last executing test programs: 10m39.228481859s ago: executing program 3 (id=800): r0 = fanotify_init(0x0, 0x400) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) recvfrom(r1, 0x0, 0x0, 0x17, 0x0, 0x0) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {0x0}, {&(0x7f0000000440)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a8", 0x5b}], 0x3) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 10m38.495590687s ago: executing program 3 (id=803): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) 10m37.56278881s ago: executing program 3 (id=806): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0xec) shutdown(r0, 0x0) connect$unix(r0, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = accept(r1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r4, 0x0, r6, 0x0, 0x200006, 0x0) splice(r5, 0x0, r2, 0x0, 0xa, 0x7) write(r3, &(0x7f0000000240)="c6", 0x1) 10m37.326073046s ago: executing program 3 (id=809): socket$inet6_sctp(0xa, 0x1, 0x84) socket$key(0xf, 0x3, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x2, 0xa, 0x2) socket$kcm(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = gettid() tkill(r0, 0x21) 10m37.182819279s ago: executing program 3 (id=810): mmap$IORING_OFF_PBUF_RING(0x0, 0x0, 0x300000a, 0x11, 0xffffffffffffffff, 0x82397a24) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000140)=""/147, &(0x7f0000000280)=0x93) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d40)={&(0x7f0000000b00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, 0x0, 0x26}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000000)={r1, 0x0, 0xfffffffffffffffe}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r2, 0x4000) syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000007000/0x2000)=nil) 10m36.913255676s ago: executing program 3 (id=813): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f00000004c0)={0x2, 0x1, "e4580c", 0x0, 0x5}) 10m21.829153802s ago: executing program 32 (id=813): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f00000004c0)={0x2, 0x1, "e4580c", 0x0, 0x5}) 7m58.612785996s ago: executing program 2 (id=1463): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1a85, @empty}, 0x10) listen(r0, 0x5) r1 = syz_io_uring_setup(0x10, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r0, &(0x7f0000000500), &(0x7f0000000600)=@in={0x2, 0x0, @empty}}) io_uring_enter(r1, 0x1, 0x0, 0x0, 0x0, 0x0) r5 = fsopen(&(0x7f0000000100)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000200)='source\x00', &(0x7f0000000300)='127.0.0.1:6789:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000400)='ms_mode\x00', &(0x7f0000000500)='crc\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000600)='secret\x00', &(0x7f0000000700)='AQAAAAAAAAAAABAAAAAAAAAAAAAAAAAAAAAAAA==\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000800)='mount_timeout\x00', &(0x7f0000000900)='1\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = accept4(r0, 0x0, 0x0, 0x800) write(r6, &(0x7f0000000800)='ceph v2\n\x00\x00\x00\x00\x00\x00\x00\x00', 0x10) 7m55.913436122s ago: executing program 2 (id=1474): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) shmat(r3, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmctl$IPC_RMID(r3, 0x0) shmat(0x0, &(0x7f0000ff4000/0x2000)=nil, 0x7000) 7m54.913955126s ago: executing program 2 (id=1477): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0a00000004000000080000000a"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) close(r1) bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=@base={0xa, 0x2, 0x4, 0x8}, 0x50) close(0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@base={0xa, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x1, 0x100, 0x0, 0x0, 0x3b8000, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000611800000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000150802000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) 7m54.544675675s ago: executing program 2 (id=1480): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='mountinfo\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x20000019}) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1404c, &(0x7f00000007c0)={[{@noload}, {@resgid}, {@inlinecrypt}, {@usrquota}, {@discard}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@min_batch_time={'min_batch_time', 0x3d, 0x7}}, {@test_dummy_encryption_v1}, {@noblock_validity}]}, 0x5, 0x491, &(0x7f0000000300)="$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") r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mkdir(&(0x7f0000001c00)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x290d010, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0xa65400, 0x0) 7m53.300914845s ago: executing program 2 (id=1487): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xd, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xb9}}, &(0x7f0000000480)='GPL\x00'}, 0x80) 7m52.404894897s ago: executing program 2 (id=1491): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r0, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000240)=0x6, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x90412000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) recvmmsg(r0, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) 7m51.810849742s ago: executing program 33 (id=1491): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r0, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000240)=0x6, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x90412000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) recvmmsg(r0, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) 4m57.99254292s ago: executing program 6 (id=2037): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000000d000)=""/102392, 0x18ff8) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f0000000c40)={{0x80}, 'port1\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x1000004, 0x4, 0xfffffffd, 0x0, 0x7cce8c743ee810df}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x40505330, &(0x7f0000000bc0)={0x800100, 0x0, 0x0, 0x724f, 0x0, 0x55a}) 4m56.795889439s ago: executing program 6 (id=2040): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x42c01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000002c0)={"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"}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x2, 0x1, 0x1000, 0x2000, &(0x7f0000ff2000/0x2000)=nil}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f00000001c0)=0x1fff) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$nl_route(0x10, 0x3, 0x0) getpid() setns(0xffffffffffffffff, 0x24020000) mount(0x0, 0x0, 0x0, 0x3209864, 0x0) syz_clone(0xb2b60000, 0x0, 0xfffffffffffffcd1, 0x0, 0x0, 0x0) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) 4m54.596859263s ago: executing program 6 (id=2045): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0xfffffffd, &(0x7f0000000600)) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv6/conf/all/forwarding\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='1', 0x1) 4m51.990820636s ago: executing program 6 (id=2055): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'dummy0\x00', @remote}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r2) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\v'], 0x48) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r5) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r7, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0xffffffffffffffff, 0x1, 0x2000}}, 0x10, 0x0}, 0x4040000) 4m51.00841393s ago: executing program 6 (id=2057): socket(0x10, 0x803, 0x0) syz_emit_ethernet(0x76, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000008e}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) clock_adjtime(0x0, &(0x7f0000000280)={0x1000000000066fb, 0x800000000004, 0x376, 0x0, 0x0, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x200000240b, 0x3f, 0x9, 0x0, 0x80, 0xfffffffffffffffd, 0x1fff, 0xfffffffffffffffc, 0x4, 0x1010000000000, 0x0, 0xffff, 0x100000000003f89, 0x0, 0x7fffffffffffffff}) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @any, 0x6}, 0xa) 4m49.299754892s ago: executing program 6 (id=2065): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(0x0, 0x3, &(0x7f0000000140)={0x2, 0x3}, 0x0) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r3, &(0x7f0000019380)={'#! ', './file0', [{0x20, '\x15\xe6\x8e\\\xfe\x15^\xca\xbb\x88B\xeb\x90FAv\xdc\xbc\x1eiU\b\xc2D\xdb\xca\x9d\xb4oL\xe92\x7f+\f\x0e\xfd\xceTC\x1f;u\x84E\x04\xe3B19xO\xc2\xd4.Mp\xf4\x80{e\x87\xc4V\xe0\x99\x99\x8b\x93I\x8a\xb3\xce*\x9b\xd0X\aA0S\x02k\xdb\x12\v\x9c\x10nY\x85\x92\xf6\x93\xc4%\x0f\x80.\x8d\x9b\x15\x8e\xf4LWr\x14\x9eKh\x97L\xb4\x03\xe9=\x8e\xff\xf0\xb1al\xb6\xc9\xa1/L\x8c7\xa0\x8eD\x1f,\x93`\xc0h\xacjGx\xb8\x9cv\x99bA\xc5]\b\xf8\xa5\x9b\x1c\xeeKB\xdd\xe8\xbboT\x90\x84k\xae\xb5\xfa\xd9\x0f\xd4T<\x0f\xdb\xec\x05HcN\xae;\x87\x00\x00\x00\x00\b\x92\xa7\xdf\x1dS\x00\x8b\x81\xf4\x84X*\xa6e\x922|FO\v\xa6\x17jG\xe3]'}]}, 0xe4) close(r3) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r4, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000019100)={[&(0x7f0000000200)=' ']}) 4m33.501042076s ago: executing program 34 (id=2065): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(0x0, 0x3, &(0x7f0000000140)={0x2, 0x3}, 0x0) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r3, &(0x7f0000019380)={'#! ', './file0', [{0x20, '\x15\xe6\x8e\\\xfe\x15^\xca\xbb\x88B\xeb\x90FAv\xdc\xbc\x1eiU\b\xc2D\xdb\xca\x9d\xb4oL\xe92\x7f+\f\x0e\xfd\xceTC\x1f;u\x84E\x04\xe3B19xO\xc2\xd4.Mp\xf4\x80{e\x87\xc4V\xe0\x99\x99\x8b\x93I\x8a\xb3\xce*\x9b\xd0X\aA0S\x02k\xdb\x12\v\x9c\x10nY\x85\x92\xf6\x93\xc4%\x0f\x80.\x8d\x9b\x15\x8e\xf4LWr\x14\x9eKh\x97L\xb4\x03\xe9=\x8e\xff\xf0\xb1al\xb6\xc9\xa1/L\x8c7\xa0\x8eD\x1f,\x93`\xc0h\xacjGx\xb8\x9cv\x99bA\xc5]\b\xf8\xa5\x9b\x1c\xeeKB\xdd\xe8\xbboT\x90\x84k\xae\xb5\xfa\xd9\x0f\xd4T<\x0f\xdb\xec\x05HcN\xae;\x87\x00\x00\x00\x00\b\x92\xa7\xdf\x1dS\x00\x8b\x81\xf4\x84X*\xa6e\x922|FO\v\xa6\x17jG\xe3]'}]}, 0xe4) close(r3) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r4, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000019100)={[&(0x7f0000000200)=' ']}) 1m46.055121069s ago: executing program 4 (id=2563): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x189) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, 0x0, 0x8000) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0xf, &(0x7f0000001840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8000000}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1b}}, {}, [], {{}, {0x6, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m35.689254871s ago: executing program 4 (id=2578): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c"], 0x0, 0x26}, 0x28) socket$inet6(0xa, 0x2, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syslog(0x3, &(0x7f0000000000)=""/185, 0x64075da62934d5d1) 1m31.530735393s ago: executing program 4 (id=2585): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) socket$kcm(0x2, 0x200000000000001, 0x106) r3 = semget(0x3, 0x4, 0x69c) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) semop(r3, 0x0, 0x0) semop(r3, &(0x7f0000000340)=[{0x2, 0x7f, 0x1800}, {0x1, 0xbbdb, 0x1000}, {0x1, 0x5}], 0x3) semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000140)=[0x6, 0x7fff]) 1m29.742302526s ago: executing program 4 (id=2587): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x740, 0x0) eventfd(0x80) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) pipe2$9p(&(0x7f00000001c0), 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) write$UHID_CREATE2(r0, &(0x7f00000001c0)=ANY=[@ANYRES32=r1], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f0000000000)) 1m27.791276404s ago: executing program 4 (id=2591): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000680)={{{@in6=@ipv4, @in6=@private1}}, {{@in6=@private1}, 0x0, @in6=@mcast1}}, 0x0) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000080)={0xffffffff, 0x0, 0xfff, 0x1, 0xb, "e8a872c03d775900", 0x7, 0x7}) ioctl$VIDIOC_ENUMOUTPUT(r1, 0xc0485630, &(0x7f00000004c0)={0x7f, "557ad86fe33e8f2ded1c369ea7d4eaee11851e8f489d5793d10330445c1df700", 0x1, 0x8, 0x0, 0x320000, 0x8}) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, &(0x7f0000000280)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) setsockopt$PNPIPE_ENCAP(r3, 0x113, 0x1, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) mount$9p_unix(&(0x7f0000000300)='./cgroup\x00', &(0x7f0000000340)='./cgroup\x00', &(0x7f0000000380), 0x0, &(0x7f0000000280)={'trans=unix,', {[{@dfltuid}, {@version_9p2000}]}}) lsetxattr$trusted_overlay_redirect(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, 0x0, 0x1) capset(&(0x7f0000000000)={0x20080522}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x81, 0xfffffdff, 0x5}) llistxattr(0x0, 0x0, 0x0) 1m27.184885279s ago: executing program 4 (id=2598): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x2) syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x15) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, 0x7, 0x6, 0x201, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x4044050) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) mount(0x0, &(0x7f0000000200)='./nfs_mnt\x00', &(0x7f0000000240)='nfs4\x00', 0x0, &(0x7f0000000280)='addr=127.0.0.1,port=2049,vers=4.2,softerr\x00') mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="200000001100810001010000000200000e000a000f000000028002002d1f00"/46, 0x2e}], 0x1}, 0x24004880) mprotect(&(0x7f00007eb000/0x3000)=nil, 0x3000, 0x6) syz_usb_connect(0x0, 0x4f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010102fcfc9008b80421054a150102030109023d00010002c00009047abb04930a9607090582ffffff0703060915000000020ae13309050c1020000f6800070595be474b7409050602"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 1m11.607819727s ago: executing program 35 (id=2598): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x2) syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x15) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, 0x7, 0x6, 0x201, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x4044050) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) mount(0x0, &(0x7f0000000200)='./nfs_mnt\x00', &(0x7f0000000240)='nfs4\x00', 0x0, &(0x7f0000000280)='addr=127.0.0.1,port=2049,vers=4.2,softerr\x00') mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="200000001100810001010000000200000e000a000f000000028002002d1f00"/46, 0x2e}], 0x1}, 0x24004880) mprotect(&(0x7f00007eb000/0x3000)=nil, 0x3000, 0x6) syz_usb_connect(0x0, 0x4f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010102fcfc9008b80421054a150102030109023d00010002c00009047abb04930a9607090582ffffff0703060915000000020ae13309050c1020000f6800070595be474b7409050602"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 17.748918818s ago: executing program 0 (id=2743): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000023c0)={0x24, r4, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x20}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x24}}, 0x18) syz_open_dev$admmidi(0x0, 0x20, 0x0) 16.8324154s ago: executing program 7 (id=2746): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', 0x0, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r3, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) connect$inet(r3, &(0x7f0000000240)={0x2, 0x4e23, @private=0xa010100}, 0x10) listen(r3, 0xda8d) accept$inet(r3, 0x0, 0x0) inotify_init() eventfd2(0x4, 0x80000) 15.113387962s ago: executing program 0 (id=2747): syz_emit_ethernet(0x1166, &(0x7f00000025c0)=ANY=[], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r1, 0x0, 0x10, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0x9, 0x3, 0x240, 0x1a8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1a8, 0xffffffff, 0xffffffff, 0x1a8, 0xffffffff, 0x3, &(0x7f0000000080), {[{{@ip={@loopback, @multicast1, 0xffffff00, 0x0, 'nr0\x00', 'team0\x00', {}, {0xff}, 0x67, 0x3}, 0x0, 0x98, 0xd8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x5, 0x4, 0x3, 0x8, 0xf99f, 0x2, 0x7, 0x100]}}}, {{@ip={@multicast1, @local, 0xffffffff, 0x0, 'team_slave_0\x00', 'team_slave_1\x00', {0xff}, {}, 0x9, 0x3185c8a964a7646a, 0x35}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x1, 0x3, 0x2, 0x2, 0x7, 0x4], 0x6, 0x2}, {0xffffffffffffffff, [0x0, 0x4, 0x1, 0x47667d0cf23d5cfe, 0x0, 0x1], 0x4, 0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"/627], 0x268}, 0x1, 0x0, 0x0, 0x41}, 0x20004c00) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000600)={r2, r2, 0x8, 0x0, 0x0, 0x6, 0xfe, 0x10d2, 0x5, 0x5, 0x2, 0x1, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r4, 0x800448d2, &(0x7f00000000c0)={0x1, &(0x7f0000000f00)=[{@none}]}) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb86dd6012000800103aff20010000000000000000000000000001ff020000000000000000000000001aaac5898000018600907801000200feffff"], 0x0) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000001080)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001040)={&(0x7f00000010c0)=ANY=[@ANYBLOB="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"], 0x710}, 0x1, 0x0, 0x0, 0x4}, 0x8000) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x23, 0x803, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000010) 15.109503602s ago: executing program 7 (id=2749): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x100000000e2) sendmsg$inet6(0xffffffffffffffff, 0x0, 0xc000) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) keyctl$clear(0x3, 0xfffffffffffffffd) ptrace$ARCH_MAP_VDSO_64(0x1e, r0, 0x7, 0x2003) syz_open_dev$usbmon(&(0x7f0000000280), 0x8000000, 0x200) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) unshare(0x64000400) 13.311254445s ago: executing program 0 (id=2753): fsopen(&(0x7f0000000300)='nfs4\x00', 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='devtmpfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r3, &(0x7f0000000400)=""/4096, 0xc00) ioctl$DVB_DEMUX_DMX_QBUF(r3, 0xc0186f3f, &(0x7f0000000080)={0x8, 0x2, 0x5, 0x1, 0x2}) 13.14071174s ago: executing program 7 (id=2755): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c"], 0x0, 0x26}, 0x28) r2 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_buf(r2, 0x29, 0x20, 0x0, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syslog(0x3, &(0x7f0000000000)=""/185, 0x64075da62934d5d1) 12.169727983s ago: executing program 0 (id=2758): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001c40)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) gettid() timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r2, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r2, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9}) unshare(0x22020400) fcntl$lock(r2, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x25, 0x5}) fcntl$lock(r2, 0x7, &(0x7f00000000c0)={0x1, 0x2, 0x8, 0x73e9}) 12.114345635s ago: executing program 7 (id=2760): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000023c0)={0x24, r4, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x20}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x24}}, 0x18) syz_open_dev$admmidi(0x0, 0x20, 0x0) 11.788792403s ago: executing program 1 (id=2762): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x7d69b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000020c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r3 = syz_io_uring_setup(0xd3a, &(0x7f0000000080)={0x0, 0x2, 0x3010, 0x3, 0xe3}, &(0x7f0000000000), &(0x7f0000000140), &(0x7f0000000180)) syz_io_uring_setup(0x25fb, &(0x7f0000000000)={0x0, 0x42a, 0x400, 0x0, 0x64}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x2000) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, &(0x7f0000000140)={0x1, 0x2, 0xffffffff, 0x0, 0x4eb}) r5 = eventfd2(0x1, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, &(0x7f0000000200)=r5, 0x1) 10.989360482s ago: executing program 7 (id=2764): syz_emit_ethernet(0x1166, &(0x7f00000025c0)=ANY=[], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r1, 0x0, 0x10, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0x9, 0x3, 0x240, 0x1a8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1a8, 0xffffffff, 0xffffffff, 0x1a8, 0xffffffff, 0x3, &(0x7f0000000080), {[{{@ip={@loopback, @multicast1, 0xffffff00, 0x0, 'nr0\x00', 'team0\x00', {}, {0xff}, 0x67, 0x3}, 0x0, 0x98, 0xd8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x5, 0x4, 0x3, 0x8, 0xf99f, 0x2, 0x7, 0x100]}}}, {{@ip={@multicast1, @local, 0xffffffff, 0x0, 'team_slave_0\x00', 'team_slave_1\x00', {0xff}, {}, 0x9, 0x3185c8a964a7646a, 0x35}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x1, 0x3, 0x2, 0x2, 0x7, 0x4], 0x6, 0x2}, {0xffffffffffffffff, [0x0, 0x4, 0x1, 0x47667d0cf23d5cfe, 0x0, 0x1], 0x4, 0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"/627], 0x268}, 0x1, 0x0, 0x0, 0x41}, 0x20004c00) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000600)={r2, r2, 0x8, 0x0, 0x0, 0x6, 0xfe, 0x10d2, 0x5, 0x5, 0x2, 0x1, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r4, 0x800448d2, &(0x7f00000000c0)={0x1, &(0x7f0000000f00)=[{@none}]}) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb86dd6012000800103aff20010000000000000000000000000001ff020000000000000000000000001aaac5898000018600907801000200feffff"], 0x0) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000001080)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001040)={&(0x7f00000010c0)=ANY=[@ANYBLOB="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"], 0x710}, 0x1, 0x0, 0x0, 0x4}, 0x8000) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x23, 0x803, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000010) 9.582993866s ago: executing program 1 (id=2766): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x100000000e2) sendmsg$inet6(0xffffffffffffffff, 0x0, 0xc000) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) keyctl$clear(0x3, 0xfffffffffffffffd) ptrace$ARCH_MAP_VDSO_64(0x1e, r0, 0x7, 0x2003) syz_open_dev$usbmon(&(0x7f0000000280), 0x8000000, 0x200) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) unshare(0x64000400) 9.235657035s ago: executing program 7 (id=2767): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) connect$pptp(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x2, {0x0, @empty}}, 0x1e) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0xd}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xa, 0x80, 0x3, 0x0, 0x10}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 7.911589477s ago: executing program 5 (id=2769): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000028060001001a"], 0x1c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000280)=0x15) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x2042, 0x0) 5.466876896s ago: executing program 1 (id=2770): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c"], 0x0, 0x26}, 0x28) r2 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_buf(r2, 0x29, 0x20, 0x0, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syslog(0x3, &(0x7f0000000000)=""/185, 0x64075da62934d5d1) 5.466243647s ago: executing program 8 (id=2771): fsopen(&(0x7f0000000300)='nfs4\x00', 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='devtmpfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r3, &(0x7f0000000400)=""/4096, 0xc00) ioctl$DVB_DEMUX_DMX_QBUF(r3, 0xc0186f3f, &(0x7f0000000080)={0x8, 0x2, 0x5, 0x1, 0x2}) 5.457495826s ago: executing program 5 (id=2772): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0x80140, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_har']) setresuid(0x0, 0xee00, 0x0) symlink(0x0, &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r1 = socket(0x40000000015, 0x5, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x41000004, &(0x7f0000000040)) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) 5.411187537s ago: executing program 0 (id=2773): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c"], 0x0, 0x26}, 0x28) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) syslog(0x3, &(0x7f0000000000)=""/185, 0x64075da62934d5d1) 4.418343262s ago: executing program 1 (id=2774): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000023c0)={0x24, r4, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x20}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x24}}, 0x18) syz_open_dev$admmidi(0x0, 0x20, 0x0) 4.412754862s ago: executing program 8 (id=2775): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd27, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b'}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@newtfilter={0x60, 0x2c, 0x400, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff2, 0xffff}, {0xffff, 0x3}, {0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_IPV4_DST_MASK={0x8, 0xd, 0xffffffff}, @TCA_FLOWER_KEY_CT_LABELS_MASK={0x14, 0x62, "22d2b6b4d255581f0300000600"}]}}, @TCA_RATE={0x6, 0x5, {0xe, 0xc0}}, @TCA_RATE={0x6, 0x5, {0x8d, 0x4}}]}, 0x60}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c000280080001000100000014"], 0x74}}, 0x24005000) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r6, 0x29, 0x31, &(0x7f0000000040)=0xffdffffc, 0x4) bind$inet6(r6, &(0x7f0000f65000)={0xa, 0x4e20, 0x97f, @loopback}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000100)={0xa, 0x4e20, 0x23e, @empty}, 0x1c) getsockopt$inet6_buf(r6, 0x29, 0x6, 0x0, &(0x7f0000000080)) ioctl$sock_bt_hci(r5, 0x400448cb, &(0x7f0000000cc0)) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000215c0000000c0a01030000000000000000070000090900020073797a31000000000900010073797a3000000000300003802c000080080003400000000220000b801c0001800a0001006c696d69740000000c0002800800044000000001140000001000010000000000000000000084000a3f69e0a5c095addb78e74f690a4fe4fb41c6704979361998de8ec5"], 0xe0}}, 0x0) 3.599626642s ago: executing program 8 (id=2776): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', 0x0, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r3, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) connect$inet(r3, &(0x7f0000000240)={0x2, 0x4e23, @private=0xa010100}, 0x10) listen(r3, 0xda8d) accept$inet(r3, 0x0, 0x0) inotify_init() eventfd2(0x4, 0x80000) 3.597976552s ago: executing program 5 (id=2786): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000140)='2\x00', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nullb/nullb1/completion_nsec\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='100000000\x00', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nullb/nullb1/power\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='1\x00', 0x1) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/nullb1\x00', 0x4002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./debug\x00', &(0x7f0000000380)='debugfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/block/nullb1/hctx0/busy\x00', 0x0, 0x0) read(r3, &(0x7f0000002000)=""/4096, 0x1000) 3.048194585s ago: executing program 1 (id=2777): socket(0x8, 0x80000, 0xfb) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002c80)="c1e201", 0x3}, 0x1, 0x0, 0x0, 0x24044014}, 0x40000050) socket$nl_xfrm(0x10, 0x3, 0x6) mount(0x0, &(0x7f0000000340)='./cfg\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./ffs\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x10) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f0000002380)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, 0x0, 0x1fa) mount(&(0x7f0000000280)=@filename='usb0\x00', &(0x7f0000000200)='./ffs\x00', &(0x7f0000000240), 0x0, 0x0) getpid() setns(0xffffffffffffffff, 0x24020000) 2.4493178s ago: executing program 5 (id=2778): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000028060001001a"], 0x1c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r3) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000280)=0x15) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, 0x0) 2.427894561s ago: executing program 8 (id=2779): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x7d69b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000020c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) syz_io_uring_setup(0xd3a, &(0x7f0000000080)={0x0, 0x2, 0x3010, 0x3, 0xe3}, &(0x7f0000000000), &(0x7f0000000140), &(0x7f0000000180)) syz_io_uring_setup(0x25fb, &(0x7f0000000000)={0x0, 0x42a, 0x400, 0x0, 0x64}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) 1.313139877s ago: executing program 8 (id=2780): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) setregid(0xffffffffffffffff, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioprio_get$uid(0x3, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, 0x0, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x42000000) 1.311961777s ago: executing program 5 (id=2791): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000028060001001a"], 0x1c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r3) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000280)=0x15) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, 0x0) 48.663938ms ago: executing program 5 (id=2781): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000800)='./file2\x00', 0x0, &(0x7f0000000100)={[{@uni_xlate}, {@fat=@gid={'gid', 0x3d, 0xee00}}, {@shortname_win95}, {@rodir}, {@uni_xlateno}]}, 0x1, 0x305, &(0x7f0000002480)="$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") utime(&(0x7f0000000000)='.\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x804, &(0x7f0000000380)={[{@shortname_winnt}, {@shortname_win95}, {@utf8}, {@rodir}, {@shortname_mixed}, {@shortname_winnt}, {@rodir}, {@shortname_win95}, {@shortname_lower}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@uni_xlate}, {@rodir}, {@shortname_mixed}, {@shortname_lower}, {@uni_xlateno}]}, 0x1, 0x287, &(0x7f0000002300)="$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") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x2808080, &(0x7f0000000100)={[{@uni_xlate}, {@shortname_win95}, {@uni_xlateno}, {@uni_xlate}, {@utf8}, {@fat=@errors_remount}, {@uni_xlateno}, {@uni_xlate}, {@utf8}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}, {@fat=@errors_continue}, {@shortname_mixed}]}, 0x81, 0x2bc, &(0x7f0000000280)="$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") r0 = fsopen(&(0x7f0000000000)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) fsmount(0xffffffffffffffff, 0x1, 0x70) mount(0x0, &(0x7f00000001c0)='127.0.0.1:/\x00', 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r3, 0x0, 0xee01) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000140)={[{@nossd_spread}, {@nodatasum}, {@compress_force}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@flushoncommit}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x30, 0x37, 0x65]}}, {@nodiscard}]}, 0xfb, 0x510a, &(0x7f000000d000)="$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") fchmodat(0xffffffffffffff9c, 0x0, 0xffffff69) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', 0x0) 47.489228ms ago: executing program 1 (id=2793): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000028060001001a"], 0x1c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000280)=0x15) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, 0x0) 3.634099ms ago: executing program 0 (id=2782): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000028060001001a"], 0x1c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r3) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000280)=0x15) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x2042, 0x0) 0s ago: executing program 8 (id=2783): bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) socket$netlink(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x64) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) socket$inet6_sctp(0xa, 0x1, 0x84) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$rfkill(r0, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000002780)={{r1}, 0x0, 0x4, @inherit={0x60, &(0x7f0000000580)={0x0, 0x3, 0xa5b, 0x4, {0x9, 0x1, 0xfffffffffffffff9, 0x8, 0x5}, [0x2, 0x6, 0x4]}}, @name="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"}) recvmsg$unix(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=@base={0x16, 0x0, 0xb161, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, 0x0, 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0), 0x4) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) kernel console output (not intermixed with test programs): 302.139962][ T8158] device bond2 entered promiscuous mode [ 302.775386][ T8179] overlayfs: failed to clone upperpath [ 303.920144][ T8193] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1103'. [ 304.221284][ C1] net_ratelimit: 22 callbacks suppressed [ 305.061178][ T8218] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 305.107748][ T8218] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 305.182320][ T8218] device bridge_slave_0 left promiscuous mode [ 305.192433][ C0] bridge0: received packet on veth1_to_bond with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 305.224832][ T8218] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.955698][ T8218] device bridge_slave_1 left promiscuous mode [ 305.978941][ T8218] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.025888][ T8218] bond1: (slave veth0_to_bond): Releasing active interface [ 306.106955][ T8218] bond0: (slave bond_slave_0): Releasing backup interface [ 306.144179][ T8218] device bond_slave_0 left promiscuous mode [ 306.307591][ T8218] device veth1_to_bond left promiscuous mode [ 306.321490][ T8218] bridge0: port 3(veth1_to_bond) entered disabled state [ 306.340898][ T8218] bond0: (slave bond_slave_1): Releasing backup interface [ 307.364729][ T8218] device bond_slave_1 left promiscuous mode [ 307.397732][ T8218] device team_slave_0 left promiscuous mode [ 307.467962][ T8218] team0: Port device team_slave_0 removed [ 307.485078][ T8218] device team_slave_1 left promiscuous mode [ 307.513184][ T8218] team0: Port device team_slave_1 removed [ 307.531133][ T8218] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 307.547503][ T8218] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 307.565577][ T8218] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 307.587014][ T8218] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 307.617214][ T8218] bond0: (slave wlan1): Releasing backup interface [ 307.647234][ T8218] device wlan1 left promiscuous mode [ 307.673625][ T8218] bond2: (slave veth3): Releasing backup interface [ 307.699137][ T8218] bond0: (slave macvlan2): Releasing backup interface [ 307.717479][ T8218] device macvlan2 left promiscuous mode [ 307.731514][ T8218] device team0 left promiscuous mode [ 307.753662][ T8218] device vlan2 left promiscuous mode [ 307.766813][ T8218] device bond0 left promiscuous mode [ 307.778174][ T8218] bridge0: port 4(vlan2) entered disabled state [ 307.797828][ T8222] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1112'. [ 307.848414][ T8237] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 307.862951][ T8237] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 307.976084][ T8239] netlink: 'syz.1.1117': attribute type 8 has an invalid length. [ 307.990898][ T8239] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1117'. [ 308.083820][ T8241] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 308.121799][ T8249] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1119'. [ 308.219815][ T8255] bridge1: port 1(erspan0) entered blocking state [ 308.228565][ T8255] bridge1: port 1(erspan0) entered disabled state [ 308.258311][ T8255] device erspan0 entered promiscuous mode [ 308.424601][ T8260] loop2: detected capacity change from 0 to 128 [ 309.351577][ T6012] net_ratelimit: 10 callbacks suppressed [ 310.659268][ T8281] netlink: 180 bytes leftover after parsing attributes in process `syz.5.1129'. [ 311.046210][ T8285] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1132'. [ 311.219391][ T8260] EXT4-fs error (device loop2): __ext4_fill_super:5465: inode #2: comm syz.2.1123: iget: checksum invalid [ 311.245324][ T8260] EXT4-fs (loop2): get root inode failed [ 311.953392][ T8260] EXT4-fs (loop2): mount failed [ 313.302636][ T6022] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 313.768451][ T8327] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1139'. [ 314.041545][ T8330] netlink: 'syz.0.1152': attribute type 30 has an invalid length. [ 314.075840][ T8332] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1142'. [ 314.088596][ T8330] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1152'. [ 315.111447][ C1] net_ratelimit: 8 callbacks suppressed [ 315.696539][ T8349] fuse: Bad value for 'fd' [ 317.215531][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.221896][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.151845][ T8368] device syzkaller0 entered promiscuous mode [ 319.891271][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 319.901270][ T0] NOHZ tick-stop error: local softirq work is pending, handler #20a!!! [ 319.911266][ T0] NOHZ tick-stop error: local softirq work is pending, handler #20a!!! [ 320.221317][ C0] net_ratelimit: 9 callbacks suppressed [ 322.118002][ T8415] loop0: detected capacity change from 0 to 2048 [ 322.164792][ T8415] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 322.666896][ T8427] tipc: Failed to remove unknown binding: 66,0,0/0:990013412/990013414 [ 322.667019][ T8427] tipc: Failed to remove unknown binding: 66,0,0/0:990013412/990013413 [ 322.667745][ T8427] tipc: Failed to remove unknown binding: 66,0,0/0:990013412/990013414 [ 322.667864][ T8427] tipc: Failed to remove unknown binding: 66,0,0/0:990013412/990013413 [ 323.584354][ T8425] overlayfs: missing 'lowerdir' [ 323.590388][ T8425] overlayfs: bad mount option "redirect_dir=nofollow:/" [ 323.674683][ C0] vkms_vblank_simulate: vblank timer overrun [ 323.878802][ T4275] EXT4-fs (loop0): unmounting filesystem. [ 323.959750][ T8445] loop0: detected capacity change from 0 to 256 [ 324.000324][ T8445] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 324.044324][ T27] kauditd_printk_skb: 6 callbacks suppressed [ 324.044337][ T27] audit: type=1800 audit(2000000179.090:748): pid=8445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1178" name="file1" dev="loop0" ino=1048678 res=0 errno=0 [ 324.116491][ T4319] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 324.121844][ T27] audit: type=1800 audit(2000000179.150:749): pid=8445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1178" name="file1" dev="loop0" ino=1048678 res=0 errno=0 [ 324.331808][ T4319] usb 3-1: Using ep0 maxpacket: 32 [ 324.338987][ T4319] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 324.364002][ T4319] usb 3-1: config 0 has no interfaces? [ 324.376309][ T4319] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 324.397139][ T4319] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.444267][ T4319] usb 3-1: config 0 descriptor?? [ 325.866167][ T8470] loop0: detected capacity change from 0 to 1024 [ 325.873693][ T8470] ext4: Unknown parameter 'nouser_xattr' [ 325.926211][ T8418] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 325.981358][ C1] net_ratelimit: 8 callbacks suppressed [ 326.333712][ T8476] xt_cgroup: invalid path, errno=-2 [ 328.149336][ T8478] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1193'. [ 329.674516][ T4322] usb 3-1: USB disconnect, device number 3 [ 330.770613][ T8500] loop0: detected capacity change from 0 to 256 [ 330.861207][ T8500] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 330.893686][ T8500] syz.0.1196: attempt to access beyond end of device [ 330.893686][ T8500] loop0: rw=524288, sector=34359738488, nr_sectors = 8 limit=256 [ 330.993263][ T8500] syz.0.1196: attempt to access beyond end of device [ 330.993263][ T8500] loop0: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 331.111509][ T4302] net_ratelimit: 9 callbacks suppressed [ 331.157460][ T27] audit: type=1800 audit(2000000186.200:750): pid=8500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1196" name="file1" dev="loop0" ino=1048680 res=0 errno=0 [ 333.152067][ T8588] netlink: 'syz.5.1209': attribute type 2 has an invalid length. [ 333.160013][ T8586] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 333.172323][ T8586] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 335.176704][ T8620] loop2: detected capacity change from 0 to 512 [ 335.202885][ T8620] EXT4-fs: Ignoring removed nobh option [ 335.288138][ T8620] fscrypt (loop2, inode 2): Error -61 getting encryption context [ 335.312315][ T8620] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -61 [ 335.358404][ T8620] EXT4-fs error (device loop2): ext4_orphan_get:1409: inode #13: comm syz.2.1218: inode has both inline data and extents flags [ 335.420191][ T8620] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm syz.2.1218: couldn't read orphan inode 13 (err -117) [ 335.480324][ T8620] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 335.907557][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 335.986137][ T8641] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1222'. [ 336.221276][ C0] net_ratelimit: 7 callbacks suppressed [ 336.935591][ T8647] netlink: 'syz.2.1223': attribute type 1 has an invalid length. [ 337.020567][ T8651] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1225'. [ 337.144223][ T8647] 8021q: adding VLAN 0 to HW filter on device bond3 [ 337.303738][ T8648] bond3: (slave geneve2): making interface the new active one [ 337.361139][ T8648] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 337.401491][ T8658] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1227'. [ 337.413364][ T8524] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 337.473675][ T8648] syz.2.1223 (8648) used greatest stack depth: 18576 bytes left [ 339.832069][ T8677] netlink: 'syz.4.1234': attribute type 2 has an invalid length. [ 339.860295][ T8677] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1234'. [ 340.088861][ T8688] loop2: detected capacity change from 0 to 512 [ 340.135975][ T8688] FAT-fs (loop2): Unrecognized mount option "ÿÿÿÿÿ01777777777777777777777" or missing value [ 340.188969][ T8688] bond0: (slave netdevsim0): Error: Device can not be enslaved while up [ 340.317429][ T8694] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1250'. [ 340.398537][ T8698] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1240'. [ 340.689140][ T8693] bridge0: port 3(vlan2) entered disabled state [ 340.877395][ T8693] device team0 left promiscuous mode [ 340.883377][ T8693] device team_slave_0 left promiscuous mode [ 340.893751][ T8693] device team_slave_1 left promiscuous mode [ 340.950739][ T8703] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1243'. [ 340.992715][ T8704] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1242'. [ 341.012610][ T8703] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1243'. [ 341.173446][ T8720] loop2: detected capacity change from 0 to 512 [ 341.252503][ T8720] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 341.346081][ T8533] net_ratelimit: 7 callbacks suppressed [ 341.379471][ T8720] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1246: invalid indirect mapped block 9 (level 0) [ 342.177623][ T8720] EXT4-fs (loop2): 1 truncate cleaned up [ 342.193824][ T8720] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 342.373508][ T8745] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 342.645930][ T8750] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1258'. [ 342.657429][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 342.865614][ T8754] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1259'. [ 342.885071][ T8755] jffs2: notice: (8755) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 342.958734][ T8757] sctp: [Deprecated]: syz.4.1261 (pid 8757) Use of struct sctp_assoc_value in delayed_ack socket option. [ 342.958734][ T8757] Use struct sctp_sack_info instead [ 343.034134][ T8759] overlayfs: failed to clone upperpath [ 346.302750][ T8752] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.312211][ T8752] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.321104][ T8752] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.330309][ T8752] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.346741][ T8782] tipc: Started in network mode [ 346.354366][ T8782] tipc: Node identity bace790e2c31, cluster identity 4711 [ 346.371330][ T8782] tipc: Enabled bearer , priority 0 [ 346.391110][ T8784] netlink: 'syz.0.1270': attribute type 1 has an invalid length. [ 346.413569][ T8524] net_ratelimit: 26 callbacks suppressed [ 347.849265][ T8822] netlink: 'syz.5.1281': attribute type 1 has an invalid length. [ 347.929955][ T8822] 8021q: adding VLAN 0 to HW filter on device bond3 [ 347.949860][ T8823] bond3: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 348.038196][ T8824] device bond3 entered promiscuous mode [ 348.077600][ T8825] device macvlan3 entered promiscuous mode [ 348.113681][ T8825] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 348.257325][ T8839] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1285'. [ 349.309382][ T4319] tipc: Node number set to 2533325070 [ 349.319194][ T8843] tipc: Enabling of bearer rejected, failed to enable media [ 349.403553][ T8850] bond3: (slave gretap0): Enslaving as an active interface with an up link [ 349.635413][ T8839] bond3 (unregistering): (slave gretap0): Releasing backup interface [ 349.713114][ T8839] bond3 (unregistering): Released all slaves [ 349.994906][ T8864] device veth1_to_bond entered promiscuous mode [ 350.012973][ T8864] bridge0: port 1(veth1_to_bond) entered blocking state [ 350.089970][ T8864] bridge0: port 1(veth1_to_bond) entered disabled state [ 350.416638][ T8869] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1293'. [ 350.522231][ T8869] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1293'. [ 350.535038][ T8869] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1293'. [ 350.592598][ T8869] bond4: (slave veth3): Enslaving as an active interface with an up link [ 354.023441][ T8910] loop0: detected capacity change from 0 to 256 [ 354.349647][ T8925] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1305'. [ 354.384414][ T8928] ip_tables: iptables: counters copy to user failed while replacing table [ 355.401503][ T8947] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 355.519437][ T8953] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1313'. [ 355.691282][ T4276] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 355.951559][ T4276] usb 3-1: unable to get BOS descriptor or descriptor too short [ 355.968280][ T4276] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 355.987301][ T4276] usb 3-1: can't read configurations, error -71 [ 356.237409][ T8970] device vlan2 left promiscuous mode [ 356.249644][ T8970] device bond0 left promiscuous mode [ 356.267119][ T8970] device bond_slave_1 left promiscuous mode [ 356.282622][ T8970] device wlan1 left promiscuous mode [ 356.295783][ T8970] device macvlan2 left promiscuous mode [ 356.320225][ T8970] bridge0: port 3(vlan2) entered disabled state [ 356.341146][ T8970] device bridge_slave_1 left promiscuous mode [ 356.356757][ T8970] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.377719][ T8970] device bridge_slave_0 left promiscuous mode [ 356.397569][ T8970] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.982237][ T8538] net_ratelimit: 1 callbacks suppressed [ 358.356074][ T8991] loop0: detected capacity change from 0 to 512 [ 358.945087][ T8991] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 360.273869][ T4275] EXT4-fs (loop0): unmounting filesystem. [ 360.433903][ T9034] loop0: detected capacity change from 0 to 512 [ 360.459125][ T9034] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 360.504215][ T9034] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 360.537127][ T9034] System zones: 1-12 [ 360.568454][ T9034] EXT4-fs error (device loop0): ext4_orphan_get:1435: comm syz.0.1334: bad orphan inode 131072 [ 360.620321][ T9034] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 360.659310][ T9039] netlink: 'syz.1.1335': attribute type 8 has an invalid length. [ 360.726991][ T9034] EXT4-fs (loop0): shut down requested (0) [ 361.041744][ T4275] EXT4-fs (loop0): unmounting filesystem. [ 361.318515][ T9046] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1338'. [ 361.419147][ T9048] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1339'. [ 361.528117][ T27] audit: type=1800 audit(2000000216.570:751): pid=9052 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1340" name="protocol" dev="configfs" ino=56362 res=0 errno=0 [ 363.104148][ T8542] net_ratelimit: 3 callbacks suppressed [ 363.119291][ T9080] netlink: 'syz.4.1351': attribute type 8 has an invalid length. [ 363.570825][ T9096] IPVS: set_ctl: invalid protocol: 142 172.20.20.45:20004 [ 363.580787][ T9096] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1357'. [ 365.060725][ T9116] bond0 speed is unknown, defaulting to 1000 [ 365.067433][ T9116] bond0 speed is unknown, defaulting to 1000 [ 365.080431][ T9116] bond0 speed is unknown, defaulting to 1000 [ 365.105563][ T9116] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 365.144848][ T9116] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 365.290646][ T9116] bond0 speed is unknown, defaulting to 1000 [ 365.302926][ T9116] bond0 speed is unknown, defaulting to 1000 [ 365.310086][ T9116] bond0 speed is unknown, defaulting to 1000 [ 365.317321][ T9116] bond0 speed is unknown, defaulting to 1000 [ 365.324573][ T9116] bond0 speed is unknown, defaulting to 1000 [ 365.332083][ T9116] bond0 speed is unknown, defaulting to 1000 [ 370.670048][ T9172] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 370.679013][ T9172] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 370.687825][ T9172] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 370.696629][ T9172] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 370.813720][ T9174] Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 370.948716][ T9172] device vxlan0 entered promiscuous mode [ 370.982955][ T9172] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 371.065628][ T9176] loop2: detected capacity change from 0 to 256 [ 371.128413][ T9176] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 371.181901][ T9176] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 371.248460][ T9176] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 371.334172][ T9176] exFAT-fs (loop2): failed to load alloc-bitmap [ 371.340532][ T9176] exFAT-fs (loop2): failed to recognize exfat type [ 372.774054][ T8532] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.878954][ T9205] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1366'. [ 373.048403][ T8532] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.072975][ T9205] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1366'. [ 373.286060][ T8532] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.418626][ T8532] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.918261][ T9221] syz.5.1400 (9221) used greatest stack depth: 17072 bytes left [ 374.451127][ T8532] tipc: Disabling bearer [ 374.494282][ T8532] tipc: Left network mode [ 378.465527][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.483066][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.546919][ T8532] device ip6gretap0 left promiscuous mode [ 378.871260][ C1] net_ratelimit: 1 callbacks suppressed [ 379.508950][ T9281] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1409'. [ 380.547946][ T4291] Bluetooth: hci5: command 0x0406 tx timeout [ 382.103531][ T9325] loop0: detected capacity change from 0 to 4096 [ 382.130121][ T9325] EXT4-fs: Ignoring removed nobh option [ 383.043715][ T9325] EXT4-fs: Ignoring removed bh option [ 383.059099][ T9325] EXT4-fs (loop0): Test dummy encryption mode enabled [ 383.741660][ T9325] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 383.772758][ T27] audit: type=1326 audit(2000000238.820:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9343 comm="syz.1.1422" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7f53c9d97f57 code=0x0 [ 384.861379][ C1] net_ratelimit: 1 callbacks suppressed [ 387.075134][ T9377] bond3: (slave geneve2): Releasing active interface [ 387.085765][ T4275] EXT4-fs (loop0): unmounting filesystem. [ 387.641342][ T4320] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 388.334028][ T4320] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 388.373839][ T4320] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 388.438625][ T4320] usb 1-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice= 1.00 [ 388.495048][ T4320] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.525417][ T4320] usb 1-1: Product: syz [ 388.529624][ T4320] usb 1-1: Manufacturer: syz [ 388.595455][ T4320] usb 1-1: SerialNumber: syz [ 388.685183][ T9408] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 388.732934][ T9408] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 388.814122][ C0] port100 1-1:1.0: NFC: Urb failure (status -71) [ 388.821063][ C0] port100 1-1:1.0: NFC: Urb failure (status -71) [ 388.830154][ T4320] port100 1-1:1.0: NFC: Could not get supported command types [ 389.113475][ T8532] device hsr_slave_0 left promiscuous mode [ 389.163523][ T8532] device hsr_slave_1 left promiscuous mode [ 389.171738][ T4322] usb 1-1: USB disconnect, device number 7 [ 389.568775][ T8532] device veth1_macvtap left promiscuous mode [ 389.582192][ T8532] device veth0_macvtap left promiscuous mode [ 389.615890][ T8532] device veth1_vlan left promiscuous mode [ 389.654090][ T8532] device veth0_vlan left promiscuous mode [ 391.921860][ T8553] net_ratelimit: 10 callbacks suppressed [ 392.630146][ T9467] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 392.746451][ T9467] CIFS: Attempting to mount \\127.0.0.1\share [ 392.789545][ T9467] CIFS: VFS: Error connecting to socket. Aborting operation. [ 392.821879][ T9467] CIFS: VFS: cifs_mount failed w/return code = -101 [ 395.245054][ T8532] bond0 (unregistering): Released all slaves [ 395.389339][ T9477] bond0 speed is unknown, defaulting to 1000 [ 395.878624][ T9477] bond0 speed is unknown, defaulting to 1000 [ 397.403447][ T9523] loop2: detected capacity change from 0 to 1024 [ 397.503462][ T9523] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 397.550433][ T9523] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 397.700922][ T9523] Unsupported ieee802154 address type: 0 [ 397.872128][ T9538] IPVS: sync thread started: state = BACKUP, mcast_ifn = macsec0, syncid = 3, id = 0 [ 398.101302][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 398.458107][ T9550] trusted_key: encrypted_key: insufficient parameters specified [ 399.539417][ T9560] loop0: detected capacity change from 0 to 128 [ 399.546658][ T9560] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 399.566885][ T9560] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 399.621851][ T8546] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 399.820678][ T8526] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 399.967207][ T4322] libceph: connect (2)127.0.0.1:6789 error -101 [ 400.009289][ T4322] libceph: ceph_tcp_connect failed: -101 [ 400.016958][ T9579] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1464'. [ 400.062604][ T4322] libceph: mon0 (2)127.0.0.1:6789 connect error [ 400.198394][ T4276] libceph: connect (2)127.0.0.1:6789 error -101 [ 400.241465][ T4276] libceph: ceph_tcp_connect failed: -101 [ 400.283260][ T4276] libceph: mon0 (2)127.0.0.1:6789 connect error [ 400.594782][ T4276] libceph: connect (2)127.0.0.1:6789 error -101 [ 400.607737][ T4276] libceph: ceph_tcp_connect failed: -101 [ 400.631052][ T4276] libceph: mon0 (2)127.0.0.1:6789 connect error [ 402.055041][ T9571] ceph: No mds server is up or the cluster is laggy [ 403.711859][ T9639] netlink: 'syz.0.1479': attribute type 13 has an invalid length. [ 403.756966][ T9639] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1479'. [ 403.818742][ T9639] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 403.970925][ T9643] loop2: detected capacity change from 0 to 512 [ 404.024944][ T9643] EXT4-fs: inline encryption not supported [ 404.055813][ T9643] EXT4-fs (loop2): Test dummy encryption mode enabled [ 404.087211][ T9643] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 404.153120][ T9643] EXT4-fs error (device loop2): ext4_orphan_get:1435: comm syz.2.1480: bad orphan inode 131083 [ 404.200466][ T9643] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 405.303472][ T9668] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 405.631566][ T9674] device ip6gre1 entered promiscuous mode [ 405.780679][ T9663] EXT4-fs (loop2): unmounting filesystem. [ 405.813414][ T4276] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 405.826217][ T4276] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 405.853457][ T9672] bond0 speed is unknown, defaulting to 1000 [ 405.883819][ T4319] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 405.942845][ T4319] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 406.334681][ T9672] bond0 speed is unknown, defaulting to 1000 [ 406.862557][ T4322] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 407.323531][ T8553] tipc: Disabling bearer [ 407.344759][ T8553] tipc: Left network mode [ 407.908277][ T4286] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 407.922394][ T4286] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 407.937060][ T4286] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 407.954884][ T4286] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 407.968390][ T4286] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 407.978948][ T4286] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 408.531567][ T9692] bond0 speed is unknown, defaulting to 1000 [ 409.226252][ T9692] bond0 speed is unknown, defaulting to 1000 [ 409.372505][ T9720] netlink: 146340 bytes leftover after parsing attributes in process `syz.5.1502'. [ 409.431307][ T9720] openvswitch: netlink: Key type 386 is out of range max 32 [ 409.581353][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 410.061370][ T4291] Bluetooth: hci0: command 0x0409 tx timeout [ 410.907031][ T9737] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1503'. [ 411.508077][ T9749] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1508'. [ 412.141429][ T4291] Bluetooth: hci0: command 0x041b tx timeout [ 412.275340][ T9692] chnl_net:caif_netlink_parms(): no params data found [ 413.206168][ T8553] device hsr_slave_0 left promiscuous mode [ 413.267649][ T8553] device hsr_slave_1 left promiscuous mode [ 413.873231][ T9781] CIFS: Attempting to mount \\127.0.0.1\share [ 413.879583][ T9781] CIFS: VFS: No username specified [ 414.231814][ T4291] Bluetooth: hci0: command 0x040f tx timeout [ 416.316624][ T4291] Bluetooth: hci0: command 0x0419 tx timeout [ 416.729005][ T8553] bond3 (unregistering): Released all slaves [ 416.861347][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 417.723566][ T8553] bond2 (unregistering): Released all slaves [ 418.420222][ T8553] bond1 (unregistering): Released all slaves [ 421.186403][ T9833] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1524'. [ 421.610815][ T8553] bond0 (unregistering): Released all slaves [ 421.771991][ T9692] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.846229][ T9692] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.869389][ T9692] device bridge_slave_0 entered promiscuous mode [ 421.903467][ T9789] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 421.912823][ T9789] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 421.922399][ T9789] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 421.972034][ T9692] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.979222][ T9692] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.013867][ T9841] futex_wake_op: syz.1.1527 tries to shift op by 144; fix this program [ 422.039081][ T9692] device bridge_slave_1 entered promiscuous mode [ 422.265533][ T9692] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 422.330629][ T9692] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 422.517329][ T4320] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 422.749169][ T9692] team0: Port device team_slave_0 added [ 422.817003][ T9692] team0: Port device team_slave_1 added [ 422.923972][ T9856] xt_CONNSECMARK: invalid mode: 0 [ 423.033570][ T4320] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 423.050247][ T4320] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 423.071347][ T4320] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 423.085081][ T4320] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.111494][ T9692] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 423.118444][ T9692] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 423.118469][ T9692] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 423.321434][ T9843] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 423.370926][ T9692] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 423.421444][ T9692] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 423.501216][ T9692] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 423.523863][ T9866] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 424.056586][ T9692] device hsr_slave_0 entered promiscuous mode [ 424.128673][ T9692] device hsr_slave_1 entered promiscuous mode [ 424.327472][ T4320] usb 1-1: USB disconnect, device number 8 [ 425.742173][ T9692] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 425.824523][ T9692] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 425.897772][ T9692] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 425.984450][ T9692] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 426.643053][ T9692] 8021q: adding VLAN 0 to HW filter on device bond0 [ 426.767039][ T8524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 426.830168][ T8524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 426.886753][ T9692] 8021q: adding VLAN 0 to HW filter on device team0 [ 426.944955][ T8512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 426.970385][ T8512] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 427.008335][ T9904] overlayfs: missing 'lowerdir' [ 427.020519][ T8512] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.027690][ T8512] bridge0: port 1(bridge_slave_0) entered forwarding state [ 427.049331][ T9904] overlayfs: bad mount option "redirect_dir=nofollow:/" [ 427.128020][ T8512] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 427.258797][ T8512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 427.311955][ T8512] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 427.381157][ T8512] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.388309][ T8512] bridge0: port 2(bridge_slave_1) entered forwarding state [ 427.512192][ T8512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 427.889514][ T9692] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 427.906111][ T9692] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 427.919683][ T8544] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 427.969284][ T8544] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 428.054464][ T8544] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 428.113029][ T8544] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 428.186320][ T8544] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 428.252425][ T8544] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 428.276878][ T8544] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 428.289219][ T8544] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 428.298512][ T8544] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 428.331827][ T8544] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 428.365237][ T8544] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 428.515985][ T9960] netlink: 'syz.4.1556': attribute type 2 has an invalid length. [ 429.861156][ T8553] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 429.891081][ T8553] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 429.906501][ T9692] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 430.969074][ T4291] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 430.977877][ T4291] Bluetooth: hci5: Injecting HCI hardware error event [ 430.993184][ T4286] Bluetooth: hci5: hardware error 0x00 [ 431.581328][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 432.109991][ T8553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 432.130700][ T8553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 432.212953][ T6013] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 432.238113][ T6013] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 432.287110][ T6013] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 432.306192][ T127] libceph: connect (2)127.0.0.1:6789 error -101 [ 432.313824][ T127] libceph: ceph_tcp_connect failed: -101 [ 432.327749][ T6013] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 432.352635][ T127] libceph: mon0 (2)127.0.0.1:6789 connect error [ 432.366503][ T127] libceph: connect (2)127.0.0.1:6789 error -101 [ 432.376040][ T9692] device veth0_vlan entered promiscuous mode [ 432.396389][ T127] libceph: ceph_tcp_connect failed: -101 [ 432.409468][ T9692] device veth1_vlan entered promiscuous mode [ 432.419196][ T127] libceph: mon0 (2)127.0.0.1:6789 connect error [ 432.540132][ T8531] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 432.554786][ T8531] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 432.580953][ T8531] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 432.611131][ T8531] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 432.644471][ T9692] device veth0_macvtap entered promiscuous mode [ 432.684558][ T9692] device veth1_macvtap entered promiscuous mode [ 432.692262][ T4322] libceph: connect (2)127.0.0.1:6789 error -101 [ 432.709956][ T4322] libceph: ceph_tcp_connect failed: -101 [ 432.730558][ T4322] libceph: mon0 (2)127.0.0.1:6789 connect error [ 432.822564][T10036] xt_CT: You must specify a L4 protocol and not use inversions on it [ 432.833329][ T9692] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 432.882106][ T8531] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 432.899981][ T8531] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 432.927655][ T8531] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 432.981245][ T8531] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 433.020654][ T9692] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 433.029337][ T8531] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 433.092895][T10028] ceph: No mds server is up or the cluster is laggy [ 433.203628][ T8531] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 433.215095][ T9692] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.258873][ T9692] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.289378][ T9692] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.411571][ T9692] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.502336][ T4286] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 434.175174][ T8553] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 434.211210][ T8553] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 434.398121][ T8553] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 434.417435][ T8553] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 434.620706][ T127] libceph: connect (2)127.0.0.1:6789 error -101 [ 434.629492][ T8531] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 434.636902][ T127] libceph: ceph_tcp_connect failed: -101 [ 434.661758][ T127] libceph: mon0 (2)127.0.0.1:6789 connect error [ 434.677611][ T8531] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 434.964809][T10060] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.042834][T10063] netlink: 'syz.5.1582': attribute type 9 has an invalid length. [ 435.854517][ T4319] libceph: connect (2)127.0.0.1:6789 error -101 [ 435.868225][ T4319] libceph: ceph_tcp_connect failed: -101 [ 435.880462][ T4319] libceph: mon0 (2)127.0.0.1:6789 connect error [ 436.180795][T10081] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1574'. [ 436.288741][T10088] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1573'. [ 437.251001][T10097] loop6: detected capacity change from 0 to 16 [ 437.307713][T10102] sctp: [Deprecated]: syz.0.1577 (pid 10102) Use of struct sctp_assoc_value in delayed_ack socket option. [ 437.307713][T10102] Use struct sctp_sack_info instead [ 437.391834][T10097] erofs: (device loop6): mounted with root inode @ nid 36. [ 437.479764][ T27] audit: type=1800 audit(2000000292.520:753): pid=10097 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1578" name="file1" dev="loop6" ino=86 res=0 errno=0 [ 438.643050][ T8538] net_ratelimit: 38 callbacks suppressed [ 438.698963][T10129] bond0 speed is unknown, defaulting to 1000 [ 438.797269][T10139] device syzkaller0 entered promiscuous mode [ 440.623420][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.629755][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.313131][T10155] PKCS8: Unsupported PKCS#8 version [ 441.384798][T10129] bond0 speed is unknown, defaulting to 1000 [ 443.626237][T10188] device syzkaller0 entered promiscuous mode [ 443.821221][ C0] net_ratelimit: 16 callbacks suppressed [ 444.550353][T10201] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 446.025950][T10217] netlink: 'syz.6.1609': attribute type 1 has an invalid length. [ 449.341242][ C0] net_ratelimit: 20 callbacks suppressed [ 450.109797][T10263] ip_tables: iptables: counters copy to user failed while replacing table [ 451.284983][T10284] loop6: detected capacity change from 0 to 736 [ 451.634515][T10283] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 451.944384][T10293] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1628'. [ 451.991231][T10293] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1628'. [ 452.265445][T10307] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1630'. [ 453.855211][T10321] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1630'. [ 454.941240][ C0] net_ratelimit: 15 callbacks suppressed [ 460.302579][ C0] net_ratelimit: 9 callbacks suppressed [ 460.725946][T10380] loop0: detected capacity change from 0 to 512 [ 460.764539][T10380] EXT4-fs: inline encryption not supported [ 461.841146][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 461.858920][T10380] EXT4-fs (loop0): Test dummy encryption mode enabled [ 461.876062][T10380] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 463.031849][T10380] EXT4-fs error (device loop0): ext4_orphan_get:1435: comm syz.0.1650: bad orphan inode 131083 [ 463.048684][T10380] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 463.403008][T10413] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1655'. [ 463.434828][T10413] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1655'. [ 463.519741][T10413] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1655'. [ 465.504270][ C0] net_ratelimit: 7 callbacks suppressed [ 467.005120][T10483] netlink: 'syz.5.1668': attribute type 8 has an invalid length. [ 467.082350][T10486] syzkaller0: Caught tx_queue_len zero misconfig [ 467.801913][T10509] xt_nat: multiple ranges no longer supported [ 469.436587][T10532] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1681'. [ 469.476535][T10532] unsupported nlmsg_type 40 [ 470.120157][T10555] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 470.129086][T10555] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 470.137877][T10555] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 470.146671][T10555] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 470.289432][T10555] device vxlan0 entered promiscuous mode [ 470.309157][T10555] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 470.541222][ C0] net_ratelimit: 7 callbacks suppressed [ 475.200414][T10633] netlink: 'syz.5.1709': attribute type 1 has an invalid length. [ 475.661715][ T8524] net_ratelimit: 12 callbacks suppressed [ 476.419061][T10407] EXT4-fs (loop0): unmounting filesystem. [ 476.658722][ T4286] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 476.668542][ T4286] CPU: 1 PID: 4286 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 476.676120][ T4286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 476.686170][ T4286] Workqueue: hci3 hci_rx_work [ 476.690886][ T4286] Call Trace: [ 476.694180][ T4286] [ 476.697126][ T4286] dump_stack_lvl+0x188/0x24e [ 476.701829][ T4286] ? show_regs_print_info+0x12/0x12 [ 476.707055][ T4286] ? load_image+0x410/0x410 [ 476.711569][ T4286] sysfs_create_dir_ns+0x26a/0x290 [ 476.711651][ T4286] ? sysfs_warn_dup+0xa0/0xa0 [ 476.711680][ T4286] ? do_raw_spin_unlock+0x11d/0x230 [ 476.726682][ T4286] kobject_add_internal+0x617/0xca0 [ 476.731895][ T4286] kobject_add+0x160/0x230 [ 476.731932][ T4286] ? kobject_init+0x1c0/0x1c0 [ 476.731964][ T4286] ? __raw_spin_lock_init+0x41/0x100 [ 476.741397][ T4286] ? klist_children_get+0x50/0x50 [ 476.741423][ T4286] ? get_device_parent+0x121/0x3e0 [ 476.741454][ T4286] device_add+0x470/0x1050 [ 476.741485][ T4286] hci_conn_add_sysfs+0xd1/0x1e0 [ 476.766240][ T4286] le_conn_complete_evt+0xf93/0x15c0 [ 476.771559][ T4286] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 476.777822][ T4286] ? param_get_dyndbg_classes+0x160/0x160 [ 476.783580][ T4286] ? mutex_unlock+0x10/0x10 [ 476.788113][ T4286] hci_le_conn_complete_evt+0x183/0x440 [ 476.793684][ T4286] ? hci_remote_host_features_evt+0x230/0x230 [ 476.799784][ T4286] hci_event_packet+0x7b3/0x1290 [ 476.804754][ T4286] ? lock_chain_count+0x20/0x20 [ 476.809630][ T4286] ? bis_list+0x280/0x280 [ 476.813996][ T4286] ? lockdep_hardirqs_on+0x94/0x140 [ 476.819225][ T4286] ? hci_send_to_monitor+0x9c/0x4a0 [ 476.824446][ T4286] hci_rx_work+0x3eb/0xd40 [ 476.828877][ T4286] ? _raw_spin_unlock+0x40/0x40 [ 476.833733][ T4286] ? process_one_work+0x7b4/0x1160 [ 476.838866][ T4286] process_one_work+0x8ab/0x1160 [ 476.843845][ T4286] ? worker_detach_from_pool+0x240/0x240 [ 476.849507][ T4286] ? _raw_spin_lock_irq+0xb7/0xf0 [ 476.854552][ T4286] ? _raw_spin_lock_irqsave+0x100/0x100 [ 476.860123][ T4286] ? wq_worker_running+0x97/0x190 [ 476.865147][ T4286] worker_thread+0xaf5/0x12a0 [ 476.869857][ T4286] kthread+0x29d/0x330 [ 476.869876][ T4286] ? worker_clr_flags+0x1a0/0x1a0 [ 476.869898][ T4286] ? kthread_blkcg+0xd0/0xd0 [ 476.883885][ T4286] ret_from_fork+0x1f/0x30 [ 476.888320][ T4286] [ 476.894225][ T4286] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 476.907462][ T4286] Bluetooth: hci3: failed to register connection device [ 476.923158][ T4286] Bluetooth: hci3: link tx timeout [ 476.928613][ T4286] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 476.936525][ T4286] Bluetooth: hci3: link tx timeout [ 476.941881][ T4286] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 477.133619][T10664] ip_tables: iptables: counters copy to user failed while replacing table [ 479.775183][T10701] loop6: detected capacity change from 0 to 256 [ 479.852179][T10701] exfat: Deprecated parameter 'utf8' [ 479.906622][T10701] exfat: Deprecated parameter 'utf8' [ 480.101292][T10701] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 480.861688][ T8546] net_ratelimit: 10 callbacks suppressed [ 483.485585][T10749] trusted_key: encrypted_key: insufficient parameters specified [ 485.711673][T10771] Option 'äÇ©?oÈ냟W½ÎƒÞ(ödîðÌ›ÔÏpø^ï8Æ ÝõXKÒtÔ..+jXpsízÑÔû¸ÔÿgˆH{“é&·}–(Ú)“eÒÓH/ Ïk;REÁŠ¨ãÂÉ<' to dns_resolver key: bad/missing value [ 486.330473][ C1] net_ratelimit: 10 callbacks suppressed [ 491.364467][T10829] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 491.376500][ C1] net_ratelimit: 12 callbacks suppressed [ 492.667517][T10830] bond0 speed is unknown, defaulting to 1000 [ 492.803095][T10851] netlink: 276 bytes leftover after parsing attributes in process `syz.0.1759'. [ 492.899529][T10851] tipc: Enabling of bearer rejected, failed to enable media [ 493.011189][T10854] loop6: detected capacity change from 0 to 128 [ 493.331706][T10830] bond0 speed is unknown, defaulting to 1000 [ 496.094818][T10908] loop6: detected capacity change from 0 to 256 [ 496.153891][T10908] exfat: Bad value for 'fmask' [ 496.458937][ C0] net_ratelimit: 8 callbacks suppressed [ 496.514994][ T27] audit: type=1804 audit(2000000607.559:754): pid=10917 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1777" name="bus" dev="ramfs" ino=61260 res=1 errno=0 [ 496.906758][ T27] audit: type=1804 audit(2000000607.569:755): pid=10917 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1777" name="bus" dev="ramfs" ino=61260 res=1 errno=0 [ 497.791068][ T27] audit: type=1804 audit(2000000607.989:756): pid=10922 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1777" name="bus" dev="ramfs" ino=61260 res=1 errno=0 [ 499.053494][T10957] device bond2 left promiscuous mode [ 499.103679][T10957] device ip6gre1 left promiscuous mode [ 500.461602][T10976] netlink: 'syz.5.1790': attribute type 30 has an invalid length. [ 500.478291][T10976] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1790'. [ 501.343893][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.350418][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.738462][ T4286] Bluetooth: hci4: command 0x2016 tx timeout [ 501.988352][ T8524] net_ratelimit: 11 callbacks suppressed [ 502.649461][T11007] device erspan0 left promiscuous mode [ 502.655138][T11007] bridge1: port 1(erspan0) entered disabled state [ 502.681915][T11007] device bridge_slave_1 left promiscuous mode [ 502.688096][T11007] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.697720][T11007] bond3: (slave veth0_to_bond): Releasing active interface [ 502.713510][T11007] bond0: (slave bond_slave_0): Releasing backup interface [ 502.721577][T11007] device bond_slave_0 left promiscuous mode [ 502.728837][T11007] bond0: (slave bond_slave_1): Releasing backup interface [ 502.736365][T11007] device bond_slave_1 left promiscuous mode [ 502.746142][T11007] team0: Port device team_slave_0 removed [ 502.753160][T11007] team0: Port device team_slave_1 removed [ 502.759661][T11007] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 502.767350][T11007] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 502.775664][T11007] bond0: (slave macvlan2): Releasing backup interface [ 502.783695][T11007] device macvlan2 left promiscuous mode [ 502.789935][T11007] device vlan2 left promiscuous mode [ 502.795236][T11007] device bond0 left promiscuous mode [ 502.800555][T11007] device vxlan0 left promiscuous mode [ 502.806114][T11007] bridge0: port 3(vlan2) entered disabled state [ 502.814257][T11007] bond1: (slave vlan3): Releasing active interface [ 502.823164][T11007] bond4: (slave veth3): Releasing backup interface [ 502.837489][T11007] bond0: (slave vxlan0): Releasing backup interface [ 502.855388][T11007] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 502.864334][T11007] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 502.873333][T11007] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 502.882221][T11007] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 502.916930][ T26] bond0 speed is unknown, defaulting to 1000 [ 506.780080][T11079] 9pnet_fd: Insufficient options for proto=fd [ 507.177407][T11100] xt_TPROXY: Can be used only with -p tcp or -p udp [ 507.184126][ C0] net_ratelimit: 12 callbacks suppressed [ 507.264004][T11106] ip_tables: iptables: counters copy to user failed while replacing table [ 507.266139][T11096] fuse: Unknown parameter 'group_i' [ 507.301154][T11100] ip_tables: iptables: counters copy to user failed while replacing table [ 508.044881][T11111] ip_tables: iptables: counters copy to user failed while replacing table [ 508.375386][T11124] "syz.6.1825" (11124) uses obsolete ecb(arc4) skcipher [ 510.193865][T11139] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 511.500476][T11157] device bridge_slave_0 entered promiscuous mode [ 511.725955][T11159] netlink: 'syz.0.1835': attribute type 9 has an invalid length. [ 512.217283][ T8531] net_ratelimit: 11 callbacks suppressed [ 512.246083][T11165] loop6: detected capacity change from 0 to 16 [ 512.298838][T11165] erofs: (device loop6): mounted with root inode @ nid 36. [ 512.507250][ T4286] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[9000] [ 512.525965][T11162] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress -10 in[4096, 0] out[4096] [ 512.635681][ T27] audit: type=1800 audit(2000000623.681:757): pid=11162 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1836" name="file2" dev="loop6" ino=89 res=0 errno=0 [ 517.256396][ C0] net_ratelimit: 9 callbacks suppressed [ 518.206006][T11237] Bluetooth: MGMT ver 1.22 [ 518.570474][T11240] tipc: Started in network mode [ 518.575371][T11240] tipc: Node identity a6f1e7057576, cluster identity 4711 [ 518.603402][T11240] tipc: Enabled bearer , priority 0 [ 518.631553][T11240] device syzkaller0 entered promiscuous mode [ 518.865235][T11250] tipc: Resetting bearer [ 518.932589][T11239] tipc: Resetting bearer [ 519.002347][T11239] tipc: Disabling bearer [ 520.408845][T11267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 520.479937][T11277] futex_wake_op: syz.6.1856 tries to shift op by 144; fix this program [ 520.504727][T11267] 8021q: adding VLAN 0 to HW filter on device team0 [ 520.609415][ T4283] bond0 speed is unknown, defaulting to 1000 [ 520.658259][T11279] tipc: Enabling of bearer rejected, failed to enable media [ 521.013786][T11266] bond0 speed is unknown, defaulting to 1000 [ 521.414631][T11266] bond0 speed is unknown, defaulting to 1000 [ 521.816007][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 522.455786][ C0] net_ratelimit: 9 callbacks suppressed [ 523.992176][T11329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 524.054215][T11329] 8021q: adding VLAN 0 to HW filter on device team0 [ 524.054244][T11340] loop6: detected capacity change from 0 to 164 [ 524.158999][T11329] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 528.535042][ C0] net_ratelimit: 16 callbacks suppressed [ 529.428134][T11389] xt_CT: You must specify a L4 protocol and not use inversions on it [ 529.662031][T11407] futex_wake_op: syz.0.1886 tries to shift op by 144; fix this program [ 530.427713][T11414] syz.5.1885: attempt to access beyond end of device [ 530.427713][T11414] loop0: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 530.442637][T11414] XFS (loop0): SB validate failed with error -5. [ 531.024603][T11431] loop6: detected capacity change from 0 to 512 [ 531.044177][T11431] EXT4-fs: Ignoring removed oldalloc option [ 531.090033][T11431] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 531.151547][T11431] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 531.167778][T11431] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 531.209846][T11429] CIFS: Attempting to mount \\127.0.0.1\share [ 531.216088][T11429] CIFS: VFS: No username specified [ 532.120999][T11445] tipc: Enabling of bearer rejected, failed to enable media [ 532.131007][T11446] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 532.144657][ T26] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 532.358736][ T26] usb 7-1: unable to get BOS descriptor or descriptor too short [ 532.376160][ T26] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 532.422858][ T26] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 532.443074][ T26] usb 7-1: config 1 has no interface number 1 [ 532.459972][ T26] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 532.493382][ T26] usb 7-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 532.512751][ T26] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.543286][ T26] usb 7-1: Product: syz [ 532.563538][ T26] usb 7-1: Manufacturer: syz [ 532.573694][ T26] usb 7-1: SerialNumber: syz [ 532.949433][ T26] usb 7-1: USB disconnect, device number 2 [ 533.478664][ T9692] EXT4-fs (loop6): unmounting filesystem. [ 533.551863][ C1] net_ratelimit: 8 callbacks suppressed [ 534.129362][T11473] ip_tables: iptables: counters copy to user failed while replacing table [ 534.138300][ T4286] Bluetooth: hci0: command 0x0406 tx timeout [ 535.707217][T11490] jffs2: notice: (11490) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 536.213263][T11493] FAULT_INJECTION: forcing a failure. [ 536.213263][T11493] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 536.243439][T11493] CPU: 1 PID: 11493 Comm: syz.6.1910 Not tainted syzkaller #0 [ 536.250913][T11493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 536.250928][T11493] Call Trace: [ 536.250935][T11493] [ 536.250944][T11493] dump_stack_lvl+0x188/0x24e [ 536.264679][T11493] ? show_regs_print_info+0x12/0x12 [ 536.264709][T11493] ? load_image+0x410/0x410 [ 536.264730][T11493] ? __lock_acquire+0x7ea0/0x7ea0 [ 536.287057][T11493] ? do_vfs_ioctl+0x1be3/0x1d40 [ 536.291937][T11493] should_fail_ex+0x390/0x4c0 [ 536.296628][T11493] _copy_from_user+0x2c/0x170 [ 536.301332][T11493] kvm_vm_ioctl+0x4cf/0xb00 [ 536.305853][T11493] ? kvm_device_release+0x1e0/0x1e0 [ 536.311071][T11493] ? __kmem_cache_free+0xb6/0x200 [ 536.316120][T11493] ? tomoyo_path_number_perm+0x205/0x650 [ 536.321776][T11493] ? tomoyo_path_number_perm+0x5a4/0x650 [ 536.327429][T11493] ? tomoyo_path_number_perm+0x205/0x650 [ 536.333088][T11493] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 536.338606][T11493] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 536.344621][T11493] ? lock_chain_count+0x20/0x20 [ 536.349530][T11493] ? bpf_lsm_file_ioctl+0x5/0x10 [ 536.354488][T11493] ? security_file_ioctl+0x7c/0xa0 [ 536.359625][T11493] ? kvm_device_release+0x1e0/0x1e0 [ 536.364847][T11493] __se_sys_ioctl+0xfa/0x170 [ 536.369460][T11493] do_syscall_64+0x4c/0xa0 [ 536.373896][T11493] ? clear_bhb_loop+0x60/0xb0 [ 536.378601][T11493] ? clear_bhb_loop+0x60/0xb0 [ 536.383305][T11493] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 536.389217][T11493] RIP: 0033:0x7fb57ef9e1d9 [ 536.393646][T11493] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 536.413263][T11493] RSP: 002b:00007fb57fd8d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 536.421714][T11493] RAX: ffffffffffffffda RBX: 00007fb57f225fa0 RCX: 00007fb57ef9e1d9 [ 536.429703][T11493] RDX: 0000200000000240 RSI: 000000004020ae76 RDI: 0000000000000004 [ 536.437690][T11493] RBP: 00007fb57f035888 R08: 0000000000000000 R09: 0000000000000000 [ 536.445655][T11493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 536.445672][T11493] R13: 00007fb57f226038 R14: 00007fb57f225fa0 R15: 00007ffd7f5142d8 [ 536.461594][T11493] [ 538.380813][T11507] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1913'. [ 539.182495][ C1] net_ratelimit: 10 callbacks suppressed [ 543.274856][T11543] afs: Unknown parameter 'dy' [ 544.453661][ C0] net_ratelimit: 5 callbacks suppressed [ 545.687465][T11568] tipc: Enabling of bearer rejected, failed to enable media [ 547.743864][ T27] audit: type=1326 audit(2000000658.714:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11605 comm="syz.6.1944" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb57ef9e1d9 code=0x7ffc0000 [ 547.838794][ T27] audit: type=1326 audit(2000000658.724:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11605 comm="syz.6.1944" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fb57ef9e1d9 code=0x7ffc0000 [ 548.667517][ T27] audit: type=1326 audit(2000000658.724:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11605 comm="syz.6.1944" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb57ef9e1d9 code=0x7ffc0000 [ 548.691682][ T27] audit: type=1326 audit(2000000658.724:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11605 comm="syz.6.1944" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb57ef9e1d9 code=0x7ffc0000 [ 548.744090][ T27] audit: type=1326 audit(2000000658.724:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11605 comm="syz.6.1944" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb57ef9e1d9 code=0x7ffc0000 [ 548.807681][ T27] audit: type=1326 audit(2000000658.724:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11605 comm="syz.6.1944" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb57ef9e1d9 code=0x7ffc0000 [ 548.856672][ T27] audit: type=1326 audit(2000000658.724:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11605 comm="syz.6.1944" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb57ef9e1d9 code=0x7ffc0000 [ 548.886773][ T27] audit: type=1326 audit(2000000658.724:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11605 comm="syz.6.1944" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb57ef9e1d9 code=0x7ffc0000 [ 548.932577][ T27] audit: type=1326 audit(2000000658.724:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11605 comm="syz.6.1944" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb57ef9e1d9 code=0x7ffc0000 [ 549.007613][ T27] audit: type=1326 audit(2000000658.724:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11605 comm="syz.6.1944" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb57ef9e1d9 code=0x7ffc0000 [ 549.465629][ C0] net_ratelimit: 9 callbacks suppressed [ 554.475957][ T8544] net_ratelimit: 7 callbacks suppressed [ 555.203896][T11644] xt_nat: multiple ranges no longer supported [ 555.679264][T11647] overlayfs: failed to clone upperpath [ 555.985259][T11657] x_tables: (null)_tables: AUDIT.0 target: invalid size 8 (kernel) != (user) 16 [ 557.630563][T11673] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 557.721521][T11673] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 557.788764][T11673] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 557.878098][T11673] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 557.936313][T11673] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 558.005559][T11673] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 558.087148][T11673] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 558.480702][T11684] nftables ruleset with unbound set [ 558.847245][T11689] netlink: 'syz.1.1963': attribute type 11 has an invalid length. [ 559.530212][T11697] bond0 speed is unknown, defaulting to 1000 [ 559.893645][ C0] net_ratelimit: 8 callbacks suppressed [ 561.459110][ T27] kauditd_printk_skb: 18 callbacks suppressed [ 561.459121][ T27] audit: type=1800 audit(2000000672.514:786): pid=11686 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1965" name="bus" dev="ramfs" ino=64693 res=0 errno=0 [ 561.690082][T11697] bond0 speed is unknown, defaulting to 1000 [ 561.803000][T11704] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1968'. [ 561.868985][T11704] binder: 11700:11704 ioctl c0306201 200000000080 returned -14 [ 562.320936][T11713] tipc: Enabled bearer , priority 0 [ 562.351562][T11713] device syzkaller0 entered promiscuous mode [ 562.444655][T11722] futex_wake_op: syz.5.1974 tries to shift op by 144; fix this program [ 562.461103][T11713] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 562.559806][T11729] tipc: Resetting bearer [ 562.601702][T11710] tipc: Resetting bearer [ 562.702818][T11710] tipc: Disabling bearer [ 562.793126][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.799564][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.331653][T11754] __vm_enough_memory: pid: 11754, comm: syz.5.1983, no enough memory for the allocation [ 564.309493][T11768] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1989'. [ 564.340819][T11768] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1989'. [ 564.361728][T11768] netlink: 'syz.0.1989': attribute type 5 has an invalid length. [ 564.378369][T11768] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1989'. [ 565.093642][ C0] net_ratelimit: 8 callbacks suppressed [ 569.486437][T11818] ecryptfs_parse_options: eCryptfs doesn't support cipher: aes [ 569.494283][T11818] Error parsing options; rc = [-22] [ 569.536902][T11815] device vlan0 entered promiscuous mode [ 569.550120][T11815] team0: Port device vlan0 added [ 569.715516][T11823] netlink: 'syz.0.2005': attribute type 1 has an invalid length. [ 570.111197][T11833] loop6: detected capacity change from 0 to 1024 [ 570.613552][ C1] net_ratelimit: 9 callbacks suppressed [ 570.805023][T11827] bond3: (slave gretap1): making interface the new active one [ 570.813036][T11827] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 572.706087][T11847] loop6: detected capacity change from 0 to 512 [ 573.359639][T11835] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 573.467077][T11850] futex_wake_op: syz.4.1994 tries to shift op by 144; fix this program [ 573.703428][T11855] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2015'. [ 575.291239][T11871] xt_cgroup: invalid path, errno=-2 [ 576.292845][ C1] net_ratelimit: 23 callbacks suppressed [ 576.862979][T11887] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2024'. [ 579.595339][T11918] netlink: 'syz.0.2036': attribute type 10 has an invalid length. [ 581.481951][ T8548] net_ratelimit: 4 callbacks suppressed [ 584.610876][T11958] MTD: Couldn't look up './dev/mtdblock0': -2 [ 587.011667][ C0] net_ratelimit: 16 callbacks suppressed [ 588.193721][T11991] jffs2: notice: (11991) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 588.447401][ T8546] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 590.466440][T12027] netlink: 'syz.4.2069': attribute type 1 has an invalid length. [ 591.080082][T12027] bond3: (slave bridge4): making interface the new active one [ 591.089661][T12027] bond3: (slave bridge4): Enslaving as an active interface with an up link [ 591.454469][ T4286] Bluetooth: hci3: hcon ffff888064892000 sent 0 < count 1 [ 591.463216][ T4286] Bluetooth: hci3: hcon ffff888024ec4000 sent 3 < count 1025 [ 592.210949][ C1] net_ratelimit: 11 callbacks suppressed [ 596.731265][T12069] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 597.490251][ C1] net_ratelimit: 6 callbacks suppressed [ 602.100630][T12109] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2093'. [ 602.627793][T12117] net_ratelimit: 18 callbacks suppressed [ 602.627806][T12117] ip_tables: iptables: counters copy to user failed while replacing table [ 606.100188][ T4291] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 606.113302][ T4291] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 606.121553][ T4291] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 606.131296][ T4291] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 606.140709][ T4291] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 606.150128][ T4291] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 606.559200][ T8512] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.948107][T12142] bond0 speed is unknown, defaulting to 1000 [ 607.077413][ T8512] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.149403][T12158] bridge0: port 1(bridge_slave_0) entered disabled state [ 607.287948][T12142] bond0 speed is unknown, defaulting to 1000 [ 607.313019][T12162] netlink: 'syz.4.2109': attribute type 9 has an invalid length. [ 607.372044][ T8512] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.570151][ T8512] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.968961][ C0] net_ratelimit: 9 callbacks suppressed [ 608.209399][ T4286] Bluetooth: hci0: command 0x0409 tx timeout [ 608.269218][ T8512] tipc: Left network mode [ 608.748617][T12142] chnl_net:caif_netlink_parms(): no params data found [ 609.329893][T12205] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2120'. [ 610.288838][ T4286] Bluetooth: hci0: command 0x041b tx timeout [ 610.323492][T12142] bridge0: port 1(bridge_slave_0) entered blocking state [ 610.331429][T12142] bridge0: port 1(bridge_slave_0) entered disabled state [ 610.342047][T12142] device bridge_slave_0 entered promiscuous mode [ 610.494624][T12142] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.512746][T12142] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.566838][T12142] device bridge_slave_1 entered promiscuous mode [ 611.055428][T12142] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 611.143473][T12242] UBIFS error (pid: 12242): cannot open "(null)", error -22 [ 611.180440][T12142] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 611.790955][T12142] team0: Port device team_slave_0 added [ 611.970812][T12142] team0: Port device team_slave_1 added [ 612.368531][ T4286] Bluetooth: hci0: command 0x040f tx timeout [ 613.065879][T12142] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 613.083200][T12142] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 613.178384][ C1] net_ratelimit: 1 callbacks suppressed [ 613.308310][T12142] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 613.482197][T12142] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 613.501835][T12142] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 613.744638][T12142] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 613.959540][ T8512] device hsr_slave_0 left promiscuous mode [ 614.006009][ T8512] device hsr_slave_1 left promiscuous mode [ 614.042862][ T8512] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 614.116647][ T8512] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 614.163065][ T8512] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 614.210658][ T8512] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 614.261583][ T8512] device bridge_slave_1 left promiscuous mode [ 614.302395][ T8512] bridge0: port 2(bridge_slave_1) entered disabled state [ 614.424245][ T8512] device bridge_slave_0 left promiscuous mode [ 614.448566][ T4286] Bluetooth: hci0: command 0x0419 tx timeout [ 614.467418][ T8512] bridge0: port 1(bridge_slave_0) entered disabled state [ 614.738246][ T8512] device veth1_macvtap left promiscuous mode [ 614.765439][ T8512] device veth0_macvtap left promiscuous mode [ 614.797231][ T8512] device veth1_vlan left promiscuous mode [ 614.833402][ T8512] device veth0_vlan left promiscuous mode [ 616.165237][ T8512] team0 (unregistering): Port device team_slave_1 removed [ 616.222987][ T8512] team0 (unregistering): Port device team_slave_0 removed [ 616.279451][ T8512] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 616.340808][ T8512] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 616.790404][ T8512] bond0 (unregistering): Released all slaves [ 617.176218][T12142] device hsr_slave_0 entered promiscuous mode [ 617.808566][T12142] device hsr_slave_1 entered promiscuous mode [ 618.191377][T12332] net_ratelimit: 10 callbacks suppressed [ 618.869626][T12348] netlink: 'syz.1.2149': attribute type 4 has an invalid length. [ 620.061238][T12142] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 620.163773][T12142] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 620.237412][T12142] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 620.305561][T12142] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 621.411638][T12142] 8021q: adding VLAN 0 to HW filter on device bond0 [ 621.502892][ T8531] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 621.511434][ T8531] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 621.573857][T12142] 8021q: adding VLAN 0 to HW filter on device team0 [ 621.581578][T12384] netlink: 'syz.5.2162': attribute type 1 has an invalid length. [ 621.712752][T12384] 8021q: adding VLAN 0 to HW filter on device bond5 [ 621.791138][T12386] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 621.858236][T12387] device bridge2 entered promiscuous mode [ 621.929953][T12387] bond5: (slave bridge2): Enslaving as an active interface with an up link [ 621.989005][ T8512] IPv6: ADDRCONF(NETDEV_CHANGE): bond5: link becomes ready [ 622.007752][ T8512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 622.044434][ T8512] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 622.078954][ T8512] bridge0: port 1(bridge_slave_0) entered blocking state [ 622.086099][ T8512] bridge0: port 1(bridge_slave_0) entered forwarding state [ 622.339540][ T8512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 622.362381][ T8512] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 622.403560][ T8512] bridge0: port 2(bridge_slave_1) entered blocking state [ 622.410722][ T8512] bridge0: port 2(bridge_slave_1) entered forwarding state [ 622.434686][T12397] IPVS: set_ctl: invalid protocol: 137 172.30.0.6:20001 [ 622.511148][ T8512] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 622.546145][ T8512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 622.588062][ T8512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 622.632438][ T8512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 622.685283][ T8512] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 622.719585][ T8512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 622.773799][ T8512] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 622.836947][T12142] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 622.872136][T12142] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 622.922232][ T8512] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 622.936846][ T8512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 622.960358][ T8512] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 622.984950][ T8512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 623.009202][ T8512] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 623.061223][ T8512] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 624.178441][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.184863][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.311856][T12424] siw: device registration error -23 [ 624.565522][ T8548] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 624.599726][ T8548] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 624.655678][T12142] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 626.745500][T12479] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2178'. [ 626.764783][T12479] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2178'. [ 626.935711][ T8548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 626.961674][ T8548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 627.016638][ T8548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 627.035818][ T8548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 627.074531][T12142] device veth0_vlan entered promiscuous mode [ 627.092630][ T8548] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 627.110845][ T8548] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 627.142883][T12142] device veth1_vlan entered promiscuous mode [ 627.214825][ T8548] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 627.244344][ T8548] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 627.273318][ T8548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 627.334478][ T8548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 627.366932][T12142] device veth0_macvtap entered promiscuous mode [ 627.403518][T12142] device veth1_macvtap entered promiscuous mode [ 627.506911][T12142] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 627.577608][ T8548] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 627.593305][ T8548] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 627.631033][ T8548] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 627.645827][ T8548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 627.694334][T12142] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 627.731390][ T8548] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 627.750128][ T8548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 627.814509][T12142] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.850845][T12142] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.859570][T12142] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.874872][T12142] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.677993][ T8548] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 628.706040][T12481] overlayfs: failed to clone lowerpath [ 628.751127][ T8548] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 628.814560][ T8512] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 628.975267][ T8548] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 629.003359][ T8548] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 629.028633][ T8548] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 630.533238][ T8512] net_ratelimit: 36 callbacks suppressed [ 631.119538][T12549] tipc: Started in network mode [ 631.124808][T12550] loop7: detected capacity change from 0 to 256 [ 631.141058][T12549] tipc: Node identity ac1414aa, cluster identity 4711 [ 631.201934][T12549] tipc: New replicast peer: 172.20.20.187 [ 631.442458][T12549] tipc: Enabled bearer , priority 10 [ 632.839788][ T26] tipc: Node number set to 2886997162 [ 633.186048][T12565] netlink: 292 bytes leftover after parsing attributes in process `syz.7.2195'. [ 635.622097][ T8548] net_ratelimit: 12 callbacks suppressed [ 636.111925][T12620] device bridge0 entered promiscuous mode [ 636.175319][T12620] team0: Port device bridge0 added [ 636.240614][T12622] bridge0: port 1(team0) entered blocking state [ 636.251816][T12622] bridge0: port 1(team0) entered disabled state [ 636.490819][ T27] audit: type=1326 audit(2000001003.664:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12628 comm="syz.4.2208" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0721d9e1d9 code=0x7ffc0000 [ 636.708217][T12632] overlayfs: failed to clone lowerpath [ 636.773722][T12637] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 637.509141][ T27] audit: type=1326 audit(2000001003.664:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12628 comm="syz.4.2208" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0721d9e1d9 code=0x7ffc0000 [ 637.672691][ T27] audit: type=1326 audit(2000001003.694:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12628 comm="syz.4.2208" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f0721d9e1d9 code=0x7ffc0000 [ 638.256036][ T27] audit: type=1326 audit(2000001003.694:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12628 comm="syz.4.2208" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0721d9df42 code=0x7ffc0000 [ 638.511491][T12644] bond0 speed is unknown, defaulting to 1000 [ 639.437214][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 639.640321][ T27] audit: type=1326 audit(2000001003.694:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12628 comm="syz.4.2208" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f0721d5ea0e code=0x7ffc0000 [ 639.700432][ T27] audit: type=1326 audit(2000001003.694:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12628 comm="syz.4.2208" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f0721d9e007 code=0x7ffc0000 [ 640.930016][ C1] net_ratelimit: 11 callbacks suppressed [ 641.118918][ T27] audit: type=1326 audit(2000001003.694:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12628 comm="syz.4.2208" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0721d5ea0e code=0x7ffc0000 [ 641.719632][ T27] audit: type=1326 audit(2000001003.694:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12628 comm="syz.4.2208" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f0721d5ea0e code=0x7ffc0000 [ 642.183594][T12644] bond0 speed is unknown, defaulting to 1000 [ 642.197548][ T27] audit: type=1326 audit(2000001003.694:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12628 comm="syz.4.2208" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0721d9e1d9 code=0x7ffc0000 [ 642.669681][ T27] audit: type=1326 audit(2000001003.896:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12628 comm="syz.4.2208" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f0721d9e1d9 code=0x7ffc0000 [ 643.050971][ T27] audit: type=1326 audit(2000001004.640:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12628 comm="syz.4.2208" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0721d9e1d9 code=0x7ffc0000 [ 643.277152][ T27] audit: type=1326 audit(2000001004.640:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12628 comm="syz.4.2208" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0721d9e1d9 code=0x7ffc0000 [ 645.154100][ T4286] Bluetooth: Wrong link type (-22) [ 646.420136][ C0] net_ratelimit: 10 callbacks suppressed [ 646.544203][T12727] kvm [12726]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0xffda00000100 [ 646.572378][T12734] 8021q: adding VLAN 0 to HW filter on device team0 [ 646.634432][T12734] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 646.650101][T12727] kvm [12726]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 646.685484][T12727] kvm [12726]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x0 [ 646.831059][T12727] kvm [12726]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 649.035662][T12760] x_tables: (null)_tables: AUDIT.0 target: invalid size 8 (kernel) != (user) 16 [ 650.543518][T12772] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2243'. [ 651.351598][T12780] loop7: detected capacity change from 0 to 512 [ 651.454952][ T8532] net_ratelimit: 15 callbacks suppressed [ 651.488675][T12780] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 651.520862][T12780] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 651.797991][T12791] tipc: Enabling of bearer rejected, failed to enable media [ 651.984384][T12801] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2249'. [ 652.022690][T12142] EXT4-fs (loop7): unmounting filesystem. [ 653.511805][T12822] bond5: (slave veth0_to_bond): Releasing backup interface [ 653.577458][T12822] bond5: (slave veth0_to_bond): the permanent HWaddr of slave - aa:aa:aa:aa:aa:1d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 653.646567][T12822] bond5: (slave bridge2): Releasing backup interface [ 653.701416][T12818] device vlan0 entered promiscuous mode [ 653.711028][T12823] tipc: Enabled bearer , priority 0 [ 653.888829][T12834] loop7: detected capacity change from 0 to 256 [ 656.072677][T12864] loop7: detected capacity change from 0 to 1024 [ 656.103666][T12864] ext4: Bad value for 'inode_readahead_blks' [ 656.475054][ C1] net_ratelimit: 5 callbacks suppressed [ 657.387481][T12886] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 657.463823][T12886] netlink: 'syz.5.2274': attribute type 1 has an invalid length. [ 657.580867][T12886] 8021q: adding VLAN 0 to HW filter on device bond6 [ 657.606327][T12889] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.615366][T12889] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.624201][T12889] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.632985][T12889] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.644641][T12889] bond6: (slave geneve2): making interface the new active one [ 657.691832][T12889] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 657.746038][ T8511] IPv6: ADDRCONF(NETDEV_CHANGE): bond6: link becomes ready [ 659.485252][T12930] overlayfs: failed to clone lowerpath [ 661.994357][ C0] net_ratelimit: 9 callbacks suppressed [ 662.636314][T12950] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2270'. [ 662.645374][T12950] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2270'. [ 662.666930][T12955] IPVS: set_ctl: invalid protocol: 137 172.30.0.8:20001 [ 664.097170][T12970] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 664.412977][T12974] loop7: detected capacity change from 0 to 128 [ 665.284808][T12974] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 665.326819][T12974] ext4 filesystem being mounted at /21/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 667.275713][ C1] net_ratelimit: 6 callbacks suppressed [ 667.505840][T13001] tipc: Enabling of bearer rejected, failed to enable media [ 667.530673][T12142] EXT4-fs (loop7): unmounting filesystem. [ 672.796282][ T8547] net_ratelimit: 11 callbacks suppressed [ 672.889809][ T4286] Bluetooth: hci0: unexpected cc 0x042d length: 63 > 7 [ 676.880197][T13118] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2310'. [ 676.952980][ T4286] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 676.962194][ T4286] Bluetooth: hci0: Injecting HCI hardware error event [ 676.973685][ T4291] Bluetooth: hci0: hardware error 0x00 [ 677.992655][ C1] net_ratelimit: 8 callbacks suppressed [ 678.040853][T13118] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2310'. [ 679.272454][ T4291] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 679.626638][T13148] device bridge1 entered promiscuous mode [ 679.687092][T13148] team0: Port device bridge1 added [ 679.718374][T13152] bridge0: port 2(team0) entered blocking state [ 679.726687][T13152] bridge0: port 2(team0) entered disabled state [ 679.772910][T13152] device team0 entered promiscuous mode [ 679.849639][T13152] bridge0: port 2(team0) entered blocking state [ 679.856018][T13152] bridge0: port 2(team0) entered forwarding state [ 679.903141][ T8553] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 681.321972][T13175] sd 0:0:1:0: PR command failed: 1026 [ 681.327462][T13175] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 681.334297][T13175] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 681.760601][T13188] netlink: 'syz.7.2329': attribute type 1 has an invalid length. [ 682.114986][T13192] 8021q: adding VLAN 0 to HW filter on device bond2 [ 682.153832][T13192] bond1: (slave bond2): making interface the new active one [ 682.161638][T13192] bond1: (slave bond2): Enslaving as an active interface with an up link [ 682.279559][T13188] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 683.018975][ C1] net_ratelimit: 6 callbacks suppressed [ 683.473830][T13222] device bridge5 entered promiscuous mode [ 683.499358][T13222] team0: Port device bridge5 added [ 683.525333][T13224] bridge0: port 1(team0) entered blocking state [ 683.535198][T13224] bridge0: port 1(team0) entered disabled state [ 685.434974][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.441432][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.046400][T13274] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 687.055636][T13274] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 687.063167][T13274] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 687.145713][ T27] audit: type=1804 audit(2000001310.423:799): pid=13273 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2347" name="bus" dev="ramfs" ino=70096 res=1 errno=0 [ 687.413837][ T27] audit: type=1804 audit(2000001310.443:800): pid=13273 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.2347" name="bus" dev="ramfs" ino=70096 res=1 errno=0 [ 687.609904][ T27] audit: type=1804 audit(2000001310.713:801): pid=13285 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.2347" name="bus" dev="ramfs" ino=70096 res=1 errno=0 [ 687.662635][T13295] loop7: detected capacity change from 0 to 1024 [ 688.191139][ C1] net_ratelimit: 6 callbacks suppressed [ 693.750445][ C0] net_ratelimit: 10 callbacks suppressed [ 695.494182][T13392] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2371'. [ 698.094314][T13408] loop7: detected capacity change from 0 to 512 [ 698.109576][T13408] EXT4-fs: Ignoring removed nomblk_io_submit option [ 698.145739][T13408] EXT4-fs (loop7): can't mount with both data=journal and delalloc [ 698.788886][T13416] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 699.029809][ C0] net_ratelimit: 7 callbacks suppressed [ 701.773345][ T4291] Bluetooth: hci4: hcon ffff888072c04000 sent 1 < count 1025 [ 704.309163][ C0] net_ratelimit: 5 callbacks suppressed [ 704.805770][T13456] bridge0: port 2(team0) entered disabled state [ 704.851311][T13456] team0: Device bridge0 is already an upper device of the team interface [ 705.035450][T13461] device bond1 left promiscuous mode [ 705.798598][T13461] device erspan1 left promiscuous mode [ 706.231357][T13483] loop7: detected capacity change from 0 to 512 [ 707.626641][T13494] netlink: 'syz.4.2397': attribute type 1 has an invalid length. [ 707.807047][T13494] 8021q: adding VLAN 0 to HW filter on device bond4 [ 707.839503][T13499] bond1: (slave veth0_to_bond): Releasing active interface [ 707.884491][T13499] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 707.917750][T13500] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2397'. [ 708.723338][T13500] device bridge6 entered promiscuous mode [ 708.808907][T13500] bond4: (slave bridge6): Enslaving as an active interface with an up link [ 708.848637][ T8548] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready [ 708.884726][T13510] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2401'. [ 709.828507][ C0] net_ratelimit: 13 callbacks suppressed [ 710.465356][T13534] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2407'. [ 710.647273][T13538] device bridge3 entered promiscuous mode [ 710.687424][T13538] team0: Port device bridge3 added [ 710.705743][ T8546] tipc: Resetting bearer [ 710.727732][T13539] bridge0: port 1(team0) entered blocking state [ 710.746075][T13539] bridge0: port 1(team0) entered disabled state [ 712.479947][T13556] loop7: detected capacity change from 0 to 2048 [ 712.533094][T13556] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 713.756949][T13569] sctp: [Deprecated]: syz.5.2419 (pid 13569) Use of struct sctp_assoc_value in delayed_ack socket option. [ 713.756949][T13569] Use struct sctp_sack_info instead [ 715.191862][ C1] net_ratelimit: 5 callbacks suppressed [ 720.244058][ C0] net_ratelimit: 7 callbacks suppressed [ 721.980635][T13631] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 725.826553][ C0] net_ratelimit: 10 callbacks suppressed [ 731.186314][ C1] net_ratelimit: 7 callbacks suppressed [ 736.025409][ T27] audit: type=1326 audit(2000001359.300:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13762 comm="syz.5.2476" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff397d9e1d9 code=0x7ffc0000 [ 736.131369][ T27] audit: type=1326 audit(2000001359.340:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13762 comm="syz.5.2476" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff397d97f57 code=0x7ffc0000 [ 736.231130][ T27] audit: type=1326 audit(2000001359.340:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13762 comm="syz.5.2476" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff397d3f559 code=0x7ffc0000 [ 736.342114][ T27] audit: type=1326 audit(2000001359.340:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13762 comm="syz.5.2476" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff397d9e1d9 code=0x7ffc0000 [ 736.450900][ T27] audit: type=1326 audit(2000001359.340:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13762 comm="syz.5.2476" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7ff397d9e1d9 code=0x7ffc0000 [ 736.515666][ T27] audit: type=1326 audit(2000001359.600:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13762 comm="syz.5.2476" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff397d97f57 code=0x7ffc0000 [ 736.588960][ T27] audit: type=1326 audit(2000001359.600:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13762 comm="syz.5.2476" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff397d3f559 code=0x7ffc0000 [ 736.653797][ T27] audit: type=1326 audit(2000001359.600:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13762 comm="syz.5.2476" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff397d9e1d9 code=0x7ffc0000 [ 736.722090][ T27] audit: type=1326 audit(2000001359.600:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13762 comm="syz.5.2476" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff397d9e1d9 code=0x7ffc0000 [ 736.830353][ T27] audit: type=1326 audit(2000001359.620:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13762 comm="syz.5.2476" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff397d97f57 code=0x7ffc0000 [ 736.886021][T13775] futex_wake_op: syz.7.2490 tries to shift op by 144; fix this program [ 737.026281][ C0] net_ratelimit: 9 callbacks suppressed [ 737.583209][T13783] netlink: 11594 bytes leftover after parsing attributes in process `syz.7.2482'. [ 737.685120][T13786] 9pnet_virtio: no channels available for device 127.0.0.1 [ 742.876278][ C0] net_ratelimit: 5 callbacks suppressed [ 747.219652][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.226017][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.794913][T13859] futex_wake_op: syz.0.2503 tries to shift op by 144; fix this program [ 747.838591][T13859] bond0 speed is unknown, defaulting to 1000 [ 747.923712][T13859] bond0 speed is unknown, defaulting to 1000 [ 748.236343][ C0] net_ratelimit: 14 callbacks suppressed [ 752.755279][T13919] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2524'. [ 753.266258][ C0] net_ratelimit: 11 callbacks suppressed [ 757.311997][T13942] netlink: 292 bytes leftover after parsing attributes in process `syz.5.2521'. [ 758.503688][ T8531] net_ratelimit: 5 callbacks suppressed [ 761.006846][T13985] overlayfs: failed to clone lowerpath [ 763.834220][ T8548] net_ratelimit: 5 callbacks suppressed [ 763.991460][T14017] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2540'. [ 764.054127][T14019] jffs2: notice: (14019) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 764.100904][T14021] RDS: rds_bind could not find a transport for fec0:ffff:ffff:ffff::1, load rds_tcp or rds_rdma? [ 769.266294][ C0] net_ratelimit: 7 callbacks suppressed [ 772.055266][T14089] xt_limit: Overflow, try lower: 2/0 [ 774.306239][ C0] net_ratelimit: 5 callbacks suppressed [ 776.541130][ T27] kauditd_printk_skb: 74 callbacks suppressed [ 776.541141][ T27] audit: type=1326 audit(2000001399.770:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14106 comm="syz.1.2567" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53c9d9e1d9 code=0x7ffc0000 [ 777.367604][ T27] audit: type=1326 audit(2000001399.770:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14106 comm="syz.1.2567" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53c9d9e1d9 code=0x7ffc0000 [ 777.456231][ T27] audit: type=1326 audit(2000001399.770:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14106 comm="syz.1.2567" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7f53c9d9e1d9 code=0x7ffc0000 [ 777.545196][ T27] audit: type=1326 audit(2000001399.770:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14106 comm="syz.1.2567" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53c9d9e1d9 code=0x7ffc0000 [ 777.610768][ T27] audit: type=1326 audit(2000001399.770:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14106 comm="syz.1.2567" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53c9d9e1d9 code=0x7ffc0000 [ 777.674296][ T27] audit: type=1326 audit(2000001399.770:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14106 comm="syz.1.2567" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f53c9d9e1d9 code=0x7ffc0000 [ 777.753238][ T27] audit: type=1326 audit(2000001399.770:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14106 comm="syz.1.2567" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53c9d9e1d9 code=0x7ffc0000 [ 777.835278][T14118] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2571'. [ 777.933181][ T27] audit: type=1326 audit(2000001399.770:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14106 comm="syz.1.2567" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53c9d9e1d9 code=0x7ffc0000 [ 779.506306][ C0] net_ratelimit: 9 callbacks suppressed [ 780.347731][T14138] tipc: Enabling of bearer rejected, failed to enable media [ 782.269934][T14145] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 782.279698][T14145] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 782.288755][T14145] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 782.296236][T14145] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 782.304359][T14145] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 782.311768][T14145] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 782.319855][T14145] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 782.327608][T14145] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 782.336279][T14145] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 782.343959][T14145] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 782.352380][T14145] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 782.360208][T14145] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 782.368516][T14145] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 782.376300][T14145] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 782.400105][T14145] 8021q: adding VLAN 0 to HW filter on device bond0 [ 782.408077][T14145] bridge0: port 3(vlan2) entered blocking state [ 782.414385][T14145] bridge0: port 3(vlan2) entered forwarding state [ 782.466560][ T8544] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 782.654387][T14159] device team0 left promiscuous mode [ 782.659981][T14159] device vlan0 left promiscuous mode [ 782.668577][T14159] device bridge1 left promiscuous mode [ 782.674669][T14159] bridge0: port 2(team0) entered disabled state [ 782.966403][T14163] syz.7.2576 sent an empty control message without MSG_MORE. [ 785.235938][ C0] net_ratelimit: 19 callbacks suppressed [ 785.247539][T14159] device veth1_to_bond left promiscuous mode [ 786.252399][T14159] bridge0: port 1(veth1_to_bond) entered disabled state [ 786.855366][T14159] team0: Port device vlan0 removed [ 788.568713][T14159] bond1: (slave erspan1): Releasing backup interface [ 788.717079][T14159] bond2: (slave veth3): Releasing active interface [ 788.723625][T14159] bond2: (slave veth3): the permanent HWaddr of slave - 32:fb:db:3c:7b:08 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 788.815132][T14159] device batadv1 entered promiscuous mode [ 789.060604][T14159] bond2: (slave batadv1): Releasing active interface [ 789.432824][T14159] device batadv1 left promiscuous mode [ 789.475513][T14159] bond2: (slave veth5): Releasing active interface [ 789.535787][T14159] team0: Port device bridge1 removed [ 789.557950][T14187] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 789.598074][T14187] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 789.623441][T14187] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 789.660591][T14187] device bridge_slave_0 left promiscuous mode [ 789.702244][T14187] bridge0: port 1(bridge_slave_0) entered disabled state [ 789.741921][T14187] device bridge_slave_1 left promiscuous mode [ 789.759984][T14187] bridge0: port 2(bridge_slave_1) entered disabled state [ 789.826924][T14187] bond0: (slave bond_slave_0): Releasing backup interface [ 789.887374][T14187] bond0: (slave bond_slave_1): Releasing backup interface [ 790.042167][T14187] team0: Port device team_slave_0 removed [ 790.322313][T14187] team0: Port device team_slave_1 removed [ 790.357353][T14187] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 790.376284][T14187] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 790.401600][T14187] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 790.418952][T14187] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 790.451539][T14187] bond1: (slave bond2): Releasing backup interface [ 790.475785][T14187] bond1: (slave bond2): the permanent HWaddr of slave - da:55:11:7d:4a:51 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 790.548700][T14187] bond1: (slave gretap1): making interface the new active one [ 790.573774][T14187] bond1: (slave gretap1): Releasing backup interface [ 790.706239][ C0] net_ratelimit: 8 callbacks suppressed [ 790.745094][T14190] device vlan0 entered promiscuous mode [ 790.832400][T14190] team0: Port device vlan0 added [ 790.843435][T14195] tipc: Started in network mode [ 790.854655][T14195] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 790.876510][T14195] tipc: Enabled bearer , priority 0 [ 790.896104][T14218] netlink: 'syz.4.2591': attribute type 2 has an invalid length. [ 792.012236][ T4810] tipc: Node number set to 11578026 [ 792.454442][T14246] netlink: 'syz.5.2599': attribute type 1 has an invalid length. [ 792.758806][T14248] 8021q: adding VLAN 0 to HW filter on device bond8 [ 792.860434][T14248] bond7: (slave bond8): making interface the new active one [ 792.911942][T14248] bond7: (slave bond8): Enslaving as an active interface with an up link [ 793.241365][T14246] bond7: (slave gretap1): Enslaving as a backup interface with an up link [ 796.223951][ C0] net_ratelimit: 9 callbacks suppressed [ 801.266205][ C1] net_ratelimit: 7 callbacks suppressed [ 802.159430][T14315] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[12142] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[14315] [ 803.755733][T14323] MTD: Couldn't look up './dev/mtdblock0': -2 [ 803.765205][T14326] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2613'. [ 805.410418][ T27] audit: type=1804 audit(2000001428.690:894): pid=14335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.2621" name="bus" dev="ramfs" ino=73232 res=1 errno=0 [ 805.572503][ T27] audit: type=1804 audit(2000001428.720:895): pid=14335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.2621" name="bus" dev="ramfs" ino=73232 res=1 errno=0 [ 805.705550][ T27] audit: type=1804 audit(2000001428.850:896): pid=14338 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.2621" name="bus" dev="ramfs" ino=73232 res=1 errno=0 [ 806.946189][ C0] net_ratelimit: 19 callbacks suppressed [ 807.595564][ T4286] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 807.616425][ T4290] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 807.635681][ T4286] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 807.649162][ T4286] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 807.658237][ T4286] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 807.676598][ T4286] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 808.057970][T14352] bond0 speed is unknown, defaulting to 1000 [ 808.309836][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.316280][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.697329][T14352] bond0 speed is unknown, defaulting to 1000 [ 809.768122][ T4291] Bluetooth: hci1: command 0x0409 tx timeout [ 810.972844][T14352] chnl_net:caif_netlink_parms(): no params data found [ 811.793493][T14393] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2634'. [ 811.808401][T14305] Cannot find set identified by id 4 to match [ 811.831698][ T4290] Bluetooth: hci1: command 0x041b tx timeout [ 811.848141][T14352] bridge0: port 1(bridge_slave_0) entered blocking state [ 811.875020][T14352] bridge0: port 1(bridge_slave_0) entered disabled state [ 811.944912][T14352] device bridge_slave_0 entered promiscuous mode [ 812.030504][T14352] bridge0: port 2(bridge_slave_1) entered blocking state [ 812.079811][T14352] bridge0: port 2(bridge_slave_1) entered disabled state [ 812.150277][T14352] device bridge_slave_1 entered promiscuous mode [ 812.204157][T14398] tipc: Enabling of bearer rejected, failed to enable media [ 812.372692][T14352] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 812.432380][T14352] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 812.772079][ T27] audit: type=1804 audit(2000001436.050:897): pid=14409 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2637" name="bus" dev="ramfs" ino=72315 res=1 errno=0 [ 812.854501][ T8546] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 812.883696][ T27] audit: type=1804 audit(2000001436.080:898): pid=14409 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.2637" name="bus" dev="ramfs" ino=72315 res=1 errno=0 [ 812.946179][ C0] net_ratelimit: 24 callbacks suppressed [ 813.047608][T14352] team0: Port device team_slave_0 added [ 813.105094][ T27] audit: type=1804 audit(2000001436.220:899): pid=14413 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.2637" name="bus" dev="ramfs" ino=72315 res=1 errno=0 [ 813.228576][ T8546] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 813.361337][T14352] team0: Port device team_slave_1 added [ 813.702855][ T8546] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 813.906203][ T4290] Bluetooth: hci1: command 0x040f tx timeout [ 813.944627][ T8546] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 814.035362][T14352] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 814.080290][T14352] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 814.248486][T14352] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 814.397775][T14352] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 814.487119][T14352] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 814.951111][T14352] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 815.468388][T14352] device hsr_slave_0 entered promiscuous mode [ 815.839519][ T4290] Bluetooth: Wrong link type (-22) [ 815.871017][T14352] device hsr_slave_1 entered promiscuous mode [ 815.986262][ T4290] Bluetooth: hci1: command 0x0419 tx timeout [ 817.618021][T14352] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 817.625612][T14352] Cannot create hsr debugfs directory [ 817.900065][T14444] team0: Port device bridge0 added [ 817.948362][T14447] tipc: Resetting bearer [ 818.141529][T14447] tipc: Resetting bearer [ 818.171960][T14447] device vlan0 left promiscuous mode [ 818.178989][T14447] team0: Failed to send port change of device vlan0 via netlink (err -105) [ 818.306285][ C0] net_ratelimit: 9 callbacks suppressed [ 818.638131][ T8544] tipc: Resetting bearer [ 818.889538][ T8546] tipc: Disabling bearer [ 818.986563][ T8546] tipc: Left network mode [ 820.344286][T14477] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 823.242664][T14499] bond0 speed is unknown, defaulting to 1000 [ 823.906176][ C1] net_ratelimit: 11 callbacks suppressed [ 824.473723][T14525] team0: Port device bridge0 added [ 824.500136][T14519] tipc: Resetting bearer [ 824.695576][T14519] device bridge_slave_0 left promiscuous mode [ 824.770808][T14519] device vlan0 left promiscuous mode [ 824.811511][T14519] device bond3 left promiscuous mode [ 824.858017][T14519] device bridge2 left promiscuous mode [ 824.885496][T14519] device bridge3 left promiscuous mode [ 824.913761][T14499] bond0 speed is unknown, defaulting to 1000 [ 825.006368][T14352] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 825.141731][T14352] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 825.215637][T14352] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 825.602528][T14352] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 826.100156][T14352] 8021q: adding VLAN 0 to HW filter on device bond0 [ 828.158295][T14352] 8021q: adding VLAN 0 to HW filter on device team0 [ 828.262815][ T6012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 828.277072][ T6012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 828.582897][ T8546] device veth5 left promiscuous mode [ 829.001772][ T8546] bridge2: port 2(veth5) entered disabled state [ 829.081123][ T8546] device veth3 left promiscuous mode [ 829.114757][ T8546] bridge2: port 1(veth3) entered disabled state [ 829.346162][ C0] net_ratelimit: 9 callbacks suppressed [ 829.687139][ T8546] device hsr_slave_0 left promiscuous mode [ 829.731243][ T8546] device hsr_slave_1 left promiscuous mode [ 829.771883][ T8546] device veth1_to_bond left promiscuous mode [ 829.820307][ T8546] bridge0: port 4(veth1_to_bond) entered disabled state [ 829.871369][ T8546] device vlan2 left promiscuous mode [ 829.934499][ T8546] device bond0 left promiscuous mode [ 829.966191][ T8546] device bond_slave_0 left promiscuous mode [ 829.972308][ T8546] device bond_slave_1 left promiscuous mode [ 830.043629][ T8546] device macvlan2 left promiscuous mode [ 830.083228][ T8546] device vxlan0 left promiscuous mode [ 830.107915][ T8546] bridge0: port 3(vlan2) entered disabled state [ 830.222955][ T8546] device bridge_slave_1 left promiscuous mode [ 830.259241][ T8546] bridge0: port 2(bridge_slave_1) entered disabled state [ 830.287988][T14587] netlink: 'syz.0.2677': attribute type 11 has an invalid length. [ 831.803311][ T8546] bond4 (unregistering): (slave bridge6): Releasing backup interface [ 833.523747][ T8546] bond4 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 833.540327][ T8546] bond4 (unregistering): Released all slaves [ 833.628866][ T8546] team0 (unregistering): Port device bridge5 removed [ 833.674369][ T8546] bond3 (unregistering): (slave bridge4): Releasing active interface [ 833.708686][ T8546] bond3 (unregistering): Released all slaves [ 833.756647][ T8546] bond0 (unregistering): (slave vxlan0): Releasing backup interface [ 833.783581][ T8546] bond2 (unregistering): Released all slaves [ 833.982779][ T8546] bond1 (unregistering): Released all slaves [ 834.071733][ T8546] bond0 (unregistering): (slave macvlan2): Releasing backup interface [ 834.873389][ T8546] team0 (unregistering): Port device team_slave_1 removed [ 834.941357][ T8546] team0 (unregistering): Port device team_slave_0 removed [ 834.948591][ C0] net_ratelimit: 11 callbacks suppressed [ 835.022160][ T8546] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 835.077786][ T8546] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 835.458237][ T8546] bond0 (unregistering): Released all slaves [ 835.534011][ T8546] smc: removing net device lo with user defined pnetid SYZ0 [ 835.544683][ T6012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 835.561508][ T6012] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 835.570525][ T6012] bridge0: port 1(bridge_slave_0) entered blocking state [ 835.577661][ T6012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 835.585949][ T6012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 835.599666][ T6012] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 835.612207][ T6012] bridge0: port 2(bridge_slave_1) entered blocking state [ 835.619357][ T6012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 835.639605][ T6012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 835.695719][ T6012] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 835.728247][ T6012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 835.777984][ T6012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 835.821470][ T6012] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 835.839343][ T6012] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 835.885010][ T8511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 835.905397][ T8511] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 835.917303][ T8511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 835.925574][ T8511] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 835.978006][ T8511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 836.014585][ T8511] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 836.030050][T14352] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 836.379638][ T8512] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 836.387889][ T8512] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 836.418804][T14352] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 836.782684][ T8512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 836.793703][ T8512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 836.825464][ T8512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 836.841910][ T8512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 836.850676][ T8512] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 836.858680][ T8512] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 836.876726][T14352] device veth0_vlan entered promiscuous mode [ 836.897089][T14352] device veth1_vlan entered promiscuous mode [ 836.930852][ T8548] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 836.941740][ T8548] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 836.953783][ T8548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 836.964965][ T8548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 836.978443][T14352] device veth0_macvtap entered promiscuous mode [ 836.994594][T14352] device veth1_macvtap entered promiscuous mode [ 837.037203][T14352] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 837.045280][ T8548] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 837.054582][ T8548] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 837.068597][ T8548] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 837.081264][ T8548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 837.097649][T14352] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 837.118788][ T8548] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 837.135641][ T8548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 837.154704][T14352] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 837.164497][T14352] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 837.179851][T14352] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 837.193315][T14352] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 837.320771][ T6012] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 837.335178][ T6012] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 837.344096][ T8512] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 837.404008][ T8544] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 837.412374][ T8544] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 837.436413][ T8512] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 838.948820][T14674] bridge0: port 2(bridge_slave_1) entered disabled state [ 838.956391][T14674] bridge0: port 1(bridge_slave_0) entered disabled state [ 839.065580][T14674] bridge0: port 2(bridge_slave_1) entered blocking state [ 839.073345][T14674] bridge0: port 2(bridge_slave_1) entered forwarding state [ 839.084054][T14674] bridge0: port 1(bridge_slave_0) entered blocking state [ 839.091212][T14674] bridge0: port 1(bridge_slave_0) entered forwarding state [ 839.441783][T14684] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2683'. [ 840.066169][ C1] net_ratelimit: 46 callbacks suppressed [ 840.376218][T14674] team0: Port device bridge0 added [ 840.434101][T14677] bridge0: port 1(bridge_slave_0) entered disabled state [ 840.480819][T14677] bridge0: port 2(bridge_slave_1) entered disabled state [ 843.346995][T14722] bond0 speed is unknown, defaulting to 1000 [ 843.755085][T14722] bond0 speed is unknown, defaulting to 1000 [ 845.032871][T14735] device syzkaller0 entered promiscuous mode [ 845.429227][T14745] overlayfs: failed to clone lowerpath [ 845.447801][ T8553] net_ratelimit: 35 callbacks suppressed [ 850.256558][T14803] overlayfs: failed to clone lowerpath [ 850.626145][ C0] net_ratelimit: 31 callbacks suppressed [ 856.610117][ C0] net_ratelimit: 30 callbacks suppressed [ 858.314338][ T4290] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 858.753307][ T27] audit: type=1326 audit(2000001482.030:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14878 comm="syz.8.2734" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0fd39e1d9 code=0x7ffc0000 [ 858.845559][ T27] audit: type=1326 audit(2000001482.060:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14878 comm="syz.8.2734" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd0fd397f57 code=0x7ffc0000 [ 858.908279][T14881] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2735'. [ 858.962444][ T27] audit: type=1326 audit(2000001482.060:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14878 comm="syz.8.2734" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd0fd33f559 code=0x7ffc0000 [ 859.076691][ T27] audit: type=1326 audit(2000001482.060:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14878 comm="syz.8.2734" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0fd39e1d9 code=0x7ffc0000 [ 859.238248][ T27] audit: type=1326 audit(2000001482.060:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14878 comm="syz.8.2734" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fd0fd39e1d9 code=0x7ffc0000 [ 859.435252][ T27] audit: type=1326 audit(2000001482.280:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14878 comm="syz.8.2734" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd0fd397f57 code=0x7ffc0000 [ 859.531575][ T27] audit: type=1326 audit(2000001482.280:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14878 comm="syz.8.2734" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd0fd33f559 code=0x7ffc0000 [ 859.555838][ T27] audit: type=1326 audit(2000001482.280:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14878 comm="syz.8.2734" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0fd39e1d9 code=0x7ffc0000 [ 859.583833][ T27] audit: type=1326 audit(2000001482.280:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14878 comm="syz.8.2734" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0fd39e1d9 code=0x7ffc0000 [ 859.617623][ T27] audit: type=1326 audit(2000001482.300:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14878 comm="syz.8.2734" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd0fd397f57 code=0x7ffc0000 [ 861.826176][ C0] net_ratelimit: 28 callbacks suppressed [ 863.547014][T14947] netlink: 1184 bytes leftover after parsing attributes in process `syz.0.2747'. [ 863.937944][T14948] xt_CT: You must specify a L4 protocol and not use inversions on it [ 864.003669][T14953] futex_wake_op: syz.7.2749 tries to shift op by 144; fix this program [ 864.122965][T14953] bond0 speed is unknown, defaulting to 1000 [ 864.563912][T14953] bond0 speed is unknown, defaulting to 1000 [ 865.820018][T14966] overlayfs: failed to clone lowerpath [ 867.026169][ C0] net_ratelimit: 15 callbacks suppressed [ 868.775500][T15007] netlink: 1184 bytes leftover after parsing attributes in process `syz.7.2764'. [ 870.616688][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.623029][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.859242][T15015] futex_wake_op: syz.1.2766 tries to shift op by 144; fix this program [ 871.904202][T15015] bond0 speed is unknown, defaulting to 1000 [ 871.994262][T15015] bond0 speed is unknown, defaulting to 1000 [ 872.626440][ C1] net_ratelimit: 11 callbacks suppressed [ 874.194726][T15055] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2775'. [ 874.458579][T15055] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2775'. [ 874.494737][T15055] device geneve2 entered promiscuous mode [ 875.942782][T15075] jffs2: notice: (15075) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 877.689647][T15094] bond0 speed is unknown, defaulting to 1000 [ 877.964456][T15094] bond0 speed is unknown, defaulting to 1000 [ 878.242862][ C1] net_ratelimit: 37 callbacks suppressed [ 878.937353][T15105] ------------[ cut here ]------------ [ 878.943524][T15105] WARNING: CPU: 1 PID: 15105 at net/mac80211/iface.c:532 ieee80211_do_stop+0x1b35/0x2060 [ 878.953872][T15105] Modules linked in: [ 878.957831][T15105] CPU: 1 PID: 15105 Comm: syz.8.2783 Not tainted syzkaller #0 [ 878.965301][T15105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 878.975555][T15105] RIP: 0010:ieee80211_do_stop+0x1b35/0x2060 [ 878.981530][T15105] Code: f7 49 81 c4 98 06 00 00 4c 89 e0 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 ef 04 00 00 41 ff 0c 24 e9 f9 f5 ff ff e8 7b 22 d4 f7 <0f> 0b e9 f0 e8 ff ff e8 6f 22 d4 f7 48 c7 c7 c0 25 a7 8b 89 de e8 [ 879.001273][T15105] RSP: 0018:ffffc90004caf720 EFLAGS: 00010246 [ 879.007387][T15105] RAX: ffffffff89ae2405 RBX: 0000000000000001 RCX: 0000000000080000 [ 879.015372][T15105] RDX: ffffc90006059000 RSI: 000000000007ffff RDI: 0000000000080000 [ 879.023388][T15105] RBP: ffffc90004caf908 R08: ffffc90004caf5c7 R09: 1ffff92000995eb8 [ 879.031382][T15105] R10: dffffc0000000000 R11: fffff52000995eb9 R12: ffffc90004caf870 [ 879.039402][T15105] R13: dffffc0000000000 R14: 0000000000000001 R15: ffff88807db76760 [ 879.047414][T15105] FS: 00007fd0fe2706c0(0000) GS:ffff8880b8d00000(0000) knlGS:0000000000000000 [ 879.056385][T15105] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 879.062978][T15105] CR2: 00007ffbf01d3eb8 CR3: 00000000273cf000 CR4: 00000000003506e0 [ 879.071007][T15105] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 879.079015][T15105] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 879.087025][T15105] Call Trace: [ 879.090325][T15105] [ 879.093278][T15105] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 879.099338][T15105] ? rcu_is_watching+0x11/0xa0 [ 879.104126][T15105] ? __mutex_lock+0x1ab/0xae0 [ 879.108825][T15105] ? ieee80211_sdata_stop+0x80/0x80 [ 879.114027][T15105] ? mutex_lock_nested+0x10/0x10 [ 879.118984][T15105] ? __local_bh_enable_ip+0x136/0x1c0 [ 879.124353][T15105] ? dev_deactivate_many+0xb49/0xcd0 [ 879.129663][T15105] ieee80211_stop+0x41f/0x490 [ 879.134356][T15105] ? dev_deactivate_many+0x242/0xcd0 [ 879.139680][T15105] ? ieee80211_open+0x200/0x200 [ 879.144566][T15105] __dev_close_many+0x1d1/0x2b0 [ 879.149472][T15105] ? dev_close_many+0x400/0x400 [ 879.154346][T15105] ? __mutex_trylock_common+0x15c/0x260 [ 879.159949][T15105] ? trace_raw_output_contention_end+0xd0/0xd0 [ 879.166161][T15105] dev_close_many+0x21c/0x400 [ 879.170871][T15105] ? __dev_open+0x430/0x430 [ 879.175391][T15105] ? __mutex_lock+0x1ab/0xae0 [ 879.180130][T15105] ? __lock_acquire+0x7ea0/0x7ea0 [ 879.185187][T15105] dev_close+0x154/0x210 [ 879.189481][T15105] ? __dev_close_many+0x2b0/0x2b0 [ 879.194529][T15105] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 879.200478][T15105] ? lockdep_hardirqs_on+0x94/0x140 [ 879.205712][T15105] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 879.211665][T15105] ? cfg80211_wiphy_work+0x260/0x260 [ 879.217014][T15105] cfg80211_shutdown_all_interfaces+0xab/0x1c0 [ 879.217041][T15105] ? cfg80211_wiphy_work+0x260/0x260 [ 879.217065][T15105] cfg80211_rfkill_set_block+0x29/0x40 [ 879.217086][T15105] rfkill_set_block+0x1c1/0x3c0 [ 879.217117][T15105] rfkill_fop_write+0x453/0x560 [ 879.228546][T15105] ? rfkill_fop_read+0x550/0x550 [ 879.228577][T15105] ? common_file_perm+0xd0/0x1c0 [ 879.228606][T15105] ? fsnotify_perm+0x5a/0x550 [ 879.228624][T15105] ? security_file_permission+0x75/0xa0 [ 879.228646][T15105] ? rfkill_fop_read+0x550/0x550 [ 879.228672][T15105] vfs_write+0x2dc/0x9a0 [ 879.238978][T15105] ? file_end_write+0x250/0x250 [ 879.248735][T15105] ? __fget_files+0x28/0x460 [ 879.258323][T15105] ? __fget_files+0x3fc/0x460 [ 879.268761][T15105] ? __fdget_pos+0x1d4/0x360 [ 879.277816][T15105] ? ksys_write+0x70/0x260 [ 879.296237][T15105] ksys_write+0x14d/0x260 [ 879.300601][T15105] ? __ia32_sys_read+0x80/0x80 [ 879.305393][T15105] ? lockdep_hardirqs_on+0x94/0x140 [ 879.310648][T15105] do_syscall_64+0x4c/0xa0 [ 879.315084][T15105] ? clear_bhb_loop+0x60/0xb0 [ 879.319815][T15105] ? clear_bhb_loop+0x60/0xb0 [ 879.324519][T15105] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 879.330462][T15105] RIP: 0033:0x7fd0fd39e1d9 [ 879.334896][T15105] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 879.354553][T15105] RSP: 002b:00007fd0fe270028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 879.363005][T15105] RAX: ffffffffffffffda RBX: 00007fd0fd625fa0 RCX: 00007fd0fd39e1d9 [ 879.371029][T15105] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000004 [ 879.379052][T15105] RBP: 00007fd0fd435888 R08: 0000000000000000 R09: 0000000000000000 [ 879.387068][T15105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 879.395060][T15105] R13: 00007fd0fd626038 R14: 00007fd0fd625fa0 R15: 00007ffc28011428 [ 879.403103][T15105] [ 879.406176][T15105] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 879.413461][T15105] CPU: 1 PID: 15105 Comm: syz.8.2783 Not tainted syzkaller #0 [ 879.420924][T15105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 879.430988][T15105] Call Trace: [ 879.434279][T15105] [ 879.437217][T15105] dump_stack_lvl+0x188/0x24e [ 879.441913][T15105] ? memcpy+0x3c/0x60 [ 879.445905][T15105] ? show_regs_print_info+0x12/0x12 [ 879.451124][T15105] ? load_image+0x410/0x410 [ 879.455660][T15105] panic+0x2d3/0x710 [ 879.456089][ T127] nfc: nfc_urelease_event_work: portid 1535 [ 879.456423][ T127] nfc: nfc_urelease_event_work: portid 1583 [ 879.471338][T15105] ? bpf_jit_dump+0xd0/0xd0 [ 879.475858][T15105] __warn+0x2f8/0x4f0 [ 879.479836][T15105] ? ieee80211_do_stop+0x1b35/0x2060 [ 879.485119][T15105] ? ieee80211_do_stop+0x1b35/0x2060 [ 879.490397][T15105] report_bug+0x2ba/0x4f0 [ 879.494723][T15105] ? ieee80211_do_stop+0x1b35/0x2060 [ 879.500011][T15105] handle_bug+0x3a/0x70 [ 879.504163][T15105] exc_invalid_op+0x16/0x40 [ 879.508663][T15105] asm_exc_invalid_op+0x16/0x20 [ 879.513513][T15105] RIP: 0010:ieee80211_do_stop+0x1b35/0x2060 [ 879.519402][T15105] Code: f7 49 81 c4 98 06 00 00 4c 89 e0 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 ef 04 00 00 41 ff 0c 24 e9 f9 f5 ff ff e8 7b 22 d4 f7 <0f> 0b e9 f0 e8 ff ff e8 6f 22 d4 f7 48 c7 c7 c0 25 a7 8b 89 de e8 [ 879.539002][T15105] RSP: 0018:ffffc90004caf720 EFLAGS: 00010246 [ 879.545061][T15105] RAX: ffffffff89ae2405 RBX: 0000000000000001 RCX: 0000000000080000 [ 879.553022][T15105] RDX: ffffc90006059000 RSI: 000000000007ffff RDI: 0000000000080000 [ 879.560986][T15105] RBP: ffffc90004caf908 R08: ffffc90004caf5c7 R09: 1ffff92000995eb8 [ 879.568949][T15105] R10: dffffc0000000000 R11: fffff52000995eb9 R12: ffffc90004caf870 [ 879.576912][T15105] R13: dffffc0000000000 R14: 0000000000000001 R15: ffff88807db76760 [ 879.584887][T15105] ? ieee80211_do_stop+0x1b35/0x2060 [ 879.590180][T15105] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 879.596159][T15105] ? rcu_is_watching+0x11/0xa0 [ 879.600922][T15105] ? __mutex_lock+0x1ab/0xae0 [ 879.605596][T15105] ? ieee80211_sdata_stop+0x80/0x80 [ 879.610798][T15105] ? mutex_lock_nested+0x10/0x10 [ 879.615731][T15105] ? __local_bh_enable_ip+0x136/0x1c0 [ 879.621107][T15105] ? dev_deactivate_many+0xb49/0xcd0 [ 879.626393][T15105] ieee80211_stop+0x41f/0x490 [ 879.631068][T15105] ? dev_deactivate_many+0x242/0xcd0 [ 879.636354][T15105] ? ieee80211_open+0x200/0x200 [ 879.641202][T15105] __dev_close_many+0x1d1/0x2b0 [ 879.646053][T15105] ? dev_close_many+0x400/0x400 [ 879.650900][T15105] ? __mutex_trylock_common+0x15c/0x260 [ 879.654135][ C0] virtqueue callback for ffff888145659000 (ffffffff84767210) [ 879.654203][ C0] virtqueue interrupt with no work for ffff888145658e00 [ 879.654213][ C0] virtqueue interrupt with no work for ffff888145658c00 [ 879.677610][T15105] ? trace_raw_output_contention_end+0xd0/0xd0 [ 879.683767][T15105] dev_close_many+0x21c/0x400 [ 879.688447][T15105] ? __dev_open+0x430/0x430 [ 879.692947][T15105] ? __mutex_lock+0x1ab/0xae0 [ 879.697623][T15105] ? __lock_acquire+0x7ea0/0x7ea0 [ 879.702651][T15105] dev_close+0x154/0x210 [ 879.706892][T15105] ? __dev_close_many+0x2b0/0x2b0 [ 879.711908][T15105] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 879.717791][T15105] ? lockdep_hardirqs_on+0x94/0x140 [ 879.722989][T15105] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 879.728873][T15105] ? cfg80211_wiphy_work+0x260/0x260 [ 879.734158][T15105] cfg80211_shutdown_all_interfaces+0xab/0x1c0 [ 879.740327][T15105] ? cfg80211_wiphy_work+0x260/0x260 [ 879.745620][T15105] cfg80211_rfkill_set_block+0x29/0x40 [ 879.751074][T15105] rfkill_set_block+0x1c1/0x3c0 [ 879.755929][T15105] rfkill_fop_write+0x453/0x560 [ 879.760782][T15105] ? rfkill_fop_read+0x550/0x550 [ 879.765715][T15105] ? common_file_perm+0xd0/0x1c0 [ 879.770652][T15105] ? fsnotify_perm+0x5a/0x550 [ 879.775323][T15105] ? security_file_permission+0x75/0xa0 [ 879.780865][T15105] ? rfkill_fop_read+0x550/0x550 [ 879.785798][T15105] vfs_write+0x2dc/0x9a0 [ 879.790046][T15105] ? file_end_write+0x250/0x250 [ 879.794900][T15105] ? __fget_files+0x28/0x460 [ 879.799488][T15105] ? __fget_files+0x3fc/0x460 [ 879.804167][T15105] ? __fdget_pos+0x1d4/0x360 [ 879.808752][T15105] ? ksys_write+0x70/0x260 [ 879.813167][T15105] ksys_write+0x14d/0x260 [ 879.817507][T15105] ? __ia32_sys_read+0x80/0x80 [ 879.822282][T15105] ? lockdep_hardirqs_on+0x94/0x140 [ 879.827482][T15105] do_syscall_64+0x4c/0xa0 [ 879.831896][T15105] ? clear_bhb_loop+0x60/0xb0 [ 879.836574][T15105] ? clear_bhb_loop+0x60/0xb0 [ 879.841251][T15105] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 879.847151][T15105] RIP: 0033:0x7fd0fd39e1d9 [ 879.851567][T15105] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 879.871170][T15105] RSP: 002b:00007fd0fe270028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 879.879584][T15105] RAX: ffffffffffffffda RBX: 00007fd0fd625fa0 RCX: 00007fd0fd39e1d9 [ 879.887551][T15105] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000004 [ 879.895519][T15105] RBP: 00007fd0fd435888 R08: 0000000000000000 R09: 0000000000000000 [ 879.903485][T15105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 879.911448][T15105] R13: 00007fd0fd626038 R14: 00007fd0fd625fa0 R15: 00007ffc28011428 [ 879.919427][T15105] [ 879.922678][T15105] Kernel Offset: disabled [ 879.927135][T15105] Rebooting in 86400 seconds..