last executing test programs: 12m33.131840433s ago: executing program 2 (id=122): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x80000, &(0x7f0000000440)=""/210, 0xd2, 0x800001, 0x8000000011}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1, 0x37}}, &(0x7f0000000600)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 12m32.902347498s ago: executing program 2 (id=124): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000140)="d800000018007b29e00212ba0d8105040a601800ff0f040b067c55a1bc000900b80006990600000015000500fe800000000000000300014002000c0901ac", 0x3e}], 0x1, 0x0, 0x0, 0x2663}, 0x50000) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', 0x1}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, &(0x7f0000000100), 0x12) listen(r2, 0x9) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000008050000010b007e"], 0x97) 12m32.577035466s ago: executing program 2 (id=128): open_tree(0xffffffffffffff9c, 0x0, 0x89901) r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x66020000) mount$9p_fd(0x0, 0x0, 0x0, 0x104000, 0x0) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x1000002, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 12m31.366979866s ago: executing program 2 (id=136): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) mount$bpf(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000100), 0x10000, 0x0) 12m31.029631944s ago: executing program 2 (id=138): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x6, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b07caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) writev(r0, &(0x7f0000001540)=[{&(0x7f0000000440)='c', 0x1}], 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000240)=0x2, 0x4) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000480)="c3", 0x1}], 0x1) 12m29.448775562s ago: executing program 2 (id=145): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 12m28.289498901s ago: executing program 32 (id=145): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 11m39.917909927s ago: executing program 1 (id=388): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x749}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc89e, 0xc000, 0x8, 0xbe}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2c, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0x0, 0x7fc00100}]}) socket$inet6_udp(0xa, 0x2, 0x0) madvise(&(0x7f0000c0c000/0x1000)=nil, 0x1000, 0x4) 11m38.933335831s ago: executing program 1 (id=394): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0900000004000000080000000a"], 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a000000020000000200000004"], 0x2d) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) 11m38.342893386s ago: executing program 1 (id=399): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x8) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@delchain={0x44, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r5, {}, {0xfff2, 0xffff}, {0xffff, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}, @TCA_FLOWER_CLASSID={0x8, 0x1, {0x23ea5d1b09597025, 0xd}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) 11m37.539187405s ago: executing program 1 (id=405): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) mount$bpf(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000100), 0x10000, 0x0) 11m37.31857745s ago: executing program 1 (id=407): unshare(0x22020600) mount(0x0, 0x0, &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x80) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x18, &(0x7f0000000100)=0xa, 0x4) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) 11m31.283674097s ago: executing program 1 (id=424): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', 0x1}) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000180)={{0x7e, @rand_addr=0x64010101, 0x4e24, 0x2, 'lblc\x00', 0x4, 0xf, 0x5b}, {@broadcast, 0x4e24, 0x1, 0x101, 0x5}}, 0x44) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, &(0x7f0000000100), 0x12) listen(r2, 0x1) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000008050000010b007e"], 0x97) 11m31.283620127s ago: executing program 33 (id=424): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', 0x1}) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000180)={{0x7e, @rand_addr=0x64010101, 0x4e24, 0x2, 'lblc\x00', 0x4, 0xf, 0x5b}, {@broadcast, 0x4e24, 0x1, 0x101, 0x5}}, 0x44) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, &(0x7f0000000100), 0x12) listen(r2, 0x1) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000008050000010b007e"], 0x97) 10.609594562s ago: executing program 4 (id=2989): bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @empty, 0x7}, 0x1c) r0 = syz_open_dev$video4linux(&(0x7f0000000540), 0x110000fc5, 0x12f1e502c5c14a57) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f00000000c0)={0x2000000, 0x0, 0x100f, 0x2220, 0x5, 0x4000c251, 0x7f, 0x1}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000040)="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f01", 0x17) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="040e0c92df1e6f845d5d356ff701030300cda0e305cbc3f9e8106720929f5e1e6dba4fdea9c660f3541818a7bd4a9343ba3be2c1cdd15632a65f543b092a7d26cbebf5edf2b3b66cbcb5344fb056df794425ce27f149d68ee82814a32ffa455b22943e651a2035f0e6311e54d9fcc7605bb1b8e07670b75297e2c38db144f207f49fa4d8b32d9a14f5c8b5ae57"], 0xf) nanosleep(&(0x7f00000000c0)={0x0, 0x5f5e100}, 0x0) setns(0xc9, 0x0) r2 = socket(0x1f, 0x5, 0x8) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000100)={0x0, 0x3e8}, 0x10) connect(r2, &(0x7f0000000180)=@generic={0x1f, "01020304050600"}, 0x80) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 8.714867128s ago: executing program 4 (id=2996): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xebf92000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000140), 0x0, 0x0) inotify_init() syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="02c90010000c00050019030800bd"], 0x15) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0) 6.1688128s ago: executing program 4 (id=3005): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x2, 0x1}, 0x20) mount(&(0x7f0000000380)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000340)='nilfs2\x00', 0x800000, 0x0) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_pscan_rep_mode={{0x20, 0x7}, {@none, 0x60}}}, 0xa) open_tree(0xffffffffffffffff, &(0x7f0000000640)='\x00', 0x9901) migrate_pages(0x0, 0x200, &(0x7f0000000280)=0xfa34, 0x0) 5.451617887s ago: executing program 3 (id=3007): socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0) pipe2(&(0x7f0000000000), 0x80000) pipe2(&(0x7f0000000200), 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000230000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 5.401338749s ago: executing program 3 (id=3008): mmap$IORING_OFF_CQ_RING(0x7fffffffb000, 0x2dc1, 0x300000d, 0xbd4c341840b03bf2, 0xffffffffffffffff, 0x8000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) quotactl$Q_GETINFO(0xffffffff80000502, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000180)={0x8, {{0xa, 0x4e21, 0xa3f, @mcast1, 0xbfd}}, {{0xa, 0x4e1d, 0x5, @remote, 0x40}}}, 0x108) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt$inet6_buf(r2, 0x29, 0x30, &(0x7f0000000180)=""/214, &(0x7f0000000080)=0xd6) 5.171753614s ago: executing program 5 (id=3010): bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @empty, 0x7}, 0x1c) r0 = syz_open_dev$video4linux(&(0x7f0000000540), 0x110000fc5, 0x12f1e502c5c14a57) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f00000000c0)={0x2000000, 0x0, 0x100f, 0x2220, 0x5, 0x4000c251, 0x7f, 0x1}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000040)="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f01", 0x17) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="040e0c92df1e6f845d5d356ff701030300cda0e305cbc3f9e8106720929f5e1e6dba4fdea9c660f3541818a7bd4a9343ba3be2c1cdd15632a65f543b092a7d26cbebf5edf2b3b66cbcb5344fb056df794425ce27f149d68ee82814a32ffa455b22943e651a2035f0e6311e54d9fcc7605bb1b8e07670b75297e2c38db144f207f49fa4d8b32d9a14f5c8b5ae57"], 0xf) nanosleep(&(0x7f00000000c0)={0x0, 0x5f5e100}, 0x0) setns(0xc9, 0x0) r2 = socket(0x1f, 0x5, 0x8) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000100)={0x0, 0x3e8}, 0x10) bind(r2, &(0x7f0000000140)=@generic={0x1, "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000008000"}, 0x80) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) close(0xffffffffffffffff) 4.560517989s ago: executing program 3 (id=3011): bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @empty, 0x7}, 0x1c) r0 = syz_open_dev$video4linux(&(0x7f0000000540), 0x110000fc5, 0x12f1e502c5c14a57) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f00000000c0)={0x2000000, 0x0, 0x100f, 0x2220, 0x5, 0x4000c251, 0x7f, 0x1}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000040)="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f01", 0x17) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="040e0c92df1e6f845d5d356ff701030300cda0e305cbc3f9e8106720929f5e1e6dba4fdea9c660f3541818a7bd4a9343ba3be2c1cdd15632a65f543b092a7d26cbebf5edf2b3b66cbcb5344fb056df794425ce27f149d68ee82814a32ffa455b22943e651a2035f0e6311e54d9fcc7605bb1b8e07670b75297e2c38db144f207f49fa4d8b32d9a14f5c8b5ae57"], 0xf) nanosleep(&(0x7f00000000c0)={0x0, 0x5f5e100}, 0x0) setns(0xc9, 0x0) r2 = socket(0x1f, 0x5, 0x8) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000100)={0x0, 0x3e8}, 0x10) bind(r2, &(0x7f0000000140)=@generic={0x1, "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000008000"}, 0x80) connect(r2, &(0x7f0000000180)=@generic={0x1f, "01020304050600"}, 0x80) 4.235005837s ago: executing program 0 (id=3012): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x143102) fsopen(0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c8) mkdirat(0xffffffffffffffff, 0x0, 0x120) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xae4d2f8ed3bfc611) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) timer_create(0x1, 0x0, 0x0) write(r0, &(0x7f0000000000)='7', 0x1) keyctl$get_persistent(0x16, 0xffffffffffffffff, 0xfffffffffffffffd) 4.156505299s ago: executing program 0 (id=3013): bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x9, 0x4, 0x4, 0x100, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x2000000, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c636865636b3d72656c617865642c646d61736b3d30303030303030303030303030303030303030303036322c666c7573682c00ed65503ccec9beef4e3a71579390a78893cf794eabe67967531177a5a8a723cb36529bc238be0bc2df664dee9ab34c2269c61c143e0c11a83b8a7214e0a160bcc29b3c030bf99ccb18520651f6cb1a99bbe9b6f8235a156c38c8cb2a8312538163a9da8fb380c7caa6475b7003c0e3003e88bd4ef6abe8b7c2dad0d8e397576687df8ae41502420d0aba004f5b98e9a286"], 0x1, 0x2cb, &(0x7f0000000540)="$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") r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x1, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x2) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x20000, {0xa, 0x38, 0x30, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14, 0x6, {0x2, 0x2, 0x6, 0xfff}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0xfffffffe, 0x0, {0xa, 0x0, 0x46, 0xfe, r5}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_RT_PRIORITY={0x8, 0x9, 0x2}]}, 0x34}}, 0x0) 4.021216282s ago: executing program 5 (id=3014): bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @empty, 0x7}, 0x1c) r0 = syz_open_dev$video4linux(&(0x7f0000000540), 0x110000fc5, 0x12f1e502c5c14a57) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f00000000c0)={0x2000000, 0x0, 0x100f, 0x2220, 0x5, 0x4000c251, 0x7f, 0x1}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000040)="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f01", 0x17) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="040e0c92df1e6f845d5d356ff701030300cda0e305cbc3f9e8106720929f5e1e6dba4fdea9c660f3541818a7bd4a9343ba3be2c1cdd15632a65f543b092a7d26cbebf5edf2b3b66cbcb5344fb056df794425ce27f149d68ee82814a32ffa455b22943e651a2035f0e6311e54d9fcc7605bb1b8e07670b75297e2c38db144f207f49fa4d8b32d9a14f5c8b5ae57"], 0xf) nanosleep(&(0x7f00000000c0)={0x0, 0x5f5e100}, 0x0) setns(0xc9, 0x0) r2 = socket(0x1f, 0x5, 0x8) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000100)={0x0, 0x3e8}, 0x10) bind(r2, &(0x7f0000000140)=@generic={0x1, "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000008000"}, 0x80) connect(r2, &(0x7f0000000180)=@generic={0x1f, "01020304050600"}, 0x80) close(0xffffffffffffffff) 4.006046313s ago: executing program 4 (id=3015): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000002, 0x31, 0xffffffffffffffff, 0x1000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r0, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x10a) flock(r1, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, &(0x7f0000001f40)=""/4089, 0x3f, 0xff9, 0x1}, 0x28) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x8, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0xfffff800, 0x1f, &(0x7f00000000c0)=""/31, 0x41000, 0x39, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000200)={0x0, 0x6, 0x7, 0x800}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000640)=[r5], &(0x7f00000002c0)=[{0x4, 0x5, 0xfffffffb, 0x8}], 0x10, 0x80000001}, 0x94) ioctl$KVM_CAP_DISABLE_QUIRKS(r5, 0x4068aea3, 0x0) 3.888826086s ago: executing program 0 (id=3016): r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0x8) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0xfffffffd) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x8) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r4, 0x7) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r5, 0x100) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r6) 3.851151366s ago: executing program 0 (id=3017): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x8004, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f00000021c0)={0x2, 0x4e26, @multicast1}, 0x10) symlinkat(0x0, 0xffffffffffffff9c, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r1, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) syz_mount_image$ext4(&(0x7f0000000800)='ext2\x00', &(0x7f0000000080)='./bus\x00', 0x1000000, &(0x7f00000007c0)={[{@stripe={'stripe', 0x3d, 0x2}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x4c2, &(0x7f0000000100)="$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") setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000080)=0xd27, 0x4) connect$inet(r1, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) sendto(r1, &(0x7f0000000380)="50fbdf", 0x3, 0x44, 0x0, 0x0) sendto$inet(r1, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x8, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x49, 0x6, 0x5f, 0x9, 0x11, 0xffff2d35, 0xff7fff01, 0x6, 0x5, 0x6, 0x5, 0x6, 0x20000004, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0xffffffff, 0xffffffff, 0x0, 0x1004, 0x7, 0x20003, 0x4, 0x2, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0xa, 0x13, 0x1, 0x7, 0x5, 0x3f, 0x18e, 0x200006, 0x6, 0x454f, 0x6, 0x80004, 0x8, 0x7, 0x80, 0x0, 0x5, 0xc, 0x8, 0x8002, 0x1, 0x40], [0x10000007, 0x3, 0x8000012f, 0x8006, 0x5, 0xfffffff7, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x4, 0xfffffff8, 0x5, 0x0, 0x3, 0x5, 0x31, 0xe, 0x1, 0x7, 0xea4, 0x100, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0x2, 0x200004e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x6, 0x6, 0x47, 0x2, 0x1, 0xfe000000, 0xa, 0x2, 0x4, 0x9, 0x3, 0x1, 0x4000009, 0xa, 0x0, 0x3, 0xbc45, 0x65, 0x42, 0x3], [0x7, 0x408, 0x4, 0x9, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x80005, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xffffffff, 0x5, 0x2, 0x1, 0x400003, 0x20000008, 0x4, 0x2, 0x3, 0x107, 0x800003, 0x200, 0x80, 0x3, 0x10000, 0x2950bfaf, 0x1000, 0x8001, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x200807ff, 0x2006, 0x80aaed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x4, 0x4, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x4184, 0x5, 0x3, 0x2, 0x5, 0x2, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0xffffffff, 0x2000082, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x3, 0x7, 0xb0, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x2800000, 0xa1f, 0xf40, 0xa, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x1, 0xd6, 0x200, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 3.450308476s ago: executing program 3 (id=3018): bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @empty, 0x7}, 0x1c) r0 = syz_open_dev$video4linux(&(0x7f0000000540), 0x110000fc5, 0x12f1e502c5c14a57) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f00000000c0)={0x2000000, 0x0, 0x100f, 0x2220, 0x5, 0x4000c251, 0x7f, 0x1}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000040)="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f01", 0x17) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="040e0c92df1e6f845d5d356ff701030300cda0e305cbc3f9e8106720929f5e1e6dba4fdea9c660f3541818a7bd4a9343ba3be2c1cdd15632a65f543b092a7d26cbebf5edf2b3b66cbcb5344fb056df794425ce27f149d68ee82814a32ffa455b22943e651a2035f0e6311e54d9fcc7605bb1b8e07670b75297e2c38db144f207f49fa4d8b32d9a14f5c8b5ae57"], 0xf) nanosleep(&(0x7f00000000c0)={0x0, 0x5f5e100}, 0x0) setns(0xc9, 0x0) connect(0xffffffffffffffff, &(0x7f0000000180)=@generic={0x1f, "01020304050600"}, 0x80) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 3.252867221s ago: executing program 5 (id=3019): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) writev(0xffffffffffffffff, &(0x7f0000000a00)=[{0x0}, {0x0}], 0x2) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$FUSE(r3, &(0x7f0000001180)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.256744015s ago: executing program 5 (id=3020): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r1, 0x0, 0x0) recvfrom(r3, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000900)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9135a01c9754a128ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5", 0x4d, 0x12, 0x0, 0x0) 2.207396596s ago: executing program 0 (id=3021): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$rds(0xffffffffffffffff, 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r3, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r3, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 2.183387477s ago: executing program 4 (id=3022): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) ioctl$TIOCGPTPEER(r0, 0x5441, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084) r2 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002fb}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0x3, 0x660b, 0x8, 0x4, 0x18, "ad683117f988a209"}) 1.864897275s ago: executing program 3 (id=3023): bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @empty, 0x7}, 0x1c) r0 = syz_open_dev$video4linux(&(0x7f0000000540), 0x110000fc5, 0x12f1e502c5c14a57) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f00000000c0)={0x2000000, 0x0, 0x100f, 0x2220, 0x5, 0x4000c251, 0x7f, 0x1}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000040)="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f01", 0x17) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="040e0c92df1e6f845d5d356ff701030300cda0e305cbc3f9e8106720929f5e1e6dba4fdea9c660f3541818a7bd4a9343ba3be2c1cdd15632a65f543b092a7d26cbebf5edf2b3b66cbcb5344fb056df794425ce27f149d68ee82814a32ffa455b22943e651a2035f0e6311e54d9fcc7605bb1b8e07670b75297e2c38db144f207f49fa4d8b32d9a14f5c8b5ae57"], 0xf) nanosleep(&(0x7f00000000c0)={0x0, 0x5f5e100}, 0x0) setns(0xc9, 0x0) r2 = socket(0x1f, 0x5, 0x8) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000100)={0x0, 0x3e8}, 0x10) bind(r2, &(0x7f0000000140)=@generic={0x1, "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000008000"}, 0x80) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) close(0xffffffffffffffff) 1.187382101s ago: executing program 0 (id=3024): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x2, 0x1}, 0x20) mount(&(0x7f0000000380)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000340)='nilfs2\x00', 0x800000, 0x0) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_pscan_rep_mode={{0x20, 0x7}, {@none, 0x60}}}, 0xa) open_tree(0xffffffffffffffff, &(0x7f0000000640)='\x00', 0x9901) migrate_pages(0x0, 0x200, &(0x7f0000000280)=0xfa34, 0x0) 929.880108ms ago: executing program 5 (id=3025): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r3, &(0x7f0000001500)=[{0x0}], 0x1, 0x1, 0x1) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mknod$loop(&(0x7f000000db40)='./file0\x00', 0x1000, 0x0) openat2(0xffffffffffffff9c, &(0x7f0000001400)='./file0\x00', &(0x7f0000001440)={0x122240, 0x10b, 0x7}, 0x18) 472.825849ms ago: executing program 4 (id=3026): bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @empty, 0x7}, 0x1c) r0 = syz_open_dev$video4linux(&(0x7f0000000540), 0x110000fc5, 0x12f1e502c5c14a57) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f00000000c0)={0x2000000, 0x0, 0x100f, 0x2220, 0x5, 0x4000c251, 0x7f, 0x1}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000040)="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f01", 0x17) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="040e0c92df1e6f845d5d356ff701030300cda0e305cbc3f9e8106720929f5e1e6dba4fdea9c660f3541818a7bd4a9343ba3be2c1cdd15632a65f543b092a7d26cbebf5edf2b3b66cbcb5344fb056df794425ce27f149d68ee82814a32ffa455b22943e651a2035f0e6311e54d9fcc7605bb1b8e07670b75297e2c38db144f207f49fa4d8b32d9a14f5c8b5ae57"], 0xf) nanosleep(&(0x7f00000000c0)={0x0, 0x5f5e100}, 0x0) setns(0xc9, 0x0) r2 = socket(0x1f, 0x5, 0x8) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000100)={0x0, 0x3e8}, 0x10) bind(r2, &(0x7f0000000140)=@generic={0x1, "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000008000"}, 0x80) 361.179222ms ago: executing program 3 (id=3027): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) socket$inet6(0xa, 0xb0c8d8ad4c48b294, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r2 = io_uring_setup(0x1249, &(0x7f0000000080)={0x0, 0xb9db, 0x2, 0x0, 0x1bd}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 0s ago: executing program 5 (id=3028): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000000000)=[{{&(0x7f0000000180)={0xa, 0x4e24, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}, 0x1c, &(0x7f0000000400)}}], 0x1, 0x0) shutdown(r2, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='configfs\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nullb/nullb1\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/nullb/nullb1/memory_backed\x00', 0x2, 0x0) write(r3, &(0x7f0000000e00)='1', 0x1) openat(0xffffffffffffff9c, &(0x7f0000001300)='./config/nullb/nullb1/zone_nr_conv\x00', 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nullb/nullb1/power\x00', 0x2, 0x0) write(r4, &(0x7f0000000700)='1', 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) kernel console output (not intermixed with test programs): mpat=0 ip=0x7f9c4df5ea0e code=0x7ffc0000 [ 294.716077][ T9589] ceph: No mds server is up or the cluster is laggy [ 295.312323][ T9608] loop3: detected capacity change from 0 to 4096 [ 295.364238][ T9608] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 295.410586][ T9608] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 295.723647][ T8226] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.682885][ T5819] libceph: connect (2)127.0.0.1:6789 error -101 [ 296.701212][ T5819] libceph: ceph_tcp_connect failed: -101 [ 296.706915][ T5819] libceph: mon0 (2)127.0.0.1:6789 connect error [ 296.744094][ T9643] loop3: detected capacity change from 0 to 164 [ 296.981192][ T5819] libceph: connect (2)127.0.0.1:6789 error -101 [ 296.988928][ T5819] libceph: ceph_tcp_connect failed: -101 [ 296.994672][ T5819] libceph: mon0 (2)127.0.0.1:6789 connect error [ 297.509120][ T5819] libceph: connect (2)127.0.0.1:6789 error -101 [ 297.519788][ T9640] ceph: No mds server is up or the cluster is laggy [ 297.528640][ T5819] libceph: ceph_tcp_connect failed: -101 [ 297.540061][ T5819] libceph: mon0 (2)127.0.0.1:6789 connect error [ 298.199319][ T9682] Bluetooth: MGMT ver 1.22 [ 299.036354][ T9710] loop3: detected capacity change from 0 to 512 [ 300.378540][ T8] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 300.541040][ T9738] 9pnet: p9_errstr2errno: server reported unknown error Àñ'IÓ$íÛ·=¼¼ [ 300.700154][ T9745] batman_adv: batadv0: Adding interface: veth0 [ 300.706393][ T9745] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 300.746563][ T8] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 300.761832][ T8] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 300.771867][ T9745] batman_adv: batadv0: Interface activated: veth0 [ 300.781772][ T8] usb 5-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice= 1.00 [ 300.826698][ T9743] batman_adv: batadv0: Interface deactivated: veth0 [ 300.926757][ T9743] batman_adv: batadv0: Removing interface: veth0 [ 301.131603][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.100211][ T8] net1080: probe of 5-1:1.0 failed with error -22 [ 302.173693][ T9757] loop3: detected capacity change from 0 to 512 [ 302.190338][ T9757] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 302.240607][ T9757] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 302.255150][ T9757] System zones: 1-12 [ 302.292651][ T9757] EXT4-fs error (device loop3): ext4_orphan_get:1434: comm syz.3.1002: bad orphan inode 131072 [ 302.360610][ T9757] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 302.491574][ T8226] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.761884][ T27] kauditd_printk_skb: 116 callbacks suppressed [ 302.761899][ T27] audit: type=1326 audit(1799971429.269:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9724 comm="syz.4.993" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f425639e1d9 code=0x0 [ 303.923183][ T8] usb 5-1: USB disconnect, device number 4 [ 303.980868][ T9791] .: renamed from bond0 (while UP) [ 304.696441][ T9806] netlink: 51 bytes leftover after parsing attributes in process `syz.3.1015'. [ 305.562860][ T9820] lo: entered allmulticast mode [ 305.899842][ T9819] lo: left allmulticast mode [ 306.089714][ T9832] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 306.119706][ T5783] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:200' [ 306.129993][ T5783] CPU: 1 PID: 5783 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 306.137565][ T5783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 306.147753][ T5783] Workqueue: hci1 hci_rx_work [ 306.152475][ T5783] Call Trace: [ 306.155793][ T5783] [ 306.158754][ T5783] dump_stack_lvl+0x18c/0x250 [ 306.161162][ T9839] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1030'. [ 306.163444][ T5783] ? show_regs_print_info+0x20/0x20 [ 306.177803][ T5783] ? load_image+0x420/0x420 [ 306.182361][ T5783] sysfs_create_dir_ns+0x26e/0x2a0 [ 306.187507][ T5783] ? __lock_acquire+0x7eb0/0x7eb0 [ 306.192565][ T5783] ? sysfs_warn_dup+0xa0/0xa0 [ 306.197275][ T5783] ? do_raw_spin_unlock+0x121/0x230 [ 306.202509][ T5783] kobject_add_internal+0x617/0xc90 [ 306.207753][ T5783] kobject_add+0x164/0x240 [ 306.212207][ T5783] ? __rwlock_init+0x150/0x150 [ 306.217009][ T5783] ? kobject_init+0x1d0/0x1d0 [ 306.221719][ T5783] ? _raw_spin_unlock+0x28/0x40 [ 306.226614][ T5783] ? get_device_parent+0x366/0x390 [ 306.231774][ T5783] device_add+0x3fa/0xc40 [ 306.236154][ T5783] hci_conn_add_sysfs+0xd5/0x1e0 [ 306.241126][ T5783] hci_sync_conn_complete_evt+0x6d6/0x9a0 [ 306.246884][ T5783] ? hci_remote_ext_features_evt+0xa80/0xa80 [ 306.252897][ T5783] hci_event_packet+0x807/0x1280 [ 306.257865][ T5783] ? __lock_acquire+0x7eb0/0x7eb0 [ 306.262921][ T5783] ? lock_chain_count+0x20/0x20 [ 306.267810][ T5783] ? bis_list+0x290/0x290 [ 306.272169][ T5783] ? kcov_remote_start+0x513/0x810 [ 306.277313][ T5783] ? lockdep_hardirqs_on+0x98/0x150 [ 306.282729][ T5783] ? hci_send_to_monitor+0xd7/0x4f0 [ 306.287960][ T5783] hci_rx_work+0x43a/0xd60 [ 306.292428][ T5783] ? process_scheduled_works+0x975/0x1600 [ 306.298188][ T5783] process_scheduled_works+0xa60/0x1600 [ 306.303808][ T5783] ? worker_attach_to_pool+0x370/0x370 [ 306.309321][ T5783] ? assign_work+0x3cc/0x5d0 [ 306.313956][ T5783] worker_thread+0xa5e/0xfe0 [ 306.318776][ T5783] ? _raw_spin_unlock+0x40/0x40 [ 306.323659][ T5783] ? __kthread_parkme+0x71/0x1c0 [ 306.328635][ T5783] kthread+0x2fa/0x390 [ 306.332724][ T5783] ? pr_cont_work+0x550/0x550 [ 306.337444][ T5783] ? kthread_blkcg+0xd0/0xd0 [ 306.342065][ T5783] ret_from_fork+0x48/0x80 [ 306.346516][ T5783] ? kthread_blkcg+0xd0/0xd0 [ 306.351136][ T5783] ret_from_fork_asm+0x11/0x20 [ 306.351340][ T9841] net_ratelimit: 1 callbacks suppressed [ 306.351352][ T9841] Set syz1 is full, maxelem 246 reached [ 306.355926][ T5783] [ 306.362331][ T5783] kobject: kobject_add_internal failed for hci1:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 306.386321][ T5783] Bluetooth: hci1: failed to register connection device [ 306.477940][ T9832] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 306.557746][ T9838] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1027'. [ 306.707591][ T9851] file system registered [ 306.719433][ T5783] Bluetooth: hci2: command 0x0406 tx timeout [ 306.727468][ T9851] ffs_data_put(): freeing [ 307.640267][ T9876] overlayfs: failed to clone upperpath [ 308.148840][ T5783] Bluetooth: hci1: command tx timeout [ 310.228533][ T5777] Bluetooth: hci1: command 0x0406 tx timeout [ 310.297395][ T9914] xt_HMARK: proto mask must be zero with L3 mode [ 310.370888][ T5777] Bluetooth: hci2: unexpected event for opcode 0x2062 [ 310.381541][ T9918] binder: 9917:9918 ioctl c0306201 200000000440 returned -14 [ 310.476497][ T9920] loop3: detected capacity change from 0 to 512 [ 311.463512][ T9931] loop3: detected capacity change from 0 to 1024 [ 311.476183][ T9931] journal_path: Non-blockdev passed as '' [ 311.482601][ T9931] EXT4-fs: error: could not find journal device path [ 311.623385][ T9933] FAULT_INJECTION: forcing a failure. [ 311.623385][ T9933] name failslab, interval 1, probability 0, space 0, times 0 [ 311.651723][ T9933] CPU: 0 PID: 9933 Comm: syz.3.1065 Not tainted syzkaller #0 [ 311.659133][ T9933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 311.669184][ T9933] Call Trace: [ 311.672454][ T9933] [ 311.675371][ T9933] dump_stack_lvl+0x18c/0x250 [ 311.680042][ T9933] ? show_regs_print_info+0x20/0x20 [ 311.685228][ T9933] ? load_image+0x420/0x420 [ 311.689719][ T9933] ? __might_sleep+0xe0/0xe0 [ 311.694303][ T9933] ? __lock_acquire+0x7eb0/0x7eb0 [ 311.699325][ T9933] should_fail_ex+0x394/0x4c0 [ 311.704016][ T9933] should_failslab+0x9/0x20 [ 311.708520][ T9933] slab_pre_alloc_hook+0x59/0x300 [ 311.713562][ T9933] kmem_cache_alloc_node+0x5e/0x310 [ 311.718774][ T9933] ? __alloc_skb+0x103/0x2c0 [ 311.723367][ T9933] __alloc_skb+0x103/0x2c0 [ 311.727787][ T9933] tipc_msg_build+0x163/0xe60 [ 311.732469][ T9933] ? tipc_node_find+0x3bb/0x490 [ 311.737330][ T9933] ? tipc_node_find+0xb4/0x490 [ 311.742092][ T9933] ? skb_copy_to_linear_data_offset+0x60/0x60 [ 311.748161][ T9933] ? tipc_nametbl_lookup_anycast+0x11c/0xf00 [ 311.754148][ T9933] __tipc_sendmsg+0x1846/0x2b20 [ 311.759005][ T9933] ? __lock_acquire+0x1431/0x7eb0 [ 311.764063][ T9933] ? rht_unlock+0x1d0/0x1d0 [ 311.768590][ T9933] ? verify_lock_unused+0x140/0x140 [ 311.773798][ T9933] ? verify_lock_unused+0x140/0x140 [ 311.779011][ T9933] ? __might_sleep+0xe0/0xe0 [ 311.783616][ T9933] ? mark_lock+0x94/0x320 [ 311.787961][ T9933] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 311.793969][ T9933] ? __local_bh_enable_ip+0x13a/0x1c0 [ 311.799351][ T9933] ? lockdep_hardirqs_on+0x98/0x150 [ 311.804558][ T9933] ? wait_woken+0x180/0x180 [ 311.809066][ T9933] ? _local_bh_enable+0xa0/0xa0 [ 311.813939][ T9933] tipc_sendmsg+0x55/0x70 [ 311.818290][ T9933] ? tipc_recvmsg+0x13d0/0x13d0 [ 311.823145][ T9933] ____sys_sendmsg+0x61b/0x980 [ 311.827924][ T9933] ? __asan_memset+0x22/0x40 [ 311.832528][ T9933] ? __sys_sendmsg_sock+0x30/0x30 [ 311.837597][ T9933] ? __import_iovec+0x3fa/0x850 [ 311.842461][ T9933] ? import_iovec+0x73/0xa0 [ 311.846969][ T9933] ___sys_sendmsg+0x2a6/0x360 [ 311.851654][ T9933] ? __sys_sendmsg+0x2b0/0x2b0 [ 311.856454][ T9933] __se_sys_sendmsg+0x1d0/0x2c0 [ 311.861314][ T9933] ? __x64_sys_sendmsg+0x80/0x80 [ 311.866269][ T9933] ? lockdep_hardirqs_on+0x98/0x150 [ 311.871477][ T9933] do_syscall_64+0x55/0xb0 [ 311.875888][ T9933] ? clear_bhb_loop+0x40/0x90 [ 311.880561][ T9933] ? clear_bhb_loop+0x40/0x90 [ 311.885254][ T9933] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 311.891153][ T9933] RIP: 0033:0x7efe2eb9e1d9 [ 311.895566][ T9933] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 311.915172][ T9933] RSP: 002b:00007efe2f9d1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 311.923588][ T9933] RAX: ffffffffffffffda RBX: 00007efe2ee25fa0 RCX: 00007efe2eb9e1d9 [ 311.931558][ T9933] RDX: 0000000004046840 RSI: 0000200000000080 RDI: 0000000000000003 [ 311.939537][ T9933] RBP: 00007efe2ec35888 R08: 0000000000000000 R09: 0000000000000000 [ 311.949167][ T9933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 311.957234][ T9933] R13: 00007efe2ee26038 R14: 00007efe2ee25fa0 R15: 00007ffe6b7d5788 [ 311.965242][ T9933] [ 312.278518][ T27] audit: type=1804 audit(1799971438.769:556): pid=9940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1067" name="/newroot/84/mnt/file1" dev="sda1" ino=2052 res=1 errno=0 [ 312.487692][ T9944] loop4: detected capacity change from 0 to 2048 [ 312.590594][ T9949] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 313.390969][ T9968] smc: net device team0 applied user defined pnetid SYZ2 [ 313.628697][ T9968] smc: removing net device team0 with user defined pnetid SYZ2 [ 313.743313][ T9968] team0 (unregistering): Port device team_slave_0 removed [ 313.813158][ T9968] team0 (unregistering): Port device team_slave_1 removed [ 313.910264][ T9968] team0 (unregistering): Port device dummy0 removed [ 315.390379][ T9986] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1086'. [ 315.615456][ T9981] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1086'. [ 316.486461][ T9994] IPv6: sit1: Disabled Multicast RS [ 316.521507][ T9994] sit1: entered allmulticast mode [ 316.528315][ T9997] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1090'. [ 316.700222][T10001] netlink: 'syz.0.1091': attribute type 1 has an invalid length. [ 316.830413][T10001] macvlan2: entered promiscuous mode [ 316.835998][T10001] macvlan2: entered allmulticast mode [ 316.883143][T10001] bond2: entered promiscuous mode [ 316.919309][T10001] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 316.950046][T10001] bond2: left promiscuous mode [ 317.193399][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.276059][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.241834][ T5777] Bluetooth: hci0: unexpected event for opcode 0x0c23 [ 319.278886][ T5777] Bluetooth: hci0: unexpected event for opcode 0x0407 [ 319.499564][T10051] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1111'. [ 320.685498][T10083] IPv6: sit1: Disabled Multicast RS [ 320.692866][T10083] sit1: entered allmulticast mode [ 320.718805][ T8] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 320.901408][ T8] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 320.918055][ T8] usb 4-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 320.937032][ T8] usb 4-1: config 0 interface 0 has no altsetting 0 [ 320.945590][ T8] usb 4-1: New USB device found, idVendor=046d, idProduct=0a07, bcdDevice= 0.00 [ 320.962581][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.977626][ T8] usb 4-1: config 0 descriptor?? [ 321.244382][ T8] usbhid 4-1:0.0: can't add hid device: -71 [ 321.261375][ T8] usbhid: probe of 4-1:0.0 failed with error -71 [ 321.303517][ T8] usb 4-1: USB disconnect, device number 5 [ 323.841512][T10129] loop3: detected capacity change from 0 to 1024 [ 323.910220][T10129] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 323.938591][T10129] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 323.989125][T10129] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 324.027178][T10129] EXT4-fs error (device loop3): ext4_get_journal_inode:5820: inode #5: comm syz.3.1136: unexpected bad inode w/o EXT4_IGET_BAD [ 324.227204][T10129] EXT4-fs (loop3): no journal found [ 324.236497][T10129] EXT4-fs (loop3): can't get journal size [ 324.251174][T10129] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 324.446336][T10135] bridge0: port 3(dummy0) entered disabled state [ 324.452966][T10135] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.460664][T10135] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.873632][T10135] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 325.090652][T10147] Illegal XDP return value 4291530752 on prog (id 156) dev N/A, expect packet loss! [ 325.335651][T10135] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.353395][T10135] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.363010][T10135] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.374512][T10135] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.383908][T10135] geneve2: left promiscuous mode [ 325.394724][T10135] ip6gre1: left promiscuous mode [ 325.400446][T10135] ip6gre1: left allmulticast mode [ 325.415618][T10135] sit1: left allmulticast mode [ 325.487321][ T8226] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.605779][T10155] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1148'. [ 326.875851][T10171] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 326.875851][T10171] The task syz.5.1152 (10171) triggered the difference, watch for misbehavior. [ 327.004277][T10167] netlink: 300 bytes leftover after parsing attributes in process `syz.4.1151'. [ 328.086880][T10188] syz_tun: entered allmulticast mode [ 329.137777][T10227] bridge1: entered promiscuous mode [ 329.146502][T10227] bridge1: entered allmulticast mode [ 329.161857][T10227] team0: Port device bridge1 added [ 329.174410][T10229] netlink: 'syz.3.1173': attribute type 1 has an invalid length. [ 329.199900][T10227] bridge0: port 4(team0) entered blocking state [ 329.206622][T10227] bridge0: port 4(team0) entered disabled state [ 329.222302][T10227] team0: entered allmulticast mode [ 329.235159][T10227] team_slave_0: entered allmulticast mode [ 329.246355][T10227] team_slave_1: entered allmulticast mode [ 329.253180][T10227] team0: entered promiscuous mode [ 329.267381][T10227] team_slave_0: entered promiscuous mode [ 329.273440][T10227] team_slave_1: entered promiscuous mode [ 329.316226][T10229] bond1: (slave veth0_to_bond): making interface the new active one [ 329.334856][T10229] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 329.415043][T10229] macvlan2: entered promiscuous mode [ 329.422595][T10229] macvlan2: entered allmulticast mode [ 329.429949][T10229] bond1: entered promiscuous mode [ 329.435148][T10229] veth0_to_bond: entered promiscuous mode [ 329.443008][T10229] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 329.459850][T10229] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 329.484484][T10229] bond1: left promiscuous mode [ 329.496896][T10229] veth0_to_bond: left promiscuous mode [ 331.627556][T10262] Bluetooth: ISO socket layer initialized [ 331.645360][ T5777] Bluetooth: hci0: unexpected event for opcode 0x2060 [ 332.060975][T10256] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1180'. [ 332.114723][T10256] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1180'. [ 332.156825][T10267] loop3: detected capacity change from 0 to 512 [ 332.184695][T10267] EXT4-fs: Ignoring removed i_version option [ 332.203162][T10267] EXT4-fs: Ignoring removed oldalloc option [ 332.240227][T10267] EXT4-fs (loop3): Test dummy encryption mode enabled [ 332.274778][T10267] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 332.480084][T10280] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1196'. [ 332.493528][T10280] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1196'. [ 332.595971][ T8226] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.031613][ T5777] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 333.040406][ T5777] Bluetooth: hci3: Injecting HCI hardware error event [ 333.050076][ T5783] Bluetooth: hci3: hardware error 0x00 [ 333.566497][T10293] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -22341, delta: 1 [ 333.575408][T10293] ref_ctr increment failed for inode: 0x618 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff8880306b4c00 [ 333.593860][T10293] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -22341, delta: -1 [ 333.602729][T10293] ref_ctr decrement failed for inode: 0x618 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff8880306b4c00 [ 334.157533][T10311] syz_tun: entered allmulticast mode [ 334.604287][ T5777] Bluetooth: hci1: unexpected event for opcode 0x2060 [ 334.884274][T10328] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -22341, delta: 1 [ 334.904809][T10328] ref_ctr increment failed for inode: 0x278 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88807660c280 [ 334.958330][T10332] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -22341, delta: -1 [ 334.986236][T10332] ref_ctr decrement failed for inode: 0x278 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88807660c280 [ 335.100622][T10340] syz_tun: entered allmulticast mode [ 335.108846][ T5783] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 336.315911][ T5783] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 336.324969][ T5783] Bluetooth: hci2: Injecting HCI hardware error event [ 336.338904][ T5783] Bluetooth: hci2: hardware error 0x00 [ 337.914657][T10374] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -22341, delta: 1 [ 337.930546][T10374] ref_ctr increment failed for inode: 0x26a offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888032895580 [ 337.980234][T10374] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -22341, delta: -1 [ 337.998561][T10374] ref_ctr decrement failed for inode: 0x26a offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888032895580 [ 338.388583][ T5783] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 338.453855][T10389] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -22341, delta: 1 [ 338.462738][T10389] ref_ctr increment failed for inode: 0x60a offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff8880246b2600 [ 338.476789][T10389] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -22341, delta: -1 [ 338.485828][T10389] ref_ctr decrement failed for inode: 0x60a offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff8880246b2600 [ 339.082954][T10399] netlink: 11 bytes leftover after parsing attributes in process `syz.0.1240'. [ 339.399130][T10407] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -22341, delta: 1 [ 339.415357][T10407] ref_ctr increment failed for inode: 0x680 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff8880246b0980 [ 339.439220][T10407] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -22341, delta: -1 [ 339.448250][T10407] ref_ctr decrement failed for inode: 0x680 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff8880246b0980 [ 340.493817][T10438] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -22341, delta: 1 [ 340.512792][T10438] ref_ctr increment failed for inode: 0x695 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888030122600 [ 340.527281][T10438] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -22341, delta: -1 [ 340.542820][T10438] ref_ctr decrement failed for inode: 0x695 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888030122600 [ 342.370465][T10458] netlink: 11 bytes leftover after parsing attributes in process `syz.4.1251'. [ 342.770407][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88805d551400: rx timeout, send abort [ 343.270580][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88805d552c00: rx timeout, send abort [ 343.279176][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88805d551400: abort rx timeout. Force session deactivation [ 343.778920][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88805d552c00: abort rx timeout. Force session deactivation [ 343.864263][T10501] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1265'. [ 343.929521][T10502] xt_socket: unknown flags 0x4c [ 344.095425][T10501] ip6gre1: entered promiscuous mode [ 344.153218][T10501] ip6gre1: entered allmulticast mode [ 345.346851][ T5783] Bluetooth: hci1: command 0x0406 tx timeout [ 345.859042][T10521] netlink: 'syz.5.1271': attribute type 1 has an invalid length. [ 345.957054][T10521] macvlan2: entered promiscuous mode [ 345.963771][T10521] macvlan2: entered allmulticast mode [ 345.976061][T10521] bond0: entered promiscuous mode [ 345.982035][T10521] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 345.999717][T10521] bond0: left promiscuous mode [ 346.205812][T10526] kvm: apic: phys broadcast and lowest prio [ 346.235466][T10531] netlink: 'syz.4.1274': attribute type 4 has an invalid length. [ 346.944679][T10538] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1276'. [ 347.207779][T10548] loop3: detected capacity change from 0 to 8 [ 349.412768][T10579] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1301'. [ 349.432729][T10579] ip6gre1: entered promiscuous mode [ 349.438120][T10579] ip6gre1: entered allmulticast mode [ 352.014377][T10604] netlink: 'syz.3.1298': attribute type 4 has an invalid length. [ 353.442591][T10621] xt_socket: unknown flags 0x4c [ 353.980404][T10626] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1303'. [ 354.034872][T10626] ip6gre1: entered promiscuous mode [ 354.045944][T10626] ip6gre1: entered allmulticast mode [ 354.920709][T10635] netlink: 'syz.0.1319': attribute type 10 has an invalid length. [ 354.962254][T10635] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 355.501133][T10635] netlink: 'syz.0.1319': attribute type 4 has an invalid length. [ 355.509246][T10635] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1319'. [ 356.143400][T10662] netlink: 'syz.0.1317': attribute type 4 has an invalid length. [ 356.588002][T10670] bridge0: port 3(dummy0) entered blocking state [ 356.608836][T10670] bridge0: port 3(dummy0) entered disabled state [ 356.629567][T10670] dummy0: entered allmulticast mode [ 356.651605][T10670] dummy0: entered promiscuous mode [ 358.615295][T10696] loop3: detected capacity change from 0 to 128 [ 358.679486][T10696] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 358.727333][T10696] ext4 filesystem being mounted at /144/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 358.777303][T10701] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1334'. [ 358.999625][ T8226] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 360.103779][T10729] jffs2: notice: (10729) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 360.148043][T10729] overlayfs: failed to clone upperpath [ 360.240291][T10734] bridge0: port 1(syz_tun) entered blocking state [ 360.263991][T10734] bridge0: port 1(syz_tun) entered disabled state [ 360.283329][T10734] syz_tun: entered allmulticast mode [ 360.304555][T10734] syz_tun: entered promiscuous mode [ 360.366656][T10734] bridge0: port 1(syz_tun) entered blocking state [ 360.373309][T10734] bridge0: port 1(syz_tun) entered listening state [ 362.298710][ C0] bridge0: port 1(syz_tun) neighbor 0000.00:00:00:00:00:00 lost [ 362.307385][ C0] bridge0: topology change detected, propagating [ 364.951804][T10786] netlink: 'syz.0.1361': attribute type 4 has an invalid length. [ 367.346857][T10827] tipc: Started in network mode [ 367.357203][T10827] tipc: Node identity 4, cluster identity 4711 [ 367.375831][T10827] tipc: Node number set to 4 [ 367.620078][T10833] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1377'. [ 368.145251][ T27] audit: type=1326 audit(1799971494.669:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10841 comm="syz.4.1381" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f425639e1d9 code=0x7ffc0000 [ 368.178858][ T27] audit: type=1326 audit(1799971494.669:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10841 comm="syz.4.1381" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f425639e1d9 code=0x7ffc0000 [ 368.204051][ T27] audit: type=1326 audit(1799971494.679:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10841 comm="syz.4.1381" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f425639e1d9 code=0x7ffc0000 [ 368.228773][ T27] audit: type=1326 audit(1799971494.679:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10841 comm="syz.4.1381" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f425639e1d9 code=0x7ffc0000 [ 368.273482][ T27] audit: type=1326 audit(1799971494.679:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10841 comm="syz.4.1381" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f425639e1d9 code=0x7ffc0000 [ 368.306436][ T27] audit: type=1326 audit(1799971494.729:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10841 comm="syz.4.1381" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f425639e1d9 code=0x7ffc0000 [ 368.341462][ T27] audit: type=1326 audit(1799971494.729:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10841 comm="syz.4.1381" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f425635ea0e code=0x7ffc0000 [ 368.377203][ T27] audit: type=1326 audit(1799971494.739:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10841 comm="syz.4.1381" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f425635ea0e code=0x7ffc0000 [ 368.413094][ T27] audit: type=1326 audit(1799971494.739:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10841 comm="syz.4.1381" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f425635ea0e code=0x7ffc0000 [ 368.443766][ T27] audit: type=1326 audit(1799971494.739:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10841 comm="syz.4.1381" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f425635ea0e code=0x7ffc0000 [ 368.500911][T10849] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1383'. [ 368.523179][T10849] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1383'. [ 368.548864][T10849] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1383'. [ 371.887911][T10902] loop3: detected capacity change from 0 to 512 [ 375.243205][T10917] loop3: detected capacity change from 0 to 8 [ 375.390954][ T27] kauditd_printk_skb: 101 callbacks suppressed [ 375.390968][ T27] audit: type=1326 audit(1799971501.919:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10930 comm="syz.5.1408" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1841f9e1d9 code=0x7ffc0000 [ 375.429830][ C0] bridge0: port 1(syz_tun) entered learning state [ 375.441770][ T27] audit: type=1326 audit(1799971501.919:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10930 comm="syz.5.1408" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1841f9e1d9 code=0x7ffc0000 [ 375.558858][ T27] audit: type=1326 audit(1799971501.949:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10930 comm="syz.5.1408" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1841f9e1d9 code=0x7ffc0000 [ 375.604980][ T27] audit: type=1326 audit(1799971501.949:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10930 comm="syz.5.1408" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1841f9e1d9 code=0x7ffc0000 [ 375.668575][ T27] audit: type=1326 audit(1799971501.949:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10930 comm="syz.5.1408" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1841f9e1d9 code=0x7ffc0000 [ 375.723749][ T27] audit: type=1326 audit(1799971501.949:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10930 comm="syz.5.1408" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7f1841f9e1d9 code=0x7ffc0000 [ 375.758332][ T27] audit: type=1326 audit(1799971501.949:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10930 comm="syz.5.1408" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1841f9e1d9 code=0x7ffc0000 [ 375.787697][ T27] audit: type=1326 audit(1799971501.949:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10930 comm="syz.5.1408" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1841f9e1d9 code=0x7ffc0000 [ 375.815021][ T27] audit: type=1326 audit(1799971501.949:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10930 comm="syz.5.1408" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1841f9e1d9 code=0x7ffc0000 [ 375.843321][ T27] audit: type=1326 audit(1799971501.949:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10930 comm="syz.5.1408" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1841f9de6b code=0x7ffc0000 [ 376.468191][T10954] netlink: 'syz.4.1415': attribute type 10 has an invalid length. [ 376.550318][T10954] team0: Port device dummy0 added [ 378.190962][T10965] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1417'. [ 378.631500][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.637973][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.306972][T10965] bond2: entered promiscuous mode [ 379.312211][T10965] bond2: entered allmulticast mode [ 379.788369][T10992] netlink: 'syz.0.1427': attribute type 10 has an invalid length. [ 379.825793][T10992] team0: Port device dummy0 added [ 380.605494][T11004] netlink: 'syz.5.1441': attribute type 10 has an invalid length. [ 380.624722][T11004] dummy0: left allmulticast mode [ 380.631959][T11004] dummy0: left promiscuous mode [ 380.637138][T11004] bridge0: port 3(dummy0) entered disabled state [ 380.669080][T11004] dummy0: entered promiscuous mode [ 380.674335][T11004] dummy0: entered allmulticast mode [ 380.704527][T11004] team0: Port device dummy0 added [ 380.775795][ T27] kauditd_printk_skb: 97 callbacks suppressed [ 380.775810][ T27] audit: type=1326 audit(1799971507.299:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11007 comm="syz.4.1435" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f425639e1d9 code=0x7ffc0000 [ 380.812448][ T27] audit: type=1326 audit(1799971507.299:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11007 comm="syz.4.1435" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f425639e1d9 code=0x7ffc0000 [ 380.843575][ T27] audit: type=1326 audit(1799971507.299:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11007 comm="syz.4.1435" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f425639e1d9 code=0x7ffc0000 [ 380.872266][ T27] audit: type=1326 audit(1799971507.309:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11007 comm="syz.4.1435" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7f425639e1d9 code=0x7ffc0000 [ 380.906771][ T27] audit: type=1326 audit(1799971507.309:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11007 comm="syz.4.1435" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f425639e1d9 code=0x7ffc0000 [ 380.937016][ T27] audit: type=1326 audit(1799971507.309:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11007 comm="syz.4.1435" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f425639e1d9 code=0x7ffc0000 [ 380.975235][ T27] audit: type=1326 audit(1799971507.339:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11007 comm="syz.4.1435" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f425639e1d9 code=0x7ffc0000 [ 381.009603][ T27] audit: type=1326 audit(1799971507.339:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11007 comm="syz.4.1435" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f425639de6b code=0x7ffc0000 [ 381.040321][ T27] audit: type=1326 audit(1799971507.339:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11007 comm="syz.4.1435" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f425639de6b code=0x7ffc0000 [ 381.074877][ T27] audit: type=1326 audit(1799971507.339:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11007 comm="syz.4.1435" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f425639de6b code=0x7ffc0000 [ 382.206326][T11022] netlink: 'syz.5.1448': attribute type 10 has an invalid length. [ 382.638846][ T5930] IPVS: starting estimator thread 0... [ 382.665527][T11032] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1439'. [ 382.738735][T11031] IPVS: using max 22 ests per chain, 52800 per kthread [ 382.769468][T11032] bond1: entered promiscuous mode [ 382.786434][T11032] bond1: entered allmulticast mode [ 382.850399][T11038] netlink: 'syz.5.1455': attribute type 10 has an invalid length. [ 383.749514][ T5930] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 383.942826][ T5930] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 383.972423][ T5930] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.998526][ T5930] usb 4-1: Product: syz [ 384.014848][ T5930] usb 4-1: Manufacturer: syz [ 384.027096][ T5930] usb 4-1: SerialNumber: syz [ 384.481268][ T5930] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 385.014258][T11072] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1457'. [ 385.100872][T11072] bond1: entered promiscuous mode [ 385.105971][T11072] bond1: entered allmulticast mode [ 386.968268][ T5930] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -71 [ 387.016267][T11087] netlink: 'syz.5.1471': attribute type 4 has an invalid length. [ 387.088542][ T5930] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 387.098063][ T5930] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 387.169396][T11090] jffs2: notice: (11090) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 387.205308][ T5930] lan78xx: probe of 4-1:1.0 failed with error -71 [ 387.238098][ T5930] usb 4-1: USB disconnect, device number 6 [ 389.836954][ T27] kauditd_printk_skb: 95 callbacks suppressed [ 389.836970][ T27] audit: type=1804 audit(1799971516.359:880): pid=11128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1477" name="bus" dev="ramfs" ino=26240 res=1 errno=0 [ 389.868245][T11131] jffs2: notice: (11131) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 389.913938][ T27] audit: type=1804 audit(1799971516.389:881): pid=11128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1477" name="bus" dev="ramfs" ino=26240 res=1 errno=0 [ 389.961543][T11133] overlayfs: failed to clone upperpath [ 390.366531][T11137] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1478'. [ 390.790399][ C0] bridge0: port 1(syz_tun) entered forwarding state [ 390.797094][ C0] bridge0: topology change detected, propagating [ 391.681569][ T5930] IPVS: starting estimator thread 0... [ 391.790149][T11168] IPVS: using max 18 ests per chain, 43200 per kthread [ 395.104798][T11180] jffs2: notice: (11180) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 395.197517][T11180] overlayfs: failed to clone upperpath [ 395.559113][T11197] smc: net device team0 applied user defined pnetid SYZ2 [ 395.713854][T11197] smc: removing net device team0 with user defined pnetid SYZ2 [ 395.769508][T11197] team0 (unregistering): Port device dummy0 removed [ 396.943799][T11228] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1509'. [ 396.965988][T11228] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1509'. [ 396.991315][T11228] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1509'. [ 397.548526][T11239] overlayfs: failed to clone upperpath [ 397.561650][T11240] smc: net device team0 applied user defined pnetid SYZ2 [ 397.613377][T11240] team0 (unregistering): left allmulticast mode [ 397.620045][T11240] team_slave_0: left allmulticast mode [ 397.625925][T11240] team_slave_1: left allmulticast mode [ 397.634885][T11240] dummy0: left allmulticast mode [ 397.641224][T11240] team0 (unregistering): left promiscuous mode [ 397.647395][T11240] team_slave_0: left promiscuous mode [ 397.656226][T11240] team_slave_1: left promiscuous mode [ 397.658591][ T5930] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 397.661978][T11240] dummy0: left promiscuous mode [ 397.679998][T11240] bridge0: port 4(team0) entered disabled state [ 397.687895][T11240] smc: removing net device team0 with user defined pnetid SYZ2 [ 397.701067][T11240] team0 (unregistering): Port device team_slave_0 removed [ 397.711127][T11240] team0 (unregistering): Port device team_slave_1 removed [ 397.729165][T11240] team0 (unregistering): Port device bridge1 removed [ 397.737559][T11240] team0 (unregistering): Port device dummy0 removed [ 397.874614][ T5930] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 397.888240][ T5930] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 397.903744][ T5930] usb 4-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 397.922903][ T5930] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.939637][ T5930] usb 4-1: Product: syz [ 397.948293][ T5930] usb 4-1: Manufacturer: syz [ 397.958475][ T5930] usb 4-1: SerialNumber: syz [ 397.982737][T11232] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 397.991403][T11232] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 398.013140][ T5930] usbserial_generic 4-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 398.024806][ T5930] usbserial_generic 4-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 398.036171][ T5930] usbserial_generic 4-1:1.0: generic converter detected [ 398.046825][ T5930] usb 4-1: generic converter now attached to ttyUSB0 [ 398.237940][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 398.260975][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 398.270470][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 398.282409][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 398.291908][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 398.301702][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 398.311166][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 398.321472][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 398.330918][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 398.342641][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 398.352126][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 398.363492][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 398.372956][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 398.383329][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 398.392803][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 398.406403][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 398.415867][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 398.426115][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 398.435573][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 398.445401][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 398.454857][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 398.464881][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 398.487145][ T5930] usb 4-1: USB disconnect, device number 7 [ 398.498865][ T5930] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 398.515017][ T5930] usbserial_generic 4-1:1.0: device disconnected [ 401.117715][ T27] audit: type=1326 audit(1799971527.639:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11292 comm="syz.5.1534" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1841f9e1d9 code=0x0 [ 402.289159][T11320] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 402.955689][T11335] syzkaller0: entered promiscuous mode [ 402.969494][T11335] syzkaller0: entered allmulticast mode [ 403.915115][T11350] loop3: detected capacity change from 0 to 512 [ 403.977837][T11350] EXT4-fs error (device loop3): ext4_get_journal_inode:5820: comm syz.3.1555: inode #2147418112: comm syz.3.1555: iget: illegal inode # [ 404.035385][T11350] EXT4-fs (loop3): no journal found [ 404.050832][T11350] EXT4-fs (loop3): can't get journal size [ 404.067875][T11354] netlink: 'syz.0.1557': attribute type 1 has an invalid length. [ 404.088272][T11350] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 404.125349][T11350] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 404.164432][T11350] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 404.232008][T11354] 8021q: adding VLAN 0 to HW filter on device bond4 [ 404.266075][T11354] bond3: (slave bond4): making interface the new active one [ 404.298869][T11354] bond3: (slave bond4): Enslaving as an active interface with an up link [ 404.382639][T11363] bond3: (slave gretap1): Enslaving as a backup interface with an up link [ 404.790067][T11359] EXT4-fs error (device loop3): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 13: invalid block bitmap [ 404.955996][T11350] EXT4-fs error (device loop3): ext4_lookup:1864: inode #2: comm syz.3.1555: deleted inode referenced: 15 [ 405.435820][ T8226] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.773093][T11391] loop3: detected capacity change from 0 to 256 [ 406.825974][T11391] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 406.920403][ T27] audit: type=1800 audit(1799971533.439:883): pid=11391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1566" name="file1" dev="loop3" ino=1048681 res=0 errno=0 [ 407.096462][ T27] audit: type=1800 audit(1799971533.619:884): pid=11399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1566" name="file1" dev="loop3" ino=1048681 res=0 errno=0 [ 414.926812][T11441] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.934233][T11441] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.587768][T11441] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 415.683343][T11441] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 416.254999][T11441] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.264852][T11441] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.274430][T11441] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.286587][T11441] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.910564][T11441] syzkaller0: left promiscuous mode [ 416.915797][T11441] syzkaller0: left allmulticast mode [ 416.926341][T11441] ip6gre1: left promiscuous mode [ 416.931736][T11441] ip6gre1: left allmulticast mode [ 416.942328][T11441] bond2: left promiscuous mode [ 416.951275][T11441] bond2: left allmulticast mode [ 417.167783][T11468] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1586'. [ 417.190834][T11468] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1586'. [ 417.312418][T11469] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1587'. [ 419.797151][ T5777] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 422.100357][ T27] audit: type=1326 audit(1799971548.629:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11518 comm="syz.3.1605" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efe2eb9e1d9 code=0x0 [ 423.814749][T11542] netlink: 'syz.3.1610': attribute type 14 has an invalid length. [ 424.068541][T11542] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1610'. [ 424.435411][T11542] bond0: option xmit_hash_policy: invalid value (10) [ 427.756984][T11604] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 429.843588][T11630] FAULT_INJECTION: forcing a failure. [ 429.843588][T11630] name failslab, interval 1, probability 0, space 0, times 0 [ 429.928565][T11630] CPU: 0 PID: 11630 Comm: syz.3.1641 Not tainted syzkaller #0 [ 429.936092][T11630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 429.946172][T11630] Call Trace: [ 429.949471][T11630] [ 429.952414][T11630] dump_stack_lvl+0x18c/0x250 [ 429.957118][T11630] ? show_regs_print_info+0x20/0x20 [ 429.962336][T11630] ? load_image+0x420/0x420 [ 429.966895][T11630] ? __might_sleep+0xe0/0xe0 [ 429.971518][T11630] ? __lock_acquire+0x7eb0/0x7eb0 [ 429.976576][T11630] should_fail_ex+0x394/0x4c0 [ 429.981297][T11630] should_failslab+0x9/0x20 [ 429.985837][T11630] slab_pre_alloc_hook+0x59/0x300 [ 429.990894][T11630] ? kvmalloc_node+0x70/0x180 [ 429.995600][T11630] ? kvmalloc_node+0x70/0x180 [ 430.000304][T11630] __kmem_cache_alloc_node+0x53/0x250 [ 430.005691][T11630] ? kvmalloc_node+0x70/0x180 [ 430.010374][T11630] __kmalloc_node+0xa6/0x240 [ 430.014971][T11630] kvmalloc_node+0x70/0x180 [ 430.019482][T11630] nf_hook_entries_grow+0x27c/0x710 [ 430.024690][T11630] __nf_register_net_hook+0x2c9/0x910 [ 430.030065][T11630] nf_register_net_hook+0xb2/0x190 [ 430.035175][T11630] nf_register_net_hooks+0x44/0x1b0 [ 430.040380][T11630] ipt_register_table+0x51a/0x7b0 [ 430.045413][T11630] ? trace_packet+0x4a0/0x4a0 [ 430.050094][T11630] ? ipt_alloc_initial_table+0x4ff/0x610 [ 430.055729][T11630] iptable_mangle_table_init+0x41/0x60 [ 430.061187][T11630] xt_find_table_lock+0x304/0x3e0 [ 430.066215][T11630] do_ipt_set_ctl+0x2c0/0xe00 [ 430.070898][T11630] ? ipt_unregister_table_exit+0x230/0x230 [ 430.076704][T11630] ? trace_contention_end+0x39/0xe0 [ 430.081904][T11630] ? __mutex_lock+0x30d/0xc80 [ 430.086589][T11630] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 430.092226][T11630] ? mutex_unlock+0x10/0x10 [ 430.096736][T11630] ? aa_af_perm+0x330/0x330 [ 430.101253][T11630] nf_setsockopt+0x263/0x280 [ 430.105849][T11630] ? sock_common_recvmsg+0x190/0x190 [ 430.111142][T11630] do_sock_setsockopt+0x175/0x1a0 [ 430.116170][T11630] ? __fdget+0x180/0x210 [ 430.120421][T11630] __x64_sys_setsockopt+0x182/0x200 [ 430.125625][T11630] do_syscall_64+0x55/0xb0 [ 430.130039][T11630] ? clear_bhb_loop+0x40/0x90 [ 430.134710][T11630] ? clear_bhb_loop+0x40/0x90 [ 430.139388][T11630] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 430.145287][T11630] RIP: 0033:0x7efe2eb9e1d9 [ 430.149698][T11630] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 430.169305][T11630] RSP: 002b:00007efe2f9b0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 430.177744][T11630] RAX: ffffffffffffffda RBX: 00007efe2ee26090 RCX: 00007efe2eb9e1d9 [ 430.185719][T11630] RDX: 0000000000000041 RSI: 0000000000000000 RDI: 0000000000000006 [ 430.193687][T11630] RBP: 00007efe2ec35888 R08: 0000000000000078 R09: 0000000000000000 [ 430.201658][T11630] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000000 [ 430.209626][T11630] R13: 00007efe2ee26128 R14: 00007efe2ee26090 R15: 00007ffe6b7d5788 [ 430.217609][T11630] [ 433.253910][T11673] IPVS: Error joining to the multicast group [ 435.039737][T11677] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.047126][T11677] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.323781][T11677] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 435.464237][T11700] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1662'. [ 435.804046][T11677] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.821930][T11677] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.839701][T11677] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.858557][T11677] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.013306][T11697] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 436.182567][T11710] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1664'. [ 436.250364][T11710] macvtap1: entered promiscuous mode [ 436.278521][T11710] bridge0: entered promiscuous mode [ 436.283919][T11710] macvtap1: entered allmulticast mode [ 436.309435][T11710] bridge0: entered allmulticast mode [ 436.355297][T11715] bridge0: left allmulticast mode [ 436.378829][T11715] bridge0: left promiscuous mode [ 436.392254][T11715] macvtap1: left promiscuous mode [ 436.411635][T11715] macvtap1: left allmulticast mode [ 440.072417][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.084734][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.254563][T11781] tipc: Failed to remove unknown binding: 66,0,0/33554436:1417090570/1417090572 [ 441.289103][T11779] tipc: Failed to remove unknown binding: 66,0,0/33554436:3942912833/3942912834 [ 441.322625][T11779] tipc: Failed to remove unknown binding: 66,0,0/33554436:3942912833/3942912834 [ 443.600343][T11805] netem: change failed [ 445.460770][T11817] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1703'. [ 445.533174][T11817] bridge1: port 1(veth3) entered blocking state [ 445.539807][T11817] bridge1: port 1(veth3) entered disabled state [ 445.556464][T11817] veth3: entered allmulticast mode [ 445.567887][T11817] veth3: entered promiscuous mode [ 445.628352][T11820] bond1: (slave veth0_to_bond): Releasing active interface [ 445.653272][T11820] bridge1: port 2(veth0_to_bond) entered blocking state [ 447.079144][T11820] bridge1: port 2(veth0_to_bond) entered disabled state [ 447.086336][T11820] veth0_to_bond: entered allmulticast mode [ 447.117828][T11820] veth0_to_bond: entered promiscuous mode [ 447.571558][T11843] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1713'. [ 450.176380][T11881] IPVS: stopping master sync thread 8309 ... [ 450.934944][T11890] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1726'. [ 450.959257][T11890] netlink: 'syz.5.1726': attribute type 4 has an invalid length. [ 450.967032][T11890] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1726'. [ 451.013295][T11890] .`: renamed from . [ 452.666390][T11906] overlayfs: failed to clone upperpath [ 454.509806][T11912] netlink: 196 bytes leftover after parsing attributes in process `syz.4.1732'. [ 456.268740][T11786] syz.5.1691 (11786) used greatest stack depth: 17928 bytes left [ 456.549250][T11943] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1743'. [ 456.930531][T11943] bridge2: port 1(veth5) entered blocking state [ 456.943844][T11943] bridge2: port 1(veth5) entered disabled state [ 456.954056][T11943] veth5: entered allmulticast mode [ 456.970356][T11943] veth5: entered promiscuous mode [ 458.292917][T11950] bridge2: port 2(veth7) entered blocking state [ 458.356015][T11950] bridge2: port 2(veth7) entered disabled state [ 458.393046][T11950] veth7: entered allmulticast mode [ 458.447127][T11950] veth7: entered promiscuous mode [ 458.536085][T11966] xt_CT: You must specify a L4 protocol and not use inversions on it [ 459.256774][T11971] ip_tables: iptables: counters copy to user failed while replacing table [ 459.388238][T11976] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1755'. [ 459.400383][T11976] overlayfs: failed to resolve './file0': -2 [ 459.655662][T11988] loop3: detected capacity change from 0 to 1024 [ 461.094355][T12017] syz_tun: left allmulticast mode [ 461.359445][T12015] xt_CT: You must specify a L4 protocol and not use inversions on it [ 464.350173][T12053] syz_tun: left allmulticast mode [ 466.326949][T12061] device-mapper: ioctl: name not supplied when creating device [ 469.285425][T12075] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1797'. [ 469.388153][T12075] bridge2: port 1(veth3) entered blocking state [ 469.401269][T12075] bridge2: port 1(veth3) entered disabled state [ 469.418051][T12075] veth3: entered allmulticast mode [ 469.424986][T12075] veth3: entered promiscuous mode [ 469.479355][T12078] bridge2: port 2(veth5) entered blocking state [ 469.495846][T12078] bridge2: port 2(veth5) entered disabled state [ 469.503281][T12078] veth5: entered allmulticast mode [ 469.510659][T12078] veth5: entered promiscuous mode [ 472.882451][T12099] syz_tun: left allmulticast mode [ 478.353795][T12134] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1817'. [ 478.434922][T12134] bridge2: port 1(veth1) entered blocking state [ 478.443141][T12134] bridge2: port 1(veth1) entered disabled state [ 478.456179][T12134] veth1: entered allmulticast mode [ 478.464560][T12134] veth1: entered promiscuous mode [ 478.502140][T12139] bridge2: port 2(veth5) entered blocking state [ 478.513422][T12139] bridge2: port 2(veth5) entered disabled state [ 478.540249][T12139] veth5: entered allmulticast mode [ 478.548676][ T5766] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 478.554306][T12139] veth5: entered promiscuous mode [ 478.811062][ T5766] usb 4-1: not running at top speed; connect to a high speed hub [ 478.819950][ T5766] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 479.050695][ T5766] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 479.061042][ T5766] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 479.074215][ T5766] usb 4-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 479.083392][ T5766] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.097910][ T5766] keyspan 4-1:1.0: Keyspan 2 port adapter converter detected [ 479.105991][ T5766] keyspan 4-1:1.0: unsupported endpoint type 0 [ 479.112369][ T5766] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 1 [ 479.121886][ T5766] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 84 [ 479.131080][ T5766] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 2 [ 479.141872][ T5766] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 479.153910][ T5766] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 88 [ 479.162723][ T5766] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 6 [ 479.173065][ T5766] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 479.322215][ T5766] usb 4-1: USB disconnect, device number 8 [ 479.332090][ T5766] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 479.345099][ T5766] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 479.361093][ T5766] keyspan 4-1:1.0: device disconnected [ 480.163540][T12164] ip_tables: iptables: counters copy to user failed while replacing table [ 484.232401][T12177] netlink: 'syz.0.1827': attribute type 1 has an invalid length. [ 484.344995][T12177] veth7: entered allmulticast mode [ 484.357696][T12177] bond5: (slave veth7): Enslaving as an active interface with a down link [ 484.504467][T12183] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1829'. [ 484.566963][T12185] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1829'. [ 485.289122][T12193] xt_CT: You must specify a L4 protocol and not use inversions on it [ 485.679248][T12195] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1825'. [ 491.006298][T12209] loop3: detected capacity change from 0 to 512 [ 491.077734][T12214] netlink: 'syz.4.1837': attribute type 1 has an invalid length. [ 491.127901][T12209] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 491.188743][T12214] 8021q: adding VLAN 0 to HW filter on device bond2 [ 491.239302][T12209] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 491.262745][T12220] bond2: (slave veth3): Enslaving as an active interface with a down link [ 491.333161][T12223] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 491.411761][T12223] bond2: (slave batadv1): making interface the new active one [ 491.461490][T12223] batadv1: entered promiscuous mode [ 491.467026][T12223] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 491.602575][T12214] veth5: entered allmulticast mode [ 491.618232][T12214] bond2: (slave veth5): Enslaving as an active interface with a down link [ 495.922038][T12291] netlink: 300 bytes leftover after parsing attributes in process `syz.3.1862'. [ 496.051851][T12298] xfrm0: entered allmulticast mode [ 497.500189][T12303] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1865'. [ 499.957709][T12343] syz_tun: entered allmulticast mode [ 499.967304][T12342] syz_tun: left allmulticast mode [ 501.511368][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.517829][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.680839][T12362] ip_tables: iptables: counters copy to user failed while replacing table [ 503.243262][T12380] syz_tun: entered allmulticast mode [ 503.261335][T12379] syz_tun: left allmulticast mode [ 504.866305][ T5777] Bluetooth: hci0: unexpected event for opcode 0x206e [ 505.420433][T12416] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 506.076198][T12423] syz_tun: entered allmulticast mode [ 506.084202][T12422] syz_tun: left allmulticast mode [ 506.339479][ T1080] batadv1: left promiscuous mode [ 507.222956][T12440] netlink: 'syz.5.1914': attribute type 1 has an invalid length. [ 507.276737][T12440] 8021q: adding VLAN 0 to HW filter on device bond3 [ 507.377439][T12440] bond3: (slave veth7): Enslaving as an active interface with a down link [ 507.441352][T12440] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 507.458997][T12440] bond3: (slave batadv1): making interface the new active one [ 507.468084][T12440] batadv1: entered promiscuous mode [ 507.485030][T12440] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 507.533826][T12447] veth9: entered allmulticast mode [ 507.568043][T12447] bond3: (slave veth9): Enslaving as an active interface with a down link [ 508.272977][T12461] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 508.368208][T12463] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 509.705844][T12477] netlink: 300 bytes leftover after parsing attributes in process `syz.0.1925'. [ 510.883732][T12505] netlink: 'syz.4.1935': attribute type 10 has an invalid length. [ 510.910308][T12505] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 511.489823][T12505] netlink: 'syz.4.1935': attribute type 4 has an invalid length. [ 511.497680][T12505] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1935'. [ 512.350631][T12529] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 512.399261][T12529] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 513.982569][T12539] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 519.342183][ T11] batadv1: left promiscuous mode [ 519.586842][T12582] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1963'. [ 519.665937][T12582] bridge3: port 1(veth11) entered blocking state [ 519.675297][T12582] bridge3: port 1(veth11) entered disabled state [ 519.692204][T12582] veth11: entered allmulticast mode [ 519.706903][T12582] veth11: entered promiscuous mode [ 520.244030][T12604] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1970'. [ 520.281278][T12604] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1970'. [ 520.349470][T12604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 520.402713][T12604] bond3: (slave bond0): making interface the new active one [ 520.451422][T12604] bond3: (slave bond0): Enslaving as an active interface with an up link [ 520.498713][T12601] netlink: 'syz.3.1970': attribute type 4 has an invalid length. [ 520.528663][T12601] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1970'. [ 520.585246][T12601] .`: renamed from bond0 (while UP) [ 520.597233][T12612] overlayfs: failed to clone upperpath [ 521.082220][T12617] netlink: 'syz.3.1975': attribute type 1 has an invalid length. [ 521.155011][T12617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 521.262341][T12621] bond0: (slave veth9): Enslaving as an active interface with a down link [ 521.383258][T12617] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 521.410730][T12617] bond0: (slave batadv1): making interface the new active one [ 521.429836][T12617] batadv1: entered promiscuous mode [ 521.435366][T12617] bond0: (slave batadv1): Enslaving as an active interface with an up link [ 521.570272][T12617] veth11: entered allmulticast mode [ 521.577960][T12617] bond0: (slave veth11): Enslaving as an active interface with a down link [ 523.842071][T12652] overlayfs: failed to clone upperpath [ 524.755717][T12661] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 525.431383][T12665] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 525.692974][T12671] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1991'. [ 525.723356][T12671] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1991'. [ 532.339574][T12739] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2010'. [ 532.422038][T12739] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2010'. [ 534.187067][T12739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 534.232028][T12739] bond3: (slave bond0): making interface the new active one [ 534.266718][T12739] bond3: (slave bond0): Enslaving as an active interface with an up link [ 534.339836][T12741] netlink: 'syz.4.2010': attribute type 4 has an invalid length. [ 534.380016][T12741] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2010'. [ 534.447613][T12741] wlan1: mtu less than device minimum [ 534.490762][T12749] netlink: 'syz.5.2013': attribute type 12 has an invalid length. [ 534.499068][T12751] netlink: 'syz.0.2014': attribute type 1 has an invalid length. [ 534.568801][T12751] 8021q: adding VLAN 0 to HW filter on device bond6 [ 534.635550][ T2885] batadv1: left promiscuous mode [ 534.742875][T12752] bond6: (slave veth9): Enslaving as an active interface with a down link [ 537.482424][T12754] veth11: entered allmulticast mode [ 537.501055][T12754] bond6: (slave veth11): Enslaving as an active interface with a down link [ 538.479281][T12759] IPVS: Error joining to the multicast group [ 541.440716][T12782] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2022'. [ 544.454769][T12782] team0: Port device dummy0 removed [ 545.113301][T12819] netlink: 'syz.5.2032': attribute type 14 has an invalid length. [ 545.122682][T12819] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2032'. [ 545.144349][T12819] bond0: option xmit_hash_policy: invalid value (10) [ 546.311346][T12828] bridge0: port 3(syz_tun) entered blocking state [ 546.318725][T12828] bridge0: port 3(syz_tun) entered disabled state [ 546.336100][T12828] syz_tun: entered allmulticast mode [ 546.343206][T12828] syz_tun: entered promiscuous mode [ 547.184064][T12839] netlink: 'syz.4.2039': attribute type 1 has an invalid length. [ 547.416007][T12841] 8021q: adding VLAN 0 to HW filter on device bond5 [ 547.505110][T12841] bond4: (slave bond5): making interface the new active one [ 547.553307][T12841] bond4: (slave bond5): Enslaving as an active interface with an up link [ 547.863659][T12839] bond4: (slave gretap1): Enslaving as a backup interface with an up link [ 548.729340][T12854] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2054'. [ 552.476737][T12882] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2064'. [ 552.498345][T12882] macvtap1: entered promiscuous mode [ 552.508675][T12882] macvtap1: entered allmulticast mode [ 552.514086][T12882] bridge0: entered allmulticast mode [ 552.610128][T12882] bridge0: left allmulticast mode [ 552.620338][T12882] macvtap1: left promiscuous mode [ 552.631833][T12882] macvtap1: left allmulticast mode [ 555.575275][T12922] tipc: Failed to remove unknown binding: 66,0,0/4:470611324/470611326 [ 555.606895][T12921] tipc: Failed to remove unknown binding: 66,0,0/4:2633524567/2633524568 [ 555.645982][T12921] tipc: Failed to remove unknown binding: 66,0,0/4:2633524567/2633524568 [ 557.164668][T12944] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2069'. [ 557.262948][T12944] macvtap1: entered promiscuous mode [ 557.268286][T12944] bridge0: entered promiscuous mode [ 557.329906][T12944] macvtap1: entered allmulticast mode [ 557.364916][T12944] bridge0: entered allmulticast mode [ 557.404333][T12949] bridge0: left allmulticast mode [ 557.469165][T12949] bridge0: left promiscuous mode [ 557.526107][T12949] macvtap1: left promiscuous mode [ 557.550706][T12949] macvtap1: left allmulticast mode [ 560.086770][T12981] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2086'. [ 560.137792][T12981] bridge0: entered promiscuous mode [ 560.169069][T12981] macvtap1: entered promiscuous mode [ 560.174534][T12981] macvtap1: entered allmulticast mode [ 560.198645][T12981] bridge0: entered allmulticast mode [ 560.275440][T12983] bridge0: left allmulticast mode [ 560.281059][T12983] bridge0: left promiscuous mode [ 560.311894][T12983] macvtap1: left promiscuous mode [ 560.316988][T12983] macvtap1: left allmulticast mode [ 562.953532][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.967463][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.637995][T13018] bridge0: port 2(vxlan0) entered blocking state [ 564.647437][T13018] bridge0: port 2(vxlan0) entered disabled state [ 564.678904][T13018] vxlan0: entered allmulticast mode [ 564.690161][T13018] vxlan0: entered promiscuous mode [ 565.178371][T13029] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 566.449159][T13033] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2105'. [ 567.681251][T13050] veth1_to_bond: entered allmulticast mode [ 567.708929][T13049] veth1_to_bond: left allmulticast mode [ 568.013389][T13052] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.058695][T13052] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.067519][T13052] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.178538][T13052] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.187661][T13052] geneve2: entered promiscuous mode [ 571.554810][T13088] geneve2: entered promiscuous mode [ 578.811459][T13132] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2136'. [ 579.012104][ T5777] Bluetooth: hci0: unexpected event for opcode 0x042e [ 581.025371][T13156] veth1_to_bond: entered allmulticast mode [ 581.054537][T13155] veth1_to_bond: left allmulticast mode [ 581.144519][T13136] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.188536][T13136] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.207254][T13136] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.236956][T13136] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.257357][T13136] geneve2: entered promiscuous mode [ 581.274059][T13159] netlink: 184 bytes leftover after parsing attributes in process `syz.0.2156'. [ 581.301411][T13159] bond0: entered allmulticast mode [ 581.317228][T13159] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 583.954544][T13193] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2157'. [ 585.288623][T13213] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2164'. [ 585.395027][T13213] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2164'. [ 585.446263][T13213] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2164'. [ 585.475800][T13213] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2164'. [ 585.896789][ T27] audit: type=1804 audit(2000000004.870:886): pid=13233 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2170" name="file1" dev="ramfs" ino=32033 res=1 errno=0 [ 587.402091][T13252] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 587.550463][T13255] mac80211_hwsim hwsim18 wlan1: entered allmulticast mode [ 592.106335][T13311] jffs2: notice: (13311) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 598.142698][T13355] netlink: 'syz.5.2209': attribute type 1 has an invalid length. [ 598.193734][T13355] 8021q: adding VLAN 0 to HW filter on device bond4 [ 598.287060][T13355] bond4: (slave gretap1): making interface the new active one [ 598.306935][T13355] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 598.746895][T13366] netlink: 'syz.5.2212': attribute type 3 has an invalid length. [ 598.763803][T13366] netlink: 11575 bytes leftover after parsing attributes in process `syz.5.2212'. [ 602.610306][T13399] netlink: 'syz.5.2222': attribute type 4 has an invalid length. [ 602.636024][T13399] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2222'. [ 604.768668][T13421] netlink: 'syz.3.2230': attribute type 1 has an invalid length. [ 605.106494][T13421] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2230'. [ 605.151734][T13421] bond4: (slave bridge3): making interface the new active one [ 605.184886][T13421] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 605.932067][T13449] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2242'. [ 605.962693][T13449] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2242'. [ 608.131158][T13445] Invalid ELF header magic: != ELF [ 608.247101][T13459] netlink: 'syz.4.2244': attribute type 4 has an invalid length. [ 608.265287][T13459] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2244'. [ 608.395629][ T27] audit: type=1326 audit(2000000027.380:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13462 comm="syz.5.2246" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1841f9e1d9 code=0x7ffc0000 [ 608.446269][ T27] audit: type=1326 audit(2000000027.410:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13462 comm="syz.5.2246" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1841f9e1d9 code=0x7ffc0000 [ 608.508729][ T27] audit: type=1326 audit(2000000027.410:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13462 comm="syz.5.2246" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f1841f9e1d9 code=0x7ffc0000 [ 608.580685][ T27] audit: type=1326 audit(2000000027.410:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13462 comm="syz.5.2246" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1841f9e1d9 code=0x7ffc0000 [ 608.655795][ T27] audit: type=1326 audit(2000000027.410:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13462 comm="syz.5.2246" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1841f9e1d9 code=0x7ffc0000 [ 608.727780][ T27] audit: type=1326 audit(2000000027.410:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13462 comm="syz.5.2246" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1841f9e1d9 code=0x7ffc0000 [ 608.777928][ T5777] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 608.798166][ T27] audit: type=1326 audit(2000000027.410:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13462 comm="syz.5.2246" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1841f9e1d9 code=0x7ffc0000 [ 609.205624][ T27] audit: type=1326 audit(2000000027.410:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13462 comm="syz.5.2246" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f1841f9e1d9 code=0x7ffc0000 [ 609.242113][ T27] audit: type=1326 audit(2000000027.410:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13462 comm="syz.5.2246" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1841f9e1d9 code=0x7ffc0000 [ 609.277865][ T27] audit: type=1326 audit(2000000027.410:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13462 comm="syz.5.2246" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1841f9e1d9 code=0x7ffc0000 [ 609.603392][T13478] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2254'. [ 610.061272][T13488] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2257'. [ 612.908060][T13532] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2270'. [ 615.114235][T13564] Invalid ELF header magic: != ELF [ 618.882509][T13577] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2282'. [ 619.694972][ T27] kauditd_printk_skb: 94 callbacks suppressed [ 619.694987][ T27] audit: type=1326 audit(2000000038.680:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13593 comm="syz.5.2287" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1841f9e1d9 code=0x0 [ 619.801385][ T27] audit: type=1326 audit(2000000038.790:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13593 comm="syz.5.2287" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1841f9e1d9 code=0x0 [ 621.084376][T13609] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2294'. [ 621.126922][T13612] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2295'. [ 622.986143][T13633] netlink: zone id is out of range [ 622.999181][T13633] netlink: zone id is out of range [ 623.028888][T13633] netlink: zone id is out of range [ 623.035231][T13633] netlink: zone id is out of range [ 623.051729][T13633] netlink: zone id is out of range [ 623.070902][T13633] netlink: zone id is out of range [ 623.082613][T13633] netlink: zone id is out of range [ 623.094112][T13633] netlink: zone id is out of range [ 623.105716][T13633] netlink: zone id is out of range [ 623.117638][T13633] netlink: zone id is out of range [ 624.083286][ T5777] Bluetooth: Unexpected continuation frame (len 10) [ 624.503998][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 626.124446][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 628.232458][T13666] net_ratelimit: 23 callbacks suppressed [ 628.232473][T13666] ip_tables: iptables: counters copy to user failed while replacing table [ 628.911726][T13681] fuse: Bad value for 'fd' [ 629.175397][T13684] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2316'. [ 629.261886][T13688] futex_wake_op: syz.5.2318 tries to shift op by 144; fix this program [ 632.061041][T13710] netlink: zone id is out of range [ 632.084300][T13710] netlink: zone id is out of range [ 632.098244][T13710] netlink: zone id is out of range [ 632.116828][T13710] netlink: zone id is out of range [ 633.021429][T13710] netlink: zone id is out of range [ 633.026791][T13710] netlink: zone id is out of range [ 633.060321][T13710] netlink: zone id is out of range [ 633.065516][T13710] netlink: zone id is out of range [ 633.101623][T13710] netlink: zone id is out of range [ 633.748904][T13724] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 637.974683][T13757] net_ratelimit: 24 callbacks suppressed [ 637.974700][T13757] ip_tables: iptables: counters copy to user failed while replacing table [ 641.484754][T13787] syz.4.2345 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 641.674870][T13798] xt_ipcomp: unknown flags 1D [ 643.041343][ T27] audit: type=1326 audit(2000000062.030:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13822 comm="syz.3.2358" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe2eb9e1d9 code=0x7ffc0000 [ 643.075012][ T27] audit: type=1326 audit(2000000062.030:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13822 comm="syz.3.2358" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe2eb9e1d9 code=0x7ffc0000 [ 643.112186][ T27] audit: type=1326 audit(2000000062.030:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13822 comm="syz.3.2358" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe2eb9e1d9 code=0x7ffc0000 [ 643.147536][ T27] audit: type=1326 audit(2000000062.030:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13822 comm="syz.3.2358" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe2eb9e1d9 code=0x7ffc0000 [ 643.181377][ T27] audit: type=1326 audit(2000000062.030:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13822 comm="syz.3.2358" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe2eb9e1d9 code=0x7ffc0000 [ 643.228847][ T27] audit: type=1326 audit(2000000062.030:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13822 comm="syz.3.2358" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7efe2eb9e1d9 code=0x7ffc0000 [ 643.293596][ T27] audit: type=1326 audit(2000000062.080:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13822 comm="syz.3.2358" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe2eb9e1d9 code=0x7ffc0000 [ 643.330662][ T27] audit: type=1326 audit(2000000062.080:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13822 comm="syz.3.2358" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe2eb9e1d9 code=0x7ffc0000 [ 643.406731][ T27] audit: type=1326 audit(2000000062.080:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13822 comm="syz.3.2358" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7efe2eb9df42 code=0x7ffc0000 [ 643.455620][ T27] audit: type=1326 audit(2000000062.080:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13822 comm="syz.3.2358" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7efe2eb9dfd7 code=0x7ffc0000 [ 644.672946][T13856] futex_wake_op: syz.4.2365 tries to shift op by 144; fix this program [ 645.097314][T13868] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 645.160035][T13866] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 648.196054][T13909] vlan2: entered allmulticast mode [ 648.316266][T13909] bridge0: port 4(vlan2) entered blocking state [ 648.483986][T13909] bridge0: port 4(vlan2) entered disabled state [ 648.709222][T13909] vlan2: entered promiscuous mode [ 649.071527][T13926] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2390'. [ 649.215974][T13926] veth15: entered allmulticast mode [ 649.233942][T13926] bond5: (slave veth15): Enslaving as an active interface with an up link [ 653.584693][T13974] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2403'. [ 653.594985][T13974] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2403'. [ 653.604145][T13974] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2403'. [ 653.614117][T13974] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2403'. [ 653.623230][T13974] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2403'. [ 655.925549][T14009] vlan2: entered allmulticast mode [ 655.932007][T14009] bridge0: port 4(vlan2) entered blocking state [ 655.938385][T14009] bridge0: port 4(vlan2) entered disabled state [ 655.960424][T14009] vlan2: entered promiscuous mode [ 657.873137][T14037] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2427'. [ 658.306717][T14041] netlink: 'syz.5.2429': attribute type 4 has an invalid length. [ 658.319062][T14031] syz.3.2425 (14031) used greatest stack depth: 17896 bytes left [ 658.358028][T14041] netlink: 'syz.5.2429': attribute type 4 has an invalid length. [ 660.779104][T14075] sch_tbf: burst 1520 is lower than device lo mtu (1550) ! [ 661.623623][T14101] overlayfs: failed to clone upperpath [ 662.322196][T14110] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2449'. [ 662.334847][T14110] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2449'. [ 662.344880][T14110] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2449'. [ 662.355086][T14110] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2449'. [ 662.365113][T14110] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2449'. [ 664.764534][T14128] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[8226] was attempted by " [ 664.918112][T14132] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 665.019432][T14132] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 665.028152][T14132] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 665.037205][T14132] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 665.266529][T14132] bond0: (slave vxlan1): Enslaving as an active interface with an up link [ 665.410702][T14137] overlayfs: failed to clone upperpath [ 666.461114][T14143] 8021q: adding VLAN 0 to HW filter on device team0 [ 666.853086][T14143] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 673.275571][ T5777] Bluetooth: hci0: unexpected Set CIG Parameters response data [ 673.288528][ T5777] Bluetooth: hci0: unexpected event for opcode 0x2062 [ 674.753624][T14224] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2484'. [ 675.584206][T14227] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2491'. [ 682.531801][T14279] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2500'. [ 683.220344][T14290] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2504'. [ 683.385612][T14290] vlan2: entered allmulticast mode [ 683.433728][T14290] bridge3: entered allmulticast mode [ 683.476954][T14294] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 683.511800][T14290] bridge3: port 1(erspan0) entered blocking state [ 683.518359][T14290] bridge3: port 1(erspan0) entered disabled state [ 683.562073][T14290] erspan0: entered allmulticast mode [ 683.588821][T14290] erspan0: entered promiscuous mode [ 683.609560][T14290] bridge3: port 1(erspan0) entered blocking state [ 683.616055][T14290] bridge3: port 1(erspan0) entered forwarding state [ 685.277997][T14317] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[7467] was attempted by " [ 685.842169][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.949709][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.296081][T14316] bond0: left allmulticast mode [ 686.301067][T14316] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 686.309162][T14316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 686.846688][T14316] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 688.505123][T14336] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 688.520534][T14336] sch_tbf: burst 10 is lower than device lo mtu (11337746) ! [ 688.547402][T14337] netlink: 550 bytes leftover after parsing attributes in process `syz.4.2518'. [ 690.336770][T14359] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5782] was attempted by " [ 693.959805][T14395] wg1: entered promiscuous mode [ 694.069478][T14395] wg1: entered allmulticast mode [ 698.757775][T14468] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 700.356767][T14483] pimreg: entered allmulticast mode [ 700.414958][T14483] pimreg: left allmulticast mode [ 701.890615][T14488] MTD: Couldn't look up './file0': -15 [ 701.896156][T14488] ./file0: Can't lookup blockdev [ 702.440019][T14498] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2569'. [ 702.568027][T14500] ip_tables: iptables: counters copy to user failed while replacing table [ 703.478436][T14524] syz.5.2579 (14524): attempted to duplicate a private mapping with mremap. This is not supported. [ 705.053384][T14546] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2585'. [ 706.622359][ T5777] Bluetooth: hci1: unexpected event for opcode 0x1408 [ 708.557479][T14595] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2597'. [ 708.627887][T14595] 8021q: adding VLAN 0 to HW filter on device bond6 [ 708.716466][T14598] 8021q: adding VLAN 0 to HW filter on device bond7 [ 708.761918][T14598] bond6: (slave bond7): Enslaving as an active interface with an up link [ 709.154826][T14602] tipc: Failed to remove unknown binding: 66,0,0/0:3851051120/3851051122 [ 709.173839][T14602] tipc: Failed to remove unknown binding: 66,0,0/0:3851051120/3851051121 [ 709.195352][T14602] tipc: Failed to remove unknown binding: 66,0,0/0:3851051120/3851051122 [ 709.213643][T14602] tipc: Failed to remove unknown binding: 66,0,0/0:3851051120/3851051121 [ 709.237403][T14595] bond6 (unregistering): (slave bond7): Releasing backup interface [ 709.284979][T14595] bond6 (unregistering): Released all slaves [ 714.919224][T14668] xt_TPROXY: Can be used only with -p tcp or -p udp [ 714.943297][T14668] ip_tables: iptables: counters copy to user failed while replacing table [ 714.960126][T14668] ip_tables: iptables: counters copy to user failed while replacing table [ 715.837675][T14682] 9pnet_fd: Insufficient options for proto=fd [ 720.253724][ T5777] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 725.875186][T14757] ceph: No mds server is up or the cluster is laggy [ 726.004346][T14768] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 726.024879][T14768] bond0 (unregistering): Released all slaves [ 731.150939][T14818] MTD: Couldn't look up './file0': -15 [ 731.156509][T14818] ./file0: Can't lookup blockdev [ 733.139427][T14836] bridge0: port 3(syz_tun) entered blocking state [ 733.146507][T14836] bridge0: port 3(syz_tun) entered listening state [ 734.154416][T14842] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[8082] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[14842] [ 736.035210][ T9] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 736.352530][ T9] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 737.226874][ T9] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 737.252087][T14861] ceph: No mds server is up or the cluster is laggy [ 738.467856][T14884] netlink: 'syz.0.2682': attribute type 8 has an invalid length. [ 738.812392][T14892] netlink: 'syz.0.2686': attribute type 1 has an invalid length. [ 738.873494][T14892] 8021q: adding VLAN 0 to HW filter on device bond0 [ 739.272783][T14902] netlink: 'syz.5.2689': attribute type 1 has an invalid length. [ 739.383638][T14902] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 739.401881][T14902] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 739.416832][T14902] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 739.426179][T14902] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 739.445509][T14902] bond6: (slave geneve3): making interface the new active one [ 739.481452][T14902] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 739.490486][T14904] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2689'. [ 739.514389][T14904] 8021q: adding VLAN 0 to HW filter on device bond6 [ 743.400064][T14948] netlink: 'syz.3.2703': attribute type 1 has an invalid length. [ 743.615264][T14948] 8021q: adding VLAN 0 to HW filter on device bond6 [ 743.715377][T14955] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2703'. [ 743.959616][T14959] bond6: (slave bridge4): making interface the new active one [ 744.046696][T14959] bond6: (slave bridge4): Enslaving as an active interface with an up link [ 744.598919][T14961] tipc: Started in network mode [ 744.603849][T14961] tipc: Node identity 6e46a0237f57, cluster identity 4711 [ 744.648583][T14961] tipc: Enabled bearer , priority 0 [ 745.528711][ C0] hrtimer: interrupt took 28442 ns [ 745.628955][T14987] "syz.5.2719" (14987) uses obsolete ecb(arc4) skcipher [ 746.182757][T14113] tipc: Node number set to 286367779 [ 746.449275][T14990] bond7: Removing last arp target with arp_interval on [ 746.791791][T14996] netlink: 'syz.0.2713': attribute type 1 has an invalid length. [ 747.180825][T14996] netlink: 'syz.0.2713': attribute type 2 has an invalid length. [ 747.319450][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.326169][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.538871][ T27] kauditd_printk_skb: 103 callbacks suppressed [ 748.538887][ T27] audit: type=1326 audit(2000000694.525:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15028 comm="syz.4.2726" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f425639e1d9 code=0x7ffc0000 [ 748.579301][ C1] bridge0: port 3(syz_tun) entered learning state [ 748.650020][ T27] audit: type=1326 audit(2000000694.525:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15028 comm="syz.4.2726" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f425639e1d9 code=0x7ffc0000 [ 748.675266][ T27] audit: type=1326 audit(2000000694.565:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15028 comm="syz.4.2726" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f425635ea0e code=0x7ffc0000 [ 748.704682][ T27] audit: type=1326 audit(2000000694.565:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15028 comm="syz.4.2726" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f425639e1d9 code=0x7ffc0000 [ 748.763180][ T27] audit: type=1326 audit(2000000694.565:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15028 comm="syz.4.2726" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f425639e1d9 code=0x7ffc0000 [ 748.791444][T15034] bridge0: port 5(macvlan2) entered blocking state [ 748.798426][T15034] bridge0: port 5(macvlan2) entered disabled state [ 748.814436][T15034] macvlan2: entered allmulticast mode [ 748.827022][T15034] ip6gretap0: entered allmulticast mode [ 748.832836][ T27] audit: type=1326 audit(2000000694.565:1111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15028 comm="syz.4.2726" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f425639e1d9 code=0x7ffc0000 [ 748.860972][T15034] macvlan2: entered promiscuous mode [ 748.867529][T15034] bridge0: port 5(macvlan2) entered blocking state [ 748.874213][T15034] bridge0: port 5(macvlan2) entered listening state [ 748.885991][ T27] audit: type=1326 audit(2000000694.565:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15028 comm="syz.4.2726" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f425639e1d9 code=0x7ffc0000 [ 748.957173][ T27] audit: type=1326 audit(2000000694.565:1113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15028 comm="syz.4.2726" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f425639e1d9 code=0x7ffc0000 [ 748.992458][ T27] audit: type=1326 audit(2000000694.565:1114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15028 comm="syz.4.2726" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f425639e1d9 code=0x7ffc0000 [ 749.025843][ T27] audit: type=1326 audit(2000000694.565:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15028 comm="syz.4.2726" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f425639e1d9 code=0x7ffc0000 [ 749.897231][T15058] netlink: 'syz.3.2735': attribute type 1 has an invalid length. [ 749.961552][T15058] 8021q: adding VLAN 0 to HW filter on device bond8 [ 749.969224][T15062] veth0_to_bond: left allmulticast mode [ 749.975053][T15062] veth0_to_bond: left promiscuous mode [ 749.980979][T15062] bridge1: port 2(veth0_to_bond) entered disabled state [ 750.107590][T15062] bond8: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 752.470259][T15095] fuse: Unknown parameter '' [ 753.373259][T15114] netlink: 'syz.5.2747': attribute type 1 has an invalid length. [ 753.472962][T15114] 8021q: adding VLAN 0 to HW filter on device bond7 [ 753.893109][T15129] netlink: 'syz.3.2752': attribute type 10 has an invalid length. [ 753.906919][T15129] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2752'. [ 753.916304][T15129] vlan2: left promiscuous mode [ 753.921637][T15129] bridge0: port 4(vlan2) entered disabled state [ 753.938797][T15129] dummy0: left allmulticast mode [ 753.943776][T15129] dummy0: left promiscuous mode [ 754.076051][T15129] bridge0: port 3(dummy0) entered disabled state [ 754.097398][T15129] bridge_slave_1: left allmulticast mode [ 754.109054][T15129] bridge_slave_1: left promiscuous mode [ 754.123065][T15129] bridge0: port 2(bridge_slave_1) entered disabled state [ 754.802169][T15129] bridge_slave_0: left promiscuous mode [ 754.808590][T15129] bridge0: port 1(bridge_slave_0) entered disabled state [ 755.688698][T15156] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2761'. [ 755.718622][T15156] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2761'. [ 755.742788][T15156] A link change request failed with some changes committed already. Interface @ may have been left with an inconsistent configuration, please check. [ 755.774965][T15156] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2761'. [ 755.804910][T15156] A link change request failed with some changes committed already. Interface @ may have been left with an inconsistent configuration, please check. [ 755.822639][T15156] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2761'. [ 755.859386][T15156] A link change request failed with some changes committed already. Interface @ may have been left with an inconsistent configuration, please check. [ 763.058945][T15210] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2777'. [ 763.909043][ C1] bridge0: port 5(macvlan2) entered learning state [ 763.917178][ C1] bridge0: port 3(syz_tun) entered forwarding state [ 763.923855][ C1] bridge0: topology change detected, propagating [ 774.100401][T15323] netlink: 'syz.5.2819': attribute type 4 has an invalid length. [ 774.337482][T15323] 8021q: adding VLAN 0 to HW filter on device .` [ 774.373239][T15323] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 775.145991][T15335] CIFS: Attempting to mount //127.0.0.1/share [ 775.206866][T15336] CIFS: VFS: Invalid response size 0 for command 0 [ 775.219723][T15335] CIFS: VFS: cifs_mount failed w/return code = -5 [ 776.999496][T15355] lo: entered promiscuous mode [ 777.004500][T15355] tunl0: entered promiscuous mode [ 777.032030][T15355] gre0: entered promiscuous mode [ 777.037181][T15355] gretap0: entered promiscuous mode [ 777.077845][T15355] erspan0: entered promiscuous mode [ 777.119158][T15355] ip_vti0: entered promiscuous mode [ 777.129233][T15355] ip6_vti0: entered promiscuous mode [ 777.149024][T15355] sit0: entered promiscuous mode [ 777.163809][T15355] ip6tnl0: entered promiscuous mode [ 777.181199][T15355] ip6gre0: entered promiscuous mode [ 777.201463][T15355] syz_tun: entered promiscuous mode [ 777.223864][T15355] ip6gretap0: entered promiscuous mode [ 777.248953][T15355] .`: entered promiscuous mode [ 777.263993][T15355] bond_slave_0: entered promiscuous mode [ 777.289052][T15355] bond_slave_1: entered promiscuous mode [ 777.299296][T15355] dummy0: entered promiscuous mode [ 777.319796][T15355] nlmon0: entered promiscuous mode [ 777.339008][T15355] caif0: entered promiscuous mode [ 777.360860][T15355] veth0: entered promiscuous mode [ 777.381124][T15355] veth1: entered promiscuous mode [ 777.565954][T15355] wg0: entered promiscuous mode [ 777.575895][T15355] wg1: entered promiscuous mode [ 777.586090][T15355] wg2: entered promiscuous mode [ 777.599027][T15355] veth0_to_bridge: entered promiscuous mode [ 777.615264][T15355] bridge_slave_0: entered promiscuous mode [ 777.903301][T15355] veth1_to_bridge: entered promiscuous mode [ 777.914272][T15355] bridge_slave_1: entered promiscuous mode [ 777.920679][T15355] veth0_to_bond: entered promiscuous mode [ 777.933570][T15355] veth1_to_bond: entered promiscuous mode [ 777.939668][T15355] veth0_to_team: entered promiscuous mode [ 777.945561][T15355] team_slave_0: entered promiscuous mode [ 777.951941][T15355] veth1_to_team: entered promiscuous mode [ 777.957814][T15355] team_slave_1: entered promiscuous mode [ 777.964051][T15355] veth0_to_batadv: entered promiscuous mode [ 777.970253][T15355] batadv_slave_0: entered promiscuous mode [ 777.976245][T15355] veth1_to_batadv: entered promiscuous mode [ 777.982573][T15355] batadv_slave_1: entered promiscuous mode [ 777.988586][T15355] xfrm0: entered promiscuous mode [ 777.994966][T15355] veth0_to_hsr: entered promiscuous mode [ 778.001744][T15355] veth1_to_hsr: entered promiscuous mode [ 778.007700][T15355] hsr0: entered promiscuous mode [ 778.012999][T15355] veth1_virt_wifi: entered promiscuous mode [ 778.019266][T15355] veth0_virt_wifi: entered promiscuous mode [ 778.025391][T15355] virt_wifi0: entered promiscuous mode [ 778.031400][T15355] vlan0: entered promiscuous mode [ 778.036710][T15355] vlan1: entered promiscuous mode [ 778.042161][T15355] macvlan0: entered promiscuous mode [ 778.047688][T15355] macvlan1: entered promiscuous mode [ 778.053252][T15355] ipvlan0: entered promiscuous mode [ 778.058639][T15355] ipvlan1: entered promiscuous mode [ 778.064294][T15355] macvtap0: entered promiscuous mode [ 778.069935][T15355] macsec0: entered promiscuous mode [ 778.075297][T15355] geneve0: entered promiscuous mode [ 778.080877][T15355] geneve1: entered promiscuous mode [ 778.086246][T15355] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 778.093878][T15355] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 778.101516][T15355] netdevsim netdevsim3 netdevsim2: entered promiscuous mode [ 778.109770][T15355] netdevsim netdevsim3 netdevsim3: entered promiscuous mode [ 778.117345][T15355] mac80211_hwsim hwsim17 wlan0: entered promiscuous mode [ 778.124742][T15355] mac80211_hwsim hwsim18 wlan1: entered promiscuous mode [ 778.132103][T15355] sit1: entered promiscuous mode [ 778.137223][T15355] syzkaller0: entered promiscuous mode [ 778.143003][T15355] syztnl0: entered promiscuous mode [ 778.148428][T15355] bond1: entered promiscuous mode [ 778.153714][T15355] ip6gre1: entered promiscuous mode [ 778.159260][T15355] bond2: entered promiscuous mode [ 778.164803][T15355] bridge1: entered promiscuous mode [ 778.181754][T15355] veth2: entered promiscuous mode [ 778.187400][T15355] bridge2: entered promiscuous mode [ 778.194605][T15355] veth4: entered promiscuous mode [ 778.207280][T15355] veth6: entered promiscuous mode [ 778.214437][T15355] batadv0: entered promiscuous mode [ 778.300804][T15355] syztnl2: entered promiscuous mode [ 778.306310][T15355] bond3: entered promiscuous mode [ 778.333830][T15355] bond0: entered promiscuous mode [ 778.507910][T15355] batadv1: entered promiscuous mode [ 778.515322][T15355] veth8: entered promiscuous mode [ 778.526691][T15355] veth9: entered promiscuous mode [ 778.539300][T15355] veth10: entered promiscuous mode [ 778.547717][T15355] veth11: entered promiscuous mode [ 779.268882][ C1] bridge0: port 5(macvlan2) entered forwarding state [ 779.275645][ C1] bridge0: topology change detected, propagating [ 779.543277][T15355] : entered promiscuous mode [ 779.568290][T15355] sit2: entered promiscuous mode [ 779.609798][T15355] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.626577][T15355] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.645763][T15355] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.655766][T15355] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.678008][T15355] bond4: entered promiscuous mode [ 779.699072][T15355] bridge3: entered promiscuous mode [ 779.704427][T15355] bond5: entered promiscuous mode [ 779.729305][T15355] vlan2: entered promiscuous mode [ 779.737372][T15355] bond7: entered promiscuous mode [ 779.748029][T15355] gre1: entered promiscuous mode [ 779.776387][T15355] bond6: entered promiscuous mode [ 779.787372][T15355] bridge4: entered promiscuous mode [ 779.812861][T15355] vlan3: entered promiscuous mode [ 779.848596][T15355] bond8: entered promiscuous mode [ 782.637501][ T27] kauditd_printk_skb: 17 callbacks suppressed [ 782.637517][ T27] audit: type=1326 audit(2000000728.605:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15420 comm="syz.4.2838" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f425639e1d9 code=0x0 [ 782.782664][T15429] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 783.463145][T15438] atomic_op ffff88807c829198 conn xmit_atomic 0000000000000000 [ 786.977214][T15468] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2849'. [ 788.353940][T15493] futex_wake_op: syz.0.2857 tries to shift op by 144; fix this program [ 788.385293][T15493] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2857'. [ 788.650519][T15498] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2859'. [ 788.669734][T15498] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2859'. [ 790.044137][T15508] netlink: 'syz.4.2859': attribute type 4 has an invalid length. [ 790.812201][T15508] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2859'. [ 790.846505][T15508] wlan1: mtu less than device minimum [ 790.861140][T15512] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2864'. [ 792.416707][T15534] CIFS: Attempting to mount //127.0.0.1/share [ 793.614366][T15534] CIFS: VFS: Error connecting to socket. Aborting operation. [ 793.622901][T15534] CIFS: VFS: cifs_mount failed w/return code = -4 [ 793.965112][T15539] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 795.676065][ T5777] Bluetooth: hci0: unexpected event for opcode 0x1edf [ 797.804867][T15569] netlink: 'syz.5.2881': attribute type 10 has an invalid length. [ 797.956072][T15569] bridge0: port 5(macvlan2) entered disabled state [ 797.962920][T15569] bridge0: port 3(syz_tun) entered disabled state [ 798.004086][T15570] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2881'. [ 798.027451][T15570] macvlan2: left allmulticast mode [ 798.034471][T15570] ip6gretap0: left allmulticast mode [ 798.041202][T15570] macvlan2: left promiscuous mode [ 798.049261][T15570] bridge0: port 5(macvlan2) entered disabled state [ 798.295135][T15570] vlan2: left promiscuous mode [ 798.305969][T15570] bridge0: port 4(vlan2) entered disabled state [ 798.322184][T15570] syz_tun: left allmulticast mode [ 798.327355][T15570] syz_tun: left promiscuous mode [ 798.339084][T15570] bridge0: port 3(syz_tun) entered disabled state [ 798.360304][T15570] bridge_slave_1: left allmulticast mode [ 798.365981][T15570] bridge_slave_1: left promiscuous mode [ 798.382299][T15570] bridge0: port 2(bridge_slave_1) entered disabled state [ 798.411859][T15570] bridge_slave_0: left promiscuous mode [ 798.417735][T15570] bridge0: port 1(bridge_slave_0) entered disabled state [ 798.731508][T15575] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2883'. [ 798.787098][T15575] vlan1: entered allmulticast mode [ 798.798830][T15575] bridge0: entered allmulticast mode [ 798.823164][T15577] dvmrp6: entered allmulticast mode [ 798.843646][T15575] bridge0: port 1(erspan0) entered blocking state [ 798.855822][T15575] bridge0: port 1(erspan0) entered disabled state [ 798.866514][T15575] erspan0: entered allmulticast mode [ 798.880322][T15575] erspan0: entered promiscuous mode [ 798.887400][T15575] bridge0: port 1(erspan0) entered blocking state [ 798.894014][T15575] bridge0: port 1(erspan0) entered forwarding state [ 798.916801][T15578] erspan0: left allmulticast mode [ 798.925630][T15578] erspan0: left promiscuous mode [ 798.935952][T15578] bridge0: port 1(erspan0) entered disabled state [ 798.988478][T15578] .`: (slave bond_slave_1): Releasing backup interface [ 799.002226][T15578] veth1: left allmulticast mode [ 799.007207][T15578] veth1: left promiscuous mode [ 799.025208][T15578] bridge2: port 1(veth1) entered disabled state [ 799.046317][T15578] veth5: left allmulticast mode [ 799.056632][T15578] veth5: left promiscuous mode [ 799.069355][T15578] bridge2: port 2(veth5) entered disabled state [ 799.093367][T15578] bond3: (slave veth7): Releasing active interface [ 799.105902][T15578] bond3: (slave veth7): the permanent HWaddr of slave - 5e:c3:3d:47:c9:e5 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 799.134522][T15578] batadv1: entered promiscuous mode [ 799.158541][T15578] bond3: (slave batadv1): Releasing active interface [ 799.171696][T15578] batadv1: left promiscuous mode [ 799.201154][T15578] bond3: (slave veth9): Releasing active interface [ 799.228482][T15578] veth11: left allmulticast mode [ 799.234147][T15578] veth11: left promiscuous mode [ 799.240212][T15578] bridge3: port 1(veth11) entered disabled state [ 799.256028][T15578] bond4: (slave gretap1): Releasing active interface [ 799.282182][T15578] bond5: (slave veth15): Releasing backup interface [ 799.309030][T15578] bond6: (slave geneve3): Releasing active interface [ 799.326721][T15578] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 799.337703][T15578] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 799.347271][T15578] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 799.362979][T15578] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 800.447543][T15584] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2880'. [ 804.798005][T15614] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2892'. [ 807.638266][T15636] lo: entered promiscuous mode [ 807.677719][T15638] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 807.710966][T15636] tunl0: entered promiscuous mode [ 807.741005][T15636] gre0: entered promiscuous mode [ 807.819913][T15636] gretap0: entered promiscuous mode [ 807.847685][T15636] erspan0: entered promiscuous mode [ 807.881764][T15636] ip_vti0: entered promiscuous mode [ 807.902653][T15636] ip6_vti0: entered promiscuous mode [ 807.931482][T15636] sit0: entered promiscuous mode [ 808.017610][T15636] ip6tnl0: entered promiscuous mode [ 808.038703][T15636] ip6gre0: entered promiscuous mode [ 808.078693][T15636] syz_tun: entered promiscuous mode [ 808.108854][T15636] ip6gretap0: entered promiscuous mode [ 808.136549][T15636] vcan0: entered promiscuous mode [ 808.150769][T15636] .`: entered promiscuous mode [ 808.183306][T15636] nlmon0: entered promiscuous mode [ 808.194291][T15636] caif0: entered promiscuous mode [ 808.214042][T15636] wg0: entered promiscuous mode [ 808.223378][T15636] wg1: entered promiscuous mode [ 808.228555][T15636] wg2: entered promiscuous mode [ 808.239763][T15636] veth0_to_bridge: entered promiscuous mode [ 808.245904][T15636] bridge_slave_0: entered promiscuous mode [ 808.261864][T15636] veth1_to_bridge: entered promiscuous mode [ 808.268049][T15636] bridge_slave_1: entered promiscuous mode [ 808.287414][T15636] veth1_to_bond: entered promiscuous mode [ 808.294785][T15636] bond_slave_1: entered promiscuous mode [ 808.308653][T15636] veth0_to_team: entered promiscuous mode [ 808.316432][T15636] team_slave_0: entered promiscuous mode [ 808.330363][T15636] veth1_to_team: entered promiscuous mode [ 808.336428][T15636] team_slave_1: entered promiscuous mode [ 808.352097][T15636] xfrm0: entered promiscuous mode [ 808.357382][T15636] veth0_to_hsr: entered promiscuous mode [ 808.372750][T15636] veth1_to_hsr: entered promiscuous mode [ 808.379054][T15636] hsr0: entered promiscuous mode [ 808.401761][T15636] vlan0: entered promiscuous mode [ 808.407113][T15636] macvlan0: entered promiscuous mode [ 808.437225][T15636] macvlan1: entered promiscuous mode [ 808.447338][T15636] ipvlan0: entered promiscuous mode [ 808.467768][T15636] ipvlan1: entered promiscuous mode [ 808.505795][T15636] macvtap0: entered promiscuous mode [ 808.523799][T15636] macsec0: entered promiscuous mode [ 808.534956][T15636] geneve0: entered promiscuous mode [ 808.543830][T15636] geneve1: entered promiscuous mode [ 808.555238][T15636] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 808.566427][T15636] netdevsim netdevsim5 netdevsim1: entered promiscuous mode [ 808.583761][T15636] netdevsim netdevsim5 netdevsim2: entered promiscuous mode [ 808.594806][T15636] netdevsim netdevsim5 netdevsim3: entered promiscuous mode [ 808.608255][T15636] mac80211_hwsim hwsim13 wlan0: entered promiscuous mode [ 808.616295][T15636] mac80211_hwsim hwsim14 wlan1: entered promiscuous mode [ 808.636570][T15636] erspan1: entered promiscuous mode [ 808.642400][T15636] veth2: entered promiscuous mode [ 808.649378][T15636] veth3: entered promiscuous mode [ 808.654576][T15636] geneve2: entered promiscuous mode [ 808.668643][T15636] ip6gre1: entered promiscuous mode [ 808.674249][T15636] syztnl0: entered promiscuous mode [ 808.689091][T15636] sit1: entered promiscuous mode [ 808.694271][T15636] tipc: Resetting bearer [ 808.714974][T15636] syzkaller0: entered promiscuous mode [ 808.735623][T15636] bond0: entered promiscuous mode [ 808.753896][T15636] syztnl2: entered promiscuous mode [ 808.767941][T15636] : entered promiscuous mode [ 808.776928][T15636] sit2: entered promiscuous mode [ 808.799812][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.806145][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.823397][T15636] gre1: entered promiscuous mode [ 808.840141][T15636] ifb0: entered promiscuous mode [ 808.855261][T15636] ifb2: entered promiscuous mode [ 808.868572][T15636] bond2: entered promiscuous mode [ 808.881705][T15636] erspan2: entered promiscuous mode [ 808.908395][T15636] bridge2: entered promiscuous mode [ 808.925512][T15636] veth0: entered promiscuous mode [ 808.943843][T15636] veth1: entered promiscuous mode [ 808.957903][T15636] veth4: entered promiscuous mode [ 808.963981][T15636] veth5: entered promiscuous mode [ 808.980552][T15636] bond3: entered promiscuous mode [ 809.001716][T15636] veth6: entered promiscuous mode [ 809.006970][T15636] veth7: entered promiscuous mode [ 809.026575][T15636] batadv1: entered promiscuous mode [ 809.034533][T15636] veth8: entered promiscuous mode [ 809.048129][T15636] veth9: entered promiscuous mode [ 809.055893][T15636] bridge3: entered promiscuous mode [ 809.077470][T15636] veth10: entered promiscuous mode [ 809.099039][T15636] veth11: entered promiscuous mode [ 809.104333][T15636] vxlan0: entered promiscuous mode [ 809.591415][T15636] ip6gretap1: entered promiscuous mode [ 809.617990][T15636] bridge4: entered promiscuous mode [ 809.656007][T15636] batadv0: entered promiscuous mode [ 809.687146][T15636] bond4: entered promiscuous mode [ 809.708607][T15636] gretap1: entered promiscuous mode [ 809.728864][T15636] veth12: entered promiscuous mode [ 809.734169][T15636] veth13: entered promiscuous mode [ 809.750379][T15636] bond5: entered promiscuous mode [ 809.755562][T15636] veth14: entered promiscuous mode [ 809.772368][T15636] veth15: entered promiscuous mode [ 809.777669][T15636] vlan2: entered promiscuous mode [ 809.790025][T15636] bond6: entered promiscuous mode [ 809.810805][T15636] geneve3: entered promiscuous mode [ 809.830487][T15636] macvlan2: entered promiscuous mode [ 809.858563][T15636] bond7: entered promiscuous mode [ 809.875591][T15636] mac80211_hwsim hwsim13 dvmrp1: entered promiscuous mode [ 810.750643][T15636] bridge0: entered promiscuous mode [ 810.774384][T15636] vlan1: entered promiscuous mode [ 811.364510][T15648] xt_CONNSECMARK: invalid mode: 66 [ 811.909090][T15652] netlink: 'syz.4.2905': attribute type 10 has an invalid length. [ 811.956922][T15652] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2905'. [ 811.985303][T15652] bridge_slave_1: left allmulticast mode [ 812.008807][T15652] bridge_slave_1: left promiscuous mode [ 812.014532][T15652] bridge0: port 2(bridge_slave_1) entered disabled state [ 812.051531][T15652] bridge_slave_0: left allmulticast mode [ 812.074421][T15652] bridge_slave_0: left promiscuous mode [ 812.089960][T15652] bridge0: port 1(bridge_slave_0) entered disabled state [ 813.111553][T15655] syz_tun: entered allmulticast mode [ 813.135563][T15658] dvmrp6: entered allmulticast mode [ 813.171064][T15653] syz_tun: left allmulticast mode [ 813.291611][T15666] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2909'. [ 815.228093][T15686] netlink: 'syz.5.2915': attribute type 1 has an invalid length. [ 815.427398][T15686] bridge5: entered promiscuous mode [ 815.435489][T15686] bond8: (slave bridge5): making interface the new active one [ 815.455298][T15686] bond8: (slave bridge5): Enslaving as an active interface with an up link [ 815.477118][T15691] bridge6: entered promiscuous mode [ 815.494446][T15691] bond8: (slave bridge6): Enslaving as a backup interface with an up link [ 816.567667][T15702] atomic_op ffff88803208d198 conn xmit_atomic 0000000000000000 [ 822.020458][T15729] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 823.690618][T15740] overlayfs: failed to clone upperpath [ 828.674120][T15783] netlink: 6 bytes leftover after parsing attributes in process `syz.5.2944'. [ 837.959768][T15862] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2967'. [ 838.012699][T15862] ip_vti0: left promiscuous mode [ 838.026648][T15862] bond10: (slave ip_vti0): The slave device specified does not support setting the MAC address [ 838.038514][T15862] bond10: (slave ip_vti0): Error -95 calling set_mac_address [ 839.028687][T15862] bond10 (unregistering): Released all slaves [ 842.842425][T15906] overlayfs: failed to clone upperpath [ 845.307471][T15918] tipc: Enabled bearer , priority 1 [ 849.780944][ T27] audit: type=1800 audit(2000000795.765:1134): pid=15958 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2995" name="bus" dev="ramfs" ino=39798 res=0 errno=0 [ 850.097320][ T5777] Bluetooth: hci0: unexpected event for opcode 0x1edf [ 850.932542][ T5777] Bluetooth: hci0: unexpected event for opcode 0x1edf [ 850.977722][ T5777] Bluetooth: hci1: unexpected event for opcode 0x1edf [ 851.647010][T15993] netlink: 'syz.5.3006': attribute type 10 has an invalid length. [ 852.349896][ T5777] Bluetooth: hci0: unexpected event for opcode 0x1edf [ 853.336941][ T5777] Bluetooth: hci1: unexpected event for opcode 0x1edf [ 853.513558][ T5777] Bluetooth: hci0: unexpected event for opcode 0x1edf [ 854.095787][ T5777] Bluetooth: hci1: unexpected event for opcode 0x1edf [ 855.999176][ T5777] Bluetooth: hci1: unexpected event for opcode 0x1edf [ 856.019344][ T27] audit: type=1326 audit(2000000802.005:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16034 comm="syz.4.3022" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f425639e1d9 code=0x7ffc0000 [ 856.065703][ T27] audit: type=1326 audit(2000000802.005:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16034 comm="syz.4.3022" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f425639e1d9 code=0x7ffc0000 [ 856.108821][ T27] audit: type=1326 audit(2000000802.005:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16034 comm="syz.4.3022" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f425639e1d9 code=0x7ffc0000 [ 856.149001][ T27] audit: type=1326 audit(2000000802.015:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16034 comm="syz.4.3022" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f425639e1d9 code=0x7ffc0000 [ 856.198886][ T27] audit: type=1326 audit(2000000802.065:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16034 comm="syz.4.3022" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f425639e1d9 code=0x7ffc0000 [ 856.237178][ T27] audit: type=1326 audit(2000000802.065:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16034 comm="syz.4.3022" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f425639e1d9 code=0x7ffc0000 [ 856.336106][ T27] audit: type=1326 audit(2000000802.065:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16034 comm="syz.4.3022" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f425639e1d9 code=0x7ffc0000 [ 856.407408][ T27] audit: type=1326 audit(2000000802.065:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16034 comm="syz.4.3022" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f425639e1d9 code=0x7ffc0000 [ 856.477458][ T27] audit: type=1326 audit(2000000802.065:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16034 comm="syz.4.3022" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f425639e1d9 code=0x7ffc0000 [ 856.538656][ T27] audit: type=1326 audit(2000000802.065:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16034 comm="syz.4.3022" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f425635ea0e code=0x7ffc0000 [ 857.552453][T16065] [ 857.554836][T16065] ====================================================== [ 857.563341][T16065] WARNING: possible circular locking dependency detected [ 857.570381][T16065] syzkaller #0 Not tainted [ 857.574802][T16065] ------------------------------------------------------ [ 857.582691][T16065] syz.5.3028/16065 is trying to acquire lock: [ 857.588764][T16065] ffff88803babb088 (&buffer->mutex){+.+.}-{3:3}, at: configfs_read_iter+0x72/0x570 [ 857.598283][T16065] [ 857.598283][T16065] but task is already holding lock: [ 857.605659][T16065] ffff888075e2d9c0 (&iint_mutex_key[depth]){+.+.}-{3:3}, at: process_measurement+0x739/0x1d50 [ 857.615953][T16065] [ 857.615953][T16065] which lock already depends on the new lock. [ 857.615953][T16065] [ 857.627756][T16065] [ 857.627756][T16065] the existing dependency chain (in reverse order) is: [ 857.637129][T16065] [ 857.637129][T16065] -> #6 (&iint_mutex_key[depth]){+.+.}-{3:3}: [ 857.645409][T16065] __mutex_lock+0x135/0xc80 [ 857.650470][T16065] process_measurement+0x739/0x1d50 [ 857.656209][T16065] ima_file_check+0xcc/0x110 [ 857.661524][T16065] path_openat+0x2910/0x3270 [ 857.666746][T16065] do_file_open_root+0x2f3/0x5a0 [ 857.672229][T16065] file_open_root+0x167/0x1c0 [ 857.677490][T16065] kernel_read_file_from_path_initns+0x151/0x230 [ 857.684380][T16065] _request_firmware+0xb43/0x1520 [ 857.690094][T16065] request_firmware+0x36/0x50 [ 857.695328][T16065] reg_reload_regdb+0x9a/0x490 [ 857.701609][T16065] genl_family_rcv_msg_doit+0x21a/0x310 [ 857.707700][T16065] genl_rcv_msg+0x611/0x7a0 [ 857.712742][T16065] netlink_rcv_skb+0x235/0x4c0 [ 857.718061][T16065] genl_rcv+0x28/0x40 [ 857.722579][T16065] netlink_unicast+0x7b1/0x930 [ 857.727879][T16065] netlink_sendmsg+0x8d0/0xbf0 [ 857.733183][T16065] ____sys_sendmsg+0x61b/0x980 [ 857.738493][T16065] ___sys_sendmsg+0x2a6/0x360 [ 857.743716][T16065] __se_sys_sendmsg+0x1d0/0x2c0 [ 857.749121][T16065] do_syscall_64+0x55/0xb0 [ 857.754078][T16065] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 857.760529][T16065] [ 857.760529][T16065] -> #5 (cb_lock){++++}-{3:3}: [ 857.767667][T16065] down_read+0x46/0x2e0 [ 857.777688][T16065] genl_rcv+0x19/0x40 [ 857.782217][T16065] netlink_unicast+0x7b1/0x930 [ 857.787967][T16065] netlink_sendmsg+0x8d0/0xbf0 [ 857.793275][T16065] sock_sendmsg+0x23b/0x3a0 [ 857.798321][T16065] splice_to_socket+0xb92/0x1270 [ 857.803795][T16065] do_splice+0xe45/0x1b20 [ 857.808663][T16065] __se_sys_splice+0x398/0x4a0 [ 857.813962][T16065] do_syscall_64+0x55/0xb0 [ 857.818912][T16065] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 857.825346][T16065] [ 857.825346][T16065] -> #4 (&pipe->mutex/1){+.+.}-{3:3}: [ 857.832933][T16065] __mutex_lock+0x135/0xc80 [ 857.838154][T16065] iter_file_splice_write+0x1ba/0xcf0 [ 857.844166][T16065] do_splice+0xe45/0x1b20 [ 857.849039][T16065] __se_sys_splice+0x398/0x4a0 [ 857.854433][T16065] do_syscall_64+0x55/0xb0 [ 857.859998][T16065] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 857.866443][T16065] [ 857.866443][T16065] -> #3 (sb_writers#5){.+.+}-{0:0}: [ 857.874377][T16065] sb_start_write+0x4d/0x1c0 [ 857.879505][T16065] mnt_want_write+0x41/0x90 [ 857.884540][T16065] path_openat+0x768/0x3270 [ 857.889575][T16065] do_filp_open+0x1f2/0x430 [ 857.894615][T16065] filp_open+0x180/0x1e0 [ 857.899399][T16065] nvmet_file_ns_enable+0x74/0x330 [ 857.905059][T16065] nvmet_ns_enable+0xf4/0x8c0 [ 857.910285][T16065] nvmet_ns_enable_store+0xd8/0x170 [ 857.916028][T16065] configfs_write_iter+0x312/0x400 [ 857.921677][T16065] vfs_write+0x474/0x9a0 [ 857.926466][T16065] ksys_write+0x151/0x260 [ 857.931342][T16065] do_syscall_64+0x55/0xb0 [ 857.936298][T16065] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 857.942746][T16065] [ 857.942746][T16065] -> #2 (&subsys->lock){+.+.}-{3:3}: [ 857.950252][T16065] __mutex_lock+0x135/0xc80 [ 857.955296][T16065] nvmet_ns_buffered_io_store+0xe2/0x200 [ 857.961465][T16065] configfs_write_iter+0x312/0x400 [ 857.967110][T16065] vfs_write+0x474/0x9a0 [ 857.971889][T16065] ksys_write+0x151/0x260 [ 857.976757][T16065] do_syscall_64+0x55/0xb0 [ 857.981702][T16065] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 857.988135][T16065] [ 857.988135][T16065] -> #1 (&p->frag_sem){.+.+}-{3:3}: [ 857.995533][T16065] down_read+0x46/0x2e0 [ 858.000226][T16065] configfs_write_iter+0x215/0x400 [ 858.005890][T16065] vfs_write+0x474/0x9a0 [ 858.010677][T16065] ksys_write+0x151/0x260 [ 858.015558][T16065] do_syscall_64+0x55/0xb0 [ 858.020507][T16065] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 858.026941][T16065] [ 858.026941][T16065] -> #0 (&buffer->mutex){+.+.}-{3:3}: [ 858.034516][T16065] __lock_acquire+0x3a07/0x7eb0 [ 858.039900][T16065] lock_acquire+0x19e/0x420 [ 858.044933][T16065] __mutex_lock+0x135/0xc80 [ 858.049966][T16065] configfs_read_iter+0x72/0x570 [ 858.055439][T16065] __kernel_read+0x2e5/0x730 [ 858.060567][T16065] integrity_kernel_read+0x8a/0xd0 [ 858.066217][T16065] ima_calc_file_hash+0xb1f/0x1960 [ 858.071868][T16065] ima_collect_measurement+0x4d4/0xa30 [ 858.077866][T16065] process_measurement+0x123a/0x1d50 [ 858.083691][T16065] ima_file_check+0xcc/0x110 [ 858.088829][T16065] path_openat+0x2910/0x3270 [ 858.093959][T16065] do_filp_open+0x1f2/0x430 [ 858.098998][T16065] do_sys_openat2+0x134/0x1d0 [ 858.104217][T16065] __x64_sys_openat+0x139/0x160 [ 858.109611][T16065] do_syscall_64+0x55/0xb0 [ 858.114566][T16065] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 858.121005][T16065] [ 858.121005][T16065] other info that might help us debug this: [ 858.121005][T16065] [ 858.131240][T16065] Chain exists of: [ 858.131240][T16065] &buffer->mutex --> cb_lock --> &iint_mutex_key[depth] [ 858.131240][T16065] [ 858.144129][T16065] Possible unsafe locking scenario: [ 858.144129][T16065] [ 858.151585][T16065] CPU0 CPU1 [ 858.156951][T16065] ---- ---- [ 858.162319][T16065] lock(&iint_mutex_key[depth]); [ 858.167355][T16065] lock(cb_lock); [ 858.173620][T16065] lock(&iint_mutex_key[depth]); [ 858.181192][T16065] lock(&buffer->mutex); [ 858.185718][T16065] [ 858.185718][T16065] *** DEADLOCK *** [ 858.185718][T16065] [ 858.193859][T16065] 1 lock held by syz.5.3028/16065: [ 858.199058][T16065] #0: ffff888075e2d9c0 (&iint_mutex_key[depth]){+.+.}-{3:3}, at: process_measurement+0x739/0x1d50 [ 858.209885][T16065] [ 858.209885][T16065] stack backtrace: [ 858.215772][T16065] CPU: 1 PID: 16065 Comm: syz.5.3028 Not tainted syzkaller #0 [ 858.223244][T16065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 858.233306][T16065] Call Trace: [ 858.236591][T16065] [ 858.239796][T16065] dump_stack_lvl+0x18c/0x250 [ 858.244488][T16065] ? load_image+0x420/0x420 [ 858.249016][T16065] ? show_regs_print_info+0x20/0x20 [ 858.254235][T16065] ? print_circular_bug+0x12b/0x1a0 [ 858.259468][T16065] check_noncircular+0x2fc/0x400 [ 858.264597][T16065] ? look_up_lock_class+0x75/0x140 [ 858.269735][T16065] ? print_deadlock_bug+0x5d0/0x5d0 [ 858.274950][T16065] ? lockdep_lock+0xf5/0x230 [ 858.279562][T16065] ? _find_first_zero_bit+0xd6/0x100 [ 858.284881][T16065] __lock_acquire+0x3a07/0x7eb0 [ 858.289785][T16065] ? verify_lock_unused+0x140/0x140 [ 858.295012][T16065] lock_acquire+0x19e/0x420 [ 858.299552][T16065] ? configfs_read_iter+0x72/0x570 [ 858.304676][T16065] ? __lock_acquire+0x7eb0/0x7eb0 [ 858.309743][T16065] ? __might_sleep+0xe0/0xe0 [ 858.314348][T16065] ? read_lock_is_recursive+0x20/0x20 [ 858.319735][T16065] ? is_bpf_text_address+0x26/0x2a0 [ 858.324954][T16065] __mutex_lock+0x135/0xc80 [ 858.329488][T16065] ? configfs_read_iter+0x72/0x570 [ 858.334630][T16065] ? __kernel_text_address+0xd/0x30 [ 858.339869][T16065] ? stack_trace_save+0x100/0x100 [ 858.344917][T16065] ? arch_stack_walk+0x160/0x190 [ 858.349878][T16065] ? configfs_read_iter+0x72/0x570 [ 858.355012][T16065] ? mutex_lock_nested+0x20/0x20 [ 858.359973][T16065] ? stack_trace_save+0xaa/0x100 [ 858.364940][T16065] ? stack_trace_snprint+0xf0/0xf0 [ 858.370079][T16065] ? __stack_depot_save+0x1f/0x660 [ 858.375219][T16065] configfs_read_iter+0x72/0x570 [ 858.380187][T16065] __kernel_read+0x2e5/0x730 [ 858.384834][T16065] ? do_sys_openat2+0x134/0x1d0 [ 858.389733][T16065] ? __x64_sys_openat+0x139/0x160 [ 858.394784][T16065] ? rw_verify_area+0x1b0/0x1b0 [ 858.399679][T16065] integrity_kernel_read+0x8a/0xd0 [ 858.404809][T16065] ? integrity_inode_free+0x170/0x170 [ 858.411457][T16065] ima_calc_file_hash+0xb1f/0x1960 [ 858.416610][T16065] ? is_bpf_text_address+0x28f/0x2a0 [ 858.421930][T16065] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 858.428030][T16065] ? kernel_text_address+0xa0/0xd0 [ 858.433344][T16065] ? look_up_lock_class+0x75/0x140 [ 858.438500][T16065] ? ima_alloc_tfm+0x2f0/0x2f0 [ 858.443286][T16065] ? register_lock_class+0xc4/0x8a0 [ 858.448532][T16065] ? __lock_acquire+0x36dd/0x7eb0 [ 858.453579][T16065] ? verify_lock_unused+0x140/0x140 [ 858.458808][T16065] ? generic_fillattr+0x2b5/0x690 [ 858.463858][T16065] ? __asan_memcpy+0x40/0x70 [ 858.468496][T16065] ? generic_fillattr+0x451/0x690 [ 858.473646][T16065] ima_collect_measurement+0x4d4/0xa30 [ 858.479143][T16065] ? ima_get_action+0xb0/0xb0 [ 858.483845][T16065] ? __mutex_trylock_common+0x160/0x270 [ 858.489415][T16065] ? rcu_is_watching+0x15/0xb0 [ 858.494207][T16065] ? __mutex_lock+0x30d/0xc80 [ 858.498921][T16065] ? ima_get_hash_algo+0x91/0x4a0 [ 858.503982][T16065] ? ima_get_cache_status+0xd0/0xd0 [ 858.509207][T16065] process_measurement+0x123a/0x1d50 [ 858.514527][T16065] ? ima_file_mmap+0x1d0/0x1d0 [ 858.519329][T16065] ? apparmor_current_getsecid_subj+0xb5/0x120 [ 858.525510][T16065] ima_file_check+0xcc/0x110 [ 858.530122][T16065] ? ima_bprm_check+0x200/0x200 [ 858.534995][T16065] path_openat+0x2910/0x3270 [ 858.539616][T16065] ? do_filp_open+0x430/0x430 [ 858.544317][T16065] do_filp_open+0x1f2/0x430 [ 858.548843][T16065] ? vfs_tmpfile+0x620/0x620 [ 858.553469][T16065] ? _raw_spin_unlock+0x28/0x40 [ 858.558346][T16065] ? alloc_fd+0x590/0x640 [ 858.562806][T16065] do_sys_openat2+0x134/0x1d0 [ 858.567502][T16065] ? do_sys_open+0xe0/0xe0 [ 858.571938][T16065] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 858.577945][T16065] ? lock_chain_count+0x20/0x20 [ 858.582819][T16065] __x64_sys_openat+0x139/0x160 [ 858.587707][T16065] do_syscall_64+0x55/0xb0 [ 858.592228][T16065] ? clear_bhb_loop+0x40/0x90 [ 858.596920][T16065] ? clear_bhb_loop+0x40/0x90 [ 858.601615][T16065] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 858.607529][T16065] RIP: 0033:0x7f1841f9e1d9 [ 858.611956][T16065] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 858.631586][T16065] RSP: 002b:00007f1842dcd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 858.640026][T16065] RAX: ffffffffffffffda RBX: 00007f1842225fa0 RCX: 00007f1841f9e1d9 [ 858.648012][T16065] RDX: 0000000000000002 RSI: 0000200000000d00 RDI: ffffffffffffff9c [ 858.655999][T16065] RBP: 00007f1842035888 R08: 0000000000000000 R09: 0000000000000000 [ 858.663980][T16065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 858.671949][T16065] R13: 00007f1842226038 R14: 00007f1842225fa0 R15: 00007ffd93f566d8 [ 858.679922][T16065] [ 858.692529][T16075] null_blk: disk nullb1 created