last executing test programs: 19m4.932940977s ago: executing program 3 (id=57): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x4040) close(0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001d0001"], 0xb8}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 19m4.780820169s ago: executing program 3 (id=58): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0xf5, 0x1}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) 19m3.949347912s ago: executing program 3 (id=61): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./bus\x00', 0x2000010, &(0x7f0000000200)=ANY=[], 0x1, 0x6ca, &(0x7f0000000500)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r0 = memfd_create(&(0x7f0000000800)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x05\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\xe0\x06\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\x00\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\x06\x00\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9d\xd9\xa6\xe5\x00\x17\v\xc2\xd1\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03CatV\xe9\\#\xf8O\fw\xd9%cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbTA\xe6\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03\x1a\xb30\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xde\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\x97\xef\xdb\xcf\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00*\x03\x9bh\x94m\xea\xea\x82c\x10\xacm\xce\xe2z\x92\x16\x8f*\xd3I\xe4AB\xd3\a\x1c\x14\xfb\x84\xa0\xa6\xdbW\x9b E\xa4W\x04\xe11+\xb9\xf6I\xf8\x1a\x82\x86\xdd\xa4m.A\xf7\xa97?Y\x10~\xd6\xb0\x91\x14\x17\xa9\x9ax\f\xa3V\xb0\xbb\xda\xf3,7\x14\x15\xbd\x8a\xbb\x1a\xf1\af\x92\x92\x12\xa5!\xee]\x7f\xce@\x85Id\x95\xdb\xb1#<\xe0\x83\x1bB\xe2\x86\xae*\xe49\xb9\xc4\xf3G\xc7\x10\xa4\n\x92\xe5\xaf\x86Mq\x8e\x06\xc5\xb8*\xc0\xd4b\xfd\xcd\xf9\x90\xae\f\xb44}\xe5 \x88\xa9\b\x01X\x9fo=\xe5jO\f|\x920x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r1 = mq_open(&(0x7f0000000080)='$@\x00', 0x40, 0xb4, &(0x7f0000000100)={0x6, 0x1, 0x7ff, 0x13}) r2 = mq_open(&(0x7f0000000180)='$@\x00', 0x1, 0x185, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x3ff, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x7, 0x0) mq_timedreceive(r1, &(0x7f0000000280)=""/4096, 0x1000, 0x0, 0x0) 18m27.086160539s ago: executing program 2 (id=222): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x48ba, &(0x7f0000000000)={0x0, 0xfffffffc, 0x1000, 0x0, 0x1a7}, &(0x7f0000000080), &(0x7f0000ff4000)) close_range(r2, 0xffffffffffffffff, 0x0) 18m26.775675854s ago: executing program 2 (id=225): r0 = socket(0x2, 0x80805, 0x0) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000240)=0x8) 18m26.540992377s ago: executing program 2 (id=227): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) unshare(0x40020000) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) 18m25.560244292s ago: executing program 2 (id=234): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20014840}, 0xc010) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = add_key$keyring(&(0x7f0000000f40), &(0x7f0000000f80)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) keyctl$restrict_keyring(0x1d, r2, &(0x7f0000001100)='.request_key_auth\x00', &(0x7f0000001140)='\x00') 18m25.08994353s ago: executing program 2 (id=238): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) connect$unix(r1, &(0x7f0000000080)=@abs={0x0, 0x0, 0x4e22}, 0x6e) close(r1) unshare(0x4000600) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, 0x0) syz_open_procfs(0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x1, 0x48001021, 0xffffffffffffffff, 0x0) connect$unix(r0, &(0x7f0000000800)=@file={0x0, './file0\x00'}, 0x6e) 18m24.198306523s ago: executing program 33 (id=238): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) connect$unix(r1, &(0x7f0000000080)=@abs={0x0, 0x0, 0x4e22}, 0x6e) close(r1) unshare(0x4000600) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, 0x0) syz_open_procfs(0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x1, 0x48001021, 0xffffffffffffffff, 0x0) connect$unix(r0, &(0x7f0000000800)=@file={0x0, './file0\x00'}, 0x6e) 17m51.348062568s ago: executing program 1 (id=373): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0xfffffffe, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000003100)=@gcm_128={{0x304}, "040000000048bd00", "0dd12f0d004fcf0000e8bfff1a8600", "cf0f00", "8657e2b7e63b34e4"}, 0x28) write$binfmt_script(r0, &(0x7f0000001300), 0x8f) recvmmsg(r0, 0x0, 0x0, 0x40000002, 0x0) writev(r0, &(0x7f00000030c0)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000013c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001380)=0x40) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000380)="ac", 0x1}], 0x1) 17m51.003318414s ago: executing program 1 (id=376): sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0xff00, 0x90, [0x1000000, 0x0, 0x0, 0x0, 0xfffff9, 0x800005c0], 0x0, 0x0, 0x0}, 0x108) 17m49.91272294s ago: executing program 1 (id=379): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000083c0)={0x2020, 0x0, 0x0, 0x0}, 0x49e8648f) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x1, 0x2066012}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0xb1, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) getdents64(r3, 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000080)={0x2a, 0x6, 0x0, {0x1, 0x200000000004, 0x1, 0x2, '\x00', 0x8}}, 0x2a) syz_fuse_handle_req(r0, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)={0xb0, 0x0, 0x0, [{{0x200000000004, 0x0, 0x0, 0x2, 0x2000, 0x4, {0x2, 0x200000000000000, 0x0, 0x2, 0x0, 0x40000000000, 0x0, 0xfffffffe, 0x2, 0x4000, 0x1, r2, 0xffffffffffffffff, 0x2000}}, {0x0, 0x0, 0x1, 0x0, '\x00'}}]}, 0x0, 0x0, 0x0}) 17m48.786811357s ago: executing program 1 (id=383): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRESOCT=0x0, @ANYRES8, @ANYRES64, @ANYRESOCT], 0x1, 0x6e7, &(0x7f0000001a40)="$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") r0 = fsopen(&(0x7f0000000280)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = open(&(0x7f00000003c0)='.\x00', 0x100, 0x97) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) 17m47.32026543s ago: executing program 1 (id=389): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) read$alg(r2, &(0x7f0000000000)=""/35, 0x23) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[], 0x1bc}, 0x1, 0x0, 0x0, 0x8884}, 0x10) 17m45.745826024s ago: executing program 1 (id=394): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) recvmsg(r2, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x40010022) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r2, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r1, &(0x7f00000010c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000100)=[{r2, 0x181}, {r1, 0x1114}], 0x2, 0x0, 0x0, 0x0) close(r0) 17m43.981665381s ago: executing program 34 (id=394): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) recvmsg(r2, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x40010022) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r2, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r1, &(0x7f00000010c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000100)=[{r2, 0x181}, {r1, 0x1114}], 0x2, 0x0, 0x0, 0x0) close(r0) 15.205828203s ago: executing program 4 (id=3220): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000240)) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x80, 0x7800, 0x0, 0xfffffffb, {{0x5, 0x4, 0x0, 0x5, 0x14, 0x0, 0x0, 0x9, 0x0, 0x0, @remote, @multicast2}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f3, &(0x7f0000001a80)={'syztnl0\x00', &(0x7f0000000140)={'gre0\x00', r6, 0x10, 0x20, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x27, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}) 12.677806511s ago: executing program 4 (id=3223): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0xff, 0x1, 0x20, 0x4}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @empty, 0x20000007}, 0x1c) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4}, 0x8}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32=r2], 0x10) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000340)={0x28, 0x2, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x10}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000200)={0x28, 0x2, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000000}) ioctl$IOMMU_VFIO_SET_IOMMU(0xffffffffffffffff, 0x3b66, 0x1) r4 = socket(0x10, 0x3, 0x8) openat$cgroup_subtree(r4, &(0x7f0000000040), 0x2, 0x0) write(r4, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) 12.490369183s ago: executing program 4 (id=3225): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) listen(r5, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r7) 11.238047402s ago: executing program 4 (id=3228): setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x3c, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e21}, 0x65) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) close(0x3) 11.210768203s ago: executing program 5 (id=3229): socket$inet_udp(0x2, 0x2, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x8) r0 = getpid() ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x13) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0x9, 0x0, 0x0, 0x0, 0x2) socket$l2tp6(0xa, 0x2, 0x73) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, 0x0, &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x1000}, 0x10}, 0x94) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x526}, @TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newtaction={0x48, 0x31, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x48}}, 0x0) 9.932688781s ago: executing program 5 (id=3232): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) close(0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSTI(r4, 0x5412, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="6400000002060103000000000000000000000000050001000700000016000300686173683a6e65742c706f72742c6e65740000000900020073797a30000000000500040000000000050005000a000000140007800500150002000000080012"], 0x64}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 9.582478817s ago: executing program 6 (id=3234): open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff}) pipe(&(0x7f0000000500)) syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x40, 0x3, 0x3a6, 0x0, r0}, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) memfd_secret(0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) r2 = syz_io_uring_setup(0x19f2, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'syztnl0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x14, 0x0, 0x3, 0xb928, 0x39, @empty, @dev={0xfe, 0x80, '\x00', 0xb}, 0x40, 0x1, 0xffffffff, 0xfffe}}) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000180)=ANY=[@ANYRES64=r5], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x28, 0x0, r6, 0x0, r1}) io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 9.141579613s ago: executing program 5 (id=3235): prlimit64(0x0, 0xe, &(0x7f0000000340)={0xd, 0x200200090}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$qrtr(0x2a, 0x2, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, 0x0, 0x0) r3 = socket(0x2a, 0x2, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001c40)="d80000001c0081064e81f782db44b9040a1d08041100000000020aa1180002000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516", 0x5d}, {&(0x7f0000001d00)="0092e9a7e64c32c40a81fa0f64bd9906f29b6a0aa0e850e7eb26dd111c83b33cf6f3f5bfdf52e23faac8580b58c35613a51fec2e1500747c8a72eb20d3d6b9e4e75d266a5440ad6fa037d9055e6a4a6760575b9459419cfc252cb04e3a624aaaa02bf155303808bcb8ec989fd7db312bb9807d1efe0dab699418e3", 0x7b}], 0x2, 0x0, 0x0, 0x7400}, 0x40000) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 8.170965838s ago: executing program 6 (id=3236): syz_open_dev$tty1(0xc, 0x4, 0x1) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) bpf$MAP_LOOKUP_ELEM(0x3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket(0x10, 0x800, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x40}}, 0x0) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, &(0x7f0000000680)={0xa, {0x2, 0x8001, 0x7, 0x6}, {0x9, 0x0, 0x4, 0x2}, {0x8, 0x7f}}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, &(0x7f0000000080)={0x1d, r2, 0x0, {0x0, 0x0, 0x4}}, 0x18) sendmsg$can_j1939(r3, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) setsockopt$SO_J1939_FILTER(r3, 0x6b, 0x1, &(0x7f0000000280)=[{0x2, 0x2, {0x2, 0x0, 0x2}, {0x1, 0xff, 0x1}, 0x0, 0x101}, {0x0, 0x6, {0x0, 0xf0}, {0x0, 0x1, 0x2}, 0x0, 0x2}], 0x40) close(r3) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r2, {0xa, 0x8}, {0x5, 0xfff3}, {0xfff1, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) 8.169967648s ago: executing program 0 (id=3244): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002340), 0x40800) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r4, 0xc058534f, &(0x7f0000002380)={{0x0, 0x1}, 0x0, 0x0, 0x2, {0x4, 0x1}, 0x3, 0x800}) r5 = socket(0xa, 0x3, 0x3a) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newtaction={0x18, 0x30, 0xffff, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, 0x0, 0x0) 8.131241129s ago: executing program 5 (id=3237): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x5, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x34}, {[@ssrr={0x89, 0xf, 0xce, [@broadcast, @multicast1, @empty]}, @generic={0x83, 0x2}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0x1}}}}}}, 0x0) process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000001c00)='./file0\x00', 0x8) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) mkdirat(0xffffffffffffff9c, 0x0, 0x0) link(&(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000180)='./file1\x00') 7.032738295s ago: executing program 0 (id=3238): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) chown(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000034ed00000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = socket$inet(0x2, 0x3, 0x8) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x1c0, 0xe138, 0x198, 0x1c0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, '\x00', 'veth0_to_bond\x00', {}, {}, 0x21, 0x2}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d00040000000d0000000004fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0x58}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0xc, 0x7, 0x7, 'snmp\x00', 'syz1\x00', {0x100}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x398) 6.917551116s ago: executing program 5 (id=3239): io_setup(0x8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e21, @empty}}, 0xfffffffd, 0x800, 0x0, 0x0, 0x8a, 0x4}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x600, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x300, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) 4.917702167s ago: executing program 0 (id=3240): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='projid_map\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = shmget$private(0x0, 0x8000, 0x10, &(0x7f0000ff5000/0x8000)=nil) r5 = shmat(r4, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r4, &(0x7f0000ff9000/0x1000)=nil, 0x5000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) shmdt(r5) r6 = shmget$private(0x0, 0x1000, 0x40, &(0x7f0000884000/0x1000)=nil) shmctl$IPC_INFO(r6, 0x3, &(0x7f0000000300)=""/251) read$FUSE(r0, &(0x7f0000006280)={0x2020}, 0x2020) 4.464515553s ago: executing program 5 (id=3241): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x3b, 0x0, &(0x7f0000000240), &(0x7f0000000100)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000480)=ANY=[@ANYRES8, @ANYRESHEX=r0, @ANYRES16=r1], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x18, 0x30, 0x400, 0x0, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x804}, 0x4044001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x404, 0x127044) ioctl$SG_IO(r2, 0x2285, 0x0) writev(r2, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0a00000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0) ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f0000000280)={{0x5}, 'syz1\x00', 0x10}) 3.689832025s ago: executing program 0 (id=3242): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r5 = syz_io_uring_setup(0x114, &(0x7f0000000340)={0x0, 0x24d6, 0x800, 0x2000000, 0x3a6}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000100000001"], 0x18}, 0x0, 0x40000, 0x1}) io_uring_enter(r5, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) 3.548778037s ago: executing program 4 (id=3243): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0x1d, r1, 0x0, 0x0) io_setup(0x0, 0x0) mq_open(&(0x7f00000000c0)='ip_vti0\x00', 0x1, 0x2, &(0x7f0000000100)={0x5, 0x8, 0x4, 0x100000001}) r2 = syz_io_uring_setup(0x5c2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3, 0x3d9}, &(0x7f0000000240)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0) io_uring_enter(r2, 0x6e2, 0x3900, 0x1, 0x0, 0x0) syz_emit_ethernet(0x219, &(0x7f0000000480)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd6000000001e33aff00000000000000000000000040210e2c45e4a5c700000000ff02000000000000000000000000000187009078fc00000000000000000000000000000000000038c2689f036b879d3ec8e5828f9e9ee2c640e89cf72223237dc800bb3b03f59c66f78aaa4b61d0836252526d17a84bc8c4cb0539beb9673170f145cae0f218813d04b2c1238f2e109d52153b954db922764dc773f7671b65accc3e2d57180deaeb2ebeec4db69270c643bc0b00411e7209b7fbcd4deae1d990b6b8fa09bbb6c7be2bfa631652d60f0ac9af0c96f091d469077bb0474e6af552d65b738a7368791b5e25f8db00bfd96c66edd80cce1b8bfee8a43267b1a3af2d7eb3301acfa4ef45348bebd2281d38a74811538a792766d75057da15f53d1c9525fbe1f0c34d4d2a00c180390a0016bd058f9c12eeaebc2abdcbe950634655191c3257f31482321e25c263868f9bddb0fe008399f2f9aabcf1d5a95e6349220e1b817151169861a3a25469c7f5e046d6cad595ad6df845c45754d9802776dbc69616eeb309a03d13d4160898878bfd21b3145e03de82"], 0x0) ioctl$SNDCTL_SEQ_GETTIME(0xffffffffffffffff, 0x80045113, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYBLOB=',rootmode=0000000000', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020}, 0x2020) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x64}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000000906010200000000000a0000000000000900020073797a31000000000500010007000000180007800c00018008000140ffffffff080009"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 3.536337917s ago: executing program 6 (id=3245): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x2, 0x4, 0x3, 0x5, 0x1000, 0xffffffffffffffff, 0x6}, 0x50) socket$kcm(0x2, 0xa, 0x2) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) socket$inet_smc(0x2b, 0x1, 0x0) memfd_secret(0x0) socket$inet(0x2, 0x4000000000000001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_io_uring_setup(0x19f2, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[@ANYRES64=r4], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, r5, 0x0, r0}) io_uring_enter(r1, 0x2d3c, 0x0, 0x0, 0x0, 0x0) 2.539253482s ago: executing program 0 (id=3246): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x20000011, &(0x7f0000000000), 0x86, 0x4a1, &(0x7f0000000bc0)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0x2, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r5, 0x8004587d, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) 2.466314093s ago: executing program 6 (id=3247): timerfd_create(0x4, 0x80800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r3, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r4, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.220350757s ago: executing program 4 (id=3248): r0 = syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000a00)=ANY=[@ANYBLOB='hide,dmode=0x0000000000000009,overriderockperm,utf8,map=acorn,iocharset=iso8859-1,mode=0x00000000000000c9,cruft,map=off,check=strict,overriderockperm,block=0x0000000000000200,cruft,nocompress,cruft,session=0x000000000000002e,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c7362736563746f723d3078303030303030303030303030303030332c00d4215a15701bca521647652b2623aac16363b7c886c8e01c34c1be48fac31ff64fd975416483f623de07f461566ca6ee1f45ee43de3a417c9f293dce66ea364d3d2e284b815c568722445db6e7bc85745e23605586296a7c3b961a6202dc4d36efbb967e286625378fc6af8ffdc648cbda4797ab0d6ad05169b0e2236e6cbf8f752dbf0496b0ba34761d90d049f3be85f3c0c0e38b6daad6f29cb7ee0f1aea54884f0983e098cd5497ff80c97d0fcc"], 0x1, 0xa2f, &(0x7f00000018c0)="$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") dup3(r0, r0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$kcm(0x10, 0x3, 0x10) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) 1.131145403s ago: executing program 6 (id=3249): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) chown(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000034ed00000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = socket$inet(0x2, 0x3, 0x8) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x1c0, 0xe138, 0x198, 0x1c0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, '\x00', 'veth0_to_bond\x00', {}, {}, 0x21, 0x2}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d00040000000d0000000004fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0x58}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0xc, 0x7, 0x7, 'snmp\x00', 'syz1\x00', {0x100}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x398) 1.115930143s ago: executing program 0 (id=3250): syz_usb_connect(0x0, 0x36, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f00000000c0)={0x0, 0xe39}, 0x8) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x3, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 0s ago: executing program 6 (id=3251): fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0xff, 0x0}}, 0x2, 0x0, 0x3}}, 0x26) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r6, 0x1, 0xfffffffd, 0x1000, {0x7}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}]}, 0x24}}, 0x890) kernel console output (not intermixed with test programs): ion available [ 439.358192][ T9937] loop6: detected capacity change from 0 to 256 [ 439.372210][ T9937] exfat: Unknown parameter '00000000000000000000' [ 440.211101][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 440.457279][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.474927][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.241060][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 441.894584][ T9954] loop6: detected capacity change from 0 to 2048 [ 441.949702][ T9959] netlink: 'syz.5.1238': attribute type 10 has an invalid length. [ 441.952539][ T9954] loop6: p1 < > p3 [ 441.965686][ T9959] 8021q: adding VLAN 0 to HW filter on device team0 [ 441.973078][ T9954] loop6: p3 size 134217728 extends beyond EOD, truncated [ 441.986657][ T9959] bond0: (slave team0): Enslaving as an active interface with an up link [ 442.126469][ T9954] kvm: emulating exchange as write [ 442.291183][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 442.451251][ T9968] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 442.477733][ T9968] CIFS mount error: No usable UNC path provided in device string! [ 442.477733][ T9968] [ 442.491409][ T9968] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 443.321064][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 443.389921][ T9973] batman_adv: batadv0: Adding interface: dummy0 [ 443.719906][ T9973] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 444.038931][ T9973] batman_adv: batadv0: Interface activated: dummy0 [ 444.228999][ T9980] batadv0: mtu less than device minimum [ 444.258221][ T9980] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 444.271090][ T9980] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 444.283530][ T9980] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 444.295268][ T9980] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 444.306963][ T9980] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 444.318646][ T9980] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 444.330346][ T9980] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 444.342282][ T9980] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 445.269272][ T9993] loop6: detected capacity change from 0 to 512 [ 445.288934][ T9993] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 445.311460][ T9993] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e02c, mo2=0002] [ 445.361629][ T9993] System zones: 1-12 [ 445.367041][ T9993] EXT4-fs (loop6): orphan cleanup on readonly fs [ 445.447716][ T9993] EXT4-fs error (device loop6): ext4_validate_block_bitmap:439: comm syz.6.1249: bg 0: block 361: padding at end of block bitmap is not set [ 445.655601][ T9993] EXT4-fs (loop6): Remounting filesystem read-only [ 445.665693][ T9993] EXT4-fs (loop6): 1 truncate cleaned up [ 445.672989][ T9993] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 446.437163][T10003] loop0: detected capacity change from 0 to 512 [ 446.477876][T10008] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1253'. [ 446.493997][ T9993] EXT4-fs warning (device loop6): dx_probe:823: inode #2: lblock 0: comm syz.6.1249: error -117 reading directory block [ 446.494568][T10003] __quota_error: 61 callbacks suppressed [ 446.494588][T10003] Quota error (device loop0): v2_read_file_info: Free block number 1 out of range (1, 6). [ 446.511146][ T9993] EXT4-fs warning (device loop6): dx_probe:823: inode #2: lblock 0: comm syz.6.1249: error -117 reading directory block [ 446.530069][T10006] bio_check_eod: 1999 callbacks suppressed [ 446.530095][T10006] syz.4.1254: attempt to access beyond end of device [ 446.530095][T10006] loop9: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 446.540190][ T9993] EXT4-fs warning (device loop6): dx_probe:823: inode #2: lblock 0: comm syz.6.1249: error -117 reading directory block [ 446.586925][ T9993] EXT4-fs warning (device loop6): dx_probe:823: inode #2: lblock 0: comm syz.6.1249: error -117 reading directory block [ 446.587180][T10003] EXT4-fs warning (device loop0): ext4_enable_quotas:7173: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 446.601145][ T9993] EXT4-fs warning (device loop6): dx_probe:823: inode #2: lblock 0: comm syz.6.1249: error -117 reading directory block [ 446.620639][T10006] EXT4-fs (loop9): unable to read superblock [ 446.639164][ T9993] EXT4-fs warning (device loop6): dx_probe:823: inode #2: lblock 0: comm syz.6.1249: error -117 reading directory block [ 446.656612][ T9993] EXT4-fs warning (device loop6): dx_probe:823: inode #2: lblock 0: comm syz.6.1249: error -117 reading directory block [ 446.670691][ T9993] EXT4-fs warning (device loop6): dx_probe:823: inode #2: lblock 0: comm syz.6.1249: error -117 reading directory block [ 446.684519][T10003] EXT4-fs (loop0): mount failed [ 446.695907][ T9993] EXT4-fs warning (device loop6): dx_probe:823: inode #2: lblock 0: comm syz.6.1249: error -117 reading directory block [ 446.709684][ T9993] EXT4-fs warning (device loop6): dx_probe:823: inode #2: lblock 0: comm syz.6.1249: error -117 reading directory block [ 446.764562][ T7130] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 448.521049][ C0] net_ratelimit: 15 callbacks suppressed [ 448.521064][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 449.561079][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 450.601437][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 450.666992][T10023] Set syz1 is full, maxelem 65536 reached [ 450.853142][ T28] audit: type=1326 audit(1753089014.638:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10033 comm="syz.5.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa15b8e9a9 code=0x7ffc0000 [ 450.884442][ T28] audit: type=1326 audit(1753089014.638:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10033 comm="syz.5.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa15b8e9a9 code=0x7ffc0000 [ 450.912156][ T28] audit: type=1326 audit(1753089014.638:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10033 comm="syz.5.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7faa15b8e9a9 code=0x7ffc0000 [ 450.939805][ T28] audit: type=1326 audit(1753089014.638:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10033 comm="syz.5.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa15b8e9a9 code=0x7ffc0000 [ 451.012361][ T28] audit: type=1326 audit(1753089014.638:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10033 comm="syz.5.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa15b8e9a9 code=0x7ffc0000 [ 451.069864][ T28] audit: type=1326 audit(1753089014.658:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10033 comm="syz.5.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7faa15b8e9a9 code=0x7ffc0000 [ 451.129749][ T28] audit: type=1326 audit(1753089014.658:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10033 comm="syz.5.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa15b8e9a9 code=0x7ffc0000 [ 451.432373][ T28] audit: type=1326 audit(1753089014.658:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10033 comm="syz.5.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7faa15b8e9a9 code=0x7ffc0000 [ 451.641087][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 451.769330][ T28] audit: type=1326 audit(1753089014.658:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10033 comm="syz.5.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa15b8e9a9 code=0x7ffc0000 [ 451.857203][ T28] audit: type=1326 audit(1753089014.658:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10033 comm="syz.5.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7faa15b8e9a9 code=0x7ffc0000 [ 451.921895][ T28] audit: type=1326 audit(1753089014.658:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10033 comm="syz.5.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa15b8e9a9 code=0x7ffc0000 [ 452.004872][ T28] audit: type=1326 audit(1753089014.658:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10033 comm="syz.5.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa15b8e9a9 code=0x7ffc0000 [ 452.093667][ T28] audit: type=1326 audit(1753089014.658:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10033 comm="syz.5.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faa15b8e9a9 code=0x7ffc0000 [ 452.152249][ T28] audit: type=1326 audit(1753089014.658:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10033 comm="syz.5.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa15b8e9a9 code=0x7ffc0000 [ 452.208143][ T28] audit: type=1326 audit(1753089014.658:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10033 comm="syz.5.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa15b8e9a9 code=0x7ffc0000 [ 452.267808][ T28] audit: type=1326 audit(1753089014.678:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10033 comm="syz.5.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faa15b8e9a9 code=0x7ffc0000 [ 452.301365][ T28] audit: type=1326 audit(1753089014.718:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10033 comm="syz.5.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa15b8e9a9 code=0x7ffc0000 [ 452.324819][ T28] audit: type=1326 audit(1753089014.718:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10033 comm="syz.5.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa15b8e9a9 code=0x7ffc0000 [ 452.681059][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 453.087671][T10052] bridge0: entered promiscuous mode [ 453.103710][T10052] bridge0: entered allmulticast mode [ 453.156354][T10052] team0: Port device bridge0 added [ 453.185306][T10055] netlink: 'syz.0.1271': attribute type 5 has an invalid length. [ 453.193506][T10052] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1270'. [ 453.548817][T10052] team0 (unregistering): Port device bridge0 removed [ 453.685096][T10061] loop6: detected capacity change from 0 to 8 [ 453.721709][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 453.739191][T10061] SQUASHFS error: Failed to read block 0x4de: -5 [ 453.753307][T10061] SQUASHFS error: Failed to read block 0x4de: -5 [ 454.721851][T10101] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 454.741519][T10100] IPVS: stopping backup sync thread 10101 ... [ 454.763080][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 455.802470][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 456.726161][T10111] lo speed is unknown, defaulting to 1000 [ 456.831158][T10119] netlink: 'syz.4.1285': attribute type 10 has an invalid length. [ 456.841051][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 456.883032][T10111] lo speed is unknown, defaulting to 1000 [ 456.908840][T10111] lo speed is unknown, defaulting to 1000 [ 457.025829][T10111] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 457.166138][T10111] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 457.799771][T10111] lo speed is unknown, defaulting to 1000 [ 457.851777][T10111] lo speed is unknown, defaulting to 1000 [ 457.859214][T10111] lo speed is unknown, defaulting to 1000 [ 457.881059][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 457.934456][T10111] lo speed is unknown, defaulting to 1000 [ 458.921049][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 459.971102][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 461.001052][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 462.041089][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 462.562812][T10182] ptrace attach of "./syz-executor exec"[10183] was attempted by "./syz-executor exec"[10182] [ 463.081038][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 464.121050][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 465.161074][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 465.217281][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 465.217302][ T28] audit: type=1326 audit(1753089028.988:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10210 comm="syz.4.1317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c978e9a9 code=0x7ffc0000 [ 465.343012][ T28] audit: type=1326 audit(1753089028.988:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10210 comm="syz.4.1317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c978e9a9 code=0x7ffc0000 [ 465.366883][ T28] audit: type=1326 audit(1753089028.988:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10210 comm="syz.4.1317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f54c978e9a9 code=0x7ffc0000 [ 465.389792][ T28] audit: type=1326 audit(1753089028.988:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10210 comm="syz.4.1317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c978e9a9 code=0x7ffc0000 [ 465.435818][ T28] audit: type=1326 audit(1753089028.988:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10210 comm="syz.4.1317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c978e9a9 code=0x7ffc0000 [ 465.756781][ T28] audit: type=1326 audit(1753089028.988:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10210 comm="syz.4.1317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f54c978e9a9 code=0x7ffc0000 [ 466.056675][ T28] audit: type=1326 audit(1753089028.988:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10210 comm="syz.4.1317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c978e9a9 code=0x7ffc0000 [ 466.128716][ T28] audit: type=1326 audit(1753089028.988:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10210 comm="syz.4.1317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c978e9a9 code=0x7ffc0000 [ 466.173593][ T28] audit: type=1326 audit(1753089028.988:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10210 comm="syz.4.1317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7f54c978e9a9 code=0x7ffc0000 [ 466.196455][ T28] audit: type=1326 audit(1753089028.988:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10210 comm="syz.4.1317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c978e9a9 code=0x7ffc0000 [ 466.219111][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 466.724433][T10226] lo speed is unknown, defaulting to 1000 [ 467.241115][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 468.281246][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 469.321245][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 470.361177][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 471.401167][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 472.197013][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 472.197031][ T28] audit: type=1326 audit(1753089035.968:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10288 comm="syz.0.1337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d9858e9a9 code=0x7ffc0000 [ 472.295965][ T28] audit: type=1326 audit(1753089035.968:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10288 comm="syz.0.1337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d9858e9a9 code=0x7ffc0000 [ 472.331406][ T28] audit: type=1326 audit(1753089035.968:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10288 comm="syz.0.1337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4d9858e9a9 code=0x7ffc0000 [ 472.381025][ T28] audit: type=1326 audit(1753089035.968:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10288 comm="syz.0.1337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d9858e9a9 code=0x7ffc0000 [ 472.425065][ T28] audit: type=1326 audit(1753089035.968:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10288 comm="syz.0.1337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f4d9858e9a9 code=0x7ffc0000 [ 472.447591][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 472.491068][ T28] audit: type=1326 audit(1753089035.968:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10288 comm="syz.0.1337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d9858e9a9 code=0x7ffc0000 [ 472.516816][T10295] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1340'. [ 472.531206][ T5777] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 472.531263][ T28] audit: type=1326 audit(1753089035.968:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10288 comm="syz.0.1337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d9858e9a9 code=0x7ffc0000 [ 472.574603][ T28] audit: type=1326 audit(1753089035.968:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10288 comm="syz.0.1337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f4d9858e9a9 code=0x7ffc0000 [ 472.598716][T10296] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1340'. [ 472.609164][ T28] audit: type=1326 audit(1753089035.968:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10288 comm="syz.0.1337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d9858e9a9 code=0x7ffc0000 [ 472.634934][ T28] audit: type=1326 audit(1753089035.968:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10288 comm="syz.0.1337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d9858e9a9 code=0x7ffc0000 [ 472.734566][ T5777] usb 1-1: Using ep0 maxpacket: 32 [ 472.757531][ T5777] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 472.774511][ T5777] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 472.797077][ T5777] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 472.830672][ T5777] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 472.845050][ T5777] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 472.853993][ T5777] usb 1-1: Product: syz [ 472.858225][ T5777] usb 1-1: Manufacturer: syz [ 472.866408][ T5777] usb 1-1: SerialNumber: syz [ 472.895936][ T5777] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input6 [ 473.182675][ T5777] usb 1-1: USB disconnect, device number 9 [ 473.228800][ T5777] appletouch 1-1:1.0: input: appletouch disconnected [ 473.481185][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 473.960428][T10317] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1347'. [ 474.521044][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 474.754799][T10322] siw: device registration error -23 [ 474.899346][T10327] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1352'. [ 475.045042][T10331] bridge2: entered allmulticast mode [ 475.561079][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 476.284270][T10348] ptrace attach of "./syz-executor exec"[10349] was attempted by "./syz-executor exec"[10348] [ 476.601048][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 476.880401][ T9701] syz_tun (unregistering): left allmulticast mode [ 477.641066][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 478.681027][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 479.397518][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 479.411911][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 479.422417][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 479.438344][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 479.446535][ T50] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 479.454674][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 479.474213][ T5103] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 479.482427][ T5103] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 479.490092][ T5103] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 479.498552][ T5103] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 479.511728][ T5103] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 479.519349][ T5103] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 479.656257][T10364] lo speed is unknown, defaulting to 1000 [ 479.721041][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 480.761033][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 480.918460][T10364] chnl_net:caif_netlink_parms(): no params data found [ 480.984565][T10381] netlink: 'syz.6.1367': attribute type 4 has an invalid length. [ 481.714856][ T5103] Bluetooth: hci1: command tx timeout [ 481.801042][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 482.524897][ T5858] lo speed is unknown, defaulting to 1000 [ 482.531161][T10381] netlink: 'syz.6.1367': attribute type 4 has an invalid length. [ 482.540679][ T5856] lo speed is unknown, defaulting to 1000 [ 482.600618][T10364] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.619858][T10364] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.643699][T10364] bridge_slave_0: entered allmulticast mode [ 482.657978][T10364] bridge_slave_0: entered promiscuous mode [ 482.676413][T10364] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.692204][T10364] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.705691][T10364] bridge_slave_1: entered allmulticast mode [ 482.726641][T10364] bridge_slave_1: entered promiscuous mode [ 482.784589][T10364] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 482.798720][T10364] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 482.841027][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 483.436400][T10364] team0: Port device team_slave_0 added [ 483.449062][T10364] team0: Port device team_slave_1 added [ 483.536352][T10364] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 483.553885][T10364] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 483.650082][T10364] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 483.700068][T10364] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 483.727920][T10364] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 483.800429][T10364] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 483.822164][ T5103] Bluetooth: hci1: command tx timeout [ 483.881045][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 484.593096][T10364] hsr_slave_0: entered promiscuous mode [ 484.610385][T10364] hsr_slave_1: entered promiscuous mode [ 484.631981][T10364] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 484.657272][T10364] Cannot create hsr debugfs directory [ 484.921095][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 485.692055][T10364] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.881581][ T5103] Bluetooth: hci1: command tx timeout [ 485.897289][T10364] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.971109][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 486.579563][T10364] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.619466][T10435] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1383'. [ 486.805467][T10364] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.877049][T10438] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1384'. [ 486.889766][T10438] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1384'. [ 487.001258][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 487.009593][T10441] xt_recent: Unsupported userspace flags (000000de) [ 487.090334][T10364] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 487.103542][T10364] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 487.121300][T10364] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 487.138623][T10364] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 487.237552][T10364] 8021q: adding VLAN 0 to HW filter on device bond0 [ 487.262459][T10364] 8021q: adding VLAN 0 to HW filter on device team0 [ 487.278401][ T2934] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.285691][ T2934] bridge0: port 1(bridge_slave_0) entered forwarding state [ 487.303894][ T9453] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.311276][ T9453] bridge0: port 2(bridge_slave_1) entered forwarding state [ 487.563135][T10364] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 487.616519][T10364] veth0_vlan: entered promiscuous mode [ 487.635948][T10364] veth1_vlan: entered promiscuous mode [ 487.676377][T10364] veth0_macvtap: entered promiscuous mode [ 487.687579][T10364] veth1_macvtap: entered promiscuous mode [ 487.709879][T10364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 487.722248][T10364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.736441][T10364] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 487.754174][T10364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 487.764996][T10364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.778286][T10364] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 487.802987][T10364] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.815869][T10364] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.825133][T10364] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.834763][T10364] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.961444][ T5103] Bluetooth: hci1: command tx timeout [ 487.993982][T10457] loop6: detected capacity change from 0 to 512 [ 488.020131][ T2934] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 488.036038][ T2934] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 488.043802][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 488.107598][ T9453] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 488.118201][ T9453] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 488.288518][T10463] batman_adv: batadv0: Adding interface: dummy0 [ 488.296272][T10463] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 488.328274][T10463] batman_adv: batadv0: Interface activated: dummy0 [ 488.552766][T10463] batadv0: mtu less than device minimum [ 488.572552][T10463] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 488.585236][T10463] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 488.597522][T10463] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 488.609535][T10463] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 488.621731][T10463] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 489.472067][T10477] netlink: 'syz.0.1393': attribute type 1 has an invalid length. [ 489.490658][T10477] loop0: detected capacity change from 0 to 512 [ 489.512766][T10477] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 489.857325][T10482] tipc: Enabled bearer , priority 0 [ 489.878232][ T28] kauditd_printk_skb: 49 callbacks suppressed [ 489.878247][ T28] audit: type=1326 audit(1753089053.658:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10483 comm="syz.4.1395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c978e9a9 code=0x7ffc0000 [ 489.910998][T10477] EXT4-fs (loop0): 1 truncate cleaned up [ 489.920412][T10477] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 489.951869][ T28] audit: type=1326 audit(1753089053.658:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10483 comm="syz.4.1395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c978e9a9 code=0x7ffc0000 [ 490.001526][T10482] syzkaller0: entered promiscuous mode [ 490.007580][T10482] syzkaller0: entered allmulticast mode [ 490.011123][ T28] audit: type=1326 audit(1753089053.668:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10483 comm="syz.4.1395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f54c978e9a9 code=0x7ffc0000 [ 490.042771][T10477] ext4: Unknown parameter 'ì¥YðÌÚ„yµ²Fm¤ïŠ©«±ZÉ1Ø(O[½Å [ 490.042771][T10477] ^¥Æ+EïóªØ]0rQ#Íó{ØÌŽÎcÄpç6;æ°:ªPŸrïfè˜l¿íÐIG>Žá¦?Ï…-H"’&Fþ)ð!Iˆ|.z' [ 490.072884][ T28] audit: type=1326 audit(1753089053.668:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10483 comm="syz.4.1395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c978e9a9 code=0x7ffc0000 [ 490.108429][ T28] audit: type=1326 audit(1753089053.668:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10483 comm="syz.4.1395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c978e9a9 code=0x7ffc0000 [ 490.131115][ C0] net_ratelimit: 15 callbacks suppressed [ 490.131131][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 490.160455][T10482] tipc: Resetting bearer [ 490.182204][T10482] syzkaller0: tun_net_xmit 134 [ 490.188510][T10482] syzkaller0: tun_net_xmit 134 [ 490.194199][ T28] audit: type=1326 audit(1753089053.668:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10483 comm="syz.4.1395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f54c978e9a9 code=0x7ffc0000 [ 490.321127][ C1] syzkaller0: tun_net_xmit 134 [ 490.326776][ C1] syzkaller0: tun_net_xmit 134 [ 490.377692][ T28] audit: type=1326 audit(1753089053.668:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10483 comm="syz.4.1395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c978e9a9 code=0x7ffc0000 [ 490.406990][ T28] audit: type=1326 audit(1753089053.678:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10483 comm="syz.4.1395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f54c978e9a9 code=0x7ffc0000 [ 490.450825][ T28] audit: type=1326 audit(1753089053.678:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10483 comm="syz.4.1395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c978e9a9 code=0x7ffc0000 [ 490.451164][T10481] tipc: Resetting bearer [ 490.473600][ T28] audit: type=1326 audit(1753089053.678:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10483 comm="syz.4.1395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c978e9a9 code=0x7ffc0000 [ 490.621089][ T5856] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 490.705241][T10481] tipc: Disabling bearer [ 490.785927][T10488] bond0: (slave team0): Releasing backup interface [ 490.837980][ T5856] usb 1-1: unable to get BOS descriptor or descriptor too short [ 490.894571][ T5856] usb 1-1: not running at top speed; connect to a high speed hub [ 490.944045][T10490] team0: Unable to change to the same mode the team is in [ 490.989404][ T5856] usb 1-1: config 1 has an invalid descriptor of length 3, skipping remainder of the config [ 491.161193][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 491.230604][ T5856] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4 [ 491.246627][ T5856] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 491.256026][ T5856] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.264138][ T5856] usb 1-1: Product: syz [ 491.268433][ T5856] usb 1-1: Manufacturer: syz [ 491.273103][ T5856] usb 1-1: SerialNumber: syz [ 491.283689][T10493] tipc: Enabled bearer , priority 0 [ 491.421604][T10480] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 491.503018][T10480] EXT4-fs (loop0): Remounting filesystem read-only [ 491.568026][ T5856] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 491.594695][ T5856] usb 1-1: unit 5 not found! [ 491.664462][ T5856] usb 1-1: USB disconnect, device number 10 [ 492.201081][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 492.609232][T10364] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 492.682319][T10510] bond0: (slave dummy0): Releasing backup interface [ 493.241083][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 493.906598][T10524] ptrace attach of "./syz-executor exec"[10526] was attempted by "./syz-executor exec"[10524] [ 494.281064][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 495.321058][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 496.361042][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 497.403359][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 498.392066][T10541] nftables ruleset with unbound set [ 498.441057][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 499.052350][T10550] lo speed is unknown, defaulting to 1000 [ 499.491191][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 500.041221][ T5856] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 500.521120][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 500.571261][ T5856] usb 7-1: Using ep0 maxpacket: 32 [ 500.579202][ T5856] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 500.697691][ T5856] usb 7-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 500.707061][ T5856] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.720269][ T5856] usb 7-1: Product: syz [ 500.729815][ T5856] usb 7-1: Manufacturer: syz [ 500.738823][ T5856] usb 7-1: SerialNumber: syz [ 500.766568][ T5856] usb 7-1: config 0 descriptor?? [ 500.774665][T10560] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 500.790809][ T5856] usb 7-1: Quirk or no altest; falling back to MIDI 1.0 [ 501.272185][ T5856] usb 7-1: USB disconnect, device number 3 [ 501.561113][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 501.895538][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.601149][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 502.697146][T10595] netlink: 576 bytes leftover after parsing attributes in process `syz.6.1430'. [ 503.868058][T10604] ptrace attach of "./syz-executor exec"[10607] was attempted by "./syz-executor exec"[10604] [ 504.455087][T10613] netlink: 80 bytes leftover after parsing attributes in process `syz.6.1434'. [ 504.583900][T10615] loop6: detected capacity change from 0 to 1024 [ 504.595163][T10615] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 504.608845][T10615] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 504.634190][T10615] JBD2: no valid journal superblock found [ 504.640011][T10615] EXT4-fs (loop6): Could not load journal inode [ 504.909818][T10618] loop6: detected capacity change from 0 to 8192 [ 504.926518][T10618] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 504.941084][ T785] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 507.620809][T10643] netlink: 'syz.4.1443': attribute type 4 has an invalid length. [ 507.807628][T10648] netlink: 'syz.4.1443': attribute type 4 has an invalid length. [ 508.128659][T10655] netlink: 'syz.5.1444': attribute type 3 has an invalid length. [ 508.359410][ T5777] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 510.112063][T10658] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 510.171286][ T5777] usb 7-1: Using ep0 maxpacket: 32 [ 510.188513][ T5777] usb 7-1: config 1 has an invalid interface number: 48 but max is 0 [ 510.223439][ T5777] usb 7-1: config 1 has no interface number 0 [ 510.250785][ T5777] usb 7-1: config 1 interface 48 has no altsetting 0 [ 510.277590][ T5777] usb 7-1: New USB device found, idVendor=42c6, idProduct=160a, bcdDevice= 7.e1 [ 510.311673][ T5777] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.345412][ T5777] usb 7-1: Product: syz [ 510.349650][ T5777] usb 7-1: Manufacturer: syz [ 510.384149][ T5777] usb 7-1: SerialNumber: syz [ 510.420549][ T5777] usb-storage 7-1:1.48: USB Mass Storage device detected [ 510.994219][ T5858] usb 7-1: USB disconnect, device number 4 [ 511.573188][T10675] xt_connbytes: Forcing CT accounting to be enabled [ 511.580117][T10675] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 512.887424][T10687] sctp: [Deprecated]: syz.0.1452 (pid 10687) Use of struct sctp_assoc_value in delayed_ack socket option. [ 512.887424][T10687] Use struct sctp_sack_info instead [ 513.472669][T10693] netlink: 'syz.0.1455': attribute type 4 has an invalid length. [ 513.548992][T10696] netlink: 'syz.0.1455': attribute type 4 has an invalid length. [ 515.396223][T10712] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1469'. [ 518.188600][T10722] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 522.897812][T10760] loop6: detected capacity change from 0 to 512 [ 522.930455][T10760] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 522.961837][T10760] EXT4-fs (loop6): orphan cleanup on readonly fs [ 522.971125][T10760] EXT4-fs error (device loop6): ext4_ext_check_inode:520: inode #3: comm syz.6.1474: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 523.005174][T10760] EXT4-fs error (device loop6): ext4_quota_enable:7132: comm syz.6.1474: Bad quota inode: 3, type: 0 [ 523.023567][T10760] EXT4-fs warning (device loop6): ext4_enable_quotas:7173: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 523.171776][T10760] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 523.180291][T10760] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 523.323911][ T7130] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 523.632372][T10763] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1476'. [ 523.680010][T10765] loop6: detected capacity change from 0 to 1024 [ 523.711759][T10765] EXT4-fs: Ignoring removed orlov option [ 523.717460][T10765] EXT4-fs: Invalid want_extra_isize 0 [ 525.027754][T10770] netlink: 'syz.6.1478': attribute type 1 has an invalid length. [ 525.130716][T10770] 8021q: adding VLAN 0 to HW filter on device bond3 [ 525.765053][T10776] 8021q: adding VLAN 0 to HW filter on device bond3 [ 525.774992][T10776] bond3: (slave ipip0): The slave device specified does not support setting the MAC address [ 525.787248][T10776] bond3: (slave ipip0): Error -95 calling set_mac_address [ 525.877480][T10770] bond3: (slave ip6erspan0): making interface the new active one [ 525.893439][T10770] bond3: (slave ip6erspan0): Enslaving as an active interface with an up link [ 531.972877][T10813] ptrace attach of "./syz-executor exec"[10814] was attempted by "./syz-executor exec"[10813] [ 533.624136][T10825] loop0: detected capacity change from 0 to 128 [ 535.654468][T10839] loop0: detected capacity change from 0 to 128 [ 537.950990][ T5856] libceph: connect (1)[c::]:6789 error -101 [ 537.958361][ T5856] libceph: mon0 (1)[c::]:6789 connect error [ 537.986749][T10855] netlink: 'syz.5.1500': attribute type 1 has an invalid length. [ 538.080456][T10851] ceph: No mds server is up or the cluster is laggy [ 538.180635][T10855] 8021q: adding VLAN 0 to HW filter on device bond1 [ 538.382509][T10859] 8021q: adding VLAN 0 to HW filter on device bond1 [ 538.389717][T10859] bond1: (slave ipip0): The slave device specified does not support setting the MAC address [ 538.462544][T10859] bond1: (slave ipip0): Error -95 calling set_mac_address [ 538.840216][T10869] hugetlbfs: syz.0.1501 (10869): Using mlock ulimits for SHM_HUGETLB is obsolete [ 539.699569][T10873] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1504'. [ 539.719473][T10873] ip6gretap0: entered promiscuous mode [ 539.731352][T10873] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1504'. [ 542.805754][T10894] loop6: detected capacity change from 0 to 128 [ 545.639518][T10897] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1513'. [ 547.779060][T10917] vlan0: entered promiscuous mode [ 548.128662][T10915] lo speed is unknown, defaulting to 1000 [ 549.780957][T10941] siw: device registration error -23 [ 553.357765][T10957] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1531'. [ 553.397817][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 553.397829][ T28] audit: type=1326 audit(1753089118.185:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10958 comm="syz.6.1532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3ae38e9a9 code=0x7ffc0000 [ 553.427360][ T28] audit: type=1326 audit(1753089118.215:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10958 comm="syz.6.1532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3ae38e9a9 code=0x7ffc0000 [ 553.451442][ T28] audit: type=1326 audit(1753089118.215:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10958 comm="syz.6.1532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fe3ae38e9a9 code=0x7ffc0000 [ 553.475364][ T28] audit: type=1326 audit(1753089118.215:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10958 comm="syz.6.1532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3ae38e9a9 code=0x7ffc0000 [ 553.502468][ T28] audit: type=1326 audit(1753089118.215:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10958 comm="syz.6.1532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3ae38e9a9 code=0x7ffc0000 [ 553.525301][ T28] audit: type=1326 audit(1753089118.215:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10958 comm="syz.6.1532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe3ae38e9a9 code=0x7ffc0000 [ 553.548645][ T28] audit: type=1326 audit(1753089118.215:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10958 comm="syz.6.1532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3ae38e9a9 code=0x7ffc0000 [ 553.574877][ T28] audit: type=1326 audit(1753089118.265:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10958 comm="syz.6.1532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7fe3ae38e9a9 code=0x7ffc0000 [ 553.621127][ T28] audit: type=1326 audit(1753089118.405:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10958 comm="syz.6.1532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3ae38e9a9 code=0x7ffc0000 [ 553.916820][ T28] audit: type=1326 audit(1753089118.405:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10958 comm="syz.6.1532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3ae38e9a9 code=0x7ffc0000 [ 554.500495][T10973] Bluetooth: MGMT ver 1.22 [ 557.789353][T11006] netlink: 84 bytes leftover after parsing attributes in process `syz.6.1548'. [ 558.574622][T11014] xt_TPROXY: Can be used only with -p tcp or -p udp [ 563.592980][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.914355][T11052] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1560'. [ 563.943245][T11052] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1560'. [ 563.990273][T11052] bridge3: entered promiscuous mode [ 564.029208][T11052] bridge3: entered allmulticast mode [ 564.097272][T11052] netlink: 'syz.4.1560': attribute type 4 has an invalid length. [ 564.456512][T11059] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1558'. [ 564.465988][T11059] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1558'. [ 565.220236][T11065] lo speed is unknown, defaulting to 1000 [ 567.573529][T11093] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1573'. [ 567.590908][T11093] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1573'. [ 567.628556][T11093] bridge0: entered promiscuous mode [ 567.634170][T11093] bridge0: entered allmulticast mode [ 567.768327][T11093] netlink: 'syz.6.1573': attribute type 4 has an invalid length. [ 567.849409][ T785] lo speed is unknown, defaulting to 1000 [ 573.492364][T11125] xt_CT: You must specify a L4 protocol and not use inversions on it [ 574.203943][T11130] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1590'. [ 574.213039][T11130] netlink: 120 bytes leftover after parsing attributes in process `syz.5.1590'. [ 575.011952][T11136] lo speed is unknown, defaulting to 1000 [ 575.356673][T11139] vlan0: entered promiscuous mode [ 575.381349][T11139] vlan0: entered allmulticast mode [ 575.387233][T11139] hsr_slave_1: entered allmulticast mode [ 580.822618][T11178] loop0: detected capacity change from 0 to 512 [ 580.829983][T11178] EXT4-fs: Ignoring removed nomblk_io_submit option [ 580.877306][T11178] ext4: Unknown parameter 'smackfsdef' [ 580.912488][T11179] netlink: 'syz.4.1595': attribute type 16 has an invalid length. [ 580.923419][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 580.923435][ T28] audit: type=1326 audit(1753089145.605:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11177 comm="syz.4.1595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c978e9a9 code=0x7ffc0000 [ 580.970423][T11179] netlink: 'syz.4.1595': attribute type 17 has an invalid length. [ 581.038958][ T28] audit: type=1326 audit(1753089145.605:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11177 comm="syz.4.1595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c978e9a9 code=0x7ffc0000 [ 581.177923][ T28] audit: type=1326 audit(1753089145.615:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11177 comm="syz.4.1595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7f54c978e9a9 code=0x7ffc0000 [ 581.210001][T11179] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 581.233588][ T28] audit: type=1326 audit(1753089145.615:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11177 comm="syz.4.1595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c978e9a9 code=0x7ffc0000 [ 581.281033][ T28] audit: type=1326 audit(1753089145.625:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11177 comm="syz.4.1595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f54c978e9a9 code=0x7ffc0000 [ 581.367497][ T28] audit: type=1326 audit(1753089145.625:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11177 comm="syz.4.1595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f54c978e9e3 code=0x7ffc0000 [ 581.458142][ T28] audit: type=1326 audit(1753089145.625:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11177 comm="syz.4.1595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f54c978d45f code=0x7ffc0000 [ 581.541568][ T28] audit: type=1326 audit(1753089145.625:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11177 comm="syz.4.1595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f54c978ea37 code=0x7ffc0000 [ 581.614584][ T28] audit: type=1326 audit(1753089145.635:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11177 comm="syz.4.1595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f54c978d310 code=0x7ffc0000 [ 581.686362][ T28] audit: type=1326 audit(1753089145.635:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11177 comm="syz.4.1595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f54c978d60a code=0x7ffc0000 [ 585.747595][T11221] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1607'. [ 585.757218][T11221] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1607'. [ 589.106710][T11236] loop6: detected capacity change from 0 to 512 [ 591.781191][T11236] EXT4-fs warning (device loop6): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop6. [ 595.848562][T11280] loop0: detected capacity change from 0 to 256 [ 595.896895][T11280] FAT-fs (loop0): Directory bread(block 64) failed [ 595.911109][T11280] FAT-fs (loop0): Directory bread(block 65) failed [ 595.921494][T11280] FAT-fs (loop0): Directory bread(block 66) failed [ 595.938781][T11280] FAT-fs (loop0): Directory bread(block 67) failed [ 595.955907][T11280] FAT-fs (loop0): Directory bread(block 68) failed [ 595.971089][T11280] FAT-fs (loop0): Directory bread(block 69) failed [ 595.988167][T11280] FAT-fs (loop0): Directory bread(block 70) failed [ 596.005668][T11280] FAT-fs (loop0): Directory bread(block 71) failed [ 596.050497][T11280] FAT-fs (loop0): Directory bread(block 72) failed [ 596.072959][T11280] FAT-fs (loop0): Directory bread(block 73) failed [ 596.811143][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 596.811479][ T28] audit: type=1800 audit(1753089161.385:582): pid=11286 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1624" name="file1" dev="loop0" ino=1048613 res=0 errno=0 [ 601.008978][T11314] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1633'. [ 601.023454][T11314] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1633'. [ 606.512220][T11343] Bluetooth: hci1: command 0x0406 tx timeout [ 607.253026][T11374] netlink: 'syz.6.1650': attribute type 12 has an invalid length. [ 607.311096][T11376] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1651'. [ 609.131071][T11386] syz.5.1653 (11386) used greatest stack depth: 16424 bytes left [ 611.358879][T11406] xt_recent: hitcount (692) is larger than allowed maximum (255) [ 617.606626][T11450] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1669'. [ 619.617479][ T28] audit: type=1326 audit(1753089184.405:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11465 comm="syz.6.1674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3ae38e9a9 code=0x7ffc0000 [ 620.449890][ T28] audit: type=1326 audit(1753089184.405:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11465 comm="syz.6.1674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe3ae38e9a9 code=0x7ffc0000 [ 620.700373][ T28] audit: type=1326 audit(1753089184.405:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11465 comm="syz.6.1674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3ae38e9a9 code=0x7ffc0000 [ 620.727989][ T28] audit: type=1326 audit(1753089184.405:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11465 comm="syz.6.1674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3ae38e9a9 code=0x7ffc0000 [ 620.750696][ T28] audit: type=1326 audit(1753089184.415:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11465 comm="syz.6.1674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fe3ae38e9a9 code=0x7ffc0000 [ 620.804019][ T28] audit: type=1326 audit(1753089184.415:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11465 comm="syz.6.1674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3ae38e9a9 code=0x7ffc0000 [ 620.880968][ T28] audit: type=1326 audit(1753089184.415:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11465 comm="syz.6.1674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3ae38e9a9 code=0x7ffc0000 [ 620.962368][ T28] audit: type=1326 audit(1753089184.915:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11465 comm="syz.6.1674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe3ae38e9a9 code=0x7ffc0000 [ 621.031243][T11478] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1678'. [ 621.040386][ T28] audit: type=1326 audit(1753089185.515:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11465 comm="syz.6.1674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3ae38e9a9 code=0x7ffc0000 [ 621.141023][ T28] audit: type=1326 audit(1753089185.515:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11465 comm="syz.6.1674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3ae38e9a9 code=0x7ffc0000 [ 621.686375][T11489] netlink: 'syz.5.1684': attribute type 10 has an invalid length. [ 621.694897][T11489] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1684'. [ 621.705911][T11489] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.714929][T11489] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.723637][T11489] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.732005][T11489] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.752497][T11489] team0: Port device geneve0 added [ 624.765595][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 626.172525][T11528] xt_CT: You must specify a L4 protocol and not use inversions on it [ 627.884937][T11537] lo speed is unknown, defaulting to 1000 [ 628.401366][T11548] netlink: 'syz.6.1700': attribute type 21 has an invalid length. [ 628.409344][T11548] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1700'. [ 629.658296][T11562] pimreg: entered allmulticast mode [ 629.711588][T11562] pimreg: left allmulticast mode [ 629.824209][T11572] syz.6.1703: attempt to access beyond end of device [ 629.824209][T11572] loop13: rw=0, sector=64, nr_sectors = 2 limit=0 [ 629.849340][T11572] isofs_fill_super: bread failed, dev=loop13, iso_blknum=16, block=32 [ 632.592906][T11591] SET target dimension over the limit! [ 634.229255][T11617] pimreg: entered allmulticast mode [ 634.245890][T11621] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 634.254376][T11621] IPv6: NLM_F_CREATE should be set when creating new route [ 634.273976][T11617] pimreg: left allmulticast mode [ 634.425078][T11628] syz.4.1719: attempt to access beyond end of device [ 634.425078][T11628] loop9: rw=0, sector=64, nr_sectors = 2 limit=0 [ 634.493895][T11628] isofs_fill_super: bread failed, dev=loop9, iso_blknum=16, block=32 [ 638.232709][T11672] pimreg: entered allmulticast mode [ 638.253890][T11672] pimreg: left allmulticast mode [ 638.264654][T11672] dvmrp8: left allmulticast mode [ 638.338986][T11677] syz.5.1735: attempt to access beyond end of device [ 638.338986][T11677] loop11: rw=0, sector=64, nr_sectors = 2 limit=0 [ 638.364924][T11677] isofs_fill_super: bread failed, dev=loop11, iso_blknum=16, block=32 [ 638.980022][T11680] netlink: 165 bytes leftover after parsing attributes in process `syz.0.1736'. [ 639.322119][T11683] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.330600][T11683] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.226178][T11683] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.262861][T11683] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.370970][T11683] team0: Port device geneve0 removed [ 640.395391][T11694] team0: Mode changed to "roundrobin" [ 641.485150][T11705] mmap: syz.0.1744 (11705) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 645.594811][T11729] lo speed is unknown, defaulting to 1000 [ 648.374458][T11770] ptrace attach of ""[11771] was attempted by "./syz-executor exec"[11770] [ 652.042881][T11792] fuse: Bad value for 'fd' [ 653.215239][T11808] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1774'. [ 653.961270][T11817] ptrace attach of ""[11819] was attempted by "./syz-executor exec"[11817] [ 654.391211][ T5103] Bluetooth: hci1: command 0x0406 tx timeout [ 655.262962][T11829] xt_CONNSECMARK: invalid mode: 0 [ 657.579718][T11844] lo speed is unknown, defaulting to 1000 [ 660.133495][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 660.133514][ T28] audit: type=1326 audit(1753089224.915:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11868 comm="syz.5.1789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa15b8e9a9 code=0x7ffc0000 [ 660.251151][ T28] audit: type=1326 audit(1753089224.965:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11868 comm="syz.5.1789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa15b8e9a9 code=0x7ffc0000 [ 660.307094][ T28] audit: type=1326 audit(1753089224.965:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11868 comm="syz.5.1789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7faa15b8e9a9 code=0x7ffc0000 [ 660.356488][ T28] audit: type=1326 audit(1753089224.965:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11868 comm="syz.5.1789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa15b8e9a9 code=0x7ffc0000 [ 660.451162][ T28] audit: type=1326 audit(1753089224.965:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11868 comm="syz.5.1789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa15b8e9a9 code=0x7ffc0000 [ 660.521845][ T28] audit: type=1326 audit(1753089224.965:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11868 comm="syz.5.1789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7faa15b8e9a9 code=0x7ffc0000 [ 660.601573][ T28] audit: type=1326 audit(1753089224.965:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11868 comm="syz.5.1789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7faa15b8e9e3 code=0x7ffc0000 [ 660.671122][ T28] audit: type=1326 audit(1753089224.975:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11868 comm="syz.5.1789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7faa15b8d45f code=0x7ffc0000 [ 660.740725][ T28] audit: type=1326 audit(1753089224.995:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11868 comm="syz.5.1789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7faa15b8ea37 code=0x7ffc0000 [ 660.801093][T11880] vlan3: entered promiscuous mode [ 660.806391][T11880] bond0: entered promiscuous mode [ 661.426786][ T28] audit: type=1326 audit(1753089225.005:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11868 comm="syz.5.1789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faa15b8d310 code=0x7ffc0000 [ 661.451841][T11880] bond0: (slave vlan3): Opening slave failed [ 663.123628][T11897] sit0: entered promiscuous mode [ 663.151257][T11897] netlink: 21 bytes leftover after parsing attributes in process `syz.6.1799'. [ 663.232987][T11903] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1801'. [ 663.282481][T11903] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1801'. [ 663.337902][T11907] xt_hashlimit: max too large, truncated to 1048576 [ 665.770450][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 665.770552][ T28] audit: type=1326 audit(1753089230.555:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11921 comm="syz.6.1808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3ae38e9a9 code=0x7ffc0000 [ 665.832801][ T28] audit: type=1326 audit(1753089230.595:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11921 comm="syz.6.1808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3ae38e9a9 code=0x7ffc0000 [ 666.078383][ T28] audit: type=1326 audit(1753089230.595:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11921 comm="syz.6.1808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fe3ae38e9a9 code=0x7ffc0000 [ 666.720864][ T28] audit: type=1326 audit(1753089230.595:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11921 comm="syz.6.1808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3ae38e9a9 code=0x7ffc0000 [ 666.967744][ T28] audit: type=1326 audit(1753089230.595:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11921 comm="syz.6.1808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3ae38e9a9 code=0x7ffc0000 [ 667.042041][T11931] bridge0: port 2(bridge_slave_1) entered disabled state [ 667.050027][T11931] bridge0: port 1(bridge_slave_0) entered disabled state [ 667.078661][ T28] audit: type=1326 audit(1753089230.595:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11921 comm="syz.6.1808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fe3ae38e9a9 code=0x7ffc0000 [ 667.124388][T11931] bridge0: entered allmulticast mode [ 667.172223][ T28] audit: type=1326 audit(1753089230.595:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11921 comm="syz.6.1808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3ae38e9a9 code=0x7ffc0000 [ 667.276285][ T28] audit: type=1326 audit(1753089230.595:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11921 comm="syz.6.1808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3ae38e9a9 code=0x7ffc0000 [ 667.298866][ T28] audit: type=1326 audit(1753089230.595:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11921 comm="syz.6.1808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fe3ae38e9a9 code=0x7ffc0000 [ 667.322127][ T28] audit: type=1326 audit(1753089230.595:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11921 comm="syz.6.1808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3ae38e9a9 code=0x7ffc0000 [ 667.460427][T11934] bridge_slave_1: left allmulticast mode [ 667.474751][T11934] bridge_slave_1: left promiscuous mode [ 667.500849][T11934] bridge0: port 2(bridge_slave_1) entered disabled state [ 667.528315][T11934] bridge_slave_0: left allmulticast mode [ 667.540021][T11934] bridge_slave_0: left promiscuous mode [ 667.558091][T11934] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.724551][T11954] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1814'. [ 668.755858][T11954] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1814'. [ 671.189978][T11978] netlink: 2028 bytes leftover after parsing attributes in process `syz.6.1828'. [ 671.223806][T11978] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1828'. [ 673.408662][T12000] lo speed is unknown, defaulting to 1000 [ 676.203909][T12034] netlink: 'syz.5.1837': attribute type 11 has an invalid length. [ 676.610082][T12043] vlan0: entered promiscuous mode [ 681.010907][T12074] netlink: 292 bytes leftover after parsing attributes in process `syz.5.1847'. [ 681.145945][T12078] mmap: syz.0.1849 (12078): VmData 37474304 exceed data ulimit 9. Update limits or use boot option ignore_rlimit_data. [ 681.469186][T12085] lo: entered allmulticast mode [ 681.474932][T12085] tunl0: entered allmulticast mode [ 681.495774][T12085] gre0: entered allmulticast mode [ 681.505885][T12085] gretap0: entered allmulticast mode [ 682.421848][T12085] erspan0: entered allmulticast mode [ 682.431622][T12085] ip_vti0: entered allmulticast mode [ 682.437166][T12085] ip6_vti0: entered allmulticast mode [ 682.461302][T12085] sit0: entered allmulticast mode [ 682.502448][T12085] ip6tnl0: entered allmulticast mode [ 682.522007][T12085] ip6gre0: entered allmulticast mode [ 682.541526][T12085] ip6gretap0: entered allmulticast mode [ 682.570102][T12085] bond0: entered allmulticast mode [ 682.613846][T12085] team0: entered allmulticast mode [ 682.641508][T12085] dummy0: entered allmulticast mode [ 682.664859][T12085] nlmon0: entered allmulticast mode [ 682.670323][T12085] caif0: entered allmulticast mode [ 682.693300][T12085] batadv0: entered allmulticast mode [ 682.698868][T12085] vxcan0: entered allmulticast mode [ 682.721572][T12085] vxcan1: entered allmulticast mode [ 682.726985][T12085] veth0: entered allmulticast mode [ 683.004428][T12085] veth1: entered allmulticast mode [ 683.009848][T12085] wg0: entered allmulticast mode [ 683.027563][T12085] wg1: entered allmulticast mode [ 683.035284][T12085] veth0_to_bridge: entered allmulticast mode [ 683.045543][T12085] bridge_slave_0: entered allmulticast mode [ 683.055124][T12085] veth1_to_bridge: left promiscuous mode [ 683.538710][T12085] bridge_slave_1: entered allmulticast mode [ 683.545753][T12085] veth0_to_bond: entered allmulticast mode [ 683.552033][T12085] bond_slave_0: entered allmulticast mode [ 683.558094][T12085] veth1_to_bond: entered allmulticast mode [ 683.565174][T12085] bond_slave_1: entered allmulticast mode [ 683.571321][T12085] veth0_to_team: entered allmulticast mode [ 683.577626][T12085] team_slave_0: entered allmulticast mode [ 683.585557][T12085] veth1_to_team: entered allmulticast mode [ 683.591825][T12085] team_slave_1: entered allmulticast mode [ 683.597881][T12085] veth0_to_batadv: entered allmulticast mode [ 683.605078][T12085] batadv_slave_0: entered allmulticast mode [ 683.616746][T12085] veth1_to_batadv: entered allmulticast mode [ 683.623583][T12085] batadv_slave_1: entered allmulticast mode [ 683.629947][T12085] xfrm0: entered allmulticast mode [ 683.715194][T12085] veth0_to_hsr: entered allmulticast mode [ 683.747725][T12085] hsr_slave_0: entered allmulticast mode [ 683.781274][T12085] veth1_to_hsr: entered allmulticast mode [ 683.796242][T12085] hsr0: entered allmulticast mode [ 683.816507][T12085] veth1_virt_wifi: entered allmulticast mode [ 683.826208][T12085] veth0_virt_wifi: entered allmulticast mode [ 683.838009][T12085] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 683.864523][T12085] veth1_vlan: entered allmulticast mode [ 683.870417][T12085] veth0_vlan: entered allmulticast mode [ 683.914065][T12085] @: entered allmulticast mode [ 683.929544][T12085] vlan1: entered allmulticast mode [ 683.954665][T12085] macvlan0: entered allmulticast mode [ 683.997065][T12085] macvlan1: entered allmulticast mode [ 684.003351][T12085] ipvlan0: entered allmulticast mode [ 684.008906][T12085] veth1_macvtap: entered allmulticast mode [ 684.015181][T12085] veth0_macvtap: entered allmulticast mode [ 684.021434][T12085] macvtap0: entered allmulticast mode [ 684.027071][T12085] macsec0: entered allmulticast mode [ 684.032691][T12085] geneve0: entered allmulticast mode [ 684.038237][T12085] geneve1: entered allmulticast mode [ 684.044893][T12085] mac80211_hwsim hwsim12 wlan0: entered allmulticast mode [ 684.891364][T12085] mac80211_hwsim hwsim13 wlan1: entered allmulticast mode [ 684.898722][T12085] netdevsim netdevsim5 eth0: entered allmulticast mode [ 684.921862][T12085] netdevsim netdevsim5 eth1: entered allmulticast mode [ 684.929074][T12085] netdevsim netdevsim5 eth2: entered allmulticast mode [ 684.940296][T12085] netdevsim netdevsim5 eth3: entered allmulticast mode [ 685.041688][T12085] ip6erspan0: entered allmulticast mode [ 685.047710][T12085] veth2: entered allmulticast mode [ 685.053254][T12085] veth3: entered allmulticast mode [ 685.058826][T12085] vlan2: left promiscuous mode [ 685.150373][T12085] bridge0: left promiscuous mode [ 685.291667][T12085] syztnl0: entered allmulticast mode [ 685.297229][T12085] gtp0: left promiscuous mode [ 685.315635][T12085] gtp0: entered allmulticast mode [ 685.326122][T12085] bridge1: entered allmulticast mode [ 685.332434][T12085] veth4: entered allmulticast mode [ 685.582356][T12085] veth5: entered allmulticast mode [ 685.590671][T12085] syztnl1: entered allmulticast mode [ 686.225849][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.253737][T12085] gre1: entered allmulticast mode [ 686.301671][T12085] bond1: entered allmulticast mode [ 686.325046][T12085] vlan0: left promiscuous mode [ 686.364843][T12085] bridge3: entered allmulticast mode [ 686.421671][T12085] ip6tnl1: entered allmulticast mode [ 686.455449][T12085] bridge4: entered allmulticast mode [ 686.685525][T12125] 9pnet_fd: Insufficient options for proto=fd [ 689.270409][T12144] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 689.773071][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 689.773087][ T28] audit: type=1326 audit(1753089254.565:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12154 comm="syz.4.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c978e9a9 code=0x7ffc0000 [ 689.804857][ T28] audit: type=1326 audit(1753089254.565:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12154 comm="syz.4.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c978e9a9 code=0x7ffc0000 [ 691.626237][ T28] audit: type=1326 audit(1753089254.565:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12154 comm="syz.4.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f54c978e9a9 code=0x7ffc0000 [ 691.719869][ T28] audit: type=1326 audit(1753089254.565:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12154 comm="syz.4.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c978e9a9 code=0x7ffc0000 [ 691.745738][ T28] audit: type=1326 audit(1753089254.565:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12154 comm="syz.4.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c978e9a9 code=0x7ffc0000 [ 691.769262][ T28] audit: type=1326 audit(1753089254.625:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12154 comm="syz.4.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f54c978e9a9 code=0x7ffc0000 [ 692.476176][ T28] audit: type=1326 audit(1753089254.625:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12154 comm="syz.4.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f54c978e9e3 code=0x7ffc0000 [ 692.639078][ T28] audit: type=1326 audit(1753089255.615:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12154 comm="syz.4.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f54c978d45f code=0x7ffc0000 [ 692.673251][ T28] audit: type=1326 audit(1753089255.615:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12154 comm="syz.4.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f54c978ea37 code=0x7ffc0000 [ 692.756134][ T28] audit: type=1326 audit(1753089255.615:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12154 comm="syz.4.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f54c978d310 code=0x7ffc0000 [ 693.055474][T12175] tipc: Enabling of bearer rejected, failed to enable media [ 694.352588][T12192] netlink: 'syz.6.1881': attribute type 1 has an invalid length. [ 694.467298][T12195] ipt_ECN: cannot use operation on non-tcp rule [ 695.121681][T12192] 8021q: adding VLAN 0 to HW filter on device bond4 [ 695.362810][T12196] bond4: (slave veth9): Enslaving as an active interface with a down link [ 695.536578][T12192] vlan0: entered allmulticast mode [ 695.546709][T12192] veth1: entered allmulticast mode [ 695.556047][T12192] veth1: entered promiscuous mode [ 695.567216][T12192] veth1: left promiscuous mode [ 695.590936][T12192] bond4: (slave vlan0): making interface the new active one [ 695.600298][T12192] veth1: entered promiscuous mode [ 695.607882][T12192] vlan0: entered promiscuous mode [ 695.619929][T12192] bond4: (slave vlan0): Enslaving as an active interface with an up link [ 695.649659][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 695.649677][ T28] audit: type=1326 audit(1753089260.435:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12205 comm="syz.0.1886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8461d8e9a9 code=0x7ffc0000 [ 695.743156][ T28] audit: type=1326 audit(1753089260.435:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12205 comm="syz.0.1886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f8461d8e9a9 code=0x7ffc0000 [ 695.769460][ T28] audit: type=1326 audit(1753089260.435:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12205 comm="syz.0.1886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8461d8e9a9 code=0x7ffc0000 [ 695.793623][ T28] audit: type=1326 audit(1753089260.435:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12205 comm="syz.0.1886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8461d8e9a9 code=0x7ffc0000 [ 695.824525][ T28] audit: type=1326 audit(1753089260.475:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12205 comm="syz.0.1886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f8461d8e9a9 code=0x7ffc0000 [ 695.854770][ T28] audit: type=1326 audit(1753089260.475:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12205 comm="syz.0.1886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8461d8e9e3 code=0x7ffc0000 [ 695.882828][ T28] audit: type=1326 audit(1753089260.485:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12207 comm="syz.5.1887" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faa15b8e9a9 code=0x0 [ 695.920043][ T28] audit: type=1326 audit(1753089260.485:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12205 comm="syz.0.1886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8461d8d45f code=0x7ffc0000 [ 695.948581][ T28] audit: type=1326 audit(1753089260.505:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12205 comm="syz.0.1886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f8461d8ea37 code=0x7ffc0000 [ 695.976565][ T28] audit: type=1326 audit(1753089260.505:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12205 comm="syz.0.1886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8461d8d310 code=0x7ffc0000 [ 700.279380][T12260] netlink: 'syz.6.1901': attribute type 1 has an invalid length. [ 700.347594][T12260] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 700.356990][T12260] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 700.366486][T12260] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 700.376133][T12260] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 700.389994][T12260] bond5: (slave geneve2): making interface the new active one [ 700.399593][T12260] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 700.428283][T12260] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1901'. [ 700.497828][T12260] 8021q: adding VLAN 0 to HW filter on device bond5 [ 701.014307][T12282] ptrace attach of "./syz-executor exec"[6640] was attempted by " [ 701.554055][T12283] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1908'. [ 701.741059][T12283] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1908'. [ 701.775953][T12283] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 701.809571][T12283] team0: entered promiscuous mode [ 701.817550][T12283] team_slave_0: entered promiscuous mode [ 701.832627][T12283] team_slave_1: entered promiscuous mode [ 702.013197][T12294] trusted_key: syz.6.1912 sent an empty control message without MSG_MORE. [ 702.247090][T12296] lo speed is unknown, defaulting to 1000 [ 702.482036][T12303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 702.503374][T12303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 702.525767][T12303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 702.551018][T12303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 702.600494][T12303] dummy0: entered promiscuous mode [ 702.614554][T12303] macsec1: entered promiscuous mode [ 702.672624][T12303] dummy0: left promiscuous mode [ 705.137689][T12332] lo speed is unknown, defaulting to 1000 [ 706.807942][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 706.807960][ T28] audit: type=1326 audit(1753089271.595:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12348 comm="syz.6.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3ae38e9a9 code=0x7ffc0000 [ 706.842862][ T28] audit: type=1326 audit(1753089271.595:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12348 comm="syz.6.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3ae38e9a9 code=0x7ffc0000 [ 706.866195][ T28] audit: type=1326 audit(1753089271.595:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12348 comm="syz.6.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7fe3ae38e9a9 code=0x7ffc0000 [ 706.889948][ T28] audit: type=1326 audit(1753089271.595:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12348 comm="syz.6.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3ae38e9a9 code=0x7ffc0000 [ 707.134994][ T28] audit: type=1326 audit(1753089271.595:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12348 comm="syz.6.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3ae38e9a9 code=0x7ffc0000 [ 708.170980][ T28] audit: type=1326 audit(1753089271.595:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12348 comm="syz.6.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fe3ae38e9a9 code=0x7ffc0000 [ 708.275630][ T28] audit: type=1326 audit(1753089271.595:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12348 comm="syz.6.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe3ae38e9e3 code=0x7ffc0000 [ 708.354630][ T28] audit: type=1326 audit(1753089271.605:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12348 comm="syz.6.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe3ae38d45f code=0x7ffc0000 [ 708.402193][ T28] audit: type=1326 audit(1753089271.605:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12348 comm="syz.6.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fe3ae38ea37 code=0x7ffc0000 [ 708.963395][ T28] audit: type=1326 audit(1753089271.605:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12348 comm="syz.6.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe3ae38d310 code=0x7ffc0000 [ 709.525999][T12372] netlink: 'syz.4.1935': attribute type 27 has an invalid length. [ 710.661226][ T48] vlan0: left promiscuous mode [ 712.799828][T12413] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1947'. [ 713.158714][T12424] netlink: 80 bytes leftover after parsing attributes in process `syz.6.1952'. [ 716.930260][T12457] delete_channel: no stack [ 724.289902][T12537] xt_socket: unknown flags 0x8 [ 727.280158][T10455] IPVS: starting estimator thread 0... [ 727.471034][T12548] IPVS: using max 25 ests per chain, 60000 per kthread [ 735.675287][T12615] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 737.218915][T12634] dummy0: entered promiscuous mode [ 737.249284][T12634] dummy0: left promiscuous mode [ 747.540158][T12700] delete_channel: no stack [ 747.822218][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 748.298929][T12710] xt_socket: unknown flags 0x50 [ 748.322343][ T9457] tipc: Left network mode [ 748.635801][T12717] overlayfs: failed to clone upperpath [ 748.725075][T12719] netlink: 'syz.6.2032': attribute type 1 has an invalid length. [ 748.765247][T12719] 8021q: adding VLAN 0 to HW filter on device bond6 [ 748.890628][T12724] bond6: (slave geneve3): making interface the new active one [ 748.902501][T12724] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 748.926901][T12719] bond6: entered promiscuous mode [ 748.937180][T12719] geneve3: entered promiscuous mode [ 749.582576][T12735] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2037'. [ 750.204258][T12737] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2038'. [ 750.360490][T12739] bridge0: port 1(team0) entered blocking state [ 750.382095][T12739] bridge0: port 1(team0) entered disabled state [ 750.399833][T12739] team0: entered promiscuous mode [ 750.456809][T12741] netlink: 'syz.0.2041': attribute type 4 has an invalid length. [ 750.465082][T12741] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2041'. [ 750.479900][T12741] : renamed from bond0 (while UP) [ 752.414979][T12762] netlink: 'syz.5.2046': attribute type 1 has an invalid length. [ 754.473464][T12774] netlink: 184 bytes leftover after parsing attributes in process `syz.5.2049'. [ 754.848848][ T9457] hsr_slave_0: left promiscuous mode [ 754.865353][ T9457] hsr_slave_1: left promiscuous mode [ 755.156749][ T9457] veth1_macvtap: left promiscuous mode [ 755.167028][ T9457] veth0_macvtap: left promiscuous mode [ 755.175541][ T9457] veth1_vlan: left promiscuous mode [ 755.182138][ T9457] veth0_vlan: left promiscuous mode [ 757.602958][ T9457] bond1 (unregistering): Released all slaves [ 758.864910][ T9457] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 759.359705][ T9457] bond0 (unregistering): Released all slaves [ 759.445710][T12787] netlink: 'syz.0.2056': attribute type 1 has an invalid length. [ 759.453961][T12787] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 759.478376][T12796] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2056'. [ 759.518997][T12809] tipc: Enabling of bearer rejected, failed to enable media [ 760.747930][ T9457] IPVS: stop unused estimator thread 0... [ 760.963218][T12842] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2066'. [ 761.000891][T12842] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2066'. [ 762.545613][T12862] lo speed is unknown, defaulting to 1000 [ 763.553965][T12869] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2072'. [ 766.077600][T12882] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2076'. [ 767.313873][T12911] netlink: 'syz.4.2084': attribute type 9 has an invalid length. [ 767.322686][T12911] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.2084'. [ 767.501529][T12912] netlink: 'syz.4.2084': attribute type 9 has an invalid length. [ 767.519894][T12912] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.2084'. [ 770.569241][T12939] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2091'. [ 770.685704][T12941] gretap2: entered promiscuous mode [ 771.526469][T12952] netlink: 'syz.4.2095': attribute type 4 has an invalid length. [ 771.534523][T12952] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2095'. [ 771.546825][T12952] : renamed from bond0 (while UP) [ 772.718467][T12962] sch_tbf: burst 7710 is lower than device lo mtu (39799) ! [ 773.059419][T12967] 9pnet: p9_errstr2errno: server reported unknown error 18446744073709551 [ 775.770396][T12990] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2104'. [ 777.954563][T13012] netlink: 'syz.5.2109': attribute type 4 has an invalid length. [ 777.962906][T13012] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2109'. [ 777.975033][T13012] : renamed from bond0 [ 781.786469][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 781.786487][ T28] audit: type=1326 audit(1753089346.575:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13034 comm="syz.4.2116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c978e9a9 code=0x7ffc0000 [ 781.964075][ T28] audit: type=1326 audit(1753089346.605:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13034 comm="syz.4.2116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f54c978e9a9 code=0x7ffc0000 [ 782.007671][ T28] audit: type=1326 audit(1753089346.605:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13034 comm="syz.4.2116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c978e9a9 code=0x7ffc0000 [ 782.065979][ T28] audit: type=1326 audit(1753089346.605:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13034 comm="syz.4.2116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c978e9a9 code=0x7ffc0000 [ 782.088895][ T28] audit: type=1326 audit(1753089346.605:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13034 comm="syz.4.2116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f54c978e9a9 code=0x7ffc0000 [ 782.555450][ T28] audit: type=1326 audit(1753089346.605:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13034 comm="syz.4.2116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c978e9a9 code=0x7ffc0000 [ 782.752468][ T28] audit: type=1326 audit(1753089346.605:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13034 comm="syz.4.2116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c978e9a9 code=0x7ffc0000 [ 783.542314][ T28] audit: type=1326 audit(1753089346.605:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13034 comm="syz.4.2116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f54c978e9a9 code=0x7ffc0000 [ 783.653991][ T28] audit: type=1326 audit(1753089346.605:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13034 comm="syz.4.2116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c978e9a9 code=0x7ffc0000 [ 785.637778][ T28] audit: type=1326 audit(1753089346.605:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13034 comm="syz.4.2116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7f54c978e9a9 code=0x7ffc0000 [ 785.882815][T13067] netlink: 184 bytes leftover after parsing attributes in process `syz.6.2124'. [ 785.928634][T13068] netlink: 'syz.0.2123': attribute type 1 has an invalid length. [ 785.964116][T13068] 8021q: adding VLAN 0 to HW filter on device bond0 [ 786.019566][T13068] bond0: (slave geneve2): making interface the new active one [ 786.037201][T13068] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 786.075563][T13068] bond0: entered promiscuous mode [ 786.080692][T13068] geneve2: entered promiscuous mode [ 786.708575][T13077] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2130'. [ 786.789427][T13081] netlink: 'syz.6.2127': attribute type 4 has an invalid length. [ 786.804723][T13081] netlink: 152 bytes leftover after parsing attributes in process `syz.6.2127'. [ 786.888909][T13081] : renamed from bond0 [ 786.898662][T13077] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2130'. [ 788.692052][T13096] netlink: 'syz.4.2135': attribute type 1 has an invalid length. [ 788.783641][T13096] 8021q: adding VLAN 0 to HW filter on device bond0 [ 788.811227][T13100] bond0: (slave geneve2): making interface the new active one [ 788.832959][T13100] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 788.967044][T13096] bond0: entered promiscuous mode [ 788.980036][T13096] geneve2: entered promiscuous mode [ 791.231656][T13124] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2143'. [ 792.067437][T13131] dummy0 speed is unknown, defaulting to 1000 [ 792.077328][T13131] dummy0 speed is unknown, defaulting to 1000 [ 792.084723][T13131] dummy0 speed is unknown, defaulting to 1000 [ 792.100938][T13131] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 792.126444][T13131] dummy0 speed is unknown, defaulting to 1000 [ 792.139256][T13131] dummy0 speed is unknown, defaulting to 1000 [ 792.148624][T13131] dummy0 speed is unknown, defaulting to 1000 [ 792.160305][T13131] dummy0 speed is unknown, defaulting to 1000 [ 795.034981][T13180] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2158'. [ 795.087882][T13180] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2158'. [ 796.803077][T13197] ipt_ECN: cannot use operation on non-tcp rule [ 809.101899][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.578214][T13302] tipc: Enabling of bearer rejected, failed to enable media [ 809.935147][T13309] netlink: 'syz.6.2195': attribute type 9 has an invalid length. [ 809.971783][T13309] netlink: 209836 bytes leftover after parsing attributes in process `syz.6.2195'. [ 810.205200][T13311] netlink: 'syz.6.2195': attribute type 9 has an invalid length. [ 810.213427][T13311] netlink: 209836 bytes leftover after parsing attributes in process `syz.6.2195'. [ 810.919149][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 810.919166][ T28] audit: type=1326 audit(1753089375.703:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13323 comm="syz.0.2201" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8461d8e9a9 code=0x0 [ 814.511008][T13341] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2205'. [ 815.896044][T13367] netlink: 'syz.5.2213': attribute type 1 has an invalid length. [ 815.980534][T13369] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 816.011420][T13369] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 816.019896][T13369] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 816.028953][T13369] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 816.039920][T13369] bond0: (slave geneve2): making interface the new active one [ 816.050017][T13369] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 816.221768][T13367] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2213'. [ 816.237925][T13367] 8021q: adding VLAN 0 to HW filter on device bond0 [ 819.146654][T13389] tipc: Enabling of bearer rejected, failed to enable media [ 820.363748][T13412] syz.6.2228[13412] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 820.363894][T13412] syz.6.2228[13412] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 824.782310][T13446] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2239'. [ 824.862109][T13446] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2239'. [ 826.498827][ T28] audit: type=1326 audit(1753089391.283:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13465 comm="syz.5.2244" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faa15b8e9a9 code=0x0 [ 826.741180][T13471] tipc: Enabling of bearer rejected, failed to enable media [ 830.749031][ T28] audit: type=1326 audit(1753089395.533:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13508 comm="syz.0.2255" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8461d8e9a9 code=0x0 [ 835.721595][ T28] audit: type=1326 audit(1753089400.503:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13553 comm="syz.5.2266" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faa15b8e9a9 code=0x0 [ 837.161921][T13572] xt_socket: unknown flags 0x8 [ 837.171907][ T28] audit: type=1326 audit(1753089401.943:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13567 comm="syz.0.2278" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8461d8e9a9 code=0x0 [ 841.476796][ T28] audit: type=1326 audit(1753089406.263:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13615 comm="syz.0.2284" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8461d8e9a9 code=0x0 [ 845.967653][ T28] audit: type=1326 audit(1753089410.753:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13664 comm="syz.4.2297" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f54c978e9a9 code=0x0 [ 857.508658][T13769] netlink: zone id is out of range [ 857.514228][T13769] netlink: zone id is out of range [ 857.519715][T13769] netlink: zone id is out of range [ 857.525844][T13769] netlink: zone id is out of range [ 857.532475][T13769] netlink: zone id is out of range [ 857.537993][T13769] netlink: zone id is out of range [ 857.546969][T13769] netlink: zone id is out of range [ 857.552643][T13769] netlink: zone id is out of range [ 857.557880][T13769] netlink: zone id is out of range [ 857.564029][T13769] netlink: zone id is out of range [ 858.920934][T13787] xt_socket: unknown flags 0x50 [ 860.708858][ T28] audit: type=1326 audit(1753089425.493:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13797 comm="syz.6.2338" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe3ae38e9a9 code=0x0 [ 860.762571][ T28] audit: type=1326 audit(1753089425.553:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13798 comm="syz.4.2339" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f54c978e9a9 code=0x0 [ 862.037191][T13813] tipc: Started in network mode [ 862.042223][T13813] tipc: Node identity 7, cluster identity 4711 [ 862.060856][T13813] tipc: Node number set to 7 [ 862.621388][T13825] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2346'. [ 862.632038][T13825] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2346'. [ 864.189001][ T28] audit: type=1326 audit(1753089428.973:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13860 comm="syz.5.2353" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faa15b8e9a9 code=0x0 [ 864.328539][T13864] xt_TCPMSS: Only works on TCP SYN packets [ 865.293135][T13873] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2355'. [ 865.502352][T13873] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2355'. [ 866.242015][ T28] audit: type=1326 audit(1753089431.033:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13868 comm="syz.5.2354" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faa15b8e9a9 code=0x0 [ 868.891862][T13906] netlink: 'syz.5.2360': attribute type 2 has an invalid length. [ 868.910159][T13906] netlink: 'syz.5.2360': attribute type 11 has an invalid length. [ 868.923405][T13906] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2360'. [ 870.526414][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.764004][T13927] delete_channel: no stack [ 872.296671][T13940] overlayfs: failed to clone upperpath [ 872.705784][T13946] Device name cannot be null; rc = [-22] [ 888.626895][T14033] Cannot find set identified by id 0 to match [ 890.339283][T14060] xt_CT: You must specify a L4 protocol and not use inversions on it [ 892.695893][T14079] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2407'. [ 892.949600][T14081] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2416'. [ 908.662663][T14194] fuse: Bad value for 'fd' [ 910.443501][T14202] netlink: 'syz.0.2446': attribute type 1 has an invalid length. [ 910.561943][T14202] 8021q: adding VLAN 0 to HW filter on device bond1 [ 910.743166][T14204] 8021q: adding VLAN 0 to HW filter on device bond1 [ 910.750355][T14204] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address [ 911.284650][T14204] bond1: (slave vxcan1): Error -95 calling set_mac_address [ 911.461722][T14202] gretap2: entered promiscuous mode [ 911.530640][T14202] bond1: (slave gretap2): making interface the new active one [ 911.566516][T14202] bond1: (slave gretap2): Enslaving as an active interface with an up link [ 911.582557][T14211] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-™ú:‡/": -EINTR [ 911.713829][T14212] bond1: (slave vlan2): the slave hw address is in use by the bond; giving it the hw address of gretap2 [ 914.101879][T14237] netlink: 'syz.4.2445': attribute type 10 has an invalid length. [ 916.708451][T14263] ptrace attach of "./syz-executor exec"[10364] was attempted by ""[14263] [ 920.426995][T14280] netlink: 'syz.0.2461': attribute type 1 has an invalid length. [ 920.502527][T14280] vlan2: entered allmulticast mode [ 920.507948][T14280] bond2: entered allmulticast mode [ 924.518201][ T28] audit: type=1326 audit(1753089489.303:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14315 comm="syz.0.2470" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8461d8e9a9 code=0x0 [ 929.357030][ T28] audit: type=1326 audit(1753089494.133:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14365 comm="syz.4.2483" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f54c978e9a9 code=0x0 [ 932.756183][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 935.788367][ T28] audit: type=1326 audit(1753089500.573:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14418 comm="syz.0.2497" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8461d8e9a9 code=0x0 [ 935.846962][ T28] audit: type=1326 audit(1753089500.633:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14421 comm="syz.6.2499" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe3ae38e9a9 code=0x0 [ 936.141239][T14428] netlink: 'syz.4.2500': attribute type 1 has an invalid length. [ 936.206595][T14428] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 936.228090][T14428] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2500'. [ 936.241137][T14428] bond2 (unregistering): (slave ip6gretap1): Releasing backup interface [ 936.260612][T14428] bond2 (unregistering): Released all slaves [ 936.964322][T14435] bridge3: entered allmulticast mode [ 937.054032][T14435] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2503'. [ 937.063878][T14435] bridge3: left allmulticast mode [ 941.224071][ T28] audit: type=1326 audit(1753089506.013:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14461 comm="syz.6.2510" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe3ae38e9a9 code=0x0 [ 941.347587][T14465] overlayfs: failed to clone upperpath [ 943.487840][T14488] xt_connbytes: Forcing CT accounting to be enabled [ 943.495055][T14488] set match dimension is over the limit! [ 943.764278][T11343] Bluetooth: hci1: hardware error 0xcf [ 945.447915][ T28] audit: type=1326 audit(1753089510.233:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14505 comm="syz.6.2523" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe3ae38e9a9 code=0x0 [ 945.478772][T14504] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2522'. [ 945.823047][T14511] overlayfs: failed to clone upperpath [ 945.881182][T11343] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 946.667529][ T28] audit: type=1326 audit(1753089511.453:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14516 comm="syz.6.2527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3ae38e9a9 code=0x7ffc0000 [ 946.742895][ T28] audit: type=1326 audit(1753089511.483:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14516 comm="syz.6.2527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3ae38e9a9 code=0x7ffc0000 [ 946.767112][ T28] audit: type=1326 audit(1753089511.483:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14516 comm="syz.6.2527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe3ae38e9a9 code=0x7ffc0000 [ 946.804504][ T28] audit: type=1326 audit(1753089511.483:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14516 comm="syz.6.2527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3ae38e9a9 code=0x7ffc0000 [ 946.870995][ T28] audit: type=1326 audit(1753089511.483:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14516 comm="syz.6.2527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3ae38e9a9 code=0x7ffc0000 [ 946.917048][ T28] audit: type=1326 audit(1753089511.483:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14516 comm="syz.6.2527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe3ae38e9a9 code=0x7ffc0000 [ 946.967187][ T28] audit: type=1326 audit(1753089511.483:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14516 comm="syz.6.2527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3ae38e9a9 code=0x7ffc0000 [ 946.990295][ T28] audit: type=1326 audit(1753089511.483:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14516 comm="syz.6.2527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe3ae38e9a9 code=0x7ffc0000 [ 947.197027][ T28] audit: type=1326 audit(1753089511.483:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14516 comm="syz.6.2527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3ae38e9a9 code=0x7ffc0000 [ 947.220060][ T28] audit: type=1326 audit(1753089511.483:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14516 comm="syz.6.2527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fe3ae38e9a9 code=0x7ffc0000 [ 952.158566][T14564] UBIFS error (pid: 14564): cannot open "./file0", error -22 [ 956.430520][ T28] kauditd_printk_skb: 70 callbacks suppressed [ 956.430536][ T28] audit: type=1326 audit(1753089521.213:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14599 comm="syz.0.2551" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8461d8e9a9 code=0x0 [ 963.341244][ T28] audit: type=1800 audit(1753089528.103:816): pid=14633 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2557" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 969.227791][T14683] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2570'. [ 973.722911][T14724] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2582'. [ 978.304712][T14760] UBIFS error (pid: 14760): cannot open "./file0", error -22 [ 979.402796][T14769] xt_TCPMSS: Only works on TCP SYN packets [ 979.628749][T14770] netlink: 'syz.6.2593': attribute type 11 has an invalid length. [ 979.638150][T14770] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2593'. [ 979.731194][T14772] vlan3: entered promiscuous mode [ 979.736574][T14772] dummy0: entered promiscuous mode [ 981.382647][T14777] delete_channel: no stack [ 983.675282][T14815] dummy0: entered promiscuous mode [ 983.681140][T14815] vlan2: entered promiscuous mode [ 985.913172][T14818] delete_channel: no stack [ 986.848193][T14834] netlink: 'syz.4.2610': attribute type 2 has an invalid length. [ 986.856205][T14834] netlink: 'syz.4.2610': attribute type 8 has an invalid length. [ 986.864274][T14834] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2610'. [ 987.861128][ T28] audit: type=1326 audit(1753089552.653:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14842 comm="syz.0.2621" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8461d8e9a9 code=0x0 [ 988.906568][T14859] delete_channel: no stack [ 989.721925][T14872] overlayfs: failed to clone lowerpath [ 991.914123][ T28] audit: type=1326 audit(1753089556.563:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14894 comm="syz.5.2628" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faa15b8e9a9 code=0x0 [ 993.844960][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 995.449590][T14924] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2633'. [ 995.618316][T14920] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2634'. [ 995.631056][T14920] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2634'. [ 995.691253][T14920] netlink: 'syz.4.2634': attribute type 10 has an invalid length. [ 996.965001][T14936] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2638'. [ 997.002383][T14936] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap0 [ 997.036081][T14936] ip6gretap0: entered promiscuous mode [ 997.056469][T14936] macvtap1: entered promiscuous mode [ 997.082266][T14936] macvtap1: entered allmulticast mode [ 997.100869][T14936] ip6gretap0: entered allmulticast mode [ 997.106536][ T28] audit: type=1326 audit(1753089561.893:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14944 comm="syz.0.2639" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8461d8e9a9 code=0x0 [ 997.177888][T14948] ip6gretap0: left allmulticast mode [ 997.233332][T14948] ip6gretap0: left promiscuous mode [ 998.350916][T14962] netlink: 'syz.5.2641': attribute type 10 has an invalid length. [ 1001.002578][ T28] audit: type=1326 audit(1753089565.793:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14975 comm="syz.4.2647" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f54c978e9a9 code=0x0 [ 1006.849015][ T28] audit: type=1326 audit(1753089571.633:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15033 comm="syz.5.2661" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faa15b8e9a9 code=0x0 [ 1007.150049][ T28] audit: type=1326 audit(1753089571.933:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15040 comm="syz.0.2665" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8461d8e9a9 code=0x0 [ 1009.937686][T15066] netlink: 80 bytes leftover after parsing attributes in process `syz.6.2669'. [ 1009.951775][T15066] netlink: 80 bytes leftover after parsing attributes in process `syz.6.2669'. [ 1011.815248][T15073] batadv0: entered promiscuous mode [ 1011.826347][T15073] vlan2: entered promiscuous mode [ 1012.963571][T15079] CIFS: Unable to determine destination address [ 1013.140848][ T28] audit: type=1326 audit(1753089577.923:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15080 comm="syz.0.2675" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8461d8e9a9 code=0x0 [ 1013.291604][ T28] audit: type=1326 audit(1753089578.073:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15082 comm="syz.6.2676" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe3ae38e9a9 code=0x0 [ 1018.040038][ T28] audit: type=1326 audit(1753089582.793:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15125 comm="syz.5.2690" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faa15b8e9a9 code=0x0 [ 1018.710164][ T28] audit: type=1326 audit(1753089583.493:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15128 comm="syz.6.2689" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe3ae38e9a9 code=0x0 [ 1018.908738][T15136] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2686'. [ 1021.039620][T15162] overlayfs: failed to clone lowerpath [ 1023.977928][ T28] audit: type=1800 audit(1753089588.663:827): pid=15181 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2699" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1024.916703][ T28] audit: type=1326 audit(1753089589.703:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15194 comm="syz.5.2704" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faa15b8e9a9 code=0x0 [ 1027.688054][ T28] audit: type=1800 audit(1753089592.463:829): pid=15226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2713" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1029.121524][ T28] audit: type=1326 audit(1753089593.903:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15236 comm="syz.0.2716" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8461d8e9a9 code=0x0 [ 1031.202034][T15255] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2724'. [ 1031.212388][T15255] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2724'. [ 1034.150968][ T28] audit: type=1326 audit(1753089598.933:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15286 comm="syz.6.2731" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe3ae38e9a9 code=0x0 [ 1037.432900][T15324] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2740'. [ 1037.502324][ T28] audit: type=1326 audit(1753089602.293:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15323 comm="syz.0.2741" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8461d8e9a9 code=0x0 [ 1037.850015][ T28] audit: type=1326 audit(1753089602.633:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15332 comm="syz.5.2744" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faa15b8e9a9 code=0x0 [ 1041.872515][ T28] audit: type=1326 audit(1753089606.648:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15372 comm="syz.6.2754" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe3ae38e9a9 code=0x0 [ 1042.499534][ T28] audit: type=1326 audit(1753089607.278:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15381 comm="syz.4.2757" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f54c978e9a9 code=0x0 [ 1045.572151][ T28] audit: type=1326 audit(1753089610.348:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15419 comm="syz.4.2768" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f54c978e9a9 code=0x0 [ 1050.803210][T15489] delete_channel: no stack [ 1052.815395][T15506] bond0: (slave geneve2): Releasing active interface [ 1052.854727][T15506] geneve2: left promiscuous mode [ 1054.683842][T15536] delete_channel: no stack [ 1054.846433][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1056.341745][T15544] overlayfs: failed to clone lowerpath [ 1059.283446][T15577] delete_channel: no stack [ 1063.747476][T15617] delete_channel: no stack [ 1068.148269][T15666] delete_channel: no stack [ 1069.176367][T15679] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2836'. [ 1069.216142][T15679] netlink: 'syz.4.2836': attribute type 4 has an invalid length. [ 1071.813399][ T28] audit: type=1326 audit(1753089636.598:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15698 comm="syz.6.2842" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe3ae38e9a9 code=0x0 [ 1072.156586][T15705] delete_channel: no stack [ 1072.303772][T15710] netlink: 'syz.5.2846': attribute type 10 has an invalid length. [ 1072.312249][T15710] mac80211_hwsim hwsim13 wlan1: left allmulticast mode [ 1072.320325][T15710] net_ratelimit: 12 callbacks suppressed [ 1072.320345][T15710] wlan1: mtu less than device minimum [ 1072.490113][T15710] : (slave wlan1): Error -22 calling dev_set_mtu [ 1075.859138][T15733] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2851'. [ 1077.135611][T15738] delete_channel: no stack [ 1079.821429][T15768] netlink: 'syz.6.2862': attribute type 1 has an invalid length. [ 1080.937198][T15768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1081.131315][T15773] veth11: entered promiscuous mode [ 1081.198345][T15776] batman_adv: batadv0: Interface deactivated: dummy0 [ 1081.239228][T15776] batman_adv: batadv0: Removing interface: dummy0 [ 1082.341318][T15776] : (slave bond_slave_0): Releasing backup interface [ 1082.439028][T15776] : (slave bond_slave_1): Releasing backup interface [ 1082.465790][T15784] delete_channel: no stack [ 1083.487620][T15776] team0: Port device team_slave_0 removed [ 1083.851787][T15776] team0: Port device team_slave_1 removed [ 1083.867585][T15776] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1083.875856][T15776] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1083.887457][T15776] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1083.895849][T15776] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1083.970131][T15776] bond0: (slave geneve2): Releasing active interface [ 1083.995221][T15776] geneve2: left promiscuous mode [ 1084.026462][T15776] bond1: (slave gretap2): Releasing active interface [ 1084.092419][T15777] team0: Mode changed to "loadbalance" [ 1084.104427][T15778] netlink: 'syz.0.2863': attribute type 10 has an invalid length. [ 1084.164832][T15778] 8021q: adding VLAN 0 to HW filter on device  [ 1084.185082][T15778] team0: Port device  added [ 1085.415968][ T28] audit: type=1326 audit(1753089650.198:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15806 comm="syz.0.2871" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8461d8e9a9 code=0x0 [ 1088.051716][T15826] delete_channel: no stack [ 1088.102522][T15833] trusted_key: encrypted_key: insufficient parameters specified [ 1089.387955][ T28] audit: type=1326 audit(1753089654.168:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15845 comm="syz.4.2881" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f54c978e9a9 code=0x0 [ 1089.564287][T15855] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2884'. [ 1089.645251][T15857] netlink: 'syz.5.2884': attribute type 10 has an invalid length. [ 1089.671853][T15857] wlan1: mtu less than device minimum [ 1089.677313][T15857] : (slave wlan1): Error -22 calling dev_set_mtu [ 1090.923799][T15867] delete_channel: no stack [ 1092.647203][T15890] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2892'. [ 1095.349105][T15907] delete_channel: no stack [ 1100.562426][T15945] delete_channel: no stack [ 1106.450169][T15991] delete_channel: no stack [ 1106.501482][T15994] netlink: 'syz.4.2919': attribute type 10 has an invalid length. [ 1108.478225][T16020] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2925'. [ 1110.120848][ T28] audit: type=1326 audit(1753089674.898:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16033 comm="syz.4.2928" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f54c978e9a9 code=0x0 [ 1114.812259][T16061] Option 'TX¼÷Æ®€' to dns_resolver key: bad/missing value [ 1116.285675][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1126.262219][T16127] trusted_key: encrypted_key: insufficient parameters specified [ 1130.706426][T16152] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2956'. [ 1141.775702][T16223] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2975'. [ 1148.152849][T16273] ip6t_REJECT: ECHOREPLY is not supported [ 1152.073943][T16300] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1152.328402][T16307] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1153.068341][T16313] xt_TCPMSS: Only works on TCP SYN packets [ 1153.787847][T16321] netlink: 'syz.4.3001': attribute type 1 has an invalid length. [ 1154.318682][T16321] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1154.789856][T16326] bond2: (slave bridge7): making interface the new active one [ 1154.863800][T16326] bond2: (slave bridge7): Enslaving as an active interface with an up link [ 1154.909697][T16330] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3002'. [ 1154.976057][T16330] macvtap1: entered promiscuous mode [ 1155.005229][T16330] macvtap1: entered allmulticast mode [ 1155.031826][T16330] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1155.112459][T16321] macvlan2: entered promiscuous mode [ 1155.132851][T16321] macvlan2: entered allmulticast mode [ 1155.147283][T16321] bond2: entered promiscuous mode [ 1155.160256][T16321] bridge7: entered promiscuous mode [ 1155.176478][T16321] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1155.195627][T16321] bond2: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1155.228111][T16321] bond2: left promiscuous mode [ 1155.237905][T16321] bridge7: left promiscuous mode [ 1155.359334][T16333] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3002'. [ 1155.925908][T16350] ip6t_REJECT: ECHOREPLY is not supported [ 1157.227027][ T28] audit: type=1326 audit(1753089722.008:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16351 comm="syz.4.3010" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f54c978e9a9 code=0x0 [ 1158.893504][T16377] netlink: 'syz.5.3016': attribute type 1 has an invalid length. [ 1158.910721][T16377] netlink: 'syz.5.3016': attribute type 2 has an invalid length. [ 1159.153626][T16379] netlink: 'syz.6.3019': attribute type 1 has an invalid length. [ 1159.580378][T16383] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1159.610543][T16383] bond7: (slave bond8): making interface the new active one [ 1159.618576][T16383] bond7: (slave bond8): Enslaving as an active interface with an up link [ 1160.628618][T16379] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3019'. [ 1160.871233][T16379] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1161.343546][T16408] netlink: 156 bytes leftover after parsing attributes in process `syz.6.3025'. [ 1161.353042][T16408] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3025'. [ 1164.028710][T16439] delete_channel: no stack [ 1167.296073][T16472] delete_channel: no stack [ 1170.867614][T16508] delete_channel: no stack [ 1171.154221][T16515] netlink: 324 bytes leftover after parsing attributes in process `syz.6.3055'. [ 1171.163689][T16515] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3055'. [ 1173.954106][T16548] netlink: 'syz.0.3068': attribute type 10 has an invalid length. [ 1173.967587][T16548] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1177.763618][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1181.083341][T16616] netlink: 168 bytes leftover after parsing attributes in process `syz.6.3089'. [ 1181.460992][T16621] lo speed is unknown, defaulting to 1000 [ 1181.497208][T16621] dummy0 speed is unknown, defaulting to 1000 [ 1187.091917][T16671] veth1: left promiscuous mode [ 1187.096897][T16671] vlan0: entered promiscuous mode [ 1187.102083][T16671] veth1: entered promiscuous mode [ 1187.107392][T16671] vlan0: left allmulticast mode [ 1187.112665][T16671] veth1: left allmulticast mode [ 1187.273743][T13841] bond4: (slave vlan0): link status definitely down, disabling slave [ 1187.298217][T13841] bond4: now running without any active interface! [ 1195.705526][T16763] delete_channel: no stack [ 1195.935308][T16771] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3130'. [ 1196.055759][T16771] bond9: (slave gretap2): Enslaving as an active interface with an up link [ 1196.117558][T16771] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3130'. [ 1196.140034][T16771] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1198.967361][T16797] delete_channel: no stack [ 1203.116525][T16845] delete_channel: no stack [ 1203.944837][T16857] netlink: 'syz.4.3155': attribute type 10 has an invalid length. [ 1203.953677][T16857] hsr0: entered promiscuous mode [ 1203.961618][T16857] : (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1203.973467][T16857] : (slave hsr0): The slave device specified does not support setting the MAC address [ 1203.984984][T16857] : (slave hsr0): Error -95 calling set_mac_address [ 1205.460812][T16877] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3162'. [ 1208.888143][T16932] xt_connbytes: Forcing CT accounting to be enabled [ 1208.897233][T16932] --map-set only usable from mangle table [ 1209.217414][T16934] (null): rxe_set_mtu: Set mtu to 256 [ 1209.223370][T16934] lo speed is unknown, defaulting to 1000 [ 1209.235392][T16934] lo speed is unknown, defaulting to 1000 [ 1209.242299][T16934] lo speed is unknown, defaulting to 1000 [ 1209.907688][T16934] infiniband syz0: set down [ 1209.912323][T16934] infiniband syz0: added lo [ 1209.918377][T16934] syz0: rxe_create_cq: returned err = -12 [ 1209.924416][T16934] infiniband syz0: Couldn't create ib_mad CQ [ 1209.933080][T16934] infiniband syz0: Couldn't open port 1 [ 1209.975389][ T5777] lo speed is unknown, defaulting to 1000 [ 1210.023247][T16934] RDS/IB: syz0: added [ 1210.027350][T16934] smc: adding ib device syz0 with port count 1 [ 1210.033718][T16934] smc: ib device syz0 port 1 has pnetid [ 1210.042699][T16934] lo speed is unknown, defaulting to 1000 [ 1210.208381][T16934] lo speed is unknown, defaulting to 1000 [ 1210.330311][T16934] lo speed is unknown, defaulting to 1000 [ 1210.454052][T16934] lo speed is unknown, defaulting to 1000 [ 1210.650102][ T5790] lo speed is unknown, defaulting to 1000 [ 1213.438692][T16970] netlink: 'syz.0.3188': attribute type 10 has an invalid length. [ 1213.454780][T16970] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3188'. [ 1214.746972][T16970] team0: Port device geneve0 added [ 1216.446131][T16994] netlink: 116 bytes leftover after parsing attributes in process `syz.6.3194'. [ 1218.174134][T17018] PKCS7: Unknown OID: [4] 5.25.43183.11314.97.496.3.846527319083.2007.15776 [ 1218.184976][T17018] PKCS7: Only support pkcs7_signedData type [ 1219.112871][T17019] delete_channel: no stack [ 1232.123324][T17096] netlink: 324 bytes leftover after parsing attributes in process `syz.0.3221'. [ 1232.132814][T17096] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3221'. [ 1233.755541][T17104] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3222'. [ 1237.776118][T17146] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3235'. [ 1239.164205][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.522589][T17160] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3236'. [ 1240.274371][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805e591800: rx timeout, send abort [ 1240.283237][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805e593c00: rx timeout, send abort [ 1240.292316][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805e591800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1240.309349][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805e593c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1351.850510][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1351.857541][ C1] rcu: 0-...!: (1 GPs behind) idle=6304/1/0x4000000000000000 softirq=59634/59635 fqs=0 [ 1351.869527][ C1] rcu: (detected by 1, t=10502 jiffies, g=83209, q=29 ncpus=2) [ 1351.877221][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1351.882469][ C0] NMI backtrace for cpu 0 [ 1351.882486][ C0] CPU: 0 PID: 17205 Comm: syz.4.3248 Not tainted 6.6.99-syzkaller #0 [ 1351.882503][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1351.882513][ C0] RIP: 0010:__lock_acquire+0x250/0x7c80 [ 1351.882539][ C0] Code: 48 8b 44 24 20 4c 8d b0 e0 0a 00 00 48 8b 74 24 60 83 fe 31 0f 83 20 67 00 00 48 8d 04 b6 49 8d 54 c6 f8 49 89 d6 49 c1 ee 03 <43> 0f b6 04 06 84 c0 0f 85 29 67 00 00 48 83 7d 10 00 0f 84 df 00 [ 1351.882554][ C0] RSP: 0018:ffffc900000077a0 EFLAGS: 00000802 [ 1351.882569][ C0] RAX: 0000000000000005 RBX: 0000000000000000 RCX: 0000000000000000 [ 1351.882579][ C0] RDX: ffff88802d634700 RSI: 0000000000000001 RDI: ffffffff8d3d62c0 [ 1351.882590][ C0] RBP: ffffc900000079e8 R08: dffffc0000000000 R09: 0000000000000001 [ 1351.882602][ C0] R10: dffffc0000000000 R11: fffffbfff1c94f9e R12: 0000000000000001 [ 1351.882613][ C0] R13: 0000000000000000 R14: 1ffff11005ac68e0 R15: 0000000000000000 [ 1351.882623][ C0] FS: 00007f54ca5f36c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1351.882638][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1351.882649][ C0] CR2: 00007f54ca5b1d58 CR3: 00000000604cf000 CR4: 00000000003506f0 [ 1351.882664][ C0] Call Trace: [ 1351.882672][ C0] [ 1351.882688][ C0] ? mark_lock+0x94/0x320 [ 1351.882708][ C0] ? mark_lock+0x94/0x320 [ 1351.882727][ C0] ? mark_lock+0x94/0x320 [ 1351.882744][ C0] ? verify_lock_unused+0x140/0x140 [ 1351.882762][ C0] ? __lock_acquire+0x1334/0x7c80 [ 1351.882790][ C0] lock_acquire+0x197/0x410 [ 1351.882807][ C0] ? debug_objects_fill_pool+0x73/0x6b0 [ 1351.882830][ C0] ? verify_lock_unused+0x140/0x140 [ 1351.882850][ C0] ? debug_objects_fill_pool+0x73/0x6b0 [ 1351.882872][ C0] ? read_lock_is_recursive+0x20/0x20 [ 1351.882894][ C0] ? debug_objects_fill_pool+0x73/0x6b0 [ 1351.882916][ C0] debug_objects_fill_pool+0x92/0x6b0 [ 1351.882938][ C0] ? debug_objects_fill_pool+0x73/0x6b0 [ 1351.882962][ C0] ? debug_object_activate+0x4b0/0x4b0 [ 1351.882985][ C0] ? do_raw_spin_lock+0x121/0x2c0 [ 1351.883008][ C0] ? __rwlock_init+0x150/0x150 [ 1351.883027][ C0] ? advance_sched+0x9f9/0xc80 [ 1351.883043][ C0] ? advance_sched+0x9f9/0xc80 [ 1351.883061][ C0] debug_object_activate+0x36/0x4b0 [ 1351.883083][ C0] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 1351.883112][ C0] enqueue_hrtimer+0x30/0x370 [ 1351.883131][ C0] __hrtimer_run_queues+0x637/0xc40 [ 1351.883153][ C0] ? taprio_dequeue_from_txq+0x8f0/0x8f0 [ 1351.883173][ C0] ? hrtimer_interrupt+0x9c0/0x9c0 [ 1351.883190][ C0] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 1351.883215][ C0] hrtimer_interrupt+0x3c9/0x9c0 [ 1351.883245][ C0] __sysvec_apic_timer_interrupt+0xfb/0x3b0 [ 1351.883268][ C0] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 1351.883293][ C0] [ 1351.883298][ C0] [ 1351.883303][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1351.883338][ C0] RIP: 0010:lock_is_held_type+0x50/0x190 [ 1351.883361][ C0] Code: 3d e0 96 dd 03 00 0f 84 03 01 00 00 65 8b 05 2f 6f 95 75 85 c0 0f 85 f4 00 00 00 65 48 8b 1d 27 9f 96 75 83 bb dc 0a 00 00 00 <0f> 85 df 00 00 00 41 89 f7 49 89 fe 48 c7 04 24 00 00 00 00 9c 8f [ 1351.883374][ C0] RSP: 0018:ffffc90010f77b18 EFLAGS: 00000246 [ 1351.883387][ C0] RAX: 0000000000000000 RBX: ffff88802d633c00 RCX: ffff88802d633c00 [ 1351.883398][ C0] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: ffffffff8cd2fc00 [ 1351.883408][ C0] RBP: 00000000ffffffff R08: ffffffff8e4a7cef R09: 1ffffffff1c94f9d [ 1351.883419][ C0] R10: dffffc0000000000 R11: fffffbfff1c94f9e R12: 000000000000a2a4 [ 1351.883431][ C0] R13: dffffc0000000000 R14: 00002000000000c0 R15: dffffc0000000000 [ 1351.883454][ C0] __might_resched+0xa7/0x610 [ 1351.883477][ C0] ? __might_sleep+0xe0/0xe0 [ 1351.883496][ C0] ? __lock_acquire+0x7c80/0x7c80 [ 1351.883517][ C0] ? __might_fault+0xc6/0x120 [ 1351.883531][ C0] ? __might_fault+0xaa/0x120 [ 1351.883547][ C0] do_recvmmsg+0x53b/0x7d0 [ 1351.883577][ C0] ? __sys_recvmmsg+0x280/0x280 [ 1351.883606][ C0] ? __ia32_sys_get_robust_list+0x90/0x90 [ 1351.883621][ C0] ? rcu_read_lock_sched_held+0x8a/0x100 [ 1351.883646][ C0] __x64_sys_recvmmsg+0x191/0x240 [ 1351.883671][ C0] ? do_recvmmsg+0x7d0/0x7d0 [ 1351.883694][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 1351.883718][ C0] do_syscall_64+0x55/0xb0 [ 1351.883735][ C0] ? clear_bhb_loop+0x40/0x90 [ 1351.883749][ C0] ? clear_bhb_loop+0x40/0x90 [ 1351.883764][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1351.883790][ C0] RIP: 0033:0x7f54c978e9a9 [ 1351.883805][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1351.883817][ C0] RSP: 002b:00007f54ca5f3038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1351.883832][ C0] RAX: ffffffffffffffda RBX: 00007f54c99b6080 RCX: 00007f54c978e9a9 [ 1351.883843][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1351.883853][ C0] RBP: 00007f54c9810ca1 R08: 0000000000000000 R09: 0000000000000000 [ 1351.883863][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1351.883871][ C0] R13: 0000000000000000 R14: 00007f54c99b6080 R15: 00007ffe3d5ab548 [ 1351.883890][ C0] [ 1351.884463][ C1] rcu: rcu_preempt kthread starved for 10502 jiffies! g83209 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1352.400984][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1352.410985][ C1] rcu: RCU grace-period kthread stack dump: [ 1352.416894][ C1] task:rcu_preempt state:R running task stack:26568 pid:17 ppid:2 flags:0x00004000 [ 1352.427709][ C1] Call Trace: [ 1352.431013][ C1] [ 1352.434002][ C1] __schedule+0x14e2/0x4580 [ 1352.438580][ C1] ? _raw_spin_lock_bh+0x30/0x50 [ 1352.443574][ C1] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 1352.449514][ C1] ? asan.module_dtor+0x20/0x20 [ 1352.454445][ C1] ? enqueue_timer+0x225/0x530 [ 1352.459252][ C1] ? __mod_timer+0x984/0xdb0 [ 1352.463888][ C1] schedule+0xbd/0x170 [ 1352.467992][ C1] schedule_timeout+0x160/0x280 [ 1352.472882][ C1] ? console_conditional_schedule+0x40/0x40 [ 1352.478822][ C1] ? update_process_times+0x1b0/0x1b0 [ 1352.484244][ C1] ? prepare_to_swait_event+0x339/0x360 [ 1352.489829][ C1] rcu_gp_fqs_loop+0x302/0x1560 [ 1352.494713][ C1] ? rcu_gp_init+0x110e/0x1510 [ 1352.499525][ C1] ? rcu_gp_kthread+0x380/0x380 [ 1352.504423][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 1352.510440][ C1] ? rcu_gp_init+0x1510/0x1510 [ 1352.515252][ C1] ? rcu_gp_cleanup+0xb4c/0xca0 [ 1352.520135][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1352.525375][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 1352.530701][ C1] rcu_gp_kthread+0x99/0x380 [ 1352.535339][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 1352.540504][ C1] ? __kthread_parkme+0x7a/0x1c0 [ 1352.545489][ C1] ? __kthread_parkme+0x162/0x1c0 [ 1352.550559][ C1] kthread+0x2fa/0x390 [ 1352.554658][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 1352.559814][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1352.564436][ C1] ret_from_fork+0x48/0x80 [ 1352.569073][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1352.573696][ C1] ret_from_fork_asm+0x11/0x20 [ 1352.578518][ C1] [ 1352.581564][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1352.587909][ C1] CPU: 1 PID: 9446 Comm: kworker/u4:5 Not tainted 6.6.99-syzkaller #0 [ 1352.596177][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1352.606264][ C1] Workqueue: events_unbound toggle_allocation_gate [ 1352.612814][ C1] RIP: 0010:smp_call_function_many_cond+0xddf/0x1130 [ 1352.619525][ C1] Code: 45 8b 2c 24 44 89 ee 83 e6 01 31 ff e8 ea d6 0a 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 25 d3 0a 00 eb 38 f3 90 <42> 0f b6 04 2b 84 c0 75 11 41 f7 04 24 01 00 00 00 74 1e e8 09 d3 [ 1352.639164][ C1] RSP: 0018:ffffc900145af780 EFLAGS: 00000293 [ 1352.645264][ C1] RAX: ffffffff817ac327 RBX: 1ffff110171c87d9 RCX: ffff8880305d1e00 [ 1352.653262][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1352.661258][ C1] RBP: ffffc900145af900 R08: ffffffff90da2527 R09: 1ffffffff21b44a4 [ 1352.669257][ C1] R10: dffffc0000000000 R11: fffffbfff21b44a5 R12: ffff8880b8e43ec8 [ 1352.677254][ C1] R13: dffffc0000000000 R14: ffff8880b8f3d588 R15: 0000000000000000 [ 1352.685250][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1352.694212][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1352.700830][ C1] CR2: 0000001b31119ff8 CR3: 000000000cb30000 CR4: 00000000003506e0 [ 1352.708835][ C1] Call Trace: [ 1352.712140][ C1] [ 1352.715104][ C1] ? text_poke_sync+0x30/0x30 [ 1352.719821][ C1] ? smp_call_function_many+0x40/0x40 [ 1352.725483][ C1] ? text_poke+0xc0/0xc0 [ 1352.729771][ C1] ? __mutex_trylock_common+0x153/0x250 [ 1352.735356][ C1] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1352.741558][ C1] ? text_poke_sync+0x30/0x30 [ 1352.746267][ C1] on_each_cpu_cond_mask+0x3f/0x80 [ 1352.751503][ C1] ? kmem_cache_alloc_bulk+0x12a/0x5b0 [ 1352.757009][ C1] text_poke_bp_batch+0x318/0x930 [ 1352.762076][ C1] ? text_poke_loc_init+0x820/0x820 [ 1352.767304][ C1] ? mutex_lock_nested+0x20/0x20 [ 1352.772280][ C1] ? text_poke_queue+0x140/0x190 [ 1352.777260][ C1] ? arch_jump_label_transform_queue+0x93/0x100 [ 1352.783550][ C1] text_poke_finish+0x30/0x50 [ 1352.788278][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 1352.794322][ C1] static_key_enable_cpuslocked+0x123/0x240 [ 1352.800267][ C1] ? process_scheduled_works+0x957/0x15b0 [ 1352.806022][ C1] static_key_enable+0x1a/0x20 [ 1352.810825][ C1] toggle_allocation_gate+0xaa/0x250 [ 1352.816158][ C1] ? show_object+0x70/0x70 [ 1352.820618][ C1] ? read_lock_is_recursive+0x20/0x20 [ 1352.826034][ C1] ? process_scheduled_works+0x957/0x15b0 [ 1352.831792][ C1] ? process_scheduled_works+0x957/0x15b0 [ 1352.837545][ C1] process_scheduled_works+0xa45/0x15b0 [ 1352.843154][ C1] ? assign_work+0x400/0x400 [ 1352.847785][ C1] ? assign_work+0x39e/0x400 [ 1352.852416][ C1] worker_thread+0xa55/0xfc0 [ 1352.857074][ C1] kthread+0x2fa/0x390 [ 1352.861181][ C1] ? pr_cont_work+0x560/0x560 [ 1352.865893][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1352.870555][ C1] ret_from_fork+0x48/0x80 [ 1352.875032][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1352.879753][ C1] ret_from_fork_asm+0x11/0x20 [ 1352.884585][ C1]