last executing test programs: 10m9.215866198s ago: executing program 32 (id=359): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="28000000100001002abd70000000000000000000", @ANYRES32=r3, @ANYBLOB="802100000000000008000d"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1000]}}}}]}, 0x88}}, 0x20000000) 8m49.660965075s ago: executing program 2 (id=1114): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010101}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt(r0, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) 8m49.561871868s ago: executing program 2 (id=1115): socket$alg(0x26, 0x5, 0x0) syz_open_dev$video(&(0x7f0000000080), 0x8, 0x101000) io_uring_setup(0xbbc, &(0x7f0000000280)={0x0, 0x0, 0x2, 0x0, 0x345}) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x111, 0x8}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r2, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x8000001, &(0x7f0000000300), 0x2, 0x1}}, 0x20) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 8m49.417758433s ago: executing program 2 (id=1116): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010058c6000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 8m48.588825309s ago: executing program 2 (id=1129): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000007c0), 0x1, 0x751, &(0x7f0000001040)="$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") r0 = syz_open_dev$loop(&(0x7f0000000180), 0x7, 0x103482) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='freezer.state\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00000014000800000000000000007f"}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c08, r0) syz_open_dev$usbfs(0x0, 0x11, 0x1) r2 = epoll_create1(0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) r3 = dup(r2) sendto$unix(r3, 0x0, 0x0, 0x20040040, 0x0, 0x0) 8m48.23982132s ago: executing program 2 (id=1120): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) listen(r0, 0x70000008) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r1, &(0x7f0000000240)={0x2, 0x4e22, @multicast1}, 0x10) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000540)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100060c10000000000000000000", 0x58}], 0x1) 8m46.346546091s ago: executing program 2 (id=1137): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000023c0)="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", 0x2000, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000000)='-)\x00', &(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) 8m46.178366106s ago: executing program 33 (id=1137): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000023c0)="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", 0x2000, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000000)='-)\x00', &(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) 8m37.969820467s ago: executing program 0 (id=1174): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 8m37.093932925s ago: executing program 0 (id=1188): bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x114) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000021c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) rmdir(&(0x7f00000000c0)='./file1\x00') chroot(&(0x7f0000000000)='./bus\x00') openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) 8m36.435799196s ago: executing program 0 (id=1195): r0 = socket$can_bcm(0x1d, 0x2, 0x2) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r2) bind$can_j1939(r2, &(0x7f0000000380)={0x1d, r3, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) sendmsg$nl_route_sched_retired(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltclass={0x24, 0x29, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0xfff3, 0xffff}, {0x7, 0xd}, {0xb, 0x7}}}, 0x24}}, 0x4000050) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r2) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3000000011"], 0x30}], 0x1}, 0x0) 8m35.284666712s ago: executing program 0 (id=1205): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f00000005c0)=ANY=[@ANYBLOB="00242ff4db8bb93976908876c50fb6674bb2b1a8a7c85ffeb2f50ecc6580f5d9745bed390400336c8353a34941d38e374a106a9a5c24d7fb50353b13ca870f4f9dd930eb768f5779f12182a97df5b6509c958a511e695afacee3d99e"], 0x6, 0x2b8, &(0x7f0000000640)="$eJzs3U9rK1UYB+B30mQSdZEsXInggC5cXW7v1k2K3AtiV16yUBdabAvSBKGFgn8wduXWjQsXfgJB8IO48RsIbgV3ViiMzGSmSdqYJtJUvH2eTd+eOb+Zd6aHdrro6Ycvj472szg8++LX6HSSaPSjH+dJ9KIRta9iTv+bAAD+z87zPP7IJ9bJJRHR2VxbAMAGrfbzvzktf7qTtgCADXr67ntv7+zuPn4nyzrxZPT16aD4zb74ODm+cxgfxzAO4mF04yKifFFoRfm2UJRP8jwfN7NCL14bjU8HRXL0wc/V+Xd+jyjz29GNXjl0+bZR5t/afbydTczkx0Ufz1fX7xf5R9GNFy/Dc/lHC/IxSOP1V2f6fxDd+OWj+CSGsV82Mc1/uZ1lb+bf/vn5+0V7RT4Znw7a5bypfOuOvzQAAAAAAAAAAAAAAAAAAAAAADzDHlR757Sj3L+nGKr239m6KD5pRVbrze/PM8kn9Ylm9wfK83ycx/f1/joPsyzLq4nTfDNeas5uLAgAAAAAAAAAAAAAAAAAAAD318mnnx3tDYcHx7dS1LsBNCPir6cR//Y8/ZmRV2L55HZ1zb3hsFGV83OasyOxVc9JIpa2UdzELT2Wm4rnrvVcFT/8uO4JOzfPaS2+1m0W9eo62ksWP8N21COdapF8l0ZM56Sx4rXSfzqUxzrLL114qLv2vacvlMV4yZxIljX2xm+TJ1eNJFfvIi2f6sJ4qypm4lfWxkrrOTqT+PXvFYndOgAAAAAAAAAAAAAAAAAAYKOmf/274ODZ0mgjb2+sLQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4U9P//79GMa7CK0xO4/jkP75FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7oG/AwAA//83x1yS") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x68c50012, 0x4, 0x0, 0x7, 0xa11, 0x0, 0x0, 0x1}}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./file0/file0\x00', 0x62) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x90, 0x0, 0x7fb, {0x0, 0x0, 0x0, 0xbf5, 0x0, 0x5fd, {0x6, 0x0, 0x9279, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x81}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000006200)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x90, 0x0, 0x14, {0xefffffffffffffff, 0x1, 0x3, 0x6, 0x3c2, 0x100080, {0x0, 0x45, 0x400000000003ffff, 0xffff, 0x4, 0xd, 0x7fff, 0x3, 0xe, 0x6000, 0xa, r2, 0x0, 0x406, 0x4001000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 8m33.708132732s ago: executing program 0 (id=1211): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@wr_drn={0x68, 0x20, {0x7, 0x2000}}, @wr_drn={0x68, 0x20, {0x0, 0x1}}], 0x40}) ioctl$KVM_SET_GUEST_DEBUG_x86(r3, 0x4048ae9b, &(0x7f0000000140)={0x10001}) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r5 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_assert_syzos_kvm_exit$x86(r5, 0x6) syz_kvm_assert_syzos_uexit$x86(r3, r5, 0xffffffffffffffff) 8m32.1947083s ago: executing program 0 (id=1219): r0 = epoll_create(0x7) r1 = epoll_create1(0x0) r2 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)={0x60000000}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f0000000080)={0x1008}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000000)) 8m31.58376109s ago: executing program 34 (id=1219): r0 = epoll_create(0x7) r1 = epoll_create1(0x0) r2 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)={0x60000000}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f0000000080)={0x1008}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000000)) 8m7.778838697s ago: executing program 6 (id=1337): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x1) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_MMIO(r1, 0x20, &(0x7f0000000180)="ac3a143c99b3a58951b08245d7f56b0fe6f1bf2866f1d2aa", 0x0, 0x18) 8m6.171666518s ago: executing program 6 (id=1350): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x10000, 0x0, {}, 0x0, 0x2}}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000040)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e0000002ebe660f38049f9e0064f30fc7b000101f20f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f08b8f4008ee0", 0x5b}], 0x1, 0x48, 0x0, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8m5.144338101s ago: executing program 6 (id=1357): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000000080)={[{@init_itable_val}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@bsdgroups}, {@grpjquota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) getrandom(&(0x7f0000000240)=""/286, 0x11e, 0x100000000000001) 8m3.533497562s ago: executing program 6 (id=1368): r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000280)='./bus\x00', 0x1200840, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x3, 0x39a, &(0x7f00000002c0)="$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") r1 = syz_open_dev$loop(&(0x7f0000000000), 0xf01c, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x51) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000006c0)={0xf5, 0x91d, 0x1}) fallocate(r2, 0x0, 0x9, 0x10001) copy_file_range(r2, 0x0, r2, &(0x7f00000000c0)=0x863, 0x863, 0x0) mremap(&(0x7f00000d5000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffd000/0x2000)=nil) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141442, 0x40) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000180)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1f, 0x1c, "fee8a2ab78fc5e3eb1e00d96072000001ea8a1d91bec8d4b5a6d80b86e5d1600019f00000000000094d75396dccd0ff600000000a81b00000000000000004000", "2809e8dbe108598948224ad54afac11d955397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4996861ac00", "9001001cb7120003000000000000000013100000000f00", [0x1, 0x2]}}) ioctl$LOOP_CHANGE_FD(r1, 0x4c05, 0xffffffffffffffff) 8m2.487869505s ago: executing program 6 (id=1372): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x3e9, 0x800, 0x70bd26, 0x25dfdbfd, {0x0, 0x1, 0x2, 0xffffffffffffffff, 0x1ff, 0x1, 0x3, 0x145c3460, 0x0, 0x0, 0x3}, ["", "", "", ""]}, 0x3c}}, 0x4040040) init_module(&(0x7f0000001a80)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x81, 0x7, 0x4, 0xffffffff, 0x3, 0x6, 0xe, 0x38c, 0x40, 0x1d3, 0x3, 0x0, 0x38, 0x1, 0xfff8, 0x8, 0x5}, [{0x6474e551, 0x8, 0x0, 0xb, 0x8, 0xffffffffffff0000, 0x9, 0x800000000000}]}, 0xffe84, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_int(r1, 0x0, 0x18, 0x0, 0x0) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000500)={'hsr0\x00', &(0x7f00000004c0)=@ethtool_sfeatures={0x3b, 0x2, [{0x200, 0x4a39b33c}, {0x2, 0xb}]}}) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000000)={r1}) connect$phonet_pipe(r2, &(0x7f0000000140)={0x23, 0xf6, 0x5, 0x7}, 0x10) 8m0.844528158s ago: executing program 6 (id=1382): r0 = socket(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}, 0x9}, 0x1c) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000080)=0x8, 0x4) getpeername$packet(r0, 0x0, &(0x7f0000000400)) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000a40), 0x20000, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x7704, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x9a042, 0x4d) 8m0.063868412s ago: executing program 35 (id=1382): r0 = socket(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}, 0x9}, 0x1c) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000080)=0x8, 0x4) getpeername$packet(r0, 0x0, &(0x7f0000000400)) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000a40), 0x20000, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x7704, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x9a042, 0x4d) 7m2.720101026s ago: executing program 5 (id=1733): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffe800000000000000000000000000010ff020000000000000000000000000001"], 0x340a) 6m59.851357787s ago: executing program 5 (id=1746): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x8, 0x4, 0x4, 0x2}, 0x50) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) mremap(&(0x7f0000d44000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000722000/0x4000)=nil) syz_io_uring_setup(0x4b02, &(0x7f0000000080)={0x0, 0xe036, 0x1000, 0x0, 0x20a}, &(0x7f0000000100), 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) munmap(&(0x7f00008e4000/0x1000)=nil, 0x1000) mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x8) r0 = memfd_secret(0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, r0, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x2000000, 0x11, r0, 0x10000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x13, r0, 0x8000000) 6m59.605521785s ago: executing program 5 (id=1751): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) socket$packet(0x11, 0x2, 0x300) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000940)={0x1, 0x1, 0xffff4f11, 0xfffd, 0xffffe00000000003, 0x20000000000000b, 0x1, 0x200, 0x4a, 0x28, 0x80000005, 0x2}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x22883, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x3, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 6m50.730921187s ago: executing program 5 (id=1806): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000340)={[{@test_dummy_encryption}, {@nodioread_nolock}, {@norecovery}]}, 0x3, 0x470, &(0x7f0000000dc0)="$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") r0 = syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000380)='./bus\x00', 0x2004, 0x0, 0x82, 0x0, &(0x7f0000000080)) chdir(&(0x7f00000003c0)='./bus\x00') dup(r0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1860, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x2368810, 0x0, 0x3, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f00000006c0)='.\x00', 0xaa) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000000)=""/40, 0x28) 6m49.306003513s ago: executing program 5 (id=1815): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20940, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) unshare(0x20000400) mknod$loop(0x0, 0x6000, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42402, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3d, 0x0, &(0x7f0000000100)=0xb4) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6m46.117896014s ago: executing program 5 (id=1830): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt6_stats\x00') preadv(r2, &(0x7f0000000380)=[{&(0x7f0000000080)=""/83, 0x53}], 0x1, 0xc9, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) ioctl$PPPIOCGNPMODE(r2, 0xc008744c, &(0x7f0000000000)={0xfd, 0x3}) io_uring_setup(0x1ca1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x9, 0xb, 0xfffff034}, {0x20, 0x81, 0x0, 0xfffff024}, {0x6, 0xfe, 0x0, 0x1}]}, 0x10) sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840) 6m46.012950587s ago: executing program 36 (id=1830): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt6_stats\x00') preadv(r2, &(0x7f0000000380)=[{&(0x7f0000000080)=""/83, 0x53}], 0x1, 0xc9, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) ioctl$PPPIOCGNPMODE(r2, 0xc008744c, &(0x7f0000000000)={0xfd, 0x3}) io_uring_setup(0x1ca1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x9, 0xb, 0xfffff034}, {0x20, 0x81, 0x0, 0xfffff024}, {0x6, 0xfe, 0x0, 0x1}]}, 0x10) sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840) 6m44.34992342s ago: executing program 8 (id=1838): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10) sendto$inet(r1, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) r2 = fcntl$dupfd(r1, 0x406, r1) sendmmsg$inet(r2, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000001a00)="04", 0x1}], 0x1, &(0x7f0000001c40)=[@ip_retopts={{0x10}}], 0x10}}], 0x1, 0x8000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 6m44.34631146s ago: executing program 8 (id=1839): r0 = userfaultfd(0x1) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x20132, 0xffffffffffffffff, 0xb299b000) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) syz_io_uring_setup(0xefe, &(0x7f0000000140)={0x0, 0xcc19, 0x10806}, &(0x7f0000000000), &(0x7f0000000380), &(0x7f0000000000)) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f0000000080)=[{0x6, 0xc0, 0x0, 0x6}]}) fspick(0xffffffffffffff9c, 0x0, 0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) close_range(r1, 0xffffffffffffffff, 0x0) 6m43.301541994s ago: executing program 8 (id=1846): mount$afs(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000140)=[{&(0x7f0000000380)="ae8b7016621ea3de77485f2ce4b7298dbc1789fea6412fd5f428bb3735807bcad893116f61fb64ae17fd24751f64fd3a116af9ee3e84985a771670f6f56a26f9d03277bb0e8b84db35", 0xffde}, {&(0x7f0000001540)="02cb54", 0x3}], 0x2, 0xe) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0x10000008ebc, 0x0) splice(r2, 0x0, r5, 0x0, 0x25a5, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 6m42.951826224s ago: executing program 8 (id=1849): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) migrate_pages(0x0, 0x7ffb, &(0x7f00000000c0)=0x1, 0x0) 6m41.962921026s ago: executing program 8 (id=1852): syz_emit_vhci(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) setpgid(0x0, r0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) getpid() 6m41.83934386s ago: executing program 8 (id=1855): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xcf50, 0x0, 0xffff, 0x9dfe, 0x11}) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r1 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, r1, &(0x7f0000000240)=""/112, 0x349b7f55) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0xfffffff9, 0x7fff, 0xf, "0062007d82000000000000002240f7ffffff00"}) r2 = syz_open_pts(r0, 0x0) r3 = dup3(r2, r0, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000200)=0x17) 6m26.633983294s ago: executing program 37 (id=1855): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xcf50, 0x0, 0xffff, 0x9dfe, 0x11}) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r1 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, r1, &(0x7f0000000240)=""/112, 0x349b7f55) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0xfffffff9, 0x7fff, 0xf, "0062007d82000000000000002240f7ffffff00"}) r2 = syz_open_pts(r0, 0x0) r3 = dup3(r2, r0, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000200)=0x17) 11.244452312s ago: executing program 9 (id=3417): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 10.031313741s ago: executing program 9 (id=3419): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa0000000003"], 0x1c) setsockopt$inet_mreqn(r3, 0x0, 0x25, &(0x7f0000000080)={@multicast1, @local}, 0xc) 9.147579579s ago: executing program 9 (id=3423): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x19, 0x4, 0x8, 0xb}, 0x50) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) connect$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @remote}, 0x10) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) 9.041601032s ago: executing program 9 (id=3425): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0xf0ff) 6.721930486s ago: executing program 7 (id=3430): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x80, 0x1000003, 0x8, 0x1}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c0}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xd}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x400, 0x10001, 0x8, 0xac, 0x5, 0x401}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240040e0}, 0xc890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller0\x00', @broadcast}) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 3.511814228s ago: executing program 9 (id=3435): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) recvfrom$inet(r0, &(0x7f0000000280)=""/205, 0xcd, 0x40002100, 0x0, 0x0) sched_setattr(0xffffffffffffffff, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x8, 0x0, 0x72ea4d80, 0xfffffffffffffffc, 0x108, 0x0, 0x3}, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000240)=0x1020fff, 0x6) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000c80), 0x288400, 0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f000037b000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) madvise(&(0x7f000011f000/0x1000)=nil, 0x1000, 0x4) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x4800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[], 0x9ffc) 3.511483188s ago: executing program 7 (id=3436): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) epoll_create1(0x80000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(0x0, 0x0) io_setup(0x8, 0x0) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x39000, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000e70c00000008000500", @ANYRES64=r0], 0x50}, 0x1, 0x0, 0x0, 0x84}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r3, 0x0, 0x0, 0x4004892, &(0x7f00000001c0)={0x11, 0x1, r2, 0x1, 0x8, 0x6, @remote}, 0x14) 3.441356581s ago: executing program 7 (id=3437): r0 = msgget$private(0x0, 0x0) r1 = socket(0x28, 0x5, 0x0) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r2, 0x10000008) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000180)={0x0, 0xea60}, 0x10) recvfrom$inet_nvme(r1, 0x0, 0xfffffffffffffea6, 0x40000002, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x200000000000000) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x10) msgsnd(r0, 0x0, 0x401, 0x0) msgsnd(r0, 0x0, 0x0, 0x0) 3.240937116s ago: executing program 3 (id=3438): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000000)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000ffdbdf65180000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003002300000008000b000400000006001600100000000500120001000000060011008000000008000b0006000000"], 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'ip6gre0\x00', 0x2000004}, 0x18) socket$nl_route(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000600)={0x1, 'veth1_to_bond\x00', 0x2}, 0x18) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=@newsa={0x138, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@local, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0x40}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@mcast1, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8253c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1}, {0x2, 0x8}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) unlink(&(0x7f0000000040)='./file0\x00') 3.074064272s ago: executing program 1 (id=3439): set_mempolicy(0x4005, &(0x7f0000000040)=0x10000000005, 0x7) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x21) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_opts(r1, 0x84, 0x13, 0xfffffffffffffffe, &(0x7f0000000040)=0x1a) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r2, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) ioctl$SNDCTL_DSP_STEREO(r2, 0xc0045003, &(0x7f00000000c0)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x28042, 0x194) ioctl$FICLONERANGE(r3, 0x4020940d, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) quotactl$Q_SETINFO(0xffffffff80000601, 0x0, 0x0, &(0x7f0000000000)={0x80000a, 0x4000000000005, 0x0, 0xa}) 3.072860822s ago: executing program 1 (id=3440): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a2a1}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x8, 0x80000001, 0x7}, 0x1d}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0000000024c1020000ff1107c2fb7fe0406e52534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 3.055925333s ago: executing program 7 (id=3442): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0xa, 0x4, 0x4, 0x5}, 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) clock_nanosleep(0x2, 0x1, &(0x7f0000000140), 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000080), &(0x7f0000000200)}, 0x20) prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ffb000/0x3000)=nil) prlimit64(0x0, 0x2, &(0x7f0000000040)={0x8000000000009, 0xffffffffffffffff}, 0x0) prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000ffb000/0x4000)=nil) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r3, 0x1, 0x14, &(0x7f0000000100)="0100ddff", 0x6f5e4287163594c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) 3.055652042s ago: executing program 4 (id=3443): r0 = socket(0xa, 0x3, 0xff) r1 = epoll_create1(0x80000) r2 = socket$unix(0x1, 0x5, 0x0) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000140), 0x4001, 0x0) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000040)=0x90, 0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0xa002a008}) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}, 0x9}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000080)=0x8, 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x129a02, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000400)={'wg2\x00'}) sendfile(r4, r3, &(0x7f0000000080)=0xb, 0x8) 3.055265753s ago: executing program 3 (id=3444): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x6) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) recvmmsg(r3, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 2.850101639s ago: executing program 1 (id=3445): r0 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000004c0)='j\x95\'\x8aC\x16\xca\\', &(0x7f0000000c40)='\xe6usek\v\xf6u%\x9b\x00\x00\xad\xeb\x00\x00\x00\x00\x01\x80\x00\x00\xcf\x9b\x9f\b\xb6\xfe\xc8\xda~-\x83w\xf9Z\xd2\xcb\xcdF\xd0#N7\x17\xfc\x1e\xf1\x97\xffxi\xe0KE}]\x8e\xca\xe3+\xc8\x98\x03\x91\x88(\bn\x7f\x0e\x85\xa5\xb4\n?^\xc9\xef\xe0Q\x01\xb6\xa5\x81t\x06\xda\x95\x935\xf1\x18\xac\x00\xf0\xff\xff\x80\x1a\xa1\x06\xfd\x01\x00\x00\x00\x0f\xf8\xe3\x8a\x1f\x9c\xf3\xc5\x1f\xf9\xbf?\xc1\rv\xd3j\r6\x7f\x00'/141, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000001100)='\x01n\xeb\xda5\xb5Q1\xb8\xb5\xdb\xe8\xb6X\xa8M\x03\a\x13\x8b\x12c\x19\xa5\x16\xaf\xee\x90>m?\"K\xa4\x16\xeb\xe6\xf2\x94\xe4\x8e\xb0hAC\x12\xa1a\x00\x00\x00\x00\x00\x00\xc6\xfc\xd8\xafyK\xff\xa6\xdc\xc2\xc3\x90\xec\x8b7)\xfc\xe9I\x16\x8b4\xcc\xeb+\x87\x80\xd3\rW\x7f\x1e\xbd\xeb\x14_0\xf7\xce\x96\xbf\xba\"\x85\x06\xb5\xa7\"\xf5\x03\xff\xe5u\x8eL\xc4\xeb \x89sN\'\x1a`\xe5\xa3\a\xe9\xa8\x1b\x87\xe8\xe3\x9f\xb9-\x9deO\xf1\x9d\xf1\xbd\nJ\xe5\'\xbe\x1c\xb1\x15\xbb\xfaR\xdd\xb5\xe2\xa6\x15\xbd\xa2\xfe\x99\xd8Bk\x96H\xc4\xb1\xc7H\xd6\xac\xf8\xaf\xa6\xbeWvB', &(0x7f00000010c0)='\x8e\x1d\x98\\\x7f\xc3\x91nd\x9f\xb1\x85\xaa\"~%*\xfe\xaf\xfc[}\xa8:\x8d\x91 *\xff\x03\v\xcb\x94\x8e\x80!\xb2', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000003c0)='\x00', &(0x7f0000000400)='(!\xef(.(\\-]\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000200)='^](*\r\\!\x00', &(0x7f0000000500)='{:\'@-\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f00000001c0)='\xe6\xd2=(L\x9f\x1c&\xda\xfa\xf3}\x18\xdckL<\xa5-#\xc8\xb7\x98\f\x87\xcf', &(0x7f0000000540)="82", 0x1) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000440)='.!@*\x00', &(0x7f0000000740)="e5", 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b80)='\xe0\"\xef\xb1\xea\xe6\x9c\xe6\xc8M\xdb\x86\xb3\x8b\xbe\xd5\xbdB\x92\xa0\x19-+a\x13qQ\xd5f39hSr\xafbB\xe2\xe8\xcd\x1bf\x18\x7f\xf27E#\"\xab\x99\xec\x88\x8d\xd8C\x0f\x95\xff\xfeG\xf9t\xb1 \xcc\xc5\xbb\x88\xb6\xd2\xf2Jwq\xf8oG0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, 0x0) write(r3, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r3, &(0x7f00000021c0), 0x5b, 0x40, 0x0) 2.763518332s ago: executing program 4 (id=3447): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0xffffffffffffffff}, {0xffff, 0xffff}, {0xffe0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0x3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x0, 0x10000}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 2.180801161s ago: executing program 7 (id=3448): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062430bc068829afff36b31fa7e35ce95d04"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0x20, 0x0, &(0x7f0000000240)="5cdd3086ddff0066b3c9bbac88a8862c00dffd0013dd00000000000000008100", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r5, 0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000780)=r6}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b70500000000000061106c000000000007000000000000169500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r7, 0x58, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x64, 0x64, 0x3, [@int={0xe, 0x0, 0x0, 0x1, 0x0, 0x63, 0x0, 0xc}, @union={0x10, 0x4, 0x0, 0x5, 0x1, 0x7, [{0xa, 0x5, 0x7}, {0xa, 0x0, 0xa}, {0xe, 0x0, 0x80000001}, {0x8, 0x5, 0x77}]}, @type_tag={0x8, 0x0, 0x0, 0x12, 0x4}, @volatile={0x1, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x2e]}}, &(0x7f00000001c0)=""/244, 0x7f, 0xf4, 0x1, 0x7}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x1, '\x00', r8, r9, 0x5, 0x3, 0x3}, 0x50) ioctl$SIOCSIFHWADDR(r2, 0x40086602, &(0x7f00000006c0)={'geneve0\x00', @dev}) openat$cgroup_procs(r3, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) 1.988849256s ago: executing program 1 (id=3449): r0 = socket(0xa, 0x3, 0x87) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@local, 0x78, r4}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x8936, &(0x7f0000000000)) 1.973948537s ago: executing program 3 (id=3450): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000002d40)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0x10, r2}, 0x10) pipe(&(0x7f0000000080)) pselect6(0x40, &(0x7f0000000200)={0x0, 0x0, 0xd6c1, 0x8, 0x4}, 0x0, &(0x7f0000000140)={0x3ff, 0xffffffffffffdffd, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x192dbfb5, 0xfffffffffffffffc}, 0x0, 0x0) 1.070645256s ago: executing program 7 (id=3451): syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006750d920e70451668aba0102030309021b00010000000009040000010202"], 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) getsockname(r0, &(0x7f0000000100)=@hci, &(0x7f00000001c0)=0x80) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x2}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) close(0x3) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f00000005c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @remote}, 0x2, 0x4, 0x3, 0x3}}, 0x2e) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="2503000000000000040008"], 0x14}}, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.067559896s ago: executing program 4 (id=3452): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x24, 0x29, 0x29, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0xffff}, {0xffff, 0xffff}, {0x2, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 932.82105ms ago: executing program 3 (id=3453): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000010000100000000000000004297e2d90a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000010900010073797a30000000000900030073797a320000000054000000060a010400000000000000000100000008000b400000000038000480340001800b000100657874686472000024000280080001400000000c080003400002000008000440000000220500020007000000140000001100010000000000000000000700000a"], 0xc8}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0x2c0, 0x60, 0xd0e0000, 0x2c0, 0x100, 0x390, 0x1d8, 0x1d8, 0x390, 0x1d8, 0x7fffffe, 0x0, {[{{@uncond, 0xee02, 0x2a0, 0x2c0, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0xefff, 0x0, [{0x20, 0x77, 0x7, 0x2}, {0x6, 0x5d, 0x8, 0xf}, {0x0, 0x7, 0x4, 0x5}, {0x200, 0x10, 0x4, 0x401}, {0x2, 0x7, 0x9, 0x7}, {0x8, 0x2, 0x40, 0x80}, {0x7, 0x10, 0x4, 0xc27e}, {0x0, 0x8, 0x1, 0x9}, {0xa66, 0xf9, 0x2, 0x40}, {0xf207, 0x18, 0x1, 0x6}, {0x2, 0x8, 0x6, 0xb6}, {0x0, 0x5, 0x5, 0x4}, {0x9, 0x7f, 0x5, 0x2}, {0x5, 0x2, 0xf, 0xc00}, {0x1, 0x9, 0x2, 0x54}, {0x3, 0x2b, 0x2, 0x3}, {0xffff, 0x5, 0x6d, 0x7}, {0x6, 0xa, 0x5, 0x51d8}, {0x8, 0xe, 0x5}, {0x0, 0x40, 0x7, 0x88}, {0x7, 0x2, 0x6, 0x3}, {0x98d, 0x2, 0xff, 0x5}, {0x81, 0x1, 0x3, 0x7f}, {0x1, 0x2, 0xc0, 0x86f}, {0x8, 0x2, 0x9, 0x6}, {0x7, 0x75, 0x7, 0xd}, {0x6, 0x6, 0x6, 0x8001}, {0x120, 0x5, 0x2, 0x3dbd}, {0x5, 0x8, 0x9, 0x1}, {0x0, 0x3, 0x9, 0xff}, {0x0, 0x4, 0x0, 0xfffffff8}, {0x7, 0x1, 0x9, 0xd}, {0xfff, 0x7, 0x0, 0xbc}, {0x0, 0x4c, 0x8, 0xff}, {0x8, 0xc0, 0x80, 0x4}, {0x1, 0x1, 0x0, 0x508d}, {0x1ff, 0x5, 0x81, 0xd}, {0x0, 0x0, 0x2, 0x5}, {0x401, 0x3, 0x80, 0x9}, {0x9, 0x2, 0x0, 0x8}, {0x0, 0x1, 0xfb, 0x7}, {0xa, 0xff, 0x1, 0x7fffffff}, {0x7, 0x4, 0x7, 0x40}, {0xa, 0xc, 0x6, 0x5}, {0x9, 0x8, 0x7, 0x10000}, {0xe9, 0x6, 0x3, 0x3}, {0xb, 0x7, 0x7, 0x200}, {0xe, 0x5, 0x6, 0x2}, {0x9, 0x5, 0x0, 0x1}, {0x9, 0x1, 0x7, 0x1}, {0x1c0, 0x5, 0x2, 0x8e1}, {0x0, 0x5, 0x0, 0x7f07}, {0x6, 0x0, 0x1, 0x1ff}, {0x2, 0x28, 0xfc, 0x8}, {0x6, 0x3, 0x7, 0x2}, {0xa, 0xc5, 0x4, 0x3}, {0x3, 0x71, 0x8, 0x7}, {0x6e, 0x2, 0x0, 0x8}, {0x0, 0x7, 0x7, 0x10000}, {0x9, 0x7, 0x5, 0x7}, {0x100, 0x8, 0x3}, {0xd34, 0x7, 0x8}, {0x9, 0x9, 0x1, 0x80000001}, {0x6, 0xfe, 0x3, 0x3}], {0x1}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@multicast2, @empty, 0xffffffff, 0xffffff00, 'veth1_virt_wifi\x00', 'xfrm0\x00', {}, {}, 0x1, 0x1, 0x6c}, 0x9400, 0x70, 0xd0, 0x94}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x5, 0x0, 0x6, 0x4, 0x6], 0x0, 0x3}, {0x0, [0x5, 0x1, 0x6, 0x0, 0x3, 0x1]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x488) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c000680"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00'}) socket(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r4, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r3], 0x38}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 918.654091ms ago: executing program 1 (id=3454): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000880)={0x2020}, 0x2020) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) 856.075823ms ago: executing program 4 (id=3455): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0xb, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x1fc}, 0x1c) listen(r1, 0x80000003) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r2, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @random="246fd483a581", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a35f2", 0x14, 0x6, 0x0, @remote={0xfe, 0x50}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0) 855.485632ms ago: executing program 3 (id=3456): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100000001002089}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x25) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) r4 = fsopen(&(0x7f0000000140)='binder\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) 195.290524ms ago: executing program 3 (id=3457): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$cec(&(0x7f00000001c0), 0x0, 0x14b141) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f00000000c0)={"0e00", 0xffff, 0x6, 0x1e, 0x0, 0x0, "f700", "1200", "211c7f74", "fcffffff", ["0500001400", "47979b000000000200", "0c436d743c97c443084000", "ff81000000008000"]}) r3 = socket$inet6(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111b7000000000085100000020000008500000005"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000019000100000000000000000002"], 0x2c}}, 0x0) sendto$inet6(r3, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000100)={0xeb, 0x0, [{0x1, 0x0, 0x5, 0x7, 0x800, 0x7fffffff, 0x2}]}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xfff1}, {0x0, 0x8}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x4}, @TCA_FQ_PIE_BYTEMODE={0x8, 0xb, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x486, 0x0, 0xfffffffffffffff9}]}) 185.514074ms ago: executing program 4 (id=3458): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r0 = syz_io_uring_setup(0xd02, &(0x7f0000002900)={0x0, 0x10f24e, 0x0, 0x1, 0x290}, 0x0, &(0x7f0000001080)=0x0, &(0x7f0000001040)) syz_io_uring_modify_offsets$generic(0x0, r1, 0x2c, 0x10021) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$dsp(0xffffffffffffff9c, 0x0, 0x8041, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) io_uring_enter(r0, 0x6516, 0x6d93, 0x8, 0x0, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 27.634099ms ago: executing program 4 (id=3459): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x1, 0xb}, {0x9, 0x7}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000088a8ffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 0s ago: executing program 1 (id=3460): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0xfff5, 0x10}, {}, {0x8, 0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x40, 0x6, 0x7, 0x29e}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r3, 0xe}, 0x80, &(0x7f0000001c40)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}, {&(0x7f0000000c40)="38a7cf84b44faa9cf50e1d864c314f524e992d4c29bf61edfe1541cf6767b177c3612122a94da72035b382372efe4c8a4b97285315339666fb227fcfa27be0346d8c6d13052ee71c723b980396092cf2e324b8e80687ea010711bb9fa58a37bed8805cff236cb6f3728aba9410cbabe1ea1a94986c02936aa413dcf58ab63cdc5392067e1a38b2dbf6ee1468e0536fe826664abd1b811d9f13de9383e67e376a523f94f19d9cde823ba9e74a175208720804207672bb44ad4dc672a3e13ba465392d44c669c9ad01e41ec5b852de9487e7be5b3e688f5ff3766cc07e64c5b2a51ae470c9185ae384faf267b45e1231efe947857712d788e2fc43593fa64f4a38bc7b8399a77f3b2e5e60004ac5c3de6b047edee51a2b4830885cc542f1f1e03356830b1b6a1429368334816df19e83aa19ed0ce6e0c2cfb3e2b3048cbb70d689f6f636781d4635a5d1a591229606de1201aaa33ddbfb01c853e1eb49af8175979ac18eba9c33106b92cbdc4720c39301abdbec6b4cb90bcbf230d86a97260dad63cb58fffb731940c1d0f1ac6ef3fab1a5cd46aa8d4775ddcdaf0a09394aef3211402d8d6835f84a153eef5e89ee9aeae3898f00e209f21b761593a962796a26597f3a624e3ef99769be162cdda3ef0193ea8847e70cf87525a46a2c859d417eabe331bed583b5efc102a8ecc96aa91ace54bb8eac2b032dcf40e88bf76a48ad547174a0ead2215eb7fcd486cb3e13cd6740bb91b5122855a6e8c2685cf39faeecda891d98cc7a4cfc37fc869f016285f271f83780de42b8d8eb7125dae4cea0af3dbb3e4f41a1e118a2f6612e2e485c9703", 0x252}], 0x3}, 0x4) kernel console output (not intermixed with test programs): [ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 229.621749][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 229.691508][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 229.713212][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 229.722295][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 229.740138][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 229.748597][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 229.813203][ T8707] loop5: detected capacity change from 0 to 512 [ 229.887434][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 229.898272][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 229.925546][ T8635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.003950][ T8707] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 230.018260][ T8707] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 230.747746][ T8707] EXT4-fs (loop5): 1 truncate cleaned up [ 230.764443][ T8707] EXT4-fs (loop5): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,dioread_nolock,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,bsdgroups,grpjquota=,,errors=continue. Quota mode: none. [ 231.500598][ C1] sched: RT throttling activated [ 231.866916][ T1107] Bluetooth: hci3: command 0x040f tx timeout [ 231.902168][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 231.952547][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 232.038536][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 232.056378][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 232.065454][ T25] audit: type=1326 audit(1781198006.924:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8758 comm="syz.1.1422" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5f52dcee59 code=0x0 [ 232.109772][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 232.132510][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 232.145669][ T8635] device veth0_vlan entered promiscuous mode [ 232.177311][ T8635] device veth1_vlan entered promiscuous mode [ 232.268165][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 232.279086][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 232.297491][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 232.331665][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 232.348064][ T8635] device veth0_macvtap entered promiscuous mode [ 232.375912][ T8635] device veth1_macvtap entered promiscuous mode [ 232.425600][ T8635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.436700][ T8635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.456239][ T8635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.479895][ T8635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.498150][ T8635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 232.511659][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 232.520370][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 232.540129][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 232.561876][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 232.590152][ T8635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.612383][ T8635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.628576][ T8635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.640281][ T8635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.657560][ T8635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 232.667558][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 232.684293][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 232.702150][ T8635] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.711771][ T8635] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.720470][ T8635] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.750740][ T8635] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.920073][ T4254] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.942111][ T4254] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.961984][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 232.974922][ T4582] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.983512][ T4582] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.997672][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 233.365099][ T8795] kernel profiling enabled (shift: 9) [ 233.511813][ T8809] tipc: Can't bind to reserved service type 2 [ 233.905969][ T4232] Bluetooth: hci3: command 0x0419 tx timeout [ 234.523924][ T8859] tmpfs: Bad value for 'mpol' [ 235.751638][ T8882] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1451'. [ 235.862693][ T8892] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1453'. [ 236.059588][ T8902] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1457'. [ 236.133614][ T8905] netlink: 'syz.8.1458': attribute type 27 has an invalid length. [ 236.147347][ T8905] netlink: 'syz.8.1458': attribute type 4 has an invalid length. [ 236.156349][ T8905] netlink: 144 bytes leftover after parsing attributes in process `syz.8.1458'. [ 236.496016][ T8914] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1461'. [ 236.510435][ T8914] device ip6gre1 entered promiscuous mode [ 236.529647][ T8914] netlink: 'syz.1.1461': attribute type 6 has an invalid length. [ 236.538316][ T8914] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1461'. [ 237.060087][ T8930] 8021q: adding VLAN 0 to HW filter on device bond4 [ 237.077687][ T8936] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1469'. [ 237.125856][ T8936] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1469'. [ 237.150802][ T8936] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.195403][ T8936] bond4: (slave bond0): making interface the new active one [ 237.268715][ T8936] bond4: (slave bond0): Enslaving as an active interface with an up link [ 237.282262][ T8938] sch_fq: defrate 53322 ignored. [ 237.320279][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready [ 237.421649][ T8952] device bridge_slave_0 left promiscuous mode [ 237.437027][ T8952] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.458710][ T8952] device bridge_slave_1 left promiscuous mode [ 237.474674][ T8952] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.497476][ T8952] bond0: (slave bond_slave_0): Releasing backup interface [ 237.524596][ T8952] bond0: (slave bond_slave_1): Releasing backup interface [ 237.566365][ T8952] team0: Port device team_slave_0 removed [ 237.585800][ T8952] team0: Port device team_slave_1 removed [ 237.601296][ T8958] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1477'. [ 237.982968][ T8960] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1480'. [ 240.311250][ T7719] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 240.409622][ T8990] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.418876][ T8990] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.427820][ T8990] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.436607][ T8990] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.621141][ T7719] usb 9-1: Using ep0 maxpacket: 32 [ 240.675490][ T9003] netlink: 'syz.7.1497': attribute type 1 has an invalid length. [ 240.741335][ T7719] usb 9-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 240.748911][ T9007] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 240.757850][ T7719] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.762194][ T9007] bond1: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 240.781028][ T9007] bond1: (slave vxcan3): Error -22 calling dev_set_mtu [ 240.809781][ T7719] usb 9-1: config 0 descriptor?? [ 240.858053][ T9003] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 240.871840][ T7719] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 240.888344][ T9003] bond1: (slave vxcan3): Error -22 calling dev_set_mtu [ 241.091163][ T7719] gspca_vc032x: reg_r err -32 [ 241.095925][ T7719] gspca_vc032x: I2c Bus Busy Wait 00 [ 241.136285][ T7719] gspca_vc032x: I2c Bus Busy Wait 00 [ 241.153416][ T7719] gspca_vc032x: I2c Bus Busy Wait 00 [ 241.170036][ T7719] gspca_vc032x: I2c Bus Busy Wait 00 [ 241.206397][ T7719] gspca_vc032x: I2c Bus Busy Wait 00 [ 241.232385][ T7719] gspca_vc032x: I2c Bus Busy Wait 00 [ 241.247895][ T7719] gspca_vc032x: I2c Bus Busy Wait 00 [ 241.265154][ T7719] gspca_vc032x: I2c Bus Busy Wait 00 [ 241.274876][ T7719] gspca_vc032x: I2c Bus Busy Wait 00 [ 241.280256][ T7719] gspca_vc032x: I2c Bus Busy Wait 00 [ 241.288679][ T7719] gspca_vc032x: I2c Bus Busy Wait 00 [ 241.298303][ T7719] gspca_vc032x: I2c Bus Busy Wait 00 [ 241.306531][ T7719] gspca_vc032x: I2c Bus Busy Wait 00 [ 241.315623][ T7719] gspca_vc032x: I2c Bus Busy Wait 00 [ 241.324330][ T7719] gspca_vc032x: I2c Bus Busy Wait 00 [ 241.329701][ T7719] gspca_vc032x: I2c Bus Busy Wait 00 [ 241.339326][ T7719] gspca_vc032x: I2c Bus Busy Wait 00 [ 241.351406][ T7719] gspca_vc032x: I2c Bus Busy Wait 00 [ 241.356772][ T7719] gspca_vc032x: Unknown sensor... [ 241.365090][ T7719] vc032x: probe of 9-1:0.0 failed with error -22 [ 241.495823][ T9046] sch_fq: defrate 53322 ignored. [ 241.530205][ T9048] netlink: 'syz.3.1509': attribute type 27 has an invalid length. [ 241.540032][ T9048] netlink: 'syz.3.1509': attribute type 4 has an invalid length. [ 241.550058][ T9048] __nla_validate_parse: 5 callbacks suppressed [ 241.550070][ T9048] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1509'. [ 242.069697][ T9063] 9pnet: p9_errstr2errno: server reported unknown error Àñ'IÓ$íÛ·=¼ [ 242.594785][ T7719] usb 9-1: USB disconnect, device number 2 [ 242.629041][ T9075] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1519'. [ 243.071853][ T9104] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1529'. [ 243.373111][ T9081] loop5: detected capacity change from 0 to 32768 [ 243.476708][ T9081] (syz.5.1524,9081,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 243.571507][ T9081] (syz.5.1524,9081,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 243.612301][ T9116] device vlan2 entered promiscuous mode [ 243.687981][ T9081] JBD2: Ignoring recovery information on journal [ 243.802882][ T9081] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 244.239907][ T5324] ocfs2: Unmounting device (7,5) on (node local) [ 246.069918][ T9157] kernel read not supported for file /!selinuxwk1ÐmÃ9Éž*T“ýâ‘ïª#j—¼ÞYÌÅmVËvm(pÉ-QZ#Ò{„¿ (pid: 9157 comm: syz.8.1543) [ 246.444344][ T9160] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1547'. [ 248.976330][ T9225] netlink: 'syz.8.1573': attribute type 10 has an invalid length. [ 249.005560][ T9225] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 249.127795][ T9233] netlink: 'syz.8.1574': attribute type 11 has an invalid length. [ 249.995923][ T25] audit: type=1326 audit(1781198024.864:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9215 comm="syz.3.1568" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd2f073ee59 code=0x0 [ 250.954399][ T9266] loop5: detected capacity change from 0 to 512 [ 251.016954][ T9266] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 251.026807][ T9266] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 251.065839][ T9266] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #16: comm syz.5.1583: invalid indirect mapped block 83886080 (level 1) [ 251.126850][ T9266] EXT4-fs (loop5): Remounting filesystem read-only [ 251.137369][ T9266] EXT4-fs (loop5): 1 orphan inode deleted [ 251.143795][ T9266] EXT4-fs (loop5): 1 truncate cleaned up [ 251.149606][ T9266] EXT4-fs (loop5): mounted filesystem without journal. Opts: quota,errors=remount-ro,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000000000040,block_validity,nodelalloc,quota,nolazytime,grpjquota=,mblk_io_submit,barrier=0x00000000000000ff,max_batch_time=0x00000. Quota mode: writeback. [ 252.017529][ T4584] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.046143][ T9278] tipc: Started in network mode [ 252.054481][ T9278] tipc: Node identity ac14140f, cluster identity 4711 [ 252.067892][ T9278] tipc: New replicast peer: 255.255.255.255 [ 252.075947][ T9278] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 252.102758][ T9278] tipc: Enabled bearer , priority 10 [ 252.124312][ T4584] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.211404][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 252.225922][ T4584] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.361791][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 252.414055][ T4584] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.552835][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 252.691103][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 252.831290][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 252.971139][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 253.111663][ T1107] tipc: Node number set to 2886997007 [ 253.251099][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 253.266640][ T25] audit: type=1804 audit(1781198028.134:87): pid=9303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1596" name="bus" dev="ramfs" ino=52278 res=1 errno=0 [ 253.361514][ T25] audit: type=1804 audit(1781198028.184:88): pid=9303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1596" name="bus" dev="ramfs" ino=52278 res=1 errno=0 [ 253.521917][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 255.718761][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.725467][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.763067][ T9298] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1591'. [ 255.782996][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 257.241466][ T9364] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1609'. [ 257.507398][ T4584] device hsr_slave_0 left promiscuous mode [ 257.521276][ T4584] device hsr_slave_1 left promiscuous mode [ 257.531424][ T4584] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 257.548137][ T4584] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 257.567045][ T4584] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 257.574881][ T4584] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 257.586992][ T4584] device veth1_macvtap left promiscuous mode [ 257.609478][ T4584] device veth0_macvtap left promiscuous mode [ 257.621649][ T4584] device veth1_vlan left promiscuous mode [ 257.627569][ T4584] device veth0_vlan left promiscuous mode [ 257.901035][ C1] net_ratelimit: 1 callbacks suppressed [ 257.901055][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 258.855708][ T4584] team0 (unregistering): Port device team_slave_1 removed [ 258.878716][ T4584] team0 (unregistering): Port device team_slave_0 removed [ 258.900238][ T4584] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 258.924994][ T4584] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 258.940801][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 259.047589][ T4584] bond0 (unregistering): Released all slaves [ 259.098413][ T9376] netlink: 'syz.8.1613': attribute type 4 has an invalid length. [ 259.157203][ T9387] netlink: 'syz.8.1613': attribute type 4 has an invalid length. [ 259.737227][ T9407] netlink: 'syz.8.1619': attribute type 5 has an invalid length. [ 259.763621][ T9407] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 259.772789][ T9407] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 259.781936][ T9407] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 259.791163][ T9407] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 259.815112][ T9407] netdevsim netdevsim8 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 259.824530][ T9407] netdevsim netdevsim8 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 259.833789][ T9407] netdevsim netdevsim8 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 259.843130][ T9407] netdevsim netdevsim8 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 260.352201][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 260.362331][ T9412] netlink: 'syz.8.1619': attribute type 5 has an invalid length. [ 260.424182][ T9412] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.433338][ T9412] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.442440][ T9412] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.451553][ T9412] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.246780][ T9412] netdevsim netdevsim8 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 261.256514][ T9412] netdevsim netdevsim8 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 261.265450][ T9412] netdevsim netdevsim8 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 261.274363][ T9412] netdevsim netdevsim8 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 261.396652][ T9418] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1621'. [ 261.420781][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 261.459723][ T9423] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1623'. [ 261.541252][ T9423] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1623'. [ 261.570453][ T9423] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1623'. [ 261.735118][ T9423] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1623'. [ 262.460936][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 263.500750][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 263.839781][ T9438] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1627'. [ 265.029550][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 265.051250][ T9460] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1634'. [ 265.065345][ T9461] loop8: detected capacity change from 0 to 1024 [ 265.281195][ T9461] EXT4-fs (loop8): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 265.388684][ T9460] 8021q: adding VLAN 0 to HW filter on device bond2 [ 265.463377][ T9461] EXT4-fs (loop8): mounted filesystem without journal. Opts: user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000020,bsdgroups,barrier=0x0000000000000005,user_xattr,noinit_itable,,errors=continue. Quota mode: none. [ 266.060823][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 266.297632][ T9479] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1638'. [ 266.655714][ T9484] loop8: detected capacity change from 0 to 16 [ 267.078781][ T9489] netlink: 'syz.1.1640': attribute type 5 has an invalid length. [ 267.091020][ T9489] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 267.099736][ T9489] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 267.108650][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 267.117063][ T9489] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 267.125980][ T9489] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 267.152185][ T9489] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 267.161153][ T9489] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 267.170014][ T9489] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 267.179301][ T9489] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 267.252385][ T9484] erofs: (device loop8): mounted with root inode @ nid 36. [ 267.555349][ T9492] netlink: 'syz.1.1640': attribute type 5 has an invalid length. [ 267.567217][ T9492] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 267.576406][ T9492] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 267.585757][ T9492] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 267.594507][ T9492] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 267.616539][ T9492] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 267.625756][ T9492] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 267.634643][ T9492] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 267.643525][ T9492] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 267.713860][ T9484] netlink: 3 bytes leftover after parsing attributes in process `syz.8.1639'. [ 267.741314][ T9484] 0ªX¹¦À: renamed from caif0 [ 267.749082][ T9484] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 268.140780][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 268.283796][ T9524] device syzkaller0 entered promiscuous mode [ 268.835532][ T25] audit: type=1326 audit(1781198043.704:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9533 comm="syz.8.1650" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5d045f5e59 code=0x0 [ 268.974902][ T25] audit: type=1326 audit(1781198043.844:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9533 comm="syz.8.1650" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d045f5e59 code=0x7ffc0000 [ 269.030743][ T25] audit: type=1326 audit(1781198043.844:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9533 comm="syz.8.1650" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d045f5e59 code=0x7ffc0000 [ 269.074709][ T25] audit: type=1326 audit(1781198043.844:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9533 comm="syz.8.1650" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d045f5e59 code=0x7ffc0000 [ 269.180782][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 269.241124][ T25] audit: type=1326 audit(1781198043.844:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9533 comm="syz.8.1650" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f5d045f5e59 code=0x7ffc0000 [ 269.293579][ T25] audit: type=1326 audit(1781198043.844:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9533 comm="syz.8.1650" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d045f5e59 code=0x7ffc0000 [ 269.322724][ T25] audit: type=1326 audit(1781198043.844:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9533 comm="syz.8.1650" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d045f5e59 code=0x7ffc0000 [ 269.347782][ T25] audit: type=1326 audit(1781198043.844:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9533 comm="syz.8.1650" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d045f5e59 code=0x7ffc0000 [ 269.372428][ T25] audit: type=1326 audit(1781198043.844:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9533 comm="syz.8.1650" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f5d045f5e59 code=0x7ffc0000 [ 269.512121][ T25] audit: type=1326 audit(1781198043.844:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9533 comm="syz.8.1650" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d045f5e59 code=0x7ffc0000 [ 271.212672][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 271.845915][ T9570] device macvlan2 entered promiscuous mode [ 271.860901][ T9577] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[5324] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[9577] [ 272.202502][ T9570] device bond2 entered promiscuous mode [ 272.220789][ C1] IPVS: ovf: UDP 255.255.255.255:0 - no destination available [ 272.347661][ T9570] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 272.462059][ T9570] device bond2 left promiscuous mode [ 272.557662][ T9575] netlink: 'syz.1.1659': attribute type 1 has an invalid length. [ 272.606167][ T9578] bond5: (slave gretap1): making interface the new active one [ 272.644859][ T9590] netlink: 60 bytes leftover after parsing attributes in process `syz.8.1661'. [ 272.725411][ T9578] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 272.728602][ T9590] unsupported nlmsg_type 40 [ 272.791879][ T9579] bond5: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 274.066845][ T9619] loop8: detected capacity change from 0 to 512 [ 274.195600][ T9623] loop5: detected capacity change from 0 to 2048 [ 275.585130][ T9623] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 275.831100][ T9619] EXT4-fs (loop8): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 275.909783][ T9619] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 276.008579][ T9619] EXT4-fs (loop8): 1 truncate cleaned up [ 276.038925][ T9619] EXT4-fs (loop8): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,dioread_nolock,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,bsdgroups,grpjquota=,,errors=continue. Quota mode: none. [ 276.277610][ T9642] loop5: detected capacity change from 0 to 4096 [ 276.357413][ T9642] EXT4-fs (loop5): Test dummy encryption mode enabled [ 276.391645][ T9642] EXT4-fs (loop5): Test dummy encryption mode enabled [ 276.436278][ T9642] EXT4-fs (loop5): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,test_dummy_encryption=v1,noload,test_dummy_encryption=v1,nodiscard,data_err=ignore,usrquota,journal_ioprio=0x0000000000000000,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 277.261259][ T9704] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1692'. [ 277.674444][ T7718] Process accounting resumed [ 278.448480][ T9717] Process accounting resumed [ 279.057682][ T9740] 8021q: adding VLAN 0 to HW filter on device bond1 [ 279.283345][ T9740] bond0: (slave bond1): Enslaving as an active interface with an up link [ 279.595010][ T9750] device lo left promiscuous mode [ 279.628887][ T9753] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1708'. [ 279.690917][ T9756] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1709'. [ 279.758516][ T9764] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1711'. [ 279.999762][ T9779] netlink: 'syz.7.1712': attribute type 1 has an invalid length. [ 280.081060][ T4477] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 280.134461][ T9779] netlink: 168864 bytes leftover after parsing attributes in process `syz.7.1712'. [ 280.229186][ T9772] netlink: 'syz.1.1713': attribute type 28 has an invalid length. [ 280.237645][ T9772] netlink: 'syz.1.1713': attribute type 3 has an invalid length. [ 280.245632][ T9772] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1713'. [ 280.472975][ T4477] usb 9-1: not running at top speed; connect to a high speed hub [ 280.570910][ T4477] usb 9-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x12, skipping [ 280.587144][ T9800] device wlan1 entered promiscuous mode [ 280.801313][ T4477] usb 9-1: New USB device found, idVendor=0944, idProduct=0201, bcdDevice= 0.40 [ 280.819878][ T4477] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.844711][ T4477] usb 9-1: Product: syz [ 280.857919][ T4477] usb 9-1: Manufacturer: syz [ 280.884562][ T4477] usb 9-1: SerialNumber: syz [ 281.043072][ T9810] loop5: detected capacity change from 0 to 256 [ 281.376828][ T4477] usb 9-1: MIDIStreaming interface descriptor not found [ 281.481226][ T4477] usb 9-1: USB disconnect, device number 3 [ 281.632647][ T9826] loop5: detected capacity change from 0 to 4096 [ 282.114094][ T9826] ntfs3: loop5: MFT: r=20, expect seq=1 instead of 0! [ 282.138744][ T9842] ntfs3: loop5: MFT: r=20, expect seq=1 instead of 0! [ 282.511473][ T9846] overlayfs: failed to clone upperpath [ 282.844196][ T9861] device syzkaller0 entered promiscuous mode [ 282.900666][ T9862] delete_channel: no stack [ 282.907819][ T9862] delete_channel: no stack [ 283.633557][ T9870] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1739'. [ 283.952183][ T9870] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1739'. [ 284.286679][ T9877] 9pnet: p9_errstr2errno: server reported unknown error Àñ'IÓ$íÛ·=¼¼ [ 284.293603][ T9882] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1744'. [ 284.311132][ T9882] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1744'. [ 284.364929][ T9882] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.374052][ T9882] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.383482][ T9882] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.392236][ T9882] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.436725][ T9885] netdevsim netdevsim8 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 284.465153][ T9885] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.303374][ T9924] xt_NFQUEUE: number of queues (8) out of range (got 65537) [ 286.378174][ T9931] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1757'. [ 287.156668][ T9952] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 287.565683][ T9952] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1763'. [ 289.807484][ T9994] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1774'. [ 289.965603][T10001] netlink: 628 bytes leftover after parsing attributes in process `syz.8.1776'. [ 289.975546][T10003] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1777'. [ 290.249983][T10021] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1780'. [ 291.156770][T10031] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1785'. [ 291.165861][T10031] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 291.200110][T10035] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1786'. [ 291.212613][T10033] mmap: syz.1.1784 (10033) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 291.233020][T10035] netlink: 92 bytes leftover after parsing attributes in process `syz.7.1786'. [ 291.248737][T10035] HTB: quantum of class 8022000C is small. Consider r2q change. [ 291.264777][T10033] cgroup: Setting release_agent not allowed [ 291.308278][T10040] loop8: detected capacity change from 0 to 128 [ 291.414068][ T25] kauditd_printk_skb: 62 callbacks suppressed [ 291.414082][ T25] audit: type=1804 audit(1781198066.274:161): pid=10040 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.8.1788" name="/newroot/62/file0/bus" dev="loop8" ino=1048645 res=1 errno=0 [ 291.516352][T10048] netlink: 16166 bytes leftover after parsing attributes in process `syz.1.1791'. [ 291.530530][ T25] audit: type=1804 audit(1781198066.284:162): pid=10040 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.1788" name="/newroot/62/file0/bus" dev="loop8" ino=1048645 res=1 errno=0 [ 291.630457][ T25] audit: type=1804 audit(1781198066.284:163): pid=10040 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.8.1788" name="/newroot/62/file0/bus" dev="loop8" ino=1048645 res=1 errno=0 [ 291.862859][T10061] UBIFS error (pid: 10061): cannot open "c:::", error -22 [ 293.085633][T10086] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1801'. [ 294.287933][T10110] loop5: detected capacity change from 0 to 512 [ 294.382956][T10110] EXT4-fs (loop5): Test dummy encryption mode enabled [ 294.389766][T10110] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 294.897620][T10110] EXT4-fs error (device loop5): ext4_orphan_get:1432: comm syz.5.1806: bad orphan inode 131083 [ 295.283108][T10110] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,nodioread_nolock,norecovery,,errors=continue. Quota mode: none. [ 295.310048][T10115] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1808'. [ 295.409634][T10110] overlayfs: upper fs needs to support d_type. [ 295.409793][T10129] loop8: detected capacity change from 0 to 1024 [ 295.544706][T10129] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 295.611953][ T5324] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 13: comm syz-executor: path /227/bus: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 297.746528][T10169] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1822'. [ 298.473619][ T4586] tipc: Left network mode [ 298.489149][T10175] binder: 10174:10175 ioctl c0306201 200000000480 returned -14 [ 298.748422][T10184] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.772418][T10184] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.895769][T10192] netlink: 'syz.7.1827': attribute type 16 has an invalid length. [ 298.931283][T10192] netlink: 'syz.7.1827': attribute type 17 has an invalid length. [ 299.084953][T10192] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 299.119480][T10192] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 299.155751][T10192] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 300.490096][T10230] netlink: 1319 bytes leftover after parsing attributes in process `syz.1.1837'. [ 300.611425][ T25] audit: type=1326 audit(1781198075.484:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10236 comm="syz.8.1839" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5d045f5e59 code=0x0 [ 300.652165][T10212] chnl_net:caif_netlink_parms(): no params data found [ 300.728503][T10245] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1842'. [ 300.883962][T10212] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.897414][T10212] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.911491][T10212] device bridge_slave_0 entered promiscuous mode [ 300.929800][T10212] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.939802][T10212] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.964183][T10212] device bridge_slave_1 entered promiscuous mode [ 301.038332][ T4586] device hsr_slave_0 left promiscuous mode [ 301.058541][ T4586] device hsr_slave_1 left promiscuous mode [ 301.464276][ T4586] bond0 (unregistering): (slave bond1): Releasing backup interface [ 301.597050][ T4586] bond1 (unregistering): Released all slaves [ 301.810189][ T1324] Bluetooth: hci0: command 0x0409 tx timeout [ 302.086500][ T4586] bond0 (unregistering): Released all slaves [ 302.179757][T10272] netlink: 'syz.7.1847': attribute type 1 has an invalid length. [ 302.202732][T10272] 8021q: adding VLAN 0 to HW filter on device bond3 [ 302.518103][T10278] 8021q: adding VLAN 0 to HW filter on device bond3 [ 302.856162][T10278] bond3: (slave gre1): The slave device specified does not support setting the MAC address [ 302.902625][T10278] bond3: (slave gre1): Error -95 calling set_mac_address [ 302.958968][T10281] device gretap1 entered promiscuous mode [ 302.971899][T10281] bond3: (slave gretap1): making interface the new active one [ 302.980113][T10281] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 302.992268][T10212] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 303.032128][T10212] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 303.130138][T10212] team0: Port device team_slave_0 added [ 303.148924][T10301] device macsec0 entered promiscuous mode [ 303.175331][T10212] team0: Port device team_slave_1 added [ 303.186026][T10301] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1854'. [ 303.213734][T10301] device veth1_macvtap left promiscuous mode [ 303.265671][T10301] device macsec0 left promiscuous mode [ 303.294682][T10310] netlink: 'syz.1.1856': attribute type 10 has an invalid length. [ 303.385107][T10212] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 303.414727][T10212] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.448016][T10212] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.511528][T10212] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.518604][T10212] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.575112][T10212] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.614797][T10325] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1859'. [ 303.719037][T10212] device hsr_slave_0 entered promiscuous mode [ 303.747692][T10212] device hsr_slave_1 entered promiscuous mode [ 303.831061][ T1324] Bluetooth: hci0: command 0x041b tx timeout [ 303.991347][T10345] overlayfs: failed to resolve './file0': -2 [ 304.899236][T10212] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 304.929503][T10212] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 304.979833][T10212] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 305.024470][T10212] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 305.206805][T10212] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.248808][T10212] 8021q: adding VLAN 0 to HW filter on device team0 [ 305.265238][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 305.276991][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 305.312189][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 305.332159][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 305.356470][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.363621][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 305.411040][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 305.435745][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 305.461133][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.468241][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 305.505245][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 305.519825][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 305.530446][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 305.546402][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 305.587028][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 305.621361][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 305.670229][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 305.698468][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 305.736185][T10212] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 305.788291][T10212] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 305.891536][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 306.222780][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 306.620303][ T5944] Bluetooth: hci0: command 0x040f tx timeout [ 306.653072][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 306.734118][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 306.791232][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 306.940639][ T25] audit: type=1326 audit(1781198081.804:165): auid=4294967295 uid=255 gid=0 ses=4294967295 subj=unconfined pid=10412 comm="syz.1.1877" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5f52dcee59 code=0x0 [ 307.027618][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 307.039985][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 307.079576][T10212] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 307.146575][T10426] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1887'. [ 307.311510][T10426] team0: Port device team_slave_0 removed [ 307.623978][T10451] overlayfs: failed to clone upperpath [ 307.638151][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 307.661259][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 307.730404][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 307.761460][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 307.777485][T10212] device veth0_vlan entered promiscuous mode [ 307.791884][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 307.810000][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 307.842012][T10212] device veth1_vlan entered promiscuous mode [ 307.929867][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 307.946538][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 307.969202][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 307.992442][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 308.008224][T10212] device veth0_macvtap entered promiscuous mode [ 308.029845][T10212] device veth1_macvtap entered promiscuous mode [ 308.066924][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 308.096648][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 308.141377][T10212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 308.186992][T10212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.216299][T10212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 308.258910][T10212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.296934][T10212] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 308.307704][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 308.320353][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 308.372441][T10212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 308.419411][T10212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.451030][T10212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 308.475803][T10212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.503748][T10212] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 308.528071][T10470] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1885'. [ 309.582686][ T1324] Bluetooth: hci0: command 0x0419 tx timeout [ 311.511722][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 311.531333][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 311.590922][T10212] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.643834][T10212] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.663838][T10212] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.674674][T10212] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.853417][T10501] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1892'. [ 311.944386][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.957022][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.007601][ T4584] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 312.058044][ T4254] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.090975][ T4254] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.131462][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 312.435595][T10526] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1831'. [ 312.458862][T10526] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1831'. [ 313.456223][T10531] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 313.653845][T10531] sch_tbf: burst 657 is lower than device lo mtu (65550) ! [ 313.927871][T10543] VFS: Mount too revealing [ 314.039571][T10549] netlink: 'syz.1.1903': attribute type 1 has an invalid length. [ 314.155191][T10549] 8021q: adding VLAN 0 to HW filter on device bond6 [ 314.343602][T10556] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.413649][T10556] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.495156][T10556] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.578121][T10556] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.681525][T10556] bond6: (slave geneve2): making interface the new active one [ 314.723044][T10556] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 314.793841][T10568] device syzkaller0 entered promiscuous mode [ 314.832174][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): bond6: link becomes ready [ 314.906858][T10556] syz.1.1903 (10556) used greatest stack depth: 19416 bytes left [ 316.868817][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.875759][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.127445][T10662] VFS: Mount too revealing [ 317.518616][T10591] syz.1.1909 sent an empty control message without MSG_MORE. [ 317.892947][T10684] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 318.131804][T10700] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 318.428513][T10695] overlayfs: failed to look up (tracing) for ino (-66) [ 318.951035][ T4236] Bluetooth: hci2: command 0x0406 tx timeout [ 319.496557][T10719] chnl_net:caif_netlink_parms(): no params data found [ 319.645705][T10747] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1945'. [ 319.665052][T10747] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1945'. [ 319.702980][T10719] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.731470][T10719] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.739641][T10719] device bridge_slave_0 entered promiscuous mode [ 319.755865][T10719] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.764270][T10719] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.772612][T10719] device bridge_slave_1 entered promiscuous mode [ 319.835015][T10719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 319.889453][T10719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 319.987523][T10719] team0: Port device team_slave_0 added [ 320.003458][T10719] team0: Port device team_slave_1 added [ 320.057930][T10719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 320.088659][T10719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 320.179848][T10719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 320.238586][T10719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 320.264630][T10719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 320.353040][T10719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 320.464213][T10719] device hsr_slave_0 entered promiscuous mode [ 320.507635][T10719] device hsr_slave_1 entered promiscuous mode [ 320.527316][T10719] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 320.550629][T10719] Cannot create hsr debugfs directory [ 320.952488][ T4236] Bluetooth: hci3: command 0x0409 tx timeout [ 322.094848][T10802] sch_tbf: burst 657 is lower than device lo mtu (65550) ! [ 322.110476][T10806] netlink: 'syz.9.1958': attribute type 1 has an invalid length. [ 323.033223][T10842] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1963'. [ 323.050834][ T5944] Bluetooth: hci3: command 0x041b tx timeout [ 323.081192][T10842] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1963'. [ 323.090298][T10842] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1963'. [ 323.398921][T10719] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 323.462953][T10719] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 323.491383][T10719] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 323.542071][T10834] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1974'. [ 323.548892][T10719] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 324.572901][T10874] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1982'. [ 324.699631][T10719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.738005][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 324.783886][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 324.809260][T10719] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.861477][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 324.870199][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 324.892623][ T4579] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.899705][ T4579] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.949029][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 324.987090][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 325.026591][ T4579] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.033707][ T4579] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.090971][T10899] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1977'. [ 325.103081][ T4483] Bluetooth: hci3: command 0x040f tx timeout [ 325.103458][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 325.163084][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 325.222052][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 325.272595][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 325.330803][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 325.371278][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 325.405652][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 325.459262][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 325.506417][T10719] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 325.638616][T10719] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 325.725220][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 325.740235][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 325.838946][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 325.873955][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 325.909128][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 327.487505][ T4483] Bluetooth: hci3: command 0x0419 tx timeout [ 327.664726][T10945] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1983'. [ 328.248937][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 328.282250][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 328.451358][T10719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 329.214056][T10996] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1991'. [ 329.228190][T10996] 0ªX¹¦À: renamed from caif0 [ 329.234548][T10996] device 60ªX¹¦À left promiscuous mode [ 329.240106][T10996] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 330.059818][T11008] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 330.102684][T11008] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 330.110287][T11008] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 330.177973][T11008] device bridge_slave_0 left promiscuous mode [ 330.212260][T11008] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.224365][T11008] device bridge_slave_1 left promiscuous mode [ 330.257335][T11008] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.300271][T11008] bond0: (slave bond_slave_0): Releasing backup interface [ 330.331328][T11008] bond0: (slave bond_slave_1): Releasing backup interface [ 330.429511][T11008] team0: Port device team_slave_0 removed [ 330.481928][T11008] team0: Port device team_slave_1 removed [ 330.497370][T11008] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 330.505202][T11008] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 330.515487][T11008] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 330.525480][T11008] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 330.559195][T11013] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1998'. [ 330.763713][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 330.783776][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 330.837081][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 330.858149][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 330.880321][T10719] device veth0_vlan entered promiscuous mode [ 330.888204][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 330.907680][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 330.937440][T10719] device veth1_vlan entered promiscuous mode [ 330.974979][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 330.993269][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 331.018000][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 331.043655][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 331.081675][T10719] device veth0_macvtap entered promiscuous mode [ 331.109424][T10719] device veth1_macvtap entered promiscuous mode [ 331.168416][T10719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 331.188380][T10719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.200085][T10719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 331.236872][T10719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.257447][T10719] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 331.276639][T10719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 331.287515][T10719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.307967][T10719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 331.336026][T10719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.351819][T10719] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 331.359663][ T4583] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 331.368370][ T4583] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 331.377786][ T4583] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 331.386841][ T4583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 331.396063][ T4583] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 331.415156][ T4583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 331.436142][T10719] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.453581][T10719] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.464476][T10719] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.480067][T10719] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.520381][T11058] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2005'. [ 331.564665][T11058] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2005'. [ 331.597420][T11058] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 331.606474][T11058] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 331.615305][T11058] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 331.624243][T11058] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 331.634588][T11058] IPv6: ADDRCONF(NETDEV_CHANGE): vxlan0: link becomes ready [ 331.653072][T11058] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2005'. [ 331.662694][T11058] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2005'. [ 332.344995][ T4583] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.385469][ T4583] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.508151][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 332.551227][ T4583] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.569686][ T4583] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.605682][ T4579] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 332.728335][T11088] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2011'. [ 336.812938][T11185] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2034'. [ 337.663106][T11185] 8021q: adding VLAN 0 to HW filter on device bond1 [ 337.761610][T11203] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2037'. [ 339.372457][T11232] device syzkaller1 entered promiscuous mode [ 341.982329][T11266] ªªªªª: renamed from virt_wifi0 [ 344.483167][T11313] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2061'. [ 344.532374][ C0] vcan0: j1939_session_tx_dat: 0xffff888060259800: queue data error: -100 [ 346.328704][T11359] netlink: 'syz.3.2071': attribute type 1 has an invalid length. [ 346.684354][T11359] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.2071'. [ 347.134113][ T25] audit: type=1326 audit(1781198122.004:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11349 comm="syz.9.2068" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6320738e59 code=0x7fc00000 [ 348.324231][T11392] futex_wake_op: syz.7.2077 tries to shift op by 144; fix this program [ 349.167335][ T25] audit: type=1326 audit(1781198124.034:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11398 comm="syz.1.2081" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5f52dcee59 code=0x0 [ 349.326110][ T4254] device hsr_slave_0 left promiscuous mode [ 349.338898][ T4254] device hsr_slave_1 left promiscuous mode [ 350.404099][ T25] audit: type=1326 audit(1781198124.104:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11398 comm="syz.1.2081" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f52dcee59 code=0x7ffc0000 [ 350.519643][ T4254] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 350.541527][ T4254] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 350.586863][ T25] audit: type=1326 audit(1781198124.104:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11398 comm="syz.1.2081" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f52dcee59 code=0x7ffc0000 [ 350.621781][ T4254] device bridge_slave_1 left promiscuous mode [ 350.631486][ T4254] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.643033][ T4254] device bridge_slave_0 left promiscuous mode [ 350.649276][ T4254] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.706293][ T4254] bond1 (unregistering): (slave veth7): Releasing active interface [ 350.727337][ T4254] bond1 (unregistering): (slave veth5): Releasing active interface [ 350.748568][ T4254] bond1 (unregistering): Released all slaves [ 350.764715][ T25] audit: type=1326 audit(1781198124.104:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11398 comm="syz.1.2081" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f52dcee59 code=0x7ffc0000 [ 350.797661][ T25] audit: type=1326 audit(1781198124.104:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11398 comm="syz.1.2081" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f5f52dcee59 code=0x7ffc0000 [ 350.852984][ T25] audit: type=1326 audit(1781198124.104:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11398 comm="syz.1.2081" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f52dcee59 code=0x7ffc0000 [ 350.886637][ T25] audit: type=1326 audit(1781198124.104:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11398 comm="syz.1.2081" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f52dcee59 code=0x7ffc0000 [ 350.938923][ T25] audit: type=1326 audit(1781198124.104:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11398 comm="syz.1.2081" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f52dcee59 code=0x7ffc0000 [ 351.012357][ T25] audit: type=1326 audit(1781198124.104:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11398 comm="syz.1.2081" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f52dcee59 code=0x7ffc0000 [ 351.664019][ T4254] team0 (unregistering): Port device team_slave_1 removed [ 351.685768][ T4254] team0 (unregistering): Port device team_slave_0 removed [ 351.709521][ T4254] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 351.735433][ T4254] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 352.887083][ T4254] bond0 (unregistering): Released all slaves [ 353.018956][T11422] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2085'. [ 353.038947][T11422] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2085'. [ 353.053662][T11422] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2085'. [ 353.069528][T11422] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2085'. [ 354.297217][T11474] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2099'. [ 356.191341][T11495] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2101'. [ 356.242919][T11495] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2101'. [ 356.306474][T11498] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2104'. [ 357.144130][T11535] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2113'. [ 359.182082][T11587] ±ÿþ€: renamed from team_slave_1 [ 360.050888][T11597] ªªªªª: renamed from virt_wifi0 [ 360.188437][T11601] device macvlan2 entered promiscuous mode [ 360.228939][T11601] device bond2 entered promiscuous mode [ 360.240959][T11601] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 361.201397][T11601] device bond2 left promiscuous mode [ 363.536065][ T4234] Process accounting resumed [ 364.495876][T11674] overlayfs: metacopy with no lower data found - abort lookup (/file2) [ 364.599618][T11670] Process accounting resumed [ 365.477968][T11700] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2152'. [ 365.524518][T11705] loop2: detected capacity change from 0 to 7 [ 365.551103][T11700] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 365.580286][T11705] loop2: p1 [ 365.580343][T11700] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (68719607821) [ 365.619717][T11705] loop2: partition table partially beyond EOD, truncated [ 365.691149][T11705] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 365.891322][T11496] udevd[11496]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 365.919199][T11739] o2cb: This node has not been configured. [ 365.925388][T11739] o2cb: Cluster check failed. Fix errors before retrying. [ 365.932571][T11739] (syz.1.2158,11739,1):user_dlm_register:675 ERROR: status = -22 [ 365.940275][T11739] (syz.1.2158,11739,1):dlmfs_mkdir:430 ERROR: Error -22 could not register domain "file0" [ 368.885901][T11801] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2173'. [ 368.907978][T11801] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2173'. [ 368.920721][T11801] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 368.929443][T11801] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 368.938335][T11801] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 368.947100][T11801] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.002898][T11810] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 369.051091][T11810] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.064092][T11813] delete_channel: no stack [ 369.068796][T11813] delete_channel: no stack [ 372.062771][T11863] overlayfs: failed to clone upperpath [ 372.121345][ T25] kauditd_printk_skb: 33 callbacks suppressed [ 372.121358][ T25] audit: type=1326 audit(1781198146.994:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11868 comm="syz.4.2194" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f97c3a62e59 code=0x0 [ 372.236375][T11871] 9pnet: p9_errstr2errno: server reported unknown error Àñ'IÓ$íÛ·=¼¼ [ 374.296763][T11906] binder: 11889:11906 ioctl c0306201 200000000480 returned -14 [ 374.717293][T11935] netlink: 1319 bytes leftover after parsing attributes in process `syz.3.2210'. [ 376.624047][T11983] xt_NFQUEUE: number of queues (8) out of range (got 65537) [ 378.413151][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.419457][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.069548][T12062] loop4: detected capacity change from 0 to 1024 [ 381.156894][T12069] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2238'. [ 381.218456][T12069] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2238'. [ 381.485812][T12062] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 381.886890][T12062] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 381.927751][T12075] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 383.949000][T12120] overlayfs: failed to resolve './file0': -2 [ 385.628250][T12139] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2255'. [ 385.688788][T12139] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2255'. [ 385.965212][T12139] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 385.974223][T12139] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 385.983320][T12139] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 385.992064][T12139] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 386.052406][T12141] netdevsim netdevsim9 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 386.080742][T12141] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.119630][T12238] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4191] was attempted by "$x`vO¤xŒH`³ã•ÕCBnÜ€º·yòü>bêwìæx\x1bL5? CÝ­8`d…ªþ»‘Jgø39TÃÝ&¨tWCmË<º¨\x1bRbyÑ VqÔ/‰\x5cDw,XT,µWû[esôÿ—‘Ô\x0d1‘\x07þ^òÐÖ|À;dˆg8 Î꥛~åu²}GÇõg6W]ìMìòþlxMð=æMäh\x09¶5²$ªZ†å¹EOÞ1JcÅ&µOÌPÒ5y9\x0dNiï£IÌ<òâ5ÞÐŽñÒd\x22ÐT*ÙɢsÌx)›«Ê¯\x22v:¤øÕ|M\x0aµ…´Ïõ)\x0bøê‹»wRIð˜ åð‘¤ê‹×â;øH¶P?LtœM[w̲SØ7—&åQ瑃ƒ½¡Y‘=NÞݘ\x22“Í߆FSÜB¨Ò˜”Rxë‹9ʼnR_4¦~}eà¢}xçböH\x0d ã%Ç„Þ‘RÀ]€c“Éx‚8‡m‘5'y¨úZ«xÀú^M¢šïy=:å:ÄUVvÒ¼b8‹¡s\x0d0ácŠ£äAßL˜Û=ýø×;¹Òk«[i½†qK”gú´@©8ÊZ\x22&€iy?± m9Ÿ•d©ŠÐ<5ð]ìp2w­Óø´A³¯1ëȦ4qLctG9NÆï_f2so pÜ)™^ÔFISn08¢a¯µS²*Ä’½rXùé\x1b/\x22`¬W×rwr\x22ß!7³ëX˜~ñ ¬öÓ°¯é€DÖEp­÷7ÖeÝh¦NkÃ2I£s„û,>r_<º-œ!à}ÛjnW8-‡lñeÍÚðQÝßî–Å’6Dgfr·ZÒ!ÀV\x0bÛ¡¶ßá*À¡ö>óØýåħk?p>n¯U±³`I‡±ù¶æWŽí ×ô™ú\x1bØßD´ˆ6Öùòó…÷›Ãþ\x5cjì¼óÕÉv†ç(‚ª¯=ª}tŒxôp:ñÔç§ÞŽØ_Æõç´ÕÕ½ü<‹('ôµ(tc©(ÏÖ®¿#2®o¢Ú0xæåÄY4W .vôÅoD´Sâ\x0cXæ¿©šV‚,¤5a#zkP—däÀó 0a. [ 392.900660][ T25] audit: type=1326 audit(1781198167.664:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12251 comm="syz.9.2283" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6320738e59 code=0x0 [ 393.027971][T12257] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2282'. [ 393.499482][T12273] loop4: detected capacity change from 0 to 128 [ 393.661871][T12273] overlayfs: upper fs needs to support d_type. [ 393.671486][T12273] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 393.679381][T12273] overlayfs: failed to set xattr on upper [ 393.685188][T12273] overlayfs: ...falling back to index=off,metacopy=off. [ 394.018110][T12257] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 394.057982][T12257] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 394.250250][T12257] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 400.851967][T12330] overlayfs: failed to resolve './file0': -2 [ 401.882957][T12340] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2304'. [ 401.920057][T12340] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2304'. [ 401.979161][T12347] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2302'. [ 402.353917][T12346] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2305'. [ 405.407663][T12386] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2313'. [ 406.079431][T12403] loop4: detected capacity change from 0 to 512 [ 406.142065][T12409] netlink: 'syz.1.2320': attribute type 4 has an invalid length. [ 406.216952][T12409] netlink: 'syz.1.2320': attribute type 4 has an invalid length. [ 406.251317][T12403] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.2318: invalid indirect mapped block 256 (level 2) [ 406.408759][T12403] EXT4-fs (loop4): 2 truncates cleaned up [ 406.416813][T12403] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,auto_da_alloc,lazytime,journal_dev=0x0000000000000006,,errors=continue. Quota mode: writeback. [ 407.564235][T12426] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 1, id = 0 [ 407.673179][T12425] device macvtap1 entered promiscuous mode [ 408.422164][T12425] device macvtap2 entered promiscuous mode [ 408.700794][T12456] netlink: 277 bytes leftover after parsing attributes in process `syz.9.2333'. [ 408.783450][T12461] overlayfs: missing 'lowerdir' [ 409.085824][T12481] 9pnet_virtio: no channels available for device syz [ 410.312547][T12497] futex_wake_op: à³OñJ÷N\ìg´é tries to shift op by 144; fix this program [ 410.322527][T12496] netlink: 'syz.7.2342': attribute type 1 has an invalid length. [ 410.330259][T12496] netlink: 'syz.7.2342': attribute type 4 has an invalid length. [ 410.392297][T12496] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.2342'. [ 410.444551][T12499] IPv6: ADDRCONF(NETDEV_CHANGE): ipip1: link becomes ready [ 410.585513][T12505] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2344'. [ 410.635331][T12505] IPv6: ADDRCONF(NETDEV_CHANGE): ipip1: link becomes ready [ 412.530849][T12524] loop4: detected capacity change from 0 to 131072 [ 412.611198][T12524] XFS: ikeep mount option is deprecated. [ 413.297704][T12560] netlink: 'syz.1.2356': attribute type 12 has an invalid length. [ 413.366686][T12524] XFS (loop4): Mounting V5 Filesystem [ 414.074816][T12524] XFS (loop4): Starting recovery (logdev: internal) [ 414.214816][T12524] XFS (loop4): Ending recovery (logdev: internal) [ 415.921132][ T25] audit: type=1326 audit(1781198190.784:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12601 comm="syz.3.2367" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd2f073ee59 code=0x0 [ 416.570132][T12614] 9pnet: Insufficient options for proto=fd [ 416.629676][T12616] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2370'. [ 416.677647][T12618] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2371'. [ 416.711078][T12618] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2371'. [ 417.360434][T10719] XFS (loop4): Unmounting Filesystem [ 417.521036][T12660] netlink: 'syz.9.2380': attribute type 4 has an invalid length. [ 418.994004][ T25] audit: type=1326 audit(1781198193.864:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12681 comm="syz.1.2384" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5f52dcee59 code=0x0 [ 419.649220][T12710] xt_hashlimit: size too large, truncated to 1048576 [ 419.740941][T12710] xt_hashlimit: invalid rate [ 419.794892][T12713] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2391'. [ 422.923300][T12749] xt_CT: No such helper "snmp_trap" [ 425.162551][T12783] device macvlan2 entered promiscuous mode [ 425.169755][T12783] device bond4 entered promiscuous mode [ 425.203532][T12789] x_tables: unsorted underflow at hook 4 [ 425.245541][T12783] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 425.314992][T12783] device bond4 left promiscuous mode [ 425.495436][T12795] o2cb: This node has not been configured. [ 425.502383][T12795] o2cb: Cluster check failed. Fix errors before retrying. [ 425.509619][T12795] (syz.4.2411,12795,0):user_dlm_register:675 ERROR: status = -22 [ 425.517534][T12795] (syz.4.2411,12795,0):dlmfs_mkdir:430 ERROR: Error -22 could not register domain "file0" [ 426.189884][T12805] loop4: detected capacity change from 0 to 2048 [ 426.349134][T12805] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 426.460922][ T1324] Bluetooth: hci0: command 0x0406 tx timeout [ 427.428930][ T4232] Process accounting resumed [ 427.444755][T12826] Process accounting resumed [ 427.895785][T12849] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2421'. [ 428.007825][T12848] netlink: 52 bytes leftover after parsing attributes in process `syz.9.2422'. [ 428.498488][T12848] netlink: 52 bytes leftover after parsing attributes in process `syz.9.2422'. [ 431.807343][T12885] tipc: Enabling of bearer rejected, failed to enable media [ 432.605809][T12895] device bond_slave_0 entered promiscuous mode [ 432.612761][T12895] device bond_slave_1 entered promiscuous mode [ 432.681901][T12895] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 432.694513][T12895] device bond_slave_0 left promiscuous mode [ 432.700538][T12895] device bond_slave_1 left promiscuous mode [ 433.989241][T12955] overlayfs: failed to clone upperpath [ 434.414433][T12976] SET target dimension over the limit! [ 437.915289][T13020] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2461'. [ 438.006186][T13020] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 438.442374][T13020] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 438.457501][T13020] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 438.490428][T13020] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 438.813339][T13028] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 438.870055][T13028] bond4: (slave bond0): Releasing active interface [ 438.915506][T13028] device bridge_slave_0 left promiscuous mode [ 438.942277][T12996] netlink: set zone limit has 8 unknown bytes [ 438.950792][T13028] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.962701][T13028] device bridge_slave_1 left promiscuous mode [ 438.971842][T13028] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.007225][T13028] bond0: (slave bond_slave_0): Releasing backup interface [ 439.047269][T13028] bond0: (slave bond_slave_1): Releasing backup interface [ 439.079981][T13028] bond3: (slave veth3): Releasing active interface [ 439.095110][T13028] bond5: (slave gretap1): Releasing active interface [ 439.120292][T13028] bond6: (slave geneve2): Releasing active interface [ 439.134689][T13028] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.153987][T13028] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.166230][T13028] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.190575][T13028] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.212712][T13020] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2461'. [ 439.231343][T13020] 8021q: adding VLAN 0 to HW filter on device bond3 [ 439.251179][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 439.758414][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.764948][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.286262][T13084] netlink: 51 bytes leftover after parsing attributes in process `syz.3.2474'. [ 440.830976][T13098] IPVS: sync thread started: state = MASTER, mcast_ifn = dummy0, syncid = 65, id = 0 [ 442.474417][T13130] xt_CT: No such helper "syz1" [ 442.748911][ T1324] Bluetooth: hci3: command 0x0406 tx timeout [ 446.753344][T13176] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 447.944408][T13203] overlayfs: failed to clone upperpath [ 448.331706][T13218] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2506'. [ 448.375697][T13218] tipc: Started in network mode [ 448.396051][T13218] tipc: Node identity 7, cluster identity 4711 [ 448.418807][T13218] tipc: Node number set to 7 [ 453.286414][T13284] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2523'. [ 453.409559][T13290] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 453.432179][T13290] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 453.441125][T13290] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 453.461366][T13290] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 453.476062][T13290] bond7: (slave geneve3): Enslaving as an active interface with an up link [ 453.505257][T13284] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2523'. [ 453.542628][T13284] 8021q: adding VLAN 0 to HW filter on device bond7 [ 454.813298][T13315] overlayfs: failed to clone upperpath [ 456.816891][T13319] overlayfs: failed to clone upperpath [ 459.739274][T13376] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 460.969815][T13399] netlink: 798 bytes leftover after parsing attributes in process `syz.3.2552'. [ 464.841424][T13435] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2561'. [ 465.052453][T13450] capability: warning: `syz.1.2565' uses 32-bit capabilities (legacy support in use) [ 466.725027][T13468] device veth1_to_bond entered promiscuous mode [ 468.809697][T13492] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2577'. [ 473.616776][T13543] netlink: 'syz.9.2588': attribute type 3 has an invalid length. [ 474.020715][T13543] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2588'. [ 474.299163][T13566] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2593'. [ 476.292674][T13597] netlink: 152 bytes leftover after parsing attributes in process `syz.7.2600'. [ 476.470852][T13608] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2603'. [ 477.034428][T13632] netlink: 72 bytes leftover after parsing attributes in process `syz.9.2606'. [ 477.559652][T13655] x_tables: duplicate underflow at hook 2 [ 484.029038][ T4579] device hsr_slave_0 left promiscuous mode [ 484.046621][ T4579] device hsr_slave_1 left promiscuous mode [ 484.095282][ T4579] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 484.123615][ T4579] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 484.171666][T13712] xt_connbytes: Forcing CT accounting to be enabled [ 484.203901][T13712] Cannot find set identified by id 0 to match [ 485.422456][T13723] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2631'. [ 485.463702][ T4579] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 485.685049][ T4579] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 486.288523][ T4579] bond0 (unregistering): Released all slaves [ 486.432659][T13752] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2636'. [ 487.532588][T13752] device bond0 entered promiscuous mode [ 487.712737][T13752] device bond_slave_0 entered promiscuous mode [ 487.720207][T13752] device bond_slave_1 entered promiscuous mode [ 487.734499][T13752] device team0 entered promiscuous mode [ 487.740085][T13752] device team_slave_0 entered promiscuous mode [ 487.746978][T13752] device team_slave_1 entered promiscuous mode [ 487.755052][T13752] device hsr1 entered promiscuous mode [ 487.761145][T13752] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 487.772306][T13767] bond0: (slave bond_slave_1): Releasing backup interface [ 487.780871][T13776] xt_connbytes: Forcing CT accounting to be enabled [ 487.796360][T13776] set match dimension is over the limit! [ 487.816503][T13767] device bond_slave_1 left promiscuous mode [ 487.861528][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 489.997982][T13813] 9pnet: p9_errstr2errno: server reported unknown error aaaaaaaaa [ 490.124752][T13819] tipc: Enabling of bearer rejected, failed to enable media [ 490.365628][T13829] netlink: 'syz.4.2657': attribute type 10 has an invalid length. [ 490.543875][T13829] device dummy0 entered promiscuous mode [ 490.625423][T13829] team0: Port device dummy0 added [ 491.004231][T13832] netlink: 'syz.4.2657': attribute type 10 has an invalid length. [ 491.037956][T13832] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 491.643046][T13832] device dummy0 left promiscuous mode [ 491.664943][T13832] team0: Port device dummy0 removed [ 491.697788][T13832] device dummy0 entered promiscuous mode [ 491.726085][T13832] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 491.808911][T13859] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2665'. [ 491.898897][T13867] bridge9: port 1(veth0_to_bond) entered blocking state [ 491.915539][T13867] bridge9: port 1(veth0_to_bond) entered disabled state [ 491.935664][T13867] device veth0_to_bond entered promiscuous mode [ 492.504567][T13889] autofs4:pid:13889:autofs_fill_super: called with bogus options [ 494.146205][T13927] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 494.155268][T13927] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 494.164035][T13927] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 494.172768][T13927] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 494.338563][T13933] IPv6: NLM_F_REPLACE set, but no existing node found! [ 496.764300][T13976] device bridge1 entered promiscuous mode [ 498.045997][T14038] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2701'. [ 498.066447][T14038] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2701'. [ 498.091734][T14038] device bond0 left promiscuous mode [ 498.163080][T14045] netlink: 'syz.3.2701': attribute type 4 has an invalid length. [ 498.195851][T14045] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2701'. [ 498.261685][T14045] .`: renamed from bond0 [ 498.433107][T14056] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2707'. [ 498.799903][T14060] Cannot find set identified by id 0 to match [ 502.497520][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.503832][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.877741][ T25] audit: type=1326 audit(1781198277.479:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14091 comm="syz.9.2715" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6320738e59 code=0x0 [ 508.011655][T14173] tipc: Enabling of bearer rejected, failed to enable media [ 508.556544][T14198] xt_TCPMSS: Only works on TCP SYN packets [ 509.653153][T14202] netlink: 'syz.9.2739': attribute type 2 has an invalid length. [ 510.502769][T14215] tipc: Enabling of bearer rejected, failed to enable media [ 510.708502][T14224] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2743'. [ 510.728556][T14227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.738138][T14227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.468870][T14254] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2753'. [ 512.580004][T14257] netlink: 'syz.9.2752': attribute type 10 has an invalid length. [ 512.683413][T14257] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 514.223324][T14278] 8021q: adding VLAN 0 to HW filter on device bond5 [ 514.252913][T14283] bond5: (slave ip6erspan0): making interface the new active one [ 514.286932][T14283] bond5: (slave ip6erspan0): Enslaving as an active interface with an up link [ 514.484615][ T1655] IPv6: ADDRCONF(NETDEV_CHANGE): bond5: link becomes ready [ 515.069300][T14293] netlink: 220 bytes leftover after parsing attributes in process `syz.1.2761'. [ 515.616344][ T7] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 516.118267][ T7] Bluetooth: hci2: Injecting HCI hardware error event [ 516.128059][ T4197] Bluetooth: hci2: hardware error 0x00 [ 516.390175][ T25] audit: type=1326 audit(1781198289.181:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14307 comm="syz.9.2767" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6320738e59 code=0x7ffc0000 [ 516.475038][ T25] audit: type=1326 audit(1781198289.181:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14307 comm="syz.9.2767" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6320738e59 code=0x7ffc0000 [ 516.555266][ T25] audit: type=1326 audit(1781198289.237:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14307 comm="syz.9.2767" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f6320738e59 code=0x7ffc0000 [ 516.586364][ T25] audit: type=1326 audit(1781198289.237:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14307 comm="syz.9.2767" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6320738e59 code=0x7ffc0000 [ 516.634835][ T25] audit: type=1326 audit(1781198289.237:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14307 comm="syz.9.2767" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6320738e59 code=0x7ffc0000 [ 516.687085][ T25] audit: type=1326 audit(1781198289.237:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14307 comm="syz.9.2767" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7f6320738e59 code=0x7ffc0000 [ 516.718135][ T25] audit: type=1326 audit(1781198289.237:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14307 comm="syz.9.2767" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6320738e59 code=0x7ffc0000 [ 516.798000][ T25] audit: type=1326 audit(1781198289.237:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14307 comm="syz.9.2767" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6320738e59 code=0x7ffc0000 [ 516.941528][ T25] audit: type=1326 audit(1781198289.237:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14307 comm="syz.9.2767" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f6320738e59 code=0x7ffc0000 [ 516.969644][ T25] audit: type=1326 audit(1781198289.237:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14307 comm="syz.9.2767" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6320738e59 code=0x7ffc0000 [ 521.936482][T14371] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2780'. [ 521.945479][T14371] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2780'. [ 521.961227][T14371] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 521.973116][T14371] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 521.984627][T14371] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 521.995881][T14371] device geneve3 entered promiscuous mode [ 522.009342][T14371] IPv6: ADDRCONF(NETDEV_CHANGE): geneve3: link becomes ready [ 525.627089][T14452] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2804'. [ 538.597960][T14553] netlink: 'syz.7.2827': attribute type 1 has an invalid length. [ 538.628724][T14553] device bond6 entered promiscuous mode [ 538.639035][T14553] 8021q: adding VLAN 0 to HW filter on device bond6 [ 538.744945][T14553] bond6: (slave bridge4): making interface the new active one [ 538.804969][T14553] device bridge4 entered promiscuous mode [ 538.811940][T14553] bond6: (slave bridge4): Enslaving as an active interface with an up link [ 538.838196][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): bond6: link becomes ready [ 538.874894][ T25] kauditd_printk_skb: 28 callbacks suppressed [ 538.874907][ T25] audit: type=1800 audit(1781198310.209:252): pid=14571 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2831" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 543.344424][T14614] bridge0: port 1(erspan0) entered blocking state [ 543.351061][T14614] bridge0: port 1(erspan0) entered disabled state [ 543.363426][T14614] device erspan0 entered promiscuous mode [ 543.374499][T14614] device erspan0 left promiscuous mode [ 543.380309][T14614] bridge0: port 1(erspan0) entered disabled state [ 543.497649][T14620] xt_CT: No such helper "netbios-ns" [ 543.695644][T14626] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 543.788811][T14626] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 543.870688][T14626] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 544.955302][T14623] orangefs_mount: mount request failed with -4 [ 546.544540][T14673] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2857'. [ 547.471834][T14682] netlink: 'syz.7.2859': attribute type 21 has an invalid length. [ 547.506382][T14682] netlink: 156 bytes leftover after parsing attributes in process `syz.7.2859'. [ 550.194893][T14718] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 550.612237][T14733] device bond0 entered promiscuous mode [ 550.617921][T14733] device bond_slave_0 entered promiscuous mode [ 550.624728][T14733] device bond_slave_1 entered promiscuous mode [ 551.520371][ T25] audit: type=1326 audit(1781198322.032:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14756 comm="syz.7.2880" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff27e126e59 code=0x7ffc0000 [ 551.632028][ T25] audit: type=1326 audit(1781198322.088:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14756 comm="syz.7.2880" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff27e126e59 code=0x7ffc0000 [ 551.661801][ T25] audit: type=1326 audit(1781198322.088:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14756 comm="syz.7.2880" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff27e126e59 code=0x7ffc0000 [ 551.860018][ T25] audit: type=1326 audit(1781198322.088:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14756 comm="syz.7.2880" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff27e126e59 code=0x7ffc0000 [ 552.460186][ T25] audit: type=1326 audit(1781198322.088:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14756 comm="syz.7.2880" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff27e126e59 code=0x7ffc0000 [ 553.814715][ T25] audit: type=1326 audit(1781198322.088:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14756 comm="syz.7.2880" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff27e126e59 code=0x7ffc0000 [ 554.524127][ T25] audit: type=1326 audit(1781198322.088:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14756 comm="syz.7.2880" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff27e126e59 code=0x7ffc0000 [ 554.611278][T14796] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2887'. [ 554.631750][ T25] audit: type=1326 audit(1781198322.088:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14756 comm="syz.7.2880" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff27e126e59 code=0x7ffc0000 [ 554.941848][ T25] audit: type=1326 audit(1781198322.098:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14756 comm="syz.7.2880" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7ff27e126e59 code=0x7ffc0000 [ 555.535981][ T25] audit: type=1326 audit(1781198322.098:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14756 comm="syz.7.2880" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff27e126e59 code=0x7ffc0000 [ 555.637821][T14813] device batadv_slave_0 entered promiscuous mode [ 555.696148][T14810] device batadv_slave_0 left promiscuous mode [ 555.882838][T14822] Invalid option length (1040762) for dns_resolver key [ 557.240863][T14834] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2896'. [ 558.241874][T14839] bridge11: port 1(veth15) entered blocking state [ 558.310816][T14839] bridge11: port 1(veth15) entered disabled state [ 558.407790][T14839] device veth15 entered promiscuous mode [ 558.428355][T14844] bridge11: port 2(veth17) entered blocking state [ 558.455398][T14844] bridge11: port 2(veth17) entered disabled state [ 558.477738][T14844] device veth17 entered promiscuous mode [ 559.453192][T14868] tipc: Failed to remove unknown binding: 66,0,0/0:2671209684/2671209686 [ 559.461875][T14868] tipc: Failed to remove unknown binding: 66,0,0/0:2671209684/2671209685 [ 559.482123][T14868] tipc: Failed to remove unknown binding: 66,0,0/0:2671209684/2671209686 [ 559.490689][T14868] tipc: Failed to remove unknown binding: 66,0,0/0:2671209684/2671209685 [ 559.533653][T14870] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2901'. [ 559.780281][T14870] 8021q: adding VLAN 0 to HW filter on device bond8 [ 560.104403][T14886] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2904'. [ 561.123224][T14892] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2907'. [ 561.307983][T14892] device team0 entered promiscuous mode [ 561.335478][T14892] 8021q: adding VLAN 0 to HW filter on device team0 [ 565.053818][T14963] Invalid option length (1040762) for dns_resolver key [ 565.691966][T14969] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2926'. [ 565.760575][T14967] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2927'. [ 565.814640][T14967] bridge5: port 1(veth9) entered blocking state [ 565.846406][T14967] bridge5: port 1(veth9) entered disabled state [ 565.858685][T14967] device veth9 entered promiscuous mode [ 565.909267][T14979] bridge5: port 2(veth11) entered blocking state [ 565.963199][T14979] bridge5: port 2(veth11) entered disabled state [ 565.984918][T14979] device veth11 entered promiscuous mode [ 565.998327][T14969] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2926'. [ 568.150159][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.166121][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 569.317658][T12751] batman_adv: batadv0: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 569.795628][T15028] Invalid option length (1040762) for dns_resolver key [ 570.471329][T15043] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2945'. [ 570.516806][T15043] device syz_tun entered promiscuous mode [ 570.582354][T15043] device macvtap2 entered promiscuous mode [ 570.638120][T15049] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2945'. [ 571.178353][T15049] device syz_tun left promiscuous mode [ 572.257876][T15077] overlayfs: failed to clone upperpath [ 573.345818][T15107] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2960'. [ 577.468627][T15161] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2974'. [ 577.539180][T15161] 8021q: adding VLAN 0 to HW filter on device bond3 [ 579.373303][T15239] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 585.517094][ T25] kauditd_printk_skb: 44 callbacks suppressed [ 585.517109][ T25] audit: type=1800 audit(1781198353.836:307): pid=15287 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3005" name="bus" dev="ramfs" ino=66759 res=0 errno=0 [ 586.824800][T15326] netlink: 56 bytes leftover after parsing attributes in process `syz.7.3015'. [ 589.213139][T15351] netlink: 'syz.4.3024': attribute type 2 has an invalid length. [ 590.163464][T15372] tipc: Started in network mode [ 590.177297][T15372] tipc: Node identity 080211000001, cluster identity 4711 [ 590.203877][T15372] tipc: Enabled bearer , priority 0 [ 590.368051][T15378] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3032'. [ 590.469088][T15378] 8021q: adding VLAN 0 to HW filter on device bond4 [ 590.488488][T15386] netlink: 'syz.3.3034': attribute type 1 has an invalid length. [ 590.636495][T15382] device macvlan2 entered promiscuous mode [ 590.680356][T15378] bond4: (slave vti0): refused to change device type [ 590.711654][T15390] 8021q: adding VLAN 0 to HW filter on device bond5 [ 590.720503][T15390] bond0: (slave bond5): making interface the new active one [ 591.012532][T15390] bond0: (slave bond5): Enslaving as an active interface with an up link [ 591.322493][T15386] bond0: (slave gretap1): Enslaving as a backup interface with an up link [ 591.369327][T15395] 8021q: adding VLAN 0 to HW filter on device bond0 [ 591.407190][T15399] netlink: 'syz.7.3037': attribute type 1 has an invalid length. [ 591.522150][T15399] device bond7 entered promiscuous mode [ 591.534766][T15399] 8021q: adding VLAN 0 to HW filter on device bond7 [ 591.554519][ T1324] tipc: Node number set to 134418688 [ 591.601030][T15407] bond7: (slave bridge5): making interface the new active one [ 591.608964][T15407] device bridge5 entered promiscuous mode [ 591.622537][T15407] bond7: (slave bridge5): Enslaving as an active interface with an up link [ 591.633178][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 591.658177][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bond7: link becomes ready [ 591.739539][T15416] bridge0: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 592.063049][T15424] bridge0: port 1(syz_tun) entered blocking state [ 592.127053][T15424] bridge0: port 1(syz_tun) entered disabled state [ 594.575369][T15445] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[8130] was attempted by ""[15445] [ 595.378717][T15465] tipc: Enabling of bearer rejected, failed to enable media [ 600.525858][T15552] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3084'. [ 602.408607][T15562] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3086'. [ 602.418871][T15562] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3086'. [ 602.610239][T15562] netlink: 39 bytes leftover after parsing attributes in process `syz.4.3086'. [ 605.379154][ T25] audit: type=1326 audit(1781198372.413:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15603 comm="syz.4.3101" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97c3a62e59 code=0x7ffc0000 [ 605.597149][ T25] audit: type=1326 audit(1781198372.450:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15603 comm="syz.4.3101" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97c3a62e59 code=0x7ffc0000 [ 605.642842][ T25] audit: type=1326 audit(1781198372.450:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15603 comm="syz.4.3101" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f97c3a62e59 code=0x7ffc0000 [ 605.676255][ T25] audit: type=1326 audit(1781198372.450:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15603 comm="syz.4.3101" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97c3a62e59 code=0x7ffc0000 [ 605.725076][ T25] audit: type=1326 audit(1781198372.450:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15621 comm="syz.4.3101" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f97c3a2368e code=0x7ffc0000 [ 605.735431][T15629] Set syz1 is full, maxelem 14 reached [ 605.814203][ T25] audit: type=1326 audit(1781198372.590:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15603 comm="syz.4.3101" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97c3a62e59 code=0x7ffc0000 [ 605.889780][ T25] audit: type=1326 audit(1781198372.619:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15621 comm="syz.4.3101" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f97c3a62e59 code=0x7ffc0000 [ 607.092517][T15649] Invalid ELF header magic: != ELF [ 609.379463][T15668] syz.1.3118[15668] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 609.379659][T15668] syz.1.3118[15668] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 610.359807][T15674] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.3120'. [ 610.993971][T15613] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.002910][T15613] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.012060][T15613] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.094156][T15613] netdevsim netdevsim9 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 611.103344][T15613] netdevsim netdevsim9 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 611.112207][T15613] netdevsim netdevsim9 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 611.410002][T15692] overlayfs: failed to clone upperpath [ 612.521085][T15709] trusted_key: encrypted_key: master key parameter 'šÙ|™{E' is invalid [ 613.142311][T15712] tipc: Enabling of bearer rejected, failed to enable media [ 613.353143][ T25] audit: type=1326 audit(1781198379.877:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15718 comm="syz.1.3135" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5f52dcee59 code=0x0 [ 613.390517][T15726] netlink: 'syz.3.3138': attribute type 2 has an invalid length. [ 623.350940][ T25] audit: type=1326 audit(1781198389.222:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15820 comm="syz.1.3165" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5f52dcee59 code=0x0 [ 625.700665][T15863] netlink: 'syz.9.3177': attribute type 11 has an invalid length. [ 626.057883][T15870] syz.9.3178[15870] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 626.059800][T15870] syz.9.3178[15870] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 629.156294][T15882] device bond0 left promiscuous mode [ 629.180209][T15882] device bond_slave_0 left promiscuous mode [ 629.186385][T15882] device bond_slave_1 left promiscuous mode [ 629.867743][T15882] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 629.888671][T15882] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 631.058622][T15882] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.068403][T15882] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.081980][T15882] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.091123][T15882] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.139547][T15882] netdevsim netdevsim7 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 631.148590][T15882] netdevsim netdevsim7 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 631.157467][T15882] netdevsim netdevsim7 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 631.166510][T15882] netdevsim netdevsim7 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 631.212126][T15882] device gretap1 left promiscuous mode [ 631.232042][T15882] device bond6 left promiscuous mode [ 631.237666][T15882] device bridge4 left promiscuous mode [ 631.265810][T15882] device bond7 left promiscuous mode [ 631.286208][T15882] device bridge5 left promiscuous mode [ 631.360262][T15924] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3188'. [ 633.301144][T15954] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3199'. [ 633.740311][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 633.746723][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 634.066425][T15969] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3201'. [ 634.183481][T15969] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3201'. [ 634.202405][T15969] netlink: 39 bytes leftover after parsing attributes in process `syz.1.3201'. [ 634.994165][T15994] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000000 [ 635.007090][T15991] overlayfs: bad mount option "redirect_dir=off:/" [ 635.549100][T16004] device dummy0 left promiscuous mode [ 636.773373][T16023] xt_socket: unknown flags 0x4c [ 637.488513][T16029] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3216'. [ 637.618472][T16033] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3216'. [ 637.709547][T16037] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 638.988978][T16050] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3226'. [ 639.270975][T16054] overlayfs: failed to clone upperpath [ 639.763162][T16069] xt_socket: unknown flags 0x4c [ 641.881581][T16083] netlink: 'syz.9.3237': attribute type 4 has an invalid length. [ 644.792301][T16108] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3244'. [ 650.322870][T16156] netlink: 'syz.3.3255': attribute type 1 has an invalid length. [ 652.455313][T16194] xt_CONNSECMARK: invalid mode: 0 [ 654.084935][T16230] hugetlbfs: syz.4.3271 (16230): Using mlock ulimits for SHM_HUGETLB is deprecated [ 657.510783][T16254] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 657.537002][T16254] CIFS mount error: No usable UNC path provided in device string! [ 657.537002][T16254] [ 657.547351][T16254] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 658.066682][T16256] xt_nat: multiple ranges no longer supported [ 660.211450][T16282] batman_adv: batadv0: Adding interface: dummy0 [ 660.569517][T16282] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 660.617031][T16282] batman_adv: batadv0: Interface activated: dummy0 [ 661.318363][T16288] batadv0: mtu less than device minimum [ 661.326079][T16288] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 661.339757][T16288] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 661.352202][T16288] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 661.364635][T16288] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 661.377139][T16288] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 661.389574][T16288] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 661.402032][T16288] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 661.414453][T16288] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 661.426891][T16288] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 661.521269][T16293] device ip6_vti0 entered promiscuous mode [ 661.555764][T16293] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3289'. [ 665.305223][T16354] device tunl0 left promiscuous mode [ 666.287044][T16354] device gre0 left promiscuous mode [ 666.296136][T16354] device gretap0 left promiscuous mode [ 666.308466][T16354] device erspan0 left promiscuous mode [ 666.316109][T16354] device ip_vti0 left promiscuous mode [ 666.327988][T16354] device ip6_vti0 left promiscuous mode [ 666.339811][T16354] device sit0 left promiscuous mode [ 666.362611][T16354] device ip6tnl0 left promiscuous mode [ 666.371371][T16354] device ip6gre0 left promiscuous mode [ 667.552034][T16354] device syz_tun left promiscuous mode [ 667.563775][T16354] device ip6gretap0 left promiscuous mode [ 667.587492][T16354] device nlmon0 left promiscuous mode [ 667.713862][T16354] device vlan2 left promiscuous mode [ 667.819322][T16354] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 667.828428][T16354] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 667.837375][T16354] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 667.860362][T16354] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 667.872950][T16354] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 667.883550][T16354] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 667.897674][T16354] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 667.907973][T16354] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 667.920458][T16354] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 667.932073][T16354] device geneve3 left promiscuous mode [ 667.943129][T16354] device team0 left promiscuous mode [ 668.100784][T16367] bond0: (slave dummy0): Releasing backup interface [ 668.362065][T16367] device dummy0 left promiscuous mode [ 669.339039][T16367] batman_adv: batadv0: Adding interface: dummy0 [ 669.550868][T16367] batman_adv: batadv0: The MTU of interface dummy0 is too small (1536) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 669.741029][T16367] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 670.370223][T16383] netlink: 'syz.3.3315': attribute type 1 has an invalid length. [ 670.961379][T16383] device bond6 entered promiscuous mode [ 671.019812][T16383] 8021q: adding VLAN 0 to HW filter on device bond6 [ 671.237508][T16389] bond6: (slave erspan1): making interface the new active one [ 671.245086][T16389] device erspan1 entered promiscuous mode [ 671.252248][T16389] bond6: (slave erspan1): Enslaving as an active interface with an up link [ 671.292905][T12751] IPv6: ADDRCONF(NETDEV_CHANGE): bond6: link becomes ready [ 671.328080][T16394] netlink: 14 bytes leftover after parsing attributes in process `syz.7.3317'. [ 671.348586][T16394] batman_adv: batadv0: Interface deactivated: dummy0 [ 671.376379][T16394] batman_adv: batadv0: Removing interface: dummy0 [ 671.416325][T16406] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3320'. [ 671.542037][T16416] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.3321'. [ 676.074959][T16470] netlink: 'syz.9.3336': attribute type 11 has an invalid length. [ 677.471344][T16493] net_ratelimit: 10 callbacks suppressed [ 677.471359][T16493] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.485381][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.494733][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.502995][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.511261][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.520309][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.528545][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.536764][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.544968][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.553158][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.591784][T16502] netlink: 'syz.7.3341': attribute type 1 has an invalid length. [ 680.651154][T16522] device bridge0 entered promiscuous mode [ 682.825538][ C1] net_ratelimit: 13159 callbacks suppressed [ 682.825555][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.839748][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.848008][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.856217][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.864441][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.872672][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.880900][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.889074][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.897322][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.905526][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.045751][T16607] __sock_release: fasync list not empty! [ 684.052123][T16605] tipc: Enabling of bearer rejected, already enabled [ 684.761126][T16616] device bridge7 entered promiscuous mode [ 685.312758][T16631] device macvlan2 left promiscuous mode [ 688.208415][ C1] net_ratelimit: 5592 callbacks suppressed [ 688.208433][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.222552][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.230793][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.239008][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.247234][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.255408][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.263613][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.271825][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.280023][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.288195][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.598191][T16705] ip6t_srh: unknown srh invflags 4000 [ 690.655232][T16722] netlink: 'syz.4.3406': attribute type 1 has an invalid length. [ 691.353101][T16722] 8021q: adding VLAN 0 to HW filter on device bond1 [ 691.495035][T16733] tipc: Enabling of bearer rejected, failed to enable media [ 691.553009][T16722] bond1: (slave geneve2): making interface the new active one [ 691.588866][T16722] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 691.714200][ T4582] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 691.817747][T16743] overlayfs: failed to clone lowerpath [ 693.607322][ C1] net_ratelimit: 8108 callbacks suppressed [ 693.607338][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.621332][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.629469][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.637592][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.645776][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.653904][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.662074][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.670236][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.678401][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.686548][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.326233][T16800] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3426'. [ 697.732000][T16800] device team1 entered promiscuous mode [ 697.753176][T16800] 8021q: adding VLAN 0 to HW filter on device team1 [ 697.796321][T16809] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3426'. [ 697.848299][T16809] team2 (uninitialized): Failed to send options change via netlink (err -105) [ 698.061280][T16809] device team2 entered promiscuous mode [ 698.078994][T16809] 8021q: adding VLAN 0 to HW filter on device team2 [ 700.498410][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 700.505953][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 700.599676][ C1] net_ratelimit: 4521 callbacks suppressed [ 700.599691][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.613821][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.622045][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.630243][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.638469][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.646662][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.654858][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.663046][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.671245][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.679424][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.680155][T16835] tipc: Enabling of bearer rejected, failed to enable media [ 701.729625][T16863] IPVS: Error connecting to the multicast addr [ 701.871007][ T25] audit: type=1326 audit(1781198463.680:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16875 comm="syz.7.3442" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff27e126e59 code=0x7ffc0000 [ 701.951427][ T25] audit: type=1326 audit(1781198463.680:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16875 comm="syz.7.3442" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff27e126e59 code=0x7ffc0000 [ 701.997692][ T25] audit: type=1326 audit(1781198463.680:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16875 comm="syz.7.3442" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff27e126e59 code=0x7ffc0000 [ 702.036828][ T25] audit: type=1326 audit(1781198463.680:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16875 comm="syz.7.3442" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff27e126e59 code=0x7ffc0000 [ 702.300986][ T25] audit: type=1326 audit(1781198463.680:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16875 comm="syz.7.3442" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff27e126e59 code=0x7ffc0000 [ 702.399950][ T25] audit: type=1326 audit(1781198463.680:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16875 comm="syz.7.3442" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff27e126e59 code=0x7ffc0000 [ 702.463404][ T25] audit: type=1326 audit(1781198463.680:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16875 comm="syz.7.3442" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff27e126e59 code=0x7ffc0000 [ 702.515384][ T25] audit: type=1326 audit(1781198463.680:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16875 comm="syz.7.3442" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff27e126e59 code=0x7ffc0000 [ 702.701347][ T25] audit: type=1326 audit(1781198463.867:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16875 comm="syz.7.3442" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff27e126e59 code=0x7ffc0000 [ 702.733462][ T25] audit: type=1326 audit(1781198463.867:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16875 comm="syz.7.3442" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff27e126e59 code=0x7ffc0000 [ 704.947301][T16923] ================================================================== [ 704.956440][T16923] BUG: KASAN: use-after-free in ieee80211_monitor_select_queue+0x23a/0x240 [ 704.965287][T16923] Read of size 2 at addr ffff888043d6adfb by task syz.4.3459/16923 [ 704.973269][T16923] [ 704.975603][T16923] CPU: 0 PID: 16923 Comm: syz.4.3459 Not tainted syzkaller #0 [ 704.983063][T16923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 704.993131][T16923] Call Trace: [ 704.996418][T16923] [ 704.999351][T16923] dump_stack_lvl+0x188/0x250 [ 705.004126][T16923] ? show_regs_print_info+0x20/0x20 [ 705.009337][T16923] ? load_image+0x400/0x400 [ 705.013843][T16923] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 705.019312][T16923] ? ieee80211_tx+0x460/0x460 [ 705.024003][T16923] print_address_description+0x60/0x2d0 [ 705.029577][T16923] ? ieee80211_monitor_select_queue+0x23a/0x240 [ 705.035833][T16923] kasan_report+0xdf/0x130 [ 705.040264][T16923] ? ieee80211_monitor_select_queue+0x23a/0x240 [ 705.046525][T16923] ieee80211_monitor_select_queue+0x23a/0x240 [ 705.052611][T16923] ? ieee80211_recalc_smps_work+0x20/0x20 [ 705.058345][T16923] netdev_core_pick_tx+0x118/0x2e0 [ 705.063472][T16923] __dev_queue_xmit+0x756/0x2f80 [ 705.068419][T16923] ? __might_fault+0xb7/0x110 [ 705.073123][T16923] ? dev_queue_xmit+0x20/0x20 [ 705.077804][T16923] ? virtio_net_hdr_to_skb+0xa6b/0x11f0 [ 705.083370][T16923] ? packet_cached_dev_get+0x270/0x270 [ 705.088841][T16923] ? skb_copy_datagram_from_iter+0x5e3/0x6a0 [ 705.094841][T16923] packet_sendmsg+0x3dba/0x5060 [ 705.099731][T16923] ? __might_sleep+0xf0/0xf0 [ 705.104344][T16923] ? aa_sk_perm+0x7dc/0x910 [ 705.108854][T16923] ? packet_getsockopt+0x9a0/0x9a0 [ 705.113987][T16923] ? aa_sock_msg_perm+0x94/0x150 [ 705.118941][T16923] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 705.124235][T16923] ? security_socket_sendmsg+0x7c/0xa0 [ 705.129699][T16923] ? packet_getsockopt+0x9a0/0x9a0 [ 705.134827][T16923] ____sys_sendmsg+0x5b7/0x8f0 [ 705.139611][T16923] ? __sys_sendmsg_sock+0x30/0x30 [ 705.144655][T16923] ? import_iovec+0x6f/0xa0 [ 705.149174][T16923] ___sys_sendmsg+0x236/0x2e0 [ 705.153871][T16923] ? __sys_sendmsg+0x2a0/0x2a0 [ 705.158680][T16923] __se_sys_sendmsg+0x1af/0x290 [ 705.163547][T16923] ? __x64_sys_sendmsg+0x80/0x80 [ 705.168492][T16923] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 705.174494][T16923] ? lockdep_hardirqs_on+0x94/0x140 [ 705.179707][T16923] do_syscall_64+0x4c/0xa0 [ 705.184132][T16923] ? clear_bhb_loop+0x30/0x80 [ 705.188812][T16923] ? clear_bhb_loop+0x30/0x80 [ 705.193499][T16923] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 705.199414][T16923] RIP: 0033:0x7f97c3a62e59 [ 705.203832][T16923] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 705.223443][T16923] RSP: 002b:00007f97c1cbc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 705.231869][T16923] RAX: ffffffffffffffda RBX: 00007f97c3cdbfa0 RCX: 00007f97c3a62e59 [ 705.239844][T16923] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 705.247817][T16923] RBP: 00007f97c3af8d6f R08: 0000000000000000 R09: 0000000000000000 [ 705.255790][T16923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 705.263760][T16923] R13: 00007f97c3cdc038 R14: 00007f97c3cdbfa0 R15: 00007ffd6faae4e8 [ 705.271758][T16923] [ 705.274774][T16923] [ 705.277095][T16923] Allocated by task 7: [ 705.281165][T16923] __kasan_kmalloc+0xb5/0xf0 [ 705.285768][T16923] __alloc_skb+0x22c/0x750 [ 705.290188][T16923] nsim_dev_trap_report_work+0x2a1/0xb50 [ 705.295827][T16923] process_one_work+0x85f/0x1010 [ 705.300767][T16923] worker_thread+0xaa6/0x1290 [ 705.305448][T16923] kthread+0x436/0x520 [ 705.309519][T16923] ret_from_fork+0x1f/0x30 [ 705.313942][T16923] [ 705.316268][T16923] Freed by task 7: [ 705.319981][T16923] kasan_set_track+0x4b/0x70 [ 705.324577][T16923] kasan_set_free_info+0x1f/0x40 [ 705.329518][T16923] ____kasan_slab_free+0xd5/0x110 [ 705.334549][T16923] slab_free_freelist_hook+0xea/0x170 [ 705.339923][T16923] kfree+0xef/0x2a0 [ 705.343731][T16923] skb_release_data+0x6b8/0x800 [ 705.348591][T16923] consume_skb+0xa2/0x100 [ 705.352925][T16923] nsim_dev_trap_report_work+0x7d7/0xb50 [ 705.358564][T16923] process_one_work+0x85f/0x1010 [ 705.363507][T16923] worker_thread+0xaa6/0x1290 [ 705.368187][T16923] kthread+0x436/0x520 [ 705.372257][T16923] ret_from_fork+0x1f/0x30 [ 705.376674][T16923] [ 705.378993][T16923] The buggy address belongs to the object at ffff888043d6a000 [ 705.378993][T16923] which belongs to the cache kmalloc-4k of size 4096 [ 705.393043][T16923] The buggy address is located 3579 bytes inside of [ 705.393043][T16923] 4096-byte region [ffff888043d6a000, ffff888043d6b000) [ 705.406499][T16923] The buggy address belongs to the page: [ 705.412139][T16923] page:ffffea00010f5a00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x43d68 [ 705.422295][T16923] head:ffffea00010f5a00 order:3 compound_mapcount:0 compound_pincount:0 [ 705.430621][T16923] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 705.438624][T16923] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888016c42140 [ 705.447215][T16923] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 705.455800][T16923] page dumped because: kasan: bad access detected [ 705.462220][T16923] page_owner tracks the page as allocated [ 705.467930][T16923] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 12728, ts 421601980547, free_ts 420310245524 [ 705.488686][T16923] get_page_from_freelist+0x1bbd/0x1ca0 [ 705.494253][T16923] __alloc_pages+0x1ee/0x480 [ 705.498851][T16923] new_slab+0xc0/0x4b0 [ 705.502921][T16923] ___slab_alloc+0x80a/0xdd0 [ 705.507513][T16923] kmem_cache_alloc_trace+0x1a5/0x2a0 [ 705.512889][T16923] kobject_uevent_env+0x27a/0x890 [ 705.517917][T16923] net_rx_queue_update_kobjects+0x221/0x490 [ 705.523815][T16923] netdev_register_kobject+0x231/0x320 [ 705.529280][T16923] register_netdevice+0x1042/0x1710 [ 705.534487][T16923] ip6gre_newlink_common+0x3a2/0x540 [ 705.539772][T16923] ip6gre_newlink+0x1d4/0x530 [ 705.544454][T16923] rtnl_newlink+0x1359/0x1a50 [ 705.549135][T16923] rtnetlink_rcv_msg+0x844/0xf30 [ 705.554076][T16923] netlink_rcv_skb+0x1f5/0x440 [ 705.558839][T16923] netlink_unicast+0x774/0x920 [ 705.563604][T16923] netlink_sendmsg+0x8ba/0xbe0 [ 705.568372][T16923] page last free stack trace: [ 705.573036][T16923] free_unref_page_prepare+0x637/0x6c0 [ 705.578499][T16923] free_unref_page+0x8f/0x2a0 [ 705.583181][T16923] __unfreeze_partials+0x1a5/0x200 [ 705.588289][T16923] put_cpu_partial+0x12d/0x190 [ 705.593055][T16923] qlist_free_all+0x35/0x90 [ 705.597559][T16923] kasan_quarantine_reduce+0x150/0x160 [ 705.603016][T16923] __kasan_slab_alloc+0x2f/0xd0 [ 705.607868][T16923] slab_post_alloc_hook+0x4c/0x380 [ 705.612982][T16923] __kmalloc+0x127/0x330 [ 705.617229][T16923] tomoyo_realpath_from_path+0x118/0x610 [ 705.622865][T16923] tomoyo_path_perm+0x23f/0x5d0 [ 705.627723][T16923] security_inode_getattr+0xcf/0x120 [ 705.633013][T16923] vfs_getattr+0x26/0x3a0 [ 705.637345][T16923] __x64_sys_newfstat+0x137/0x210 [ 705.642373][T16923] do_syscall_64+0x4c/0xa0 [ 705.646795][T16923] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 705.652696][T16923] [ 705.655028][T16923] Memory state around the buggy address: [ 705.660652][T16923] ffff888043d6ac80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 705.668716][T16923] ffff888043d6ad00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 705.676775][T16923] >ffff888043d6ad80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 705.684830][T16923] ^ [ 705.692803][T16923] ffff888043d6ae00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 705.700860][T16923] ffff888043d6ae80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 705.708912][T16923] ================================================================== [ 705.716964][T16923] Disabling lock debugging due to kernel taint [ 705.723252][T16923] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 705.730440][T16923] CPU: 0 PID: 16923 Comm: syz.4.3459 Tainted: G B syzkaller #0 [ 705.739282][T16923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 705.749334][T16923] Call Trace: [ 705.752612][T16923] [ 705.755626][T16923] dump_stack_lvl+0x188/0x250 [ 705.760483][T16923] ? show_regs_print_info+0x20/0x20 [ 705.765690][T16923] ? load_image+0x400/0x400 [ 705.770202][T16923] panic+0x2e5/0x810 [ 705.774104][T16923] ? bpf_jit_dump+0xd0/0xd0 [ 705.778611][T16923] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 705.784509][T16923] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 705.790405][T16923] ? _raw_spin_unlock+0x40/0x40 [ 705.795257][T16923] ? ieee80211_monitor_select_queue+0x23a/0x240 [ 705.801506][T16923] check_panic_on_warn+0x80/0xa0 [ 705.806448][T16923] ? ieee80211_monitor_select_queue+0x23a/0x240 [ 705.812697][T16923] end_report+0x6d/0xf0 [ 705.816860][T16923] kasan_report+0x102/0x130 [ 705.821372][T16923] ? ieee80211_monitor_select_queue+0x23a/0x240 [ 705.827619][T16923] ieee80211_monitor_select_queue+0x23a/0x240 [ 705.833688][T16923] ? ieee80211_recalc_smps_work+0x20/0x20 [ 705.839411][T16923] netdev_core_pick_tx+0x118/0x2e0 [ 705.844527][T16923] __dev_queue_xmit+0x756/0x2f80 [ 705.849471][T16923] ? __might_fault+0xb7/0x110 [ 705.854153][T16923] ? dev_queue_xmit+0x20/0x20 [ 705.858838][T16923] ? virtio_net_hdr_to_skb+0xa6b/0x11f0 [ 705.864393][T16923] ? packet_cached_dev_get+0x270/0x270 [ 705.869858][T16923] ? skb_copy_datagram_from_iter+0x5e3/0x6a0 [ 705.875845][T16923] packet_sendmsg+0x3dba/0x5060 [ 705.880713][T16923] ? __might_sleep+0xf0/0xf0 [ 705.885307][T16923] ? aa_sk_perm+0x7dc/0x910 [ 705.889813][T16923] ? packet_getsockopt+0x9a0/0x9a0 [ 705.894932][T16923] ? aa_sock_msg_perm+0x94/0x150 [ 705.899872][T16923] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 705.905245][T16923] ? security_socket_sendmsg+0x7c/0xa0 [ 705.910790][T16923] ? packet_getsockopt+0x9a0/0x9a0 [ 705.915906][T16923] ____sys_sendmsg+0x5b7/0x8f0 [ 705.920683][T16923] ? __sys_sendmsg_sock+0x30/0x30 [ 705.925713][T16923] ? import_iovec+0x6f/0xa0 [ 705.930221][T16923] ___sys_sendmsg+0x236/0x2e0 [ 705.934905][T16923] ? __sys_sendmsg+0x2a0/0x2a0 [ 705.939688][T16923] __se_sys_sendmsg+0x1af/0x290 [ 705.944543][T16923] ? __x64_sys_sendmsg+0x80/0x80 [ 705.949483][T16923] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 705.955472][T16923] ? lockdep_hardirqs_on+0x94/0x140 [ 705.960674][T16923] do_syscall_64+0x4c/0xa0 [ 705.965095][T16923] ? clear_bhb_loop+0x30/0x80 [ 705.969771][T16923] ? clear_bhb_loop+0x30/0x80 [ 705.974453][T16923] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 705.980349][T16923] RIP: 0033:0x7f97c3a62e59 [ 705.984762][T16923] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 705.993010][ C1] net_ratelimit: 12647 callbacks suppressed [ 705.993023][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.004361][T16923] RSP: 002b:00007f97c1cbc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 706.004383][T16923] RAX: ffffffffffffffda RBX: 00007f97c3cdbfa0 RCX: 00007f97c3a62e59 [ 706.004397][T16923] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 706.004408][T16923] RBP: 00007f97c3af8d6f R08: 0000000000000000 R09: 0000000000000000 [ 706.010348][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.018312][T16923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 706.018325][T16923] R13: 00007f97c3cdc038 R14: 00007f97c3cdbfa0 R15: 00007ffd6faae4e8 [ 706.018344][T16923] [ 706.026792][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.042830][T16923] Kernel Offset: disabled [ 706.089995][T16923] Rebooting in 86400 seconds..