last executing test programs: 14.471150139s ago: executing program 1 (id=2732): r0 = socket(0x25, 0x801, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) sendto$inet6(r0, &(0x7f0000000000)="91", 0x1, 0x4054, 0x0, 0x0) 14.371056699s ago: executing program 1 (id=2735): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r7}, 0x10) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000580)={0x2c, &(0x7f0000000300)={0x20, 0xe, 0xc5, {0xc5, 0xc, "7c3aba102b7986d1a1c79071b4899a652c4e2743c844086790a231fac4d8cbdc4b7b0adf692d9f10038176cff813577a326beab6da91192aa24bbae5bac2f448198198122ea002fbbe65ba5c32ee26a4409481eaff7cb7a306ab254c11c88857a50f563b1dd820bd0b4c34d017ee7e577821a4404a03bca505b538c00090f9a08dd877a9d40e3f7a859d7cb3d9cd5b369932da8807482b5fe12d25bbdc0cd3e2086ce8be543532e4d758533b73f5ab00a7fb56e0ebc0d8f824eed67519603c6fdef9f2"}}, &(0x7f0000000400)={0x0, 0x3, 0x3a, @string={0x3a, 0x3, "1e61be50e4a348dc5e4e301284adc2518f2846d324d6cfadb6befc948a124b67e7046b8641b58a4d6bf82cfc853653adada34c42e4ac9812"}}, &(0x7f0000000480)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000500)={0x20, 0x29, 0xf, {0xf, 0x29, 0xff, 0x0, 0x3, 0x0, "45482093", "96117ec3"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7f, 0x0, 0x4, 0x3, 0x9, 0x7f, 0x373c}}}, &(0x7f0000000b40)={0x84, &(0x7f00000005c0)={0x40, 0x16, 0xc, "f182f97821614465692f916a"}, 0x0, &(0x7f0000000680)={0x0, 0x8, 0x1, 0xd}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000000780)={0x20, 0x0, 0x4, {0x400, 0x80}}, &(0x7f00000007c0)={0x40, 0x7, 0x2, 0x3}, &(0x7f0000000800)={0x40, 0x9, 0x1, 0x8}, 0x0, &(0x7f0000000880)={0x40, 0xf, 0x2, 0x3}, &(0x7f00000008c0)={0x40, 0x13, 0x6, @link_local}, &(0x7f0000000900)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}}, &(0x7f0000000940)={0x40, 0x19, 0x2, "8f0d"}, &(0x7f0000000980)={0x40, 0x1a, 0x2, 0x7b74}, &(0x7f00000009c0)={0x40, 0x1c, 0x1, 0x20}, &(0x7f0000000a00)={0x40, 0x1e, 0x1, 0x17}, &(0x7f0000000a40)={0x40, 0x21, 0x1, 0x2}}) ioctl$TCFLSH(r3, 0x400455c8, 0x0) ioctl$sock_bt_hci(r2, 0x400448e2, &(0x7f0000000100)) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) 11.172953703s ago: executing program 1 (id=2759): r0 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r1], 0xec}}, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$RTC_UIE_ON(r6, 0x7003) close_range(r5, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="290000002000190f00003fffffffda060200000000e80001dd0000040d000600ea1100000005000000", 0x29}], 0x1) 7.113137796s ago: executing program 2 (id=2769): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r7}, 0x10) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000580)={0x2c, &(0x7f0000000300)={0x20, 0xe, 0xc5, {0xc5, 0xc, "7c3aba102b7986d1a1c79071b4899a652c4e2743c844086790a231fac4d8cbdc4b7b0adf692d9f10038176cff813577a326beab6da91192aa24bbae5bac2f448198198122ea002fbbe65ba5c32ee26a4409481eaff7cb7a306ab254c11c88857a50f563b1dd820bd0b4c34d017ee7e577821a4404a03bca505b538c00090f9a08dd877a9d40e3f7a859d7cb3d9cd5b369932da8807482b5fe12d25bbdc0cd3e2086ce8be543532e4d758533b73f5ab00a7fb56e0ebc0d8f824eed67519603c6fdef9f2"}}, &(0x7f0000000400)={0x0, 0x3, 0x3a, @string={0x3a, 0x3, "1e61be50e4a348dc5e4e301284adc2518f2846d324d6cfadb6befc948a124b67e7046b8641b58a4d6bf82cfc853653adada34c42e4ac9812"}}, &(0x7f0000000480)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000500)={0x20, 0x29, 0xf, {0xf, 0x29, 0xff, 0x0, 0x3, 0x0, "45482093", "96117ec3"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7f, 0x0, 0x4, 0x3, 0x9, 0x7f, 0x373c}}}, &(0x7f0000000b40)={0x84, &(0x7f00000005c0)={0x40, 0x16, 0xc, "f182f97821614465692f916a"}, 0x0, &(0x7f0000000680)={0x0, 0x8, 0x1, 0xd}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000000780)={0x20, 0x0, 0x4, {0x400, 0x80}}, &(0x7f00000007c0)={0x40, 0x7, 0x2, 0x3}, &(0x7f0000000800)={0x40, 0x9, 0x1, 0x8}, 0x0, &(0x7f0000000880)={0x40, 0xf, 0x2, 0x3}, &(0x7f00000008c0)={0x40, 0x13, 0x6, @link_local}, &(0x7f0000000900)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}}, &(0x7f0000000940)={0x40, 0x19, 0x2, "8f0d"}, &(0x7f0000000980)={0x40, 0x1a, 0x2, 0x7b74}, &(0x7f00000009c0)={0x40, 0x1c, 0x1, 0x20}, &(0x7f0000000a00)={0x40, 0x1e, 0x1, 0x17}, &(0x7f0000000a40)={0x40, 0x21, 0x1, 0x2}}) ioctl$TCFLSH(r3, 0x400455c8, 0x0) ioctl$sock_bt_hci(r2, 0x400448e2, &(0x7f0000000100)) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) 5.64856173s ago: executing program 3 (id=2772): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000080)=0x400000001, 0x4) connect$inet6(r4, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) socket$tipc(0x1e, 0x1, 0x0) socket$tipc(0x1e, 0x5, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_clone(0x24001100, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 5.584689597s ago: executing program 1 (id=2773): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000240), &(0x7f00000003c0)=r2}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r7, r4, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x40) syz_emit_ethernet(0x22, &(0x7f0000000100)=ANY=[], 0x0) 5.507853133s ago: executing program 0 (id=2774): syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x18808, 0x0, 0xf9, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') getdents64(0xffffffffffffffff, 0xfffffffffffffffe, 0x29) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 5.445115589s ago: executing program 1 (id=2776): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="000000000087fb00b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000004a40)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000017c0)=@file={0x1, './file1\x00'}, 0x6e, 0x0}}], 0x2, 0x0) 4.579260479s ago: executing program 3 (id=2777): ptrace(0x10, 0x1) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000031c0)={0x0, 0x2, 0x100000000000000}) 4.103929182s ago: executing program 4 (id=2778): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @local, 0x5}]}, &(0x7f0000000180)=0x10) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, 0x0, &(0x7f0000000280)) 3.896858151s ago: executing program 1 (id=2779): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x3, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4efad000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) read$FUSE(0xffffffffffffffff, &(0x7f00000082c0)={0x2020}, 0x2020) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r7}, 0x18) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x18) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="34000000100001f8ffffff000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r8, @ANYBLOB="08001b"], 0x34}}, 0x4004010) 3.815256169s ago: executing program 0 (id=2780): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) execveat$binfmt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 3.809731019s ago: executing program 2 (id=2781): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000efff2800128008000100687372001c000280050007000100000008000200", @ANYRES32=r2, @ANYBLOB="080001"], 0x48}}, 0x0) 3.570181322s ago: executing program 4 (id=2782): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@metacopy_on}], [], 0x2c}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x0, 0x0) renameat2(r5, &(0x7f0000000380)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r6, &(0x7f0000000040)='./file1\x00', 0x2) 3.568298612s ago: executing program 2 (id=2783): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_emit_ethernet(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@delneigh={0x44, 0x1a, 0x1, 0x0, 0x0, {0xa}, [@NDA_DST_IPV6={0x14, 0x1, @dev}, @NDA_CACHEINFO={0x14, 0x3, {0x7}}]}, 0x44}}, 0x0) 3.200749506s ago: executing program 0 (id=2784): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)='8', 0x1}], 0x1}}], 0x1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x39000, 0x0) 2.134488833s ago: executing program 3 (id=2785): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x34, 0x4, 0x0, 0x0, 0xd0, 0x64, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x9, 0x0, 0x5, 0x0]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x1, [{@private=0xa010100}, {@multicast1, 0x5}, {@local}, {@dev, 0x65c}, {@broadcast}, {@empty, 0xfffffffc}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x8, [{@remote, 0x1}, {@multicast2}, {@private=0xa0100fe}, {@rand_addr=0x64010100}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @lsrr={0x83, 0xf, 0xdc, [@private=0xa010102, @rand_addr=0x64010102, @multicast1]}, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000940)={0x0, 0x4e6f}) 2.132004014s ago: executing program 4 (id=2786): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0500000004000000e47f000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000009c0)='kfree\x00', r1}, 0x10) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000080)='D', 0x1) 2.131452504s ago: executing program 0 (id=2787): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100001"], 0xe8}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010000104000000000200000000000000", @ANYRES32=r2, @ANYBLOB="000000000000000028001280090001007665746800000000180002"], 0x48}}, 0x0) 2.129605374s ago: executing program 2 (id=2788): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r0, 0x24, &(0x7f0000000000)={0x3, 0x0, 0xfff, 0x1000000}) 2.045072622s ago: executing program 4 (id=2789): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=r4, @ANYBLOB="00000000000000003400128008000100736974002800028008", @ANYRES32=r3], 0x54}}, 0x0) 1.921451953s ago: executing program 2 (id=2790): syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x18808, 0x0, 0xf9, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') getdents64(0xffffffffffffffff, 0xfffffffffffffffe, 0x29) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.920480363s ago: executing program 4 (id=2791): shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000440)) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x82, 0x0, 0x0) unshare(0x2040400) r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) fsmount(r0, 0x0, 0x0) 1.804668514s ago: executing program 4 (id=2792): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240), 0x0, 0x0, 0x0) unshare(0x6a040000) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB], 0x14}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = syz_io_uring_setup(0x4b6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff0000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02020409100000000000004c9e00000002001300027f0000000000000000004105000600200000000a000000000000000005000201080f00e0001f080000000000092000000000000200010020e9ffeeffff070200"], 0x80}}, 0x0) sendmmsg(r4, &(0x7f0000000180), 0x393, 0x0) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) lseek(r5, 0x7ffffb, 0x0) 1.692711784s ago: executing program 3 (id=2793): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @local, 0x5}]}, &(0x7f0000000180)=0x10) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000200)=@assoc_value={r1, 0x9}, 0x0) 1.055548882s ago: executing program 3 (id=2794): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) timer_gettime(0x0, 0x0) 920.846295ms ago: executing program 2 (id=2795): pipe2(&(0x7f0000000040), 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x3000010, &(0x7f0000000000)={[{@errors_remount}, {@nouser_xattr}]}, 0x1, 0x513, &(0x7f0000000380)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000030c0)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)={0x38, r5, 0x703, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}]}]}]}, 0x38}}, 0x0) 872.105839ms ago: executing program 0 (id=2796): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@metacopy_on}], [], 0x2c}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x0, 0x0) renameat2(r5, &(0x7f0000000380)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r6, &(0x7f0000000040)='./file1\x00', 0x2) 680.246757ms ago: executing program 3 (id=2797): socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000001c0)={r0, &(0x7f0000000240), 0x0}, 0x20) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r7, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x3a) getpeername(r6, 0x0, &(0x7f0000000100)) 0s ago: executing program 0 (id=2798): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0x4}, 0x18) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000001d00)=@qipcrtr, 0x80, 0x0}, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x1) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='\x00', 0x89901) close(r1) mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x10) flock(r2, 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r3, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r4, 0x2) kernel console output (not intermixed with test programs): z.0.2039[11721] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 827.072206][ T3705] device bridge_slave_0 left promiscuous mode [ 827.113521][ T3705] bridge0: port 1(bridge_slave_0) entered disabled state [ 827.227957][ T3705] device veth1_macvtap left promiscuous mode [ 827.249366][ T3705] device veth0_macvtap left promiscuous mode [ 827.269667][ T3705] device veth1_vlan left promiscuous mode [ 827.279900][ T3705] device veth0_vlan left promiscuous mode [ 827.482221][ T7758] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 827.737143][ T7758] usb 1-1: Using ep0 maxpacket: 32 [ 827.862149][ T7758] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 827.992751][ T7758] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 828.003691][ T7758] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 828.017414][ T7758] usb 1-1: New USB device found, idVendor=056a, idProduct=0116, bcdDevice= 0.00 [ 828.027049][ T7758] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 828.252068][ T7746] Bluetooth: hci0: command tx timeout [ 828.733969][ T7758] usb 1-1: config 0 descriptor?? [ 829.453124][T11742] syz.2.2045[11742] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 829.453234][T11742] syz.2.2045[11742] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 829.478103][ T26] audit: type=1326 audit(1728426872.789:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11741 comm="syz.2.2045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b2e77dff9 code=0x7ffc0000 [ 829.573283][ T26] audit: type=1326 audit(1728426872.789:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11741 comm="syz.2.2045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f6b2e77dff9 code=0x7ffc0000 [ 829.674040][ T26] audit: type=1326 audit(1728426872.789:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11741 comm="syz.2.2045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b2e77dff9 code=0x7ffc0000 [ 829.768196][ T26] audit: type=1326 audit(1728426872.809:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11741 comm="syz.2.2045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b2e77dff9 code=0x7ffc0000 [ 830.525351][ T3705] team0 (unregistering): Port device team_slave_1 removed [ 830.767851][ T3705] team0 (unregistering): Port device team_slave_0 removed [ 830.876826][ T3705] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 830.929792][ T3705] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 830.969178][T11758] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2049'. [ 831.561677][ T3705] bond0 (unregistering): Released all slaves [ 831.795296][T11651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 831.817615][ T3798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 831.832889][ T3798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 831.844663][T11651] 8021q: adding VLAN 0 to HW filter on device team0 [ 831.857339][ T7758] usbhid 1-1:0.0: can't add hid device: -71 [ 831.863648][ T7758] usbhid: probe of 1-1:0.0 failed with error -71 [ 831.900854][ T7758] usb 1-1: USB disconnect, device number 14 [ 831.906963][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 831.921274][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 831.942665][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 831.949874][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 831.996810][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 832.017654][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 832.046953][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 832.054110][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 832.093478][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 832.111805][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 832.118523][T11772] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2055'. [ 832.142608][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 832.174722][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 832.217108][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 832.253532][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 832.272539][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 832.313507][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 832.326854][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 832.459290][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 832.690699][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 832.937874][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 833.048962][T11777] netlink: 'syz.2.2056': attribute type 6 has an invalid length. [ 833.812897][T11789] syz.0.2060[11789] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 833.813005][T11789] syz.0.2060[11789] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 834.316454][T11789] xt_CT: No such helper "netbios-ns" [ 834.490352][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 834.522170][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 834.536491][T11651] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 834.595210][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 834.613102][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 834.686932][ T3798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 834.714040][ T3798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 834.747858][ T3798] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 834.763277][ T3798] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 834.795465][T11651] device veth0_vlan entered promiscuous mode [ 834.828584][T11651] device veth1_vlan entered promiscuous mode [ 834.875013][ T3901] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 834.898117][ T3901] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 834.912950][ T3901] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 834.931402][ T3901] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 834.954177][T11651] device veth0_macvtap entered promiscuous mode [ 834.975213][T11651] device veth1_macvtap entered promiscuous mode [ 835.028851][T11651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 835.053158][T11651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 835.074336][T11651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 835.096111][T11651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 835.119614][T11651] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 835.138993][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 835.164069][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 835.186307][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 835.209411][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 835.235847][T11651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 835.258513][T11651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 835.288519][T11651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 835.308501][T11651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 835.332952][T11651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 835.368701][T11651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 835.395244][T11651] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 835.418766][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 835.436425][T11805] syz.0.2063[11805] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 835.436529][T11805] syz.0.2063[11805] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 835.438660][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 835.534151][T11651] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.553110][T11651] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.576453][T11651] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.586115][T11651] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.715590][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 835.740936][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 835.787802][ T3901] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 835.809352][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 835.823099][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 835.838838][ T3901] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 835.992478][ T3764] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 836.126800][T11811] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2066'. [ 836.302195][ T3764] usb 1-1: Using ep0 maxpacket: 32 [ 836.453755][ T3764] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 836.622098][ T3764] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 836.654672][ T3764] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 836.715814][ T3764] usb 1-1: New USB device found, idVendor=056a, idProduct=0116, bcdDevice= 0.00 [ 836.745758][ T3764] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 836.781825][ T3764] usb 1-1: config 0 descriptor?? [ 838.020750][T11830] netlink: 'syz.1.2073': attribute type 4 has an invalid length. [ 838.339633][T11836] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2075'. [ 839.274129][T11844] syz.1.2077[11844] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 839.274228][T11844] syz.1.2077[11844] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 840.242145][ T3764] usbhid 1-1:0.0: can't add hid device: -71 [ 840.259571][ T3764] usbhid: probe of 1-1:0.0 failed with error -71 [ 840.283197][ T3764] usb 1-1: USB disconnect, device number 15 [ 840.471409][T11864] siw: device registration error -23 [ 840.476539][ T7] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 840.505118][ T7] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 840.541558][T11866] vhci_hcd: invalid port number 68 [ 840.612397][T11866] vhci_hcd: default hub control req: 8015 v0301 i0044 l0 [ 840.661882][ T26] audit: type=1326 audit(1728426883.969:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11869 comm="syz.1.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff88d77dff9 code=0x7ffc0000 [ 840.731382][ T26] audit: type=1326 audit(1728426883.999:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11869 comm="syz.1.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff88d77dff9 code=0x7ffc0000 [ 840.754158][ T26] audit: type=1326 audit(1728426883.999:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11869 comm="syz.1.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff88d77dff9 code=0x7ffc0000 [ 840.840227][ T26] audit: type=1326 audit(1728426883.999:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11869 comm="syz.1.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7ff88d77dff9 code=0x7ffc0000 [ 840.895405][ T26] audit: type=1326 audit(1728426884.009:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11869 comm="syz.1.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff88d77dff9 code=0x7ffc0000 [ 840.930300][ T26] audit: type=1326 audit(1728426884.009:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11869 comm="syz.1.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7ff88d77dff9 code=0x7ffc0000 [ 840.957767][ T26] audit: type=1326 audit(1728426884.009:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11869 comm="syz.1.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff88d77dff9 code=0x7ffc0000 [ 840.984308][ T26] audit: type=1326 audit(1728426884.009:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11869 comm="syz.1.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff88d77dff9 code=0x7ffc0000 [ 841.020047][ T26] audit: type=1326 audit(1728426884.009:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11869 comm="syz.1.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff88d77dff9 code=0x7ffc0000 [ 842.097100][T11895] syz.0.2090[11895] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 842.097203][T11895] syz.0.2090[11895] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 842.165240][T11897] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2098'. [ 842.274756][T11904] loop4: detected capacity change from 0 to 128 [ 842.317463][T11902] 9pnet: Could not find request transport: t [ 842.497316][ T3717] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 842.775298][ T3717] usb 1-1: Using ep0 maxpacket: 32 [ 842.789840][T11912] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2103'. [ 842.935363][ T3717] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 842.956613][ T3717] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 842.987108][ T3717] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 843.020466][ T3717] usb 1-1: New USB device found, idVendor=056a, idProduct=0116, bcdDevice= 0.00 [ 843.035393][ T3717] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 843.045933][T11918] siw: device registration error -23 [ 843.058066][ T3717] usb 1-1: config 0 descriptor?? [ 843.216277][T11923] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2108'. [ 843.229938][T11923] netlink: 151 bytes leftover after parsing attributes in process `syz.2.2108'. [ 844.406342][ T3705] Bluetooth: hci3: Frame reassembly failed (-84) [ 845.022378][ T3717] usbhid 1-1:0.0: can't add hid device: -71 [ 845.028761][ T3717] usbhid: probe of 1-1:0.0 failed with error -71 [ 845.049212][T11943] overlayfs: failed to resolve './file2': -2 [ 845.065975][ T3717] usb 1-1: USB disconnect, device number 16 [ 846.220587][ T26] audit: type=1326 audit(1728426889.529:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11952 comm="syz.0.2119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e16d7dff9 code=0x7ffc0000 [ 846.262050][ T26] audit: type=1326 audit(1728426889.529:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11952 comm="syz.0.2119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e16d7dff9 code=0x7ffc0000 [ 846.316520][T11955] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2120'. [ 846.356912][ T26] audit: type=1326 audit(1728426889.529:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11952 comm="syz.0.2119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e16d7dff9 code=0x7ffc0000 [ 846.387386][ T26] audit: type=1326 audit(1728426889.529:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11952 comm="syz.0.2119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e16d7dff9 code=0x7ffc0000 [ 846.415889][ T26] audit: type=1326 audit(1728426889.529:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11952 comm="syz.0.2119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e16d7dff9 code=0x7ffc0000 [ 846.442274][ T7746] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 846.450645][ T26] audit: type=1326 audit(1728426889.529:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11952 comm="syz.0.2119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8e16d7dff9 code=0x7ffc0000 [ 846.488868][T11957] can0: slcan on ttyS3. [ 846.504007][ T26] audit: type=1326 audit(1728426889.529:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11952 comm="syz.0.2119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e16d7dff9 code=0x7ffc0000 [ 846.528152][ T26] audit: type=1326 audit(1728426889.529:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11952 comm="syz.0.2119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e16d7dff9 code=0x7ffc0000 [ 846.557211][ T26] audit: type=1326 audit(1728426889.539:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11952 comm="syz.0.2119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8e16d7ff17 code=0x7ffc0000 [ 846.621229][ T26] audit: type=1326 audit(1728426889.539:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11952 comm="syz.0.2119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e16d7dff9 code=0x7ffc0000 [ 846.650728][T11961] siw: device registration error -23 [ 846.656922][T11960] can0 (unregistered): slcan off ttyS3. [ 846.666882][T11960] Falling back ldisc for ttyS3. [ 848.250737][T11985] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2131'. [ 848.279362][T11985] sit0: Master is either lo or non-ether device [ 848.417457][T11987] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2132'. [ 848.521101][T11978] syz.4.2127[11978] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 848.521211][T11978] syz.4.2127[11978] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 848.990534][ T7760] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 849.382197][ T7760] usb 5-1: Using ep0 maxpacket: 32 [ 849.752261][ T7760] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 849.774348][ T7760] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 849.800130][T11999] overlayfs: failed to resolve './file2': -2 [ 849.805992][ T7760] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 849.853490][ T7760] usb 5-1: New USB device found, idVendor=056a, idProduct=0116, bcdDevice= 0.00 [ 849.883767][ T7760] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 849.906166][ T7760] usb 5-1: config 0 descriptor?? [ 850.444381][ T7760] usbhid 5-1:0.0: can't add hid device: -71 [ 850.450572][ T7760] usbhid: probe of 5-1:0.0 failed with error -71 [ 850.479753][ T7760] usb 5-1: USB disconnect, device number 10 [ 850.561804][T12006] siw: device registration error -23 [ 851.128915][T12015] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2141'. [ 851.339236][ T3693] Bluetooth: hci3: Frame reassembly failed (-84) [ 852.134848][T12024] loop3: detected capacity change from 0 to 512 [ 852.194253][T12026] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2144'. [ 852.244598][T12026] loop4: detected capacity change from 0 to 128 [ 853.322130][ T7746] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 854.978102][T12048] loop1: detected capacity change from 0 to 1024 [ 855.088499][T12048] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 855.144198][T12036] loop3: detected capacity change from 0 to 32768 [ 855.157873][T11651] EXT4-fs (loop1): unmounting filesystem. [ 855.174765][T12036] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.2147 (12036) [ 855.216234][T12036] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 855.234436][T12036] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 855.272092][T12036] BTRFS info (device loop3): enabling auto defrag [ 855.290836][T12036] BTRFS info (device loop3): max_inline at 0 [ 855.297003][T12036] BTRFS info (device loop3): enabling ssd optimizations [ 855.322353][T12036] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 855.352070][T12036] BTRFS info (device loop3): use lzo compression, level 0 [ 855.370423][T12057] siw: device registration error -23 [ 855.375842][T12036] BTRFS info (device loop3): using free space tree [ 855.514902][ T26] kauditd_printk_skb: 39 callbacks suppressed [ 855.514917][ T26] audit: type=1800 audit(1728426898.829:955): pid=12036 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2147" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 855.624286][T10997] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 855.755292][T12075] syz.1.2152[12075] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 855.755403][T12075] syz.1.2152[12075] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 856.172089][ T8851] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 856.361156][T12083] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2156'. [ 856.374536][T12081] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2156'. [ 857.182165][ T8851] usb 2-1: Using ep0 maxpacket: 32 [ 857.502237][ T8851] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 857.522052][ T8851] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 857.531810][ T8851] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 857.557680][ T8851] usb 2-1: New USB device found, idVendor=056a, idProduct=0116, bcdDevice= 0.00 [ 857.575838][ T8851] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 857.592689][ T8851] usb 2-1: config 0 descriptor?? [ 857.911171][T12103] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2162'. [ 858.335205][ T8851] usbhid 2-1:0.0: can't add hid device: -71 [ 858.427770][ T8851] usbhid: probe of 2-1:0.0 failed with error -71 [ 858.612468][ T8851] usb 2-1: USB disconnect, device number 10 [ 858.750255][T12106] 9p: Unknown access argument †¦‘0KÚp©ÀÏìCƒÛú%GZ–Öí]ñXúq0f€#€HétœÌ±øŠ{l´C}6Ëz€;+efR2v>MÜqÌU`j¨×@/6þìJÿ-“Ž—k÷: -22 [ 859.126408][ T26] audit: type=1326 audit(1728426902.439:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12113 comm="syz.2.2166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b2e77dff9 code=0x7ffc0000 [ 859.194508][ T26] audit: type=1326 audit(1728426902.469:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12113 comm="syz.2.2166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f6b2e77dff9 code=0x7ffc0000 [ 859.230881][T12112] loop3: detected capacity change from 0 to 2048 [ 859.254592][ T26] audit: type=1326 audit(1728426902.469:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12113 comm="syz.2.2166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b2e77dff9 code=0x7ffc0000 [ 859.747043][T12112] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 859.852071][ T26] audit: type=1326 audit(1728426902.469:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12113 comm="syz.2.2166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b2e77dff9 code=0x7ffc0000 [ 859.972772][ T26] audit: type=1326 audit(1728426902.479:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12113 comm="syz.2.2166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f6b2e77dff9 code=0x7ffc0000 [ 860.019357][ T26] audit: type=1326 audit(1728426902.479:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12113 comm="syz.2.2166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b2e77dff9 code=0x7ffc0000 [ 861.089401][T12127] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 861.158730][T12127] EXT4-fs (loop3): Remounting filesystem read-only [ 861.350734][T10997] EXT4-fs (loop3): unmounting filesystem. [ 862.138829][T12151] loop3: detected capacity change from 0 to 512 [ 862.238177][T12154] netlink: 'syz.0.2179': attribute type 6 has an invalid length. [ 863.116536][T12161] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2180'. [ 865.069100][T12179] syz.4.2178[12179] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 865.069213][T12179] syz.4.2178[12179] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 866.705495][T12197] loop1: detected capacity change from 0 to 512 [ 867.090675][ T152] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 867.108958][T12201] Cannot find add_set index 0 as target [ 867.276801][T12203] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2193'. [ 867.838168][T12212] IPVS: stopping master sync thread 12210 ... [ 867.844409][T12210] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 868.539078][T12209] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 868.548512][T12209] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 868.557375][T12209] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 868.566127][T12209] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 868.735131][T12209] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2194'. [ 870.858560][T12253] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2205'. [ 870.877972][T12253] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2205'. [ 873.790737][ T26] audit: type=1326 audit(1728426917.099:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12272 comm="syz.0.2210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e16d7dff9 code=0x7ffc0000 [ 873.894243][ T26] audit: type=1326 audit(1728426917.129:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12272 comm="syz.0.2210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e16d7dff9 code=0x7ffc0000 [ 873.962343][ T26] audit: type=1326 audit(1728426917.129:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12272 comm="syz.0.2210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e16d7dff9 code=0x7ffc0000 [ 874.001708][ T26] audit: type=1326 audit(1728426917.129:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12272 comm="syz.0.2210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e16d7dff9 code=0x7ffc0000 [ 875.169808][ T26] audit: type=1326 audit(1728426917.129:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12272 comm="syz.0.2210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e16d7dff9 code=0x7ffc0000 [ 875.335217][ T26] audit: type=1326 audit(1728426917.129:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12272 comm="syz.0.2210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f8e16d7dff9 code=0x7ffc0000 [ 876.229370][ T26] audit: type=1326 audit(1728426917.129:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12272 comm="syz.0.2210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e16d7dff9 code=0x7ffc0000 [ 876.443554][ T26] audit: type=1326 audit(1728426917.129:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12272 comm="syz.0.2210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e16d7dff9 code=0x7ffc0000 [ 876.447708][ T7746] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 876.479069][ T7746] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 876.487703][ T7746] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 876.497170][ T7746] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 876.504180][ T26] audit: type=1326 audit(1728426918.679:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12286 comm="syz.0.2215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e16d7dff9 code=0x7ffc0000 [ 876.529056][ T7746] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 876.538291][ T7746] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 876.708617][T12297] loop3: detected capacity change from 0 to 2048 [ 876.788473][ T26] audit: type=1326 audit(1728426918.679:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12286 comm="syz.0.2215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e16d7dff9 code=0x7ffc0000 [ 877.128685][T12297] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 877.306953][T10997] EXT4-fs (loop3): unmounting filesystem. [ 877.473832][T12294] lo speed is unknown, defaulting to 1000 [ 879.000390][ T3651] Bluetooth: hci3: command tx timeout [ 879.131884][T12294] chnl_net:caif_netlink_parms(): no params data found [ 879.538326][T12336] overlayfs: failed to resolve './file2': -2 [ 880.691028][T12294] bridge0: port 1(bridge_slave_0) entered blocking state [ 880.740450][T12294] bridge0: port 1(bridge_slave_0) entered disabled state [ 880.764266][T12294] device bridge_slave_0 entered promiscuous mode [ 880.963706][T12344] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2229'. [ 880.979092][T12294] bridge0: port 2(bridge_slave_1) entered blocking state [ 880.986525][T12294] bridge0: port 2(bridge_slave_1) entered disabled state [ 881.000360][T12294] device bridge_slave_1 entered promiscuous mode [ 881.104715][ T7746] Bluetooth: hci3: command tx timeout [ 881.773698][T12294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 881.847686][T12294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 881.939946][T12294] team0: Port device team_slave_0 added [ 881.983225][T12355] netlink: 'syz.0.2232': attribute type 10 has an invalid length. [ 882.034332][T12294] team0: Port device team_slave_1 added [ 882.100906][ T3654] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 882.433842][ T3651] Bluetooth: hci5: command 0x0406 tx timeout [ 882.444907][ T3651] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 883.158818][ T3654] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 883.162230][ T3651] Bluetooth: hci3: command tx timeout [ 883.186618][ T3654] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 883.194358][ T3654] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 883.201646][ T3654] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 883.240488][T12367] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2237'. [ 883.888581][T12373] No such timeout policy "syz0" [ 884.139574][T12294] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 884.167176][T12294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 884.337177][T12294] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 884.397527][T12371] netlink: 'syz.4.2236': attribute type 6 has an invalid length. [ 884.465512][T12294] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 884.488078][T12294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 884.641613][T12294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 885.273245][ T3654] Bluetooth: hci4: command tx timeout [ 885.279452][ T3654] Bluetooth: hci3: command tx timeout [ 885.536262][T12378] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2239'. [ 886.345966][ T3705] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 886.440497][T12294] device hsr_slave_0 entered promiscuous mode [ 886.626786][T12294] device hsr_slave_1 entered promiscuous mode [ 886.639416][T12294] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 886.647776][T12294] Cannot create hsr debugfs directory [ 886.661692][T12359] lo speed is unknown, defaulting to 1000 [ 887.200753][ T3705] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 887.325551][ T7746] Bluetooth: hci4: command tx timeout [ 887.504605][ T3705] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.541058][T12410] netlink: 'syz.0.2248': attribute type 6 has an invalid length. [ 888.805485][ T3705] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.888590][T12418] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2251'. [ 889.403490][ T7746] Bluetooth: hci4: command tx timeout [ 889.959157][T12359] chnl_net:caif_netlink_parms(): no params data found [ 891.379155][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 891.379174][ T26] audit: type=1326 audit(1728426934.689:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12436 comm="syz.3.2257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c1057dff9 code=0x7ffc0000 [ 891.519487][ T7746] Bluetooth: hci4: command tx timeout [ 891.590693][ T26] audit: type=1326 audit(1728426934.729:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12436 comm="syz.3.2257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8c1057dff9 code=0x7ffc0000 [ 891.682009][ T26] audit: type=1326 audit(1728426934.729:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12436 comm="syz.3.2257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c1057dff9 code=0x7ffc0000 [ 891.709509][ T26] audit: type=1326 audit(1728426934.729:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12436 comm="syz.3.2257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c1057dff9 code=0x7ffc0000 [ 891.732062][ T26] audit: type=1326 audit(1728426934.729:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12436 comm="syz.3.2257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8c1057dff9 code=0x7ffc0000 [ 891.758814][ T26] audit: type=1326 audit(1728426934.729:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12436 comm="syz.3.2257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c1057dff9 code=0x7ffc0000 [ 891.803548][ T26] audit: type=1326 audit(1728426934.729:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12436 comm="syz.3.2257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c1057dff9 code=0x7ffc0000 [ 891.849932][ T26] audit: type=1326 audit(1728426934.729:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12436 comm="syz.3.2257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8c1057dff9 code=0x7ffc0000 [ 891.889869][ T26] audit: type=1326 audit(1728426934.729:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12436 comm="syz.3.2257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c1057dff9 code=0x7ffc0000 [ 891.912508][ T26] audit: type=1326 audit(1728426934.729:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12436 comm="syz.3.2257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c1057dff9 code=0x7ffc0000 [ 892.740948][T12359] bridge0: port 1(bridge_slave_0) entered blocking state [ 892.758625][T12359] bridge0: port 1(bridge_slave_0) entered disabled state [ 892.785520][T12359] device bridge_slave_0 entered promiscuous mode [ 892.820459][T12359] bridge0: port 2(bridge_slave_1) entered blocking state [ 892.868195][T12359] bridge0: port 2(bridge_slave_1) entered disabled state [ 892.907559][T12359] device bridge_slave_1 entered promiscuous mode [ 894.170497][T12359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 894.203127][T12462] netlink: 'syz.4.2262': attribute type 6 has an invalid length. [ 894.332494][T12359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 894.346964][T12294] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 894.567121][T12294] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 897.026421][T12294] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 897.110820][T12294] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 897.215085][T12359] team0: Port device team_slave_0 added [ 897.221261][T12481] siw: device registration error -23 [ 897.235546][T12359] team0: Port device team_slave_1 added [ 898.064548][T12359] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 898.081957][T12359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 898.108921][T12359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 898.163918][T12359] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 898.170908][T12359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 898.197306][T12359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 898.280783][T12498] netlink: 'syz.3.2272': attribute type 6 has an invalid length. [ 899.149521][T12504] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2277'. [ 899.271699][T12359] device hsr_slave_0 entered promiscuous mode [ 899.282882][T12359] device hsr_slave_1 entered promiscuous mode [ 899.289696][T12359] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 899.298206][T12359] Cannot create hsr debugfs directory [ 899.896554][T12506] loop3: detected capacity change from 0 to 128 [ 900.093735][ T26] kauditd_printk_skb: 11 callbacks suppressed [ 900.093751][ T26] audit: type=1326 audit(1728426943.409:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12514 comm="syz.0.2279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e16d7dff9 code=0x7ffc0000 [ 900.212908][ T26] audit: type=1326 audit(1728426943.449:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12514 comm="syz.0.2279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e16d7dff9 code=0x7ffc0000 [ 900.309715][ T26] audit: type=1326 audit(1728426943.449:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12514 comm="syz.0.2279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f8e16d7dff9 code=0x7ffc0000 [ 900.378711][ T26] audit: type=1326 audit(1728426943.449:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12514 comm="syz.0.2279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e16d7dff9 code=0x7ffc0000 [ 900.408565][ T26] audit: type=1326 audit(1728426943.449:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12514 comm="syz.0.2279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e16d7dff9 code=0x7ffc0000 [ 900.439140][ T26] audit: type=1800 audit(1728426943.659:1003): pid=12506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="+}[@" name="bus" dev="loop3" ino=1048709 res=0 errno=0 [ 900.493358][T12294] 8021q: adding VLAN 0 to HW filter on device bond0 [ 900.576369][ T3798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 900.614993][ T3798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 901.851257][T12294] 8021q: adding VLAN 0 to HW filter on device team0 [ 901.888062][T12522] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2280'. [ 902.023492][ T3798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 902.037569][ T3798] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 902.058644][ T3798] bridge0: port 1(bridge_slave_0) entered blocking state [ 902.065829][ T3798] bridge0: port 1(bridge_slave_0) entered forwarding state [ 902.239734][ T3798] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 903.564756][ T3705] device hsr_slave_0 left promiscuous mode [ 903.669802][ T3705] device hsr_slave_1 left promiscuous mode [ 903.680053][ T3705] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 903.698133][ T3705] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 903.715190][ T3705] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 903.725362][ T3705] device dummy0 left promiscuous mode [ 903.730966][ T3705] bridge0: port 3(dummy0) entered disabled state [ 903.745770][ T3705] device bridge_slave_1 left promiscuous mode [ 903.753071][ T3705] bridge0: port 2(bridge_slave_1) entered disabled state [ 903.761334][ T3705] device bridge_slave_0 left promiscuous mode [ 903.775989][ T3705] bridge0: port 1(bridge_slave_0) entered disabled state [ 903.819224][ T3705] device veth1_macvtap left promiscuous mode [ 903.839595][ T3705] device veth0_macvtap left promiscuous mode [ 903.855718][ T3705] device veth1_vlan left promiscuous mode [ 903.861545][ T3705] device veth0_vlan left promiscuous mode [ 904.108657][ T3705] infiniband syz1: set down [ 905.016951][T12543] overlayfs: failed to resolve './file2': -2 [ 905.672780][ T7746] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 906.184911][ T3705] team0 (unregistering): Port device team_slave_1 removed [ 906.288082][ T3705] team0 (unregistering): Port device team_slave_0 removed [ 906.359183][ T3705] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 906.416027][T12414] smc: removing ib device syz1 [ 906.500784][ T3705] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 906.526384][ T3686] hid-generic 0000:0000:0000.0005: unknown main item tag 0x1 [ 906.536591][ T3686] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 906.544669][ T3686] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 906.552270][ T3686] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 906.559910][ T3686] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 906.580781][ T3686] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 906.695257][ T3686] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 906.804020][ T3686] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 906.882264][ T3686] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 906.958907][ T3686] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 907.039650][ T3686] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 907.149856][ T3686] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 907.174937][ T3686] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 907.199135][ T3686] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 907.220057][ T3686] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 907.245213][ T3686] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 907.265278][ T3686] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 907.275125][ T3686] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 907.284061][ T3686] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 907.291444][ T3686] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 907.298956][ T3686] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 907.306374][ T3686] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 907.313783][ T3686] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 907.321160][ T3686] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 907.328699][ T3686] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 907.996811][ T3686] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 908.004306][ T3686] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 908.011694][ T3686] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 908.019170][ T3686] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 908.026602][ T3686] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 908.034042][ T3686] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 908.041452][ T3686] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 908.048918][ T3686] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 908.056751][ T3686] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 908.066043][ T3686] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz0 [ 909.551433][ T3705] bond0 (unregistering): Released all slaves [ 910.066712][ T3798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 910.079965][ T3798] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 910.088456][ T3798] bridge0: port 2(bridge_slave_1) entered blocking state [ 910.095585][ T3798] bridge0: port 2(bridge_slave_1) entered forwarding state [ 910.175899][T12582] loop4: detected capacity change from 0 to 256 [ 910.400959][T12580] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 910.438023][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 910.572280][T12359] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 910.608712][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 910.790920][T12359] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 910.879527][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 910.908680][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 910.960585][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 910.988545][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 911.036991][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 911.076358][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 911.223009][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 911.232222][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 911.284647][T12294] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 911.619839][T12359] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 911.681775][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 911.825332][T12359] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 911.985243][T12602] device hsr_slave_0 left promiscuous mode [ 912.037020][T12602] device hsr_slave_1 left promiscuous mode [ 912.123580][T12606] overlayfs: failed to resolve './file2': -2 [ 912.233906][T12176] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 912.241381][T12176] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 913.036181][T12294] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 913.102519][T12294] device veth0_vlan entered promiscuous mode [ 913.119853][T12294] device veth1_vlan entered promiscuous mode [ 913.151080][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 913.169410][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 913.199433][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 913.235046][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 913.260648][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 913.300437][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 913.416684][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 913.425042][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 913.462435][T12611] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 913.472524][T12611] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 913.480633][T12611] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 913.492349][T12611] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 913.513950][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 913.528894][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 913.573279][T12294] device veth0_macvtap entered promiscuous mode [ 913.607228][T12294] device veth1_macvtap entered promiscuous mode [ 913.624569][T12359] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 913.657238][T12359] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 913.689327][T12294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 913.706339][T12294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 913.728114][T12294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 913.744811][T12294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 913.759584][T12294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 913.773534][T12294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 913.798244][T12294] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 913.812223][T12359] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 913.824471][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 913.835612][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 913.850841][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 913.866956][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 913.974826][T12294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 913.987745][T12294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 914.012013][T12294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 914.031982][T12294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 914.050210][T12294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 914.071981][T12294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 914.099057][T12294] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 914.122115][T12359] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 914.143473][T12621] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2310'. [ 914.172550][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 914.202721][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 914.224495][T12294] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 914.242129][T12294] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 914.250867][T12294] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 914.282026][T12294] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 914.543442][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 914.551544][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 917.118984][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 917.232939][T12359] 8021q: adding VLAN 0 to HW filter on device bond0 [ 917.282954][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 917.299179][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 917.305132][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 917.309325][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 917.393786][T12359] 8021q: adding VLAN 0 to HW filter on device team0 [ 918.782539][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 918.840289][T12647] syz.3.2318[12647] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 918.840411][T12647] syz.3.2318[12647] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 918.980910][T12359] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 919.077033][T12359] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 919.098928][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 919.142842][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 919.157361][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 919.164500][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 919.188677][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 919.202793][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 919.211499][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 919.218654][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 919.235961][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 919.260142][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 919.280282][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 919.331462][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 919.425876][T12658] overlayfs: failed to resolve './file2': -2 [ 919.464256][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 919.749122][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 919.957900][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 919.997017][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 920.023406][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 920.058820][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 920.118536][T12651] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2319'. [ 920.337340][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 920.359674][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 920.625699][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 922.243286][T12359] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 922.300314][ T3798] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 922.326099][ T3798] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 922.767274][T12687] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2328'. [ 923.003601][T12687] device hsr_slave_1 left promiscuous mode [ 923.026453][ T5247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 923.042141][ T5247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 923.115659][T12693] dccp_xmit_packet: Payload too large (65475) for featneg. [ 923.646990][T12689] dccp_close: ABORT with 65475 bytes unread [ 923.653987][T12689] dccp_close: ABORT with 11 bytes unread [ 923.858630][T12699] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2333'. [ 924.030650][T12359] device veth0_vlan entered promiscuous mode [ 924.084495][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 924.093843][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 924.103469][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 924.111298][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 924.126445][ T3705] device hsr_slave_0 left promiscuous mode [ 924.221510][T12709] overlayfs: failed to resolve './file2': -2 [ 924.356408][ T3705] device hsr_slave_1 left promiscuous mode [ 924.516094][ T3705] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 924.645893][ T3705] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 924.800177][ T3705] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 924.839332][ T3705] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 924.892758][ T3705] device bridge_slave_1 left promiscuous mode [ 924.899039][ T3705] bridge0: port 2(bridge_slave_1) entered disabled state [ 924.917663][ T3705] device bridge_slave_0 left promiscuous mode [ 924.942132][ T3705] bridge0: port 1(bridge_slave_0) entered disabled state [ 925.016226][ T3705] device veth1_macvtap left promiscuous mode [ 925.028772][ T3705] device veth0_macvtap left promiscuous mode [ 925.052257][ T3705] device veth1_vlan left promiscuous mode [ 925.062168][ T3705] device veth0_vlan left promiscuous mode [ 925.113508][T12717] syz.3.2339[12717] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 925.113620][T12717] syz.3.2339[12717] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 927.327419][ T3705] team0 (unregistering): Port device team_slave_1 removed [ 927.461591][ T3705] team0 (unregistering): Port device team_slave_0 removed [ 927.569157][ T3705] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 927.669461][ T3705] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 928.040157][T12747] overlayfs: failed to resolve './file2': -2 [ 929.786968][ T3705] bond0 (unregistering): Released all slaves [ 929.960426][T12359] device veth1_vlan entered promiscuous mode [ 929.969028][T12682] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 929.977988][T12735] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2343'. [ 930.569766][T12359] device veth0_macvtap entered promiscuous mode [ 930.712215][T12359] device veth1_macvtap entered promiscuous mode [ 930.793412][ T5247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 930.818452][ T5247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 930.851276][ T5247] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 930.897133][ T5247] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 930.925274][T12359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 931.822043][T12359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 931.862889][T12359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 931.903872][T12359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 931.947336][T12359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 932.009997][T12359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 932.032229][T12359] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 932.119306][T12768] netlink: 'syz.2.2349': attribute type 6 has an invalid length. [ 932.247157][T12176] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 932.256432][T12176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 932.266964][T12359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 932.278460][T12359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 932.293787][T12359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 932.312423][T12359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 932.327120][T12359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 932.353888][T12359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 932.394164][T12359] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 932.428973][T12359] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 932.490918][T12359] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 932.532520][T12359] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 932.541243][T12359] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 932.551619][T12682] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 932.809570][T12682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 933.404645][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 933.418960][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 933.462468][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 933.486547][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 933.499014][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 933.543489][ T5247] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 936.634810][T12816] syz.1.2227[12816] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 936.636573][T12816] syz.1.2227[12816] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 937.675914][T12820] netlink: 'syz.3.2364': attribute type 6 has an invalid length. [ 938.989735][T12837] sctp: [Deprecated]: syz.3.2371 (pid 12837) Use of struct sctp_assoc_value in delayed_ack socket option. [ 938.989735][T12837] Use struct sctp_sack_info instead [ 940.278690][T12850] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2375'. [ 940.302171][T12850] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2375'. [ 940.321893][T12850] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2375'. [ 941.640796][T12863] syz.3.2378[12863] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 941.640902][T12863] syz.3.2378[12863] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 944.307907][ T26] audit: type=1326 audit(1728426987.619:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12879 comm="syz.3.2384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c1057dff9 code=0x7ffc0000 [ 944.378378][T12882] device vxlan1 entered promiscuous mode [ 944.467813][ T26] audit: type=1326 audit(1728426987.659:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12879 comm="syz.3.2384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c1057dff9 code=0x7ffc0000 [ 944.564057][ T26] audit: type=1326 audit(1728426987.659:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12879 comm="syz.3.2384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8c1057dff9 code=0x7ffc0000 [ 944.842610][ T26] audit: type=1326 audit(1728426987.659:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12879 comm="syz.3.2384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c1057dff9 code=0x7ffc0000 [ 945.452375][ T26] audit: type=1326 audit(1728426987.659:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12879 comm="syz.3.2384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c1057dff9 code=0x7ffc0000 [ 945.500169][ T26] audit: type=1326 audit(1728426987.679:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12879 comm="syz.3.2384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8c1057dff9 code=0x7ffc0000 [ 945.533576][ T26] audit: type=1326 audit(1728426987.679:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12879 comm="syz.3.2384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c1057dff9 code=0x7ffc0000 [ 945.565602][ T26] audit: type=1326 audit(1728426987.679:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12879 comm="syz.3.2384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c1057dff9 code=0x7ffc0000 [ 945.651857][ T26] audit: type=1326 audit(1728426987.679:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12879 comm="syz.3.2384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8c1057dff9 code=0x7ffc0000 [ 946.246008][T12906] overlayfs: missing 'lowerdir' [ 946.974835][ T26] audit: type=1326 audit(1728426987.679:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12879 comm="syz.3.2384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c1057dff9 code=0x7ffc0000 [ 947.453415][ T3654] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 947.462990][ T3654] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 947.472238][ T3654] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 947.484222][ T3654] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 947.491788][ T3654] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 947.555483][T12916] netlink: 'syz.3.2394': attribute type 11 has an invalid length. [ 947.591633][T12916] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2394'. [ 947.614171][ T3654] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 948.101846][T12900] dccp_close: ABORT with 65475 bytes unread [ 948.203740][T12414] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 948.515113][T12414] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 948.586003][T12928] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 948.633132][T12414] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 948.780003][T12414] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 948.974455][T12910] chnl_net:caif_netlink_parms(): no params data found [ 949.193068][T12922] syz.3.2396[12922] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 949.193190][T12922] syz.3.2396[12922] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 949.221837][T12939] netlink: 'syz.2.2402': attribute type 10 has an invalid length. [ 949.254674][T12939] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2402'. [ 949.415842][T12939] bridge0: port 3(batadv0) entered blocking state [ 949.465098][T12939] bridge0: port 3(batadv0) entered disabled state [ 949.552628][T12922] netlink: 'syz.3.2396': attribute type 3 has an invalid length. [ 949.574331][T12939] device batadv0 entered promiscuous mode [ 949.595003][ T3815] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 949.604630][ T3815] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 949.639552][T12939] bridge0: port 3(batadv0) entered blocking state [ 949.646189][T12939] bridge0: port 3(batadv0) entered forwarding state [ 949.723727][ T3654] Bluetooth: hci0: command tx timeout [ 950.188110][T12950] loop4: detected capacity change from 0 to 2048 [ 950.308831][T12950] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 950.331544][T12910] bridge0: port 1(bridge_slave_0) entered blocking state [ 950.381347][T12955] overlayfs: missing 'lowerdir' [ 950.429642][T12910] bridge0: port 1(bridge_slave_0) entered disabled state [ 950.556126][T12910] device bridge_slave_0 entered promiscuous mode [ 950.655523][T12950] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 950.834153][T12910] bridge0: port 2(bridge_slave_1) entered blocking state [ 950.858571][T12910] bridge0: port 2(bridge_slave_1) entered disabled state [ 950.943160][T12910] device bridge_slave_1 entered promiscuous mode [ 950.962701][T12950] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 15 with max blocks 1 with error 28 [ 951.037522][T12910] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 951.072310][T12950] EXT4-fs (loop4): This should not happen!! Data will be lost [ 951.072310][T12950] [ 951.125561][ T26] kauditd_printk_skb: 57 callbacks suppressed [ 951.125576][ T26] audit: type=1326 audit(1728426994.439:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12959 comm="syz.2.2406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda2a37dff9 code=0x7ffc0000 [ 951.154791][T12950] EXT4-fs (loop4): Total free blocks count 0 [ 951.161437][T12950] EXT4-fs (loop4): Free/Dirty block details [ 951.177827][T12910] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 951.187495][T12950] EXT4-fs (loop4): free_blocks=2415919104 [ 951.202101][ T26] audit: type=1326 audit(1728426994.439:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12959 comm="syz.2.2406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda2a37dff9 code=0x7ffc0000 [ 951.232140][T12950] EXT4-fs (loop4): dirty_blocks=16 [ 951.234568][T12956] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 951.237277][T12950] EXT4-fs (loop4): Block reservation details [ 951.302022][ T26] audit: type=1326 audit(1728426994.439:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12959 comm="syz.2.2406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7fda2a37dff9 code=0x7ffc0000 [ 951.335731][T12910] team0: Port device team_slave_0 added [ 951.341791][T12950] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 951.362114][ T26] audit: type=1326 audit(1728426994.439:1074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12959 comm="syz.2.2406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda2a37dff9 code=0x7ffc0000 [ 951.376749][T12910] team0: Port device team_slave_1 added [ 951.432434][ T26] audit: type=1326 audit(1728426994.439:1075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12959 comm="syz.2.2406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda2a37dff9 code=0x7ffc0000 [ 951.666415][T12950] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 951.840525][ T3654] Bluetooth: hci0: command tx timeout [ 952.411712][T12910] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 952.436504][T12910] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 952.493291][T12910] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 952.592147][T12910] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 952.608601][T12910] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 952.640690][T12910] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 952.759760][T12910] device hsr_slave_0 entered promiscuous mode [ 952.784226][T12910] device hsr_slave_1 entered promiscuous mode [ 954.042234][ T3654] Bluetooth: hci0: command tx timeout [ 954.056977][T12990] dccp_xmit_packet: Payload too large (65475) for featneg. [ 954.169560][T12978] dccp_close: ABORT with 65475 bytes unread [ 954.175768][T12978] dccp_close: ABORT with 11 bytes unread [ 954.969732][T12414] device hsr_slave_0 left promiscuous mode [ 954.988372][T12414] device hsr_slave_1 left promiscuous mode [ 954.998386][T12414] device bridge_slave_1 left promiscuous mode [ 955.017728][T12414] bridge0: port 2(bridge_slave_1) entered disabled state [ 955.062576][T12414] device bridge_slave_0 left promiscuous mode [ 955.068863][T12414] bridge0: port 1(bridge_slave_0) entered disabled state [ 955.171026][T12414] device veth1_macvtap left promiscuous mode [ 955.198503][T12414] device veth0_macvtap left promiscuous mode [ 955.221666][T12414] device veth1_vlan left promiscuous mode [ 955.243711][T12414] device veth0_vlan left promiscuous mode [ 955.334603][T13004] syz.2.2418[13004] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 955.334708][T13004] syz.2.2418[13004] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 955.440306][T13004] netlink: 'syz.2.2418': attribute type 3 has an invalid length. [ 956.122069][ T3654] Bluetooth: hci0: command tx timeout [ 957.183439][T12414] team0 (unregistering): Port device team_slave_1 removed [ 957.270419][T12414] team0 (unregistering): Port device team_slave_0 removed [ 957.361654][T12414] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 957.555798][T12414] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 959.271272][T13029] dccp_close: ABORT with 65475 bytes unread [ 959.796435][T12414] bond0 (unregistering): Released all slaves [ 960.197389][ T26] audit: type=1326 audit(1728427003.509:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13045 comm="syz.1.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f308b17dff9 code=0x7ffc0000 [ 960.288351][ T26] audit: type=1326 audit(1728427003.549:1077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13045 comm="syz.1.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f308b17dff9 code=0x7ffc0000 [ 960.494972][T12910] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 960.504434][T12910] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 960.513894][T12910] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 960.523644][T12910] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 960.731537][T13051] sctp: [Deprecated]: syz.4.2435 (pid 13051) Use of struct sctp_assoc_value in delayed_ack socket option. [ 960.731537][T13051] Use struct sctp_sack_info instead [ 961.120480][ T26] audit: type=1326 audit(1728427003.559:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13045 comm="syz.1.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f308b17dff9 code=0x7ffc0000 [ 962.494852][ T26] audit: type=1326 audit(1728427003.559:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13045 comm="syz.1.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f308b17dff9 code=0x7ffc0000 [ 962.528262][ T26] audit: type=1326 audit(1728427003.559:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13045 comm="syz.1.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f308b17dff9 code=0x7ffc0000 [ 962.563786][T13059] syz.1.2434[13059] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 962.563890][T13059] syz.1.2434[13059] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 962.601348][T13061] netlink: 'syz.1.2434': attribute type 3 has an invalid length. [ 962.646420][ T26] audit: type=1326 audit(1728427003.579:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13045 comm="syz.1.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f308b17dff9 code=0x7ffc0000 [ 962.678805][ T26] audit: type=1326 audit(1728427003.579:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13045 comm="syz.1.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f308b17dff9 code=0x7ffc0000 [ 962.756917][ T26] audit: type=1326 audit(1728427003.579:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13045 comm="syz.1.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f308b17dff9 code=0x7ffc0000 [ 962.890312][T13065] syz.2.2438[13065] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 962.892070][T13065] syz.2.2438[13065] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 962.956062][T13069] netlink: 'syz.3.2437': attribute type 6 has an invalid length. [ 963.217173][ T26] audit: type=1326 audit(1728427003.579:1084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13045 comm="syz.1.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f308b17dff9 code=0x7ffc0000 [ 963.426895][T12910] 8021q: adding VLAN 0 to HW filter on device bond0 [ 963.552435][ T26] audit: type=1326 audit(1728427003.579:1085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13045 comm="syz.1.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f308b17dff9 code=0x7ffc0000 [ 963.613472][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 963.641664][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 963.660534][T12910] 8021q: adding VLAN 0 to HW filter on device team0 [ 963.673026][T13071] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 963.689859][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 963.703153][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 963.712230][ T4640] bridge0: port 1(bridge_slave_0) entered blocking state [ 963.719336][ T4640] bridge0: port 1(bridge_slave_0) entered forwarding state [ 963.763031][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 963.781600][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 963.808643][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 963.837838][ T4640] bridge0: port 2(bridge_slave_1) entered blocking state [ 963.845031][ T4640] bridge0: port 2(bridge_slave_1) entered forwarding state [ 963.880921][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 963.890747][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 963.923092][ T3901] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 963.946992][ T3901] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 964.126340][ T3901] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 964.289297][ T3901] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 964.380109][T13071] siw: device registration error -19 [ 964.466830][ T3901] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 964.572945][ T3901] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 964.637792][ T3901] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 964.680807][ T3901] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 964.689988][ T3901] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 964.705485][T12910] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 964.852927][T13090] tipc: Enabling of bearer rejected, failed to enable media [ 965.437883][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 965.598794][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 966.328872][T12910] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 966.390534][ T3798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 966.401558][ T3798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 966.440817][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 967.279119][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 967.288990][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 967.301528][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 967.384656][T12910] device veth0_vlan entered promiscuous mode [ 967.583467][T13117] netlink: 'syz.2.2450': attribute type 6 has an invalid length. [ 967.600319][T12910] device veth1_vlan entered promiscuous mode [ 967.670859][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 968.269521][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 968.279081][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 968.332922][T12910] device veth0_macvtap entered promiscuous mode [ 968.348835][T13124] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2455'. [ 968.410670][T12910] device veth1_macvtap entered promiscuous mode [ 968.466340][T12910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 968.500728][T12910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 968.592672][T12910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 968.610662][T12910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 968.641631][T12910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 968.675078][T12910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 968.748812][T12910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 968.990205][T12910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 969.034885][T13142] syz.3.2458[13142] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 969.042459][T13142] syz.3.2458[13142] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 969.210368][T12910] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 969.390713][T12910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 969.405215][T13142] netlink: 'syz.3.2458': attribute type 3 has an invalid length. [ 969.413249][T12910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 969.439480][T12910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 969.508365][T12910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 969.572271][T12910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 969.613768][T13148] sctp: [Deprecated]: syz.2.2462 (pid 13148) Use of struct sctp_assoc_value in delayed_ack socket option. [ 969.613768][T13148] Use struct sctp_sack_info instead [ 969.637894][T12910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 969.696426][T12910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 969.747736][T12910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 969.790118][T12910] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 969.809852][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 969.821624][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 969.841286][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 969.857837][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 969.868558][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 969.882138][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 969.913371][T12910] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 969.931879][T12910] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 969.940903][T12910] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 969.957042][T12910] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 970.141913][ T3733] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 970.158491][ T3733] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 970.216376][ T3693] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 970.227822][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 970.244738][ T3693] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 970.272312][ T5247] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 971.403129][T13169] netlink: 'syz.2.2466': attribute type 6 has an invalid length. [ 973.386428][T13192] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2475'. [ 974.631119][T13215] netlink: 'syz.1.2480': attribute type 6 has an invalid length. [ 974.948963][T13216] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2481'. [ 975.285049][T13224] netlink: 140 bytes leftover after parsing attributes in process `+}[@'. [ 976.565196][T13244] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2491'. [ 977.615139][T13258] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2494'. [ 977.648137][ T26] kauditd_printk_skb: 45 callbacks suppressed [ 977.648154][ T26] audit: type=1326 audit(1728427020.959:1131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13261 comm="syz.4.2495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8899f7dff9 code=0x7ffc0000 [ 977.730935][ T26] audit: type=1326 audit(1728427021.009:1132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13261 comm="syz.4.2495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8899f7dff9 code=0x7ffc0000 [ 977.833198][ T26] audit: type=1326 audit(1728427021.009:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13261 comm="syz.4.2495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8899f7dff9 code=0x7ffc0000 [ 977.904711][T13264] loop4: detected capacity change from 0 to 512 [ 977.911673][T13264] ext4: Unknown parameter 'nouser_xattr' [ 977.917624][ T26] audit: type=1326 audit(1728427021.009:1134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13261 comm="syz.4.2495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8899f7dff9 code=0x7ffc0000 [ 978.225677][ T26] audit: type=1326 audit(1728427021.009:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13261 comm="syz.4.2495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8899f7dff9 code=0x7ffc0000 [ 978.880399][ T26] audit: type=1326 audit(1728427021.009:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13261 comm="syz.4.2495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8899f7dff9 code=0x7ffc0000 [ 979.010585][ T26] audit: type=1326 audit(1728427021.009:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13261 comm="syz.4.2495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8899f7dff9 code=0x7ffc0000 [ 979.128522][ T26] audit: type=1326 audit(1728427021.009:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13261 comm="syz.4.2495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8899f7dff9 code=0x7ffc0000 [ 979.151196][ T26] audit: type=1326 audit(1728427021.009:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13261 comm="syz.4.2495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8899f7dff9 code=0x7ffc0000 [ 979.173879][ T26] audit: type=1326 audit(1728427021.009:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13261 comm="syz.4.2495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8899f7dff9 code=0x7ffc0000 [ 980.365026][T13292] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2505'. [ 980.556983][T13302] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2507'. [ 980.910960][T13312] loop4: detected capacity change from 0 to 16 [ 980.932203][T13312] erofs: (device loop4): mounted with root inode @ nid 36. [ 981.925726][T13316] syz.4.2512: attempt to access beyond end of device [ 981.925726][T13316] loop4: rw=0, sector=14552337256, nr_sectors = 8 limit=16 [ 981.939688][T13316] syz.4.2512: attempt to access beyond end of device [ 981.939688][T13316] loop4: rw=0, sector=14546590680, nr_sectors = 8 limit=16 [ 981.954301][T13316] syz.4.2512: attempt to access beyond end of device [ 981.954301][T13316] loop4: rw=0, sector=14552337256, nr_sectors = 8 limit=16 [ 981.968183][T13316] syz.4.2512: attempt to access beyond end of device [ 981.968183][T13316] loop4: rw=0, sector=14546590680, nr_sectors = 8 limit=16 [ 982.469893][T13333] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2519'. [ 983.338648][ T26] kauditd_printk_skb: 38 callbacks suppressed [ 983.338665][ T26] audit: type=1326 audit(1728427026.649:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13341 comm="syz.0.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efea7d7dff9 code=0x7ffc0000 [ 983.397195][ T26] audit: type=1326 audit(1728427026.689:1180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13341 comm="syz.0.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efea7d7dff9 code=0x7ffc0000 [ 983.430701][ T26] audit: type=1326 audit(1728427026.689:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13341 comm="syz.0.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efea7d7dff9 code=0x7ffc0000 [ 983.482093][ T26] audit: type=1326 audit(1728427026.689:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13341 comm="syz.0.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efea7d7dff9 code=0x7ffc0000 [ 983.532612][ T26] audit: type=1326 audit(1728427026.689:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13341 comm="syz.0.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efea7d7dff9 code=0x7ffc0000 [ 983.563703][ T26] audit: type=1326 audit(1728427026.689:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13341 comm="syz.0.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efea7d7dff9 code=0x7ffc0000 [ 983.586479][ T26] audit: type=1326 audit(1728427026.689:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13341 comm="syz.0.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efea7d7dff9 code=0x7ffc0000 [ 983.632056][ T26] audit: type=1326 audit(1728427026.689:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13341 comm="syz.0.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efea7d7dff9 code=0x7ffc0000 [ 983.675677][ T26] audit: type=1326 audit(1728427026.689:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13341 comm="syz.0.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efea7d7dff9 code=0x7ffc0000 [ 983.687729][T13348] loop4: detected capacity change from 0 to 512 [ 983.698352][ T26] audit: type=1326 audit(1728427026.689:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13341 comm="syz.0.2522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efea7d7dff9 code=0x7ffc0000 [ 983.759115][T13348] ext4: Unknown parameter 'nouser_xattr' [ 983.801252][T13352] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2525'. [ 985.732447][T13363] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2529'. [ 985.885137][T13371] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2532'. [ 985.897421][T13371] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2532'. [ 987.067936][T13387] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2535'. [ 987.077042][T13387] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2535'. [ 987.836831][T13396] loop4: detected capacity change from 0 to 512 [ 987.857915][T13397] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 987.889865][T13396] ext4: Unknown parameter 'nouser_xattr' [ 988.729427][T13407] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2542'. [ 988.931201][T13413] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2545'. [ 988.959221][T13413] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2545'. [ 988.959421][ T3686] hid-generic 0000:0000:0000.0006: unknown main item tag 0x1 [ 988.994965][ T3686] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 989.011354][ T3686] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 989.027956][ T3686] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 989.043325][ T3686] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 989.062904][ T3686] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 989.079515][ T3686] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 989.096233][ T3686] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 989.111628][ T3686] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 990.023480][ T3686] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 990.030940][ T3686] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 990.038433][ T3686] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 990.045862][ T3686] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 990.053319][ T3686] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 990.060705][ T3686] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 990.062750][ T26] kauditd_printk_skb: 10 callbacks suppressed [ 990.062763][ T26] audit: type=1326 audit(1728427033.369:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13424 comm="syz.1.2548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f308b17dff9 code=0x7ffc0000 [ 990.068105][ T3686] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 990.107478][ T26] audit: type=1326 audit(1728427033.389:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13424 comm="syz.1.2548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f308b17dff9 code=0x7ffc0000 [ 990.135270][ T3686] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 990.155485][ T3686] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 990.179167][ T3686] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 990.197721][ T3686] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 990.201983][ T26] audit: type=1326 audit(1728427033.389:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13424 comm="syz.1.2548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f308b17dff9 code=0x7ffc0000 [ 990.223744][ T3686] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 990.252055][ T3686] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 990.272975][ T26] audit: type=1326 audit(1728427033.389:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13424 comm="syz.1.2548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f308b17dff9 code=0x7ffc0000 [ 990.273850][ T3686] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 990.332010][ T3686] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 990.339622][ T3686] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 990.359940][ T26] audit: type=1326 audit(1728427033.389:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13424 comm="syz.1.2548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f308b17dff9 code=0x7ffc0000 [ 990.383648][ T3686] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 990.391079][ T3686] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 990.408878][ T3686] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 990.425622][ T26] audit: type=1326 audit(1728427033.469:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13424 comm="syz.1.2548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f308b17dff9 code=0x7ffc0000 [ 990.448410][ T3686] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 990.458301][ T3686] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 990.465841][ T26] audit: type=1326 audit(1728427033.469:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13424 comm="syz.1.2548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f308b17dff9 code=0x7ffc0000 [ 990.467180][ T3686] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 990.496238][ T26] audit: type=1326 audit(1728427033.469:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13424 comm="syz.1.2548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f308b17dff9 code=0x7ffc0000 [ 990.563551][ T26] audit: type=1326 audit(1728427033.489:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13424 comm="syz.1.2548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f308b17dff9 code=0x7ffc0000 [ 990.657808][ T3686] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 990.665699][ T3686] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 990.673796][ T3686] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 990.712165][ T3686] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz0] on syz0 [ 990.715709][T13417] dccp_close: ABORT with 65475 bytes unread [ 991.526405][T13442] overlayfs: missing 'lowerdir' [ 992.237660][T13449] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2555'. [ 992.430809][T13454] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2557'. [ 992.475993][T13454] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2557'. [ 992.660001][T13458] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2559'. [ 992.758822][T13461] syz.0.2558[13461] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 992.758951][T13461] syz.0.2558[13461] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 992.772502][T13461] netlink: 'syz.0.2558': attribute type 3 has an invalid length. [ 997.135330][T13491] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2569'. [ 997.546120][T13500] overlayfs: missing 'workdir' [ 999.152497][T13516] syz.0.2573[13516] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 999.152601][T13516] syz.0.2573[13516] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 999.195922][T13516] netlink: 'syz.0.2573': attribute type 3 has an invalid length. [ 999.762720][ T26] audit: type=1326 audit(1728427043.079:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13522 comm="syz.0.2578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efea7d7dff9 code=0x7ffc0000 [ 999.962044][ T7746] Bluetooth: hci3: command 0x0406 tx timeout [ 1000.247489][ T26] audit: type=1326 audit(1728427043.079:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13522 comm="syz.0.2578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efea7d7dff9 code=0x7ffc0000 [ 1000.367564][ T26] audit: type=1326 audit(1728427043.159:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13522 comm="syz.0.2578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efea7d7dff9 code=0x7ffc0000 [ 1000.402116][ T26] audit: type=1326 audit(1728427043.159:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13522 comm="syz.0.2578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efea7d7dff9 code=0x7ffc0000 [ 1000.863127][ T26] audit: type=1326 audit(1728427043.169:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13522 comm="syz.0.2578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efea7d7dff9 code=0x7ffc0000 [ 1001.171321][ T26] audit: type=1326 audit(1728427043.169:1213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13522 comm="syz.0.2578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efea7d7dff9 code=0x7ffc0000 [ 1001.332020][ T26] audit: type=1326 audit(1728427043.239:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13522 comm="syz.0.2578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efea7d7dff9 code=0x7ffc0000 [ 1001.382310][ T26] audit: type=1326 audit(1728427043.259:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13522 comm="syz.0.2578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efea7d7dff9 code=0x7ffc0000 [ 1001.411469][ T26] audit: type=1326 audit(1728427043.269:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13522 comm="syz.0.2578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efea7d7dff9 code=0x7ffc0000 [ 1001.434995][T13540] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1001.469077][ T26] audit: type=1326 audit(1728427043.289:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13522 comm="syz.0.2578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7efea7d7dff9 code=0x7ffc0000 [ 1001.700511][T13553] overlayfs: missing 'workdir' [ 1002.922252][T13565] device vlan2 entered promiscuous mode [ 1002.990934][T13565] device team0 entered promiscuous mode [ 1003.096842][T13565] device team_slave_0 entered promiscuous mode [ 1003.196540][T13565] device team_slave_1 entered promiscuous mode [ 1003.447998][T13562] dccp_close: ABORT with 65475 bytes unread [ 1003.543372][T13565] team0: Device vlan2 is already an upper device of the team interface [ 1003.676618][T13565] device team0 left promiscuous mode [ 1003.684855][T13565] device team_slave_0 left promiscuous mode [ 1003.690960][T13565] device team_slave_1 left promiscuous mode [ 1003.872153][T13578] syz.2.2589[13578] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1003.872259][T13578] syz.2.2589[13578] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1003.885695][T13578] netlink: 'syz.2.2589': attribute type 3 has an invalid length. [ 1005.120369][T13592] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1005.153624][T13594] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2594'. [ 1005.705651][T13599] overlayfs: missing 'workdir' [ 1006.871356][T13592] siw: device registration error -19 [ 1007.109634][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 1007.109652][ T26] audit: type=1326 audit(1728427050.419:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13611 comm="syz.3.2602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c1057dff9 code=0x7ffc0000 [ 1007.154530][ T26] audit: type=1326 audit(1728427050.459:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13611 comm="syz.3.2602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8c1057dff9 code=0x7ffc0000 [ 1007.195882][T13613] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 1007.202439][T13613] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1007.230070][T13613] vhci_hcd vhci_hcd.0: Device attached [ 1007.235379][ T26] audit: type=1326 audit(1728427050.459:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13611 comm="syz.3.2602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c1057dff9 code=0x7ffc0000 [ 1007.258403][T13616] vhci_hcd: connection closed [ 1007.259553][ T3705] vhci_hcd: stop threads [ 1007.278851][ T3705] vhci_hcd: release socket [ 1007.289814][ T3705] vhci_hcd: disconnect device [ 1007.334988][ T26] audit: type=1326 audit(1728427050.459:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13611 comm="syz.3.2602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8c1057dff9 code=0x7ffc0000 [ 1007.397243][ T26] audit: type=1326 audit(1728427050.489:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13611 comm="syz.3.2602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c1057dff9 code=0x7ffc0000 [ 1007.459595][ T26] audit: type=1326 audit(1728427050.499:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13611 comm="syz.3.2602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f8c1057ff4a code=0x7ffc0000 [ 1007.482722][ T26] audit: type=1326 audit(1728427050.499:1227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13611 comm="syz.3.2602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8c1057c990 code=0x7ffc0000 [ 1007.505296][ T26] audit: type=1326 audit(1728427050.499:1228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13611 comm="syz.3.2602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8c1057cadf code=0x7ffc0000 [ 1007.527738][ T26] audit: type=1326 audit(1728427050.549:1229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13611 comm="syz.3.2602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f8c1057cc8a code=0x7ffc0000 [ 1007.528156][T13623] syz.1.2604[13623] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1007.550440][T13623] syz.1.2604[13623] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1007.568381][T13623] netlink: 'syz.1.2604': attribute type 3 has an invalid length. [ 1007.573742][ T26] audit: type=1326 audit(1728427050.549:1230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13611 comm="syz.3.2602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c1057dff9 code=0x7ffc0000 [ 1007.797329][T13630] netlink: 'syz.2.2607': attribute type 6 has an invalid length. [ 1008.855276][T13635] sctp: [Deprecated]: syz.3.2609 (pid 13635) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1008.855276][T13635] Use struct sctp_sack_info instead [ 1010.442016][ T7746] Bluetooth: hci4: command 0x0406 tx timeout [ 1010.442419][T13666] syz.4.2620[13666] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1010.448636][T13666] syz.4.2620[13666] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1010.462821][T13666] netlink: 'syz.4.2620': attribute type 3 has an invalid length. [ 1011.696898][T13678] sctp: [Deprecated]: syz.0.2624 (pid 13678) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1011.696898][T13678] Use struct sctp_sack_info instead [ 1011.781455][T13682] netlink: 'syz.1.2623': attribute type 6 has an invalid length. [ 1012.307836][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 1012.307852][ T26] audit: type=1326 audit(1728427055.609:1235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13695 comm="syz.0.2632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efea7d7dff9 code=0x7ffc0000 [ 1012.402217][ T26] audit: type=1326 audit(1728427055.649:1236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13695 comm="syz.0.2632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efea7d7dff9 code=0x7ffc0000 [ 1013.147926][ T26] audit: type=1326 audit(1728427055.649:1237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13695 comm="syz.0.2632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efea7d7dff9 code=0x7ffc0000 [ 1013.323307][T13707] syz.1.2635[13707] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1013.323410][T13707] syz.1.2635[13707] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1013.378554][ T26] audit: type=1326 audit(1728427055.649:1238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13695 comm="syz.0.2632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efea7d7dff9 code=0x7ffc0000 [ 1013.406058][T13707] device ip6gre0 entered promiscuous mode [ 1013.616144][T13707] device vlan2 entered promiscuous mode [ 1013.638812][T13707] device ip6gre0 left promiscuous mode [ 1013.644503][ T26] audit: type=1326 audit(1728427055.659:1239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13695 comm="syz.0.2632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efea7d7dff9 code=0x7ffc0000 [ 1013.646160][T13715] sctp: [Deprecated]: syz.0.2639 (pid 13715) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1013.646160][T13715] Use struct sctp_sack_info instead [ 1013.669106][ T26] audit: type=1326 audit(1728427055.659:1240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13695 comm="syz.0.2632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efea7d7dff9 code=0x7ffc0000 [ 1013.716419][T13718] syz.2.2636[13718] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1013.716808][T13718] syz.2.2636[13718] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1013.781052][T13720] netlink: 'syz.2.2636': attribute type 3 has an invalid length. [ 1014.448154][ T26] audit: type=1326 audit(1728427055.659:1241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13695 comm="syz.0.2632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efea7d7dff9 code=0x7ffc0000 [ 1014.475992][ T26] audit: type=1326 audit(1728427055.659:1242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13695 comm="syz.0.2632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efea7d7dff9 code=0x7ffc0000 [ 1014.501755][ T26] audit: type=1326 audit(1728427055.659:1243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13695 comm="syz.0.2632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efea7d7dff9 code=0x7ffc0000 [ 1014.532717][ T26] audit: type=1326 audit(1728427055.669:1244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13695 comm="syz.0.2632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efea7d7dff9 code=0x7ffc0000 [ 1015.832059][T13747] sctp: [Deprecated]: syz.4.2651 (pid 13747) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1015.832059][T13747] Use struct sctp_sack_info instead [ 1015.889475][T13748] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2650'. [ 1016.243055][T13753] syz.4.2652[13753] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1016.243171][T13753] syz.4.2652[13753] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1016.256595][T13753] netlink: 'syz.4.2652': attribute type 3 has an invalid length. [ 1016.637972][T13763] overlayfs: failed to resolve './file2': -2 [ 1017.577361][T13776] sctp: [Deprecated]: syz.3.2663 (pid 13776) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1017.577361][T13776] Use struct sctp_sack_info instead [ 1017.630478][T13781] netlink: 'syz.1.2664': attribute type 10 has an invalid length. [ 1017.665722][T13779] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 1017.702427][T13781] team0: Device hsr_slave_0 failed to register rx_handler [ 1018.717818][T13797] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2668'. [ 1018.928851][T13797] device hsr_slave_1 left promiscuous mode [ 1018.987245][T13804] netlink: 'syz.2.2671': attribute type 27 has an invalid length. [ 1019.046564][T13805] syz.1.2669[13805] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1019.046708][T13805] syz.1.2669[13805] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1019.061258][T13805] netlink: 'syz.1.2669': attribute type 3 has an invalid length. [ 1019.449484][T13804] bridge0: port 3(batadv0) entered disabled state [ 1019.456306][T13804] bridge0: port 2(bridge_slave_1) entered disabled state [ 1019.465239][T13804] bridge0: port 1(bridge_slave_0) entered disabled state [ 1019.720261][T13804] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1019.747859][T13804] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1020.879631][T13822] sctp: [Deprecated]: syz.0.2676 (pid 13822) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1020.879631][T13822] Use struct sctp_sack_info instead [ 1021.369245][T13804] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1021.378304][T13804] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1021.411968][T13804] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1021.420877][T13804] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1021.743190][T13840] netlink: 'syz.2.2687': attribute type 10 has an invalid length. [ 1021.759335][ T26] kauditd_printk_skb: 20 callbacks suppressed [ 1021.759352][ T26] audit: type=1326 audit(1728427065.069:1265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13841 comm="syz.3.2685" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8c1057dff9 code=0x0 [ 1021.788395][T13840] device geneve0 entered promiscuous mode [ 1021.795542][T13840] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1021.806787][T13840] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1021.816537][T13840] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1021.832245][T13840] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1021.843166][T13840] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 1023.722384][ T26] audit: type=1326 audit(1728427067.029:1266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13865 comm="syz.0.2695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efea7d7dff9 code=0x7ffc0000 [ 1023.760715][T13855] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1023.827445][ T26] audit: type=1326 audit(1728427067.029:1267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13865 comm="syz.0.2695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=150 compat=0 ip=0x7efea7d7dff9 code=0x7ffc0000 [ 1023.866713][ T26] audit: type=1326 audit(1728427067.029:1268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13865 comm="syz.0.2695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efea7d7dff9 code=0x7ffc0000 [ 1023.906526][ T26] audit: type=1326 audit(1728427067.049:1269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13868 comm="syz.2.2692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda2a37dff9 code=0x7ffc0000 [ 1023.932522][ T26] audit: type=1326 audit(1728427067.049:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13868 comm="syz.2.2692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fda2a37dff9 code=0x7ffc0000 [ 1023.960576][ T26] audit: type=1326 audit(1728427067.049:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13868 comm="syz.2.2692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda2a37dff9 code=0x7ffc0000 [ 1024.034990][ T26] audit: type=1326 audit(1728427067.049:1272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13868 comm="syz.2.2692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fda2a37dff9 code=0x7ffc0000 [ 1024.116669][ T26] audit: type=1326 audit(1728427067.049:1273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13868 comm="syz.2.2692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda2a37dff9 code=0x7ffc0000 [ 1024.155920][ T26] audit: type=1326 audit(1728427067.049:1274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13868 comm="syz.2.2692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fda2a37dff9 code=0x7ffc0000 [ 1025.826796][T13915] usb usb9: usbfs: process 13915 (syz.0.2714) did not claim interface 0 before use [ 1025.862023][T13915] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2714'. [ 1025.976937][T13923] sctp: [Deprecated]: syz.2.2719 (pid 13923) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1025.976937][T13923] Use struct sctp_sack_info instead [ 1026.003039][T13924] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 1026.656252][T13951] overlayfs: failed to resolve './file2': -2 [ 1026.793055][T13961] tipc: Started in network mode [ 1026.797976][T13961] tipc: Node identity ac14140f, cluster identity 4711 [ 1026.811210][T13961] tipc: New replicast peer: 255.255.255.255 [ 1026.829414][T13961] tipc: Enabled bearer , priority 10 [ 1026.832373][T13965] sctp: [Deprecated]: syz.2.2731 (pid 13965) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1026.832373][T13965] Use struct sctp_sack_info instead [ 1026.960225][T13971] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2733'. [ 1027.182525][ T26] kauditd_printk_skb: 70 callbacks suppressed [ 1027.182559][ T26] audit: type=1326 audit(1728427070.499:1345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13979 comm="syz.3.2738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c1057dff9 code=0x7ffc0000 [ 1027.317108][ T26] audit: type=1326 audit(1728427070.539:1346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13979 comm="syz.3.2738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8c1057dff9 code=0x7ffc0000 [ 1027.431465][ T26] audit: type=1326 audit(1728427070.539:1347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13979 comm="syz.3.2738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c1057dff9 code=0x7ffc0000 [ 1027.468881][ T9] Bluetooth: hci1: Frame reassembly failed (-84) [ 1027.571763][ T26] audit: type=1326 audit(1728427070.539:1348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13979 comm="syz.3.2738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c1057dff9 code=0x7ffc0000 [ 1027.676441][ T26] audit: type=1326 audit(1728427070.539:1349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13979 comm="syz.3.2738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8c1057dff9 code=0x7ffc0000 [ 1027.703200][ T26] audit: type=1326 audit(1728427070.549:1350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13979 comm="syz.3.2738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c1057dff9 code=0x7ffc0000 [ 1027.726414][ T26] audit: type=1326 audit(1728427070.549:1351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13979 comm="syz.3.2738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c1057dff9 code=0x7ffc0000 [ 1027.750996][ T26] audit: type=1326 audit(1728427070.549:1352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13979 comm="syz.3.2738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7f8c1057dff9 code=0x7ffc0000 [ 1027.775579][ T26] audit: type=1326 audit(1728427070.549:1353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13979 comm="syz.3.2738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c1057dff9 code=0x7ffc0000 [ 1027.798715][ T26] audit: type=1326 audit(1728427070.549:1354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13979 comm="syz.3.2738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c1057dff9 code=0x7ffc0000 [ 1027.862388][T13993] sctp: [Deprecated]: syz.3.2743 (pid 13993) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1027.862388][T13993] Use struct sctp_sack_info instead [ 1027.934468][ T41] tipc: Node number set to 2886997007 [ 1028.037007][T13995] netlink: 'syz.0.2742': attribute type 3 has an invalid length. [ 1029.031839][T14008] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2745'. [ 1029.483636][ T7746] Bluetooth: hci1: command 0x1003 tx timeout [ 1029.490210][ T3654] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1030.153586][T14025] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2756'. [ 1031.243712][T14033] netlink: 'syz.4.2757': attribute type 3 has an invalid length. [ 1033.281983][T14047] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2762'. [ 1033.494488][T14050] netlink: 'syz.1.2759': attribute type 6 has an invalid length. [ 1034.246701][T14065] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1034.681673][T14073] netlink: 'syz.3.2770': attribute type 3 has an invalid length. [ 1036.368805][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 1036.368983][ T26] audit: type=1326 audit(1728427079.679:1361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14086 comm="syz.4.2775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8899f7dff9 code=0x7ffc0000 [ 1036.726852][ T26] audit: type=1326 audit(1728427079.729:1362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14086 comm="syz.4.2775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8899f7dff9 code=0x7ffc0000 [ 1036.749413][ T26] audit: type=1326 audit(1728427079.729:1363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14086 comm="syz.4.2775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8899f7dff9 code=0x7ffc0000 [ 1036.800294][T14094] syz.1.2776[14094] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1036.804062][T14094] syz.1.2776[14094] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1036.963289][ T26] audit: type=1326 audit(1728427079.739:1364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14086 comm="syz.4.2775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8899f7dff9 code=0x7ffc0000 [ 1037.200841][T14098] ptrace attach of "./syz-executor exec"[10997] was attempted by "./syz-executor exec"[14098] [ 1037.381174][ T26] audit: type=1326 audit(1728427079.739:1365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14086 comm="syz.4.2775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8899f7dff9 code=0x7ffc0000 [ 1037.422161][ T7746] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1037.544694][ T26] audit: type=1326 audit(1728427079.749:1366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14086 comm="syz.4.2775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8899f7dff9 code=0x7ffc0000 [ 1037.573153][ T26] audit: type=1326 audit(1728427079.749:1367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14086 comm="syz.4.2775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8899f7dff9 code=0x7ffc0000 [ 1037.598894][ T26] audit: type=1326 audit(1728427079.779:1368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14086 comm="syz.4.2775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8899f7dff9 code=0x7ffc0000 [ 1037.621733][ T26] audit: type=1326 audit(1728427079.789:1369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14086 comm="syz.4.2775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8899f7dff9 code=0x7ffc0000 [ 1037.663307][ T26] audit: type=1326 audit(1728427079.799:1370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14086 comm="syz.4.2775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8899f7dff9 code=0x7ffc0000 [ 1037.741241][T14106] device gretap0 entered promiscuous mode [ 1037.748326][T14106] device batadv_slave_1 entered promiscuous mode [ 1038.084594][T14111] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1038.336302][T14118] netlink: 'syz.2.2783': attribute type 3 has an invalid length. [ 1039.050939][T14111] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1039.272245][T14111] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1039.279697][T14111] A link change request failed with some changes committed already. Interface vxcan1 may have been left with an inconsistent configuration, please check. [ 1039.328055][T14130] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2789'. [ 1039.363581][T14134] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2789'. [ 1039.396235][T14135] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2787'. [ 1041.444150][ T26] kauditd_printk_skb: 38 callbacks suppressed [ 1041.444166][ T26] audit: type=1326 audit(1728427084.759:1409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14140 comm="syz.4.2792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8899f7dff9 code=0x7ffc0000 [ 1146.491868][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1146.498854][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P14159/1:b..l P14142/1:b..l [ 1146.508610][ C1] (detected by 1, t=10502 jiffies, g=76601, q=67 ncpus=2) [ 1146.515815][ C1] task:syz.4.2792 state:R running task stack:25624 pid:14142 ppid:10416 flags:0x00004000 [ 1146.527439][ C1] Call Trace: [ 1146.530713][ C1] [ 1146.533649][ C1] __schedule+0x143f/0x4570 [ 1146.538177][ C1] ? release_firmware_map_entry+0x186/0x186 [ 1146.544073][ C1] ? print_irqtrace_events+0x210/0x210 [ 1146.549528][ C1] ? reacquire_held_locks+0x660/0x660 [ 1146.554892][ C1] ? preempt_schedule_irq+0xec/0x1c0 [ 1146.560162][ C1] preempt_schedule_irq+0xf7/0x1c0 [ 1146.565281][ C1] ? preempt_schedule_notrace+0x140/0x140 [ 1146.570983][ C1] ? _raw_spin_unlock+0x24/0x40 [ 1146.575822][ C1] ? rcu_is_watching+0x11/0xb0 [ 1146.580573][ C1] irqentry_exit+0x53/0x80 [ 1146.584976][ C1] asm_sysvec_reschedule_ipi+0x16/0x20 [ 1146.590447][ C1] RIP: 0010:lock_acquire+0x26f/0x5a0 [ 1146.595723][ C1] Code: 2b 00 74 08 4c 89 f7 e8 3f ac 77 00 f6 44 24 61 02 0f 85 84 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25 [ 1146.615336][ C1] RSP: 0018:ffffc90003c0f740 EFLAGS: 00000206 [ 1146.621403][ C1] RAX: 0000000000000001 RBX: 1ffff92000781ef4 RCX: 1ffff92000781e94 [ 1146.629386][ C1] RDX: dffffc0000000000 RSI: ffffffff8b0c14c0 RDI: ffffffff8b5d7180 [ 1146.637350][ C1] RBP: ffffc90003c0f898 R08: dffffc0000000000 R09: fffffbfff223ba45 [ 1146.645313][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff92000781ef0 [ 1146.653269][ C1] R13: dffffc0000000000 R14: ffffc90003c0f7a0 R15: 0000000000000246 [ 1146.661261][ C1] ? read_lock_is_recursive+0x10/0x10 [ 1146.666648][ C1] ? kvm_sched_clock_read+0x14/0x40 [ 1146.671837][ C1] ? sched_clock_cpu+0x71/0x2b0 [ 1146.676691][ C1] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 1146.682663][ C1] ? __sched_clock_gtod_offset+0xe0/0xe0 [ 1146.688323][ C1] ? page_ext_get+0x1c/0x2a0 [ 1146.692993][ C1] page_ext_get+0x39/0x2a0 [ 1146.697402][ C1] ? page_ext_get+0x1c/0x2a0 [ 1146.701984][ C1] __reset_page_owner+0x32/0x1a0 [ 1146.706915][ C1] free_unref_page_prepare+0xf63/0x1120 [ 1146.712451][ C1] free_unref_page+0x33/0x3e0 [ 1146.717118][ C1] migrate_pages+0x15f7/0x4310 [ 1146.721881][ C1] ? _raw_spin_unlock+0x24/0x40 [ 1146.726760][ C1] ? get_nodes+0x4e0/0x4e0 [ 1146.731162][ C1] ? folio_detach_private+0x3f0/0x3f0 [ 1146.736527][ C1] ? remove_migration_ptes+0x1a0/0x1a0 [ 1146.742003][ C1] __se_sys_mbind+0x895/0xb10 [ 1146.746677][ C1] ? __x64_sys_mbind+0xf0/0xf0 [ 1146.751447][ C1] ? print_irqtrace_events+0x210/0x210 [ 1146.756917][ C1] ? print_irqtrace_events+0x210/0x210 [ 1146.762369][ C1] ? syscall_enter_from_user_mode+0x2e/0x230 [ 1146.768354][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 1146.773540][ C1] ? __x64_sys_mbind+0x1d/0xf0 [ 1146.778316][ C1] do_syscall_64+0x3b/0xb0 [ 1146.782718][ C1] ? clear_bhb_loop+0x45/0xa0 [ 1146.787385][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1146.793268][ C1] RIP: 0033:0x7f8899f7dff9 [ 1146.797676][ C1] RSP: 002b:00007f889acd1038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 1146.806075][ C1] RAX: ffffffffffffffda RBX: 00007f889a135f80 RCX: 00007f8899f7dff9 [ 1146.814050][ C1] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000000020001000 [ 1146.822006][ C1] RBP: 00007f8899ff0296 R08: 0000000000000000 R09: 0000000000000002 [ 1146.829964][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1146.837927][ C1] R13: 0000000000000000 R14: 00007f889a135f80 R15: 00007ffeed4b9ba8 [ 1146.845902][ C1] [ 1146.848931][ C1] task:syz.3.2797 state:R running task stack:24696 pid:14159 ppid:10997 flags:0x00004000 [ 1146.859697][ C1] Call Trace: [ 1146.862965][ C1] [ 1146.865882][ C1] __schedule+0x143f/0x4570 [ 1146.870387][ C1] ? release_firmware_map_entry+0x186/0x186 [ 1146.876264][ C1] ? print_irqtrace_events+0x210/0x210 [ 1146.881716][ C1] ? preempt_schedule_irq+0xec/0x1c0 [ 1146.886989][ C1] preempt_schedule_irq+0xf7/0x1c0 [ 1146.892086][ C1] ? preempt_schedule_notrace+0x140/0x140 [ 1146.898350][ C1] irqentry_exit+0x53/0x80 [ 1146.902757][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1146.908727][ C1] RIP: 0010:xas_find+0x21d/0xaa0 [ 1146.913656][ C1] Code: 38 ec 0f 87 10 01 00 00 48 8b 5c 24 18 48 89 df 4c 89 ee e8 05 8a ff ff 49 89 c7 48 b9 00 00 00 00 00 fc ff df 41 0f b6 04 0e <49> 89 ce 84 c0 75 47 41 80 7d 00 00 0f 84 f2 00 00 00 e8 2c 67 e7 [ 1146.933244][ C1] RSP: 0018:ffffc9000438f6a8 EFLAGS: 00000282 [ 1146.939317][ C1] RAX: 0000000000000000 RBX: ffffc9000438f800 RCX: dffffc0000000000 [ 1146.947284][ C1] RDX: ffffc9000f484000 RSI: 000000000002dd1b RDI: 000000000002dd1c [ 1146.955245][ C1] RBP: 0000000000000000 R08: ffffffff8aa2d361 R09: ffffffff8aa346dc [ 1146.963206][ C1] R10: 0000000000000002 R11: ffff888073140000 R12: 0000000000000000 [ 1146.971167][ C1] R13: ffff888068940dc0 R14: 1ffff1100d1281b8 R15: ffffea0001573a00 [ 1146.979136][ C1] ? xas_find+0xfc/0xaa0 [ 1146.983379][ C1] ? xas_descend+0x171/0x470 [ 1146.987976][ C1] ? xas_find+0x20b/0xaa0 [ 1146.992311][ C1] ? filemap_map_pages+0x277/0x12c0 [ 1146.997528][ C1] filemap_map_pages+0x32a/0x12c0 [ 1147.002568][ C1] ? count_memcg_event_mm+0x90/0x410 [ 1147.007856][ C1] ? filemap_read_folio+0x780/0x780 [ 1147.013048][ C1] ? count_memcg_event_mm+0x90/0x410 [ 1147.018361][ C1] handle_mm_fault+0x33e0/0x5340 [ 1147.023304][ C1] ? follow_page_pte+0x39c/0x1880 [ 1147.028354][ C1] ? numa_migrate_prep+0x250/0x250 [ 1147.033557][ C1] ? follow_page_mask+0xb8a/0x1420 [ 1147.038680][ C1] ? check_vma_flags+0x440/0x4d0 [ 1147.043613][ C1] __get_user_pages+0x4f3/0x1190 [ 1147.048555][ C1] ? populate_vma_page_range+0x2b0/0x2b0 [ 1147.054196][ C1] populate_vma_page_range+0x217/0x2b0 [ 1147.059653][ C1] __mm_populate+0x275/0x440 [ 1147.064244][ C1] ? check_vma_flags+0x4d0/0x4d0 [ 1147.069201][ C1] vm_mmap_pgoff+0x22b/0x2d0 [ 1147.073792][ C1] ? account_locked_vm+0xe0/0xe0 [ 1147.078729][ C1] ? syscall_enter_from_user_mode+0x2e/0x230 [ 1147.084706][ C1] ? ksys_mmap_pgoff+0xd8/0x6d0 [ 1147.089565][ C1] do_syscall_64+0x3b/0xb0 [ 1147.093969][ C1] ? clear_bhb_loop+0x45/0xa0 [ 1147.098642][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1147.104533][ C1] RIP: 0033:0x7f8c1057dff9 [ 1147.108941][ C1] RSP: 002b:00007f8c1138e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1147.117347][ C1] RAX: ffffffffffffffda RBX: 00007f8c10735f80 RCX: 00007f8c1057dff9 [ 1147.125310][ C1] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000000020000000 [ 1147.133274][ C1] RBP: 00007f8c105f0296 R08: ffffffffffffffff R09: 0000000000000000 [ 1147.141248][ C1] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 1147.149219][ C1] R13: 0000000000000000 R14: 00007f8c10735f80 R15: 00007fffbb50fef8 [ 1147.157200][ C1] [ 1147.160225][ C1] rcu: rcu_preempt kthread starved for 9628 jiffies! g76601 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1147.171322][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1147.181283][ C1] rcu: RCU grace-period kthread stack dump: [ 1147.187157][ C1] task:rcu_preempt state:R running task stack:26048 pid:16 ppid:2 flags:0x00004000 [ 1147.197915][ C1] Call Trace: [ 1147.201181][ C1] [ 1147.204106][ C1] __schedule+0x143f/0x4570 [ 1147.208608][ C1] ? _raw_spin_unlock+0x40/0x40 [ 1147.213517][ C1] ? release_firmware_map_entry+0x186/0x186 [ 1147.219406][ C1] ? lockdep_softirqs_off+0x420/0x420 [ 1147.224776][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 1147.230661][ C1] ? _raw_spin_unlock+0x40/0x40 [ 1147.235507][ C1] schedule+0xbf/0x180 [ 1147.239588][ C1] schedule_timeout+0x1b9/0x300 [ 1147.244451][ C1] ? console_conditional_schedule+0x40/0x40 [ 1147.250334][ C1] ? update_process_times+0x1b0/0x1b0 [ 1147.255700][ C1] ? prepare_to_swait_event+0x329/0x350 [ 1147.261240][ C1] rcu_gp_fqs_loop+0x2d2/0x1150 [ 1147.266189][ C1] ? do_raw_spin_unlock+0x137/0x8a0 [ 1147.271471][ C1] ? dyntick_save_progress_counter+0x2b0/0x2b0 [ 1147.277621][ C1] ? _raw_spin_unlock_irqrestore+0x8b/0x130 [ 1147.283508][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 1147.288698][ C1] ? rcu_gp_init+0x15f0/0x15f0 [ 1147.293448][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 1147.299363][ C1] ? finish_swait+0xcf/0x1e0 [ 1147.303979][ C1] rcu_gp_kthread+0xa3/0x3b0 [ 1147.308578][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 1147.313679][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 1147.319589][ C1] ? __kthread_parkme+0x168/0x1c0 [ 1147.324619][ C1] kthread+0x28d/0x320 [ 1147.328682][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 1147.333813][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1147.338399][ C1] ret_from_fork+0x1f/0x30 [ 1147.342829][ C1] [ 1147.345841][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1147.352151][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1147.357363][ C0] NMI backtrace for cpu 0 skipped: idling at acpi_idle_do_entry+0x10f/0x340