last executing test programs: 2.696211591s ago: executing program 2 (id=1786): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r2, 0x0, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, 0x0, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x80) 2.541981365s ago: executing program 1 (id=1789): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x29, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x40) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x3c, r3, 0x1, 0x70bd2b, 0x0, {0x35}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73, 0x2}}}]}, 0x3c}}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x60, 0xd, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4805}, 0x4010) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r5, 0x18000000000002a0, 0x1c, 0x0, &(0x7f00000011c0)="b9ffddc1ddcccdf175537d53888edfcef6e296510cff24fc83423368", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.3549663s ago: executing program 1 (id=1793): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) socket$netlink(0x10, 0x3, 0xa) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r4, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x4, 0x6, @l2={'eth', 0x3a, 'batadv0\x00'}}}}}, 0x34}, 0x1, 0x0, 0x0, 0x91}, 0x0) 2.035111218s ago: executing program 1 (id=1796): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x200, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x9, 0x4, 0xb47e, 0xb, 0x3, 0xd, 0xf, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x34000004}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0x1, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.034976058s ago: executing program 4 (id=1797): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000180)=0x1001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) listen(r1, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000200)=""/51, 0x18}], 0x1) 2.010966379s ago: executing program 3 (id=1798): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c166ba2100a067ee66ba2000b000ee6d2f2f820000c0d23266bac000533066b808008ed0660f38806f008ee0", 0x33}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x8, 0x0, 0x0, 0x3, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x9, 0x0, 0x0, 0x2}, {0xeda7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x2004cb, 0x3, 0x100000000000000, 0xfffffffffffffff8, 0x0, 0xfffffffffffff2ab, 0x2000000000003ff, 0x2], 0x0, 0x200306}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.807858804s ago: executing program 3 (id=1799): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0xb}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000007c0)={0x4c, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2fc0}], 0x0, 0x0, 0x0}) 1.807732713s ago: executing program 0 (id=1800): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prctl$PR_GET_IO_FLUSHER(0x4) syz_clone(0x25000, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) 1.807567173s ago: executing program 4 (id=1801): setresgid(0xee00, 0x0, 0x0) r0 = getgid() setresgid(0x0, 0x0, r0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x137) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f0000008380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x2022012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x3}}, 0x50) syz_fuse_handle_req(r1, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, 0x0, 0x1) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x40) ioctl$PTP_EXTTS_REQUEST2(r3, 0xc0046686, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 1.750847315s ago: executing program 2 (id=1802): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000080)={'bridge0\x00', {0x2, 0x0, @multicast1}}) fanotify_init(0xf00, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, r1) setpgid(0x0, r1) tkill(r1, 0x7) wait4(r1, 0x0, 0x2, 0x0) get_robust_list(r1, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) setpgid(0x0, 0x0) 1.621910838s ago: executing program 0 (id=1803): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000e00)=[@acquire], 0x0, 0x0, 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001000050428bd7000fcdbdf2500200000", @ANYBLOB="4000000004000000240012800b0001006970766c616e0000140002800600010000000000060001000200000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00'], 0x54}, 0x1, 0x0, 0x0, 0x4080}, 0x0) 1.55041352s ago: executing program 3 (id=1804): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000003"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@delpolicy={0x50, 0x27, 0x114, 0x0, 0x0, {{@in6=@local, @in6=@mcast1}}}, 0x50}}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r1}, 0x57) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x16, 0x8, 0x8, 0x2, 0x4002, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007e3dc410cd0621013ddd0102030109021b000100094000090485000189fe1f000905820220"], 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000002c0)={0x1}) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed203e, &(0x7f0000000440)={[{@jqfmt_vfsold}, {@data_err_abort}, {@debug}, {@noload}, {@mblk_io_submit}, {@noacl}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@noload}]}, 0xfe, 0x470, &(0x7f00000004c0)="$eJzs3M1vFOUfAPDvTF94+/FrRXwBQapoJL60tLzIwYtGEw6amOgB46m2hVQWamhNhBCtHvBoSLwb/wvjSS9GvWjiVe+GhBguoF7WzM5MKctu2aXbLnQ/n2S6zzPzdJ/nOzPP7jPz7G4APWsk+5NE/C8ifo+IoTx7a4GR/OHGtYtTf1+7OJVEtfrWX0mt3PVrF6fKouX/bcsz1WqR39Sg3kvvRkxWKjPnivzYwpkPxubPX3hh9szkqZlTM2cnjh07fGjv4NGJIx2JM4vr+u6P5/bsOv7O5TemTlx+76ekP/K4oy6OThnJ925DT3e6si7bvixd27FL9v1yM93oTKCb+iIiO1wDtf4/FH2xZWnbULz2WVcbB6yparVaXeFVebEKbGBJdLsFQHeUb/TZ9W+5rNPQ455w9eX8AiiL+0ax5Fv6I80T+wbqrm87aSQiTiz+81W2xBrdhwAAWO67bPzzfKPxXxoP54nB7M//izmU4Yh4ICJ2RMSDEbEzIh6KqJV9JCIebbP++hmS28c/6ZW7Dq4F2fjvpWJu69bxX1oWGe4rcttr8Q8kJ2crMweLfXIgBjadnE1mxleo4/tXf/ui2bbl479syeovx4JFO670192gm55cmFxNzMtd/TRid3+j+JMop3GSiNgVEbvvso7ZZ/ubbrtz/Cto/rQtq34d8Ux+/BejLv5S0nR+cvzFoxNHxjZHZebgWHlW3O7nXy+92az+VcXfAdnx39rw/F+KfzjZHDF//sLp2nztfPt1XPrj86bXNG2e/8e3F+f/YPJ2bcVgseGjyYWFc+MRg8nrt6+fuPlsZb4sn8V/YH/j/r8jbu6JxyJiT0TsjYjHs4vCou1PRMSTEbF/hfh/fOWp99uPf33mSrP4p+90/GP58W8/0Xf6h2/vHP/miGh2/A/XUgeKNa28/rXawNXsOwAAALhfpLXPwCfp6FI6TUdH88/w74ytaWVufuG5k3Mfnp3OPys/HANp7U5XWt4Pzu+Hjhf3hsv8RF3+UHHf+Mu+LbX86NRcZbrbwUOP29ak/2f+7Ot264A114F5NOA+pf9D79L/oTcl+j/0NP0felej/v9J09Kj36xpY4B15f0felcL/X8xf2g+KgDuT97/oXfp/9CTmn43Pl3VV/7XPfFv8XuG90p7Nn4i0nuiGRs/0d/yj1m0kagO5f0/W7OpYZluvzIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB0xn8BAAD//6XA5b8=") openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x120002, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r0, 0x58, &(0x7f0000000940)}, 0x10) 1.332714746s ago: executing program 0 (id=1805): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xfff7, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x4, 0x8000}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r6 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r6, 0x0, 0x0, 0x40, &(0x7f00000001c0)={0x11, 0x88a8, r3, 0x1, 0xd8, 0x6, @remote}, 0x14) 1.285698317s ago: executing program 1 (id=1806): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x8, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0xffffffffffffff80, 0x1, {0x4, 0x0, 0x8fcf, 0x4, 0x23e, 0x8, 0xe, 0x0, 0xfffffff7}}}}]}, 0x58}}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) r3 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040110700090001010203010902200001010080fa0904000002070102000705810200020007050202"], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000200)={0x84, &(0x7f0000000240)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r3, 0x81, 0x0, 0x0) pread64(r4, 0x0, 0x0, 0xd000) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x4001100, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000b80)={&(0x7f0000000100)=@phonet={0x23, 0x5, 0x0, 0x13}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000c00)="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", 0x11d}], 0x1}, 0x8884) 1.282417607s ago: executing program 4 (id=1807): openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) io_setup(0x1, &(0x7f00000004c0)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) set_mempolicy(0x2002, &(0x7f0000000000)=0x9, 0x9) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x103840) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a0677bc45ff810500004277000058000b480400945f64009400050028925a01000000020000008000f07ffeffe809000000fff5dd000000100001000c081000418e0000070031d0", 0x58}], 0x1) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000280)=0x8000005, 0x4) recvmmsg(r0, &(0x7f0000003440)=[{{&(0x7f00000000c0)=@xdp, 0x80, &(0x7f0000002980)=[{&(0x7f0000000680)=""/198, 0xc6}], 0x1, &(0x7f0000000180)=""/140, 0x8c}, 0xfffffff6}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000780)=""/133, 0x85}], 0x1, &(0x7f0000000840)=""/181, 0xb5}, 0x5}, {{&(0x7f00000004c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000a00)=""/191, 0xbf}, {&(0x7f0000000540)=""/17, 0xb}, {&(0x7f0000000ac0)=""/129, 0x81}], 0x3, &(0x7f0000000940)=""/33, 0x21}, 0x1}, {{&(0x7f0000000b80)=@l2tp6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000003680)=[{&(0x7f0000000c00)=""/2, 0x2}, {&(0x7f0000000c40)=""/125, 0x7d}, {0x0}, {&(0x7f0000000e80)=""/77, 0x4d}, {&(0x7f0000000f00)=""/248, 0xf8}, {&(0x7f0000004fc0)=""/4113, 0x1009}, {0x0}], 0x7, &(0x7f0000002140)=""/205, 0xcd}, 0x3}, {{&(0x7f0000002240)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000000d40)=[{&(0x7f00000022c0)=""/113, 0x71}, {&(0x7f0000002340)=""/224, 0xe0}, {&(0x7f0000002440)=""/84, 0x54}, {&(0x7f0000002000)=""/183, 0xb7}], 0x4, &(0x7f0000000d80)=""/188, 0xbc}, 0x5}, {{0x0, 0x0, &(0x7f0000002d40), 0x58}, 0x95}, {{&(0x7f0000002e00)=@vsock, 0x80, &(0x7f0000002f00)}, 0x5}, {{0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000003080)=""/53, 0x35}], 0x1, &(0x7f0000003100)=""/239, 0xef}, 0x5}], 0x8, 0x10022, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) syz_clone(0xa8140180, 0x0, 0x0, 0x0, 0x0, 0x0) 1.219729919s ago: executing program 0 (id=1808): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/sys/net/sctp/intl_enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1\x00', 0x1) close(r0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r1, &(0x7f0000000200)={0x2, 0x1388, @empty}, 0x10) listen(r1, 0x5) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000240)=0x2, 0x4) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7d, &(0x7f0000000280)={0x0, 0x1}, 0x8) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000380)=0x2, 0x4) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7d, &(0x7f00000003c0)={0x0, 0x1}, 0x8) connect$inet(r2, &(0x7f0000000480)={0x2, 0x1388, @loopback}, 0x10) 1.049036493s ago: executing program 2 (id=1809): syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)) mkdir(&(0x7f0000000140)='./config\x00', 0x1ff) mount(&(0x7f0000000180)=@filename='none\x00', &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r0 = open(&(0x7f00000002c0)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x241, 0x1ff) write(r0, &(0x7f0000000300)='0123', 0x4) close(r0) mkdir(&(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000380)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdir(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv\x00', 0x1ff) mkdir(&(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p\x00', 0x1ff) r1 = open(&(0x7f00000004c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p/wWidth\x00', 0x241, 0x1ff) write(r1, &(0x7f0000000540)='1280', 0x4) 1.020141973s ago: executing program 2 (id=1810): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xf, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0xffff}, {0xffff, 0xffff}, {0x2, 0x4}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r9, {0xf000, 0xffff}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff3}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 987.185225ms ago: executing program 2 (id=1811): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) rseq(&(0x7f0000001280)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) sigaltstack(&(0x7f0000000000)={&(0x7f0000000280)=""/4124, 0x80000001, 0x101c}, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 685.676053ms ago: executing program 4 (id=1812): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setuid(0xee01) r3 = syz_clone(0x140011, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r4, r3, 0x7, 0xffffffffffffffff, 0x0) 684.977182ms ago: executing program 2 (id=1822): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_macvtap\x00', 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000240), &(0x7f0000000380)=r3}, 0x20) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r2, &(0x7f0000000680)='@', &(0x7f0000000400)=@tcp6=r4, 0x2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000580), 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$inet6(0xa, 0x3, 0x3a) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xfff1}, {0x0, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0xc015}, 0x0) 667.121173ms ago: executing program 3 (id=1813): openat$kvm(0x0, &(0x7f0000000040), 0x42843, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000080)={[0x60000, 0xeeef0000, 0xdddd0000, 0xb000], 0x2000000db, 0xc, 0x100000000000000}) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0x4000, 0x4, 0x5, 0x0, 0x8, 0x3, 0xa, 0x7e, 0x4, 0x11, 0x5, 0x80204}, {0x804, 0x1, 0x1, 0x45, 0x7, 0x5, 0x4, 0xff, 0x0, 0xfe, 0x6, 0x7f, 0x20c}, {0x1, 0x3, 0x38, 0x5, 0x84, 0x7, 0x6, 0x50, 0x0, 0x70, 0x4, 0x5}], 0xffbfffff}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x20000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000000)=0x9, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 488.019457ms ago: executing program 3 (id=1814): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x2}, [@TCA_NETEM_RATE={0x14, 0x6, {0x8, 0x3, 0x6, 0x9}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xfff7, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, 0x0, 0x0, 0x40, &(0x7f00000001c0)={0x11, 0x8164, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) 442.622058ms ago: executing program 4 (id=1815): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000140)=0x40, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r2, 0x0, r3}, 0x60) 412.42116ms ago: executing program 1 (id=1816): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) close(0x3) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r5}, 0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r5, 0x8}, &(0x7f0000000100)=0x8) 270.363643ms ago: executing program 0 (id=1817): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x10, 0x80002, 0x0) syz_emit_ethernet(0x8f, &(0x7f0000000700)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @tipc={{0x1a, 0x4, 0x0, 0x2a, 0x81, 0x67, 0x0, 0x69, 0x6, 0x0, @private=0xa010100, @empty, {[@timestamp_prespec={0x44, 0x14, 0x7f, 0x3, 0x5, [{@remote, 0x7fffffff}, {@remote, 0x5}]}, @timestamp={0x44, 0xc, 0x84, 0x0, 0x1, [0x10000, 0x3]}, @timestamp_addr={0x44, 0x4, 0x52}, @timestamp_prespec={0x44, 0xc, 0xea, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @timestamp={0x44, 0x20, 0xc8, 0x0, 0x2, [0x3, 0x0, 0x8, 0x17, 0x9, 0x0, 0x8000]}, @lsrr={0x83, 0x3, 0x16}]}}, @payload_conn={{{0x19, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, 0x2, 0x3, 0x0, 0x3, 0x0, 0x2, 0x0, 0x5, 0x4, 0x4, 0x4e23, 0x4e20}}, [0x0]}}}}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e00679a36019b8af9a900004f78ffffffff1cccff"], 0x1c}}, 0x0) 164.897935ms ago: executing program 1 (id=1818): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x44000) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4048804) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000280)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a06ffffff7f000000000000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) 15.56662ms ago: executing program 3 (id=1819): syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1, 0x11f4, &(0x7f0000001280)="$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") socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r3, &(0x7f000000c1c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f000000acc0)=""/4087, 0xff7}, {&(0x7f0000000400)=""/32, 0x20}], 0x2}, 0x0) 602.079µs ago: executing program 4 (id=1820): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000140)={[{@test_dummy_encryption_v1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x1, 0x241, &(0x7f0000000540)="$eJzs3U9oFFccB/DfzO42TbKUtL0UCm2hlNIGQnor9JJeWgiUEEoptIUUES9KIsQEb4knLx70rJKTlyDejB4ll+BFETxFzSFeBA0eDB70sDI7iUSz/oGJO+J8PjC7M7vvze8Ns983exkmgMoaiIiRiKhFxGBENCIi2dngm3wZ2Npc6F2ZiGi1/nyYtNvl27ntfv0RMR8RP0fEcprEwXrE7NK/649Xf//+xEzju3NL//R29SC3bKyv/bF5duz4xdGfZq/fvD+WxEg0XziuvZd0+KyeRHz2Loq9J5J62SPgbYwfvXAry/3nEfFtO/+NSCM/eSenP1puxI9nXtX31IMbX3ZzrMDea7Ua2TVwvgVUThoRzUjSoYjI19N0aCj/D3+71pcempo+MnhgamZyf9kzFbBXmhFrv13uudT/Uv7v1fL8Ax+uLP9/jS/eydY3a2WPBuimLP+D/8/9EPIPlSP/UF3yD9Ul/1Bdr8t/WtKYgO5w/Yfqkn+oLvmH6pJ/qC75h+ramX8AoFpaPWXfgQyUpez5BwAAAAAAAAAAAAAAAAAA2G2hd2Vie+lWzaunIzZ+jYh6p/q1recQfNx+7XuUZM2eS/Juhfz3dcEdFHS+5LuvP7lbbv1rX5Vbf24yYv5YRAzX67t/f0nh52B8+obvG/sKFijol7/Lrf90sdz6o6sRV7L5Z7jT/JPGF+33zvNPMzt/BesfflJwBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTNswAAAP//ceptKw==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket(0x1d, 0x2, 0x6) bind$inet(r3, &(0x7f00000000c0)={0x1d, 0x4e20, @loopback}, 0x10) 0s ago: executing program 0 (id=1821): socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) kernel console output (not intermixed with test programs): 21] CIFS: VFS: cifs_mount failed w/return code = -5 [ 76.645240][ T4417] ======================================================= [ 76.645240][ T4417] WARNING: The mand mount option has been deprecated and [ 76.645240][ T4417] and is ignored by this kernel. Remove the mand [ 76.645240][ T4417] option from the mount to silence this warning. [ 76.645240][ T4417] ======================================================= [ 76.854866][ T4417] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 76.975867][ T4417] ext4 filesystem being mounted at /6/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 77.169433][ T4462] device syz_tun entered promiscuous mode [ 77.206596][ T4462] device vlan2 entered promiscuous mode [ 77.271240][ T4465] loop1: detected capacity change from 0 to 4096 [ 77.376004][ T4465] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 77.617828][ T4472] batman_adv: batadv0: Adding interface: dummy0 [ 77.832499][ T4472] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.230661][ T4472] batman_adv: batadv0: Interface activated: dummy0 [ 78.265685][ T4475] batadv0: mtu less than device minimum [ 78.294015][ T4475] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 78.306924][ T4475] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 78.319375][ T4475] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 78.331856][ T4475] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 78.344342][ T4475] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 78.356852][ T4475] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 78.369376][ T4475] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 78.381909][ T4475] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 78.604326][ T4493] netlink: 8 bytes leftover after parsing attributes in process `syz.0.60'. [ 78.686172][ T4495] device bond_slave_0 entered promiscuous mode [ 78.692855][ T4495] device bond_slave_1 entered promiscuous mode [ 78.713580][ T4495] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 78.730795][ T4495] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 78.764665][ T4490] netlink: 'syz.1.61': attribute type 10 has an invalid length. [ 78.796688][ T4490] device wlan1 entered promiscuous mode [ 78.803097][ T4490] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 78.881833][ T4500] Illegal XDP return value 4294967294, expect packet loss! [ 78.930962][ T4506] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 78.979796][ T1338] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 79.007423][ T4509] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 79.239857][ T1338] usb 3-1: Using ep0 maxpacket: 16 [ 79.280222][ T1338] usb 3-1: too many configurations: 112, using maximum allowed: 8 [ 80.199919][ T1338] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 80.924167][ T1338] usb 3-1: New USB device strings: Mfr=144, Product=246, SerialNumber=0 [ 80.932977][ T1338] usb 3-1: Product: syz [ 80.937169][ T1338] usb 3-1: Manufacturer: syz [ 80.961474][ T1338] r8152-cfgselector 3-1: config 0 descriptor?? [ 81.006036][ T26] audit: type=1326 audit(1785810324.037:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4528 comm="syz.0.74" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd25e21f019 code=0x7ffc0000 [ 81.012813][ T4529] loop0: detected capacity change from 0 to 1024 [ 81.068176][ T26] audit: type=1326 audit(1785810324.047:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4528 comm="syz.0.74" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd25e21f019 code=0x7ffc0000 [ 81.093850][ T4529] hfsplus: invalid btree flag [ 81.099215][ T4529] hfsplus: failed to load extents file [ 81.104231][ T26] audit: type=1326 audit(1785810324.047:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4528 comm="syz.0.74" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd25e21f019 code=0x7ffc0000 [ 81.184237][ T26] audit: type=1326 audit(1785810324.047:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4528 comm="syz.0.74" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd25e21f019 code=0x7ffc0000 [ 81.260011][ T1338] r8152-cfgselector 3-1: Unknown version 0x0000 [ 81.307594][ T1338] r8152-cfgselector 3-1: Unknown version 0x0000 [ 81.336007][ T1338] r8152-cfgselector 3-1: USB disconnect, device number 2 [ 81.352007][ T26] audit: type=1326 audit(1785810324.047:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4528 comm="syz.0.74" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd25e21f019 code=0x7ffc0000 [ 81.393382][ T4539] netlink: 36 bytes leftover after parsing attributes in process `syz.3.77'. [ 81.408983][ T26] audit: type=1326 audit(1785810324.047:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4528 comm="syz.0.74" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd25e21f019 code=0x7ffc0000 [ 81.439572][ T26] audit: type=1326 audit(1785810324.047:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4528 comm="syz.0.74" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd25e21f019 code=0x7ffc0000 [ 81.471121][ T26] audit: type=1326 audit(1785810324.047:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4528 comm="syz.0.74" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fd25e21f019 code=0x7ffc0000 [ 81.496221][ T4539] netlink: 68 bytes leftover after parsing attributes in process `syz.3.77'. [ 81.512764][ T4539] netlink: 68 bytes leftover after parsing attributes in process `syz.3.77'. [ 81.530912][ T26] audit: type=1326 audit(1785810324.047:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4528 comm="syz.0.74" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd25e21f019 code=0x7ffc0000 [ 81.555942][ T4539] bridge0: port 3(veth0) entered blocking state [ 81.562783][ T4539] bridge0: port 3(veth0) entered disabled state [ 81.570617][ T4539] device veth0 entered promiscuous mode [ 81.576730][ T4539] bridge0: port 3(veth0) entered blocking state [ 81.583351][ T4539] bridge0: port 3(veth0) entered forwarding state [ 81.622116][ T26] audit: type=1326 audit(1785810324.047:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4528 comm="syz.0.74" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd25e21f019 code=0x7ffc0000 [ 81.687625][ T4540] bridge0: port 4(veth1) entered blocking state [ 81.740486][ T4540] bridge0: port 4(veth1) entered disabled state [ 81.757392][ T4540] device veth1 entered promiscuous mode [ 81.775457][ T4540] bridge0: port 4(veth1) entered blocking state [ 81.781900][ T4540] bridge0: port 4(veth1) entered forwarding state [ 82.765371][ T4551] device syzkaller0 entered promiscuous mode [ 83.973099][ T4569] device syzkaller0 entered promiscuous mode [ 86.631905][ T4589] MPTCP: addr_signal error, rm_addr=1 [ 86.725220][ T3157] cfg80211: failed to load regulatory.db [ 87.619280][ T4228] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 87.916421][ T4608] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.925738][ T4608] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.934691][ T4608] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.944141][ T4608] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.040010][ T4615] netlink: 'syz.0.104': attribute type 21 has an invalid length. [ 88.064477][ T4615] netlink: 156 bytes leftover after parsing attributes in process `syz.0.104'. [ 88.072117][ T4613] xt_hashlimit: size too large, truncated to 1048576 [ 88.086529][ T4621] netlink: 8 bytes leftover after parsing attributes in process `syz.2.105'. [ 88.120857][ T4613] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 88.216735][ T4625] loop2: detected capacity change from 0 to 2048 [ 88.257632][ T4625] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 88.319758][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 88.329761][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 88.349748][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 88.359740][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 88.369733][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 88.379738][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 88.389740][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 88.399748][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 89.415296][ T4637] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 91.412577][ C0] net_ratelimit: 11 callbacks suppressed [ 91.412596][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 91.430645][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 91.442414][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 91.455345][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 91.468763][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 91.484820][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 91.499883][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 91.512127][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 91.524092][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 91.536270][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 91.840655][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 91.915244][ T4662] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 96.451697][ C1] net_ratelimit: 1392 callbacks suppressed [ 96.451716][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 96.469676][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 96.482603][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 96.494504][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 96.507347][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 96.520336][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 96.533042][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 96.545283][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 96.557621][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 96.579891][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 96.675302][ T4706] device macsec1 entered promiscuous mode [ 96.810168][ T4706] device virt_wifi0 entered promiscuous mode [ 96.876418][ T4706] syz.2.131 (4706) used greatest stack depth: 20304 bytes left [ 99.299727][ T4763] fuse: Bad value for 'fd' [ 100.950110][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 101.471107][ C1] net_ratelimit: 2144 callbacks suppressed [ 101.471126][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 101.488830][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 101.501730][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 101.513359][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 101.525796][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 101.537609][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 101.550338][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 101.562047][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 101.574380][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 101.586100][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 103.378503][ T4814] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 103.712885][ T4826] cgroup: No subsys list or none specified [ 104.548209][ T4842] netlink: 16 bytes leftover after parsing attributes in process `syz.0.164'. [ 104.557203][ T4842] netlink: 16 bytes leftover after parsing attributes in process `syz.0.164'. [ 104.578739][ T4842] netlink: 16 bytes leftover after parsing attributes in process `syz.0.164'. [ 104.587889][ T4842] netlink: 16 bytes leftover after parsing attributes in process `syz.0.164'. [ 104.651028][ T4842] netlink: 16 bytes leftover after parsing attributes in process `syz.0.164'. [ 104.659981][ T4842] netlink: 16 bytes leftover after parsing attributes in process `syz.0.164'. [ 104.709594][ T4842] netlink: 16 bytes leftover after parsing attributes in process `syz.0.164'. [ 104.718572][ T4842] netlink: 16 bytes leftover after parsing attributes in process `syz.0.164'. [ 104.745369][ T3157] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 104.952628][ T4842] netlink: 16 bytes leftover after parsing attributes in process `syz.0.164'. [ 104.961592][ T4842] netlink: 16 bytes leftover after parsing attributes in process `syz.0.164'. [ 105.136744][ T3157] usb 3-1: Using ep0 maxpacket: 32 [ 105.262732][ T4853] xt_hashlimit: size too large, truncated to 1048576 [ 105.330755][ T4853] xt_CT: You must specify a L4 protocol and not use inversions on it [ 105.543154][ T4842] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.550964][ T4842] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.750171][ T3157] usb 3-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 105.759516][ T3157] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.787779][ T3157] usb 3-1: Product: syz [ 105.804484][ T3157] usb 3-1: Manufacturer: syz [ 105.809125][ T3157] usb 3-1: SerialNumber: syz [ 105.848406][ T3157] usb 3-1: config 0 descriptor?? [ 105.925156][ T3157] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 105.935021][ T3157] dvb-usb: bulk message failed: -22 (4/0) [ 105.942255][ T3157] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 105.970537][ T3157] dvb-usb: bulk message failed: -22 (5/0) [ 105.976322][ T3157] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 106.040322][ T3157] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 106.101928][ T3157] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 106.111293][ T3157] usb 3-1: media controller created [ 106.145915][ T3157] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 106.146271][ T4814] ttusb2: more than 2 i2c messages at a time is not handled yet. TODO. [ 106.186291][ T4814] ttusb2: i2c rd len=58 too high [ 106.220337][ T3157] usb 3-1: selecting invalid altsetting 3 [ 106.226293][ T3157] ttusb2: set interface to alts=3 failed [ 106.351562][ T3157] DVB: Unable to find symbol tda10086_attach() [ 106.358196][ T3157] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 106.465557][ T3157] dvb-usb: bulk message failed: -22 (4/0) [ 106.471759][ T3157] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 106.480297][ C0] net_ratelimit: 4606 callbacks suppressed [ 106.480314][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 106.483679][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 106.488703][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 106.500018][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 106.512137][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 106.523325][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 106.546829][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 106.556170][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 106.568137][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 106.579510][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 106.605247][ T3157] dvb-usb: bulk message failed: -22 (5/0) [ 106.611027][ T3157] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 106.621435][ T3157] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 106.688893][ T3157] usb 3-1: USB disconnect, device number 3 [ 106.779684][ T3157] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 107.282045][ T4842] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.879885][ T4842] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.119722][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 109.219756][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 109.778341][ T4842] __nla_validate_parse: 116 callbacks suppressed [ 109.778373][ T4842] netlink: 16 bytes leftover after parsing attributes in process `syz.0.164'. [ 109.793813][ T4842] netlink: 16 bytes leftover after parsing attributes in process `syz.0.164'. [ 110.014780][ T4842] netlink: 16 bytes leftover after parsing attributes in process `syz.0.164'. [ 110.023751][ T4842] netlink: 16 bytes leftover after parsing attributes in process `syz.0.164'. [ 110.250234][ T4842] netlink: 16 bytes leftover after parsing attributes in process `syz.0.164'. [ 110.259253][ T4842] netlink: 16 bytes leftover after parsing attributes in process `syz.0.164'. [ 110.478378][ T4842] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.487639][ T4842] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.496655][ T4842] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.505637][ T4842] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.530517][ T4842] netlink: 16 bytes leftover after parsing attributes in process `syz.0.164'. [ 110.539542][ T4842] netlink: 16 bytes leftover after parsing attributes in process `syz.0.164'. [ 110.765641][ T4842] netlink: 16 bytes leftover after parsing attributes in process `syz.0.164'. [ 110.774773][ T4842] netlink: 16 bytes leftover after parsing attributes in process `syz.0.164'. [ 111.490791][ C1] net_ratelimit: 3401 callbacks suppressed [ 111.490809][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 111.508356][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 111.521283][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 111.532924][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 111.546037][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 111.557806][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 111.572074][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 111.584032][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 111.596975][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 111.609331][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 112.260109][ T4875] loop2: detected capacity change from 0 to 2048 [ 113.142956][ T4905] CIFS: Attempting to mount \\127.0.0.1\share [ 113.824954][ T4905] CIFS: VFS: Error connecting to socket. Aborting operation. [ 113.833162][ T4905] CIFS: VFS: cifs_mount failed w/return code = -4 [ 114.294760][ T4914] ipt_CLUSTERIP: Please specify destination IP [ 114.332566][ T4910] loop1: detected capacity change from 0 to 256 [ 114.872411][ T4914] syz.3.180 (4914) used greatest stack depth: 19984 bytes left [ 115.080244][ T4917] tipc: Failed to remove unknown binding: 66,0,0/0:1963000614/1963000615 [ 115.088980][ T4917] tipc: Failed to remove unknown binding: 66,0,0/0:1963000614/1963000615 [ 115.100361][ T4910] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 115.111652][ T4910] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 115.144246][ T4918] tipc: Failed to remove unknown binding: 66,0,0/0:2154306826/2154306828 [ 115.379145][ T4928] loop4: detected capacity change from 0 to 256 [ 115.508319][ T4910] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 116.542691][ C0] net_ratelimit: 3289 callbacks suppressed [ 116.542709][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 116.560318][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 116.573718][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 116.585314][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 116.597878][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 116.609544][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 116.610777][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 116.622078][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 116.632561][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 116.643989][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 117.099960][ T4956] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 118.715838][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 118.832302][ T4977] __nla_validate_parse: 13 callbacks suppressed [ 118.832322][ T4977] netlink: 4 bytes leftover after parsing attributes in process `syz.1.198'. [ 121.201949][ T5012] MPTCP: addr_signal error, add_addr=1, echo=0 [ 121.414286][ T5024] netlink: 'syz.2.212': attribute type 1 has an invalid length. [ 121.549819][ C0] net_ratelimit: 4242 callbacks suppressed [ 121.549837][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 121.567333][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 121.573284][ T5024] 8021q: adding VLAN 0 to HW filter on device bond1 [ 121.579682][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 121.586439][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 121.596753][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 121.607987][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 121.630422][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 121.631302][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 121.642992][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 121.653403][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 121.812975][ T5040] ipt_CLUSTERIP: Please specify destination IP [ 121.864437][ T5042] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 121.877976][ T5028] bond1: (slave geneve2): making interface the new active one [ 121.926826][ T5028] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 121.958826][ T5033] device bridge1 entered promiscuous mode [ 122.039610][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 122.763996][ T5103] netlink: 4 bytes leftover after parsing attributes in process `syz.3.223'. [ 122.857312][ T5103] device veth1 left promiscuous mode [ 123.054627][ T5103] bridge0: port 4(veth1) entered disabled state [ 123.099910][ T5103] device veth0 left promiscuous mode [ 123.465300][ T5118] loop4: detected capacity change from 0 to 16 [ 123.524066][ T5103] bridge0: port 3(veth0) entered disabled state [ 123.546955][ T5103] device bridge_slave_1 left promiscuous mode [ 123.556610][ T5103] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.282078][ T5103] device bridge_slave_0 left promiscuous mode [ 125.299493][ T5103] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.088675][ T5125] netlink: 4 bytes leftover after parsing attributes in process `syz.2.229'. [ 126.100496][ T5125] netlink: 4 bytes leftover after parsing attributes in process `syz.2.229'. [ 126.235430][ T5134] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 126.271387][ T5134] device bridge_slave_0 left promiscuous mode [ 126.288557][ T5134] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.348513][ T5134] device bridge_slave_1 left promiscuous mode [ 126.355370][ T5134] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.376023][ T5134] bond0: (slave bond_slave_0): Releasing backup interface [ 126.399297][ T5134] bond0: (slave bond_slave_1): Releasing backup interface [ 126.423178][ T5134] team0: Port device team_slave_0 removed [ 126.431441][ T5134] team0: Port device team_slave_1 removed [ 126.438449][ T5134] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 126.447666][ T5134] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.595557][ T5154] netlink: 'syz.2.239': attribute type 1 has an invalid length. [ 126.701309][ T5159] 8021q: adding VLAN 0 to HW filter on device bond3 [ 126.710802][ T5159] bond2: (slave bond3): making interface the new active one [ 126.718734][ T5159] bond2: (slave bond3): Enslaving as an active interface with an up link [ 126.735336][ T5154] netlink: 28 bytes leftover after parsing attributes in process `syz.2.239'. [ 126.744942][ T5154] device bond2 entered promiscuous mode [ 126.752306][ T5154] device bond3 entered promiscuous mode [ 126.762792][ T5154] 8021q: adding VLAN 0 to HW filter on device bond2 [ 127.135608][ T5172] netlink: 4 bytes leftover after parsing attributes in process `syz.4.244'. [ 127.157750][ T5175] netlink: 4 bytes leftover after parsing attributes in process `syz.1.245'. [ 127.168417][ T5175] device bridge_slave_1 left promiscuous mode [ 127.183960][ T5172] netlink: 4 bytes leftover after parsing attributes in process `syz.4.244'. [ 127.833369][ T5175] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.015638][ T5175] device bridge_slave_0 left promiscuous mode [ 128.050365][ T5175] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.077411][ T5189] syz.0.252 uses obsolete (PF_INET,SOCK_PACKET) [ 129.131339][ T5194] netlink: 8 bytes leftover after parsing attributes in process `syz.4.251'. [ 129.307542][ T5210] loop4: detected capacity change from 0 to 256 [ 131.782144][ T4176] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 131.904524][ T4176] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 131.943503][ T5238] netlink: 4 bytes leftover after parsing attributes in process `syz.0.266'. [ 131.971042][ T26] kauditd_printk_skb: 50 callbacks suppressed [ 131.971057][ T26] audit: type=1326 audit(1785810375.017:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5242 comm="syz.4.267" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7209808019 code=0x7ffc0000 [ 132.032851][ T5238] device bridge_slave_1 left promiscuous mode [ 132.038134][ T5246] binder_alloc: 5239: binder_alloc_buf, no vma [ 132.059481][ T5238] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.108774][ T26] audit: type=1326 audit(1785810375.057:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5242 comm="syz.4.267" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7209808019 code=0x7ffc0000 [ 132.141764][ T5238] device bridge_slave_0 left promiscuous mode [ 132.161068][ T5238] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.211590][ T26] audit: type=1326 audit(1785810375.057:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5242 comm="syz.4.267" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7209808019 code=0x7ffc0000 [ 133.286698][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.294096][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.791079][ T26] audit: type=1326 audit(1785810375.057:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5242 comm="syz.4.267" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7209808019 code=0x7ffc0000 [ 133.823246][ T4228] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 133.833174][ T26] audit: type=1326 audit(1785810375.057:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5242 comm="syz.4.267" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f7209808019 code=0x7ffc0000 [ 133.859531][ T26] audit: type=1326 audit(1785810375.057:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5242 comm="syz.4.267" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7209808019 code=0x7ffc0000 [ 133.954428][ T26] audit: type=1326 audit(1785810375.057:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5242 comm="syz.4.267" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7209808019 code=0x7ffc0000 [ 133.963336][ T5261] device syzkaller0 entered promiscuous mode [ 133.985728][ T26] audit: type=1326 audit(1785810375.057:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5242 comm="syz.4.267" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f7209808019 code=0x7ffc0000 [ 134.017098][ T26] audit: type=1326 audit(1785810375.057:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5242 comm="syz.4.267" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f7209808019 code=0x7ffc0000 [ 134.032416][ T5265] netlink: 'syz.0.273': attribute type 3 has an invalid length. [ 134.068210][ T5265] netlink: 'syz.0.273': attribute type 3 has an invalid length. [ 134.139935][ T4228] usb 5-1: Using ep0 maxpacket: 8 [ 134.330278][ T4228] usb 5-1: unable to get BOS descriptor or descriptor too short [ 134.831059][ T4228] usb 5-1: config 4 has an invalid interface number: 12 but max is 0 [ 134.941368][ T4228] usb 5-1: config 4 has no interface number 0 [ 135.911887][ T4228] usb 5-1: config 4 interface 12 altsetting 92 bulk endpoint 0xC has invalid maxpacket 64 [ 135.922539][ T4228] usb 5-1: config 4 interface 12 has no altsetting 0 [ 135.990336][ T4228] usb 5-1: string descriptor 0 read error: -71 [ 135.996621][ T4228] usb 5-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=38.2d [ 136.044106][ T5279] mmap: syz.3.277 (5279) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 136.095461][ T4228] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.155027][ T4228] usb 5-1: can't set config #4, error -71 [ 136.170531][ T4228] usb 5-1: USB disconnect, device number 2 [ 137.434027][ T5288] netlink: 68 bytes leftover after parsing attributes in process `syz.2.281'. [ 138.539289][ T5331] device wlan0 entered promiscuous mode [ 138.743668][ T5312] loop4: detected capacity change from 0 to 40427 [ 139.467637][ T5312] F2FS-fs (loop4): Small segment_count (9 < 1 * 24) [ 139.496558][ T5312] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 139.538198][ T5350] netlink: 'syz.2.298': attribute type 40 has an invalid length. [ 139.616610][ T5350] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.640004][ T5312] F2FS-fs (loop4): Found nat_bits in checkpoint [ 139.729507][ T5363] fuse: Bad value for 'fd' [ 139.894999][ T5312] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 139.944938][ T5312] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 140.276686][ T5388] Cannot find del_set index 4 as target [ 140.910077][ T5393] netlink: 4 bytes leftover after parsing attributes in process `syz.1.303'. [ 141.025816][ T5312] attempt to access beyond end of device [ 141.025816][ T5312] loop4: rw=2049, want=45104, limit=40427 [ 141.165157][ T4194] attempt to access beyond end of device [ 141.165157][ T4194] loop4: rw=2049, want=45120, limit=40427 [ 142.149937][ T4227] Bluetooth: hci3: command 0x0406 tx timeout [ 142.347618][ T5423] netlink: 4 bytes leftover after parsing attributes in process `syz.0.309'. [ 142.382880][ T5423] netlink: 32 bytes leftover after parsing attributes in process `syz.0.309'. [ 142.966044][ T5464] netlink: 'syz.1.320': attribute type 10 has an invalid length. [ 144.024633][ T5491] device syzkaller0 entered promiscuous mode [ 144.240950][ T5491] tipc: Started in network mode [ 144.248850][ T5491] tipc: Node identity 061012d83162, cluster identity 4711 [ 144.274010][ T5491] tipc: Enabled bearer , priority 0 [ 144.299678][ T5489] tipc: Resetting bearer [ 144.329097][ T5489] tipc: Disabling bearer [ 145.166034][ T5509] xt_connbytes: Forcing CT accounting to be enabled [ 145.199571][ T5514] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 145.295048][ T5509] xt_CT: No such helper "netbios-ns" [ 148.840369][ T5584] smc: net device dummy0 applied user defined pnetid SYZ0 [ 151.477706][ T5619] netlink: 8 bytes leftover after parsing attributes in process `syz.1.358'. [ 151.536084][ T5624] device syzkaller0 entered promiscuous mode [ 151.583443][ T5626] netlink: 8 bytes leftover after parsing attributes in process `syz.1.358'. [ 153.768958][ T5684] device bond_slave_0 entered promiscuous mode [ 153.775282][ T5684] device bond_slave_1 entered promiscuous mode [ 153.794234][ T5684] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 153.879116][ T5684] bond4: (slave macvlan2): making interface the new active one [ 153.965926][ T5693] loop4: detected capacity change from 0 to 1024 [ 153.966511][ T5684] bond4: (slave macvlan2): Enslaving as an active interface with an up link [ 154.461070][ T5693] EXT4-fs (loop4): Unrecognized mount option "fowner=00000000000000000000" or missing value [ 155.199880][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 156.885522][ T4227] Bluetooth: hci0: command 0x0c3a tx timeout [ 157.856531][ T5769] netlink: 12 bytes leftover after parsing attributes in process `syz.1.394'. [ 158.160886][ T5769] bridge0: port 1(erspan0) entered blocking state [ 158.399918][ T5769] bridge0: port 1(erspan0) entered disabled state [ 158.419948][ T5769] device erspan0 entered promiscuous mode [ 158.431204][ T5769] bridge0: port 1(erspan0) entered blocking state [ 158.437707][ T5769] bridge0: port 1(erspan0) entered forwarding state [ 159.058849][ T4228] Bluetooth: hci0: command 0x0c1a tx timeout [ 159.116646][ T5769] syz.1.394 (5769) used greatest stack depth: 19664 bytes left [ 159.375231][ T5794] loop4: detected capacity change from 0 to 1024 [ 159.457266][ T5801] binder_alloc: 5791: binder_alloc_buf size 12224 failed, no address space [ 159.488131][ T5801] binder_alloc: allocated: 4096 (num: 1 largest: 4096), free: 8192 (num: 1 largest: 8192) [ 159.639265][ T5794] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 159.705866][ T5794] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 159.728684][ T5794] EXT4-fs (loop4): orphan cleanup on readonly fs [ 159.766507][ T5794] EXT4-fs error (device loop4): ext4_free_blocks:6231: comm syz.4.401: Freeing blocks not in datazone - block = 0, count = 4096 [ 159.846543][ T5794] EXT4-fs (loop4): Remounting filesystem read-only [ 159.881993][ T5794] EXT4-fs (loop4): 1 orphan inode deleted [ 159.902393][ T5794] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,barrier=0x0000000000000000,barrier=0x0000000000000009,init_itable=0x0000000000007ab4,jqfmt=vfsv0,. Quota mode: writeback. [ 160.026564][ T5794] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #2: block 16: comm syz.4.401: lblock 0 mapped to illegal pblock 16 (length 1) [ 160.258170][ T5807] infiniband syz0: set active [ 160.263541][ T5807] infiniband syz0: added ipvlan1 [ 160.350565][ T5807] RDS/IB: syz0: added [ 160.358963][ T5807] smc: adding ib device syz0 with port count 1 [ 160.366953][ T5807] smc: ib device syz0 port 1 has pnetid [ 160.706110][ T5793] syz.2.402 (5793): drop_caches: 2 [ 160.876672][ T5831] loop2: detected capacity change from 0 to 512 [ 161.000916][ T5831] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 161.033830][ T5831] EXT4-fs error (device loop2): ext4_iget_extra_inode:4573: inode #15: comm syz.2.412: corrupted in-inode xattr [ 161.106724][ T5831] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.412: couldn't read orphan inode 15 (err -117) [ 161.120295][ T4227] Bluetooth: hci0: command 0x0c24 tx timeout [ 161.197986][ T5831] EXT4-fs (loop2): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000009,jqfmt=vfsv0,min_batch_time=0x00000000000003ff,noload,grpjquota=.,noblock_validity,resgid=0x0000000000000000,nobarrier,errors=continue,abort,,errors=continue. Quota mode: writeback. [ 161.926998][ T5851] loop4: detected capacity change from 0 to 2048 [ 162.214278][ T5851] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 162.269654][ T5851] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 162.408998][ T5859] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 162.430235][ T5851] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 162.451497][ T5851] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 162.467169][ T5858] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 162.490207][ T5851] UDF-fs: Scanning with blocksize 512 failed [ 162.499040][ T5851] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 162.526916][ T5851] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 163.216706][ T26] audit: type=1800 audit(1785810406.257:71): pid=5851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.419" name="file1" dev="loop4" ino=838 res=0 errno=0 [ 163.324941][ T4227] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 163.780892][ T4227] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 163.991067][ T4227] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 164.169678][ T4227] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 164.179403][ T4227] usb 3-1: SerialNumber: syz [ 165.392680][ T5910] overlayfs: failed to clone upperpath [ 166.008538][ T4227] cdc_ether 3-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 166.247916][ T1338] usb 3-1: USB disconnect, device number 4 [ 166.264388][ T1338] cdc_ether 3-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device [ 166.424959][ T5955] bond0: (slave bond_slave_1): Releasing backup interface [ 166.947694][ T5972] netlink: 40 bytes leftover after parsing attributes in process `syz.0.448'. [ 169.099888][ T26] audit: type=1326 audit(1785810412.117:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5998 comm="syz.1.457" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f1c5ed019 code=0x7ffc0000 [ 169.165087][ T26] audit: type=1326 audit(1785810412.117:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5998 comm="syz.1.457" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f1c5ed019 code=0x7ffc0000 [ 169.208654][ T26] audit: type=1326 audit(1785810412.167:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5998 comm="syz.1.457" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f1c5ed019 code=0x7ffc0000 [ 170.091163][ T26] audit: type=1326 audit(1785810412.167:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5998 comm="syz.1.457" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f1c5ed019 code=0x7ffc0000 [ 170.118113][ T26] audit: type=1326 audit(1785810412.177:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5998 comm="syz.1.457" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6f1c5ed019 code=0x7ffc0000 [ 170.258018][ T26] audit: type=1326 audit(1785810412.177:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5998 comm="syz.1.457" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f1c5ed019 code=0x7ffc0000 [ 170.375129][ T26] audit: type=1326 audit(1785810412.177:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5998 comm="syz.1.457" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f1c5ed019 code=0x7ffc0000 [ 170.395211][ T6028] loop2: detected capacity change from 0 to 128 [ 170.497271][ T6028] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 170.517116][ T26] audit: type=1326 audit(1785810412.177:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5998 comm="syz.1.457" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f1c5ed019 code=0x7ffc0000 [ 170.548380][ T26] audit: type=1326 audit(1785810412.177:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5998 comm="syz.1.457" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f1c5ed019 code=0x7ffc0000 [ 170.553065][ T6028] ext4 filesystem being mounted at /78/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 170.718316][ T6043] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.464'. [ 171.185029][ T26] audit: type=1326 audit(1785810412.177:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5998 comm="syz.1.457" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6f1c5ed019 code=0x7ffc0000 [ 172.451890][ T6067] netlink: 4 bytes leftover after parsing attributes in process `syz.2.473'. [ 172.554892][ T6067] netlink: 12 bytes leftover after parsing attributes in process `syz.2.473'. [ 172.970993][ T4228] libceph: connect (1)[c::]:6789 error -22 [ 172.978073][ T4228] libceph: mon0 (1)[c::]:6789 connect error [ 173.035553][ T6085] ceph: No mds server is up or the cluster is laggy [ 173.663278][ T4176] libceph: connect (1)[c::]:6789 error -22 [ 173.669273][ T4176] libceph: mon0 (1)[c::]:6789 connect error [ 174.669642][ T6113] netlink: 'syz.2.485': attribute type 10 has an invalid length. [ 174.759216][ T6113] device wlan1 entered promiscuous mode [ 174.786227][ T6113] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 174.796952][ T6129] netlink: 48 bytes leftover after parsing attributes in process `syz.0.489'. [ 174.811360][ T6129] netlink: 48 bytes leftover after parsing attributes in process `syz.0.489'. [ 177.666115][ T6136] netlink: 4 bytes leftover after parsing attributes in process `syz.0.491'. [ 178.318946][ T6158] xt_ipcomp: unknown flags 1D [ 178.831130][ T6163] loop4: detected capacity change from 0 to 1024 [ 179.154975][ T6169] netlink: 16 bytes leftover after parsing attributes in process `syz.0.502'. [ 179.374795][ T6169] netlink: 17 bytes leftover after parsing attributes in process `syz.0.502'. [ 179.533338][ T6169] tipc: Invalid UDP bearer configuration [ 179.534672][ T6169] tipc: Enabling of bearer rejected, failed to enable media [ 181.378887][ T6199] loop4: detected capacity change from 0 to 1024 [ 181.429875][ T6203] netlink: 'syz.3.513': attribute type 1 has an invalid length. [ 181.530210][ T6203] 8021q: adding VLAN 0 to HW filter on device bond1 [ 181.537769][ T6199] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 181.601838][ T6203] device bond1 entered promiscuous mode [ 181.668031][ T6211] bond1: (slave veth0_to_bond): making interface the new active one [ 181.682556][ T6211] device veth0_to_bond entered promiscuous mode [ 181.690227][ T6211] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 181.707751][ T6203] device macvlan2 entered promiscuous mode [ 181.724502][ T6203] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 181.738428][ T6203] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 181.794625][ T6199] IPv6: sit1: Disabled Multicast RS [ 181.803803][ T6217] netlink: 28 bytes leftover after parsing attributes in process `syz.1.515'. [ 182.507606][ T6230] netlink: 4 bytes leftover after parsing attributes in process `syz.1.519'. [ 182.673181][ T6239] device syzkaller0 entered promiscuous mode [ 184.605546][ T6258] device ip6_vti0 entered promiscuous mode [ 184.620846][ T6258] netlink: 8 bytes leftover after parsing attributes in process `syz.4.528'. [ 184.781614][ T6265] nftables ruleset with unbound chain [ 186.069815][ T6281] netlink: 4 bytes leftover after parsing attributes in process `syz.0.535'. [ 186.099807][ T4226] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 186.143673][ T6281] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 186.339977][ T4226] usb 3-1: Using ep0 maxpacket: 8 [ 186.640792][ T4226] usb 3-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 186.715300][ T4226] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.884542][ T4226] usb 3-1: Product: syz [ 186.901282][ T23] Bluetooth: hci2: command 0x0406 tx timeout [ 186.907457][ T23] Bluetooth: hci1: command 0x0406 tx timeout [ 186.913724][ T23] Bluetooth: hci0: command 0x0406 tx timeout [ 186.919815][ T23] Bluetooth: hci4: command 0x0406 tx timeout [ 186.950775][ T4226] usb 3-1: Manufacturer: syz [ 186.955505][ T4226] usb 3-1: SerialNumber: syz [ 187.004806][ T4226] usb 3-1: config 0 descriptor?? [ 187.257303][ T4226] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 187.621931][ T4226] pctv452e: pctv452e_power_ctrl: 1 [ 187.621931][ T4226] [ 187.695509][ T6297] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 187.983192][ T4226] usb 3-1: selecting invalid altsetting 3 [ 188.022575][ T6297] netlink: 76 bytes leftover after parsing attributes in process `syz.0.538'. [ 188.043989][ T4226] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 188.043989][ T4226] [ 188.194826][ T6302] loop4: detected capacity change from 0 to 1024 [ 188.240211][ T4226] dvb-usb: bulk message failed: -22 (5/0) [ 188.250895][ T4226] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 188.395530][ T6307] xt_policy: output policy not valid in PREROUTING and INPUT [ 188.433622][ T6308] netlink: 'syz.1.542': attribute type 11 has an invalid length. [ 188.762664][ T6302] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,,errors=continue. Quota mode: none. [ 188.763872][ T4226] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 188.785314][ T4226] usb 3-1: media controller created [ 188.794133][ T6302] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.825235][ T4226] dvb-usb: bulk message failed: -22 (8/0) [ 188.971198][ T4226] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 189.039549][ T4226] dvb-usb: MAC address reading failed. [ 189.160623][ T6319] EXT4-fs error (device loop4): ext4_map_blocks:741: inode #15: comm syz.4.541: lblock 0 mapped to illegal pblock 0 (length 6) [ 189.183506][ T6319] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 189.196051][ T6319] EXT4-fs (loop4): This should not happen!! Data will be lost [ 189.196051][ T6319] [ 189.253041][ T6321] capability: warning: `syz.0.546' uses deprecated v2 capabilities in a way that may be insecure [ 189.320692][ T4226] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 189.508569][ T5070] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm kworker/u4:10: bg 0: block 112: padding at end of block bitmap is not set [ 189.596397][ T5070] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 48 with error 28 [ 189.642769][ T5070] EXT4-fs (loop4): This should not happen!! Data will be lost [ 189.642769][ T5070] [ 189.663907][ T5070] EXT4-fs (loop4): Total free blocks count 0 [ 189.680384][ T5070] EXT4-fs (loop4): Free/Dirty block details [ 189.698272][ T5070] EXT4-fs (loop4): free_blocks=0 [ 189.719598][ T5070] EXT4-fs (loop4): dirty_blocks=48 [ 189.748177][ T4226] DVB: Unable to find symbol stb0899_attach() [ 189.755018][ T4226] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 189.756461][ T5070] EXT4-fs (loop4): Block reservation details [ 190.128352][ T5070] EXT4-fs (loop4): i_reserved_data_blocks=3 [ 190.619922][ T4226] rc_core: IR keymap rc-tt-1500 not found [ 190.625766][ T4226] Registered IR keymap rc-empty [ 190.658848][ T4226] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 190.691391][ T4226] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input5 [ 190.755659][ T4226] dvb-usb: schedule remote query interval to 100 msecs. [ 190.775532][ T4226] pctv452e: pctv452e_power_ctrl: 0 [ 190.775532][ T4226] [ 190.799822][ T4226] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 190.875061][ T4226] usb 3-1: USB disconnect, device number 5 [ 191.024998][ T4226] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 191.315328][ T6366] net_ratelimit: 961 callbacks suppressed [ 191.315344][ T6366] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 191.405201][ T6372] netlink: 'syz.0.562': attribute type 2 has an invalid length. [ 192.321083][ T6379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.330790][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.501003][ T6389] binder: BINDER_SET_CONTEXT_MGR already set [ 192.556274][ T6389] binder: 6386:6389 ioctl 4018620d 200000004a80 returned -16 [ 192.639266][ T6393] netlink: 'syz.3.567': attribute type 1 has an invalid length. [ 192.676515][ T6393] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 192.684533][ T6393] IPv6: NLM_F_CREATE should be set when creating new route [ 192.779466][ T6397] netlink: 14 bytes leftover after parsing attributes in process `syz.2.568'. [ 192.790268][ T6397] device bond_slave_0 left promiscuous mode [ 192.796282][ T6397] device bond_slave_1 left promiscuous mode [ 192.809408][ T6397] device wlan1 left promiscuous mode [ 192.867086][ T6397] bond4: (slave macvlan2): Releasing active interface [ 192.915500][ T6397] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 192.946148][ T6397] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 192.996346][ T6397] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 193.314682][ T6397] bond0 (unregistering): Released all slaves [ 194.233758][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.240143][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.462863][ T6411] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 194.501014][ T6411] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 194.710960][ T6411] rdma_rxe: ignoring netdev event = 10 for ipvlan1 [ 194.730775][ T6411] infiniband syz0: set down [ 194.821761][ T6411] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.830786][ T6411] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.840516][ T6411] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.849461][ T6411] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.203657][ T6429] retu-mfd 0-0002: could not read Tahvo revision: -5 [ 196.303977][ T6429] retu-mfd: probe of 0-0002 failed with error -5 [ 196.311106][ T6429] i2c i2c-0: new_device: Instantiated device tahvo at 0x02 [ 196.426005][ T6429] i2c i2c-0: Failed to register i2c client tahvo at 0x02 (-16) [ 196.691418][ T6451] loop4: detected capacity change from 0 to 512 [ 196.746281][ T6451] EXT4-fs (loop4): Unrecognized mount option "appraise_type=imasig" or missing value [ 198.500971][ T6491] device syzkaller0 entered promiscuous mode [ 198.979871][ T21] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 199.269894][ T21] usb 5-1: Using ep0 maxpacket: 16 [ 199.410493][ T21] usb 5-1: config 0 has an invalid interface number: 107 but max is 0 [ 199.449197][ T21] usb 5-1: config 0 has no interface number 0 [ 199.475809][ T21] usb 5-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 55, changing to 9 [ 199.500513][ T21] usb 5-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid maxpacket 8496, setting to 1024 [ 199.524080][ T6509] netlink: 79 bytes leftover after parsing attributes in process `syz.1.604'. [ 199.726749][ T6509] netlink: 8 bytes leftover after parsing attributes in process `syz.1.604'. [ 199.736299][ T6509] netlink: 4 bytes leftover after parsing attributes in process `syz.1.604'. [ 200.674704][ T6519] autofs4:pid:6519:autofs_fill_super: called with bogus options [ 200.946394][ T6509] netlink: 'syz.1.604': attribute type 11 has an invalid length. [ 201.001213][ T6516] IPVS: Error connecting to the multicast addr [ 201.010702][ T21] usb 5-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 201.056410][ T21] usb 5-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 201.114429][ T21] usb 5-1: Product: syz [ 201.118793][ T21] usb 5-1: Manufacturer: syz [ 201.145692][ T21] usb 5-1: SerialNumber: syz [ 201.211256][ T21] usb 5-1: config 0 descriptor?? [ 201.251598][ T6537] netlink: 20 bytes leftover after parsing attributes in process `syz.2.608'. [ 201.261306][ T21] keyspan 5-1:0.107: Keyspan 4 port adapter converter detected [ 201.261538][ T21] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 81 [ 201.301042][ T21] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 1 [ 201.335642][ T21] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 201.399168][ T21] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 2 [ 201.457156][ T6537] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.469093][ T6537] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.477948][ T6537] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.485127][ T21] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 201.486835][ T6537] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.612814][ T21] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 4 [ 201.667916][ T6537] device vxlan0 entered promiscuous mode [ 201.765343][ T21] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 201.870983][ T21] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 6 [ 201.949578][ T21] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 202.125136][ T6543] netlink: 4 bytes leftover after parsing attributes in process `syz.0.612'. [ 202.276183][ T6553] cgroup: Invalid name [ 202.292899][ T4384] usb 5-1: USB disconnect, device number 3 [ 202.320886][ T4384] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 202.363777][ T4384] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 202.413982][ T6558] device syzkaller0 entered promiscuous mode [ 202.428198][ T4384] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 202.506195][ T4384] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 202.527101][ T4384] keyspan 5-1:0.107: device disconnected [ 202.559168][ T6566] device syzkaller1 entered promiscuous mode [ 205.155529][ T6611] netlink: 56 bytes leftover after parsing attributes in process `syz.0.629'. [ 205.189467][ T6614] device syzkaller0 entered promiscuous mode [ 205.296721][ T6611] 9pnet: Insufficient options for proto=fd [ 206.482325][ T6621] tipc: Failed to remove unknown binding: 66,0,0/0:140916073/140916075 [ 206.490877][ T6621] tipc: Failed to remove unknown binding: 66,0,0/0:140916073/140916074 [ 206.561021][ T6621] tipc: Failed to remove unknown binding: 66,0,0/0:140916073/140916075 [ 206.603162][ T6621] tipc: Failed to remove unknown binding: 66,0,0/0:140916073/140916074 [ 206.906126][ T6631] tipc: Started in network mode [ 207.229199][ T6631] tipc: Node identity 2007ff, cluster identity 4711 [ 207.262926][ T6638] netlink: 276 bytes leftover after parsing attributes in process `syz.2.638'. [ 207.327257][ T6631] tipc: Node number set to 2099199 [ 207.402640][ T6638] tipc: Enabling of bearer rejected, failed to enable media [ 207.684214][ T6649] ODEBUG: Out of memory. ODEBUG disabled [ 210.314479][ T6684] netlink: 'syz.1.654': attribute type 1 has an invalid length. [ 210.342746][ T6684] netlink: 'syz.1.654': attribute type 2 has an invalid length. [ 211.144361][ T6687] netlink: 8 bytes leftover after parsing attributes in process `syz.1.654'. [ 211.224521][ T6691] loop4: detected capacity change from 0 to 512 [ 211.292085][ T6683] loop2: detected capacity change from 0 to 1764 [ 211.350488][ T6699] tipc: Failed to remove unknown binding: 66,1,1/0:2085800343/2085800345 [ 211.387193][ T6691] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 211.400809][ T6691] ext4 filesystem being mounted at /107/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 211.554424][ T6691] xt_hashlimit: max too large, truncated to 1048576 [ 213.776658][ T26] kauditd_printk_skb: 50 callbacks suppressed [ 213.776672][ T26] audit: type=1326 audit(1785810456.817:132): auid=4294967295 uid=255 gid=0 ses=4294967295 subj=unconfined pid=6753 comm="syz.4.674" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7209808019 code=0x0 [ 214.512785][ T6769] netlink: 'syz.1.678': attribute type 1 has an invalid length. [ 214.608604][ T6769] 8021q: adding VLAN 0 to HW filter on device bond2 [ 214.650485][ T6769] bond2: (slave gretap1): making interface the new active one [ 214.664461][ T6769] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 214.690905][ T5082] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 216.094720][ T6798] netlink: 48 bytes leftover after parsing attributes in process `syz.0.685'. [ 216.314742][ T6802] cgroup: Name too long [ 216.540366][ T6792] syz.4.684 (6792) used greatest stack depth: 18560 bytes left [ 217.279573][ T6808] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 219.369035][ T6827] loop4: detected capacity change from 0 to 512 [ 219.566089][ T6827] EXT4-fs (loop4): Ignoring removed oldalloc option [ 219.603421][ T6827] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 220.798950][ T6827] EXT4-fs (loop4): mounted filesystem without journal. Opts: oldalloc,dioread_nolock,noinit_itable,,errors=continue. Quota mode: writeback. [ 220.832076][ T6827] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 221.550351][ T26] audit: type=1800 audit(1785810464.557:133): pid=6827 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.693" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 221.883517][ T6881] netlink: 36 bytes leftover after parsing attributes in process `syz.3.709'. [ 222.768024][ T6892] netlink: 168 bytes leftover after parsing attributes in process `syz.4.712'. [ 222.830445][ T6894] netlink: 32 bytes leftover after parsing attributes in process `syz.0.723'. [ 224.808043][ T6908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.590487][ T6908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.729218][ T6908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.847717][ T6908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.990448][ T6908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.200631][ T6917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.274791][ T6926] netlink: 12 bytes leftover after parsing attributes in process `syz.1.722'. [ 226.275315][ T6908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.682404][ T4227] Bluetooth: hci4: command 0x0405 tx timeout [ 230.316328][ T6969] loop4: detected capacity change from 0 to 2048 [ 231.079612][ T6979] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 231.128990][ T6969] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsddf,user_xattr,debug_want_extra_isize=0x0000000000000006,,errors=continue. Quota mode: none. [ 231.154618][ T6979] device hsr0 entered promiscuous mode [ 231.161820][ T6979] netlink: 12 bytes leftover after parsing attributes in process `syz.1.739'. [ 232.217305][ T6995] netlink: 'syz.1.744': attribute type 1 has an invalid length. [ 232.455025][ T6995] device bond3 entered promiscuous mode [ 232.554502][ T6995] 8021q: adding VLAN 0 to HW filter on device bond3 [ 233.152993][ T6999] bond3: (slave erspan1): making interface the new active one [ 233.214621][ T6999] device erspan1 entered promiscuous mode [ 233.222708][ T6999] bond3: (slave erspan1): Enslaving as an active interface with an up link [ 233.235896][ T7001] netlink: 12 bytes leftover after parsing attributes in process `syz.0.745'. [ 233.266636][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 234.022288][ T7029] 9pnet_virtio: no channels available for device syz [ 234.203875][ T7033] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 234.245503][ T7033] bond1: (slave macvlan2): Enslaving as an active interface with a down link [ 234.467477][ T7056] netlink: 'syz.4.762': attribute type 1 has an invalid length. [ 234.547206][ T7056] device bond2 entered promiscuous mode [ 234.555236][ T7059] overlayfs: failed to clone lowerpath [ 234.570397][ T7056] 8021q: adding VLAN 0 to HW filter on device bond2 [ 234.582868][ T7062] netlink: 'syz.3.765': attribute type 40 has an invalid length. [ 234.622241][ T7060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.677949][ T7060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.691571][ T7060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.703138][ T7060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.714022][ T7060] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 234.733422][ T7071] trusted_key: encrypted_key: key user:syz not found [ 234.735137][ T7060] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 234.752976][ T7060] bond2: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 234.787536][ T7056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.798314][ T7056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.808932][ T7056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.820278][ T7056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.830803][ T7056] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 234.843305][ T7056] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 234.867603][ T7074] device erspan0 left promiscuous mode [ 234.873523][ T7074] bridge0: port 1(erspan0) entered disabled state [ 234.897602][ T7074] bond0: (slave bond_slave_0): Releasing backup interface [ 234.905377][ T7074] device bond_slave_0 left promiscuous mode [ 234.923900][ T7074] bond0: (slave bond_slave_1): Releasing backup interface [ 234.933407][ T7074] device bond_slave_1 left promiscuous mode [ 234.977815][ T7074] team0: Port device team_slave_0 removed [ 234.996393][ T7074] team0: Port device team_slave_1 removed [ 235.002936][ T7074] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 235.010949][ T7074] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 235.022540][ T7074] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 235.030385][ T7074] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 235.048483][ T7074] bond0: (slave wlan1): Releasing backup interface [ 235.088675][ T7074] bond1: (slave macvlan2): Releasing backup interface [ 235.124130][ T7074] bond2: (slave gretap1): Releasing active interface [ 235.151397][ T7043] orangefs_mount: mount request failed with -4 [ 235.246627][ T7074] bond3: (slave erspan1): Releasing active interface [ 235.253531][ T7074] device erspan1 left promiscuous mode [ 237.884313][ T7123] bond1: (slave veth0_to_bond): Releasing active interface [ 237.930263][ T7123] device veth0_to_bond left promiscuous mode [ 238.237330][ T7123] bond0: (slave bond_slave_0): Releasing backup interface [ 238.579297][ T7123] bond0: (slave bond_slave_1): Releasing backup interface [ 239.016099][ T7123] team0: Port device team_slave_0 removed [ 239.036201][ T7123] team0: Port device team_slave_1 removed [ 239.084649][ T7123] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 239.108326][ T7123] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 239.169879][ T7146] futex_wake_op: syz.2.783 tries to shift op by 144; fix this program [ 239.455373][ T7162] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 239.463821][ T7162] batman_adv: batadv0: Interface deactivated: dummy0 [ 239.472012][ T7162] batman_adv: batadv0: Removing interface: dummy0 [ 239.479502][ T7162] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 239.494286][ T7162] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 239.505915][ T7162] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 239.519019][ T7162] device bridge_slave_0 left promiscuous mode [ 239.536511][ T7162] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.559600][ T7162] device bridge_slave_1 left promiscuous mode [ 239.577760][ T7162] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.707002][ T7162] team0: Port device team_slave_0 removed [ 239.756416][ T7162] team0: Port device team_slave_1 removed [ 239.765944][ T7162] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 239.776449][ T7162] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 239.788331][ T7162] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 239.798701][ T7162] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 239.817474][ T7162] bond1: (slave geneve2): Releasing active interface [ 240.470227][ T7162] bond2: (slave bond3): Releasing backup interface [ 240.565865][ T7162] device bond3 left promiscuous mode [ 240.598225][ T7182] overlayfs: failed to clone lowerpath [ 240.867105][ T7205] netlink: 4 bytes leftover after parsing attributes in process `syz.1.802'. [ 240.879320][ T7205] netlink: 32 bytes leftover after parsing attributes in process `syz.1.802'. [ 241.045253][ T7213] device syzkaller0 entered promiscuous mode [ 242.072868][ T7236] netlink: 20 bytes leftover after parsing attributes in process `syz.2.811'. [ 242.530055][ T7237] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.550258][ T7237] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.604524][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.613763][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.622277][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.630689][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.639840][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.648393][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.656833][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.665265][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.026538][ T7248] netlink: 4 bytes leftover after parsing attributes in process `syz.4.817'. [ 243.038595][ T7248] netlink: 32 bytes leftover after parsing attributes in process `syz.4.817'. [ 243.636367][ T7259] device syzkaller0 entered promiscuous mode [ 243.757117][ T7262] netlink: 12 bytes leftover after parsing attributes in process `syz.0.821'. [ 243.856177][ T7270] device ipip0 entered promiscuous mode [ 246.080079][ T4227] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 246.110489][ T7301] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 246.119500][ T7301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.134947][ T7301] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.021599][ T4227] usb 3-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 247.074452][ T4227] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.490370][ T4227] usb 3-1: config 0 descriptor?? [ 247.517910][ T7312] ceph: No mds server is up or the cluster is laggy [ 247.536298][ T4227] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 247.637745][ T7328] netlink: 8 bytes leftover after parsing attributes in process `syz.0.842'. [ 247.669447][ T7328] netlink: 8 bytes leftover after parsing attributes in process `syz.0.842'. [ 247.832333][ T26] audit: type=1326 audit(1785810490.877:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7343 comm="syz.1.849" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f1c5ed019 code=0x7ffc0000 [ 247.865897][ T26] audit: type=1326 audit(1785810490.897:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7343 comm="syz.1.849" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f1c5ed019 code=0x7ffc0000 [ 247.890668][ T26] audit: type=1326 audit(1785810490.897:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7343 comm="syz.1.849" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=281 compat=0 ip=0x7f6f1c5ed019 code=0x7ffc0000 [ 247.917401][ T26] audit: type=1326 audit(1785810490.897:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7343 comm="syz.1.849" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f1c5ed019 code=0x7ffc0000 [ 247.963054][ T26] audit: type=1326 audit(1785810490.897:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7343 comm="syz.1.849" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f1c5ed019 code=0x7ffc0000 [ 247.993236][ T26] audit: type=1326 audit(1785810490.897:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7343 comm="syz.1.849" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f1c5ed019 code=0x7ffc0000 [ 248.051958][ T26] audit: type=1326 audit(1785810490.897:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7343 comm="syz.1.849" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f1c5ed019 code=0x7ffc0000 [ 248.077367][ T26] audit: type=1326 audit(1785810490.897:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7343 comm="syz.1.849" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f1c5ed019 code=0x7ffc0000 [ 248.102081][ T4227] gspca_sunplus: reg_w_riv err -110 [ 248.107566][ T4227] sunplus: probe of 3-1:0.0 failed with error -110 [ 248.115012][ T26] audit: type=1326 audit(1785810490.907:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7343 comm="syz.1.849" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6f1c5ed019 code=0x7ffc0000 [ 248.143028][ T26] audit: type=1326 audit(1785810490.907:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7343 comm="syz.1.849" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f1c5ed019 code=0x7ffc0000 [ 248.314381][ T4227] usb 3-1: USB disconnect, device number 6 [ 248.342136][ T7352] tipc: Enabling of bearer rejected, failed to enable media [ 250.076198][ T7376] device syzkaller0 entered promiscuous mode [ 250.258156][ T7389] ipt_REJECT: TCP_RESET invalid for non-tcp [ 251.546431][ T7407] MPTCP: kernel_bind error, err=-99 [ 251.879033][ T7415] netlink: 4 bytes leftover after parsing attributes in process `syz.4.870'. [ 251.990256][ C1] net_ratelimit: 15 callbacks suppressed [ 251.990276][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.617616][ T7427] xt_connbytes: Forcing CT accounting to be enabled [ 252.827399][ T7427] xt_CT: No such helper "netbios-ns" [ 252.933121][ T7443] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 252.964649][ T7443] bond2: (slave macvlan2): Enslaving as an active interface with a down link [ 253.193703][ T7466] loop4: detected capacity change from 0 to 512 [ 253.229979][ T7466] EXT4-fs (loop4): Ignoring removed bh option [ 253.259671][ T7466] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 253.272717][ T7466] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 253.284622][ T7466] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.883: Corrupt directory, running e2fsck is recommended [ 253.327391][ T7466] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 253.339667][ T7466] EXT4-fs error (device loop4): ext4_iget_extra_inode:4573: inode #15: comm syz.4.883: corrupted in-inode xattr [ 253.357167][ T7466] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.883: couldn't read orphan inode 15 (err -117) [ 253.378155][ T7466] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,commit=0x0000000000000000,jqfmt=vfsold,nolazytime,grpjquota=.nouid32,resuid=0x0000000000000000,bh,grpid,,,errors=continue. Quota mode: writeback. [ 255.672647][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.679001][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.515329][ T7539] netlink: 12 bytes leftover after parsing attributes in process `syz.2.903'. [ 256.616025][ T7539] bridge2: port 1(erspan0) entered blocking state [ 256.637313][ T7539] bridge2: port 1(erspan0) entered disabled state [ 256.704931][ T7539] device erspan0 entered promiscuous mode [ 256.722999][ T7539] bridge2: port 1(erspan0) entered blocking state [ 256.729504][ T7539] bridge2: port 1(erspan0) entered forwarding state [ 256.888251][ T7542] netlink: 4 bytes leftover after parsing attributes in process `syz.0.905'. [ 257.615789][ T7577] tipc: Started in network mode [ 257.631925][ T7577] tipc: Node identity 84e, cluster identity 4711 [ 257.639592][ T7577] tipc: Node number set to 2126 [ 258.438427][ T7591] device syzkaller0 entered promiscuous mode [ 258.868665][ T7603] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 260.163747][ T7626] netlink: 'syz.2.931': attribute type 1 has an invalid length. [ 260.974925][ T7630] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 261.020403][ T7632] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 261.108625][ T7643] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.170106][ T7643] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.193734][ T7643] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.392318][ T7652] rdma_rxe: rxe_register_device failed with error -23 [ 261.426055][ T7652] rdma_rxe: failed to add ipvlan1 [ 261.839572][ T7643] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 261.848927][ T7643] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 261.857945][ T7643] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 261.866873][ T7643] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 262.512076][ T7670] netlink: 40 bytes leftover after parsing attributes in process `syz.2.941'. [ 265.640921][ T7706] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.667280][ T7709] netlink: 'syz.4.955': attribute type 1 has an invalid length. [ 265.717693][ T7709] 8021q: adding VLAN 0 to HW filter on device bond3 [ 266.546722][ T7709] bond3: (slave gretap1): making interface the new active one [ 266.577156][ T7709] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 266.613795][ T5092] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 267.749611][ T7743] ceph: No mds server is up or the cluster is laggy [ 268.384552][ T7759] mount: server 127.0.0.1 not responding, timed out [ 270.666265][ T7787] Cannot find del_set index 4 as target [ 271.006205][ T7824] netlink: 'syz.4.980': attribute type 1 has an invalid length. [ 271.745990][ T7824] 8021q: adding VLAN 0 to HW filter on device bond4 [ 271.826443][ T7832] device bond4 entered promiscuous mode [ 271.867953][ T7839] IPVS: stopping master sync thread 7846 ... [ 271.874667][ T7846] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 33554436, id = 0 [ 271.923206][ T7816] netlink: 4 bytes leftover after parsing attributes in process `syz.1.988'. [ 273.589491][ T7867] netlink: 16 bytes leftover after parsing attributes in process `syz.4.990'. [ 273.641314][ T7867] netlink: 17 bytes leftover after parsing attributes in process `syz.4.990'. [ 273.650409][ T7867] tipc: Invalid UDP bearer configuration [ 273.650447][ T7867] tipc: Enabling of bearer rejected, failed to enable media [ 273.713093][ T7871] netlink: 28 bytes leftover after parsing attributes in process `syz.2.992'. [ 274.817604][ T7891] device ip6_vti0 entered promiscuous mode [ 274.851406][ T7891] netlink: 8 bytes leftover after parsing attributes in process `syz.1.997'. [ 275.603363][ T5077] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.919147][ T4227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.931947][ T4176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.941490][ T1338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.225732][ T4176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.254598][ T7926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.793149][ T5077] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.817009][ T4226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.977168][ T4176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.020158][ T4176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.193187][ T7931] device syzkaller0 entered promiscuous mode [ 278.921252][ T7967] loop4: detected capacity change from 0 to 8192 [ 279.244926][ T7978] loop2: detected capacity change from 0 to 1024 [ 280.014262][ T7978] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 280.032061][ T4194] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 280.083275][ T4194] FAT-fs (loop4): Filesystem has been set read-only [ 280.180688][ T7978] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6002c018, mo2=0102] [ 280.216448][ T7978] System zones: 0-1, 3-12 [ 280.268239][ T7978] EXT4-fs (loop2): mounted filesystem without journal. Opts: user_xattr,abort,resuid=0x0000000000000000,user_xattr,discard,max_dir_size_kb=0x00000000000007b1,debug,noinit_itable,nomblk_io_submit,nodelalloc,inode_readahead_blks=0x0000000000040000,,errors=continue. Quota mode: none. [ 280.510723][ T8008] tipc: Failed to obtain node identity [ 280.516249][ T8008] tipc: Enabling of bearer rejected, failed to enable media [ 280.656559][ T8010] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1033'. [ 280.804833][ T8022] device syzkaller0 entered promiscuous mode [ 281.149477][ T4227] net_ratelimit: 148 callbacks suppressed [ 281.149496][ T4227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.305686][ T8031] autofs4:pid:8031:autofs_fill_super: called with bogus options [ 281.989986][ T1338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.154410][ T4176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.173056][ T8035] device syzkaller0 entered promiscuous mode [ 282.468481][ T8051] netlink: 79 bytes leftover after parsing attributes in process `syz.4.1046'. [ 282.494349][ T8051] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1046'. [ 282.557089][ T1234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.565640][ T26] kauditd_printk_skb: 19 callbacks suppressed [ 282.565655][ T26] audit: type=1800 audit(1785810525.597:163): pid=8017 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1035" name="bus" dev="ramfs" ino=41772 res=0 errno=0 [ 282.593795][ T4227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.605673][ T3157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.294735][ T8051] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1046'. [ 283.340062][ T8051] netlink: 'syz.4.1046': attribute type 11 has an invalid length. [ 283.389504][ T8059] overlayfs: failed to clone upperpath [ 283.518589][ T8065] device syzkaller1 entered promiscuous mode [ 283.731180][ T3157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.306112][ T4227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.314922][ T4273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.975472][ T8099] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.034012][ T8099] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.086695][ T8105] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.144959][ T8105] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.206763][ T8105] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.240251][ T4227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.251420][ T8105] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.259673][ T8105] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.268197][ T8105] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.276703][ T8105] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.514328][ T8104] tipc: Failed to remove unknown binding: 66,0,0/2099199:3196833131/3196833133 [ 287.549884][ T8104] tipc: Failed to remove unknown binding: 66,0,0/2099199:3196833131/3196833132 [ 287.560799][ T8104] tipc: Failed to remove unknown binding: 66,0,0/2099199:3196833131/3196833133 [ 287.569988][ T8104] tipc: Failed to remove unknown binding: 66,0,0/2099199:3196833131/3196833132 [ 287.579505][ T8126] bond0: (slave bond_slave_0): Releasing backup interface [ 287.626199][ T8126] team0: Port device team_slave_0 removed [ 287.647031][ T8126] team0: Port device team_slave_1 removed [ 287.706616][ T8126] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 287.784851][ T8135] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1071'. [ 287.871586][ T8136] set match dimension is over the limit! [ 288.608513][ T8146] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1075'. [ 289.794623][ T8174] device syzkaller0 entered promiscuous mode [ 290.158414][ T8176] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1085'. [ 291.196535][ T8192] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1090'. [ 293.144458][ T3157] net_ratelimit: 15 callbacks suppressed [ 293.144476][ T3157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.182262][ T4273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.527127][ T3157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.120199][ T8246] xt_TPROXY: Can be used only with -p tcp or -p udp [ 296.269477][ T4227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.311994][ T1338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.769800][ T1338] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 297.009809][ T1338] usb 5-1: Using ep0 maxpacket: 32 [ 297.129869][ T1338] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 297.144763][ T1338] usb 5-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 297.154201][ T1338] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.180674][ T1338] usb 5-1: config 0 descriptor?? [ 297.222986][ T1338] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 298.290534][ T3157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.670300][ T8293] team0: Port device xfrm0 added [ 298.676358][ T8295] tipc: Enabled bearer , priority 0 [ 298.689399][ T8297] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 298.809395][ T8297] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 298.831721][ T8297] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 299.350909][ T3157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.755824][ T4273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.768268][ T8297] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 299.774615][ T4384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.789067][ T8297] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 299.798455][ T8297] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 299.831487][ T8297] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 299.852012][ T3157] usb 5-1: USB disconnect, device number 4 [ 299.869684][ T4227] tipc: Node number set to 930222808 [ 300.433025][ T4227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.560083][ T4227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.763410][ T1338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.630586][ T4227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.790321][ T4273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.041584][ T4227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.146801][ T8353] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 304.165108][ T8361] loop4: detected capacity change from 0 to 256 [ 304.230602][ T8361] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 304.261920][ T8361] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 305.031871][ T8361] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 305.033581][ T8365] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1138'. [ 305.074102][ T8365] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1138'. [ 305.160009][ T4227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.305260][ T8375] netlink: 'syz.0.1142': attribute type 3 has an invalid length. [ 305.808948][ T8390] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1144'. [ 305.992337][ T1338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.043056][ T8390] af_packet: tpacket_rcv: packet too big, clamped from 64521 to 3956. macoff=92 [ 306.809301][ T3157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.902140][ T4227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.959920][ T4227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.040320][ T4273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.047151][ T8431] device syzkaller0 entered promiscuous mode [ 309.076838][ T8430] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1154'. [ 309.356036][ T8442] device ipip1 entered promiscuous mode [ 310.061602][ T4176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.110074][ T4176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.140674][ T8449] ceph: No mds server is up or the cluster is laggy [ 311.396970][ T4273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.707313][ T8489] device syzkaller0 entered promiscuous mode [ 311.990027][ T4273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.998981][ T4384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.396147][ T4176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.558484][ T8503] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1174'. [ 312.616941][ T8507] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1177'. [ 313.470869][ T3157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.486898][ T8515] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1178'. [ 313.513308][ T8503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.521914][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.550243][ T4176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.142575][ T4176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.173534][ T4384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.179375][ T8551] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1187'. [ 316.202612][ T8551] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 316.211669][ T8551] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 316.220455][ T8551] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 316.229169][ T8551] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 316.986870][ T8551] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1187'. [ 317.111285][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.171065][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.190949][ T4176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.304286][ T8578] 9pnet: p9_errstr2errno: server reported unknown error 1844674407 [ 317.313396][ T8579] tipc: Started in network mode [ 317.339829][ T8579] tipc: Node identity 2007ff, cluster identity 4711 [ 317.424910][ T8579] tipc: Node number set to 2099199 [ 318.274484][ T3157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.200182][ T4384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.350344][ T4176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.539299][ T3157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.035932][ T1338] libceph: connect (1)[c::]:6789 error -101 [ 321.042619][ T1338] libceph: mon0 (1)[c::]:6789 connect error [ 321.077391][ T8636] ceph: No mds server is up or the cluster is laggy [ 321.388544][ T8642] bridge2: port 1(erspan0) entered disabled state [ 321.592217][ T4227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.608405][ T1338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.769996][ T8642] tipc: Resetting bearer [ 322.232514][ T1107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.241001][ T4384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.254340][ T4176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.355372][ T8642] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.364728][ T8642] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.373932][ T8642] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.383399][ T8642] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.447275][ T8642] device virt_wifi0 left promiscuous mode [ 322.477113][ T8642] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 322.486111][ T8642] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 322.495198][ T8642] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 322.504113][ T8642] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 322.542303][ T8652] tipc: Started in network mode [ 322.557535][ T8652] tipc: Node identity 2007ff, cluster identity 4711 [ 322.574167][ T8652] tipc: Node number set to 2099199 [ 322.588981][ T8669] fuse: Bad value for 'fd' [ 322.604643][ T8657] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1228'. [ 322.630195][ T4176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.274293][ T8694] VFS: file-max limit 0 reached [ 323.647460][ T8706] team0: Port device xfrm0 added [ 323.658683][ T8706] tipc: Enabled bearer , priority 0 [ 323.666200][ T8700] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1246'. [ 323.676143][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.873963][ T8713] sctp: [Deprecated]: syz.2.1240 (pid 8713) Use of struct sctp_assoc_value in delayed_ack socket option. [ 323.873963][ T8713] Use struct sctp_sack_info instead [ 323.962390][ T8711] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4187] was attempted by ""[8711] [ 323.967379][ T8719] sctp: [Deprecated]: syz.2.1240 (pid 8719) Use of struct sctp_assoc_value in delayed_ack socket option. [ 323.967379][ T8719] Use struct sctp_sack_info instead [ 324.580698][ T4384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.592224][ T4384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.710158][ T4176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.443955][ T26] audit: type=1326 audit(1785810825.484:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8771 comm="syz.0.1269" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd25e21f019 code=0x7ffc0000 [ 326.512054][ T26] audit: type=1326 audit(1785810825.514:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8771 comm="syz.0.1269" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd25e21f019 code=0x7ffc0000 [ 326.582633][ T26] audit: type=1326 audit(1785810825.514:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8771 comm="syz.0.1269" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd25e21f019 code=0x7ffc0000 [ 326.606928][ T26] audit: type=1326 audit(1785810825.514:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8771 comm="syz.0.1269" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd25e21f019 code=0x7ffc0000 [ 326.630911][ C0] vkms_vblank_simulate: vblank timer overrun [ 326.681718][ T26] audit: type=1326 audit(1785810825.514:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8771 comm="syz.0.1269" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd25e21f019 code=0x7ffc0000 [ 326.735415][ T26] audit: type=1326 audit(1785810825.514:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8771 comm="syz.0.1269" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd25e21f019 code=0x7ffc0000 [ 326.759589][ C0] vkms_vblank_simulate: vblank timer overrun [ 326.797453][ T26] audit: type=1326 audit(1785810825.514:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8771 comm="syz.0.1269" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd25e21f019 code=0x7ffc0000 [ 326.854824][ T26] audit: type=1326 audit(1785810825.524:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8771 comm="syz.0.1269" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd25e21f019 code=0x7ffc0000 [ 326.880702][ T4227] net_ratelimit: 7 callbacks suppressed [ 326.880719][ T4227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.069053][ T26] audit: type=1326 audit(1785810825.524:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8771 comm="syz.0.1269" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd25e21f019 code=0x7ffc0000 [ 327.093444][ C0] vkms_vblank_simulate: vblank timer overrun [ 327.098977][ T8796] tipc: Failed to remove unknown binding: 66,1,1/2099199:567899085/567899087 [ 327.110943][ T26] audit: type=1326 audit(1785810825.524:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8771 comm="syz.0.1269" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd25e21f019 code=0x7ffc0000 [ 327.230299][ T8803] bond1: (slave macvlan2): Releasing active interface [ 327.255734][ T8803] bond3: (slave gretap1): Releasing active interface [ 327.898095][ T8791] tipc: Failed to remove unknown binding: 66,1,1/2099199:567899085/567899087 [ 327.913083][ T4227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.922106][ T8791] tipc: Failed to remove unknown binding: 66,1,1/2099199:567899085/567899087 [ 328.207272][ T8825] MPTCP: kernel_bind error, err=-99 [ 328.553879][ T8838] IPv6: sit1: Disabled Multicast RS [ 328.600047][ T1107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.954585][ T4176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.157210][ T8856] ip6t_srh: unknown srh invflags 4000 [ 329.363214][ T8869] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 329.683066][ T8880] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1291'. [ 329.844669][ T8887] netlink: 'syz.2.1296': attribute type 1 has an invalid length. [ 330.081364][ T8891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.090610][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.136740][ T4227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.149838][ T8888] netlink: 'syz.3.1295': attribute type 1 has an invalid length. [ 330.230428][ T8890] bond0: (slave veth5): Enslaving as an active interface with a down link [ 330.358114][ T8900] device bond3 entered promiscuous mode [ 330.385220][ T8900] 8021q: adding VLAN 0 to HW filter on device bond3 [ 330.411722][ T8887] bond0: (slave macvlan1): Enslaving as an active interface with a down link [ 330.467967][ T8890] bond0 (unregistering): (slave veth5): Releasing active interface [ 330.518825][ T8890] bond0 (unregistering): (slave macvlan1): Releasing active interface [ 330.555058][ T8890] bond0 (unregistering): Released all slaves [ 330.790261][ T8915] netlink: 'syz.0.1307': attribute type 11 has an invalid length. [ 331.736451][ T4227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.744669][ T4227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.917523][ T8908] syz.4.1303 (8908): drop_caches: 2 [ 332.639898][ T1107] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 332.818774][ T4227] net_ratelimit: 1 callbacks suppressed [ 332.818792][ T4227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.340707][ T1107] usb 5-1: config 127 has an invalid interface number: 138 but max is 0 [ 333.349084][ T1107] usb 5-1: config 127 has no interface number 0 [ 333.358441][ T1107] usb 5-1: config 127 interface 138 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 40 [ 333.369542][ T1107] usb 5-1: config 127 interface 138 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 333.970085][ T8974] ecryptfs_parse_options: eCryptfs: unrecognized option [³] [ 333.977393][ T8974] ecryptfs_parse_options: eCryptfs: unrecognized option [z\)] [ 333.984855][ T8974] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 333.998161][ T8974] Error parsing options; rc = [-22] [ 334.045028][ T4227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.340076][ T1107] usb 5-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=4e.40 [ 334.388172][ T1107] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.420521][ T1107] usb 5-1: Product: syz [ 334.426474][ T8990] netlink: 'syz.2.1333': attribute type 11 has an invalid length. [ 334.438073][ T1107] usb 5-1: Manufacturer: syz [ 334.455119][ T1107] usb 5-1: SerialNumber: syz [ 334.520201][ T8945] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 334.528214][ T8945] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 334.554339][ T8994] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1334'. [ 334.790210][ T4384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.811572][ T9000] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 334.834149][ T9000] bond1: (slave macvlan4): Enslaving as an active interface with a down link [ 334.885168][ T9002] cgroup: Invalid name [ 335.029920][ T1107] usb 5-1: probing VID:PID(0424:012C) [ 335.043811][ T1107] usb 5-1: vub300 testing BULK OUT EndPoint(0) 0F [ 335.064419][ T1107] usb 5-1: vub300 testing BULK OUT EndPoint(1) 09 [ 335.079811][ T1107] usb 5-1: vub300 testing BULK OUT EndPoint(2) 0C [ 335.360301][ T1107] usb 5-1: ignoring unexpected bulk_out endpoint [ 335.367607][ T1107] usb 5-1: Could not find two sets of bulk-in/out endpoint pairs [ 335.392251][ T1107] vub300: probe of 5-1:127.138 failed with error -22 [ 335.407759][ T4227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.412440][ T1107] usb 5-1: USB disconnect, device number 5 [ 335.685559][ T9034] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1348'. [ 335.790280][ T9039] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1349'. [ 336.480061][ T4227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.942836][ T9091] netlink: 'syz.1.1369': attribute type 10 has an invalid length. [ 337.076894][ T9089] o2cb: This node has not been configured. [ 337.083324][ T9089] o2cb: Cluster check failed. Fix errors before retrying. [ 337.090492][ T9089] (syz.2.1366,9089,1):user_dlm_register:675 ERROR: status = -22 [ 337.098148][ T9089] (syz.2.1366,9089,1):dlmfs_mkdir:430 ERROR: Error -22 could not register domain "file2" [ 337.312868][ T9091] device netdevsim0 entered promiscuous mode [ 337.322522][ T9091] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 337.629845][ T4227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.887138][ T4273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.895567][ T4384] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 338.008952][ T9124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.057572][ T9124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.072199][ T9124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.084206][ T9124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.106299][ T9124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.158220][ T9124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.411449][ T9124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.429487][ T9124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.470936][ T4384] usb 5-1: Using ep0 maxpacket: 8 [ 338.708844][ T4176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.957301][ T9164] netlink: 'syz.0.1393': attribute type 2 has an invalid length. [ 338.974500][ T26] kauditd_printk_skb: 48 callbacks suppressed [ 338.974561][ T26] audit: type=1107 audit(1785810838.014:222): pid=9159 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 338.989940][ T4384] usb 5-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 339.024791][ T9167] bridge0: bridge: STP does not work in non-root netns [ 339.076526][ T4384] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.085037][ T4384] usb 5-1: Product: syz [ 339.089362][ T4384] usb 5-1: Manufacturer: syz [ 339.094516][ T4384] usb 5-1: SerialNumber: syz [ 339.114801][ T4384] usb 5-1: config 0 descriptor?? [ 339.162021][ T4384] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 339.177409][ T4384] pctv452e: pctv452e_power_ctrl: 1 [ 339.177409][ T4384] [ 339.185755][ T4384] usb 5-1: selecting invalid altsetting 3 [ 339.198059][ T4384] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 339.198059][ T4384] [ 339.209088][ T4384] dvb-usb: bulk message failed: -22 (5/0) [ 339.327821][ T4384] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 339.350587][ T4384] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 339.359329][ T4384] usb 5-1: media controller created [ 339.370699][ T9095] dvb-usb: bulk message failed: -22 (7/0) [ 339.378383][ T9095] pctv452e: I2C error -22; AA 01 00 00 00 -> aa 01 31 03 00 00 00 [ 339.389008][ T4384] dvb-usb: bulk message failed: -22 (8/0) [ 339.395149][ T4384] pctv452e: I2C error -22; AA 02 A0 01 14 -> aa 02 31 04 a0 01 14 [ 339.409355][ T4384] dvb-usb: MAC address reading failed. [ 339.427144][ T4384] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 339.469632][ T4384] DVB: Unable to find symbol stb0899_attach() [ 339.475860][ T4384] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 339.589782][ T4384] rc_core: IR keymap rc-tt-1500 not found [ 339.595567][ T4384] Registered IR keymap rc-empty [ 339.601871][ T4384] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 339.613583][ T4384] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input6 [ 339.626382][ T4384] dvb-usb: schedule remote query interval to 100 msecs. [ 339.633738][ T4384] pctv452e: pctv452e_power_ctrl: 0 [ 339.633738][ T4384] [ 339.641474][ T4384] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 339.677922][ T4384] usb 5-1: USB disconnect, device number 6 [ 339.706095][ T4384] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 340.215998][ T9193] tipc: Enabling of bearer rejected, failed to enable media [ 341.042504][ T9217] x_tables: duplicate underflow at hook 1 [ 341.963886][ T9229] device syzkaller0 entered promiscuous mode [ 342.014393][ T9229] tipc: Enabled bearer , priority 0 [ 342.073867][ T9227] tipc: Resetting bearer [ 342.252996][ T9227] tipc: Disabling bearer [ 342.451571][ T9249] tipc: Enabling of bearer rejected, failed to enable media [ 342.816306][ T9268] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 342.856024][ T9268] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 342.868237][ T9268] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 342.960849][ T4176] net_ratelimit: 5 callbacks suppressed [ 342.960867][ T4176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.306476][ T9288] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1432'. [ 343.396382][ T9290] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1433'. [ 343.442227][ T9290] device macvtap0 entered promiscuous mode [ 343.449000][ T9290] device bond0 entered promiscuous mode [ 343.456725][ T9290] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 343.990025][ T4384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.000272][ T4227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.615700][ T9340] Cannot find del_set index 0 as target [ 344.707134][ T9348] futex_wake_op: syz.0.1458 tries to shift op by 144; fix this program [ 345.406199][ T4227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.808188][ T9375] gfs2: gfs2 mount does not exist [ 346.471338][ T4227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.997616][ T9415] loop4: detected capacity change from 0 to 128 [ 347.085018][ T4273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.129741][ T9415] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 347.509588][ T9449] netlink: 'syz.2.1497': attribute type 10 has an invalid length. [ 347.518053][ T4227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.616223][ T9449] netlink: 'syz.2.1497': attribute type 11 has an invalid length. [ 347.689026][ T26] audit: type=1800 audit(2000000004.479:223): pid=9456 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1500" name="cluster_name" dev="configfs" ino=46502 res=0 errno=0 [ 347.780084][ T26] audit: type=1800 audit(2000000004.529:224): pid=9456 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1500" name="toss_secs" dev="configfs" ino=46504 res=0 errno=0 [ 347.822948][ T26] audit: type=1800 audit(2000000004.529:225): pid=9456 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1500" name="scan_secs" dev="configfs" ino=46505 res=0 errno=0 [ 348.373551][ T9480] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.644057][ T4228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.986712][ T9504] xt_SECMARK: invalid mode: 2 [ 350.228414][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.236965][ T4384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.742914][ T9552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.753620][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.765091][ T9552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.793196][ T9550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.803373][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.843807][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.173886][ T9570] tipc: Enabled bearer , priority 0 [ 351.196440][ T9570] device syzkaller0 entered promiscuous mode [ 351.211224][ T9570] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 351.250482][ T9570] tipc: Resetting bearer [ 351.258227][ T9565] tipc: Resetting bearer [ 351.295628][ T9565] tipc: Disabling bearer [ 351.347507][ T9567] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 352.662471][ T9633] tipc: Enabled bearer , priority 0 [ 352.698291][ T9633] device syzkaller0 entered promiscuous mode [ 352.728936][ T9633] tipc: Resetting bearer [ 352.851178][ T9639] tipc: Enabling of bearer rejected, already enabled [ 353.407437][ T9652] UBIFS error (pid: 9652): cannot open "./file0", error -22 [ 353.510359][ T4228] net_ratelimit: 4 callbacks suppressed [ 353.510469][ T4228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.199309][ T9687] overlayfs: failed to clone upperpath [ 354.343652][ T9698] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1584'. [ 354.396337][ T9698] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1584'. [ 354.560060][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.615370][ T9710] binder_alloc: 9709: pid 9709 spamming oneway? 2 buffers allocated for a total size of 5120 [ 354.638210][ T9713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.653030][ T9713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.667605][ T9713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.677105][ T9713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.782475][ T9715] netlink: 'syz.3.1592': attribute type 2 has an invalid length. [ 355.054585][ T9704] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 355.093501][ T9704] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 355.148501][ T9704] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 355.201907][ T9704] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 355.258983][ T9704] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 355.314825][ T9704] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 355.968999][ T9701] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.010253][ T9701] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.206441][ T9701] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.322204][ T9762] netlink: 292 bytes leftover after parsing attributes in process `syz.1.1609'. [ 358.083116][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.862126][ T9823] x_tables: ip_tables: osf match: only valid for protocol 6 [ 359.113397][ T9834] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1637'. [ 359.180843][ T9834] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1637'. [ 359.230896][ T9834] tipc: Invalid UDP bearer configuration [ 359.230991][ T9834] tipc: Enabling of bearer rejected, failed to enable media [ 360.112178][ T9883] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1653'. [ 360.348543][ T9886] o2cb: This node has not been configured. [ 360.355583][ T9886] o2cb: Cluster check failed. Fix errors before retrying. [ 360.362868][ T9886] (syz.0.1652,9886,1):user_dlm_register:675 ERROR: status = -22 [ 360.370624][ T9886] (syz.0.1652,9886,1):dlmfs_mkdir:430 ERROR: Error -22 could not register domain "file2" [ 361.302461][ T4273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.341013][ T9917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.350109][ T9917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.358431][ T9917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.366815][ T9917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.375252][ T9917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.383640][ T9917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.392008][ T9917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.400552][ T9917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.408887][ T9917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.431242][ T9917] raw_sendmsg: syz.1.1665 forgot to set AF_INET. Fix it! [ 362.996954][ T9937] xt_HMARK: spi-set and port-set can't be combined [ 364.498981][ T4384] libceph: mon0 (2)127.0.0.1:6667 socket closed (con state V2_BANNER_PAYLOAD) [ 364.573694][ T9959] ceph: No mds server is up or the cluster is laggy [ 364.811115][ T4384] libceph: mon0 (2)127.0.0.1:6667 socket error on write [ 365.701498][ T4273] libceph: mon0 (2)127.0.0.1:6667 socket error on write [ 365.703582][ T9999] UBIFS error (pid: 9999): cannot open "./file0", error -22 [ 365.756252][T10009] fuse: Bad value for 'fd' [ 365.923810][T10017] tipc: Enabling of bearer rejected, failed to enable media [ 366.256014][T10028] IPVS: stopping master sync thread 10029 ... [ 366.263519][T10029] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 33554436, id = 0 [ 367.196497][T10060] UBIFS error (pid: 10060): cannot open "./file0", error -22 [ 368.504108][T10101] syz.3.1732 sent an empty control message without MSG_MORE. [ 369.114526][T10110] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1735'. [ 369.126009][T10110] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1735'. [ 369.135267][T10110] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1735'. [ 369.144947][T10110] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1735'. [ 369.154491][T10110] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1735'. [ 369.321560][T10114] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1737'. [ 370.009795][T10139] netlink: 288 bytes leftover after parsing attributes in process `syz.2.1756'. [ 370.100293][T10142] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1746'. [ 370.145601][T10142] bond2: (slave macvlan2): Releasing active interface [ 370.182163][T10142] bond0 (unregistering): Released all slaves [ 370.823051][T10165] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1763'. [ 370.870058][ T4384] net_ratelimit: 69 callbacks suppressed [ 370.870077][ T4384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.921020][T10165] bond0 (unregistering): Released all slaves [ 370.937132][T10166] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.945515][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.033397][T10210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.041929][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.093330][T10213] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1772'. [ 372.372525][T10224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.380842][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.512174][T10268] tipc: Enabled bearer , priority 4 [ 373.682108][T10277] tipc: Enabling of bearer rejected, failed to enable media [ 373.709818][T10273] netlink: 'syz.0.1794': attribute type 10 has an invalid length. [ 373.718033][T10273] device veth1_vlan left promiscuous mode [ 373.725351][T10273] team0: Device veth1_vlan failed to register rx_handler [ 373.952333][ T26] audit: type=1326 audit(2000000029.730:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10290 comm="syz.2.1802" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1687ac7019 code=0x7ffc0000 [ 374.033688][ T26] audit: type=1326 audit(2000000029.730:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10290 comm="syz.2.1802" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1687ac7019 code=0x7ffc0000 [ 374.066694][T10293] overlayfs: failed to clone upperpath [ 374.137961][ T26] audit: type=1326 audit(2000000029.740:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10290 comm="syz.2.1802" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1687ac7019 code=0x7ffc0000 [ 374.220546][ T26] audit: type=1326 audit(2000000029.740:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10290 comm="syz.2.1802" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1687ac7019 code=0x7ffc0000 [ 374.253007][T10302] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1803'. [ 374.322636][ T26] audit: type=1326 audit(2000000029.740:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10290 comm="syz.2.1802" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1687ac7019 code=0x7ffc0000 [ 374.371323][ T26] audit: type=1326 audit(2000000029.740:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10290 comm="syz.2.1802" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1687ac7019 code=0x7ffc0000 [ 374.432781][T10315] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1806'. [ 374.470535][ T26] audit: type=1326 audit(2000000029.740:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10290 comm="syz.2.1802" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1687ac7019 code=0x7ffc0000 [ 374.498491][ T26] audit: type=1326 audit(2000000029.740:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10290 comm="syz.2.1802" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1687ac7019 code=0x7ffc0000 [ 374.523330][ T26] audit: type=1326 audit(2000000029.740:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10290 comm="syz.2.1802" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1687ac7019 code=0x7ffc0000 [ 374.548026][ T26] audit: type=1326 audit(2000000029.740:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10290 comm="syz.2.1802" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1687ac7019 code=0x7ffc0000 [ 375.279330][T10343] sctp: [Deprecated]: syz.1.1816 (pid 10343) Use of struct sctp_assoc_value in delayed_ack socket option. [ 375.279330][T10343] Use struct sctp_sack_info instead [ 375.407262][T10346] sctp: [Deprecated]: syz.1.1816 (pid 10346) Use of struct sctp_assoc_value in delayed_ack socket option. [ 375.407262][T10346] Use struct sctp_sack_info instead [ 375.749363][T10332] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1822'. [ 375.792687][T10359] [ 375.795060][T10359] ====================================================== [ 375.802278][T10359] WARNING: possible circular locking dependency detected [ 375.809322][T10359] syzkaller #0 Not tainted [ 375.813747][T10359] ------------------------------------------------------ [ 375.820775][T10359] syz.1.1818/10359 is trying to acquire lock: [ 375.827015][T10359] ffff88805e85a5e0 (msk_lock-AF_INET6){+.+.}-{0:0}, at: inet_sk_diag_fill+0xe40/0x19d0 [ 375.836981][T10359] [ 375.836981][T10359] but task is already holding lock: [ 375.844356][T10359] ffffc90001815428 (&h->lhash2[i].lock){+.+.}-{2:2}, at: mptcp_diag_dump+0x8f4/0x12a0 [ 375.854098][T10359] [ 375.854098][T10359] which lock already depends on the new lock. [ 375.854098][T10359] [ 375.864511][T10359] [ 375.864511][T10359] the existing dependency chain (in reverse order) is: [ 375.873543][T10359] [ 375.873543][T10359] -> #2 (&h->lhash2[i].lock){+.+.}-{2:2}: [ 375.881565][T10359] _raw_spin_lock+0x2a/0x40 [ 375.887252][T10359] inet_unhash+0xd0/0x540 [ 375.892225][T10359] tcp_set_state+0x35d/0x520 [ 375.897405][T10359] __tcp_close+0x91/0xf10 [ 375.902442][T10359] __mptcp_close_ssk+0x1ea/0x460 [ 375.907930][T10359] __mptcp_destroy_sock+0x39e/0x6e0 [ 375.913673][T10359] mptcp_close+0x5a6/0x9f0 [ 375.918630][T10359] inet_release+0x139/0x180 [ 375.923727][T10359] sock_close+0xbf/0x210 [ 375.928652][T10359] __fput+0x212/0x8c0 [ 375.933410][T10359] task_work_run+0x125/0x1a0 [ 375.938656][T10359] exit_to_user_mode_loop+0x10f/0x130 [ 375.944652][T10359] exit_to_user_mode_prepare+0xee/0x180 [ 375.950725][T10359] syscall_exit_to_user_mode+0x16/0x40 [ 375.956844][T10359] do_syscall_64+0x58/0xa0 [ 375.961791][T10359] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 375.968232][T10359] [ 375.968232][T10359] -> #1 (k-sk_lock-AF_INET6/1){+.+.}-{0:0}: [ 375.976301][T10359] mptcp_close+0x296/0x9f0 [ 375.981228][T10359] inet_release+0x139/0x180 [ 375.986238][T10359] sock_release+0x7b/0x140 [ 375.991164][T10359] mptcp_nl_cmd_add_addr+0x9e1/0xc50 [ 375.996957][T10359] genl_rcv_msg+0xd0b/0xfa0 [ 376.002084][T10359] netlink_rcv_skb+0x1e9/0x430 [ 376.007371][T10359] genl_rcv+0x24/0x40 [ 376.011860][T10359] netlink_unicast+0x78f/0x940 [ 376.017129][T10359] netlink_sendmsg+0x8ba/0xbe0 [ 376.022404][T10359] ____sys_sendmsg+0x5be/0x8f0 [ 376.027855][T10359] ___sys_sendmsg+0x236/0x2e0 [ 376.033045][T10359] __se_sys_sendmsg+0x1b7/0x2a0 [ 376.038421][T10359] do_syscall_64+0x4c/0xa0 [ 376.043354][T10359] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 376.049767][T10359] [ 376.049767][T10359] -> #0 (msk_lock-AF_INET6){+.+.}-{0:0}: [ 376.057584][T10359] __lock_acquire+0x2c66/0x7b50 [ 376.063036][T10359] lock_acquire+0x19e/0x400 [ 376.068226][T10359] mptcp_diag_get_info+0x1f2/0x9e0 [ 376.073982][T10359] inet_sk_diag_fill+0xe40/0x19d0 [ 376.079755][T10359] mptcp_diag_dump+0xcc2/0x12a0 [ 376.085219][T10359] __inet_diag_dump+0x1f6/0x380 [ 376.090613][T10359] netlink_dump+0x6d2/0xdd0 [ 376.095631][T10359] __netlink_dump_start+0x4e4/0x720 [ 376.101451][T10359] inet_diag_handler_cmd+0x1d2/0x2b0 [ 376.107250][T10359] sock_diag_rcv_msg+0x15c/0x3e0 [ 376.112883][T10359] netlink_rcv_skb+0x1e9/0x430 [ 376.118161][T10359] sock_diag_rcv+0x26/0x40 [ 376.123195][T10359] netlink_unicast+0x78f/0x940 [ 376.128988][T10359] netlink_sendmsg+0x8ba/0xbe0 [ 376.134393][T10359] sock_write_iter+0x2a6/0x3a0 [ 376.139679][T10359] do_iter_readv_writev+0x47d/0x5f0 [ 376.145529][T10359] do_iter_write+0x1f8/0x7a0 [ 376.150773][T10359] do_writev+0x281/0x480 [ 376.155559][T10359] do_syscall_64+0x4c/0xa0 [ 376.160487][T10359] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 376.166890][T10359] [ 376.166890][T10359] other info that might help us debug this: [ 376.166890][T10359] [ 376.177213][T10359] Chain exists of: [ 376.177213][T10359] msk_lock-AF_INET6 --> k-sk_lock-AF_INET6/1 --> &h->lhash2[i].lock [ 376.177213][T10359] [ 376.191145][T10359] Possible unsafe locking scenario: [ 376.191145][T10359] [ 376.198927][T10359] CPU0 CPU1 [ 376.204371][T10359] ---- ---- [ 376.209899][T10359] lock(&h->lhash2[i].lock); [ 376.214577][T10359] lock(k-sk_lock-AF_INET6/1); [ 376.222045][T10359] lock(&h->lhash2[i].lock); [ 376.229236][T10359] lock(msk_lock-AF_INET6); [ 376.233815][T10359] [ 376.233815][T10359] *** DEADLOCK *** [ 376.233815][T10359] [ 376.242030][T10359] 6 locks held by syz.1.1818/10359: [ 376.247209][T10359] #0: ffffffff8d456fe8 (sock_diag_mutex){+.+.}-{3:3}, at: sock_diag_rcv+0x17/0x40 [ 376.256532][T10359] #1: ffffffff8d456ea8 (sock_diag_table_mutex){+.+.}-{3:3}, at: sock_diag_rcv_msg+0x20e/0x3e0 [ 376.267133][T10359] #2: ffff88805ea65690 (nlk_cb_mutex-SOCK_DIAG){+.+.}-{3:3}, at: __netlink_dump_start+0xf5/0x720 [ 376.277732][T10359] #3: ffffffff8d530968 (inet_diag_table_mutex){+.+.}-{3:3}, at: __inet_diag_dump+0x181/0x380 [ 376.287988][T10359] #4: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 376.297310][T10359] #5: ffffc90001815428 (&h->lhash2[i].lock){+.+.}-{2:2}, at: mptcp_diag_dump+0x8f4/0x12a0 [ 376.307309][T10359] [ 376.307309][T10359] stack backtrace: [ 376.313187][T10359] CPU: 0 PID: 10359 Comm: syz.1.1818 Not tainted syzkaller #0 [ 376.320635][T10359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 376.330810][T10359] Call Trace: [ 376.334327][T10359] [ 376.337343][T10359] dump_stack_lvl+0x188/0x250 [ 376.342192][T10359] ? load_image+0x410/0x410 [ 376.346705][T10359] ? show_regs_print_info+0x20/0x20 [ 376.351908][T10359] ? print_circular_bug+0x12b/0x1a0 [ 376.357142][T10359] check_noncircular+0x296/0x330 [ 376.362076][T10359] ? add_chain_block+0x9b0/0x9b0 [ 376.367162][T10359] ? lockdep_lock+0xf1/0x1f0 [ 376.371828][T10359] ? mark_lock+0x94/0x320 [ 376.376166][T10359] ? _find_first_zero_bit+0xd1/0xf0 [ 376.381838][T10359] __lock_acquire+0x2c66/0x7b50 [ 376.386780][T10359] ? verify_lock_unused+0x140/0x140 [ 376.391992][T10359] ? lockdep_hardirqs_on_prepare+0x7c0/0x7c0 [ 376.397996][T10359] ? verify_lock_unused+0x140/0x140 [ 376.403189][T10359] ? __local_bh_enable_ip+0xd7/0x1c0 [ 376.408596][T10359] ? __local_bh_enable_ip+0x136/0x1c0 [ 376.414061][T10359] ? lockdep_hardirqs_on+0x94/0x140 [ 376.419264][T10359] ? __local_bh_enable_ip+0x136/0x1c0 [ 376.424662][T10359] ? _local_bh_enable+0xa0/0xa0 [ 376.429972][T10359] ? from_kuid_munged+0x18f/0x6e0 [ 376.435093][T10359] ? nla_put+0x130/0x1e0 [ 376.439537][T10359] lock_acquire+0x19e/0x400 [ 376.444724][T10359] ? inet_sk_diag_fill+0xe40/0x19d0 [ 376.450084][T10359] ? read_lock_is_recursive+0x10/0x10 [ 376.455468][T10359] ? rcu_lock_release+0x5/0x20 [ 376.460335][T10359] ? __lock_acquire+0x7b50/0x7b50 [ 376.465375][T10359] ? inet_sk_diag_fill+0xe40/0x19d0 [ 376.470676][T10359] mptcp_diag_get_info+0x1f2/0x9e0 [ 376.476022][T10359] ? inet_sk_diag_fill+0xe40/0x19d0 [ 376.481315][T10359] inet_sk_diag_fill+0xe40/0x19d0 [ 376.486377][T10359] ? inet_diag_msg_attrs_fill+0x930/0x930 [ 376.492114][T10359] ? do_raw_spin_lock+0x128/0x2f0 [ 376.497239][T10359] ? __rwlock_init+0x140/0x140 [ 376.502031][T10359] ? inet_diag_bc_sk+0x18b/0x10c0 [ 376.507090][T10359] mptcp_diag_dump+0xcc2/0x12a0 [ 376.511992][T10359] ? mptcp_token_join_cookie_init_state+0x460/0x460 [ 376.518765][T10359] __inet_diag_dump+0x1f6/0x380 [ 376.523649][T10359] netlink_dump+0x6d2/0xdd0 [ 376.528253][T10359] ? netlink_lookup+0x1d0/0x1d0 [ 376.533133][T10359] ? __inet_diag_dump_start+0x805/0x970 [ 376.538682][T10359] __netlink_dump_start+0x4e4/0x720 [ 376.543889][T10359] inet_diag_handler_cmd+0x1d2/0x2b0 [ 376.549247][T10359] ? rcu_lock_release+0x20/0x20 [ 376.554131][T10359] ? inet_diag_handler_get_info+0xb70/0xb70 [ 376.560052][T10359] ? inet_diag_dump_start+0x20/0x20 [ 376.565345][T10359] ? inet_diag_dump+0x50/0x50 [ 376.570111][T10359] ? __mutex_lock_common+0x435/0x2400 [ 376.575737][T10359] ? rcu_lock_release+0x20/0x20 [ 376.580719][T10359] sock_diag_rcv_msg+0x15c/0x3e0 [ 376.585872][T10359] netlink_rcv_skb+0x1e9/0x430 [ 376.590857][T10359] ? sock_diag_bind+0xa0/0xa0 [ 376.595801][T10359] ? netlink_ack+0xb10/0xb10 [ 376.600515][T10359] sock_diag_rcv+0x26/0x40 [ 376.605024][T10359] netlink_unicast+0x78f/0x940 [ 376.609790][T10359] netlink_sendmsg+0x8ba/0xbe0 [ 376.614737][T10359] ? netlink_getsockopt+0x570/0x570 [ 376.619974][T10359] ? aa_sock_msg_perm+0x94/0x150 [ 376.625722][T10359] ? apparmor_socket_sendmsg+0x88/0x230 [ 376.631547][T10359] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 376.636953][T10359] ? security_socket_sendmsg+0x7c/0xa0 [ 376.642806][T10359] sock_write_iter+0x2a6/0x3a0 [ 376.647684][T10359] ? sock_read_iter+0x380/0x380 [ 376.652565][T10359] do_iter_readv_writev+0x47d/0x5f0 [ 376.657763][T10359] ? aa_path_link+0x8a0/0x8a0 [ 376.662988][T10359] ? generic_file_rw_checks+0x280/0x280 [ 376.668629][T10359] ? common_file_perm+0x171/0x1c0 [ 376.674401][T10359] ? fsnotify_perm+0x5d/0x560 [ 376.679430][T10359] ? security_file_permission+0x75/0xa0 [ 376.685229][T10359] do_iter_write+0x1f8/0x7a0 [ 376.689930][T10359] ? import_iovec+0x6f/0xa0 [ 376.694450][T10359] do_writev+0x281/0x480 [ 376.698708][T10359] ? do_readv+0x460/0x460 [ 376.703186][T10359] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 376.709201][T10359] ? lock_chain_count+0x20/0x20 [ 376.714092][T10359] ? lockdep_hardirqs_on+0x94/0x140 [ 376.719496][T10359] do_syscall_64+0x4c/0xa0 [ 376.724114][T10359] ? clear_bhb_loop+0x30/0x80 [ 376.728887][T10359] ? clear_bhb_loop+0x30/0x80 [ 376.733560][T10359] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 376.739499][T10359] RIP: 0033:0x7f6f1c5ed019 [ 376.743980][T10359] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 376.763974][T10359] RSP: 002b:00007f6f1a845028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 376.772543][T10359] RAX: ffffffffffffffda RBX: 00007f6f1c874fa0 RCX: 00007f6f1c5ed019 [ 376.780751][T10359] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 0000000000000003 [ 376.788811][T10359] RBP: 00007f6f1c68400c R08: 0000000000000000 R09: 0000000000000000 [ 376.797253][T10359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 376.805222][T10359] R13: 00007f6f1c875038 R14: 00007f6f1c874fa0 R15: 00007ffc0f3058c8 [ 376.813189][T10359] [ 376.816781][T10359] BUG: sleeping function called from invalid context at net/core/sock.c:3291 [ 376.825670][T10359] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 10359, name: syz.1.1818 [ 376.834953][T10359] INFO: lockdep is turned off. [ 376.839744][T10359] Preemption disabled at: [ 376.839753][T10359] [<0000000000000000>] 0x0 [ 376.848673][T10359] CPU: 0 PID: 10359 Comm: syz.1.1818 Not tainted syzkaller #0 [ 376.856289][T10359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 376.867204][T10359] Call Trace: [ 376.870694][T10359] [ 376.874146][T10359] dump_stack_lvl+0x188/0x250 [ 376.879063][T10359] ? show_regs_print_info+0x20/0x20 [ 376.884344][T10359] ? load_image+0x410/0x410 [ 376.889266][T10359] ___might_sleep+0x493/0x610 [ 376.894067][T10359] ? __might_sleep+0xf0/0xf0 [ 376.898699][T10359] ? read_lock_is_recursive+0x10/0x10 [ 376.904172][T10359] ? rcu_lock_release+0x5/0x20 [ 376.909834][T10359] __lock_sock_fast+0x2f/0xe0 [ 376.914546][T10359] ? inet_sk_diag_fill+0xe40/0x19d0 [ 376.919763][T10359] mptcp_diag_get_info+0x1fe/0x9e0 [ 376.924891][T10359] inet_sk_diag_fill+0xe40/0x19d0 [ 376.929950][T10359] ? inet_diag_msg_attrs_fill+0x930/0x930 [ 376.935673][T10359] ? do_raw_spin_lock+0x128/0x2f0 [ 376.940930][T10359] ? __rwlock_init+0x140/0x140 [ 376.945809][T10359] ? inet_diag_bc_sk+0x18b/0x10c0 [ 376.950828][T10359] mptcp_diag_dump+0xcc2/0x12a0 [ 376.955673][T10359] ? mptcp_token_join_cookie_init_state+0x460/0x460 [ 376.962281][T10359] __inet_diag_dump+0x1f6/0x380 [ 376.967124][T10359] netlink_dump+0x6d2/0xdd0 [ 376.971623][T10359] ? netlink_lookup+0x1d0/0x1d0 [ 376.976720][T10359] ? __inet_diag_dump_start+0x805/0x970 [ 376.982292][T10359] __netlink_dump_start+0x4e4/0x720 [ 376.987516][T10359] inet_diag_handler_cmd+0x1d2/0x2b0 [ 376.992797][T10359] ? rcu_lock_release+0x20/0x20 [ 376.997638][T10359] ? inet_diag_handler_get_info+0xb70/0xb70 [ 377.003517][T10359] ? inet_diag_dump_start+0x20/0x20 [ 377.008701][T10359] ? inet_diag_dump+0x50/0x50 [ 377.013365][T10359] ? __mutex_lock_common+0x435/0x2400 [ 377.018724][T10359] ? rcu_lock_release+0x20/0x20 [ 377.023674][T10359] sock_diag_rcv_msg+0x15c/0x3e0 [ 377.028604][T10359] netlink_rcv_skb+0x1e9/0x430 [ 377.033357][T10359] ? sock_diag_bind+0xa0/0xa0 [ 377.038106][T10359] ? netlink_ack+0xb10/0xb10 [ 377.042682][T10359] sock_diag_rcv+0x26/0x40 [ 377.047213][T10359] netlink_unicast+0x78f/0x940 [ 377.051977][T10359] netlink_sendmsg+0x8ba/0xbe0 [ 377.056734][T10359] ? netlink_getsockopt+0x570/0x570 [ 377.062573][T10359] ? aa_sock_msg_perm+0x94/0x150 [ 377.067525][T10359] ? apparmor_socket_sendmsg+0x88/0x230 [ 377.073414][T10359] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 377.078772][T10359] ? security_socket_sendmsg+0x7c/0xa0 [ 377.084225][T10359] sock_write_iter+0x2a6/0x3a0 [ 377.088991][T10359] ? sock_read_iter+0x380/0x380 [ 377.093858][T10359] do_iter_readv_writev+0x47d/0x5f0 [ 377.099485][T10359] ? aa_path_link+0x8a0/0x8a0 [ 377.104248][T10359] ? generic_file_rw_checks+0x280/0x280 [ 377.109797][T10359] ? common_file_perm+0x171/0x1c0 [ 377.114818][T10359] ? fsnotify_perm+0x5d/0x560 [ 377.119535][T10359] ? security_file_permission+0x75/0xa0 [ 377.125292][T10359] do_iter_write+0x1f8/0x7a0 [ 377.129982][T10359] ? import_iovec+0x6f/0xa0 [ 377.134511][T10359] do_writev+0x281/0x480 [ 377.138761][T10359] ? do_readv+0x460/0x460 [ 377.143120][T10359] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 377.149095][T10359] ? lock_chain_count+0x20/0x20 [ 377.153942][T10359] ? lockdep_hardirqs_on+0x94/0x140 [ 377.159154][T10359] do_syscall_64+0x4c/0xa0 [ 377.163561][T10359] ? clear_bhb_loop+0x30/0x80 [ 377.168226][T10359] ? clear_bhb_loop+0x30/0x80 [ 377.172894][T10359] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 377.178795][T10359] RIP: 0033:0x7f6f1c5ed019 [ 377.183377][T10359] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 377.202975][T10359] RSP: 002b:00007f6f1a845028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 377.211440][T10359] RAX: ffffffffffffffda RBX: 00007f6f1c874fa0 RCX: 00007f6f1c5ed019 [ 377.219549][T10359] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 0000000000000003 [ 377.227514][T10359] RBP: 00007f6f1c68400c R08: 0000000000000000 R09: 0000000000000000 [ 377.235504][T10359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 377.243806][T10359] R13: 00007f6f1c875038 R14: 00007f6f1c874fa0 R15: 00007ffc0f3058c8 [ 377.251778][T10359] [ 378.551969][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.558491][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.469933][ T1107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog