "cp=0x0000000000000003±£ø¢þápô" [ 622.302782][T11077] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 623.853021][T11096] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1686'. [ 623.863833][T11096] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1686'. [ 624.470994][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.595333][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.763460][T11115] loop0: detected capacity change from 0 to 256 [ 624.790437][T11115] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 624.805254][T11115] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 624.828495][T11115] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 627.857032][T11155] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1702'. [ 627.867591][T11155] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1702'. [ 628.601164][T11164] overlayfs: failed to clone upperpath [ 631.215922][T11177] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 631.225818][T11177] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 631.234723][T11177] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 631.244024][T11177] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 631.342226][T11177] device vxlan0 entered promiscuous mode [ 631.374127][T11177] team0: Port device vxlan0 added [ 631.495092][T11180] IPv6: NLM_F_REPLACE set, but no existing node found! [ 631.688717][T11185] loop6: detected capacity change from 0 to 4096 [ 631.993668][T11199] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1718'. [ 632.004539][T11199] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1718'. [ 633.296897][T11210] 9pnet: Insufficient options for proto=fd [ 634.143709][T11192] xt_bpf: check failed: parse error [ 634.726895][T11217] loop0: detected capacity change from 0 to 2048 [ 634.861479][T11195] ..: renamed from ipvlan0 [ 635.054581][T11217] NILFS (loop0): unrecognized mount option "cp=0x0000000000000003±£ø¢þápô" [ 635.882710][T11232] ptrace attach of "./syz-executor exec"[4193] was attempted by "./syz-executor exec"[11232] [ 636.305216][T11233] loop6: detected capacity change from 0 to 8 [ 637.173108][T11239] netlink: 'syz.4.1729': attribute type 10 has an invalid length. [ 637.214422][T11239] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1729'. [ 637.254543][T11239] batman_adv: batadv0: Adding interface: virt_wifi0 [ 637.263286][T11239] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560. [ 637.344862][T11239] batman_adv: batadv0: Interface activated: virt_wifi0 [ 637.490286][T11233] SQUASHFS error: lzo decompression failed, data probably corrupt [ 637.498882][T11233] SQUASHFS error: Failed to read block 0x144: -5 [ 637.506093][T11233] SQUASHFS error: Unable to read metadata cache entry [142] [ 637.513852][T11233] SQUASHFS error: Unable to read inode 0x11f [ 637.580746][T11246] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1731'. [ 637.592026][T11246] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1731'. [ 638.436436][T11254] tipc: Enabling of bearer rejected, failed to enable media [ 638.852731][T11265] overlayfs: failed to clone upperpath [ 643.686947][T11336] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 645.132494][T11338] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1755'. [ 645.315035][T11347] tipc: Started in network mode [ 645.352723][T11347] tipc: Node identity 22a4ee8a3fcf, cluster identity 4711 [ 645.425729][T11347] tipc: Enabled bearer , priority 0 [ 645.463677][T11343] netlink: 39 bytes leftover after parsing attributes in process `syz.6.1756'. [ 645.556225][T11343] tipc: Resetting bearer [ 645.576596][T11358] loop0: detected capacity change from 0 to 512 [ 645.585599][T11340] tipc: Disabling bearer [ 645.850058][T11358] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 646.263874][T11358] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.1761: iget: bogus i_mode (5) [ 646.316107][T11358] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.1761: couldn't read orphan inode 15 (err -117) [ 646.370590][T11358] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 646.423577][T11358] ext2 filesystem being mounted at /328/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 646.567005][T11372] lo speed is unknown, defaulting to 1000 [ 647.564949][T11385] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 648.108752][T11383] tipc: Enabling of bearer rejected, failed to enable media [ 648.477843][T11394] syz.5.1770 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 648.550217][ C1] vkms_vblank_simulate: vblank timer overrun [ 648.683221][ C1] vkms_vblank_simulate: vblank timer overrun [ 651.702032][T11433] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 653.667435][T11461] loop0: detected capacity change from 0 to 4096 [ 656.459991][T11495] loop6: detected capacity change from 0 to 512 [ 656.862076][T11495] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 659.746312][T11503] orangefs_mount: mount request failed with -4 [ 660.072970][T11516] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1801'. [ 660.083672][T11516] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1801'. [ 660.557471][T11515] loop6: detected capacity change from 0 to 2048 [ 660.607315][T11521] device batadv_slave_0 entered promiscuous mode [ 660.699808][T11515] NILFS (loop6): unrecognized mount option "cp=0x0000000000000003±£ø¢þápô" [ 662.018859][T11531] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1799'. [ 663.589473][T11561] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1813'. [ 663.601050][T11561] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1813'. [ 663.618527][ T4894] Bluetooth: hci5: Frame reassembly failed (-84) [ 663.767207][T11565] netlink: 'syz.4.1814': attribute type 10 has an invalid length. [ 663.796889][T11565] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 665.655230][ T7712] Bluetooth: hci5: command 0x1003 tx timeout [ 665.705227][ T4199] Bluetooth: hci5: sending frame failed (-49) [ 667.663063][T11601] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 667.670771][T11601] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 668.139592][ T7712] Bluetooth: hci5: command 0x1001 tx timeout [ 668.146762][ T4199] Bluetooth: hci5: sending frame failed (-49) [ 668.371563][T11609] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1824'. [ 668.749276][ T26] audit: type=1326 audit(1756481179.467:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11618 comm="syz.4.1829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe67a87ebe9 code=0x7ffc0000 [ 668.774333][ T26] audit: type=1326 audit(1756481179.467:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11618 comm="syz.4.1829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe67a87ebe9 code=0x7ffc0000 [ 668.799932][ T26] audit: type=1326 audit(1756481179.497:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11618 comm="syz.4.1829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fe67a87ebe9 code=0x7ffc0000 [ 668.840421][ T26] audit: type=1326 audit(1756481179.497:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11618 comm="syz.4.1829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe67a87ebe9 code=0x7ffc0000 [ 669.144563][ T26] audit: type=1326 audit(1756481179.497:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11618 comm="syz.4.1829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fe67a87ebe9 code=0x7ffc0000 [ 669.337402][ T26] audit: type=1326 audit(1756481179.497:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11618 comm="syz.4.1829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe67a87ebe9 code=0x7ffc0000 [ 669.360750][ C0] vkms_vblank_simulate: vblank timer overrun [ 669.385208][ T26] audit: type=1326 audit(1756481179.497:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11618 comm="syz.4.1829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fe67a87ebe9 code=0x7ffc0000 [ 669.408246][ T26] audit: type=1326 audit(1756481179.497:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11618 comm="syz.4.1829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe67a87ebe9 code=0x7ffc0000 [ 669.504125][T11624] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1830'. [ 670.315773][ T7712] Bluetooth: hci5: command 0x1009 tx timeout [ 670.857725][T11630] syz.2.1833[11630] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 670.857827][T11630] syz.2.1833[11630] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 677.026039][T11683] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1849'. [ 679.418333][T11721] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1855'. [ 679.748037][T11725] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 687.236855][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 687.405250][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 689.570212][T11775] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1872'. [ 689.591968][T11775] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1872'. [ 689.925359][T11781] tipc: Enabled bearer , priority 0 [ 690.339151][T11784] device syzkaller0 entered promiscuous mode [ 690.656582][T11781] tipc: Resetting bearer [ 690.945428][ T7712] tipc: Node number set to 493612682 [ 690.973034][T11778] tipc: Resetting bearer [ 691.004511][T11778] tipc: Disabling bearer [ 692.169112][T11803] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1879'. [ 692.179202][T11803] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1879'. [ 692.456711][T11811] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1880'. [ 693.293534][T11822] loop6: detected capacity change from 0 to 32768 [ 693.316656][T11827] MPTCP: kernel_bind error, err=-98 [ 696.983620][T11858] xt_CT: You must specify a L4 protocol and not use inversions on it [ 701.163271][T11888] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1899'. [ 701.377566][T11888] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1899'. [ 704.519517][T11905] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1906'. [ 705.527571][T11932] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 710.857334][T11978] xt_CT: You must specify a L4 protocol and not use inversions on it [ 711.142337][T11982] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1923'. [ 714.648418][T12005] gfs2: gfs2 mount does not exist [ 717.747629][T12031] loop6: detected capacity change from 0 to 4096 [ 717.912842][T12037] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1941'. [ 718.024023][T12037] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1941'. [ 720.898417][T12048] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1944'. [ 721.920021][T12061] gfs2: gfs2 mount does not exist [ 722.214589][T12068] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1948'. [ 722.258692][T12068] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1948'. [ 722.427022][T12065] loop0: detected capacity change from 0 to 32768 [ 722.448330][T12074] 9pnet: Insufficient options for proto=fd [ 722.459468][T12074] fuse: Bad value for 'fd' [ 722.550547][T11060] loop0: p9 p11 p16 [ 722.951187][T12065] loop0: p9 p11 p16 [ 723.288203][T12082] xt_CT: You must specify a L4 protocol and not use inversions on it [ 724.229532][T11250] udevd[11250]: inotify_add_watch(7, /dev/loop0p11, 10) failed: No such file or directory [ 724.244557][T11113] udevd[11113]: inotify_add_watch(7, /dev/loop0p16, 10) failed: No such file or directory [ 724.258043][T11060] udevd[11060]: inotify_add_watch(7, /dev/loop0p9, 10) failed: No such file or directory [ 725.036491][T11060] udevd[11060]: inotify_add_watch(7, /dev/loop0p9, 10) failed: No such file or directory [ 725.040255][T11250] udevd[11250]: inotify_add_watch(7, /dev/loop0p11, 10) failed: No such file or directory [ 725.058399][T11113] udevd[11113]: inotify_add_watch(7, /dev/loop0p16, 10) failed: No such file or directory [ 729.336058][T12128] loop0: detected capacity change from 0 to 4096 [ 729.381282][T12132] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1963'. [ 730.127166][T12137] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 736.228246][T12184] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1981'. [ 737.540471][T12210] overlayfs: failed to clone upperpath [ 738.323311][T12222] overlayfs: failed to clone upperpath [ 738.531729][T12226] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1991'. [ 738.541487][T12226] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1991'. [ 739.371131][T12231] overlayfs: failed to clone upperpath [ 739.470176][T12238] loop6: detected capacity change from 0 to 128 [ 741.683667][ T5026] attempt to access beyond end of device [ 741.683667][ T5026] loop6: rw=1, want=865, limit=128 [ 741.758810][T12254] overlayfs: failed to clone upperpath [ 741.854082][T12259] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1997'. [ 741.923509][T12261] loop6: detected capacity change from 0 to 2048 [ 741.989890][T12262] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1995'. [ 742.056769][T12261] NILFS (loop6): unrecognized mount option "cp=0x0000000000000003±£ø¢þápô" [ 742.318219][T12265] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2005'. [ 742.353521][T12265] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2005'. [ 743.927395][T12285] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 743.937599][T12285] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 743.946856][T12285] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 743.956166][T12285] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 743.992718][T12285] team0: Port device vxlan0 added [ 746.478634][T12307] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2018'. [ 746.521942][T12307] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2018'. [ 747.433703][T12324] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2023'. [ 748.685673][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 748.692042][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.335470][T12335] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 749.764908][T12340] netlink: 'syz.0.2027': attribute type 10 has an invalid length. [ 751.272124][T12340] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2027'. [ 751.367381][T12340] batman_adv: batadv0: Adding interface: virt_wifi0 [ 751.467201][T12340] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560. [ 751.488219][T12340] batman_adv: batadv0: Interface activated: virt_wifi0 [ 752.348629][T12353] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2033'. [ 752.390858][T12353] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2033'. [ 754.884453][T12354] xt_bpf: check failed: parse error [ 755.666273][T12365] ..: renamed from ipvlan0 [ 757.789152][T12401] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 757.799847][T12401] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 757.807992][T12401] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 757.820274][T12401] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 758.684369][T12409] atomic_op ffff8880782b8998 conn xmit_atomic 0000000000000000 [ 758.869639][T12411] [ 758.872006][T12411] ====================================================== [ 758.879430][T12411] WARNING: possible circular locking dependency detected [ 758.887493][T12411] syzkaller #0 Not tainted [ 758.892357][T12411] ------------------------------------------------------ [ 758.899753][T12411] syz.0.2048/12411 is trying to acquire lock: [ 758.905908][T12411] ffff888023e4a3a0 (msk_lock-AF_INET){+.+.}-{0:0}, at: inet_sk_diag_fill+0xef6/0x1b50 [ 758.916203][T12411] [ 758.916203][T12411] but task is already holding lock: [ 758.923884][T12411] ffffc9000180cb68 (&h->lhash2[i].lock){+.+.}-{2:2}, at: mptcp_diag_dump+0x911/0x1290 [ 758.933851][T12411] [ 758.933851][T12411] which lock already depends on the new lock. [ 758.933851][T12411] [ 758.944924][T12411] [ 758.944924][T12411] the existing dependency chain (in reverse order) is: [ 758.954761][T12411] [ 758.954761][T12411] -> #2 (&h->lhash2[i].lock){+.+.}-{2:2}: [ 758.963200][T12411] _raw_spin_lock+0x2a/0x40 [ 758.968967][T12411] inet_unhash+0xd0/0x540 [ 758.973826][T12411] tcp_set_state+0x35b/0x520 [ 758.979133][T12411] __tcp_close+0x91/0xf10 [ 758.984349][T12411] __mptcp_close_ssk+0x1ea/0x460 [ 758.989911][T12411] __mptcp_destroy_sock+0x3f6/0x720 [ 758.996140][T12411] mptcp_close+0x5a4/0x9f0 [ 759.001506][T12411] inet_release+0x139/0x180 [ 759.006952][T12411] sock_close+0xd5/0x240 [ 759.011916][T12411] __fput+0x234/0x930 [ 759.016798][T12411] task_work_run+0x125/0x1a0 [ 759.022016][T12411] do_exit+0x61e/0x20a0 [ 759.026924][T12411] do_group_exit+0x12e/0x300 [ 759.032056][T12411] get_signal+0x6ca/0x12c0 [ 759.037018][T12411] arch_do_signal_or_restart+0xc1/0x1300 [ 759.043320][T12411] exit_to_user_mode_loop+0x9e/0x130 [ 759.049510][T12411] exit_to_user_mode_prepare+0xb1/0x140 [ 759.055883][T12411] syscall_exit_to_user_mode+0x16/0x40 [ 759.062109][T12411] do_syscall_64+0x58/0xa0 [ 759.067272][T12411] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 759.073998][T12411] [ 759.073998][T12411] -> #1 (k-sk_lock-AF_INET/1){+.+.}-{0:0}: [ 759.082318][T12411] mptcp_close+0x297/0x9f0 [ 759.087540][T12411] inet_release+0x139/0x180 [ 759.092666][T12411] sock_release+0x7b/0x140 [ 759.097804][T12411] mptcp_nl_cmd_add_addr+0xa5d/0xcf0 [ 759.103988][T12411] genl_rcv_msg+0xbc6/0xf40 [ 759.109424][T12411] netlink_rcv_skb+0x1e0/0x430 [ 759.114717][T12411] genl_rcv+0x24/0x40 [ 759.119387][T12411] netlink_unicast+0x774/0x920 [ 759.124955][T12411] netlink_sendmsg+0x8ab/0xbc0 [ 759.130310][T12411] ____sys_sendmsg+0x5a2/0x8c0 [ 759.136085][T12411] ___sys_sendmsg+0x1f0/0x260 [ 759.141884][T12411] __se_sys_sendmsg+0x190/0x250 [ 759.147633][T12411] do_syscall_64+0x4c/0xa0 [ 759.152589][T12411] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 759.159328][T12411] [ 759.159328][T12411] -> #0 (msk_lock-AF_INET){+.+.}-{0:0}: [ 759.167162][T12411] __lock_acquire+0x2c33/0x7c60 [ 759.172648][T12411] lock_acquire+0x197/0x3f0 [ 759.177696][T12411] mptcp_diag_get_info+0x1db/0x990 [ 759.183351][T12411] inet_sk_diag_fill+0xef6/0x1b50 [ 759.189091][T12411] mptcp_diag_dump+0xcca/0x1290 [ 759.194665][T12411] __inet_diag_dump+0x1f6/0x380 [ 759.200143][T12411] inet_diag_dump_compat+0x161/0x200 [ 759.206018][T12411] netlink_dump+0x676/0xcd0 [ 759.211350][T12411] __netlink_dump_start+0x523/0x700 [ 759.217272][T12411] inet_diag_rcv_msg_compat+0x1e9/0x3c0 [ 759.223539][T12411] sock_diag_rcv_msg+0x164/0x3e0 [ 759.229300][T12411] netlink_rcv_skb+0x1e0/0x430 [ 759.234791][T12411] sock_diag_rcv+0x26/0x40 [ 759.239925][T12411] netlink_unicast+0x774/0x920 [ 759.245214][T12411] netlink_sendmsg+0x8ab/0xbc0 [ 759.250590][T12411] ____sys_sendmsg+0x5a2/0x8c0 [ 759.256139][T12411] ___sys_sendmsg+0x1f0/0x260 [ 759.261527][T12411] __se_sys_sendmsg+0x190/0x250 [ 759.266922][T12411] do_syscall_64+0x4c/0xa0 [ 759.271878][T12411] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 759.278652][T12411] [ 759.278652][T12411] other info that might help us debug this: [ 759.278652][T12411] [ 759.289149][T12411] Chain exists of: [ 759.289149][T12411] msk_lock-AF_INET --> k-sk_lock-AF_INET/1 --> &h->lhash2[i].lock [ 759.289149][T12411] [ 759.303702][T12411] Possible unsafe locking scenario: [ 759.303702][T12411] [ 759.312396][T12411] CPU0 CPU1 [ 759.318354][T12411] ---- ---- [ 759.324685][T12411] lock(&h->lhash2[i].lock); [ 759.330142][T12411] lock(k-sk_lock-AF_INET/1); [ 759.337711][T12411] lock(&h->lhash2[i].lock); [ 759.345726][T12411] lock(msk_lock-AF_INET); [ 759.350237][T12411] [ 759.350237][T12411] *** DEADLOCK *** [ 759.350237][T12411] [ 759.358517][T12411] 6 locks held by syz.0.2048/12411: [ 759.364395][T12411] #0: ffffffff8d241668 (sock_diag_mutex){+.+.}-{3:3}, at: sock_diag_rcv+0x17/0x40 [ 759.373910][T12411] #1: ffffffff8d241528 (sock_diag_table_mutex){+.+.}-{3:3}, at: sock_diag_rcv_msg+0x14a/0x3e0 [ 759.385435][T12411] #2: ffff888061e1f690 (nlk_cb_mutex-SOCK_DIAG){+.+.}-{3:3}, at: __netlink_dump_start+0x11f/0x700 [ 759.396623][T12411] #3: ffffffff8d31b988 (inet_diag_table_mutex){+.+.}-{3:3}, at: __inet_diag_dump+0x181/0x380 [ 759.407223][T12411] #4: ffffffff8c11c460 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 759.416871][T12411] #5: ffffc9000180cb68 (&h->lhash2[i].lock){+.+.}-{2:2}, at: mptcp_diag_dump+0x911/0x1290 [ 759.427155][T12411] [ 759.427155][T12411] stack backtrace: [ 759.433245][T12411] CPU: 1 PID: 12411 Comm: syz.0.2048 Not tainted syzkaller #0 [ 759.440796][T12411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 759.451159][T12411] Call Trace: [ 759.454458][T12411] [ 759.457484][T12411] dump_stack_lvl+0x168/0x230 [ 759.462478][T12411] ? load_image+0x3b0/0x3b0 [ 759.467083][T12411] ? show_regs_print_info+0x20/0x20 [ 759.472401][T12411] ? print_circular_bug+0x12b/0x1a0 [ 759.477800][T12411] check_noncircular+0x274/0x310 [ 759.482747][T12411] ? add_chain_block+0x940/0x940 [ 759.487682][T12411] ? lockdep_lock+0xdc/0x1e0 [ 759.492463][T12411] ? mark_lock+0x94/0x320 [ 759.496811][T12411] __lock_acquire+0x2c33/0x7c60 [ 759.501914][T12411] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 759.508146][T12411] ? verify_lock_unused+0x140/0x140 [ 759.513561][T12411] ? lockdep_hardirqs_on_prepare+0x760/0x760 [ 759.519659][T12411] ? verify_lock_unused+0x140/0x140 [ 759.525279][T12411] ? __local_bh_enable_ip+0xcb/0x1b0 [ 759.530586][T12411] ? __local_bh_enable_ip+0x12a/0x1b0 [ 759.536344][T12411] ? lockdep_hardirqs_on+0x94/0x140 [ 759.541658][T12411] ? __local_bh_enable_ip+0x12a/0x1b0 [ 759.547068][T12411] ? _local_bh_enable+0xa0/0xa0 [ 759.552228][T12411] ? skb_put+0x117/0x210 [ 759.556506][T12411] lock_acquire+0x197/0x3f0 [ 759.561033][T12411] ? inet_sk_diag_fill+0xef6/0x1b50 [ 759.566328][T12411] ? read_lock_is_recursive+0x10/0x10 [ 759.571725][T12411] ? rcu_lock_release+0x5/0x20 [ 759.576703][T12411] ? __lock_acquire+0x7c60/0x7c60 [ 759.581935][T12411] ? inet_sk_diag_fill+0xef6/0x1b50 [ 759.582022][T12421] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2049'. [ 759.587170][T12411] mptcp_diag_get_info+0x1db/0x990 [ 759.587203][T12411] ? inet_sk_diag_fill+0xef6/0x1b50 [ 759.587224][T12411] inet_sk_diag_fill+0xef6/0x1b50 [ 759.587243][T12411] ? inet_diag_msg_attrs_fill+0x8c0/0x8c0 [ 759.587259][T12411] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 759.587276][T12411] ? lockdep_hardirqs_on+0x94/0x140 [ 759.587294][T12411] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 759.598877][T12421] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 759.601494][T12411] ? inet_diag_bc_sk+0x187/0x10c0 [ 759.606796][T12421] IPv6: NLM_F_CREATE should be set when creating new route [ 759.611900][T12411] ? mptcp_diag_dump+0xc7b/0x1290 [ 759.611936][T12411] mptcp_diag_dump+0xcca/0x1290 [ 759.611960][T12411] ? mptcp_token_join_cookie_init_state+0x460/0x460 [ 759.672001][T12411] __inet_diag_dump+0x1f6/0x380 [ 759.677298][T12411] inet_diag_dump_compat+0x161/0x200 [ 759.682618][T12411] ? inet_diag_dump_start_compat+0x20/0x20 [ 759.688643][T12411] ? memset+0x1e/0x40 [ 759.692629][T12411] ? __alloc_skb+0x473/0x750 [ 759.697313][T12411] netlink_dump+0x676/0xcd0 [ 759.702025][T12411] ? netlink_lookup+0x1d0/0x1d0 [ 759.706891][T12411] ? __inet_diag_dump_start+0x805/0x970 [ 759.713062][T12411] __netlink_dump_start+0x523/0x700 [ 759.718598][T12411] inet_diag_rcv_msg_compat+0x1e9/0x3c0 [ 759.724306][T12411] ? inet_diag_unregister+0xb0/0xb0 [ 759.729510][T12411] ? rcu_preempt_deferred_qs_irqrestore+0x836/0xc10 [ 759.736109][T12411] ? mutex_lock_io_nested+0x60/0x60 [ 759.741825][T12411] ? __inet_diag_dump+0x380/0x380 [ 759.746857][T12411] ? inet_diag_dump_start_compat+0x20/0x20 [ 759.752659][T12411] ? inet_diag_dump+0x50/0x50 [ 759.757341][T12411] ? sock_diag_rcv+0x17/0x40 [ 759.762126][T12411] ? sock_diag_rcv+0x17/0x40 [ 759.766759][T12411] ? inet_diag_unregister+0xb0/0xb0 [ 759.772293][T12411] sock_diag_rcv_msg+0x164/0x3e0 [ 759.777964][T12411] ? lockdep_hardirqs_off+0x70/0x100 [ 759.783476][T12411] netlink_rcv_skb+0x1e0/0x430 [ 759.788352][T12411] ? sock_diag_bind+0xa0/0xa0 [ 759.793319][T12411] ? netlink_ack+0xb60/0xb60 [ 759.798006][T12411] ? __lock_acquire+0x7c60/0x7c60 [ 759.803334][T12411] sock_diag_rcv+0x26/0x40 [ 759.807955][T12411] netlink_unicast+0x774/0x920 [ 759.812999][T12411] netlink_sendmsg+0x8ab/0xbc0 [ 759.817980][T12411] ? netlink_getsockopt+0x560/0x560 [ 759.823871][T12411] ? preempt_schedule_irq+0xd0/0x150 [ 759.829465][T12411] ? aa_sock_msg_perm+0x94/0x150 [ 759.835049][T12411] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 759.841005][T12411] ? security_socket_sendmsg+0x7c/0xa0 [ 759.846573][T12411] ? netlink_getsockopt+0x560/0x560 [ 759.852310][T12411] ____sys_sendmsg+0x5a2/0x8c0 [ 759.857183][T12411] ? __sys_sendmsg_sock+0x30/0x30 [ 759.862349][T12411] ? ___sys_sendmsg+0x1d7/0x260 [ 759.867557][T12411] ___sys_sendmsg+0x1f0/0x260 [ 759.872240][T12411] ? __sys_sendmsg+0x250/0x250 [ 759.877007][T12411] ? lockdep_hardirqs_off+0x70/0x100 [ 759.882605][T12411] __se_sys_sendmsg+0x190/0x250 [ 759.888128][T12411] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 759.893910][T12411] ? __x64_sys_sendmsg+0x80/0x80 [ 759.899023][T12411] ? syscall_enter_from_user_mode+0x2a/0x70 [ 759.905044][T12411] do_syscall_64+0x4c/0xa0 [ 759.909646][T12411] ? clear_bhb_loop+0x30/0x80 [ 759.914457][T12411] ? clear_bhb_loop+0x30/0x80 [ 759.919240][T12411] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 759.925268][T12411] RIP: 0033:0x7fe356dbebe9 [ 759.929888][T12411] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 759.950222][T12411] RSP: 002b:00007fe355026038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 759.958658][T12411] RAX: ffffffffffffffda RBX: 00007fe356fe5fa0 RCX: 00007fe356dbebe9 [ 759.966808][T12411] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 759.975123][T12411] RBP: 00007fe356e41e19 R08: 0000000000000000 R09: 0000000000000000 [ 759.983279][T12411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 759.992097][T12411] R13: 00007fe356fe6038 R14: 00007fe356fe5fa0 R15: 00007fff55adbd08 [ 760.000544][T12411] [ 760.004951][T12411] BUG: sleeping function called from invalid context at net/core/sock.c:3283 [ 760.014885][T12411] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 12411, name: syz.0.2048 [ 760.024609][T12411] INFO: lockdep is turned off. [ 760.029588][T12411] Preemption disabled at: [ 760.029598][T12411] [<0000000000000000>] 0x0 [ 760.038733][T12411] CPU: 1 PID: 12411 Comm: syz.0.2048 Not tainted syzkaller #0 [ 760.046204][T12411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 760.056460][T12411] Call Trace: [ 760.060107][T12411] [ 760.063073][T12411] dump_stack_lvl+0x168/0x230 [ 760.067769][T12411] ? show_regs_print_info+0x20/0x20 [ 760.073234][T12411] ? load_image+0x3b0/0x3b0 [ 760.078295][T12411] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 760.085100][T12411] ___might_sleep+0x47c/0x600 [ 760.089886][T12411] ? __might_sleep+0xf0/0xf0 [ 760.094485][T12411] ? read_lock_is_recursive+0x10/0x10 [ 760.101050][T12411] ? rcu_lock_release+0x5/0x20 [ 760.106076][T12411] __lock_sock_fast+0x2f/0xe0 [ 760.111161][T12411] ? inet_sk_diag_fill+0xef6/0x1b50 [ 760.116650][T12411] mptcp_diag_get_info+0x1e7/0x990 [ 760.121833][T12411] inet_sk_diag_fill+0xef6/0x1b50 [ 760.127170][T12411] ? inet_diag_msg_attrs_fill+0x8c0/0x8c0 [ 760.133781][T12411] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 760.139597][T12411] ? lockdep_hardirqs_on+0x94/0x140 [ 760.145084][T12411] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 760.152328][T12411] ? inet_diag_bc_sk+0x187/0x10c0 [ 760.157973][T12411] ? mptcp_diag_dump+0xc7b/0x1290 [ 760.163810][T12411] mptcp_diag_dump+0xcca/0x1290 [ 760.169813][T12411] ? mptcp_token_join_cookie_init_state+0x460/0x460 [ 760.176916][T12411] __inet_diag_dump+0x1f6/0x380 [ 760.182495][T12411] inet_diag_dump_compat+0x161/0x200 [ 760.189499][T12411] ? inet_diag_dump_start_compat+0x20/0x20 [ 760.196182][T12411] ? memset+0x1e/0x40 [ 760.201246][T12411] ? __alloc_skb+0x473/0x750 [ 760.206135][T12411] netlink_dump+0x676/0xcd0 [ 760.211651][T12411] ? netlink_lookup+0x1d0/0x1d0 [ 760.217205][T12411] ? __inet_diag_dump_start+0x805/0x970 [ 760.223639][T12411] __netlink_dump_start+0x523/0x700 [ 760.230084][T12411] inet_diag_rcv_msg_compat+0x1e9/0x3c0 [ 760.236802][T12411] ? inet_diag_unregister+0xb0/0xb0 [ 760.242032][T12411] ? rcu_preempt_deferred_qs_irqrestore+0x836/0xc10 [ 760.248981][T12411] ? mutex_lock_io_nested+0x60/0x60 [ 760.254767][T12411] ? __inet_diag_dump+0x380/0x380 [ 760.260076][T12411] ? inet_diag_dump_start_compat+0x20/0x20 [ 760.266060][T12411] ? inet_diag_dump+0x50/0x50 [ 760.271124][T12411] ? sock_diag_rcv+0x17/0x40 [ 760.277528][T12411] ? sock_diag_rcv+0x17/0x40 [ 760.282562][T12411] ? inet_diag_unregister+0xb0/0xb0 [ 760.288668][T12411] sock_diag_rcv_msg+0x164/0x3e0 [ 760.295005][T12411] ? lockdep_hardirqs_off+0x70/0x100 [ 760.300395][T12411] netlink_rcv_skb+0x1e0/0x430 [ 760.306201][T12411] ? sock_diag_bind+0xa0/0xa0 [ 760.311692][T12411] ? netlink_ack+0xb60/0xb60 [ 760.317690][T12411] ? __lock_acquire+0x7c60/0x7c60 [ 760.323444][T12411] sock_diag_rcv+0x26/0x40 [ 760.329121][T12411] netlink_unicast+0x774/0x920 [ 760.335234][T12411] netlink_sendmsg+0x8ab/0xbc0 [ 760.340564][T12411] ? netlink_getsockopt+0x560/0x560 [ 760.347817][T12411] ? preempt_schedule_irq+0xd0/0x150 [ 760.354488][T12411] ? aa_sock_msg_perm+0x94/0x150 [ 760.360233][T12411] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 760.366494][T12411] ? security_socket_sendmsg+0x7c/0xa0 [ 760.372836][T12411] ? netlink_getsockopt+0x560/0x560 [ 760.378934][T12411] ____sys_sendmsg+0x5a2/0x8c0 [ 760.384719][T12411] ? __sys_sendmsg_sock+0x30/0x30 [ 760.390804][T12411] ? ___sys_sendmsg+0x1d7/0x260 [ 760.396684][T12411] ___sys_sendmsg+0x1f0/0x260 [ 760.403341][T12411] ? __sys_sendmsg+0x250/0x250 [ 760.410382][T12411] ? lockdep_hardirqs_off+0x70/0x100 [ 760.417559][T12411] __se_sys_sendmsg+0x190/0x250 [ 760.425703][T12411] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 760.438966][T12411] ? __x64_sys_sendmsg+0x80/0x80 [ 760.445228][T12411] ? syscall_enter_from_user_mode+0x2a/0x70 [ 760.451497][T12411] do_syscall_64+0x4c/0xa0 [ 760.456697][T12411] ? clear_bhb_loop+0x30/0x80 [ 760.462245][T12411] ? clear_bhb_loop+0x30/0x80 [ 760.467338][T12411] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 760.474339][T12411] RIP: 0033:0x7fe356dbebe9 [ 760.479644][T12411] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 760.501064][T12411] RSP: 002b:00007fe355026038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 760.510919][T12411] RAX: ffffffffffffffda RBX: 00007fe356fe5fa0 RCX: 00007fe356dbebe9 [ 760.519738][T12411] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 760.528127][T12411] RBP: 00007fe356e41e19 R08: 0000000000000000 R09: 0000000000000000 [ 760.536642][T12411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 760.545262][T12411] R13: 00007fe356fe6038 R14: 00007fe356fe5fa0 R15: 00007fff55adbd08 [ 760.553699][T12411]