last executing test programs: 12.804134137s ago: executing program 1 (id=6021): syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x30800, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00'}) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x80002, 0x4) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wlan0\x00'}}]}, 0x38}}, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000000414010000000000020000000800010000000000080003"], 0x20}}, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3}, 0x8, 0xa20, 0x0, 0x48000000, 0x0, 0x0, 0x0}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0xa1798b1747472e26, 0x0) preadv(r0, &(0x7f00000028c0)=[{&(0x7f0000002840)=""/82, 0x52}], 0x1, 0x202, 0x6) 11.576617658s ago: executing program 1 (id=6024): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(&(0x7f0000000180)=@sg0, &(0x7f0000000040)='.\x00', &(0x7f0000000100)='ecryptfs\x00', 0x0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x1000, 0x6}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$BLKPG(r5, 0x1269, &(0x7f0000000040)={0x1, 0x0, 0x98, &(0x7f0000000140)={0x8000000, 0x1000, 0x1}}) socket(0x2b, 0x80801, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0x541b, 0x0) syz_mount_image$hfs(&(0x7f0000000100), &(0x7f00000062c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, &(0x7f0000000a80)=ANY=[@ANYBLOB="747970653d704351852c636f6465706167653d63703836332c00000000746f723db84f842468f8c5568bcf21a304fee0a339572c6469725f756d61736b3d30303030303030313030303030303030303030303030313000"], 0x1, 0x2e6, &(0x7f00000027c0)="$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") openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000004040)={0x24, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x3e}]}, 0x24}}, 0x8800) 10.30041795s ago: executing program 1 (id=6027): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="5300030002"], 0x8) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000140)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x34}}}, 0x1e) connect$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) ioctl$XFS_IOC_FREE_EOFBLOCKS(r3, 0x8080583a, &(0x7f0000000480)={0x8, 0x7ff, 0x19cb, 0x0, 0x8001, 0x0, 0x2}) bind$bt_hci(r4, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000015c0)=ANY=[@ANYBLOB="200000002c00070100000000ffdb25017c0000080001800400060004000280"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c050) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000000)={0x0, 0x9, "be5f21", 0x8, 0x80}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x6, 0x4, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000008000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8a0900000000007b04d39118297c253db64faf25bfa200000000000000b70400000000000085000049fb1930be1a94a6e3b576392c6bb647cbe2954985d3a1ad2d1bcf7c85357c4e6b3741b90718b6633c7f6d43ad285a418a1dbe75004a1d585c37ddbe11383ec0716a0bb3bd6bc054c522c58c7b47a6ef2cfb51878be568fb0ede1b614a280bfa9446694da00894e4649c9e192e05fd21ef5eb49c421fea120f5fd2b62a37b994fbf33b1312f370c702"], &(0x7f0000000240)='GPL\x00', 0x4, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0001, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[], &(0x7f0000000f40)=""/4089, 0x3f, 0xff9, 0x2}, 0x28) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r8, &(0x7f0000000200)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff, 0xec37413816d5861d}, 0xe) ioctl$PPPIOCATTCHAN(r7, 0x40047438, &(0x7f0000000340)=0x1) write$ppp(r7, &(0x7f0000000700)="b068aa", 0x3) 10.248247142s ago: executing program 0 (id=6028): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x7, 0x4, 0x3c8, 0x1ec, 0x0, 0x0, 0x2e8, 0x2e8, 0x2e8, 0x4, 0x0, {[{{@arp={@dev, @multicast2, 0x0, 0x0, 0x0, 0x0, {@empty, {[0xff, 0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x1, 0x0, 0xfffe, 0x0, 'veth0_to_hsr\x00', 'syz_tun\x00', {}, {}, 0x2}, 0xbc, 0xe0}, @unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x2}}}, {{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@remote, @empty, @remote}}}, {{@uncond, 0xbc, 0xfc}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "9695d92849c79fac2d070731112f73924a493f1567e5d8b4cd2c5f35f67b"}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x414) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x100000}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x58}}, 0x8000) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000400)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x6, 0x4, 0x3, 0x25, 0x7, 0x67, 0xfffd, 0x3, 0x2, 0x0, @local, @private=0xa010101, {[@timestamp={0x44, 0x0, 0x16, 0x0, 0x6}]}}}}}}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x0, @local}, {0x2, 0x4e23, @loopback}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r5, &(0x7f0000000000), 0xd) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001880)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x20008804}, 0xc810) 10.153229114s ago: executing program 3 (id=6029): r0 = socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x1011f, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$revoke(0x3, 0x0) add_key$user(&(0x7f0000000680), &(0x7f00000006c0)={'syz', 0x3}, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r4, 0x1) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x13, 0x0, &(0x7f0000000100)) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x598, 0xe0, 0xe0, 0x0, 0x0, 0x1c0, 0x520, 0x520, 0x520, 0x520, 0x520, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe0, 0x0, {0x7a00000010000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x1}, {0xffffffffffffffff, 0x4, 0x1}, {0xffffffffffffffff, 0x4}, 0x5, 0x7ff}}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0xa}, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0x0, 0xffffffff, 0xff], 'macvlan0\x00', 'veth1_vlan\x00', {}, {}, 0x6, 0x1, 0x4}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffff}, {}, {0x87, 0x0, 0x7}}}}, {{@uncond, 0x0, 0xd8, 0x100, 0x48000000, {}, [@common=@inet=@udp={{0x30}, {[0x4e20, 0x4e23], [0x4e21, 0x4e21]}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty, @ipv4=@empty, 0x2c, 0x16, 0x4}}}, {{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@dst={{0x48}, {0x7ff, 0x2, 0x1, [0xff, 0x4239, 0x1, 0x8001, 0xb1, 0xfff5, 0x5, 0xd, 0xfff, 0x3, 0xb, 0xa, 0x5, 0x10, 0x2, 0xc], 0xd}}]}, @HL={0x28, 'HL\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5f8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) unshare(0x22020600) syz_open_dev$usbfs(0x0, 0x9, 0x101301) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r7 = fsmount(r6, 0x0, 0x0) r8 = openat$cgroup(r7, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r8}}, 0x58) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) 8.699352551s ago: executing program 1 (id=6030): r0 = socket(0xa, 0x3, 0x3a) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) statx(0xffffffffffffffff, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, 0x0) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000001000/0x3000)=nil, 0x3000, &(0x7f0000000100)='autofs\x00') r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x175a978679bbbe1d, 0x80a0a1240160183d) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000, 0x4) renameat(r2, &(0x7f0000000080)='./file0\x00', r3, &(0x7f0000000180)='./file1\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x1c}}, 0x40000) mount(0x0, &(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000000)='tmpfs\x00', 0x2000008, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) 8.698942351s ago: executing program 3 (id=6031): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000008c0)='./file1\x00', 0x800010, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0xf5, 0x2f4, &(0x7f0000001000)="$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") sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0xa, 0x4, &(0x7f0000000700)=ANY=[@ANYRES16=r0], 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x8}, 0x94) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) socket$packet(0x11, 0x3, 0x300) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="04021d"], 0x20) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newsa={0x148, 0x10, 0x1b020ba487bfd163, 0x0, 0x0, {{@in6=@mcast1, @in6=@local}, {@in6=@private1, 0x0, 0x33}, @in6=@empty, {0x7, 0x0, 0x4, 0x1, 0xb, 0x0, 0xffffffffffffffff}, {}, {}, 0x3, 0x0, 0xa}, [@algo_auth={0x56, 0x1, {{'cmac(aes)\x00'}, 0x70, "f76c53a22efbe5b37da0debc7f83"}}]}, 0x148}, 0x1, 0x0, 0x0, 0x40000}, 0x4004) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x5e0, 0x0, 0x0, 0x428, 0x428, 0x428, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28, 'socket\x00', 0x3}}]}, @common=@unspec=@CONNSECMARK={0x28}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x640) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000040)=0xff) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x11e) 8.505210875s ago: executing program 3 (id=6032): r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x400c081}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000200)=@filter={'filter\x00', 0xc, 0x4, 0x2b8, 0xffffffff, 0x220, 0x130, 0x0, 0x98, 0xffffffff, 0x220, 0x220, 0x220, 0x98, 0x4, 0x0, {[{{@ip={@local, @loopback, 0xff, 0xffffff00, 'dummy0\x00', 'veth1_macvtap\x00', {}, {}, 0x8, 0x2, 0x46}, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@icmp={{0x28}, {0x11}}, @common=@addrtype={{0x20}, {0x150, 0x22, 0x0, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) get_mempolicy(0x0, 0xfffffffffffffffe, 0x2f9, &(0x7f00005e2000/0x1000)=nil, 0x2) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fchmod(r4, 0x208) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x240448c8) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040), 0xc) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000200), 0x2, r6}) ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000000500)={0x200, 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000040)}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x2c, 0x107, 0x70bd2b, 0x25dfdbff, {0x4, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) 8.173935404s ago: executing program 0 (id=6033): prlimit64(0x0, 0xe, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000380)=@filter={'filter\x00', 0x42, 0x4, 0x2c8, 0xffffffff, 0x98, 0x198, 0x98, 0xffffffff, 0xffffffff, 0x230, 0x230, 0x230, 0xffffffff, 0x4, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0x0, 'netpci0\x00', 'syzkaller1\x00', {}, {}, 0x6, 0x1, 0x61}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'veth1_macvtap\x00', 'ip6_vti0\x00', {}, {}, 0x88}, 0x0, 0xa0, 0x100, 0x0, {0x60010000}, [@common=@unspec=@connmark={{0x30}, {0x0, 0x0, 0x41}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0x0, 0xfffc, [0x16, 0x0, 0x0, 0x20, 0x1c, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2]}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) socket$inet6(0xa, 0x80002, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) setxattr$incfs_metadata(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000024d00)={0x0, 0x0, &(0x7f0000024cc0)={&(0x7f0000004200)=@delchain={0x170, 0x65, 0x200, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x5, 0xc}, {0xfff3, 0x4}, {0x0, 0x2}}, [@f_tcindex={{0xc}, {0x140, 0x2, [@TCA_TCINDEX_ACT={0x13c, 0x7, [@m_vlan={0x108, 0x16, 0x0, 0x0, {{0x9}, {0x4}, {0xda, 0x6, "f88972b11ae1f54c32072d8852f83dce1200fae48cdd47580491b3464df81ea2356c5ae449614c2ad0a6f102d47622665f55d582e54e94750cf3caca5797cd0855886dc913412478de26bc51898186fb153a252d65c849849b48ec8ebec71bd96cd0cfebdb3dc6899b8669ddd007f06888e398a5b1ebc9d8bc2a03083a899050d24dab394fce9a6391ce9085db859988a09d21d1026bb3980d2593302bbf456aa01e22d4e64be134fbd8c7653ca89413645fb68d2776dd5a9ff23ed61a15139d82f7de1aee3b13c48f18cb8dc7c39dd9c924b24b96d1"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_ctinfo={0x30, 0x4, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x5}}}}]}]}}]}, 0x170}, 0x1, 0x0, 0x0, 0x810}, 0x41) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) 7.011043173s ago: executing program 0 (id=6035): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000280)={[{@errors_remount}, {@nomblk_io_submit}, {@noblock_validity}, {@nodiscard}, {@nolazytime}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@uid_gt={'uid>', 0xee01}}, {@func={'func', 0x3d, 'CREDS_CHECK'}}]}, 0x1, 0x492, &(0x7f0000000840)="$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") openat(0xffffffffffffff9c, 0x0, 0x143042, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0xb8) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000008}, 0x44080) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r3, &(0x7f0000000300)="a0", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @empty, 0x9}, 0x1c) shutdown(r3, 0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000440)={&(0x7f0000a5f000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/125, 0x7d, 0x1, 0x0}, &(0x7f0000000480)=0x40) syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x225000, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], 0x6, 0xc38, &(0x7f0000001140)="$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") syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_ADD_TO_RESOLV_LIST={{0x9}, 0x10}}}, 0x7) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000280)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00003bf000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0}, 0x68) io_setup(0xbf, &(0x7f0000000100)=0x0) io_submit(r4, 0x0, 0x0) 6.607106943s ago: executing program 2 (id=6036): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r1) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000000c0)={'wpan1\x00'}) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x14, r2, 0x200, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x24010844}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), r3) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000009c0)={0x0}, 0x1, 0x0, 0x0, 0x8004000}, 0x4008804) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000032680)=""/102400, 0x19000) setxattr$incfs_metadata(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r8 = dup2(r7, r7) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5393, &(0x7f0000000000)) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x68, r4, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x4}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x8084}, 0x20040000) 6.238713503s ago: executing program 1 (id=6037): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRESDEC], 0x52) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x50) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x810, &(0x7f0000000240)=ANY=[], 0xfd, 0x150c, &(0x7f0000002d40)="$eJzs3Am4jlX3MPC19t43x8nwJJnvtdfNkwybJAklyZAkSUjmhCRJkiRxyJSEJGQ8ScYTkimddMzzkDnp5JUkSUhIsr/rNHz+vcPX+75//8/7fWf9ruu+7OW+177XPut6zj1c13m+6T6iZpNa1RoyM/w79O8D/PWfJABIAIDBAJALAAIAKJ+7fO6M/dk0Jv1bJxH/QxrNutIViCtJ+p+5Sf8zN+l/5ib9z9yk/5mb9D9zk/5nbtJ/ITK1lAJXy5Z5N3n///849d9Jlut/poD/aIf0//83+l86WvqfuUn/Mzfpf+Ym/c/MgitdgLjC5POfuUn/hcjULvs75Q3nrvQ7bdn+hU0IIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhPi/4Jy/xADA7+MrXZcQQgghhBBCCCEuH//ula5ACCGEEEIIIYQQ//MQFGgwEEAWyAoJkA0S4SrIDjkgJ+SCGFwNueEayAPXQl7IB/mhABSEQlAYQiCwwBBBESgKcbgOisH1UBxKQEkoBQ5KQxm4AcrCjVAOboLycDNUgFugIlT65ZwZboeqcAdUgzuhOtSAmlAL7oLacDfUgXugLtwL9eA+qA/3QwN4ABpCI2gMD0ITeAiaQjNoDi2gJbSC1n+Sn5zr7+U/D73gBegNfSAJ+kI/eBH6wwAYCINgMLwEQ+BlGAqvwDAYDiPgVRgJr8EoeB1GwxgYC2/AOBgPE2AiTILJkAxvwhR4C6bC2w/lgOkwA2bCLJgNKfAOzIG5MA/ehfnwHiyA5GyLYDEsgfdhKXwAqfAhLIOPIA2WwwpYCatgNayBtbAO1sMG2AibYDNsga2wDT6G7bADdsIu2A17YC98AvvgU9gPn0E6fv4v5p/9Yz70QEBAhQoNGsyCWTABEzAREzE7ZsecmBNjGMPcmBvzYB7Mi3kxP+bHJCyIhbEwEhIyMhbBIhjHOBbDYlgci2NJLIkOHZbBMlgWb8RyWA7LY3msgBWwIlbCSngr3opVsApWxapYDathdayONbEm3oV34d1YB+tgXayL9bAe1sf62AAbYENsiI2xMTbBJtgUm2JzbI4tsSW2xtbYBttgW2yL7bE9dsAO2BE7YifshJ2xM3bBLtgVu2I37IbdsTv2wOfwOXwen8cX8AXsg9VVX+yH/bA/9seBOAgH4Us4BF/Gl/EVHIbDcQS+iq/iazgKz+BoHINjcSxWUeNxAk5EVpMxGZMxK0zBqTgVp+F0nI4zcRbOxhRMwTk4F+fiuzgf38P3cCEuxMW4BJfgUvwAUzEVl+FZTMPluAJX4ipcjatwLa7DtbgBN+IG3IybcStuxY/xY9yBO3AX7sI9uAc/wU/wU/wUh2E6puMBPIAH8SAewkN4GA/jETyCR/EoHsNjeByP4wk8iafwJJ7G03gGz+I5ADiP5/ECXsCLeDHjw68yGGVUFpVFJagElagSVXaVXeVUOVVMxVRulVvlUXlUXpVX5Vf5VUFVUBVWhRUpUqwiVUQVUXEVV8VUMVVcFVclVUnllFNlVBlVVpVV5VQ5VV7drCqoW1RFVUm1c7eqW1UV1d5VVXeoaqqaqq5qqJqqlqqlaqvaqo6qo+qquqqeqqfqq/tVA9UXB2IjldGZJmo4NlUjsLlqoVqqVuo1fFi1UaOwrWqn2qtH1RgcjR1VG9dJPaE6qwnYRT2lJuLTqpuajN3Vs6qHek71VM+rXqqt6636qGlZ+6p+aib2VwPUQDVIzcEaKqNjNdUr6vmsw9UI9apajK+pUep1NVqNUWPVG2qcGq8mqIlqkpqsktWbaop6S01Vb6tparqaoWaqWWq2SlHvqDlqrpqn3lXz1XtqgVqoFqnFaol6Xy1VH6hU9aFapj5SaWq5WqFWqlVqtVqj1qp1ar3aoDaqTWqz2qK2qm3qY7Vd7VA71S61W+1Re9Unap/6VO1Xn6l09bk6oP6iDqov1CH1pTqsvlJH1NfqqPpGHVPfquPqO3VCnVSn1PfqtPpBnVFn1Tn1ozqvflIX1M/qovIKNGqltTY60Fl0Vp2gs+lEfZXOrnPonDqXjumrdW59jc6jr9V5dT6d3xTQBXUhXViHmrTVrCNdRBfVcX2dLqav18V1CV1Sl9JOl9Zl9A26rL5Rl9M36fL6Zl1B36Ir6kq6sgd9m66ib9dV9R26mr5TV9c1dE1dS9+la+u7dR19j66r79X19H26vr5fN9AP6Ia6kW6sH9RN9EO6qW6mm+sWuqVupVvrh3Ub/Yhuq9vp9vpR3UE/pjvqx3Un/YTurJ/UXfRTuqt+WnfTz+ju+lndQz+ne+qf9UXtdW/dRyfpvrqfflH31wP0QD1ID9Yv6SH6ZT1Uv6KH6eF6hH5Vj9Sv6VH6dT1aj9Fj9Rt6nB6vJ+iJepKerJP1m3qKfktP1W/raXq6nqFn6ll6th7420zz/on8t/5O/tBfzr5Vb9Mf6+16h96pd+ndeo/eq/fqfXqf3q/363Sdrg/oA/qgPqgP6UP6sD6sj+gj+qg+qo/pY/q4Pq5P6JP6R/29Pq1/0Gf0WX1W/6jP6/P6wm8/AzBolNHGmMBkMVlNgslmEs1VJrvJYXKaXCZmrja5zTUmj7nW5DX5TH5TwBQ0hUxhExoy1rCJTBFT1MTNdaaYud4UNyVMSVPKOFPalDE3/Lfz/6y+1qa1aWPamLamrWlv2psOpoPpaDqaTqaT6Ww6my6mi+lquppuppvpbrqbHqaH6Wl6ml6ml+ltepskk2T6mRdNfzPADDSDzGDzkhlihpihZqgZZoaZEWaEGWlGmlFmlBltRpuxZqwZZ8aZCWaCmWQmmWSfy0wxU8xUM9VMM9PMjMG5zCwzy6SYFDPHzDHzzDwz38w3C8wCs8gsMkvMErPULDWpJtUsM8tMmllulpuVZqVZbVabtWatWW/Wm41mo9lsNps0s81sM9vNdrPT7DS7zW6z1+w1+8w+s9/sN+km3RwwB8xBc9AcMofMYXPYHDFHzFFz1Bwzx8xxc9ycMCfMKXPKnDanzRlzxpwz58x5c95cMBfMRXMx47YvUIEKTGCCLEGWICFICBKDxCB7kD3IGeQMYkEsyB3kDvIE1wZ5g3xB/qBAUDAoFBQOwoACG3AQBUWCokE8uC4oFlwfFA9KBCWDUoELSgdlghuCssGNQbngpqB8cHNQIbglqBhUCioHtwa3BVWC24OqwR1BteDOoHpQI6gZ1AruCmoHdwd1gnuCusG9Qb3gvqB+cH/QIHggaBg0ChoHDwZNgoeCpkGzoHnQImgZtApaX9b5vT+T7xHXO+wTJoV9w37hi2H/cEA4MBwUDg5fCoeEL4dDw1fCYeHwcET4ajgyfC0cFb4ejg7HhGPDN8Jx4fhwQjgxnBRODpPDN8Mp4Vvh1PDtcFo4PZwRzAxnhbPDlPCdcE44N5wXvhvOD98LF4QLw0Xh4hB/vSWG1PDDcFn4UZgWLg9XhCvDVeHqcE24NlwXrg83hBvDTeHm8kN+PTTcHu4Id4a7wt3hnnBv+Em4L/w03B9+FqaHn4cHwr+EB8MvwkPhl+Hh8KvwSPh1eDT8JjwWfhseD78LT4Qnw1Ph9+Hp8IfwTHg2PBf+GJ4PfwovhD+HF0OfcXOfcXknQ4ayUBZKoARKpETKTtkpJ+WkGMUoN+WmPJSH8lJeyk/5qSAVpMJUmDIwMRWhIhSnOBWjYlScilNJKkmOHJWhMlSWylI5KkflqTxVoApUkSpSZapMt9FtdDvdTnfQHXQn3Uk1qAbVolpUm2pTHapDdaku1aN6VJ/qUwNqQA2pITWmxtSEmlBTakrNqTm1pJbUmlpTG2pDbakttaf21IE6UEfqSJ2oE3WmztSFulBX6krdqBt1p+7Ug3pQT+pJvagX9abelERJ1I/6UX/qTwNpIA2mwTSEhtBQGkrDaBiNoBE0kkbSKBpFo2kMjaU3aByNpwk0kSbRZEqmZJpCU2gqTaVpNI1m0AyaRbMohVJoDs2heTSP5tN8WkALaBEtoiW0hJbSUkqlVFpGyyiN0mgFraBVtIrW0BpaR+toA22gTbSJttAW2kbbaDttp520k3bTbtpLe2kf7aP9tJ/SKZ0O0AFEOkiH6BAdpsN0hI7QUTpKx+gYHafjdIJO0Ck6RafpNJ2hM3SOztF5+oku0M90kTwl2Gw20V5ls9scNqfNZf86zm8L2IK2kC1sQ5vX5vtDTNba4raELWlLWWdL2zL2hr+JK9pKtrK91d5mq9jbbVVb0WaD/xrXtnfbOvYeW9fea2vZu/4Q17P32fr2IdvANrMNbQvb2LayTexDtqltZpvbFralbWU72MdsR/u47WSfsJ3tk38TL7Uf2HV2vd1gN9p99lN7zv5oj9pv7Hn7k+1t+9jB9iU7xL5sh9pX7DA7/I8xgB1r37Dj7Hg7wU60k+zkv4ln2Jl2lp1tU+w7do6d+zfxEvu+nW9T7QK70C6yi3+JM2pKtR/aZfYjm2aX2xV2pV1lV9s1du3/rnWl3Wy32K12r/3Ebrc77E67y+62e36JM9ax335m0+3n9oj92h60X9hD9pg9bL/6Jc5Y3zH7rT1uv7Mn7El7yn5vT9sf7Bl79pf1Z6z9e/uzvWi9BUZWrNlwwFk4KydwNk7kqzg75+CcnItjfDXn5ms4D1/LeTkf5+cCXJALcWEOmdgyc8RFuCjH+TouxtdzcS7BJbkUOy7NZfgGLss3cjm+icvzzVyBb+GKXIkr8618G1fh27kq38HV+E6uzjW4Jtfiu7g23811+B6uy/dyPb6P6/P93IAf4IbciBvzg9yEH+Km3Iybcwtuya24NT/MbfgRbsvtuD0/yh34Me7Ij3MnfoI785PchZ/irvw0d+NnuDs/yz34Oe7Jz3MvfoF7cx9O4r7cj1/k/jyAB/IgHswv8RB+mYfyKzyMh/MIfpVH8ms8il/n0TyGx/IbPI7H8wSeyJN4Mifzm+2m8Fs8ld/maTydZ/BMnsWzOYXf4Tk8l+fxuzyf3+MFvJAX8WJewu/z0oueU/lDXsYfcRov5xW8klfxal7Da3kdr+cNvJE38Wbewlt5G3/M23kH7+RdvJv38F7+hPfxp7yfP+N0/pwP8F/4IH/Bh/hLPsxf8RH+mo/yN3yMv+Xj/B2f4JN8ir/n0/wDn+GzfI5/5PP8E1/gn/kie4YIIxXpyERBlCXKGiVE2aLE6Kooe5QjyhnlimLR1VHu6JooT3RtlDfKF+WPCkQFo0JR4SiMKLIRR1FUJCoaxaPromLR9VHxqERUMioVuah0VCa6ISob3RiVi26Kykc3RxWiW6KKUaWocnRrdFtUJbo9qhrdEVWL7oyqRzWimlGt6K6odnR3VCe6J6ob3RuVi+6L6kf3Rw2iB6KGUaOocfRg1CR6KGoaNYuaRy2illGrqHX0cNQmeiRqG7WL2kePRh2ix6KO0eNRp+iJqHP05KX9JYJfr6Z/tT8p6hvp396Q3aMXxRfHl8Tfjy+NfxBPjX8YXxb/KJ4WXx5fEV8ZXxVfHV8TXxtfF18f3xDfGN8U3xzfEt8a975WVnCY8SAMxgUui8vqElw2l+iuctldDpfT5XIxd7XL7a5xedy1Lq/L5/K7Aq6gK+QKu9CRs45d5Iq4oi7urnPF3PWuuCvhSrpSzrnSroxr5Vq71q6Ne8S1de1ce/eoe9Q95h5zjyf8Vrjr4p5yXd3Trpt7xj3jnnU93HOup3ve9XIvuN6uj0tySa6f6+f6u/5uoBvoBrvBbogb4oa6oW6YG+ZGuBFupBvpRrlRbrQb7ca6sW6cG+cmuAlukpvkkl2ym+KmuKluqpvmprkZboab5Wa5FJfi5rg5bp6b5+a7+W6BW+AWuUVuiVvilrqlLtWlumVumUtzaW6FW+FWuVVujVvj1rl1boPb4Da5TW6L2+K2uW1uu9vudrqdbrfb7fa6vW6f2+f2u/0u3aW7A+6AO+gOukPuS3fYfeWOuK/dUfeNO+a+dcfdd+6EO+lOOa9Pux/cGXfWnXM/uvPuJ3fB/ewuOu+SY2/GpsTeik2NvR2bFpsemxGbGZsVmx1Lib0TmxObG5sXezc2PxfEFsQWxhYFEFsSez+2NPZBLDX2YWxZ7KNYWmx5bEVsZWxVbHXM+0LbI1/EF/Vxf50v5q/3xX0JX9KX8s6X9mX8Db6sv9GX8zf58v5mX8Hf4iv6Sr6yb+ab+xa+pW/lW/uHfRv/iG/r2/n2/lHfwT/mO/rHfSf/hO/sn/Rd/FO+q3/ad/PP+O7+2fd+67Lv5V/wvX0fn+T7+n7+Rd/fD/AD/SA/2L/kh/iX/VD/ih/mh/sR/lU/0r/mR/nX/Wg/xo/1b/hxfryf4Cf6SX6yT/Zv+in+LT/Vv+2n+el+hp/pZ/nZPsW/4+f4uX6ef9fP9+/5BX6hX+QX+yX+fb/Uf+BT/Yd+mf/Ip/nlfoVf6Vf51X6NX+vX+fV+g9/oN/nNfovf6rf5j/12v8Pv9Lv8br/H7/Wf+H3+U7/ff+bT/ef+gP+LP+i/8If8l/6w/8of8V/7o/4bf8x/64/77/wJf9Kf8t/70/4Hf8af9ef8j/68/8lf8D/7i/I3a0IIIYQQ/xT9J/v7/p3/U79tGfoBQI4dBQ7/9Zyb8v46HqD2dY4BwBN9ujf6fWvUKCkp6bdj09pAUHQhAMQu5f/y/QO/xcuhPTwGnaAdlP279Q1QlX+57/uH82sI4jcDJAJk+z0n4/EoEf56/hv/wfzN3uc/m38hQPGil3IyTvR7fGn+cv9g/j0d/mT+bF8kA7T9LznZ4VJ8af4y8Ag8CZ3+cKQQQgghhBBCCPGrAep8jz97vs14Pi9oLuVkhUvxnz2f/4mql2MNQgghhBBCCCGE+D97+rmejz/cqVO7rpdl0BYALuuEl2eQ9T+jjP+AAQLAf0AZMvjPH1zp30xCCCGEEEKIy+3STf+VrkQIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhMi8/v1vCFP/9MFXeo1CCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCHElfa/AgAA///mhlPZ") truncate(0x0, 0x3000000) lchown(&(0x7f0000000000)='./file1\x00', 0x0, 0xee00) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) connect$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x3, {0x4e22, 0x4}}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) llistxattr(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x204000, &(0x7f0000000300)={[{@block_validity}, {@noinit_itable}, {@data_err_abort}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@dioread_lock}, {@nogrpid}, {@inlinecrypt}, {@norecovery}]}, 0x7, 0x577, &(0x7f0000000640)="$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") r3 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x115) fallocate(r3, 0x0, 0x0, 0x8800000) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000010000)="0358b660a7ec9b", 0x7}], 0x1, 0x5000, 0xa68, 0x69aa4dc63df2b560) 5.500271772s ago: executing program 2 (id=6038): r0 = epoll_create1(0x80000) mkdir(0x0, 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='dir0/trace_marker\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs_dir/buffer_size_kb\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='10', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./tracefs_dir/free_buffer\x00', 0x1, 0x0) close(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) dup3(r0, r0, 0x80000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200), 0x0, 0xffffffffffffffff) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000003b80), r5) sendmsg$NFC_CMD_DISABLE_SE(r5, &(0x7f0000003c80)={0x0, 0x0, &(0x7f0000003c40)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="01002bbd7000fddbdf255200000008000100", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000018) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r4, &(0x7f0000000040)={0xa0000004}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r0, &(0x7f0000000440)={0xa0000001}) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) 1.616122969s ago: executing program 0 (id=6039): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="5300030002"], 0x8) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000140)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x34}}}, 0x1e) connect$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) ioctl$XFS_IOC_FREE_EOFBLOCKS(r3, 0x8080583a, &(0x7f0000000480)={0x8, 0x7ff, 0x19cb, 0x0, 0x8001, 0x0, 0x2}) bind$bt_hci(r4, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000015c0)=ANY=[@ANYBLOB="200000002c00070100000000ffdb25017c0000080001800400060004000280"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c050) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000000)={0x0, 0x9, "be5f21", 0x8, 0x80}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x6, 0x4, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000008000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8a0900000000007b04d39118297c253db64faf25bfa200000000000000b70400000000000085000049fb1930be1a94a6e3b576392c6bb647cbe2954985d3a1ad2d1bcf7c85357c4e6b3741b90718b6633c7f6d43ad285a418a1dbe75004a1d585c37ddbe11383ec0716a0bb3bd6bc054c522c58c7b47a6ef2cfb51878be568fb0ede1b614a280bfa9446694da00894e4649c9e192e05fd21ef5eb49c421fea120f5fd2b62a37b994fbf33b1312f370c702"], &(0x7f0000000240)='GPL\x00', 0x4, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0001, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[], &(0x7f0000000f40)=""/4089, 0x3f, 0xff9, 0x2}, 0x28) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r8, &(0x7f0000000200)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff, 0xec37413816d5861d}, 0xe) ioctl$PPPIOCATTCHAN(r7, 0x40047438, &(0x7f0000000340)=0x1) write$ppp(r7, &(0x7f0000000700)="b068aa", 0x3) 1.615673149s ago: executing program 3 (id=6040): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000008c0)='./file1\x00', 0x800010, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0xf5, 0x2f4, &(0x7f0000001000)="$eJzs3ctrE1scwPFf3kl7e9PF5XK5qBwqiCIdmoA7FxZpQQwobSNYQZjaqYZMk5IJhYjYLgS3rl104VIEEdy5EXHbjX+Br1033VmwODKZmXSajmla6dPvZ9Gczvn95pyZc6aP02Zm5eKT2fKMpX234xLUL1GJeeVFOfd+6dPJ8Xd/uZ8rNTo8kcsrFRWRWw9eDLyt9954/feblCz3315ZzX9dPjEh8mPinkRVyVIV27ZtNVWt1iNO8nTJKmtKXTcN3TJUqWIZtbrSm/X6lGmoGbM6N9dQemW6r2euZliW0isNVTYaql5V9VpD6Xf1UkVpmqb6egTNwfJFt9RFOiUWn6/Ztqw6A5RaFNu2Q6IX/ULCe039XmdxmLSNf8fYLZMjtpc9w35Ys+Ot8U9uM/44ftzr//PTbq5/HD/jNyevDhcKI2NKpUVmH88X54vuq1v/sVdKYoohS2PnJ9fFmSMeiTgfR68URoZUU7+cmV3w8hfmi+43h+EZLz8nWefnlEC++Pk5N19tzk9ITzA/L1n5Jzw/7+dLNJCflLOnA/maZOXDHamKKdPi5G7kP8wpdflaoa39TDMOAAAAAAAAAICjSFMtG+v3kdafejOalmr+x0erPuNsduLcgNb6+pBkZT18fX4odH0/Lv/HD/DAAQAAAAD4g1iN+2XdNI3a3hRizzIdmkiIiFMQeTTgdKbjDv/1etxd68lTYQcY69zEpkLmgruDl2Nex2QvT9QuC1ERCW5x36yRdM7lKz8mI2Hp0R1NgMFk6JlP7+shSzfBkt7dxE51PbXaC5F1f8t/oTF2ZPv92LqZcLf4F+Z2rV/a0eXwy0K6/UQNfnH3a3b4ovGttcQHAAAA4AgJ/OIEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOyK5uHubft39zlXiPiN96S7b258Rz338AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAh9DPAAAA///EKa42") sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0xa, 0x4, &(0x7f0000000700)=ANY=[@ANYRES16=r0], 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x8}, 0x94) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) socket$packet(0x11, 0x3, 0x300) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="04021d"], 0x20) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newsa={0x148, 0x10, 0x1b020ba487bfd163, 0x0, 0x0, {{@in6=@mcast1, @in6=@local}, {@in6=@private1, 0x0, 0x33}, @in6=@empty, {0x7, 0x0, 0x4, 0x1, 0xb, 0x0, 0xffffffffffffffff}, {}, {}, 0x3, 0x0, 0xa}, [@algo_auth={0x56, 0x1, {{'cmac(aes)\x00'}, 0x70, "f76c53a22efbe5b37da0debc7f83"}}]}, 0x148}, 0x1, 0x0, 0x0, 0x40000}, 0x4004) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x5e0, 0x0, 0x0, 0x428, 0x428, 0x428, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28, 'socket\x00', 0x3}}]}, @common=@unspec=@CONNSECMARK={0x28}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x640) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000040)=0xff) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x11e) 1.528286952s ago: executing program 2 (id=6041): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000080)={0xffffffff, 0xa000}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth0\x00'}) getpgrp(0xffffffffffffffff) sendmsg$inet(0xffffffffffffffff, 0x0, 0x5) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f0000000040), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4a, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/sys/net/ipv6/conf/all/disable_ipv6\x00', 0x1, 0x0) write(r5, &(0x7f0000000400)='1', 0x1) sendto$inet6(0xffffffffffffffff, &(0x7f0000000500), 0x0, 0x0, 0x0, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) mmap$IORING_OFF_SQ_RING(0x1000000, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x9080) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.473585353s ago: executing program 0 (id=6042): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x7, 0x4, 0x3c8, 0x1ec, 0x0, 0x0, 0x2e8, 0x2e8, 0x2e8, 0x4, 0x0, {[{{@arp={@dev, @multicast2, 0x0, 0x0, 0x0, 0x0, {@empty, {[0xff, 0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x1, 0x0, 0xfffe, 0x0, 'veth0_to_hsr\x00', 'syz_tun\x00', {}, {}, 0x2}, 0xbc, 0xe0}, @unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x2}}}, {{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@remote, @empty, @remote}}}, {{@uncond, 0xbc, 0xfc}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "9695d92849c79fac2d070731112f73924a493f1567e5d8b4cd2c5f35f67b"}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x414) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x100000}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x58}}, 0x8000) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000400)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x6, 0x4, 0x3, 0x25, 0x7, 0x67, 0xfffd, 0x3, 0x2, 0x0, @local, @private=0xa010101, {[@timestamp={0x44, 0x0, 0x16, 0x0, 0x6}]}}}}}}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x0, @local}, {0x2, 0x4e23, @loopback}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r5, &(0x7f0000000000), 0xd) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001880)=ANY=[@ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x20008804}, 0xc810) 1.428302334s ago: executing program 2 (id=6043): prlimit64(0x0, 0xe, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000380)=@filter={'filter\x00', 0x42, 0x4, 0x2c8, 0xffffffff, 0x98, 0x198, 0x98, 0xffffffff, 0xffffffff, 0x230, 0x230, 0x230, 0xffffffff, 0x4, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0x0, 'netpci0\x00', 'syzkaller1\x00', {}, {}, 0x6, 0x1, 0x61}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'veth1_macvtap\x00', 'ip6_vti0\x00', {}, {}, 0x88}, 0x0, 0xa0, 0x100, 0x0, {0x60010000}, [@common=@unspec=@connmark={{0x30}, {0x0, 0x0, 0x41}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0x0, 0xfffc, [0x16, 0x0, 0x0, 0x20, 0x1c, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2]}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) socket$inet6(0xa, 0x80002, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) setxattr$incfs_metadata(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000024d00)={0x0, 0x0, &(0x7f0000024cc0)={&(0x7f0000004200)=@delchain={0x170, 0x65, 0x200, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x5, 0xc}, {0xfff3, 0x4}, {0x0, 0x2}}, [@f_tcindex={{0xc}, {0x140, 0x2, [@TCA_TCINDEX_ACT={0x13c, 0x7, [@m_vlan={0x108, 0x16, 0x0, 0x0, {{0x9}, {0x4}, {0xda, 0x6, "f88972b11ae1f54c32072d8852f83dce1200fae48cdd47580491b3464df81ea2356c5ae449614c2ad0a6f102d47622665f55d582e54e94750cf3caca5797cd0855886dc913412478de26bc51898186fb153a252d65c849849b48ec8ebec71bd96cd0cfebdb3dc6899b8669ddd007f06888e398a5b1ebc9d8bc2a03083a899050d24dab394fce9a6391ce9085db859988a09d21d1026bb3980d2593302bbf456aa01e22d4e64be134fbd8c7653ca89413645fb68d2776dd5a9ff23ed61a15139d82f7de1aee3b13c48f18cb8dc7c39dd9c924b24b96d1"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_ctinfo={0x30, 0x4, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x5}}}}]}]}}]}, 0x170}, 0x1, 0x0, 0x0, 0x810}, 0x41) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.2024689s ago: executing program 2 (id=6044): syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000540)='./file6\x00', 0x201080b, &(0x7f0000000bc0)=ANY=[], 0x1, 0x1e5, &(0x7f0000000080)="$eJzsVc2KE0EQ/nqmdxJzUI+iwh5cdD24mZ1V8SLuSfYlREJ2jMGJP5mAJgQynvIeXvIaHrx7ERQEL3pQ0UPEq0Squ3rSMZpEkwgL/cGkuqqrvuqqmvTcTR+lAPBj2K1iHwoBjuOtEJAANoW23SwoIT8HWt/ROj5KLS+y/RnLESNtd+5VkiRurnExXp2y9jx9EPwNI/n/uvVqeOvE73iEnE/4BgFm+JxZVRd8LBEu/qFRcxfINOlaBz9z8eV/Z7/tm5Kp+GUJv6/qYJt/ejcm5i7ElI9cYMqYnnKR/kOLn7BH8cpC18Uy76GY3hqrN556+Koqfi2Rw6Q81I/IfYbdKk3zheVzWqpH+BjlPkRFygUBlFuNh+W03blUb1RqcS2+H0V7V8PLYXglKt+pJ3Gof4WVwlxRJPevF0B36jFrfwPAOz5uCRY+eXkBxlQChInNy+NLevscJuBZZRlZwvM8L4fBD4AizoNG+jgz1NSYLcUioUo6gICvFL70e9wWnauovHaqD5LDPoTKp8IGkJpjI3eVCGAp5LZ3LTOmPsstlgcsByzfszTfLPMtkorhA2vbGXX0SaXVau4GLzlkl756yhYFZjc6mdkNo6zfmMMUd7YABwcHBwcHB4cjhp8BAAD//90KRq4=") syz_open_procfs(0x0, &(0x7f0000000240)='net/kcm\x00') r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{0x2f, 0xd, 0x0, 0x7fffffff}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05000000044c"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000021c0)={0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x10800ff, r5, 0x500}, 0x38) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0xfffffffffffffffd) setregid(0xffffffffffffffff, r1) socket(0x10, 0x3, 0x80) setregid(0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6800000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970001c0007800800064000000023"], 0x68}}, 0x0) 434.506129ms ago: executing program 1 (id=6045): syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000540)='./file6\x00', 0x201080b, &(0x7f0000000bc0)=ANY=[], 0x1, 0x1e5, &(0x7f0000000080)="$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") syz_open_procfs(0x0, &(0x7f0000000240)='net/kcm\x00') r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{0x2f, 0xd, 0x0, 0x7fffffff}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05000000044c"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000021c0)={0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x10800ff, r5, 0x500}, 0x38) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0xfffffffffffffffd) setregid(0xffffffffffffffff, r1) socket(0x10, 0x3, 0x80) setregid(0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6800000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970001c0007800800064000000023080013400000000208"], 0x68}}, 0x0) 433.563869ms ago: executing program 3 (id=6046): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r1) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000000c0)={'wpan1\x00'}) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x14, r2, 0x200, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x24010844}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), r3) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000009c0)={0x0}, 0x1, 0x0, 0x0, 0x8004000}, 0x4008804) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000032680)=""/102400, 0x19000) setxattr$incfs_metadata(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x3, 0x40000000, 0x10}) ioctl$BLKTRACETEARDOWN(r7, 0x1276, 0x0) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5393, &(0x7f0000000000)) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x68, r4, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x4}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x8084}, 0x20040000) 278.590763ms ago: executing program 0 (id=6047): socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) time(0x0) syz_emit_ethernet(0x4a, &(0x7f00000004c0)=ANY=[], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000040)=r0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1123102, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r7, &(0x7f00000000c0)=ANY=[], 0xffffff6a) splice(r6, 0x0, r5, 0x0, 0x40010003, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x1b) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000005c0)=""/4096, 0x1000}], 0x1}, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x5, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb8}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @exit={0x95, 0x0, 0x700}], {0x95, 0x0, 0x5a5}}, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6}, 0x94) connect$inet6(r3, 0x0, 0x0) 229.35µs ago: executing program 2 (id=6048): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000280)={[{@errors_remount}, {@nomblk_io_submit}, {@noblock_validity}, {@nodiscard}, {@nolazytime}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@uid_gt={'uid>', 0xee01}}, {@func={'func', 0x3d, 'CREDS_CHECK'}}]}, 0x1, 0x492, &(0x7f0000000840)="$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") openat(0xffffffffffffff9c, 0x0, 0x143042, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0xb8) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000008}, 0x44080) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r3, &(0x7f0000000300)="a0", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @empty, 0x9}, 0x1c) shutdown(r3, 0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000440)={&(0x7f0000a5f000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/125, 0x7d, 0x1, 0x0}, &(0x7f0000000480)=0x40) syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x225000, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], 0x6, 0xc38, &(0x7f0000001140)="$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") syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_ADD_TO_RESOLV_LIST={{0x9}, 0x10}}}, 0x7) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000280)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00003bf000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0}, 0x68) io_setup(0xbf, &(0x7f0000000100)=0x0) io_submit(r4, 0x0, 0x0) 0s ago: executing program 3 (id=6049): r0 = epoll_create1(0x80000) mkdir(0x0, 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='dir0/trace_marker\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs_dir/buffer_size_kb\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='10', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./tracefs_dir/free_buffer\x00', 0x1, 0x0) close(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) dup3(r0, r0, 0x80000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200), 0x0, 0xffffffffffffffff) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000003b80), r5) sendmsg$NFC_CMD_DISABLE_SE(r5, &(0x7f0000003c80)={0x0, 0x0, &(0x7f0000003c40)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="01002bbd7000fddbdf255200000008000100", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000018) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r4, &(0x7f0000000040)={0xa0000004}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r0, &(0x7f0000000440)={0xa0000001}) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): (NULL device *): queue 0 connect admin queue failed (-111). [ 1171.748370][ T8877] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1171.757395][ T8877] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1174.106315][ T8876] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 1174.275088][ T8876] (NULL device *): queue 0 connect admin queue failed (-111). [ 1174.285582][ T8876] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1174.294267][ T8876] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1176.512960][ T6053] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 1176.572096][ T6053] (NULL device *): queue 0 connect admin queue failed (-111). [ 1176.579781][ T6053] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1176.587738][ T6053] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1179.350329][ T8876] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 1179.490934][ T8876] (NULL device *): queue 0 connect admin queue failed (-111). [ 1179.521298][ T8876] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1179.558667][ T8876] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1181.781845][ T1330] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 1181.808901][ T1330] (NULL device *): queue 0 connect admin queue failed (-111). [ 1181.822322][ T1330] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1181.835004][ T1330] nvme nvme0: NVME-FC{0}: Reconnect attempt in 2 seconds [ 1184.037954][ T6053] nvme nvme0: NVME-FC{0}: create association : host wwpn 0x2222222222222222 rport wwpn 0x4444444444444444: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 1184.314730][ T6053] (NULL device *): queue 0 connect admin queue failed (-111). [ 1184.359589][ T6053] nvme nvme0: NVME-FC{0}: reset: Reconnect attempt failed (-111) [ 1184.367674][ T6053] nvme nvme0: NVME-FC{0}: Max reconnect attempts (300) reached. [ 1184.433700][ T6053] nvme nvme0: Removing ctrl: NQN "nqn.2014-08.org.nvmexpress.discovery" [ 1191.184551][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1191.510267][T15215] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1192.011100][T15215] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1197.478581][T15271] fuse: Bad value for 'group_id' [ 1201.315048][T15306] fuse: Bad value for 'group_id' [ 1201.769879][T15314] fuse: Bad value for 'group_id' [ 1203.731816][T15333] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1204.901735][T15342] 9pnet_fd: Insufficient options for proto=fd [ 1205.189297][T15346] fuse: Bad value for 'group_id' [ 1205.340036][T15350] fuse: Bad value for 'group_id' [ 1210.614291][T15385] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1213.818807][T15409] bridge0: entered promiscuous mode [ 1213.824485][T15409] vlan0: entered promiscuous mode [ 1215.355039][T15418] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1215.440576][T15414] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1215.487706][T15414] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1223.120438][T15484] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2445'. [ 1223.220109][T15479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1224.132844][T15479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1224.193304][T15479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1226.092899][T15509] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1230.281112][T15553] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2461'. [ 1234.634150][T15590] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1237.201289][T15607] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2473'. [ 1238.903048][T15624] fuse: Unknown parameter 'grou00000000000000000000' [ 1240.963143][T15638] 9pnet_fd: Insufficient options for proto=fd [ 1242.674794][T15647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1242.683651][T15647] 8021q: adding VLAN 0 to HW filter on device team0 [ 1242.782777][T15647] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1244.080108][T15663] fuse: Unknown parameter 'grou00000000000000000000' [ 1246.055663][T15686] autofs4:pid:15686:autofs_fill_super: called with bogus options [ 1248.010296][T15713] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2503'. [ 1254.150579][T15767] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1254.240205][T15767] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1254.271216][T15767] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1256.656449][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1258.039015][T15813] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1258.134530][T15813] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1258.166263][T15813] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1260.273616][T15833] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2537'. [ 1260.294772][T15833] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2537'. [ 1260.304700][T15833] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2537'. [ 1260.314499][T15833] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2537'. [ 1260.323843][T15833] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2537'. [ 1263.396344][T15868] fuse: Unknown parameter 'group_id00000000000000000000' [ 1263.745543][T15875] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2553'. [ 1263.757257][T15875] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2553'. [ 1263.766838][T15875] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2553'. [ 1263.776869][T15875] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2553'. [ 1263.786399][T15875] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2553'. [ 1264.823183][T15882] overlayfs: failed to clone upperpath [ 1268.041422][T15901] fuse: Unknown parameter 'group_id00000000000000000000' [ 1271.149149][T15936] fuse: Bad value for 'fd' [ 1274.604545][T15969] fuse: Bad value for 'user_id' [ 1277.489081][T16001] fuse: Bad value for 'user_id' [ 1280.098556][T16029] fuse: Bad value for 'fd' [ 1284.904659][ T28] audit: type=1107 audit(1786114376.204:335): pid=16076 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1291.654914][T16140] fuse: Bad value for 'fd' [ 1292.406365][T16151] fuse: Bad value for 'fd' [ 1294.113044][T16166] fuse: Bad value for 'fd' [ 1294.151319][T16167] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2641'. [ 1296.566230][T16195] fuse: Bad value for 'fd' [ 1297.851430][T16209] fuse: Bad value for 'fd' [ 1297.858856][T16207] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2656'. [ 1299.359750][T16224] fuse: Invalid rootmode [ 1299.866418][T16233] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2665'. [ 1301.982037][T16252] fuse: Invalid rootmode [ 1303.309033][T16266] fuse: Invalid rootmode [ 1303.399229][T16269] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2674'. [ 1303.976988][T16280] fuse: Invalid rootmode [ 1307.074978][T16304] fuse: Invalid rootmode [ 1308.531017][T16321] fuse: Bad value for 'fd' [ 1310.091487][T16341] fuse: Bad value for 'rootmode' [ 1312.261489][T16360] netlink: 'syz.1.2699': attribute type 13 has an invalid length. [ 1312.290683][T16360] netlink: 'syz.1.2699': attribute type 17 has an invalid length. [ 1312.707932][T16360] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1315.014447][T16385] fuse: Bad value for 'rootmode' [ 1317.561769][T16414] fuse: Bad value for 'fd' [ 1317.931039][T16418] fuse: Bad value for 'fd' [ 1318.683209][T16426] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1319.768112][ T28] audit: type=1107 audit(1786114408.821:336): pid=16433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1321.591929][T16451] fuse: Bad value for 'fd' [ 1321.877375][T16455] fuse: Unknown parameter 'use00000000000000000000' [ 1322.877895][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1323.773978][T16471] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1328.080334][T16514] fuse: Bad value for 'fd' [ 1328.307590][T16527] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2748'. [ 1328.658375][T16528] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2749'. [ 1330.668747][T16554] fuse: Unknown parameter 'user_i00000000000000000000' [ 1330.929860][T16563] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2760'. [ 1333.123116][T16573] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2761'. [ 1335.468747][T16597] fuse: Bad value for 'fd' [ 1335.575445][T16601] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2770'. [ 1337.951263][T16624] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2775'. [ 1338.960227][T16635] fuse: Bad value for 'fd' [ 1339.232739][T16636] bridge3: entered promiscuous mode [ 1340.370970][ T28] audit: type=1107 audit(1786114428.091:337): pid=16642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1342.290177][T16667] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2788'. [ 1346.315853][ T28] audit: type=1107 audit(1786114433.647:338): pid=16696 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1347.442004][T16717] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2801'. [ 1347.925992][T16725] fuse: Bad value for 'fd' [ 1348.853921][T16734] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2805'. [ 1350.119930][T16747] fuse: Bad value for 'fd' [ 1351.748987][T16758] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2812'. [ 1354.718026][T16780] fuse: Bad value for 'fd' [ 1354.915913][T16784] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2820'. [ 1355.503634][T16793] fuse: Bad value for 'fd' [ 1355.520048][T16794] fuse: Bad value for 'fd' [ 1356.854115][T16807] fuse: Bad value for 'fd' [ 1356.976419][T16809] fuse: Unknown parameter 'user_i00000000000000000000' [ 1357.188703][T16814] SET target dimension over the limit! [ 1358.196533][T16824] fuse: Bad value for 'fd' [ 1358.383959][T16828] fuse: Bad value for 'fd' [ 1359.029179][T16835] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2837'. [ 1359.899959][T16840] fuse: Unknown parameter 'user_i00000000000000000000' [ 1360.633259][T16856] fuse: Bad value for 'fd' [ 1360.959162][T16858] fuse: Unknown parameter '0x0000000000000005' [ 1361.799156][T16866] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2847'. [ 1363.342561][T16880] fuse: Unknown parameter 'user_id00000000000000000000' [ 1363.384840][T16883] Timeout policy `syz1' can only be used by L3 protocol number 71 [ 1363.887680][T16891] fuse: Unknown parameter '0x0000000000000005' [ 1364.138275][T16896] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2856'. [ 1368.983051][T16930] fuse: Unknown parameter 'user_id00000000000000000000' [ 1369.072196][T16934] fuse: Unknown parameter '0x0000000000000005' [ 1369.278274][T16942] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2866'. [ 1374.076433][T16973] fuse: Bad value for 'fd' [ 1374.232022][T16977] fuse: Unknown parameter '0x0000000000000005' [ 1374.243030][T16980] fuse: Unknown parameter '0x0000000000000005' [ 1374.494796][T16985] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2879'. [ 1375.970345][ T28] audit: type=1326 audit(1786114461.419:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16996 comm="syz.1.2882" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f399159e0d9 code=0x7ffc0000 [ 1376.617117][ T28] audit: type=1326 audit(1786114461.419:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16996 comm="syz.1.2882" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f399159e0d9 code=0x7ffc0000 [ 1376.786508][ T28] audit: type=1326 audit(1786114461.447:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16996 comm="syz.1.2882" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f399159e0d9 code=0x7ffc0000 [ 1376.926996][ T28] audit: type=1326 audit(1786114461.447:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16996 comm="syz.1.2882" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f399159e0d9 code=0x7ffc0000 [ 1376.991739][ T28] audit: type=1326 audit(1786114461.447:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16996 comm="syz.1.2882" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7f399159e0d9 code=0x7ffc0000 [ 1377.062009][ T28] audit: type=1326 audit(1786114461.447:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16996 comm="syz.1.2882" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f399159e0d9 code=0x7ffc0000 [ 1377.090549][ T28] audit: type=1326 audit(1786114461.447:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16996 comm="syz.1.2882" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f399159e0d9 code=0x7ffc0000 [ 1377.128224][ T28] audit: type=1326 audit(1786114461.447:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16996 comm="syz.1.2882" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f399159e0d9 code=0x7ffc0000 [ 1377.217067][ T28] audit: type=1326 audit(1786114461.447:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16996 comm="syz.1.2882" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f399159e0d9 code=0x7ffc0000 [ 1377.334881][ T28] audit: type=1326 audit(1786114461.447:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16996 comm="syz.1.2882" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f399159e0d9 code=0x7ffc0000 [ 1377.415811][T17010] fuse: Bad value for 'fd' [ 1378.137153][T17015] fuse: Unknown parameter '0x0000000000000005' [ 1378.519781][T17021] fuse: Unknown parameter '0xffffffffffffffff' [ 1381.133938][T17046] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2895'. [ 1381.153183][T17047] fuse: Bad value for 'fd' [ 1381.686090][T17053] fuse: Unknown parameter '0x0000000000000005' [ 1383.279328][T17059] fuse: Unknown parameter '0x0000000000000005' [ 1385.988923][T17090] fuse: Bad value for 'fd' [ 1387.069622][T17097] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2910'. [ 1387.079914][T17097] netlink: 43 bytes leftover after parsing attributes in process `syz.3.2910'. [ 1387.176330][T17096] fuse: Unknown parameter 'fd0x0000000000000005' [ 1387.675429][T17100] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 1388.093109][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1391.157555][T17125] bridge3: entered promiscuous mode [ 1391.614539][T17127] fuse: Unknown parameter 'fd0x0000000000000005' [ 1391.736629][T17133] fuse: Unknown parameter 'fd0x0000000000000005' [ 1393.258386][T17150] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2926'. [ 1394.767547][T17164] fuse: Unknown parameter 'fd0x0000000000000005' [ 1395.130071][T17172] fuse: Unknown parameter 'fd0x0000000000000005' [ 1395.318968][T17168] tipc: Enabled bearer , priority 10 [ 1396.880287][ T8010] tipc: Node number set to 917034588 [ 1397.286774][T17202] fuse: Bad value for 'fd' [ 1398.988571][T17217] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2948'. [ 1400.337976][T17233] fuse: Bad value for 'fd' [ 1401.268320][T17250] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2957'. [ 1402.318427][T17262] fuse: Bad value for 'fd' [ 1402.620765][T17270] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2965'. [ 1402.938781][ T5777] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 1402.959734][T17276] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1403.549223][T17286] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2970'. [ 1404.386180][T17296] fuse: Bad value for 'fd' [ 1404.741441][T17304] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2976'. [ 1407.037284][T17326] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2985'. [ 1412.205323][T17377] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2999'. [ 1414.749202][T17403] fuse: Bad value for 'fd' [ 1421.061111][T17439] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3010'. [ 1422.163560][T17457] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1424.401076][T17486] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3038'. [ 1425.370032][T17492] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3031'. [ 1425.917522][T17497] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 1425.988239][T17497] batman_adv: batadv0: Adding interface: wlan0 [ 1425.994669][T17497] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1426.025321][T17497] batman_adv: batadv0: Interface activated: wlan0 [ 1426.950757][T17497] batadv0: mtu less than device minimum [ 1426.972149][T17497] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1426.985078][T17497] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1426.998108][T17497] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1427.011008][T17497] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1427.023385][T17497] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1427.036045][T17497] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1427.048990][T17497] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1427.062286][T17497] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1428.503684][T17523] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3041'. [ 1429.645132][T17538] fuse: Bad value for 'fd' [ 1435.379308][T17579] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3058'. [ 1435.409577][T17579] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 1435.419271][T17579] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 1435.429335][T17579] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 1435.509861][T17581] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3056'. [ 1435.969024][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 1435.969042][ T28] audit: type=1326 audit(1786114517.534:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17591 comm="syz.3.3061" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc02d39e0d9 code=0x7ffc0000 [ 1436.008766][ T28] audit: type=1326 audit(1786114517.534:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17591 comm="syz.3.3061" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc02d39e0d9 code=0x7ffc0000 [ 1436.039527][ T28] audit: type=1326 audit(1786114517.534:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17591 comm="syz.3.3061" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc02d39e0d9 code=0x7ffc0000 [ 1436.073092][ T28] audit: type=1326 audit(1786114517.534:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17591 comm="syz.3.3061" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc02d39e0d9 code=0x7ffc0000 [ 1436.109735][ T28] audit: type=1326 audit(1786114517.534:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17591 comm="syz.3.3061" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc02d39e0d9 code=0x7ffc0000 [ 1436.177271][ T28] audit: type=1326 audit(1786114517.571:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17591 comm="syz.3.3061" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7fc02d39e0d9 code=0x7ffc0000 [ 1436.210340][ T28] audit: type=1326 audit(1786114517.571:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17591 comm="syz.3.3061" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc02d39e0d9 code=0x7ffc0000 [ 1436.241298][ T28] audit: type=1326 audit(1786114517.571:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17591 comm="syz.3.3061" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc02d39e0d9 code=0x7ffc0000 [ 1436.279232][ T28] audit: type=1326 audit(1786114517.636:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17591 comm="syz.3.3061" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc02d39e0d9 code=0x7ffc0000 [ 1436.367075][ T28] audit: type=1326 audit(1786114517.636:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17591 comm="syz.3.3061" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc02d39e0d9 code=0x7ffc0000 [ 1437.410813][T17608] fuse: Bad value for 'fd' [ 1437.793885][T17616] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3068'. [ 1441.793887][T17663] netlink: 'syz.3.3082': attribute type 10 has an invalid length. [ 1441.802742][T17663] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3082'. [ 1441.819044][T17663] geneve0: entered promiscuous mode [ 1441.825781][T17663] team0: Port device geneve0 added [ 1441.977248][T17666] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3083'. [ 1444.092155][T17678] fuse: Bad value for 'fd' [ 1445.390874][T17698] tipc: Enabled bearer , priority 10 [ 1447.340341][T17721] fuse: Bad value for 'fd' [ 1447.593982][T17725] fuse: Bad value for 'fd' [ 1449.035632][T17746] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3106'. [ 1450.636520][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 1450.636882][ T28] audit: type=1326 audit(1786114531.125:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17760 comm="syz.1.3111" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f399159e0d9 code=0x7ffc0000 [ 1450.953874][ T28] audit: type=1326 audit(1786114531.125:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17760 comm="syz.1.3111" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f399159e0d9 code=0x7ffc0000 [ 1451.345929][ T28] audit: type=1326 audit(1786114531.134:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17760 comm="syz.1.3111" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f399159e0d9 code=0x7ffc0000 [ 1451.463891][ T28] audit: type=1326 audit(1786114531.134:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17760 comm="syz.1.3111" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f399159e0d9 code=0x7ffc0000 [ 1451.594935][ T28] audit: type=1326 audit(1786114531.134:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17760 comm="syz.1.3111" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f399159e0d9 code=0x7ffc0000 [ 1451.697240][ T28] audit: type=1326 audit(1786114531.134:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17760 comm="syz.1.3111" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f399159e0d9 code=0x7ffc0000 [ 1451.727483][ T28] audit: type=1326 audit(1786114531.134:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17760 comm="syz.1.3111" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f399159e0d9 code=0x7ffc0000 [ 1451.778327][ T28] audit: type=1326 audit(1786114531.134:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17760 comm="syz.1.3111" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f399159e0d9 code=0x7ffc0000 [ 1451.815908][ T28] audit: type=1326 audit(1786114531.144:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17760 comm="syz.1.3111" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f399159e0d9 code=0x7ffc0000 [ 1451.845007][ T28] audit: type=1326 audit(1786114531.144:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17760 comm="syz.1.3111" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f399159e0d9 code=0x7ffc0000 [ 1453.678368][T17777] fuse: Bad value for 'group_id' [ 1453.702542][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1454.084182][T17783] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3117'. [ 1454.191125][T17787] fuse: Bad value for 'fd' [ 1455.864515][T17805] fuse: Bad value for 'group_id' [ 1457.015909][T17818] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3129'. [ 1457.233169][T17823] netlink: 'syz.0.3131': attribute type 10 has an invalid length. [ 1457.241600][T17823] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3131'. [ 1457.256739][T17823] team0: Port device geneve0 added [ 1459.758509][T17850] tipc: Enabled bearer , priority 10 [ 1459.782528][T17859] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3143'. [ 1461.007375][ T8010] tipc: Node number set to 2232038768 [ 1463.892872][T17901] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3156'. [ 1463.918418][T17901] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 1463.927764][T17901] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 1463.936431][T17901] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 1464.075930][T17905] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3155'. [ 1468.697044][T17945] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3167'. [ 1472.144918][T17973] fuse: Bad value for 'fd' [ 1472.278578][T17980] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3179'. [ 1475.415703][T18011] fuse: Bad value for 'fd' [ 1476.102830][T18021] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3190'. [ 1478.896318][ T5777] Bluetooth: hci0: unexpected event 0x03 length: 12 > 11 [ 1479.514933][T18052] fuse: Unknown parameter 'grou00000000000000000000' [ 1481.159694][T18071] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3203'. [ 1482.410186][T18086] fuse: Unknown parameter 'grou00000000000000000000' [ 1483.466251][T18096] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3211'. [ 1484.492472][T18105] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3214'. [ 1485.242753][T18110] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3215'. [ 1485.278222][T18110] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3215'. [ 1486.371188][T18121] fuse: Unknown parameter 'grou00000000000000000000' [ 1486.658564][T18127] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3221'. [ 1488.404486][T18146] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3227'. [ 1489.781189][T18159] fuse: Unknown parameter 'group_i00000000000000000000' [ 1491.018751][T18168] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3231'. [ 1491.028106][T18168] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3231'. [ 1493.236444][T18185] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1493.264076][T18184] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3237'. [ 1493.664040][T18192] fuse: Unknown parameter 'group_i00000000000000000000' [ 1496.634599][T18223] fuse: Unknown parameter 'group_i00000000000000000000' [ 1497.159634][T18229] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3249'. [ 1498.223022][T18236] fuse: Bad value for 'fd' [ 1499.493587][T18255] fuse: Unknown parameter 'group_id00000000000000000000' [ 1499.972805][T18266] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3262'. [ 1502.512962][T18288] fuse: Bad value for 'fd' [ 1504.517691][T18301] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3272'. [ 1506.185434][T18324] fuse: Unknown parameter 'group_id00000000000000000000' [ 1506.716513][T18338] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3284'. [ 1508.355900][ T5777] Bluetooth: hci3: unexpected event 0x03 length: 12 > 11 [ 1509.539522][T18349] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3294'. [ 1509.983970][T18360] xt_hashlimit: max too large, truncated to 1048576 [ 1510.701299][T18364] fuse: Bad value for 'user_id' [ 1511.244531][T18375] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3295'. [ 1514.694133][T18410] fuse: Bad value for 'user_id' [ 1514.814074][T18414] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3304'. [ 1517.911242][T18451] fuse: Bad value for 'user_id' [ 1518.225071][T18455] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3316'. [ 1519.413715][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1519.571681][T18465] fuse: Bad value for 'fd' [ 1523.850341][T18506] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3330'. [ 1525.321520][T18527] fuse: Bad value for 'fd' [ 1526.499571][T18543] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3340'. [ 1529.216898][T18567] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3344'. [ 1530.539751][T18582] fuse: Bad value for 'fd' [ 1532.184380][T18599] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3356'. [ 1535.037415][T18619] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3359'. [ 1537.283821][T18631] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3367'. [ 1537.750418][T18640] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3370'. [ 1539.311069][T18657] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3375'. [ 1539.354385][ T5777] Bluetooth: hci2: unexpected event for opcode 0x0c7c [ 1539.405262][T18659] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3376'. [ 1539.844531][T18669] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3379'. [ 1540.047128][T18671] fuse: Invalid rootmode [ 1540.224891][T18673] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3381'. [ 1542.753078][T18699] fuse: Invalid rootmode [ 1542.783100][T18700] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3389'. [ 1542.854308][T18701] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3391'. [ 1543.098353][T18706] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3393'. [ 1544.928463][T18727] fuse: Invalid rootmode [ 1546.580644][T18738] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3402'. [ 1548.493125][T18757] fuse: Bad value for 'rootmode' [ 1550.701318][T18779] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3416'. [ 1553.521248][T18807] fuse: Bad value for 'rootmode' [ 1555.079139][T18821] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3424'. [ 1555.504881][T18823] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3428'. [ 1556.538481][T18826] bond0: option use_carrier: invalid value (9) [ 1556.570107][ T6053] bond0: (slave wlan1): link status definitely down, disabling slave [ 1556.625769][ T6053] bond0: now running without any active interface! [ 1557.808384][T18842] fuse: Bad value for 'rootmode' [ 1557.978458][T18846] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1559.561423][T18862] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3439'. [ 1561.747796][T18879] fuse: Bad value for 'fd' [ 1566.057447][T18910] fuse: Unknown parameter 'use00000000000000000000' [ 1566.324939][T18916] netlink: 'syz.0.3459': attribute type 1 has an invalid length. [ 1566.333149][T18916] netlink: 'syz.0.3459': attribute type 2 has an invalid length. [ 1568.242988][T18931] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1568.756645][T18941] fuse: Unknown parameter 'use00000000000000000000' [ 1574.816891][T18994] fuse: Unknown parameter 'user_i00000000000000000000' [ 1582.499748][T19037] fuse: Unknown parameter 'user_i00000000000000000000' [ 1584.811266][T16556] libceph: connect (1)[c::]:6789 error -101 [ 1584.839498][T16556] libceph: mon0 (1)[c::]:6789 connect error [ 1584.862653][T19057] ceph: No mds server is up or the cluster is laggy [ 1585.088525][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1588.431891][T19082] fuse: Unknown parameter 'user_i00000000000000000000' [ 1592.204532][T19110] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3509'. [ 1592.364500][T19112] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3510'. [ 1593.454581][T19119] fuse: Unknown parameter 'user_id00000000000000000000' [ 1597.962651][T19151] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3520'. [ 1598.046003][T19153] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3521'. [ 1602.926425][T19194] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3534'. [ 1603.073125][T19197] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3533'. [ 1603.444208][T19199] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3535'. [ 1603.475122][T19201] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3536'. [ 1603.733120][T19205] fuse: Bad value for 'rootmode' [ 1605.112247][T19220] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1606.154033][T19225] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3545'. [ 1606.471923][T19234] fuse: Bad value for 'rootmode' [ 1607.621999][T19245] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3551'. [ 1609.090222][T19251] netlink: 'syz.2.3555': attribute type 2 has an invalid length. [ 1609.187770][T19256] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3556'. [ 1609.387016][T19258] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3558'. [ 1609.510180][T19260] fuse: Unknown parameter 'use00000000000000000000' [ 1611.412276][T19274] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3564'. [ 1611.439351][T19276] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1611.754550][T19282] sch_tbf: peakrate 216 is lower than or equals to rate 25783 ! [ 1611.789726][T19283] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3567'. [ 1611.825075][T19285] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3568'. [ 1612.029830][T19290] fuse: Bad value for 'fd' [ 1612.156731][T19293] fuse: Bad value for 'fd' [ 1614.374863][T19312] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1615.474222][T19322] fuse: Bad value for 'fd' [ 1615.598500][T19324] fuse: Unknown parameter 'use00000000000000000000' [ 1616.679914][T19334] ceph: No mds server is up or the cluster is laggy [ 1616.711802][T13605] libceph: connect (1)[c::]:6789 error -22 [ 1616.720722][T13605] libceph: mon0 (1)[c::]:6789 connect error [ 1616.792204][T19341] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3585'. [ 1620.976879][T19388] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3599'. [ 1621.236213][T19390] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1625.934196][T19441] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3610'. [ 1629.278178][T19462] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3618'. [ 1629.782678][T19469] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3620'. [ 1632.595322][T19485] fuse: Bad value for 'fd' [ 1633.765806][ T5777] Bluetooth: hci3: hcon ffff88807a4b2000 sent 1 < count 257 [ 1634.382833][T19497] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3628'. [ 1634.433973][T19500] fuse: Unknown parameter 'user_id00000000000000000000' [ 1636.040411][T19520] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3636'. [ 1636.768178][T19525] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3636'. [ 1638.574162][T19536] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3640'. [ 1638.630129][T19538] fuse: Unknown parameter 'user_id00000000000000000000' [ 1640.626608][T19544] futex_wake_op: syz.1.3643 tries to shift op by 144; fix this program [ 1640.697417][T19544] futex_wake_op: syz.1.3643 tries to shift op by 144; fix this program [ 1643.019169][T19573] fuse: Bad value for 'fd' [ 1643.111974][T19577] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3652'. [ 1645.331134][T19604] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5772] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[19604] [ 1646.943672][T19616] fuse: Bad value for 'fd' [ 1647.221526][T19619] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3663'. [ 1651.015043][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1652.105332][T19648] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1652.793691][T19652] fuse: Bad value for 'fd' [ 1653.771310][ T5777] Bluetooth: hci0: unexpected event for opcode 0x2041 [ 1657.873020][T19676] fuse: Unknown parameter '0xffffffffffffffff' [ 1658.074118][T19682] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3684'. [ 1661.128039][T19697] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1664.389426][T19718] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1664.766777][T19724] fuse: Unknown parameter '0x0000000000000005' [ 1667.003948][T19740] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1667.635704][T19746] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3701'. [ 1668.670385][T19754] batman_adv: batadv0: Interface deactivated: wlan0 [ 1668.686101][T19754] net_ratelimit: 11 callbacks suppressed [ 1668.686116][T19754] batadv0: mtu less than device minimum [ 1668.723673][T19754] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1668.736608][T19754] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1668.749507][T19754] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1668.762666][T19754] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1668.775625][T19754] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1668.788669][T19754] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1668.801383][T19754] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1668.814627][T19754] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1668.827265][T19754] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1669.000406][T19760] fuse: Unknown parameter '0xffffffffffffffff' [ 1669.146644][T19762] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3705'. [ 1669.648184][T19770] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3705'. [ 1670.219608][T19767] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3707'. [ 1670.230272][T19767] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3707'. [ 1670.244987][T19767] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1670.254622][T19767] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1670.263761][T19767] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1670.272675][T19767] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1670.316828][T19767] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3707'. [ 1670.326165][T19767] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3707'. [ 1670.565948][T19777] fuse: Bad value for 'fd' [ 1671.470209][T19784] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3711'. [ 1671.546611][T19788] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3713'. [ 1671.738008][T19794] fuse: Unknown parameter '0x0000000000000005' [ 1673.991098][T19818] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3723'. [ 1675.175362][T19823] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3724'. [ 1675.571981][T19828] fuse: Unknown parameter '0x0000000000000005' [ 1678.186394][T19848] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3733'. [ 1678.423478][T19852] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3734'. [ 1679.479031][T19859] fuse: Unknown parameter '0x0000000000000005' [ 1681.832495][T19876] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5781] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[19876] [ 1682.905132][T19883] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3743'. [ 1683.080616][T19887] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3744'. [ 1683.300591][T19895] fuse: Unknown parameter 'fd0x0000000000000005' [ 1686.045343][T19927] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3759'. [ 1686.067005][T19928] futex_wake_op: syz.3.3756 tries to shift op by 144; fix this program [ 1687.167955][T19936] fuse: Unknown parameter 'fd0x0000000000000005' [ 1690.729539][T19964] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3770'. [ 1691.529429][T19971] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1694.843262][T19999] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3780'. [ 1695.021054][T20002] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1695.291309][T20007] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3784'. [ 1696.880226][T20022] fuse: Bad value for 'fd' [ 1696.938740][T20027] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3793'. [ 1696.955957][T20029] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1699.398446][T20046] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3798'. [ 1700.106473][T20056] fuse: Bad value for 'fd' [ 1700.203961][T20060] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3804'. [ 1700.240760][T20062] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1700.563776][T20069] overlayfs: missing 'lowerdir' [ 1701.664675][T20073] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1701.847236][T20077] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3810'. [ 1704.333551][T20088] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3814'. [ 1704.493161][T20092] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1704.757280][T20095] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1705.219734][T20106] fuse: Bad value for 'fd' [ 1705.421972][T20108] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3822'. [ 1705.459183][T20110] fuse: Bad value for 'fd' [ 1706.760205][T20120] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1706.877849][T20122] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1707.421244][T20137] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3833'. [ 1708.777628][T20147] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1709.104811][T20155] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1709.219738][T20157] lo: entered allmulticast mode [ 1710.882412][T20179] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1713.239984][T20214] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1714.058357][T20236] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3868'. [ 1714.607086][T20239] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1716.434899][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1716.484000][T20259] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3873'. [ 1716.724167][T20268] futex_wake_op: syz.1.3878 tries to shift op by 144; fix this program [ 1717.840567][T20275] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1718.469191][T20288] IPVS: Error connecting to the multicast addr [ 1719.506470][T20297] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3888'. [ 1719.838936][T20304] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1722.920099][T20344] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1722.948942][T20345] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3903'. [ 1723.060284][T20347] fuse: Bad value for 'fd' [ 1723.312546][T20351] netlink: 'syz.2.3907': attribute type 11 has an invalid length. [ 1724.752128][T20369] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1726.288754][T20382] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3918'. [ 1726.687284][T20390] lo: entered allmulticast mode [ 1728.579735][T20404] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1730.707266][T20428] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1730.726515][T20429] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3931'. [ 1730.763453][T20430] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3930'. [ 1733.560378][T20445] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1734.372750][T20457] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 1735.242878][T20454] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3941'. [ 1735.656060][T20463] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1736.122550][T20473] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1737.423595][ T5777] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 1737.435462][ T5777] CPU: 0 PID: 5777 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 1737.443276][ T5777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1737.453588][ T5777] Workqueue: hci0 hci_rx_work [ 1737.458426][ T5777] Call Trace: [ 1737.461759][ T5777] [ 1737.464747][ T5777] dump_stack_lvl+0x18c/0x250 [ 1737.469493][ T5777] ? show_regs_print_info+0x20/0x20 [ 1737.474969][ T5777] ? load_image+0x420/0x420 [ 1737.479752][ T5777] sysfs_create_dir_ns+0x26e/0x2a0 [ 1737.484989][ T5777] ? __lock_acquire+0x7d80/0x7d80 [ 1737.490223][ T5777] ? sysfs_warn_dup+0xa0/0xa0 [ 1737.495081][ T5777] ? do_raw_spin_unlock+0x121/0x230 [ 1737.500440][ T5777] kobject_add_internal+0x617/0xc90 [ 1737.505717][ T5777] kobject_add+0x164/0x240 [ 1737.510419][ T5777] ? kobject_init+0x1d0/0x1d0 [ 1737.515432][ T5777] ? get_device_parent+0x366/0x390 [ 1737.520811][ T5777] device_add+0x3fa/0xc40 [ 1737.525301][ T5777] hci_conn_add_sysfs+0xd5/0x1e0 [ 1737.530419][ T5777] le_conn_complete_evt+0xe9f/0x1480 [ 1737.535856][ T5777] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 1737.542461][ T5777] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1737.548592][ T5777] ? lockdep_hardirqs_on+0x98/0x150 [ 1737.554047][ T5777] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1737.560016][ T5777] ? hci_remote_host_features_evt+0x150/0x150 [ 1737.566435][ T5777] hci_le_conn_complete_evt+0x187/0x440 [ 1737.572295][ T5777] ? hci_remote_host_features_evt+0x150/0x150 [ 1737.578563][ T5777] hci_event_packet+0x7b4/0x1280 [ 1737.583844][ T5777] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1737.589862][ T5777] ? bis_list+0x290/0x290 [ 1737.594739][ T5777] ? kcov_remote_start+0x1b5/0x7e0 [ 1737.600289][ T5777] ? hci_send_to_monitor+0xd7/0x4f0 [ 1737.606264][ T5777] hci_rx_work+0x43a/0xd60 [ 1737.610845][ T5777] ? process_scheduled_works+0x975/0x1600 [ 1737.616829][ T5777] process_scheduled_works+0xa60/0x1600 [ 1737.622739][ T5777] ? worker_attach_to_pool+0x370/0x370 [ 1737.628646][ T5777] ? assign_work+0x3cc/0x5d0 [ 1737.633711][ T5777] worker_thread+0xa5e/0xfe0 [ 1737.638664][ T5777] kthread+0x2fa/0x390 [ 1737.643010][ T5777] ? pr_cont_work+0x550/0x550 [ 1737.647861][ T5777] ? kthread_blkcg+0xd0/0xd0 [ 1737.652684][ T5777] ret_from_fork+0x48/0x80 [ 1737.657604][ T5777] ? kthread_blkcg+0xd0/0xd0 [ 1737.662483][ T5777] ret_from_fork_asm+0x11/0x20 [ 1737.667412][ T5777] [ 1737.712091][ T5777] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1737.727619][ T5777] Bluetooth: hci0: failed to register connection device [ 1738.304019][T20498] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3953'. [ 1738.577745][T20502] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1738.879819][T13558] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 1738.882303][T20512] net_ratelimit: 10 callbacks suppressed [ 1738.882357][T20512] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1739.142300][T20514] netlink: 'syz.2.3961': attribute type 9 has an invalid length. [ 1739.157611][T20514] overlayfs: failed to clone lowerpath [ 1740.329893][T20522] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3965'. [ 1740.736713][T20534] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1741.445203][T20552] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5781] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[20552] [ 1741.833874][T20547] netlink: 260 bytes leftover after parsing attributes in process `syz.2.3971'. [ 1741.843307][T20547] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3971'. [ 1741.853274][T20547] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3971'. [ 1743.029510][T20565] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1744.544128][T20581] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3983'. [ 1746.585530][T20604] 9pnet_virtio: no channels available for device syz [ 1746.907236][T20602] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3989'. [ 1749.289286][T20632] netlink: 'syz.0.3997': attribute type 9 has an invalid length. [ 1749.310228][T20632] overlayfs: failed to clone lowerpath [ 1749.327358][T20631] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3998'. [ 1752.821025][T20662] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1757.094553][T20691] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4017'. [ 1760.530312][T20726] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4029'. [ 1761.192046][T20741] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5772] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[20741] [ 1761.218610][T20741] netlink: 260 bytes leftover after parsing attributes in process `syz.0.4032'. [ 1761.229689][T20741] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4032'. [ 1761.239860][T20741] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4032'. [ 1761.990734][T20744] Process accounting resumed [ 1762.009626][T20747] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4036'. [ 1764.804364][T20767] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4041'. [ 1766.764397][T20779] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4045'. [ 1766.783758][T20779] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4045'. [ 1766.793282][T20779] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4045'. [ 1766.802906][T20779] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4045'. [ 1767.643717][T20784] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5776] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[20784] [ 1767.664041][T20784] netlink: 260 bytes leftover after parsing attributes in process `syz.1.4047'. [ 1767.673633][T20784] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4047'. [ 1767.682936][T20784] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4047'. [ 1768.102261][T20794] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4050'. [ 1769.328517][T20804] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4052'. [ 1771.709363][T20823] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1771.719130][T20823] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1773.773345][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 1773.773362][ T28] audit: type=1326 audit(1786114832.520:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20826 comm="syz.0.4059" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62c3f9e0d9 code=0x7fc00000 [ 1773.994418][T20835] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4061'. [ 1774.190187][T20841] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4063'. [ 1777.806462][T20864] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1778.902272][ T28] audit: type=1326 audit(1786114837.319:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20866 comm="syz.1.4072" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f399159e0d9 code=0x7fc00000 [ 1779.474841][T20886] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4076'. [ 1779.572508][T13558] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 1779.582411][T13558] CPU: 0 PID: 13558 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 1779.590150][T13558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1779.600635][T13558] Workqueue: hci3 hci_rx_work [ 1779.605645][T13558] Call Trace: [ 1779.608995][T13558] [ 1779.612025][T13558] dump_stack_lvl+0x18c/0x250 [ 1779.617160][T13558] ? show_regs_print_info+0x20/0x20 [ 1779.622429][T13558] ? load_image+0x420/0x420 [ 1779.627456][T13558] sysfs_create_dir_ns+0x26e/0x2a0 [ 1779.632992][T13558] ? __lock_acquire+0x7d80/0x7d80 [ 1779.638346][T13558] ? sysfs_warn_dup+0xa0/0xa0 [ 1779.643497][T13558] ? do_raw_spin_unlock+0x121/0x230 [ 1779.648968][T13558] kobject_add_internal+0x617/0xc90 [ 1779.654441][T13558] kobject_add+0x164/0x240 [ 1779.659018][T13558] ? preempt_schedule_thunk+0x1a/0x30 [ 1779.664473][T13558] ? kobject_init+0x1d0/0x1d0 [ 1779.669320][T13558] ? get_device_parent+0x366/0x390 [ 1779.674965][T13558] device_add+0x3fa/0xc40 [ 1779.679403][T13558] hci_conn_add_sysfs+0xd5/0x1e0 [ 1779.684426][T13558] le_conn_complete_evt+0xe9f/0x1480 [ 1779.690097][T13558] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 1779.696422][T13558] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 1779.702425][T13558] ? mutex_unlock+0x10/0x10 [ 1779.707200][T13558] ? skb_pull_data+0xf0/0x1f0 [ 1779.712037][T13558] hci_le_enh_conn_complete_evt+0x189/0x460 [ 1779.718075][T13558] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 1779.724813][T13558] ? hci_remote_host_features_evt+0x150/0x150 [ 1779.731211][T13558] hci_event_packet+0x7b4/0x1280 [ 1779.736394][T13558] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1779.742270][T13558] ? bis_list+0x290/0x290 [ 1779.746789][T13558] ? kcov_remote_start+0x1b5/0x7e0 [ 1779.751993][T13558] ? hci_send_to_monitor+0xd7/0x4f0 [ 1779.757391][T13558] hci_rx_work+0x43a/0xd60 [ 1779.761909][T13558] ? process_scheduled_works+0x975/0x1600 [ 1779.767996][T13558] process_scheduled_works+0xa60/0x1600 [ 1779.773690][T13558] ? worker_attach_to_pool+0x370/0x370 [ 1779.779432][T13558] ? assign_work+0x3cc/0x5d0 [ 1779.784718][T13558] worker_thread+0xa5e/0xfe0 [ 1779.789665][T13558] ? _raw_spin_unlock+0x40/0x40 [ 1779.794887][T13558] ? __kthread_parkme+0x71/0x1c0 [ 1779.799999][T13558] kthread+0x2fa/0x390 [ 1779.804124][T13558] ? pr_cont_work+0x550/0x550 [ 1779.808866][T13558] ? kthread_blkcg+0xd0/0xd0 [ 1779.813793][T13558] ret_from_fork+0x48/0x80 [ 1779.818284][T13558] ? kthread_blkcg+0xd0/0xd0 [ 1779.823214][T13558] ret_from_fork_asm+0x11/0x20 [ 1779.828348][T13558] [ 1779.844566][T13558] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 1779.861376][T13558] Bluetooth: hci3: failed to register connection device [ 1780.200346][T20880] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1781.641746][T20909] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4084'. [ 1781.900161][ T5777] Bluetooth: hci3: command 0x0406 tx timeout [ 1781.982398][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1783.458082][ T28] audit: type=1326 audit(1786114841.805:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20904 comm="syz.2.4082" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3799e0d9 code=0x7fc00000 [ 1785.398066][T20944] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4094'. [ 1786.121605][T20955] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1786.511518][ T28] audit: type=1326 audit(1786114844.754:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20959 comm="syz.3.4087" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc02d39e0d9 code=0x0 [ 1787.000422][T20969] fuse: Bad value for 'fd' [ 1788.190584][T20977] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4105'. [ 1789.982967][T20993] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1790.231052][T20997] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4114'. [ 1790.253612][T20997] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4114'. [ 1790.329803][T21003] futex_wake_op: syz.1.4113 tries to shift op by 144; fix this program [ 1790.439388][T20997] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1790.474392][T20997] bond7: (slave bond0): making interface the new active one [ 1790.490957][T20997] bond7: (slave bond0): Enslaving as an active interface with an up link [ 1790.626001][T21004] netlink: 'syz.3.4114': attribute type 4 has an invalid length. [ 1790.680701][T21004] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4114'. [ 1790.741914][T21004] wlan1: mtu less than device minimum [ 1791.458242][T21010] Process accounting resumed [ 1792.499363][T21018] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4116'. [ 1792.639783][T21025] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1792.950633][T21035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4125'. [ 1792.974540][T21035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4125'. [ 1792.984381][T21035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4125'. [ 1792.993911][T21035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4125'. [ 1793.003631][T21035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4125'. [ 1795.101810][T21066] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1795.588167][T21074] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4134'. [ 1795.866815][T21082] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 1797.466757][T21106] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1797.758416][T21115] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4146'. [ 1798.616434][T21119] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4145'. [ 1798.678290][T21115] geneve0: left promiscuous mode [ 1798.965726][T21115] team0 (unregistering): Port device geneve0 removed [ 1800.230283][T21138] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1800.361253][T21140] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4153'. [ 1802.490820][T21163] MTD: Couldn't look up './dev/mtdblock0': -2 [ 1803.582925][T21173] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4161'. [ 1803.626988][T21176] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1804.866468][T21173] team0 (unregistering): Port device geneve0 removed [ 1806.725130][T21208] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4173'. [ 1809.176093][T21236] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4179'. [ 1811.477331][T21257] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1812.726097][T21269] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1813.030976][T21275] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4192'. [ 1813.881798][T21275] overlayfs: failed to clone upperpath [ 1815.271360][T21291] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4194'. [ 1815.542415][T21299] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1816.928608][T21307] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1818.225168][T21321] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4204'. [ 1819.681937][T21334] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4209'. [ 1819.739946][T21338] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1820.391665][ T28] audit: type=1326 audit(1786114876.533:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21339 comm="syz.3.4211" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc02d39e0d9 code=0x7ffc0000 [ 1821.284709][T21347] syz.3.4211(21347): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 1821.342547][ T28] audit: type=1326 audit(1786114876.533:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21339 comm="syz.3.4211" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc02d39e0d9 code=0x7ffc0000 [ 1821.743865][ T28] audit: type=1326 audit(1786114876.543:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21339 comm="syz.3.4211" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fc02d39e0d9 code=0x7ffc0000 [ 1821.943898][ T28] audit: type=1326 audit(1786114876.543:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21339 comm="syz.3.4211" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc02d39e0d9 code=0x7ffc0000 [ 1822.060870][ T28] audit: type=1326 audit(1786114876.543:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21339 comm="syz.3.4211" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc02d39e0d9 code=0x7ffc0000 [ 1822.104211][ T28] audit: type=1326 audit(1786114876.596:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21339 comm="syz.3.4211" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fc02d39e0d9 code=0x7ffc0000 [ 1822.131784][ T28] audit: type=1326 audit(1786114876.596:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21339 comm="syz.3.4211" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc02d39e0d9 code=0x7ffc0000 [ 1822.177644][ T28] audit: type=1326 audit(1786114876.596:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21339 comm="syz.3.4211" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc02d39e0d9 code=0x7ffc0000 [ 1822.213988][ T28] audit: type=1326 audit(1786114876.606:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21339 comm="syz.3.4211" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fc02d39e0d9 code=0x7ffc0000 [ 1822.274609][ T28] audit: type=1326 audit(1786114877.473:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21339 comm="syz.3.4211" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc02d39e0d9 code=0x7ffc0000 [ 1822.810881][ T5777] Bluetooth: hci3: unexpected event for opcode 0x0c26 [ 1826.384575][T21395] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 1828.254941][T21418] netlink: 'syz.3.4236': attribute type 12 has an invalid length. [ 1828.266944][T21418] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4236'. [ 1828.516244][T21426] netlink: 'syz.2.4237': attribute type 1 has an invalid length. [ 1828.542113][T21426] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1828.851750][T21433] overlayfs: failed to clone upperpath [ 1829.271048][T21426] bond3: (slave geneve4): making interface the new active one [ 1829.537850][T21426] bond3: (slave geneve4): Enslaving as an active interface with an up link [ 1830.855324][T21445] ip6t_srh: unknown srh match flags FF3F [ 1830.919261][T21450] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4244'. [ 1830.934253][T21450] overlayfs: failed to clone upperpath [ 1836.277141][T21499] netlink: 'syz.3.4262': attribute type 11 has an invalid length. [ 1836.285569][T21499] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4262'. [ 1836.320045][T21499] ip6erspan1: entered allmulticast mode [ 1837.277689][T21502] netlink: 'syz.1.4260': attribute type 1 has an invalid length. [ 1837.521754][ T5777] Bluetooth: hci0: unexpected event for opcode 0x2027 [ 1837.975278][T21511] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5782] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[21511] [ 1841.398257][T21535] tipc: New replicast peer: 255.255.255.255 [ 1841.408784][T21535] tipc: Enabled bearer , priority 10 [ 1841.440121][T21535] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4268'. [ 1842.225727][T21545] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4271'. [ 1844.528051][T21563] netlink: 'syz.2.4279': attribute type 12 has an invalid length. [ 1844.544161][T21563] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4279'. [ 1844.643161][T21567] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4278'. [ 1845.156191][T21574] tipc: New replicast peer: 255.255.255.255 [ 1845.165858][T21574] tipc: Enabled bearer , priority 10 [ 1845.193067][T21574] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4281'. [ 1846.253714][T21585] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4286'. [ 1846.520024][T21595] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4296'. [ 1846.553346][T21594] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4288'. [ 1847.279403][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1851.108692][T21640] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4301'. [ 1852.132667][T21649] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4304'. [ 1852.178434][T21649] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4304'. [ 1852.369325][T21653] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1853.609855][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 1853.609879][ T28] audit: type=1326 audit(1786114906.885:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21654 comm="syz.0.4307" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62c3f9e0d9 code=0x7ffc0000 [ 1853.689907][ T28] audit: type=1326 audit(1786114906.885:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21654 comm="syz.0.4307" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62c3f9e0d9 code=0x7ffc0000 [ 1853.715748][ T28] audit: type=1326 audit(1786114906.885:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21654 comm="syz.0.4307" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f62c3f9e0d9 code=0x7ffc0000 [ 1853.742587][ T28] audit: type=1326 audit(1786114906.885:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21654 comm="syz.0.4307" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62c3f9e0d9 code=0x7ffc0000 [ 1853.770036][ T28] audit: type=1326 audit(1786114906.885:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21654 comm="syz.0.4307" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62c3f9e0d9 code=0x7ffc0000 [ 1853.794864][ T28] audit: type=1326 audit(1786114906.885:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21654 comm="syz.0.4307" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f62c3f9e0d9 code=0x7ffc0000 [ 1853.866898][ T28] audit: type=1326 audit(1786114906.885:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21654 comm="syz.0.4307" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62c3f9e0d9 code=0x7ffc0000 [ 1853.906352][ T28] audit: type=1326 audit(1786114906.885:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21654 comm="syz.0.4307" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62c3f9e0d9 code=0x7ffc0000 [ 1853.938637][ T28] audit: type=1326 audit(1786114906.885:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21654 comm="syz.0.4307" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f62c3f9e0d9 code=0x7ffc0000 [ 1854.024379][ T28] audit: type=1326 audit(1786114906.885:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21654 comm="syz.0.4307" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62c3f9e0d9 code=0x7ffc0000 [ 1855.281673][T21683] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4314'. [ 1855.329141][T21683] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4314'. [ 1855.454994][T21690] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4316'. [ 1855.513399][T21690] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4316'. [ 1863.730039][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 1863.730305][ T28] audit: type=1326 audit(1786114916.847:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21764 comm="syz.2.4345" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3799e0d9 code=0x7ffc0000 [ 1864.478290][ T28] audit: type=1326 audit(1786114916.847:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21764 comm="syz.2.4345" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3799e0d9 code=0x7ffc0000 [ 1864.570342][ T28] audit: type=1326 audit(1786114916.847:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21764 comm="syz.2.4345" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f4a3799e0d9 code=0x7ffc0000 [ 1864.664237][ T28] audit: type=1326 audit(1786114916.847:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21764 comm="syz.2.4345" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3799e0d9 code=0x7ffc0000 [ 1864.689216][ T28] audit: type=1326 audit(1786114916.847:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21764 comm="syz.2.4345" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3799e0d9 code=0x7ffc0000 [ 1864.736651][ T28] audit: type=1326 audit(1786114916.847:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21764 comm="syz.2.4345" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f4a3799e0d9 code=0x7ffc0000 [ 1864.806023][ T28] audit: type=1326 audit(1786114916.847:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21764 comm="syz.2.4345" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3799e0d9 code=0x7ffc0000 [ 1864.866205][ T28] audit: type=1326 audit(1786114916.847:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21764 comm="syz.2.4345" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3799e0d9 code=0x7ffc0000 [ 1865.128762][ T28] audit: type=1326 audit(1786114916.847:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21764 comm="syz.2.4345" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f4a3799e0d9 code=0x7ffc0000 [ 1865.941765][ T28] audit: type=1326 audit(1786114916.847:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21764 comm="syz.2.4345" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3799e0d9 code=0x7ffc0000 [ 1866.007004][T21789] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1866.422786][T21795] sctp: [Deprecated]: syz.0.4351 (pid 21795) Use of int in max_burst socket option. [ 1866.422786][T21795] Use struct sctp_assoc_value instead [ 1868.097547][T21827] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4363'. [ 1868.124517][T21829] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1868.150907][T21831] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1868.655152][T21839] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 1868.664297][T21839] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 1868.673350][T21839] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 1870.636099][T21857] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1872.197119][T21867] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1872.212693][T21865] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4375'. [ 1874.358800][T21892] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1874.671985][T21899] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4387'. [ 1876.023277][T21913] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4390'. [ 1879.970739][T21941] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4399'. [ 1883.317859][T21956] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4404'. [ 1883.433999][T21958] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1883.918822][T21966] bridge1: left promiscuous mode [ 1883.925088][T21966] bridge2: left promiscuous mode [ 1883.931629][T21966] bond3: left promiscuous mode [ 1883.937489][T21966] geneve2: left promiscuous mode [ 1883.955707][T21966] gretap1: left promiscuous mode [ 1885.124643][T21974] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4409'. [ 1887.936054][T21992] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4415'. [ 1888.210806][T21995] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4418'. [ 1891.445826][T22024] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4426'. [ 1891.550656][T22028] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4427'. [ 1891.837173][T22032] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4429'. [ 1900.052845][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 1900.052887][ T28] audit: type=1107 audit(1786114950.211:498): pid=22112 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='f‹lPH]‰€x»ôµî®@' [ 1903.157211][T22147] bridge4: entered promiscuous mode [ 1903.162882][T22147] bridge4: entered allmulticast mode [ 1914.069442][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1915.395345][ T5777] Bluetooth: hci2: unexpected subevent 0x06 length: 18 > 10 [ 1917.597061][ T5777] Bluetooth: hci2: command 0x0406 tx timeout [ 1921.425129][T22311] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 1921.435127][T22311] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 1921.444139][T22311] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 1922.367221][T22319] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4513'. [ 1923.507472][T22333] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4517'. [ 1927.062263][ T5777] Bluetooth: hci2: unexpected event for opcode 0x2027 [ 1928.952490][T22362] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4525'. [ 1931.894659][T22385] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4533'. [ 1933.057901][T22395] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4536'. [ 1937.118555][T22429] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4548'. [ 1939.406163][T22449] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4552'. [ 1939.787906][T22459] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4558'. [ 1940.171871][T22465] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1942.247465][T22484] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1943.800354][T22507] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1943.818602][T22505] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 1943.827338][T22505] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 1943.836925][T22505] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 1945.444279][T22523] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1950.093766][T22562] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1952.075324][T22566] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4593'. [ 1952.639109][T22584] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1952.656027][T22585] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4599'. [ 1952.830155][T22588] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4602'. [ 1953.075423][T22592] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1953.353127][T22600] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4614'. [ 1955.855976][T22620] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1956.120463][T22628] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4616'. [ 1958.217622][T22645] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4619'. [ 1958.269432][T22646] wg1: left promiscuous mode [ 1958.276377][T22646] mac80211_hwsim hwsim5 wlan0: left promiscuous mode [ 1958.284087][T22646] bridge2: left promiscuous mode [ 1958.289335][T22646] geneve2: left promiscuous mode [ 1958.295996][T22646] macsec1: left promiscuous mode [ 1958.305329][T22646] gretap1: left promiscuous mode [ 1958.312938][T22646] vlan2: left promiscuous mode [ 1958.318439][T22646] bridge3: left promiscuous mode [ 1959.737419][T22663] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1960.472480][ T28] audit: type=1107 audit(1786115006.074:499): pid=22659 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='f‹lPH]‰€x»ôµî®@' [ 1960.937664][T22678] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4629'. [ 1961.906838][T22687] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5772] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[22687] [ 1962.664853][T22696] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4635'. [ 1962.757668][T22699] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1963.732051][T22709] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4640'. [ 1964.963528][T22719] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4643'. [ 1966.438292][T22733] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1967.244200][T22740] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4648'. [ 1968.306038][T22742] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4650'. [ 1968.329107][T22742] 9pnet_virtio: no channels available for device syz [ 1968.351327][T22746] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4651'. [ 1968.561981][T22751] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4653'. [ 1970.889670][T22772] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4661'. [ 1972.162261][T22788] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4668'. [ 1972.621455][T22799] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4674'. [ 1976.487874][T22839] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4685'. [ 1978.806893][T22869] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4697'. [ 1980.380098][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1981.976395][T22900] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1983.311598][T22912] sock: sock_timestamping_bind_phc: sock not bind to device [ 1986.407365][T22953] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4722'. [ 1991.301176][T23010] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4740'. [ 1995.531444][T23041] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4749'. [ 1998.986819][T23079] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4762'. [ 2000.011022][T23094] ipt_REJECT: TCP_RESET invalid for non-tcp [ 2002.254978][T23122] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4777'. [ 2004.765450][T23138] overlayfs: failed to clone lowerpath [ 2004.820433][T23140] ipt_REJECT: TCP_RESET invalid for non-tcp [ 2004.844095][T23138] overlayfs: failed to clone lowerpath [ 2007.274920][T23163] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4790'. [ 2008.215560][T23170] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4791'. [ 2010.826999][T23206] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5782] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[23206] [ 2011.353739][T23210] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4802'. [ 2012.467607][ T5777] Bluetooth: hci3: unexpected event 0x03 length: 12 > 11 [ 2014.408296][T23251] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4814'. [ 2016.765120][T23259] orangefs_mount: mount request failed with -4 [ 2017.220597][T23284] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4825'. [ 2020.330104][T23320] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4835'. [ 2022.358096][ T28] audit: type=1107 audit(1786115063.211:500): pid=23326 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='f‹lPH]‰€x»ôµî®@' [ 2022.480931][T23351] ipt_REJECT: TCP_RESET invalid for non-tcp [ 2023.150125][T23367] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4850'. [ 2024.256247][T23378] ipt_REJECT: TCP_RESET invalid for non-tcp [ 2024.476471][T23386] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4856'. [ 2025.701174][T23407] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4863'. [ 2026.109213][T23416] ipt_REJECT: TCP_RESET invalid for non-tcp [ 2028.671180][T23445] can: request_module (can-proto-3) failed. [ 2028.778524][T23456] ipt_REJECT: TCP_RESET invalid for non-tcp [ 2030.015013][T23462] tipc: New replicast peer: 255.255.255.255 [ 2030.046082][T23462] tipc: Enabled bearer , priority 10 [ 2033.005116][T23498] netlink: 'syz.2.4896': attribute type 10 has an invalid length. [ 2033.013635][T23498] batman_adv: batadv0: Interface deactivated: dummy0 [ 2033.027747][T23498] batman_adv: batadv0: Removing interface: dummy0 [ 2036.052923][T23532] batman_adv: batadv0: Interface deactivated: dummy0 [ 2036.676196][T23532] batman_adv: batadv0: Removing interface: dummy0 [ 2036.933996][T23533] netlink: 'syz.0.4895': attribute type 10 has an invalid length. [ 2036.946947][T23533] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4895'. [ 2041.893256][T23573] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4918'. [ 2044.422545][T23608] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4937'. [ 2046.893823][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 2048.300010][T23643] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4940'. [ 2048.365238][T23647] sock: sock_timestamping_bind_phc: sock not bind to device [ 2050.996534][T23671] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4952'. [ 2051.874920][T23678] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4954'. [ 2054.920813][T23709] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4964'. [ 2056.171753][T23725] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4969'. [ 2060.305482][T23747] Process accounting resumed [ 2066.938801][T23818] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4994'. [ 2071.471354][T23857] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5006'. [ 2074.213800][T23884] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5776] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[23884] [ 2074.996691][T23894] ipt_REJECT: TCP_RESET invalid for non-tcp [ 2075.141958][T23901] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5018'. [ 2075.234983][T23903] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5019'. [ 2076.364416][T23921] IPVS: Error connecting to the multicast addr [ 2076.622868][T23924] ipt_REJECT: TCP_RESET invalid for non-tcp [ 2083.545918][T23992] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5050'. [ 2084.039362][T23995] ipt_REJECT: TCP_RESET invalid for non-tcp [ 2085.881881][T24017] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5782] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[24017] [ 2086.726449][T24028] ..@ÿ: renamed from bond_slave_0 [ 2087.168603][T24037] Cannot find map_set index 135 as target [ 2091.960914][T24094] overlayfs: failed to clone upperpath [ 2095.333146][T24128] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:0 [ 2097.939254][T24153] netlink: 'syz.1.5104': attribute type 10 has an invalid length. [ 2099.315030][T24170] sctp: [Deprecated]: syz.2.5110 (pid 24170) Use of int in max_burst socket option. [ 2099.315030][T24170] Use struct sctp_assoc_value instead [ 2100.125215][ T5777] Bluetooth: hci3: unexpected event for opcode 0x2027 [ 2103.882003][T24215] IPVS: Error connecting to the multicast addr [ 2105.594571][T24228] pim6reg: entered allmulticast mode [ 2106.134923][T24231] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5126'. [ 2109.148350][ T28] audit: type=1326 audit(1786115143.529:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24245 comm="syz.0.5129" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62c3f9e0d9 code=0x7ffc0000 [ 2109.213071][ T28] audit: type=1326 audit(1786115143.529:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24245 comm="syz.0.5129" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62c3f9e0d9 code=0x7ffc0000 [ 2109.248885][ T28] audit: type=1326 audit(1786115143.529:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24245 comm="syz.0.5129" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7f62c3f9e0d9 code=0x7ffc0000 [ 2109.305151][ T28] audit: type=1326 audit(1786115143.529:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24245 comm="syz.0.5129" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62c3f9e0d9 code=0x7ffc0000 [ 2109.339103][ T28] audit: type=1326 audit(1786115143.529:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24245 comm="syz.0.5129" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62c3f9e0d9 code=0x7ffc0000 [ 2109.587186][T24267] ipt_REJECT: TCP_RESET invalid for non-tcp [ 2111.871369][T24282] overlayfs: failed to clone upperpath [ 2112.984320][T24286] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5140'. [ 2113.455147][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 2114.939476][T24312] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5150'. [ 2114.948997][T24307] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5148'. [ 2114.961504][T24312] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5150'. [ 2114.971164][T24312] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5150'. [ 2114.980639][T24312] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5150'. [ 2116.436831][ T5777] Bluetooth: hci0: unexpected event for opcode 0x2027 [ 2117.143845][T24335] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5155'. [ 2118.526494][T24350] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5161'. [ 2119.163795][T24355] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5164'. [ 2120.310387][T24371] ipt_REJECT: TCP_RESET invalid for non-tcp [ 2120.572380][T24380] netlink: 'syz.1.5173': attribute type 10 has an invalid length. [ 2120.595027][T24380] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5173'. [ 2120.604848][T24380] dummy0: entered promiscuous mode [ 2122.187585][T24390] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5176'. [ 2122.228940][T24391] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5175'. [ 2122.344743][T24397] overlayfs: failed to clone upperpath [ 2123.344715][T24405] pim6reg: entered allmulticast mode [ 2123.369020][T24404] ipt_REJECT: TCP_RESET invalid for non-tcp [ 2125.855129][T24425] overlayfs: failed to clone upperpath [ 2126.009140][T24432] netlink: 'syz.2.5184': attribute type 10 has an invalid length. [ 2126.037680][T24432] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5184'. [ 2127.473839][T24448] ipt_REJECT: TCP_RESET invalid for non-tcp [ 2131.830926][T24481] @0Ù: renamed from dummy0 (while UP) [ 2138.171438][T24540] netlink: 'syz.3.5200': attribute type 10 has an invalid length. [ 2138.193146][T24540] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5200'. [ 2138.213749][T24540] dummy0: entered promiscuous mode [ 2139.894210][T24564] overlay: ./file0 is not a directory [ 2140.817367][T24571] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5222'. [ 2143.259910][ T5777] Bluetooth: hci2: unexpected event for opcode 0x2027 [ 2144.303415][T24611] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5241'. [ 2145.097078][T24621] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5236'. [ 2149.022665][ T5777] Bluetooth: hci0: unexpected event for opcode 0x2027 [ 2151.257348][T24674] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5253'. [ 2154.560373][T24702] ipt_REJECT: TCP_RESET invalid for non-tcp [ 2156.012894][T24709] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5267'. [ 2157.844406][ T5777] Bluetooth: hci3: unexpected event for opcode 0x2027 [ 2160.504707][T24746] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5279'. [ 2161.927100][T24763] ipt_REJECT: TCP_RESET invalid for non-tcp [ 2162.528449][ T5777] Bluetooth: hci3: unexpected event for opcode 0x2027 [ 2164.967529][T24779] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5290'. [ 2166.561678][T24801] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5298'. [ 2166.591377][T24799] ipt_REJECT: TCP_RESET invalid for non-tcp [ 2168.028813][T24814] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5302'. [ 2168.524644][ T5777] Bluetooth: hci2: unexpected event for opcode 0x2027 [ 2170.591162][T24834] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5309'. [ 2171.833446][T24843] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5314'. [ 2173.760603][T24860] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 2175.781626][ T5777] Bluetooth: hci0: unexpected event for opcode 0x2027 [ 2176.040130][T24878] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5323'. [ 2180.007279][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 2181.312696][T24935] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5334'. [ 2183.118156][T24950] netlink: 200 bytes leftover after parsing attributes in process `syz.3.5348'. [ 2185.733033][T24976] /dev/nullb0: Can't lookup blockdev [ 2187.173108][T24985] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5355'. [ 2190.427285][ T5777] Bluetooth: hci3: unexpected event for opcode 0x2027 [ 2191.128714][ T5777] Bluetooth: hci2: unexpected event for opcode 0x2027 [ 2192.948419][T25021] raw_sendmsg: syz.1.5358 forgot to set AF_INET. Fix it! [ 2193.161796][T25021] ceph: No mds server is up or the cluster is laggy [ 2193.170395][ T8010] libceph: connect (1)[c::]:6789 error -22 [ 2193.177732][ T8010] libceph: mon0 (1)[c::]:6789 connect error [ 2193.973832][T21020] libceph: connect (1)[c::]:6789 error -22 [ 2193.980002][T21020] libceph: mon0 (1)[c::]:6789 connect error [ 2194.790962][T25041] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5371'. [ 2196.402715][T25050] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 2201.364548][T25084] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5383'. [ 2203.359671][T25093] ipt_REJECT: TCP_RESET invalid for non-tcp [ 2208.069022][T25128] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5395'. [ 2208.078612][T25130] ipt_REJECT: TCP_RESET invalid for non-tcp [ 2211.416233][T25165] ipt_REJECT: TCP_RESET invalid for non-tcp [ 2212.941307][T25176] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5411'. [ 2213.362399][T25174] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 2213.512043][T25180] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5412'. [ 2215.953873][T13558] Bluetooth: hci3: unexpected event for opcode 0x2027 [ 2221.183960][T25249] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5424'. [ 2225.323691][T25285] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5439'. [ 2229.478148][T13558] Bluetooth: hci3: unexpected event for opcode 0x2027 [ 2231.063121][T25321] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5451'. [ 2237.050341][T25370] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5466'. [ 2246.627747][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 2246.914539][T25414] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5478'. [ 2248.350618][T25429] ipt_REJECT: TCP_RESET invalid for non-tcp [ 2251.751620][T25453] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5492'. [ 2256.770000][T25488] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5504'. [ 2261.217449][T13558] Bluetooth: hci3: unexpected event for opcode 0x2027 [ 2263.766419][T13558] Bluetooth: hci3: unexpected event for opcode 0x2027 [ 2265.994895][T13558] Bluetooth: hci3: unexpected event for opcode 0x2027 [ 2269.297760][T25556] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5517'. [ 2269.925285][T13558] Bluetooth: hci3: unexpected event for opcode 0x2027 [ 2272.014656][T13558] Bluetooth: hci3: unexpected event for opcode 0x2027 [ 2275.862311][T25599] overlayfs: failed to clone upperpath [ 2276.202447][T25600] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5535'. [ 2277.560158][T13558] Bluetooth: hci3: unexpected event for opcode 0x2027 [ 2279.143975][T13558] Bluetooth: hci2: unexpected event for opcode 0x2027 [ 2281.457993][T25644] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5548'. [ 2281.797853][T25648] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 2283.553237][T25662] overlay: ./file0 is not a directory [ 2283.568615][T13558] Bluetooth: hci3: unexpected event for opcode 0x2027 [ 2284.819478][T25679] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5553'. [ 2285.002631][T25680] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2285.047632][T13558] Bluetooth: hci2: unexpected event for opcode 0x2027 [ 2285.394780][ T28] audit: type=1326 audit(1786115305.927:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25671 comm="syz.0.5554" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f62c3f9e0d9 code=0x0 [ 2287.463433][T13558] Bluetooth: hci0: unexpected event for opcode 0x2027 [ 2287.545429][T25695] bond0: (slave ip_vti0): Error: Device can not be enslaved while up [ 2287.824617][T25697] Bluetooth: hci3: unexpected event for opcode 0x2027 [ 2288.119273][T25702] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5560'. [ 2288.742659][T25712] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5565'. [ 2288.760038][T25712] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5565'. [ 2288.773217][T25712] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5565'. [ 2288.783785][T25712] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5565'. [ 2288.793986][T25712] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5565'. [ 2289.802473][T25697] Bluetooth: hci0: unexpected event for opcode 0x2027 [ 2291.319296][T25730] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5570'. [ 2291.568458][T25697] Bluetooth: hci2: unexpected event for opcode 0x2027 [ 2292.615086][T25697] Bluetooth: hci0: unexpected event for opcode 0x2027 [ 2293.503021][T25697] Bluetooth: hci2: unexpected event for opcode 0x2027 [ 2293.724696][T25751] No source specified [ 2296.340835][T25769] @0Ù: renamed from dummy0 (while UP) [ 2297.606241][T25777] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5583'. [ 2298.141565][T25697] Bluetooth: hci3: unexpected event for opcode 0x2027 [ 2299.809293][T25697] Bluetooth: hci3: unexpected event for opcode 0x2027 [ 2303.772810][T25697] Bluetooth: hci2: unexpected event for opcode 0x2027 [ 2304.708226][T25820] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5595'. [ 2308.131206][T25697] Bluetooth: hci2: unexpected event for opcode 0x2027 [ 2310.763138][T25863] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5605'. [ 2311.519259][T25869] UBIFS error (pid: 25869): cannot open "", error -22 [ 2311.676797][T25697] Bluetooth: hci3: unexpected event for opcode 0x2027 [ 2313.414874][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 2314.362946][T25697] Bluetooth: hci2: unexpected event for opcode 0x2027 [ 2314.630889][T25883] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2314.644228][T25883] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2314.655718][T25883] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2314.667393][T25883] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2314.680399][T25883] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2314.692541][T25883] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2314.703911][T25883] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2314.716975][T25883] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2314.728731][T25883] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2314.741449][T25883] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2317.949231][T25697] Bluetooth: hci2: unexpected event for opcode 0x200c [ 2320.266242][T25936] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5624'. [ 2320.320648][T25697] Bluetooth: hci2: unexpected event for opcode 0x2027 [ 2322.038175][ T28] audit: type=1326 audit(1786115338.858:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25932 comm="syz.3.5623" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc02d39e0d9 code=0x7ffc0000 [ 2322.156042][ T28] audit: type=1326 audit(1786115338.858:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25932 comm="syz.3.5623" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc02d39e0d9 code=0x7ffc0000 [ 2322.332237][ T28] audit: type=1326 audit(1786115338.922:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25932 comm="syz.3.5623" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7fc02d39e0d9 code=0x7ffc0000 [ 2322.358563][ T28] audit: type=1326 audit(1786115338.922:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25932 comm="syz.3.5623" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc02d39e0d9 code=0x7ffc0000 [ 2322.387418][ T28] audit: type=1326 audit(1786115338.922:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25932 comm="syz.3.5623" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc02d39e0d9 code=0x7ffc0000 [ 2322.414954][ T28] audit: type=1326 audit(1786115338.922:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25932 comm="syz.3.5623" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7fc02d39e0d9 code=0x7ffc0000 [ 2322.447718][ T28] audit: type=1326 audit(1786115338.922:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25932 comm="syz.3.5623" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc02d39e0d9 code=0x7ffc0000 [ 2322.509090][ T28] audit: type=1326 audit(1786115338.922:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25932 comm="syz.3.5623" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc02d39e0d9 code=0x7ffc0000 [ 2322.553789][ T28] audit: type=1326 audit(1786115338.931:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25932 comm="syz.3.5623" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7fc02d39e0d9 code=0x7ffc0000 [ 2322.598673][ T8010] libceph: connect (1)[c::]:6789 error -101 [ 2322.632171][ T8010] libceph: mon0 (1)[c::]:6789 connect error [ 2322.660977][ T28] audit: type=1326 audit(1786115338.931:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25932 comm="syz.3.5623" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc02d39e0d9 code=0x7ffc0000 [ 2323.790131][ T8010] libceph: connect (1)[c::]:6789 error -101 [ 2323.797283][ T8010] libceph: mon0 (1)[c::]:6789 connect error [ 2323.838296][T25947] ceph: No mds server is up or the cluster is laggy [ 2324.817808][T25964] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5617'. [ 2326.267457][T25978] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5631'. [ 2326.294781][T25978] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5631'. [ 2328.939187][T25697] Bluetooth: hci2: unexpected event for opcode 0x2027 [ 2329.597393][T26001] tmpfs: Bad value for 'mpol' [ 2331.084649][T26024] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5642'. [ 2335.162427][T25697] Bluetooth: hci0: unexpected event for opcode 0x2027 [ 2335.305649][T26061] IPVS: Error connecting to the multicast addr [ 2337.384693][T26073] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5657'. [ 2339.445238][ T28] kauditd_printk_skb: 36 callbacks suppressed [ 2339.445266][ T28] audit: type=1326 audit(1786115355.004:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26074 comm="syz.1.5656" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f399159e0d9 code=0x7ffc0000 [ 2339.732236][ T28] audit: type=1326 audit(1786115355.004:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26074 comm="syz.1.5656" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f399159e0d9 code=0x7ffc0000 [ 2340.029971][ T28] audit: type=1326 audit(1786115355.189:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26074 comm="syz.1.5656" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f399159e0d9 code=0x7ffc0000 [ 2340.148407][ T28] audit: type=1326 audit(1786115355.189:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26074 comm="syz.1.5656" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f399159e0d9 code=0x7ffc0000 [ 2340.292276][ T28] audit: type=1326 audit(1786115355.189:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26074 comm="syz.1.5656" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f399159e0d9 code=0x7ffc0000 [ 2340.352612][ T28] audit: type=1326 audit(1786115355.318:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26074 comm="syz.1.5656" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f399159e0d9 code=0x7ffc0000 [ 2340.378968][ T28] audit: type=1326 audit(1786115355.318:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26074 comm="syz.1.5656" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f399159e0d9 code=0x7ffc0000 [ 2340.405447][ T28] audit: type=1326 audit(1786115355.318:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26074 comm="syz.1.5656" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f399159e0d9 code=0x7ffc0000 [ 2340.449579][ T28] audit: type=1326 audit(1786115355.484:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26074 comm="syz.1.5656" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f399159e0d9 code=0x7ffc0000 [ 2340.637171][T26084] ipt_REJECT: TCP_RESET invalid for non-tcp [ 2340.708936][ T28] audit: type=1326 audit(1786115355.484:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26074 comm="syz.1.5656" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f399159e0d9 code=0x7ffc0000 [ 2343.507149][T26109] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5669'. [ 2343.706382][T25697] Bluetooth: hci3: unexpected event for opcode 0x0000 [ 2347.948470][T25697] Bluetooth: hci3: unexpected event for opcode 0x2027 [ 2348.205872][T26144] ipt_REJECT: TCP_RESET invalid for non-tcp [ 2348.817738][T26150] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5679'. [ 2350.070959][T25697] Bluetooth: hci3: unexpected event for opcode 0x2027 [ 2350.673617][T26166] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 2352.136655][T26179] ipt_REJECT: TCP_RESET invalid for non-tcp [ 2352.988788][T25697] Bluetooth: hci3: unexpected event for opcode 0x2027 [ 2353.122481][T26185] ipt_REJECT: TCP_RESET invalid for non-tcp [ 2354.038229][T26194] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5691'. [ 2354.431272][T26195] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2354.549176][ T28] kauditd_printk_skb: 36 callbacks suppressed [ 2354.549217][ T28] audit: type=1326 audit(1786115370.117:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26186 comm="syz.2.5690" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4a3799e0d9 code=0x0 [ 2355.503150][T25697] Bluetooth: hci3: unexpected event for opcode 0x2027 [ 2358.006063][T26221] ipt_REJECT: TCP_RESET invalid for non-tcp [ 2358.495238][T25697] Bluetooth: hci0: unexpected event for opcode 0x2027 [ 2359.064011][T26227] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5703'. [ 2361.993460][T25697] Bluetooth: hci0: unexpected event for opcode 0x2027 [ 2362.494719][T26263] ipt_REJECT: TCP_RESET invalid for non-tcp [ 2362.887245][T26268] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5713'. [ 2363.032484][T25697] Bluetooth: hci0: unexpected event for opcode 0x2027 [ 2364.511693][ T28] audit: type=1326 audit(1786115378.961:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26271 comm="syz.2.5715" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3799e0d9 code=0x7ffc0000 [ 2364.893753][ T28] audit: type=1326 audit(1786115378.961:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26271 comm="syz.2.5715" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3799e0d9 code=0x7ffc0000 [ 2365.226386][ T28] audit: type=1326 audit(1786115378.961:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26271 comm="syz.2.5715" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f4a3799e0d9 code=0x7ffc0000 [ 2366.102396][ T28] audit: type=1326 audit(1786115378.971:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26271 comm="syz.2.5715" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3799e0d9 code=0x7ffc0000 [ 2366.130160][ T28] audit: type=1326 audit(1786115378.971:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26271 comm="syz.2.5715" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3799e0d9 code=0x7ffc0000 [ 2366.155748][ T28] audit: type=1326 audit(1786115378.971:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26271 comm="syz.2.5715" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f4a3799e0d9 code=0x7ffc0000 [ 2366.252122][ T28] audit: type=1326 audit(1786115378.971:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26271 comm="syz.2.5715" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3799e0d9 code=0x7ffc0000 [ 2366.281395][ T28] audit: type=1326 audit(1786115378.971:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26271 comm="syz.2.5715" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3799e0d9 code=0x7ffc0000 [ 2366.476950][ T28] audit: type=1326 audit(1786115378.971:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26271 comm="syz.2.5715" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f4a3799e0d9 code=0x7ffc0000 [ 2366.558839][ T28] audit: type=1326 audit(1786115378.980:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26271 comm="syz.2.5715" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3799e0d9 code=0x7ffc0000 [ 2367.243753][T25697] Bluetooth: hci2: unexpected event for opcode 0x2027 [ 2369.999293][T25697] Bluetooth: hci0: unexpected event for opcode 0x200c [ 2370.026097][T26310] ipt_REJECT: TCP_RESET invalid for non-tcp [ 2370.134653][T25697] Bluetooth: hci3: unexpected event for opcode 0x2027 [ 2370.903140][T26316] 9pnet_fd: p9_fd_create_tcp (26316): problem binding to privport [ 2372.321978][T25697] Bluetooth: hci0: unexpected event for opcode 0x2027 [ 2372.627193][T26322] IPVS: Error connecting to the multicast addr [ 2374.219897][T25697] Bluetooth: hci0: unexpected event for opcode 0x1009 [ 2375.059121][T26350] ipt_REJECT: TCP_RESET invalid for non-tcp [ 2378.964349][T25697] Bluetooth: hci3: unexpected event for opcode 0x2027 [ 2379.653350][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 2379.702188][T26375] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5742'. [ 2381.187123][T26396] ipt_REJECT: TCP_RESET invalid for non-tcp [ 2381.975671][T26403] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2383.530718][T25697] Bluetooth: hci2: unexpected event for opcode 0x2027 [ 2385.206379][T25697] Bluetooth: hci3: unexpected event for opcode 0x2027 [ 2385.619540][T26425] tipc: Enabling of bearer rejected, failed to enable media [ 2386.310359][T25697] Bluetooth: hci0: unexpected event for opcode 0x2027 [ 2388.319756][T26441] overlayfs: failed to clone lowerpath [ 2389.154090][T25697] Bluetooth: hci3: unexpected event for opcode 0x2027 [ 2390.679706][T25697] Bluetooth: hci2: unexpected event for opcode 0x2027 [ 2394.210880][T25697] Bluetooth: hci2: unexpected event for opcode 0x2027 [ 2397.013261][T26509] gretap2: entered allmulticast mode [ 2398.415625][T26519] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5775'. [ 2400.673288][T26527] netlink: 'syz.2.5778': attribute type 2 has an invalid length. [ 2401.884919][T25697] Bluetooth: hci2: unexpected event for opcode 0x2027 [ 2403.032203][T25697] Bluetooth: hci3: unexpected event for opcode 0x2027 [ 2403.977686][T26557] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5785'. [ 2404.510606][T26564] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5787'. [ 2406.113552][T25697] Bluetooth: hci3: unexpected event for opcode 0x2027 [ 2406.915213][T26587] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5794'. [ 2409.102472][T25697] Bluetooth: hci0: unexpected event for opcode 0x2027 [ 2409.640060][T26603] CIFS: Attempting to mount //127.0.0.1/share [ 2409.660481][T26603] CIFS: VFS: Error connecting to socket. Aborting operation. [ 2409.669122][T26603] CIFS: VFS: cifs_mount failed w/return code = -111 [ 2410.007293][T26611] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5802'. [ 2411.889173][T26623] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5804'. [ 2413.986464][T26641] Invalid ELF header magic: != ELF [ 2413.995573][T26641] overlayfs: missing 'lowerdir' [ 2416.203984][T26655] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5814'. [ 2417.649822][T26665] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5815'. [ 2419.118646][T26671] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5819'. [ 2419.668416][T25697] Bluetooth: hci0: unexpected event for opcode 0x2027 [ 2419.794182][T26681] GUP no longer grows the stack in syz.3.5820 (26681): 200000006000-200000009000 (200000004000) [ 2419.806269][T26681] CPU: 0 PID: 26681 Comm: syz.3.5820 Not tainted syzkaller #0 [ 2419.814160][T26681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2419.824365][T26681] Call Trace: [ 2419.827694][T26681] [ 2419.830675][T26681] dump_stack_lvl+0x18c/0x250 [ 2419.835428][T26681] ? show_regs_print_info+0x20/0x20 [ 2419.840949][T26681] ? load_image+0x420/0x420 [ 2419.845611][T26681] ? find_vma+0x134/0x1b0 [ 2419.850148][T26681] fixup_user_fault+0x691/0x750 [ 2419.855158][T26681] fault_in_user_writeable+0x71/0xd0 [ 2419.860581][T26681] futex_lock_pi+0x276/0xa00 [ 2419.865419][T26681] ? fixup_pi_state_owner+0x5f0/0x5f0 [ 2419.870894][T26681] ? userfaultfd_unmap_prep+0x3c0/0x3c0 [ 2419.876883][T26681] do_futex+0x23d/0x3e0 [ 2419.881196][T26681] ? __ia32_sys_get_robust_list+0x110/0x110 [ 2419.887156][T26681] __se_sys_futex+0x3a9/0x440 [ 2419.891898][T26681] ? __x64_sys_futex+0xf0/0xf0 [ 2419.896896][T26681] ? __x64_sys_futex+0x21/0xf0 [ 2419.901888][T26681] do_syscall_64+0x55/0xb0 [ 2419.906449][T26681] ? clear_bhb_loop+0x40/0x90 [ 2419.911299][T26681] ? clear_bhb_loop+0x40/0x90 [ 2419.916330][T26681] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2419.922510][T26681] RIP: 0033:0x7fc02d39e0d9 [ 2419.927063][T26681] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2419.946874][T26681] RSP: 002b:00007fc02e295028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 2419.955581][T26681] RAX: ffffffffffffffda RBX: 00007fc02d626090 RCX: 00007fc02d39e0d9 [ 2419.963782][T26681] RDX: 0000000000000002 RSI: 000000000000008d RDI: 0000200000004000 [ 2419.972163][T26681] RBP: 00007fc02d435024 R08: 0000000000000000 R09: 0000000000000082 [ 2419.980716][T26681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2419.988739][T26681] R13: 00007fc02d626128 R14: 00007fc02d626090 R15: 00007ffcfde2e3f8 [ 2419.997171][T26681] [ 2423.569254][T26707] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5827'. [ 2431.161989][T25697] Bluetooth: hci2: unexpected event for opcode 0x2027 [ 2436.772983][T26773] blktrace: Concurrent blktraces are not allowed on loop6 [ 2437.222038][T26778] netlink: 'syz.1.5846': attribute type 1 has an invalid length. [ 2437.237635][T26778] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5846'. [ 2440.816895][T25697] Bluetooth: hci3: unexpected event for opcode 0x2027 [ 2441.912062][T26802] futex_wake_op: syz.0.5839 tries to shift op by 144; fix this program [ 2447.374311][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 2449.486119][T25697] Bluetooth: hci2: unexpected event for opcode 0x2027 [ 2458.284718][T26883] blktrace: Concurrent blktraces are not allowed on loop0 [ 2459.142901][T25697] Bluetooth: hci0: unexpected event for opcode 0x2027 [ 2461.392383][T26901] xt_socket: unknown flags 0x50 [ 2464.251271][T26915] netlink: 'syz.1.5870': attribute type 2 has an invalid length. [ 2465.981079][T25697] Bluetooth: hci0: unexpected event for opcode 0x200b [ 2469.828257][T26953] netlink: 'syz.0.5887': attribute type 2 has an invalid length. [ 2470.393154][T26964] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5890'. [ 2471.323502][T26968] overlayfs: failed to clone upperpath [ 2471.897385][T25697] Bluetooth: hci0: unexpected event for opcode 0x2027 [ 2483.890514][T27027] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5902'. [ 2484.752147][T27032] blktrace: Concurrent blktraces are not allowed on loop6 [ 2485.183523][T27032] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 2487.062113][T25697] Bluetooth: hci3: unexpected event for opcode 0x2006 [ 2489.518051][T27061] 9pnet_fd: Insufficient options for proto=fd [ 2495.903910][T27095] set match dimension is over the limit! [ 2497.908307][T27113] netlink: 'syz.1.5922': attribute type 10 has an invalid length. [ 2497.920311][T27113] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 2497.971003][T27115] futex_wake_op: syz.3.5920 tries to shift op by 144; fix this program [ 2498.556865][T27115] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5920'. [ 2507.051781][T27188] ipt_REJECT: TCP_RESET invalid for non-tcp [ 2508.753286][T27198] pim6reg: entered allmulticast mode [ 2508.785084][T27198] pim6reg: left allmulticast mode [ 2511.638711][T27228] ipt_REJECT: TCP_RESET invalid for non-tcp [ 2511.810333][T27232] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5951'. [ 2512.523054][T27238] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5956'. [ 2512.751181][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 2512.791459][T27236] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5954'. [ 2513.348306][T25697] Bluetooth: hci3: unexpected event for opcode 0x2027 [ 2514.625137][T27265] ipt_REJECT: TCP_RESET invalid for non-tcp [ 2515.257127][T27277] overlayfs: failed to clone lowerpath [ 2515.317936][T27278] overlayfs: failed to clone lowerpath [ 2517.502727][T27302] ipt_REJECT: TCP_RESET invalid for non-tcp [ 2517.826414][T25697] Bluetooth: hci3: unexpected event for opcode 0x2027 [ 2517.856540][T27304] netlink: 23 bytes leftover after parsing attributes in process `syz.1.5976'. [ 2518.118260][T27315] batadv1: entered promiscuous mode [ 2518.126752][T27315] batadv1: entered allmulticast mode [ 2518.270000][T27318] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 2519.074840][T25697] Bluetooth: hci0: unexpected event for opcode 0x2027 [ 2519.784923][T27334] ipt_REJECT: TCP_RESET invalid for non-tcp [ 2521.052392][T27338] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2523.609788][T27355] Error parsing options; rc = [-22] [ 2524.483678][T25697] Bluetooth: hci3: unexpected event for opcode 0x2027 [ 2525.607568][T27363] blktrace: Concurrent blktraces are not allowed on loop4 [ 2525.986709][T27371] ipt_REJECT: TCP_RESET invalid for non-tcp [ 2527.400523][T27384] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5996'. [ 2531.793750][T27394] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2532.430026][T25697] Bluetooth: hci0: unexpected event for opcode 0x2027 [ 2532.516010][T27406] blktrace: Concurrent blktraces are not allowed on loop4 [ 2534.013172][T25697] Bluetooth: hci0: unexpected event for opcode 0x2027 [ 2535.804937][T27436] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6009'. [ 2535.937514][T27439] ipt_REJECT: TCP_RESET invalid for non-tcp [ 2542.114964][T27475] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6019'. [ 2543.464275][T27481] ipt_REJECT: TCP_RESET invalid for non-tcp [ 2543.889739][T27489] Error parsing options; rc = [-22] [ 2544.241714][T27491] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6023'. [ 2547.258034][T27513] pim6reg: left allmulticast mode [ 2547.318190][T27521] ipt_REJECT: TCP_RESET invalid for non-tcp [ 2547.330573][T27515] 9pnet_virtio: no channels available for device syz [ 2547.622167][T27524] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6034'. [ 2549.273216][T25697] Bluetooth: hci0: unexpected event for opcode 0x2027 [ 2553.681885][T27555] ipt_REJECT: TCP_RESET invalid for non-tcp [ 2554.650103][T27559] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6044'. [ 2556.469048][T27572] [ 2556.471518][T27572] ====================================================== [ 2556.479027][T27572] WARNING: possible circular locking dependency detected [ 2556.486191][T27572] syzkaller #0 Not tainted [ 2556.490919][T27572] ------------------------------------------------------ [ 2556.498689][T27572] syz.0.6047/27572 is trying to acquire lock: [ 2556.505331][T27572] ffff888053f4c068 (&pipe->mutex/1){+.+.}-{3:3}, at: iter_file_splice_write+0x1ba/0xcf0 [ 2556.516055][T27572] [ 2556.516055][T27572] but task is already holding lock: [ 2556.524118][T27572] ffff88802559a418 (sb_writers#5){.+.+}-{0:0}, at: __se_sys_splice+0x398/0x4a0 [ 2556.534389][T27572] [ 2556.534389][T27572] which lock already depends on the new lock. [ 2556.534389][T27572] [ 2556.545809][T27572] [ 2556.545809][T27572] the existing dependency chain (in reverse order) is: [ 2556.556185][T27572] [ 2556.556185][T27572] -> #6 (sb_writers#5){.+.+}-{0:0}: [ 2556.564541][T27572] sb_start_write+0x4d/0x1c0 [ 2556.570439][T27572] mnt_want_write+0x41/0x90 [ 2556.576004][T27572] path_openat+0x768/0x3270 [ 2556.582359][T27572] do_filp_open+0x1f2/0x430 [ 2556.588029][T27572] filp_open+0x180/0x1e0 [ 2556.593255][T27572] nvmet_file_ns_enable+0x74/0x330 [ 2556.599209][T27572] nvmet_ns_enable+0xf4/0x8c0 [ 2556.604954][T27572] nvmet_ns_enable_store+0xd8/0x170 [ 2556.611451][T27572] configfs_write_iter+0x312/0x400 [ 2556.617537][T27572] vfs_write+0x474/0x9a0 [ 2556.622608][T27572] ksys_write+0x151/0x260 [ 2556.627882][T27572] do_syscall_64+0x55/0xb0 [ 2556.632888][T27572] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2556.639926][T27572] [ 2556.639926][T27572] -> #5 (&subsys->lock){+.+.}-{3:3}: [ 2556.648165][T27572] __mutex_lock+0x135/0xc80 [ 2556.653504][T27572] nvmet_ns_device_path_store+0x54/0x150 [ 2556.660058][T27572] configfs_write_iter+0x312/0x400 [ 2556.666100][T27572] vfs_write+0x474/0x9a0 [ 2556.671120][T27572] ksys_write+0x151/0x260 [ 2556.676027][T27572] do_syscall_64+0x55/0xb0 [ 2556.681196][T27572] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2556.687933][T27572] [ 2556.687933][T27572] -> #4 (&p->frag_sem){.+.+}-{3:3}: [ 2556.695480][T27572] down_read+0x46/0x2e0 [ 2556.700392][T27572] configfs_write_iter+0x215/0x400 [ 2556.706362][T27572] vfs_write+0x474/0x9a0 [ 2556.711270][T27572] ksys_write+0x151/0x260 [ 2556.716962][T27572] do_syscall_64+0x55/0xb0 [ 2556.722178][T27572] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2556.728764][T27572] [ 2556.728764][T27572] -> #3 (&buffer->mutex#2){+.+.}-{3:3}: [ 2556.736923][T27572] __mutex_lock+0x135/0xc80 [ 2556.742089][T27572] configfs_read_iter+0x72/0x570 [ 2556.748031][T27572] __kernel_read+0x2e5/0x730 [ 2556.753539][T27572] integrity_kernel_read+0x8a/0xd0 [ 2556.759780][T27572] ima_calc_file_hash+0xb1f/0x1960 [ 2556.765709][T27572] ima_collect_measurement+0x4d4/0xa30 [ 2556.772074][T27572] process_measurement+0x123a/0x1d50 [ 2556.778697][T27572] ima_file_check+0xcc/0x110 [ 2556.785687][T27572] path_openat+0x2910/0x3270 [ 2556.791726][T27572] do_filp_open+0x1f2/0x430 [ 2556.796790][T27572] do_sys_openat2+0x134/0x1d0 [ 2556.802660][T27572] __x64_sys_openat+0x139/0x160 [ 2556.808999][T27572] do_syscall_64+0x55/0xb0 [ 2556.815027][T27572] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2556.822629][T27572] [ 2556.822629][T27572] -> #2 (&iint_mutex_key[depth]){+.+.}-{3:3}: [ 2556.831985][T27572] __mutex_lock+0x135/0xc80 [ 2556.837501][T27572] process_measurement+0x739/0x1d50 [ 2556.843589][T27572] ima_file_check+0xcc/0x110 [ 2556.849101][T27572] path_openat+0x2910/0x3270 [ 2556.854429][T27572] do_file_open_root+0x2f3/0x5a0 [ 2556.860218][T27572] file_open_root+0x167/0x1c0 [ 2556.865535][T27572] kernel_read_file_from_path_initns+0x151/0x230 [ 2556.872783][T27572] _request_firmware+0xb43/0x1520 [ 2556.878892][T27572] request_firmware+0x36/0x50 [ 2556.884227][T27572] reg_reload_regdb+0x9a/0x490 [ 2556.889934][T27572] genl_family_rcv_msg_doit+0x21a/0x310 [ 2556.896369][T27572] genl_rcv_msg+0x611/0x7a0 [ 2556.901968][T27572] netlink_rcv_skb+0x235/0x4c0 [ 2556.907413][T27572] genl_rcv+0x28/0x40 [ 2556.912128][T27572] netlink_unicast+0x7b1/0x930 [ 2556.917632][T27572] netlink_sendmsg+0x8d0/0xbf0 [ 2556.923122][T27572] ____sys_sendmsg+0x61b/0x980 [ 2556.928867][T27572] ___sys_sendmsg+0x2a6/0x360 [ 2556.934313][T27572] __se_sys_sendmsg+0x1d0/0x2c0 [ 2556.940119][T27572] do_syscall_64+0x55/0xb0 [ 2556.945273][T27572] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2556.951898][T27572] [ 2556.951898][T27572] -> #1 (cb_lock){++++}-{3:3}: [ 2556.959025][T27572] down_read+0x46/0x2e0 [ 2556.964374][T27572] genl_rcv+0x19/0x40 [ 2556.968952][T27572] netlink_unicast+0x7b1/0x930 [ 2556.974553][T27572] netlink_sendmsg+0x8d0/0xbf0 [ 2556.980309][T27572] sock_sendmsg+0x23b/0x3a0 [ 2556.985665][T27572] splice_to_socket+0xb92/0x1270 [ 2556.991476][T27572] do_splice+0xe45/0x1b20 [ 2556.996572][T27572] __se_sys_splice+0x398/0x4a0 [ 2557.002579][T27572] do_syscall_64+0x55/0xb0 [ 2557.007900][T27572] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2557.014694][T27572] [ 2557.014694][T27572] -> #0 (&pipe->mutex/1){+.+.}-{3:3}: [ 2557.022322][T27572] __lock_acquire+0x37ef/0x7d80 [ 2557.028095][T27572] lock_acquire+0x19e/0x420 [ 2557.033512][T27572] __mutex_lock+0x135/0xc80 [ 2557.038957][T27572] iter_file_splice_write+0x1ba/0xcf0 [ 2557.045410][T27572] do_splice+0xe45/0x1b20 [ 2557.050555][T27572] __se_sys_splice+0x398/0x4a0 [ 2557.055969][T27572] do_syscall_64+0x55/0xb0 [ 2557.061477][T27572] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2557.068273][T27572] [ 2557.068273][T27572] other info that might help us debug this: [ 2557.068273][T27572] [ 2557.078703][T27572] Chain exists of: [ 2557.078703][T27572] &pipe->mutex/1 --> &subsys->lock --> sb_writers#5 [ 2557.078703][T27572] [ 2557.091739][T27572] Possible unsafe locking scenario: [ 2557.091739][T27572] [ 2557.099472][T27572] CPU0 CPU1 [ 2557.105516][T27572] ---- ---- [ 2557.111008][T27572] rlock(sb_writers#5); [ 2557.115299][T27572] lock(&subsys->lock); [ 2557.122133][T27572] lock(sb_writers#5); [ 2557.129185][T27572] lock(&pipe->mutex/1); [ 2557.133647][T27572] [ 2557.133647][T27572] *** DEADLOCK *** [ 2557.133647][T27572] [ 2557.141814][T27572] 1 lock held by syz.0.6047/27572: [ 2557.147053][T27572] #0: ffff88802559a418 (sb_writers#5){.+.+}-{0:0}, at: __se_sys_splice+0x398/0x4a0 [ 2557.157199][T27572] [ 2557.157199][T27572] stack backtrace: [ 2557.163549][T27572] CPU: 1 PID: 27572 Comm: syz.0.6047 Not tainted syzkaller #0 [ 2557.171559][T27572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2557.182342][T27572] Call Trace: [ 2557.185655][T27572] [ 2557.188792][T27572] dump_stack_lvl+0x18c/0x250 [ 2557.193669][T27572] ? load_image+0x420/0x420 [ 2557.198391][T27572] ? show_regs_print_info+0x20/0x20 [ 2557.203723][T27572] ? print_circular_bug+0x12b/0x1a0 [ 2557.209223][T27572] check_noncircular+0x2fc/0x400 [ 2557.215070][T27572] ? print_deadlock_bug+0x5d0/0x5d0 [ 2557.220392][T27572] ? lockdep_lock+0xf5/0x230 [ 2557.225669][T27572] ? _find_first_zero_bit+0xd6/0x100 [ 2557.231615][T27572] __lock_acquire+0x37ef/0x7d80 [ 2557.237122][T27572] ? lock_chain_count+0x20/0x20 [ 2557.242424][T27572] ? preempt_schedule_thunk+0x1a/0x30 [ 2557.248035][T27572] ? verify_lock_unused+0x140/0x140 [ 2557.254250][T27572] ? _raw_spin_unlock_irqrestore+0x111/0x120 [ 2557.261008][T27572] ? _raw_spin_unlock+0x40/0x40 [ 2557.266983][T27572] ? stack_trace_save+0xaa/0x100 [ 2557.273219][T27572] ? stack_trace_snprint+0xf0/0xf0 [ 2557.279665][T27572] lock_acquire+0x19e/0x420 [ 2557.285037][T27572] ? iter_file_splice_write+0x1ba/0xcf0 [ 2557.291330][T27572] ? do_splice+0xe45/0x1b20 [ 2557.296449][T27572] ? __se_sys_splice+0x398/0x4a0 [ 2557.301978][T27572] ? do_syscall_64+0x55/0xb0 [ 2557.307078][T27572] ? __might_sleep+0xe0/0xe0 [ 2557.312090][T27572] ? read_lock_is_recursive+0x20/0x20 [ 2557.319328][T27572] __mutex_lock+0x135/0xc80 [ 2557.325760][T27572] ? iter_file_splice_write+0x1ba/0xcf0 [ 2557.334288][T27572] ? iter_file_splice_write+0x1ba/0xcf0 [ 2557.340797][T27572] ? mutex_lock_nested+0x20/0x20 [ 2557.346960][T27572] ? iter_file_splice_write+0x1a4/0xcf0 [ 2557.353000][T27572] ? rcu_is_watching+0x15/0xb0 [ 2557.358182][T27572] ? iter_file_splice_write+0x1a4/0xcf0 [ 2557.363940][T27572] ? __kmalloc+0xe5/0x240 [ 2557.368799][T27572] iter_file_splice_write+0x1ba/0xcf0 [ 2557.375329][T27572] ? lockdep_hardirqs_on+0x98/0x150 [ 2557.380761][T27572] ? lock_acquire+0x208/0x420 [ 2557.385661][T27572] ? splice_from_pipe+0x180/0x180 [ 2557.391012][T27572] ? rcu_read_lock_any_held+0xb4/0x140 [ 2557.396858][T27572] ? rcu_read_lock_bh_held+0x100/0x100 [ 2557.402542][T27572] ? fsnotify_perm+0x5d/0x5e0 [ 2557.407300][T27572] ? splice_from_pipe+0x180/0x180 [ 2557.412392][T27572] do_splice+0xe45/0x1b20 [ 2557.416961][T27572] ? preempt_schedule+0xc0/0xd0 [ 2557.422685][T27572] ? preempt_schedule_common+0x82/0xc0 [ 2557.428751][T27572] ? __secure_computing+0x2f0/0x2f0 [ 2557.434205][T27572] ? __fget_files+0x28/0x460 [ 2557.439133][T27572] ? wait_for_space+0x2d0/0x2d0 [ 2557.444130][T27572] ? __fdget+0x180/0x210 [ 2557.448695][T27572] __se_sys_splice+0x398/0x4a0 [ 2557.453782][T27572] ? __x64_sys_splice+0xf0/0xf0 [ 2557.459457][T27572] ? __x64_sys_splice+0x21/0xf0 [ 2557.465166][T27572] do_syscall_64+0x55/0xb0 [ 2557.470347][T27572] ? clear_bhb_loop+0x40/0x90 [ 2557.475808][T27572] ? clear_bhb_loop+0x40/0x90 [ 2557.481361][T27572] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2557.488460][T27572] RIP: 0033:0x7f62c3f9e0d9 [ 2557.493993][T27572] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2557.515236][T27572] RSP: 002b:00007f62c1db2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 2557.524252][T27572] RAX: ffffffffffffffda RBX: 00007f62c4226270 RCX: 00007f62c3f9e0d9 [ 2557.533662][T27572] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000009 [ 2557.542724][T27572] RBP: 00007f62c4035024 R08: 0000000040010003 R09: 0000000000000000 [ 2557.550905][T27572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2557.560303][T27572] R13: 00007f62c4226308 R14: 00007f62c4226270 R15: 00007fff1e71e518 [ 2557.570781][T27572]