last executing test programs: 19m36.769190681s ago: executing program 32 (id=48): syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0) syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x1000000, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], 0x2, 0x58a, &(0x7f0000000740)="$eJzs3c1rXWkZAPDnPc1NbzrtzJ22ttaOckHBMmJJ006qpjjWyQSE4oRp04UrY5N2wtwkJclIOgzahejG/8HVbBRkQN0ILnTrQnciA67ErVEGBhRHOSfnfiUZk5mbm4/m94PknnvOcz7eAwk872cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABFff/nm8JW0308BAAAA9NM3b786PCL/BwAAgCfaHe3/AAAAAAAAAHDYpcjih5Fi9dRaOll8X1e9NbfwxurU+MTWpw2l4sxjRXz+U70ycvXaC6PXv9T8/P/n77YL8crtOzfrLy3OP1yaXV6enalPLczdW5yZ3fEVej1/o+eLF1Cff/2Nmfv3l+sjl692HV6t/e34U+dqY19++eytZuzU+MTE7Y6YgcrHvvsmengAAAAcbYORxbVIcefiz9OpiMii91x4m7qDfhuKWp5/F4WYGp8oCtKYm15YyQ9ONhPhWndOPNjMkfcgF+9JLeJ0/qyDMnoAAAB2rhJZfCZSXPhgLT0dEceaefAXiokBt79AbQ8ecgsDEXEmIi7FIcjZAQAAYJ8djyxejRS/adTimTKvLvL/r0WM7ffDAQAAALtiILK4HineG1tLtaI/QEQ8PzU+Ub91t/6NhfuLHbGTqWxRP+zjA/aSvgkAAAAcANXI4lTR4r+Wnv2QmIE9fiYAAABgdw1FFv+KFJ9/8bvFvHJRzEv/zNhXTt6Y6Jxh7vw218ljL0fExR2Oya+Ucw1OpsmUsk1Xe7wrhQMAAAAK1ZTFXyPF+3+uFt8vlbl50ugPAAAAT46UxQ8ixVcn11LasC79sY71/VsO+9j//j7/UPWlxYePluYevLay5fET1ZvfWV5Zmr639eH1tQu7ukNst44hAAAA7EAlZfHPSPH7xjutvLNcA6DsAdBONN++0c5Nq2nD0aLe4Omi3qA1huCpkZHO7S1T1o8wP16tvO+x3osNAAAAR0pKWQxGis/97pPl2v8nYlMbdBn3h0hxY/G5Mi4bzOOawwRqxe/q/bnG7HAeOx4pftloxkYRe7yMPdOOvZLH/ja/7nR3bLWMPduOHcljP4gUry1tHfuJduzVPHYpUvzsJ/Vm7Ik89mQZe64de/neYmOmby8YAAAADoBKyuJXkeLH/663hvx3t/+3W9vffqvd3r9pgr4PafPvtf2/1rHvcVkPcbysrxjYpr7ilUhx4dnnmuUp6gqa3QrW1zpo11f8I1Isfas7drCMPd2OvbLjFwsAAAAHSLP//x/v/rrV5b7MgcuvW+f/n9o4P2Cf8v/ONQnzey4/evP16UZjdmk/Nyof8azvR0TXnnQQSmHjv6WD8jx7ulH+UT0+KM/T60Zv/wcBAOAoyPP/u5Fi9b13W+3dZf5fdpVv5//vf6+d/49tvFCf8v/THfvGyvkGKgMR1ZX5h5XzEdXlR29+cW5++sHsg9mFq6MvjA6Pjl6/NlIZbDbut7d6flcAAABwWOX5/3Ck+PuPftoan7+T9v8TGy/Up/z/TMe+/J7tRr98z196LT4AAAAcCXn+/4tI8aeL77Tm0evO/zvm/3+rPc7+0mfXewu0agf6lP+f7dhXK+4bMbRLZQcAAAAAAAAAAAAAAAAAAICDopKy+E+keLc6kMoJ/3c0/9/Mxgv1afz/uY59M7E36//1/FIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgkMoii7lI8enza+nFfMe3I052fgIAAACH3v8CAAD//16XHzs=") write$binfmt_script(r0, &(0x7f00000008c0), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) 19m30.433711065s ago: executing program 33 (id=86): syz_open_procfs$userns(0x0, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./bus\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x376, &(0x7f0000000280)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="5800000002060102000034e40000000004000008050005000a000000050001000600000005000400000000000900020073797a310000000011000300686173683a69702c706f727400001f000c00078008000640"], 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private2}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x33}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 19m11.051683074s ago: executing program 34 (id=203): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0xe}}]}]}]}, 0x3c}}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x25dfdbfe, {0x1d, 0x1, 0x6}, [@CGW_SRC_IF={0x8, 0x9, r3}, @CGW_DST_IF={0x8, 0xa, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) 18m26.143331651s ago: executing program 35 (id=506): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x964, 0x89f8}, 0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000002c0)={0x0, 0x7, 0x3, [0x267, 0x4, 0x40]}, 0xe) 18m19.411534525s ago: executing program 36 (id=539): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3}, 0x14) syz_emit_ethernet(0x56, &(0x7f0000001c00)={@empty, @random="011f4235d70d", @val={@val={0x88a8, 0x0, 0x0, 0x4}, {0x8100, 0x6, 0x0, 0x2}}, {@mpls_mc={0x8848, {[], @ipv6=@icmpv6={0x7, 0x6, "5cbc86", 0x18, 0x3a, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0xf, '\x00', @ipv4={'\x00', '\xff\xff', @broadcast}}}}}}}}, 0x0) 17m59.987019965s ago: executing program 8 (id=674): r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r2, 0x103, 0x1) getdents64(r2, 0xfffffffffffffffe, 0x0) 17m59.745095711s ago: executing program 8 (id=676): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)='X\x00', 0x2}], 0x1) r2 = socket$netlink(0x10, 0x3, 0x4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xe5d00000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 17m58.362143595s ago: executing program 8 (id=688): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x1, @private1}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={r3, 0x8004}, 0x8) getsockopt$bt_hci(r0, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) 17m58.13611705s ago: executing program 8 (id=691): syz_mount_image$udf(&(0x7f0000000100), &(0x7f00000000c0)='./file1\x00', 0x210048, &(0x7f0000001040)=ANY=[@ANYBLOB='uid=', @ANYRESDEC=0x0, @ANYBLOB="2c756e64656c6574652c6e6f7672732c6164696e6963622c766f6c756d653d30303030303030303030303030303030303030322c7569643d666f726765742c6769643d666f726765742c6e6f7374726963742c6e6f7672732c0000005733010312bb6086da1fd41ffabd4b47acca2b8d488be702157dd8711c31732d"], 0xff, 0xc2d, &(0x7f0000001100)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x44) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x301400, 0x0) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x49) sendmsg(0xffffffffffffffff, 0x0, 0x14000800) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3) statfs(&(0x7f0000000680)='.\x00', &(0x7f0000000780)=""/211) 17m57.172036993s ago: executing program 8 (id=698): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRES16=0x0, @ANYRESDEC=0x0, @ANYRES32, @ANYRES64, @ANYRESDEC=0x0], 0x1, 0x315, &(0x7f0000000f00)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r0, 0x8000) 17m56.583013917s ago: executing program 8 (id=703): r0 = memfd_create(&(0x7f0000000080)='%\x00', 0x3) r1 = fanotify_init(0x200, 0x0) r2 = dup(r0) fanotify_mark(r1, 0x1, 0x48000047, r2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = memfd_create(&(0x7f00000004c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x02Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\xff\xec\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92\xf3H\xf9\x7f\x102\x83\x9b\xdaR\a\xfeU\xc8\xc3\xa76\xe7%\x0eyx\x15\n\xe3l\x98\xcf\xbaU6\xf9\xb5S21Bk\xad\xe60P\xa2c)\xca\xc4`_\x15\xc4\t\xaa\xc4e\x12\x103\xf9\xc4\xba\x86[N\xb27BD\xab`\xae\x1c&\xdb\ns\x8c\x92\xe0\xa52\b\x8bj\x01X\xfa\xf2\x8b\xe1\xf9\n\xc4Ux\xa9\x1b\xc6\xad\xb4\xf0\xba+\x91/&\x81\xba\xa5\x8em0xffffffffffffffff}) r4 = memfd_create(&(0x7f00000004c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x02Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\xff\xec\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92\xf3H\xf9\x7f\x102\x83\x9b\xdaR\a\xfeU\xc8\xc3\xa76\xe7%\x0eyx\x15\n\xe3l\x98\xcf\xbaU6\xf9\xb5S21Bk\xad\xe60P\xa2c)\xca\xc4`_\x15\xc4\t\xaa\xc4e\x12\x103\xf9\xc4\xba\x86[N\xb27BD\xab`\xae\x1c&\xdb\ns\x8c\x92\xe0\xa52\b\x8bj\x01X\xfa\xf2\x8b\xe1\xf9\n\xc4Ux\xa9\x1b\xc6\xad\xb4\xf0\xba+\x91/&\x81\xba\xa5\x8em0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in={{0x2, 0xce23, @broadcast}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000100)={r3, 0x5, 0x30, 0xfffffffffffffff2, 0x1}, &(0x7f0000000180)=0x18) 17m47.950870947s ago: executing program 9 (id=781): socket$kcm(0x11, 0x200000000000002, 0x300) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) close(0x4) 17m47.36708367s ago: executing program 9 (id=786): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x1) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 17m47.132185866s ago: executing program 9 (id=788): syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0)={[{@nouid32}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@commit}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$eJzs3T1sG3UbAPDnznHTj7xv+krvK72gDhUgFamqk/QDClO7IipV6oDEApHjRlWcuIodaKJIpHuF6IAAdSkbDIwgBgbEwsjKwseMVNEIpKYDGDk+p2nqFCfEMcS/n3TJ/3939vP8fX7OvtOdHEDfOtr4k0Y8EREXk4jhdcsGIlt4tLneyvJi8f7yYjGJev3Sz0kkEXFvebHYWj/J/h+KiKWI+H9EfJWPOJ6uPeW+VqM6vzA1Xi6XZrP+SG366kh1fuHElenxydJkaebU8y+cOXv6zNjJsfXp3q+v7+W3NtYb3998+8Y3L92++fEnR5aK744ncS6GsmXrx7GTmq9JPs5tmH+6G8F6KOl1AmxLLqvzRin9L4Yjl1V9O/X1O4fBXUkP6KL6YER9zbom0AcSRQ99qvU9oHH825p28/vHnfPNA5BG3JXlxeJb0Yo/0Dw3EftXj00O/pI8dGTSON48vJuJsictXY+I0YGBR9//Sfb+277RnUiQrvryfHNDPbr907X9T7TZ/wy1zp3+Ra3930q2/1tpEz+3yf7vYocxfnv1xw82jX99MJ5sGz9Zi5+0iZ9GxOsdxr/1yudnN1tW/zDiWLSP35I8/vzwyOUr5dJo82/bGF8cO/Li5uOPOLhJ/OY52/2riawf/74sp7TD8X/29adPLT0m/rNPP377t3v9D0TEOx3G/8+9j17ebNmd68ndxreArW7/JPJxu8P4z507+l3WdNYQAAAAAAAAAAB2ULp6LVuSFtbaaVooNO/h/W8cTMuVau345crczETzmrfDkU9bV1oNN/tJoz+WXY/b6p/c0D+VywLmDqz2C8VKeaLHYwcAAAAAAAAAAAAAAAAAAIC/i0Mb7v//Nbd6///Gn6sG9qrNf/Ib2OvUP/Svh+s/6VkewO7z+Q99q67+oX+pf+hf6h/6l/qH/tW2/g/sfh7A7vP5D/1L/QMAAAAAAAAAAAAAAAAAAAAAAAAAQFdcvHChMdXvLy8WG/2Jgfm5qcobJyZK1anC9FyxUKzMXi1MViqT5VKhWJn+s+dLKpWrozEzd22kVqrWRqrzC69NV+ZmWr8pWsp3fUQAAAAAAAAAAAAAAAAAAADwzzO0OiVpISLf7KdpoRDxr4g4nERy+Uq5NBoR/46Ib3P5wUZ/rNdJAwAAAAAAAAAAAAAAAAAAwB5TnV+YGi+XS7PdawxkoTp71A+1ruYzsJWVI2JpZ9NoPOOWH5XPXsDubqY+aeQ6fB/2faOHOyUAAAAAAAAAAAAAAAAAAOhTD2767fQRv3c3IQAAAAAAAAAAAAAAAAAAAOhL6U9JRDSmY8PPDG1cui9Zya3+j4g3b11679p4rTY71ph/d21+7f1s/sle5A90qlWnaUQ06hgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4oDq/MDVeLpdmt9kY7GCdXo8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYDv+CAAA//9bQM66") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x315901c, 0x0) chroot(&(0x7f0000001140)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00') 17m46.629910329s ago: executing program 9 (id=793): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000300)=r2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r1, &(0x7f00000004c0)='h', &(0x7f0000000580)=@tcp6=r0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r3, &(0x7f0000000380)="0099", &(0x7f0000000480)=@tcp6=r0, 0x2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x5, 0xe, 0x0, &(0x7f00000003c0)="000000000000000000000001e370", 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 17m44.90322273s ago: executing program 9 (id=801): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = epoll_create1(0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000000)={0x40000010}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000080)={0x20000000}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000002c0)={0xa0000013}) 17m44.49673546s ago: executing program 38 (id=801): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = epoll_create1(0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000000)={0x40000010}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000080)={0x20000000}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000002c0)={0xa0000013}) 16m31.542308837s ago: executing program 3 (id=1372): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r0, &(0x7f0000000b40)=0xffffffffffffffff, 0x12) setsockopt$sock_attach_bpf(r1, 0x1, 0x10, &(0x7f0000001280), 0x4) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) recvmsg(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x2002) 16m31.246971554s ago: executing program 3 (id=1375): setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, &(0x7f00000002c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x4, @local, 'ip_vti0\x00'}}, 0x1e) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001006c4789ec390bca4900000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b0000000000080004000180"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x5, @broadcast, 'gre0\x00'}}, 0x1e) 16m30.877775013s ago: executing program 3 (id=1377): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000046d000/0x4000)=nil, 0x4000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000030c0)=[{&(0x7f0000002040)="1f0ee7", 0x3}], 0x1, 0xc) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 16m30.623561919s ago: executing program 3 (id=1381): syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000009780)='./file0\x00', 0x0, &(0x7f0000000040)={[{@grpid}]}, 0x1, 0x97ae, &(0x7f0000012f40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x1a1) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0xd2f0, 0x2000, 0x8, 0xadea}) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x44003, 0x0, 0x5, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) syz_mount_image$fuse(&(0x7f0000000300), &(0x7f0000000280)='./file0\x00', 0x8814a0, &(0x7f0000000240)=ANY=[], 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file2\x00', 0xc4042, 0x40) 16m28.853996732s ago: executing program 3 (id=1397): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x3f) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r2, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {}, {0xffff, 0x1}, {0xa, 0x1}}, [@TCA_CHAIN={0x8, 0xb, 0x9}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x60001d0}, 0xc084) 16m26.794575932s ago: executing program 3 (id=1414): r0 = mq_open(&(0x7f0000000080)='$@\x00', 0x40, 0x1b4, 0x0) fcntl$setlease(r0, 0x400, 0x0) mq_open(&(0x7f0000000140)='$@\x005gM\xfb\xa3\xabt\xb8\x97\xa2`\xcc\xfb&\r.\x97TM&\x93\xd3\xd2\x17[\x89}\xd2j\xd6\xee\xf4\'@\xff\x00\x00\x00\x00\x00\x00\x00\x00\xcd.,\xfb\xab\xb9\x00r\voG\x9d\xaa\x86\xe9\xff\x1b\xa20\x16\t\x05\xa4\x97\xfah\xe9u\xbb\xad~\xb3\x83\xb9\xa3\xe7\xa4\xea\xe6x\xd8H\xa9\xa89\x1a\xfeZ0+\x18\xe9\xc7\x87\\\x05\xbf`!Q\xf2\xcc\xbc4\xbc|s\xbdZY1\x02r\xac\x805\x06\x18\xb5\x88gx\xac\xd6\xc7.\xa6Z\x84X:{II>~<\xa4x\'\xd0\xdc\xf5`\x1a\x1dI:\x8b\xc6v/;U\xac\x12\xed\xed\x86W\xf4\xcb\xf4\xdd\x89w<\xd2d\xc0\x17\xf3\x9f\xdf\xd2', 0x1, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 16m26.254026395s ago: executing program 39 (id=1414): r0 = mq_open(&(0x7f0000000080)='$@\x00', 0x40, 0x1b4, 0x0) fcntl$setlease(r0, 0x400, 0x0) mq_open(&(0x7f0000000140)='$@\x005gM\xfb\xa3\xabt\xb8\x97\xa2`\xcc\xfb&\r.\x97TM&\x93\xd3\xd2\x17[\x89}\xd2j\xd6\xee\xf4\'@\xff\x00\x00\x00\x00\x00\x00\x00\x00\xcd.,\xfb\xab\xb9\x00r\voG\x9d\xaa\x86\xe9\xff\x1b\xa20\x16\t\x05\xa4\x97\xfah\xe9u\xbb\xad~\xb3\x83\xb9\xa3\xe7\xa4\xea\xe6x\xd8H\xa9\xa89\x1a\xfeZ0+\x18\xe9\xc7\x87\\\x05\xbf`!Q\xf2\xcc\xbc4\xbc|s\xbdZY1\x02r\xac\x805\x06\x18\xb5\x88gx\xac\xd6\xc7.\xa6Z\x84X:{II>~<\xa4x\'\xd0\xdc\xf5`\x1a\x1dI:\x8b\xc6v/;U\xac\x12\xed\xed\x86W\xf4\xcb\xf4\xdd\x89w<\xd2d\xc0\x17\xf3\x9f\xdf\xd2', 0x1, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 11m22.935501412s ago: executing program 4 (id=3836): creat(&(0x7f0000000100)='./file0\x00', 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000}, 0x94) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000300)={0x18, 0x0, 0x0, {0xfffffffffffffffa}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000002100)=ANY=[@ANYBLOB="b0000000"], 0xb0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="10"], 0x10) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl}]}}) 11m22.712233357s ago: executing program 4 (id=3838): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x80c1}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 11m22.081019912s ago: executing program 4 (id=3841): r0 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r0, 0x0) ftruncate(r0, 0x51a9495) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="e8", 0x1}], 0x1}], 0x1, 0x40800) recvmsg(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000200)=""/29, 0x1d}], 0x1}, 0x0) 11m21.843321338s ago: executing program 4 (id=3845): syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000f00)='./file1\x00', 0x800, &(0x7f0000000180), 0x1, 0x27e, &(0x7f0000000500)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x4) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000001c0)=0x10) renameat2(r0, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000002c0)='./file0\x00', 0x2) 11m21.634664483s ago: executing program 4 (id=3850): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) close(0x3) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) connect$pppl2tp(r1, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e21, @remote}, 0xa}}, 0x26) close(0x3) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x891c, 0x0) 11m20.301958465s ago: executing program 4 (id=3857): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) membarrier(0x10, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000300)={0x0}) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r4, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r3, 0x0}]) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f00000001c0)={r1, 0x3, r2, 0x3, 0x80000}) 11m19.955947464s ago: executing program 40 (id=3857): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) membarrier(0x10, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000300)={0x0}) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r4, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r3, 0x0}]) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f00000001c0)={r1, 0x3, r2, 0x3, 0x80000}) 7m4.115621412s ago: executing program 0 (id=5907): socket$nl_netfilter(0x10, 0x3, 0xc) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) socket(0x40000000015, 0x5, 0x0) r0 = socket(0x40000000015, 0x805, 0x0) getsockopt(r0, 0x114, 0x271f, &(0x7f0000019440)=""/102400, &(0x7f00000000c0)=0x19000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r1, &(0x7f0000007880)=""/102400, 0x19000) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) 7m3.848720129s ago: executing program 0 (id=5910): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) memfd_create(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x40000, 0x2000, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x363}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 7m2.443871633s ago: executing program 0 (id=5920): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000840)=@newtfilter={0x87c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x5, 0x0, 0x2, 0x3ff, 0xd, 0xffffff81, 0xc0, 0x1, 0x2fa, 0x6, 0x582cd293, 0x2, 0x8, 0x1ff, 0x1a7, 0xce, 0x6, 0x4, 0x7, 0x1, 0x7, 0x0, 0x8, 0x8001, 0x9, 0x2, 0x7, 0x3, 0x8, 0x1, 0x9, 0x10000, 0x0, 0x8, 0xa3, 0x0, 0x8, 0x1, 0x0, 0xd1c8, 0x88c9, 0x1000, 0x7, 0x800, 0x8007, 0xc76, 0xdd, 0x386, 0x101, 0x5, 0xfd, 0x21, 0x66b6, 0xd4, 0xc, 0x4, 0x932, 0x10000, 0x0, 0x7, 0x7, 0x401, 0x8, 0x7, 0x66c53844, 0x37, 0x5, 0x913c, 0x7fffffff, 0x401, 0x7, 0x7, 0x8, 0x9, 0xfffffffe, 0x5, 0x63, 0x9, 0x4, 0xffffff6a, 0x4, 0x401, 0x2, 0x5, 0x800, 0x5, 0x10001, 0x7, 0x6, 0x1, 0x5, 0x2000081, 0x3b932d, 0x8000, 0x4, 0x44c0, 0x8001, 0x5, 0x8, 0xa2e, 0xd, 0x3c8b, 0x3, 0x8001, 0x2, 0x40, 0x1, 0x0, 0x2, 0x101, 0x3ff, 0x2, 0x6, 0x7f, 0x37d8, 0x8, 0xd, 0x8, 0x3, 0x4, 0x40, 0x1, 0x22af662d, 0x7, 0x5, 0x387, 0x400, 0x81, 0x0, 0xffff, 0xa5e, 0x7ff, 0x8, 0x4, 0xf1, 0xffff, 0xa849, 0x2, 0x0, 0x400, 0x1ff, 0x6c, 0x0, 0x7b, 0x400, 0xd33c, 0x8, 0x56, 0x3, 0x800, 0x7, 0x6, 0x2, 0x4, 0x1, 0x1, 0x7, 0xc1dd, 0x4, 0xaee, 0x5, 0x8, 0xef19, 0x7, 0x2, 0x7f, 0x5, 0x7, 0x80000000, 0xfff, 0x6, 0x4, 0x800, 0x800, 0x4, 0xffffffff, 0x4338, 0xb, 0x7, 0xea, 0x8, 0xffff33fd, 0x0, 0x8000, 0xa, 0x9, 0x0, 0x8, 0x30aa0000, 0x7, 0x6, 0x8, 0x60000000, 0x7f, 0x3, 0x5, 0x9, 0x5, 0xfffffffd, 0x4, 0x0, 0x9, 0xffffff91, 0x80000000, 0x1, 0x5, 0x51, 0x10, 0x7, 0x1, 0x9, 0xed, 0x1, 0xac39, 0xb, 0x6, 0x0, 0x2, 0x1, 0x0, 0x1, 0xc6, 0xfff, 0x3, 0x8, 0x400, 0x2, 0x0, 0x1, 0x5, 0xb, 0x73073418, 0x2, 0x9, 0x3, 0x4, 0x40, 0x18000000, 0xa, 0x5, 0x9, 0x0, 0x2, 0xf1, 0x0, 0x3, 0x1, 0x8000, 0x1, 0x9, 0x7fffffff, 0x80, 0x5, 0x1, 0xffff2581]}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0xfffffffe, 0x9, 0x2, 0x73b5, 0x80000000, 0x400, 0x8, 0x8000, 0x4, 0x8, 0x100, 0x217, 0x1000, 0x99, 0x6, 0x6, 0x7, 0x0, 0x7, 0x5, 0x1, 0x3, 0x4, 0xc22, 0xf14, 0x96c, 0x7, 0x4, 0x80, 0xec, 0xeff, 0x7, 0x3, 0x2, 0x0, 0x3, 0x2, 0x4, 0x0, 0xd014, 0xffffff0b, 0x0, 0x1, 0x400, 0x8, 0x1, 0x3, 0x228, 0x29, 0x80000001, 0x7000000, 0x1, 0xffff, 0x7, 0xf, 0xd, 0x9, 0x9, 0x7, 0x7, 0x10, 0x5, 0xe7b, 0x4, 0x3, 0x7, 0x6, 0x7, 0x5, 0x4, 0x100, 0x0, 0x3, 0x9, 0x5, 0x80000001, 0x10, 0x2, 0x9, 0x9, 0x7ff, 0x401, 0x8, 0x8, 0x99c2, 0x4, 0x7, 0x61, 0xa40a, 0xc, 0x8, 0x7fff, 0x100, 0x76, 0x9, 0xc, 0x8, 0x50, 0x0, 0xffffffff, 0x3, 0x1, 0x767c, 0x6, 0x8000, 0xc, 0xd, 0x6, 0xffffffc0, 0x7, 0x101, 0x8, 0x3, 0x7066211e, 0x2, 0x6, 0x5, 0x3, 0x5, 0x8, 0x400, 0x2a4, 0xd, 0x10001, 0xfffffffa, 0x6, 0x80000000, 0x3, 0x9, 0x8, 0x0, 0x40, 0x2, 0xfffff801, 0x6, 0x7, 0xcc0, 0xfffffff4, 0x8, 0x5, 0x10009, 0x9, 0x1, 0x17, 0x1, 0x0, 0x400, 0x9, 0x5, 0x100, 0xffff8000, 0x10000, 0x6, 0x10, 0x4, 0x80, 0xfff, 0x5, 0xfffffffb, 0x8, 0x4, 0x24, 0x3, 0x0, 0x3ff, 0x4, 0xdd5, 0x7fffffff, 0x10000000, 0x4fcf, 0x1, 0xe0000000, 0x3, 0x8, 0x6, 0x4, 0x2, 0x80, 0x4, 0x8, 0x81, 0x0, 0x6, 0x5, 0x8, 0xffffff3a, 0xfffffffb, 0x8, 0x80000, 0x0, 0x9, 0x8, 0x44ca0699, 0x6, 0x3b326896, 0x495, 0x52, 0x8, 0x3, 0x1, 0x101, 0x4, 0x5, 0x2, 0x6e, 0x5, 0x40, 0x7, 0x0, 0x52b, 0xd, 0x0, 0x1, 0x3, 0x5, 0xe0ae, 0x10001, 0x7, 0x4, 0xa4, 0x7, 0xd, 0x7f, 0x864, 0xfa, 0x0, 0x81, 0x0, 0x9, 0x1, 0x0, 0x3, 0x3, 0x6, 0xd, 0x1, 0x42, 0x81, 0x4, 0x101, 0x8, 0x7, 0x4, 0x3, 0x7, 0xfff, 0xfffffff8, 0x30000, 0xf, 0x4, 0x2, 0x9, 0x8, 0x6, 0x90000000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffffd, 0xffffffffffffffff, 0x1, 0x9, 0xef, {0x2, 0x0, 0x1, 0x7ff, 0x84cc, 0x5}, {0x2, 0x0, 0x4, 0x5, 0x1, 0x6}, 0x100, 0x2, 0x7}}]}]}}]}, 0x87c}}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$tun(r0, &(0x7f0000000500)=ANY=[], 0x20) 7m2.190916409s ago: executing program 0 (id=5924): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000002c0)=r3, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0xff6c}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0x56, 0x0, &(0x7f0000000100)="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", 0x0, 0xfb, 0x60006000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000001c40)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f63331a66b3457c", 0x2}, 0x2c) 7m2.074391972s ago: executing program 0 (id=5926): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000840)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x0, 0x1}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x200000, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x2, 0x1}, 0x10) sendmsg$tipc(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000040}, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000000), 0x4) sendmsg$tipc(r0, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x810}, 0x8c1) r3 = dup3(r0, r1, 0x0) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) 7m0.824941582s ago: executing program 0 (id=5939): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil) 7m0.000077702s ago: executing program 41 (id=5939): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil) 13.965041961s ago: executing program 2 (id=7564): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x400}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xac}}, 0x0) 12.979888115s ago: executing program 2 (id=7568): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = memfd_create(&(0x7f0000000480)='\xecO\xdd\xbd\xfc\xfa\xe1\xea\xea\x00\xb0\xd8Y\x03\x00\x00\x00\x00\x00\x00\x7f.\x14\x89|cW\x11\x0e$]7\x99\x11\xfd\xbe/6&\xe6\x97\x1e\xfbon\'\x0f<;\xbe\xa5`\"E]\xda]\xb9\xeb>\xe9\xf2\x99\xa8\xbeOA\xf8\\\xeb[\xd7:{\r\x91.\xdbxn\x1b\x17\xccMz\x1dc\x1d5\x9fe/\xb7k}\xd7\xa6\xd1\xcf\x1f\xf3\xae\x9e\xd6\x040\x19\x88\xa7:OYw\xfe\xaf\xdf\x16\x88\xfe\xd3\x13\x9f!\xd7\xcf\x86\x9f\xe8)\x01\x01\x00\x00\x06^\xb4', 0x0) ftruncate(r1, 0x8800000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) r4 = dup3(r3, r2, 0x0) sendfile(r4, r1, 0x0, 0x1000009) 7.987507296s ago: executing program 2 (id=7589): landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x9, 0x3}, 0x30, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, 0x0) syz_io_uring_submit(r0, r1, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r3 = syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x700) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r3, 0x40146f2c, &(0x7f0000000000)={0xefb8, 0x1, 0x2, 0x3, 0x4}) 7.461131889s ago: executing program 6 (id=7590): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) read$FUSE(r0, &(0x7f0000001b40)={0x2020}, 0x205c) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0xa) fchdir(r2) r3 = open(&(0x7f0000000080)='./bus\x00', 0x1031c2, 0x0) ftruncate(r3, 0x2007ffb) close(r3) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r4, 0x402, 0x8000003d) fcntl$setsig(r4, 0xa, 0x21) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) 5.442520768s ago: executing program 1 (id=7595): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r0, 0x20000e) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, 0x0, &(0x7f0000000780)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x80000, 0x1000000, 0x33b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x10b0, 0x10000, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6a6f, 0x6449, 0x20}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x200, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0) 4.986000419s ago: executing program 1 (id=7600): socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r4, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x40080) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r2, 0x1, 0x70bd2c, 0x1000000, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x37}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) 4.918890811s ago: executing program 6 (id=7601): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000850000000b00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x2000000, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x4, 0x3000000, {0x0, 0x2000000, 0x3}}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x2}]}}, 0xffffffffffffffff, 0x3e, 0xb1, 0x2}, 0x20) sendmsg$NFT_BATCH(r1, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELTABLE={0x3c, 0x2, 0xa, 0x1370a39a2ee46694, 0x0, 0x0, {0x7}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x1, 0x0, 0x0, {0x7, 0x0, 0x8}, @NFT_OBJECT_SECMARK=@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}}], {0x14}}, 0xcc}, 0x1, 0x0, 0x0, 0x8000}, 0x4008050) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r2, 0x4b52, &(0x7f0000000040)) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@ipv4_newroute={0x28, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x14, 0x0, 0xff, 0x16c7bc4d66785fd4, 0xfd, 0x1, 0x20000000}, [@RTA_NH_ID={0x6, 0x1e, 0x6}, @RTA_METRICS={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="4800000000010904000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x48}, 0x1, 0x0, 0x0, 0x4048c00}, 0x40c0) 4.788945894s ago: executing program 6 (id=7602): getgroups(0x2, &(0x7f0000000000)=[0xee01, 0xee00]) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x98, r2, 0x5, 0x70bd26, 0x80, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x59, 0xe, {{{}, {}, @broadcast, @device_a, @random="3a6b7c13e95a"}, 0x0, @default, 0x1, @void, @void, @void, @val={0x4, 0x6, {0x8, 0x8, 0x6, 0x1}}, @void, @val={0x5, 0x3, {0x7, 0xc7, 0x6}}, @void, @void, @void, @val={0x2d, 0x1a, {0x300, 0x1, 0x7, 0x0, {0xa600000000000000, 0x2, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x9, 0x3}}, @val={0x72, 0x6}, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1478}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x98}}, 0x20000014) r4 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x80000) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000300)={'\x00', 0x1, 0x7, 0x801, 0x6, 0x800100000000}) ioctl$BLKTRACETEARDOWN(r4, 0x1276, 0x0) setresgid(r0, 0x0, 0x0) setregid(0xffffffffffffffff, 0x0) semget$private(0x0, 0x6, 0x3b1) semctl$SEM_STAT_ANY(0x0, 0x4, 0x14, &(0x7f0000000000)=""/164) 3.863141807s ago: executing program 2 (id=7606): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080", @ANYBLOB], 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xe0}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xfffffffd}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.853431546s ago: executing program 1 (id=7607): syz_emit_ethernet(0x82, &(0x7f0000000240)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x2a, 0x2, [{0x0, 0xd, "5e00020000020000000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff003a0000b61af93a93"}]}, @cipso={0x86, 0x6}, @timestamp={0x44, 0x14, 0x0, 0x0, 0x0, [0x9, 0x0, 0x0, 0x0]}]}}}}}}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000100900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x1437c0b97b9646a5, 0x70bd27, 0x25d7dbfe, {0x0, 0x0, 0x0, 0x0, 0xc15}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x28001}, 0x8004) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) accept(r2, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="6c6f636b20696f2b6d656d00d890c4c508df7c4972"], 0xc) write$vga_arbiter(r4, &(0x7f0000000040)=@other={'decodes', ' ', 'none'}, 0xd) close_range(r3, 0xffffffffffffffff, 0x2000000000000) 3.806033608s ago: executing program 6 (id=7609): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) write(r2, &(0x7f0000000100)='bRequestType=0 bRequest=6 wValue=0 wIndex=0 wLength=0\x00', 0x36) 3.667029171s ago: executing program 7 (id=7610): socket$inet(0xa, 0x801, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f0000000f00)=ANY=[], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getpriority(0x0, 0xffffffffffffffff) 3.492557805s ago: executing program 1 (id=7611): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) 2.753612493s ago: executing program 7 (id=7612): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0x3, @local, 0x9}, 0x1c) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) listen(r0, 0x204) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 2.727688854s ago: executing program 5 (id=7613): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r3 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x40080, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 2.571154498s ago: executing program 7 (id=7614): r0 = socket$inet(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES16=r1], 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=ANY=[], 0x24}}, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0xc004}, 0x4000) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x24040880}, 0x800) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x2000000) 1.640114521s ago: executing program 7 (id=7615): r0 = socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r4}, &(0x7f0000000500), &(0x7f0000000240)=r3}, 0x20) setsockopt$sock_timeval(r3, 0x1, 0x42, &(0x7f0000000040)={0x0, 0xea60}, 0x10) read(r3, &(0x7f0000000080)=""/5, 0x5) write(r2, &(0x7f0000000140)=';r8', 0x3) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000003b00090025bd7800fddbdf250f000000e3239bcee2f92c99cd4cadfcb2561a540dcd8ae566b8d6815c87aa27ce64536c745dbdcb0cd6df2776eda3039f63fc60530610630c54"], 0x14}}, 0x4000080) 1.567338132s ago: executing program 5 (id=7616): bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file2\x00', 0x8040, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1, 0x2d1, &(0x7f0000000740)="$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") openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x8042, 0x85) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x100, 0x800, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r2, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r3, 0x24, 0x0, 0xffff, &(0x7f0000000000)=[0x0], 0x40e8, 0x0, 0x0, 0x0, 0x0}, 0x40) 1.471270784s ago: executing program 1 (id=7617): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x80000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) unshare(0x22020400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000080)='./debug/kvm\x00', 0x100) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) read(r0, &(0x7f0000001000)=""/4096, 0x1000) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) 1.471032444s ago: executing program 2 (id=7618): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x6, 0x8, 0x4fbee}, 0x13, 0x0, 0x3, 0x7, 0x10, 0x4, 0x17, 0x18, 0x5, 0x2, {0x6, 0x8001, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfd1e, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.383457806s ago: executing program 7 (id=7619): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r2) recvmmsg(r2, &(0x7f000000a400), 0x6fe, 0x10163, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x5, 0xb, 0x8000, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000003c0)={r3, &(0x7f0000000600), &(0x7f0000000080)=""/61}, 0x20) 1.359732067s ago: executing program 5 (id=7620): syz_mount_image$udf(&(0x7f0000000140), &(0x7f0000000100)='./file2\x00', 0x3004000, &(0x7f0000000680)=ANY=[@ANYBLOB="2c6e6f7374726963742c73686f727461642c646d6f64653d30303030303030303030303030303030303030303030302c0080ad9b92f74a7d4f9c4c2d40531531b8a84c7ad96565dc47c8f2c93715951bb4517f8bea88665ff7b1cbbb1efb194b6fbb9438655a17adf3317298821eba064f27ece65a487e218391424720c9c7321be9bf783a2a84ecd18bf3e86d87ce991173", @ANYBLOB='gid=ignore,undelete,anchor=00000000000000000011,longad,umask=00000000000000000000004,utf8,novrs,noadinicb,uid=forget,nostrict,gid=', @ANYRES64], 0x1, 0xc32, &(0x7f0000001bc0)="$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") r0 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x85) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x6, 0x1}]}}, &(0x7f00000000c0)=""/221, 0x26, 0xdd, 0x1}, 0x20) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000700)='./file2\x00', 0x100004e, &(0x7f0000000040)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}]}, 0x3, 0x53e, &(0x7f0000000780)="$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") lstat(&(0x7f0000003300)='./file2\x00', 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000000)=0x20) fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, 0x0}) sched_setaffinity(r3, 0x8, &(0x7f0000000300)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x20542, 0x15) ftruncate(r4, 0x100) 1.159201832s ago: executing program 5 (id=7621): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x48010}, 0x20004000) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) 971.252037ms ago: executing program 6 (id=7622): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x94) sendmsg$kcm(r0, 0x0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000140)={@empty, @empty, 0x0, "1c6804d4a58b85e13e66ab6fafd10df8ab973be71cc99e43030305633956c3c4", 0xfffffc00, 0x9, 0xfffff536, 0xde5}, 0x3c) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) 152.800537ms ago: executing program 5 (id=7623): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x7, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xfb1585202ff31891}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x10000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r6}, &(0x7f0000000280), &(0x7f0000000240)=r3}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r7, 0x4) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 94.804518ms ago: executing program 2 (id=7624): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x80000001, @empty, 0x7}], 0x1c) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x15, @private1, 0x7}, 0x1c, &(0x7f0000000540)}, 0x4040083) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x800, 0x8}, 0x90) 94.546138ms ago: executing program 7 (id=7625): move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="c200"}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 94.136558ms ago: executing program 6 (id=7626): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='tracefs\x00', &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x0, 0x0) read(r3, &(0x7f0000000180), 0x1000) 11.12586ms ago: executing program 1 (id=7627): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 0s ago: executing program 5 (id=7628): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000680)={r2, r4, 0x25, 0x0, @val=@netfilter={0x3, 0x0, 0x7510}}, 0x20) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x7, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSPGRP(r3, 0x8902, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x18, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) kernel console output (not intermixed with test programs): yz.1.5146': attribute type 8 has an invalid length. [ 744.250117][T22834] netlink: 'syz.1.5146': attribute type 15 has an invalid length. [ 745.424947][T22883] CIFS: Attempting to mount \\127.0.0.1\share [ 745.876861][T22889] overlayfs: failed to clone lowerpath [ 745.885508][T22889] overlayfs: failed to clone lowerpath [ 746.245723][T22883] CIFS: VFS: Error connecting to socket. Aborting operation. [ 746.255075][T22883] CIFS: VFS: cifs_mount failed w/return code = -4 [ 747.059622][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.067320][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.077822][ T1280] net_ratelimit: 11 callbacks suppressed [ 747.077852][ T1280] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 748.316839][T22972] lo speed is unknown, defaulting to 1000 [ 748.555964][T22346] device dummy0 left promiscuous mode [ 749.047412][T23013] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 749.056545][T23013] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 749.065473][T23013] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 749.074692][T23013] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 749.111456][T23013] device bridge3 left promiscuous mode [ 749.129110][T23013] device bridge4 left promiscuous mode [ 749.319544][T23017] overlayfs: failed to clone upperpath [ 750.473588][ T4277] Bluetooth: hci4: failed to read key size for handle 200 [ 751.702058][T23076] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5232'. [ 751.799073][T23082] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5232'. [ 752.252315][T23100] device bond4 left promiscuous mode [ 752.274113][T23100] device veth1 left promiscuous mode [ 752.576706][T23112] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 752.672611][T23112] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 752.748943][T23112] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 752.884230][T23133] veth1_to_team: Caught tx_queue_len zero misconfig [ 755.202950][T23188] bond3: (slave dummy0): Releasing active interface [ 758.698981][ T26] kauditd_printk_skb: 38 callbacks suppressed [ 758.698997][ T26] audit: type=1326 audit(2000003229.182:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23293 comm="syz.7.5309" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3f2659e0d9 code=0x0 [ 760.260534][ T8081] kernel write not supported for file /newroot/1085/file0 (pid: 8081 comm: kworker/1:9) [ 761.209497][T23354] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 762.264445][ C0] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 763.076000][T23374] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.5339'. [ 763.087701][T23374] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.5339'. [ 763.372966][T23384] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5341'. [ 764.439961][T23396] netlink: 256 bytes leftover after parsing attributes in process `syz.2.5346'. [ 766.036197][T22406] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 767.367056][T23475] netlink: 'syz.0.5370': attribute type 10 has an invalid length. [ 767.406196][T23475] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 770.580579][T23537] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5392'. [ 771.254220][T23556] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5399'. [ 772.405748][T23570] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5404'. [ 772.607283][T23579] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5407'. [ 772.629135][T23579] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5407'. [ 772.680035][T23579] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5407'. [ 772.709254][T23579] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5407'. [ 775.166057][T23624] device vlan3 entered promiscuous mode [ 776.352221][ T26] audit: type=1326 audit(2000003246.834:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23646 comm="syz.7.5424" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3f2659e0d9 code=0x0 [ 776.452591][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 776.472566][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 776.482567][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 777.884151][T23679] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5435'. [ 778.830765][T23703] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5446'. [ 783.686135][T23803] 8021q: adding VLAN 0 to HW filter on device bond5 [ 783.876125][T23810] device lo entered promiscuous mode [ 783.907570][T23810] device bond0 entered promiscuous mode [ 783.948440][T23810] device dummy0 entered promiscuous mode [ 783.978019][T23810] device eql entered promiscuous mode [ 784.013095][T23810] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 784.034500][T23810] device ifb0 entered promiscuous mode [ 784.049858][T23810] device ifb1 entered promiscuous mode [ 784.076274][T23810] device eth0 entered promiscuous mode [ 784.090084][T23810] device wlan0 entered promiscuous mode [ 784.108306][T23810] device wlan1 entered promiscuous mode [ 784.134444][T23810] device hwsim0 entered promiscuous mode [ 784.159036][T23810] device wpan0 entered promiscuous mode [ 784.180670][T23810] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready [ 784.206165][T23810] device wpan1 entered promiscuous mode [ 784.233602][T23810] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready [ 784.267886][T23810] device teql0 entered promiscuous mode [ 784.288443][T23810] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 784.869185][T23833] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5491'. [ 785.758997][T23842] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5494'. [ 785.791566][T23842] bridge5: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 785.809304][T23842] device bridge5 entered promiscuous mode [ 785.884765][T23848] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5494'. [ 785.914307][T23848] bridge6: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 785.932187][T23848] device bridge6 entered promiscuous mode [ 785.940340][T23853] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 785.960595][T23853] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 785.970456][T23853] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 785.981184][T23853] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 785.996743][T23853] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 786.006990][T23853] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 786.043233][T23860] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 786.057895][T23853] 8021q: adding VLAN 0 to HW filter on device team0 [ 786.067059][T23853] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 786.078529][T23853] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 787.633182][T23892] netlink: 'syz.5.5503': attribute type 1 has an invalid length. [ 787.744167][T23892] device bond10 entered promiscuous mode [ 787.750634][T23892] 8021q: adding VLAN 0 to HW filter on device bond10 [ 787.783560][T23892] bond10: (slave bridge5): making interface the new active one [ 787.791187][T23892] device bridge5 entered promiscuous mode [ 787.799135][T23892] device bridge5 left promiscuous mode [ 787.884101][T21092] IPv6: ADDRCONF(NETDEV_CHANGE): bond10: link becomes ready [ 788.265194][T23917] netlink: 'syz.2.5511': attribute type 4 has an invalid length. [ 789.784772][T23981] netlink: 'syz.0.5525': attribute type 1 has an invalid length. [ 789.899991][T23984] bond5: (slave veth1): Enslaving as an active interface with a down link [ 789.970150][T23981] bond5: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 790.617259][T24003] device batadv_slave_1 entered promiscuous mode [ 790.628886][T24003] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5533'. [ 790.741628][T24003] device batadv_slave_1 left promiscuous mode [ 791.148105][T24019] netlink: 'syz.2.5539': attribute type 7 has an invalid length. [ 791.171186][T24019] netlink: 'syz.2.5539': attribute type 8 has an invalid length. [ 791.188500][T24019] netlink: 'syz.2.5539': attribute type 15 has an invalid length. [ 791.208662][T24015] netlink: 'syz.2.5539': attribute type 7 has an invalid length. [ 791.219618][T24015] netlink: 'syz.2.5539': attribute type 8 has an invalid length. [ 791.234076][T24015] netlink: 'syz.2.5539': attribute type 15 has an invalid length. [ 791.645869][T24032] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5553'. [ 791.967170][T24048] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5549'. [ 792.009408][T24048] device dummy0 left promiscuous mode [ 792.028374][T24048] team0: Port device dummy0 removed [ 792.041489][T24048] bridge8: port 1(dummy0) entered blocking state [ 792.051023][T24048] bridge8: port 1(dummy0) entered disabled state [ 792.058828][T24048] device dummy0 entered promiscuous mode [ 792.076943][T24052] netlink: 'syz.7.5549': attribute type 10 has an invalid length. [ 792.097243][T24052] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5549'. [ 792.128098][T24052] bridge8: port 1(dummy0) entered blocking state [ 792.134713][T24052] bridge8: port 1(dummy0) entered forwarding state [ 792.200070][T24052] bridge8: port 1(dummy0) entered disabled state [ 793.077245][T24075] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5558'. [ 794.716141][T24095] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 795.202062][T24110] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 796.255262][T24163] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5600'. [ 796.286522][T24163] bridge1: port 1(dummy0) entered blocking state [ 796.303385][T24163] bridge1: port 1(dummy0) entered disabled state [ 796.313795][T24163] device dummy0 entered promiscuous mode [ 796.328593][T24163] netlink: 'syz.1.5600': attribute type 10 has an invalid length. [ 796.338974][T24163] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5600'. [ 796.352895][T24163] bridge1: port 1(dummy0) entered blocking state [ 796.359416][T24163] bridge1: port 1(dummy0) entered forwarding state [ 796.377385][T24163] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 796.394634][T24163] bridge1: port 1(dummy0) entered disabled state [ 796.412886][T24167] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 796.443188][T24167] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 796.486747][T24167] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 796.510165][T24167] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 796.527896][T24167] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 796.536594][T24167] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 796.545124][T24167] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 796.565265][T24167] bridge0: port 6(bond0) entered blocking state [ 796.571721][T24167] bridge0: port 6(bond0) entered listening state [ 796.582552][T24167] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 796.871573][T24187] netlink: 'syz.1.5598': attribute type 1 has an invalid length. [ 796.951689][T24187] 8021q: adding VLAN 0 to HW filter on device bond6 [ 796.978303][T24198] netlink: 'syz.7.5603': attribute type 1 has an invalid length. [ 797.030837][T24195] bond6: (slave veth5): Enslaving as an active interface with an up link [ 797.059110][T24198] bond10: (slave veth9): Enslaving as an active interface with a down link [ 797.076078][T20743] IPv6: ADDRCONF(NETDEV_CHANGE): bond6: link becomes ready [ 797.115652][T24198] bond10: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 797.421247][T24220] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5612'. [ 797.609339][T24223] bond8: (slave dummy0): Releasing active interface [ 797.667141][T24223] bridge5: port 1(dummy0) entered blocking state [ 798.410302][T24223] bridge5: port 1(dummy0) entered disabled state [ 798.422978][T24223] device dummy0 entered promiscuous mode [ 798.447259][T24220] netlink: 'syz.5.5612': attribute type 10 has an invalid length. [ 798.470283][T24220] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5612'. [ 798.499800][T24220] bridge5: port 1(dummy0) entered blocking state [ 798.506423][T24220] bridge5: port 1(dummy0) entered forwarding state [ 798.519611][T24220] bridge5: port 1(dummy0) entered disabled state [ 802.089939][T24317] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 803.847662][T24362] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 804.221896][T24376] netlink: 'syz.2.5665': attribute type 1 has an invalid length. [ 804.290847][T24376] device bridge8 entered promiscuous mode [ 804.351249][T24376] bond16: (slave bridge8): making interface the new active one [ 804.362201][T24376] bond16: (slave bridge8): Enslaving as an active interface with an up link [ 804.415198][T24384] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5666'. [ 804.508376][T24387] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5666'. [ 805.053105][T24400] netlink: 'syz.2.5674': attribute type 1 has an invalid length. [ 805.263000][T24404] bond17: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 805.298489][T24400] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5674'. [ 805.312137][T24400] 8021q: adding VLAN 0 to HW filter on device bond17 [ 807.840671][T24469] netlink: 'syz.0.5694': attribute type 10 has an invalid length. [ 807.871495][T24469] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 808.570037][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.576592][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.588683][ T1280] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 811.151575][T24537] lo speed is unknown, defaulting to 1000 [ 811.692677][ C0] bridge0: port 6(bond0) entered learning state [ 813.456277][T24584] tipc: Failed to remove unknown binding: 66,0,0/1:274409956/274409958 [ 813.557540][T24584] tipc: Failed to remove unknown binding: 66,0,0/1:274409956/274409957 [ 813.650446][T24584] tipc: Failed to remove unknown binding: 66,0,0/1:274409956/274409958 [ 813.726464][T24584] tipc: Failed to remove unknown binding: 66,0,0/1:274409956/274409957 [ 814.309733][ T26] audit: type=1326 audit(2000003284.799:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24598 comm="syz.2.5737" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fde5079e0d9 code=0x0 [ 814.759963][T24611] netlink: 256 bytes leftover after parsing attributes in process `syz.1.5739'. [ 818.905969][T24639] lo speed is unknown, defaulting to 1000 [ 821.192905][ T7] libceph: connect (1)[c::]:6789 error -101 [ 821.199180][ T7] libceph: mon0 (1)[c::]:6789 connect error [ 821.342662][T24685] ceph: No mds server is up or the cluster is laggy [ 821.487754][ T7] libceph: connect (1)[c::]:6789 error -101 [ 821.497147][ T7] libceph: mon0 (1)[c::]:6789 connect error [ 822.313556][ T4277] Bluetooth: hci0: Invalid handle: 0xff00 > 0x0eff [ 822.672614][T24731] tipc: Failed to remove unknown binding: 66,0,0/0:2684337125/2684337127 [ 822.723631][T24731] tipc: Failed to remove unknown binding: 66,0,0/0:2684337125/2684337126 [ 822.787551][T24731] tipc: Failed to remove unknown binding: 66,0,0/0:2684337125/2684337127 [ 822.858429][T24731] tipc: Failed to remove unknown binding: 66,0,0/0:2684337125/2684337126 [ 823.938430][T24811] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5781'. [ 827.046795][ C0] bridge0: port 6(bond0) entered forwarding state [ 827.053308][ C0] bridge0: topology change detected, propagating [ 827.061851][ T8993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 828.419434][ T26] audit: type=1326 audit(2000003298.910:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24885 comm="syz.0.5799" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5eb899e0d9 code=0x0 [ 828.640728][T24876] lo speed is unknown, defaulting to 1000 [ 828.697881][T24892] netlink: 'syz.1.5800': attribute type 10 has an invalid length. [ 828.738084][T24892] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 828.785937][ T8993] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 832.405999][T24943] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5813'. [ 833.084668][ T26] audit: type=1326 audit(2000003303.571:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24953 comm="syz.0.5816" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5eb899e0d9 code=0x0 [ 833.580253][T24965] netlink: 'syz.0.5820': attribute type 1 has an invalid length. [ 833.628116][T24965] 8021q: adding VLAN 0 to HW filter on device bond6 [ 833.640282][T24969] bond6: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 833.753513][T24965] bond6: (slave ip6gretap2): Enslaving as an active interface with an up link [ 834.942681][ T26] audit: type=1800 audit(2000003305.431:1016): pid=24979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.5824" name="bus" dev="ramfs" ino=98263 res=0 errno=0 [ 838.189634][T25059] netlink: 'syz.7.5851': attribute type 1 has an invalid length. [ 838.217824][T25059] 8021q: adding VLAN 0 to HW filter on device bond11 [ 838.245306][T25059] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 838.254629][T25059] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 838.263730][T25059] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 838.272651][T25059] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 838.286846][T25059] bond11: (slave geneve2): making interface the new active one [ 838.300934][T25059] bond11: (slave geneve2): Enslaving as an active interface with an up link [ 838.337179][T20743] IPv6: ADDRCONF(NETDEV_CHANGE): bond11: link becomes ready [ 838.501821][T25069] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 838.513994][T25069] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready [ 838.522156][T25069] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready [ 838.530429][T25069] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 839.228385][T25100] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5867'. [ 843.663678][T25167] futex_wake_op: syz.5.5889 tries to shift op by 144; fix this program [ 845.042387][T25202] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5898'. [ 845.372679][T25218] device wlan1 entered promiscuous mode [ 846.805417][ T4277] Bluetooth: hci4: command 0x2021 tx timeout [ 849.922552][ T4283] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 849.934900][ T4283] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 849.943229][ T4283] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 849.952108][ T4283] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 849.959777][ T4283] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 849.968043][ T4283] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 850.128440][T25355] netlink: 'syz.1.5951': attribute type 1 has an invalid length. [ 850.218708][T25359] xt_CT: You must specify a L4 protocol and not use inversions on it [ 850.295606][T25358] bond7: (slave vti0): The slave device specified does not support setting the MAC address [ 850.328350][T25358] bond7: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 850.347989][T25358] bond7: (slave vti0): making interface the new active one [ 850.356318][T25358] bond7: (slave vti0): Enslaving as an active interface with an up link [ 850.376865][T25362] bond7 (unregistering): (slave vti0): Releasing backup interface [ 850.396642][T25362] bond7 (unregistering): Released all slaves [ 850.413992][T25343] lo speed is unknown, defaulting to 1000 [ 850.708707][T25373] futex_wake_op: syz.1.5956 tries to shift op by 144; fix this program [ 850.827012][T25343] chnl_net:caif_netlink_parms(): no params data found [ 850.983777][T25343] bridge0: port 1(bridge_slave_0) entered blocking state [ 850.991700][T25343] bridge0: port 1(bridge_slave_0) entered disabled state [ 851.002046][T25343] device bridge_slave_0 entered promiscuous mode [ 851.011500][T25343] bridge0: port 2(bridge_slave_1) entered blocking state [ 851.023208][T25343] bridge0: port 2(bridge_slave_1) entered disabled state [ 851.032129][T25343] device bridge_slave_1 entered promiscuous mode [ 851.075908][T25343] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 851.099427][T25343] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 851.189766][T25343] team0: Port device team_slave_0 added [ 851.205635][T25343] team0: Port device team_slave_1 added [ 851.283301][T25343] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 851.313543][T25343] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 851.398705][T25343] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 851.433000][T25343] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 851.453352][T25343] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 851.538123][T25343] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 851.683221][T25343] device hsr_slave_0 entered promiscuous mode [ 851.723414][T25343] device hsr_slave_1 entered promiscuous mode [ 851.735769][T25343] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 851.753598][T25343] Cannot create hsr debugfs directory [ 852.004463][ T4283] Bluetooth: hci2: command 0x0409 tx timeout [ 852.421194][T25343] netdevsim netdevsim6 eth20 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.640520][T25415] futex_wake_op: syz.5.5965 tries to shift op by 144; fix this program [ 852.828871][T25343] netdevsim netdevsim6 eth19 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 853.111691][T25343] netdevsim netdevsim6 eth18 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 853.407657][T25343] netdevsim netdevsim6 eth17 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 854.921330][ T4283] Bluetooth: hci2: command 0x041b tx timeout [ 854.970229][T25343] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 855.036829][T25343] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 855.085078][T25343] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 855.137140][T25343] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 855.314087][T25343] 8021q: adding VLAN 0 to HW filter on device bond0 [ 855.358623][T21084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 855.386776][T21084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 855.429674][T25343] 8021q: adding VLAN 0 to HW filter on device team0 [ 855.488948][T21084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 855.510720][T21084] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 855.542485][T21084] bridge0: port 1(bridge_slave_0) entered blocking state [ 855.549686][T21084] bridge0: port 1(bridge_slave_0) entered forwarding state [ 855.568098][T21084] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 855.598332][T21084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 855.619231][T21084] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 855.633414][T21084] bridge0: port 2(bridge_slave_1) entered blocking state [ 855.640663][T21084] bridge0: port 2(bridge_slave_1) entered forwarding state [ 855.676389][ T8975] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 855.695545][ T8975] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 855.743128][T21084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 855.765611][T21084] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 855.777193][T21084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 855.788661][T21084] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 855.807437][T25343] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 855.832989][T25343] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 855.857533][T21084] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 855.868534][T21084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 855.886616][T21084] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 855.904606][T21084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 855.922797][T21084] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 855.958871][T21084] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 856.501826][T25482] 9pnet: p9_errstr2errno: server reported unknown error Àñ'IÓ$íÛ·=¼¼ [ 856.914278][T25491] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5982'. [ 856.923229][T25491] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5982'. [ 856.964763][ T4283] Bluetooth: hci2: command 0x040f tx timeout [ 858.088834][T25343] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 858.197158][T21089] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 858.215063][T21089] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 858.987676][ T8975] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 859.002370][ T8975] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 859.027345][T21380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 859.039719][T21380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 859.047860][ T4283] Bluetooth: hci2: command 0x0419 tx timeout [ 859.055866][T25343] device veth0_vlan entered promiscuous mode [ 859.068452][T21380] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 859.080280][T21380] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 859.099024][T25343] device veth1_vlan entered promiscuous mode [ 859.135432][T21380] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 859.149143][T21380] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 859.159142][T21380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 859.174678][T21380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 859.187605][T25343] device veth0_macvtap entered promiscuous mode [ 859.205321][T25343] device veth1_macvtap entered promiscuous mode [ 859.219615][T21380] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 859.228178][T21380] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 859.252360][T25343] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 859.269739][T21380] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 859.286062][T21380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 859.308850][T25343] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 859.324213][T21380] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 859.343614][T21380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 859.378342][T25343] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.408999][T25343] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.443699][T25343] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.469408][T25343] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.792263][T22346] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 859.819738][T22346] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 859.846065][T25553] netlink: 'syz.5.5991': attribute type 1 has an invalid length. [ 859.882699][T21089] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 859.918219][T25553] bond11: (slave vti0): The slave device specified does not support setting the MAC address [ 859.929309][T25553] bond11: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 859.940724][T25553] bond11: (slave vti0): making interface the new active one [ 859.950813][T25553] bond11: (slave vti0): Enslaving as an active interface with an up link [ 859.971899][T25556] bond11 (unregistering): (slave vti0): Releasing backup interface [ 860.033572][T25556] bond11 (unregistering): Released all slaves [ 860.060149][T21380] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 860.069357][T21380] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 860.077834][T21089] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 862.550385][T25602] netlink: 'syz.5.6015': attribute type 1 has an invalid length. [ 862.664002][T25602] 8021q: adding VLAN 0 to HW filter on device bond11 [ 862.801119][T25609] bond11: (slave ip6gretap1): making interface the new active one [ 862.830234][T25609] bond11: (slave ip6gretap1): Enslaving as an active interface with an up link [ 865.124293][T25665] tipc: Started in network mode [ 865.154670][T25665] tipc: Node identity 4, cluster identity 4711 [ 865.161363][T25665] tipc: Node number set to 4 [ 866.765101][T25699] Bluetooth: MGMT ver 1.22 [ 868.389302][T25723] loop6: detected capacity change from 0 to 128 [ 868.433004][T25723] EXT4-fs: Ignoring removed orlov option [ 868.486166][T25723] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 868.536339][T25723] ext4 filesystem being mounted at /5/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 868.628256][T25729] Cannot find add_set index 0 as target [ 869.394979][T25343] EXT4-fs (loop6): unmounting filesystem. [ 869.790112][T25742] overlayfs: failed to clone upperpath [ 869.922191][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 869.932705][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.939046][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 869.948535][T25751] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6037'. [ 869.949755][ T1280] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 872.298979][T25818] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6058'. [ 876.277715][T25892] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6062'. [ 876.752336][T25892] team0: Port device team_slave_0 removed [ 877.571860][ T26] audit: type=1326 audit(2000003348.068:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25899 comm="syz.1.6064" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fba8dd9e0d9 code=0x0 [ 877.587428][T25913] netlink: 'syz.7.6066': attribute type 1 has an invalid length. [ 877.662018][T25913] 8021q: adding VLAN 0 to HW filter on device bond12 [ 877.840501][T25913] bond12: (slave ip6gretap2): making interface the new active one [ 877.913076][T25913] bond12: (slave ip6gretap2): Enslaving as an active interface with an up link [ 879.387876][T25945] overlayfs: failed to clone upperpath [ 880.001669][ T26] audit: type=1800 audit(2000003350.500:1018): pid=25929 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.6068" name="bus" dev="ramfs" ino=102637 res=0 errno=0 [ 880.737993][T25959] lo speed is unknown, defaulting to 1000 [ 880.829933][T25980] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6086'. [ 881.084021][T25986] netlink: 'syz.2.6088': attribute type 6 has an invalid length. [ 881.744560][T25999] binder: 25998:25999 ioctl c0306201 200000000080 returned -14 [ 881.901518][T25999] binder: 25998:25999 ioctl c0306201 2000000003c0 returned -14 [ 882.599937][T26018] ip_tables: iptables: counters copy to user failed while replacing table [ 882.743076][T26026] netlink: 'syz.7.6101': attribute type 1 has an invalid length. [ 882.798662][T26026] 8021q: adding VLAN 0 to HW filter on device bond13 [ 882.928398][T26029] bond13: (slave geneve3): making interface the new active one [ 882.960040][T26035] jffs2: notice: (26035) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 882.981609][T26029] bond13: (slave geneve3): Enslaving as an active interface with an up link [ 883.025484][T21085] IPv6: ADDRCONF(NETDEV_CHANGE): bond13: link becomes ready [ 883.606356][T26055] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6109'. [ 884.886046][T26097] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6120'. [ 885.734667][ T8977] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 886.381727][T26138] kvm: vcpu 0: requested 39424 ns lapic timer period limited to 200000 ns [ 886.449108][T26138] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3659427032 (29275416256 ns) > initial count (200000 ns). Using initial count to start timer. [ 886.697846][T26109] lo speed is unknown, defaulting to 1000 [ 890.460792][ T14] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 890.663155][ T14] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 890.685497][ T14] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 890.719491][ T14] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 890.746157][ T14] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 890.784561][ T14] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 890.829793][ T14] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 890.862932][ T14] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 890.882624][ T14] usb 7-1: Product: syz [ 890.891471][ T14] usb 7-1: Manufacturer: syz [ 890.917943][ T14] cdc_wdm 7-1:1.0: skipping garbage [ 890.937898][ T14] cdc_wdm 7-1:1.0: skipping garbage [ 890.983643][ T14] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 891.005624][ T14] cdc_wdm 7-1:1.0: Unknown control protocol [ 891.567351][ C0] cdc_wdm 7-1:1.0: Unexpected error -71 [ 891.576406][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 891.583265][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 891.589761][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 891.596391][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 891.603054][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 891.609702][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 891.619969][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 891.626644][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 891.633090][ T5142] usb 7-1: USB disconnect, device number 5 [ 893.085868][T26255] netlink: 'syz.2.6160': attribute type 1 has an invalid length. [ 893.109235][T26255] netlink: 'syz.2.6160': attribute type 2 has an invalid length. [ 893.691456][T26273] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6165'. [ 894.318465][ T26] audit: type=1326 audit(2000003364.799:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26278 comm="syz.7.6167" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f2659e0d9 code=0x7ffc0000 [ 894.429127][ T26] audit: type=1326 audit(2000003364.799:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26278 comm="syz.7.6167" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f2659e0d9 code=0x7ffc0000 [ 894.514855][ T26] audit: type=1326 audit(2000003364.799:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26278 comm="syz.7.6167" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f2659e0d9 code=0x7ffc0000 [ 894.590848][ T26] audit: type=1326 audit(2000003364.819:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26278 comm="syz.7.6167" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3f2659e0d9 code=0x7ffc0000 [ 894.674570][ T26] audit: type=1326 audit(2000003364.819:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26278 comm="syz.7.6167" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f2659e0d9 code=0x7ffc0000 [ 894.768043][ T26] audit: type=1326 audit(2000003364.819:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26278 comm="syz.7.6167" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f2659e0d9 code=0x7ffc0000 [ 894.873712][ T26] audit: type=1326 audit(2000003364.819:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26278 comm="syz.7.6167" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f2659e0d9 code=0x7ffc0000 [ 894.950252][ T26] audit: type=1326 audit(2000003364.819:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26278 comm="syz.7.6167" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f2659e0d9 code=0x7ffc0000 [ 895.025737][ T26] audit: type=1326 audit(2000003364.819:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26278 comm="syz.7.6167" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3f2659e0d9 code=0x7ffc0000 [ 895.079974][ T26] audit: type=1326 audit(2000003364.819:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26278 comm="syz.7.6167" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f2659e0d9 code=0x7ffc0000 [ 895.230489][T26300] ceph: No mds server is up or the cluster is laggy [ 896.314743][ T4316] bond0: (slave netdevsim0): Releasing backup interface [ 896.639772][ T4316] netdevsim netdevsim0 eth9: set [1, 0] type 2 family 0 port 6081 - 0 [ 896.741039][ T4316] netdevsim netdevsim0 eth10: set [1, 0] type 2 family 0 port 6081 - 0 [ 896.849147][T26348] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 896.860159][ T4316] netdevsim netdevsim0 eth11: set [1, 0] type 2 family 0 port 6081 - 0 [ 896.909662][ T4316] netdevsim netdevsim0 eth12: set [1, 0] type 2 family 0 port 6081 - 0 [ 897.222504][ T4316] bond4: (slave ip6gretap1): Releasing backup interface [ 897.322703][ T4316] bond6: (slave ip6gretap2): Releasing active interface [ 898.578918][T26375] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6188'. [ 898.624784][T26375] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 898.722647][ T5142] libceph: connect (1)[c::]:6789 error -101 [ 898.730825][ T5142] libceph: mon0 (1)[c::]:6789 connect error [ 898.830292][T26384] netlink: 'syz.5.6190': attribute type 11 has an invalid length. [ 898.853268][T26377] ceph: No mds server is up or the cluster is laggy [ 899.035745][ T5142] libceph: connect (1)[c::]:6789 error -101 [ 899.051726][ T5142] libceph: mon0 (1)[c::]:6789 connect error [ 900.714825][ T4277] Bluetooth: hci3: command 0x0406 tx timeout [ 902.699014][T26444] binder_alloc: 26443: binder_alloc_buf size 12280 failed, no address space [ 902.807707][T26444] binder_alloc: allocated: 8 (num: 1 largest: 8), free: 8184 (num: 1 largest: 8184) [ 903.329867][ T4316] device hsr_slave_0 left promiscuous mode [ 903.357461][ T4316] device hsr_slave_1 left promiscuous mode [ 903.738263][ T4316] bond6 (unregistering): Released all slaves [ 903.785161][ T4316] bond5 (unregistering): (slave veth1): Releasing active interface [ 903.822688][ T4316] bond5 (unregistering): Released all slaves [ 904.024784][ T4316] bond4 (unregistering): Released all slaves [ 904.585779][T26474] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 904.671802][T26482] loop6: detected capacity change from 0 to 512 [ 904.760453][T26482] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 904.796006][T26482] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 904.866042][ T4316] bond3 (unregistering): Released all slaves [ 904.906784][ T4316] bond2 (unregistering): Released all slaves [ 905.824001][T25343] EXT4-fs (loop6): unmounting filesystem. [ 906.439652][ T4316] bond1 (unregistering): Released all slaves [ 907.996441][T21090] smc: removing ib device syz1 [ 908.398542][ T4316] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 908.411133][ T4316] bond0 (unregistering): Released all slaves [ 908.545171][T26473] netlink: 'syz.2.6210': attribute type 1 has an invalid length. [ 908.560398][T26487] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 911.059838][T26598] tipc: Failed to remove unknown binding: 66,0,0/4:2764296242/2764296244 [ 911.098220][T26598] tipc: Failed to remove unknown binding: 66,0,0/4:2764296242/2764296243 [ 911.139627][T26607] tipc: Failed to remove unknown binding: 66,0,0/4:2764296242/2764296244 [ 911.191299][T26607] tipc: Failed to remove unknown binding: 66,0,0/4:2764296242/2764296243 [ 912.439322][T26627] netlink: 'syz.5.6234': attribute type 1 has an invalid length. [ 912.537689][T26627] device bond12 entered promiscuous mode [ 912.584315][T26627] 8021q: adding VLAN 0 to HW filter on device bond12 [ 912.624356][T26631] bond12: (slave erspan1): making interface the new active one [ 912.632175][T26631] device erspan1 entered promiscuous mode [ 912.640773][T26631] bond12: (slave erspan1): Enslaving as an active interface with an up link [ 912.675739][T21085] IPv6: ADDRCONF(NETDEV_CHANGE): bond12: link becomes ready [ 913.214244][T26648] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6236'. [ 913.376332][T26651] RDS: rds_bind could not find a transport for ::ffff:172.20.20.44, load rds_tcp or rds_rdma? [ 913.582343][T26657] mmap: syz.1.6240 (26657) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 917.613648][ T129] libceph: connect (1)[c::]:6789 error -101 [ 917.626120][ T129] libceph: mon0 (1)[c::]:6789 connect error [ 917.684941][T26731] ceph: No mds server is up or the cluster is laggy [ 917.834086][T26740] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6260'. [ 918.782503][ T26] kauditd_printk_skb: 63 callbacks suppressed [ 918.782518][ T26] audit: type=1326 audit(2000003389.304:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26759 comm="syz.5.6265" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f040fd9e0d9 code=0x0 [ 920.285127][T26780] loop6: detected capacity change from 0 to 40427 [ 920.337898][T26780] F2FS-fs (loop6): invalid crc value [ 920.347879][T26780] F2FS-fs (loop6): Found nat_bits in checkpoint [ 920.419270][T26780] F2FS-fs (loop6): Start checkpoint disabled! [ 920.449540][T26780] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 920.543311][T26780] bio_check_eod: 31 callbacks suppressed [ 920.543326][T26780] syz.6.6269: attempt to access beyond end of device [ 920.543326][T26780] loop6: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 920.616471][ T26] audit: type=1800 audit(2000003391.145:1093): pid=26771 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.6267" name="bus" dev="ramfs" ino=105565 res=0 errno=0 [ 920.642738][T26786] fuse: Bad value for 'fd' [ 920.853780][ T4316] kworker/u4:5: attempt to access beyond end of device [ 920.853780][ T4316] loop6: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 921.204396][T26794] overlayfs: failed to clone upperpath [ 923.045098][T26832] netlink: 'syz.7.6283': attribute type 1 has an invalid length. [ 925.261287][T26850] overlayfs: failed to clone upperpath [ 925.584171][ T26] audit: type=1800 audit(2000003396.118:1094): pid=26847 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.6285" name="bus" dev="ramfs" ino=105653 res=0 errno=0 [ 925.666368][T26879] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 926.339341][T26876] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 931.550440][T26940] loop6: detected capacity change from 0 to 32768 [ 931.659514][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.665868][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.677777][ T1280] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 931.772925][T26940] XFS (loop6): Mounting V5 Filesystem [ 931.994343][T26940] XFS (loop6): Ending clean mount [ 932.028808][ T26] audit: type=1800 audit(2000003402.562:1095): pid=26940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.6306" name="file1" dev="loop6" ino=4422 res=0 errno=0 [ 932.899547][ T26] audit: type=1800 audit(2000003403.362:1096): pid=26940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.6306" name="file1" dev="loop6" ino=4422 res=0 errno=0 [ 933.145910][T25343] XFS (loop6): Unmounting Filesystem [ 934.366898][T27018] wlan0 speed is unknown, defaulting to 1000 [ 934.572323][T27018] wlan0 speed is unknown, defaulting to 1000 [ 934.886053][T27018] wlan0 speed is unknown, defaulting to 1000 [ 934.942497][T27018] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 934.989186][T27018] wlan0 speed is unknown, defaulting to 1000 [ 934.997517][T27018] wlan0 speed is unknown, defaulting to 1000 [ 935.019573][T27018] wlan0 speed is unknown, defaulting to 1000 [ 935.026212][T27019] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6325'. [ 935.186061][T27018] wlan0 speed is unknown, defaulting to 1000 [ 935.195169][T27018] wlan0 speed is unknown, defaulting to 1000 [ 935.208982][T27018] wlan0 speed is unknown, defaulting to 1000 [ 935.457229][ T26] audit: type=1326 audit(2000003405.994:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27040 comm="syz.2.6333" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde5079e0d9 code=0x7ffc0000 [ 935.532068][ T26] audit: type=1326 audit(2000003406.024:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27040 comm="syz.2.6333" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde5079e0d9 code=0x7ffc0000 [ 935.618772][ T26] audit: type=1326 audit(2000003406.024:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27040 comm="syz.2.6333" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7fde5079e0d9 code=0x7ffc0000 [ 935.674660][ T26] audit: type=1326 audit(2000003406.024:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27040 comm="syz.2.6333" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde5079e0d9 code=0x7ffc0000 [ 935.701692][ T26] audit: type=1326 audit(2000003406.024:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27040 comm="syz.2.6333" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde5079e0d9 code=0x7ffc0000 [ 935.728741][ T26] audit: type=1326 audit(2000003406.024:1102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27040 comm="syz.2.6333" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7fde5079e0d9 code=0x7ffc0000 [ 935.801873][ T26] audit: type=1326 audit(2000003406.024:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27040 comm="syz.2.6333" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde5079e0d9 code=0x7ffc0000 [ 935.888320][ T26] audit: type=1326 audit(2000003406.024:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27040 comm="syz.2.6333" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde5079e0d9 code=0x7ffc0000 [ 937.023334][T27065] netlink: 'syz.5.6342': attribute type 1 has an invalid length. [ 937.224942][T27065] 8021q: adding VLAN 0 to HW filter on device bond13 [ 937.245888][T27073] bond13: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 937.279037][T27075] device bond13 entered promiscuous mode [ 937.648668][T27082] device macvlan2 entered promiscuous mode [ 937.778633][T27082] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 937.947081][T27082] bond13: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 938.104058][T27090] overlayfs: failed to clone upperpath [ 939.729727][T27112] netlink: 'syz.5.6349': attribute type 1 has an invalid length. [ 940.733194][T27112] 8021q: adding VLAN 0 to HW filter on device bond14 [ 941.395862][T27127] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6350'. [ 944.692735][T27150] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6357'. [ 944.721033][T27150] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 944.842471][T27163] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6362'. [ 946.117440][T27188] wlan0 speed is unknown, defaulting to 1000 [ 946.183009][T27208] netlink: 'syz.7.6373': attribute type 1 has an invalid length. [ 946.287278][T27208] 8021q: adding VLAN 0 to HW filter on device bond14 [ 947.004615][T27208] bond14: (slave geneve4): making interface the new active one [ 947.054367][T27208] bond14: (slave geneve4): Enslaving as an active interface with an up link [ 947.190743][T21380] IPv6: ADDRCONF(NETDEV_CHANGE): bond14: link becomes ready [ 947.410641][ T8082] libceph: connect (1)127.0.0.1:6789 error -22 [ 947.417283][ T8082] libceph: mon0 (1)127.0.0.1:6789 connect error [ 947.443827][ T8082] libceph: connect (2)127.0.0.1:6789 error -22 [ 947.450152][ T8082] libceph: ceph_tcp_connect failed: -22 [ 947.456346][ T8082] libceph: mon0 (2)127.0.0.1:6789 connect error [ 947.462953][ T8082] libceph: connect (2)127.0.0.1:6789 error -22 [ 947.469234][ T8082] libceph: ceph_tcp_connect failed: -22 [ 947.475021][ T8082] libceph: mon0 (2)127.0.0.1:6789 connect error [ 947.772001][ T8082] libceph: connect (2)127.0.0.1:6789 error -22 [ 947.784303][ T8082] libceph: ceph_tcp_connect failed: -22 [ 947.809890][ T8082] libceph: mon0 (2)127.0.0.1:6789 connect error [ 947.830729][ T8082] libceph: connect (2)127.0.0.1:6789 error -22 [ 947.837191][ T8082] libceph: ceph_tcp_connect failed: -22 [ 947.860511][ T8082] libceph: mon0 (2)127.0.0.1:6789 connect error [ 947.870092][ T8082] libceph: connect (1)127.0.0.1:6789 error -22 [ 947.878698][ T8082] libceph: mon0 (1)127.0.0.1:6789 connect error [ 948.951279][T27224] ceph: No mds server is up or the cluster is laggy [ 948.959267][T27221] ceph: No mds server is up or the cluster is laggy [ 948.961702][ T8082] libceph: connect (1)127.0.0.1:6789 error -22 [ 949.208194][T27220] ceph: No mds server is up or the cluster is laggy [ 949.538495][ T8082] libceph: mon0 (1)127.0.0.1:6789 connect error [ 949.554133][ T8082] libceph: connect (2)127.0.0.1:6789 error -22 [ 949.561012][ T8082] libceph: ceph_tcp_connect failed: -22 [ 949.566988][ T8082] libceph: mon0 (2)127.0.0.1:6789 connect error [ 949.574100][ T8082] libceph: connect (2)127.0.0.1:6789 error -22 [ 949.580653][ T8082] libceph: ceph_tcp_connect failed: -22 [ 949.586242][ T8082] libceph: mon0 (2)127.0.0.1:6789 connect error [ 949.750900][T27270] fuse: Bad value for 'fd' [ 950.947680][T27279] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 950.987000][T27279] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 951.013784][T27279] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 951.033154][T27279] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 951.073806][T27279] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 951.099449][T27279] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 951.124859][T27279] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 951.194015][T27282] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6389'. [ 952.097843][T27297] loop6: detected capacity change from 0 to 512 [ 952.136651][T27297] EXT4-fs: Ignoring removed i_version option [ 952.166630][T27297] EXT4-fs: Ignoring removed oldalloc option [ 952.214432][T27297] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 952.456935][T25343] EXT4-fs (loop6): unmounting filesystem. [ 952.627668][T27313] loop6: detected capacity change from 0 to 2048 [ 952.692670][T27313] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 954.844424][T27355] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 954.860055][T27355] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 954.921397][T27355] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 955.148272][T27355] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 955.500279][T27355] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 955.558999][T27355] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 955.716953][T27366] ieee802154 phy0 wpan0: encryption failed: -22 [ 964.047262][T27522] overlayfs: failed to clone upperpath [ 966.082340][ T26] kauditd_printk_skb: 27 callbacks suppressed [ 966.082355][ T26] audit: type=1326 audit(2000003436.618:1132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27555 comm="syz.1.6453" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba8dd9e0d9 code=0x7ffc0000 [ 966.222448][ T26] audit: type=1326 audit(2000003436.618:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27555 comm="syz.1.6453" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba8dd9e0d9 code=0x7ffc0000 [ 966.246862][ T26] audit: type=1326 audit(2000003436.648:1134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27555 comm="syz.1.6453" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba8dd9e0d9 code=0x7ffc0000 [ 966.313483][ T26] audit: type=1326 audit(2000003436.648:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27555 comm="syz.1.6453" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba8dd9e0d9 code=0x7ffc0000 [ 966.411458][ T26] audit: type=1326 audit(2000003436.648:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27555 comm="syz.1.6453" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fba8dd9e0d9 code=0x7ffc0000 [ 966.471232][ T26] audit: type=1326 audit(2000003436.648:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27555 comm="syz.1.6453" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba8dd9e0d9 code=0x7ffc0000 [ 966.627834][ T26] audit: type=1326 audit(2000003436.648:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27555 comm="syz.1.6453" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba8dd9e0d9 code=0x7ffc0000 [ 966.784288][T27579] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 967.274977][ T26] audit: type=1326 audit(2000003436.648:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27555 comm="syz.1.6453" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba8dd9e0d9 code=0x7ffc0000 [ 967.468311][ T26] audit: type=1326 audit(2000003436.648:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27555 comm="syz.1.6453" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba8dd9e0d9 code=0x7ffc0000 [ 967.518281][ T26] audit: type=1326 audit(2000003436.648:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27555 comm="syz.1.6453" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fba8dd9e0d9 code=0x7ffc0000 [ 968.039443][T27604] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6468'. [ 968.628556][T27616] ISOFS: Unable to identify CD-ROM format. [ 968.972383][T27607] device vlan3 left promiscuous mode [ 969.177179][T27607] device bond10 left promiscuous mode [ 969.906839][T27607] device bond12 left promiscuous mode [ 969.920957][T27607] device erspan1 left promiscuous mode [ 970.006475][T27627] Cannot find add_set index 0 as target [ 970.671007][T27607] device bond13 left promiscuous mode [ 971.528668][T27651] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6477'. [ 972.341633][T27674] SET target dimension over the limit! [ 973.110411][T27662] tipc: Enabled bearer , priority 0 [ 973.246838][T27680] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6482'. [ 974.381054][T27687] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6484'. [ 974.438520][ T4283] Bluetooth: hci2: command 0x0406 tx timeout [ 980.946679][ T26] kauditd_printk_skb: 47 callbacks suppressed [ 980.975117][ T26] audit: type=1326 audit(2000003451.480:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27784 comm="syz.7.6506" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f2659e0d9 code=0x7ffc0000 [ 981.042832][ T26] audit: type=1326 audit(2000003451.520:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27784 comm="syz.7.6506" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f2659e0d9 code=0x7ffc0000 [ 981.120710][ T26] audit: type=1326 audit(2000003451.520:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27784 comm="syz.7.6506" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f2659e0d9 code=0x7ffc0000 [ 981.228897][ T26] audit: type=1326 audit(2000003451.520:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27784 comm="syz.7.6506" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f2659e0d9 code=0x7ffc0000 [ 981.329016][ T26] audit: type=1326 audit(2000003451.520:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27784 comm="syz.7.6506" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f3f2659e0d9 code=0x7ffc0000 [ 981.419308][ T26] audit: type=1326 audit(2000003451.520:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27784 comm="syz.7.6506" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f2659e0d9 code=0x7ffc0000 [ 981.494661][ T26] audit: type=1326 audit(2000003451.520:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27784 comm="syz.7.6506" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f2659e0d9 code=0x7ffc0000 [ 982.165712][ T26] audit: type=1326 audit(2000003451.520:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27784 comm="syz.7.6506" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f2659e0d9 code=0x7ffc0000 [ 982.396683][ T26] audit: type=1326 audit(2000003451.530:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27784 comm="syz.7.6506" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f3f2659e0d9 code=0x7ffc0000 [ 982.496633][ T26] audit: type=1326 audit(2000003451.530:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27784 comm="syz.7.6506" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f2659e0d9 code=0x7ffc0000 [ 982.544341][T27810] loop6: detected capacity change from 0 to 512 [ 982.599092][T27810] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 982.701737][T27810] EXT4-fs error (device loop6): ext4_orphan_get:1405: inode #15: comm syz.6.6522: iget: bad i_size value: -6196953087261802486 [ 982.762342][T27810] EXT4-fs (loop6): Remounting filesystem read-only [ 982.810768][T27810] EXT4-fs error (device loop6): ext4_orphan_get:1410: comm syz.6.6522: couldn't read orphan inode 15 (err -117) [ 982.879538][T27810] EXT4-fs (loop6): Remounting filesystem read-only [ 982.886135][T27810] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 983.047629][T27810] EXT4-fs error (device loop6): ext4_find_dest_de:2115: inode #12: block 7: comm syz.6.6522: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4278190093, rec_len=255, size=56 fake=0 [ 983.124642][T27810] EXT4-fs (loop6): Remounting filesystem read-only [ 983.192221][T25343] EXT4-fs (loop6): unmounting filesystem. [ 983.261095][T27827] netlink: 'syz.1.6515': attribute type 1 has an invalid length. [ 983.364598][T27827] 8021q: adding VLAN 0 to HW filter on device bond7 [ 983.444879][T27827] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 983.456112][T27827] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 983.467559][T27827] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 983.476300][T27827] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 983.505839][T27827] bond7: (slave geneve2): making interface the new active one [ 983.526872][T27827] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 983.546001][T22405] IPv6: ADDRCONF(NETDEV_CHANGE): bond7: link becomes ready [ 990.844090][T27955] wlan0 speed is unknown, defaulting to 1000 [ 990.876954][T27646] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 991.167495][T27646] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 991.184222][T27646] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 991.194409][T27646] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 991.325758][T27646] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 991.334884][T27646] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 991.382740][T27646] usb 7-1: config 0 descriptor?? [ 991.612435][T27980] fuse: Bad value for 'fd' [ 992.610451][T27646] usbhid 7-1:0.0: can't add hid device: -71 [ 992.629941][T27646] usbhid: probe of 7-1:0.0 failed with error -71 [ 992.668600][T27646] usb 7-1: USB disconnect, device number 6 [ 992.758824][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.765219][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.778105][ T1280] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 993.352533][T28011] netlink: 'syz.2.6554': attribute type 1 has an invalid length. [ 994.453820][T28011] 8021q: adding VLAN 0 to HW filter on device bond18 [ 994.816285][T28051] netlink: 'syz.6.6561': attribute type 1 has an invalid length. [ 994.851084][T28051] device bond1 entered promiscuous mode [ 994.886609][T28051] 8021q: adding VLAN 0 to HW filter on device bond1 [ 994.960853][T28054] bond1: (slave erspan1): making interface the new active one [ 994.989607][T28054] device erspan1 entered promiscuous mode [ 995.036734][T28054] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 995.066445][T27675] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 996.329425][ T4283] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 996.826227][T28089] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 998.132707][T28108] futex_wake_op: syz.5.6574 tries to shift op by 144; fix this program [ 998.666303][T28117] netlink: 'syz.2.6576': attribute type 1 has an invalid length. [ 998.720934][T28117] device bond19 entered promiscuous mode [ 998.735215][T28117] 8021q: adding VLAN 0 to HW filter on device bond19 [ 998.768069][T28119] netlink: 'syz.6.6575': attribute type 1 has an invalid length. [ 998.805696][T28119] 8021q: adding VLAN 0 to HW filter on device bond2 [ 998.847828][T28123] bond19: (slave erspan1): making interface the new active one [ 998.878067][T28123] device erspan1 entered promiscuous mode [ 998.906555][T28123] bond19: (slave erspan1): Enslaving as an active interface with an up link [ 998.958487][T28127] bond2: (slave geneve2): making interface the new active one [ 999.004002][T28127] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 999.017065][T22346] IPv6: ADDRCONF(NETDEV_CHANGE): bond19: link becomes ready [ 999.029895][T22346] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 1003.100893][T28174] syz.6.6593 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1003.123110][T28174] CPU: 0 PID: 28174 Comm: syz.6.6593 Not tainted syzkaller #0 [ 1003.130636][T28174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1003.140801][T28174] Call Trace: [ 1003.144125][T28174] [ 1003.147182][T28174] dump_stack_lvl+0x188/0x24e [ 1003.151924][T28174] ? ___ratelimit+0x14e/0x610 [ 1003.156668][T28174] ? show_regs_print_info+0x12/0x12 [ 1003.161977][T28174] ? load_image+0x410/0x410 [ 1003.166524][T28174] ? ___ratelimit+0x474/0x610 [ 1003.171263][T28174] ? radix_tree_cpu_dead+0x160/0x160 [ 1003.176608][T28174] dump_header+0xd8/0x820 [ 1003.180991][T28174] oom_kill_process+0x361/0x550 [ 1003.185893][T28174] out_of_memory+0xe25/0x1220 [ 1003.190630][T28174] ? mutex_lock_nested+0x10/0x10 [ 1003.195630][T28174] ? unregister_oom_notifier+0x20/0x20 [ 1003.201160][T28174] mem_cgroup_out_of_memory+0x2c0/0x390 [ 1003.206777][T28174] ? mem_cgroup_oom_trylock+0x210/0x210 [ 1003.212384][T28174] ? do_raw_spin_unlock+0x11d/0x230 [ 1003.217634][T28174] try_charge_memcg+0xc9d/0x17c0 [ 1003.222715][T28174] ? percpu_ref_put+0x180/0x180 [ 1003.227600][T28174] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 1003.233362][T28174] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1003.239369][T28174] ? percpu_ref_tryget+0x15/0x180 [ 1003.244419][T28174] ? percpu_ref_tryget+0x15/0x180 [ 1003.249475][T28174] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 1003.255234][T28174] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 1003.260997][T28174] ? get_mem_cgroup_from_objcg+0x13c/0x150 [ 1003.266831][T28174] obj_cgroup_charge+0x36a/0x620 [ 1003.271793][T28174] ? obj_cgroup_charge+0xe9/0x620 [ 1003.276834][T28174] ? mod_objcg_mlstate+0x320/0x320 [ 1003.282085][T28174] ? percpu_ref_tryget+0x15/0x180 [ 1003.287138][T28174] ? percpu_ref_tryget+0x15/0x180 [ 1003.292204][T28174] ? get_obj_cgroup_from_current+0xd0/0x280 [ 1003.298154][T28174] slab_pre_alloc_hook+0x2e2/0x300 [ 1003.303301][T28174] ? __lock_acquire+0x7c40/0x7c40 [ 1003.308340][T28174] ? do_raw_spin_lock+0x128/0x2f0 [ 1003.313383][T28174] kmem_cache_alloc+0x56/0x2f0 [ 1003.318162][T28174] ? vm_area_alloc+0x20/0xe0 [ 1003.322775][T28174] vm_area_alloc+0x20/0xe0 [ 1003.327219][T28174] alloc_bprm+0x310/0x710 [ 1003.331583][T28174] do_execveat_common+0x18a/0x6b0 [ 1003.336634][T28174] __x64_sys_execve+0x8e/0xa0 [ 1003.341466][T28174] do_syscall_64+0x4c/0xa0 [ 1003.345927][T28174] ? clear_bhb_loop+0x60/0xb0 [ 1003.350628][T28174] ? clear_bhb_loop+0x60/0xb0 [ 1003.355330][T28174] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1003.361254][T28174] RIP: 0033:0x7f39ce39e0d9 [ 1003.365690][T28174] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1003.385313][T28174] RSP: 002b:00007f39cf1f8028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 1003.393778][T28174] RAX: ffffffffffffffda RBX: 00007f39ce625fa0 RCX: 00007f39ce39e0d9 [ 1003.401768][T28174] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000000c0 [ 1003.409749][T28174] RBP: 00007f39ce435024 R08: 0000000000000000 R09: 0000000000000000 [ 1003.417736][T28174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1003.425719][T28174] R13: 00007f39ce626038 R14: 00007f39ce625fa0 R15: 00007ffed6120248 [ 1003.433725][T28174] [ 1003.554489][T28174] memory: usage 8kB, limit 8kB, failcnt 21 [ 1003.560586][T28174] memory+swap: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 1003.577664][T28174] kmem: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 1003.593585][T28174] Memory cgroup stats for /syz6/test: [ 1003.595430][T28174] anon 0 [ 1003.595430][T28174] file 0 [ 1003.595430][T28174] kernel 8192 [ 1003.595430][T28174] kernel_stack 0 [ 1003.595430][T28174] pagetables 0 [ 1003.595430][T28174] sec_pagetables 0 [ 1003.595430][T28174] percpu 0 [ 1003.595430][T28174] sock 0 [ 1003.595430][T28174] vmalloc 0 [ 1003.595430][T28174] shmem 0 [ 1003.595430][T28174] zswap 0 [ 1003.595430][T28174] zswapped 0 [ 1003.595430][T28174] file_mapped 0 [ 1003.595430][T28174] file_dirty 0 [ 1003.595430][T28174] file_writeback 0 [ 1003.595430][T28174] swapcached 0 [ 1003.595430][T28174] anon_thp 0 [ 1003.595430][T28174] file_thp 0 [ 1003.595430][T28174] shmem_thp 0 [ 1003.595430][T28174] inactive_anon 0 [ 1003.595430][T28174] active_anon 0 [ 1003.595430][T28174] inactive_file 0 [ 1003.595430][T28174] active_file 0 [ 1003.595430][T28174] unevictable 0 [ 1003.595430][T28174] slab_reclaimable 384 [ 1003.595430][T28174] slab_unreclaimable 3552 [ 1003.595430][T28174] slab 3936 [ 1003.595430][T28174] workingset_refault_anon 0 [ 1003.794913][T28174] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz6/test,task_memcg=/syz6/test,task=syz.6.6593,pid=28173,uid=0 [ 1003.848199][T28174] Memory cgroup out of memory: Killed process 28173 (syz.6.6593) total-vm:102244kB, anon-rss:1408kB, file-rss:21704kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 1004.169229][T28189] smc: net device lo applied user defined pnetid SYZ0 [ 1004.620990][T28198] SET target dimension over the limit! [ 1005.203179][T28201] netlink: 'syz.5.6597': attribute type 1 has an invalid length. [ 1005.431345][T28201] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1008.463960][ T7] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1008.821273][ T7] usb 7-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=30.00 [ 1009.203007][ T7] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1010.532106][ T7] r8152-cfgselector 7-1: reset high-speed USB device number 7 using dummy_hcd [ 1010.733553][ T7] r8152-cfgselector 7-1: device descriptor read/64, error -32 [ 1011.014571][ T7] r8152-cfgselector 7-1: reset high-speed USB device number 7 using dummy_hcd [ 1011.250876][ T7] r8152-cfgselector 7-1: device descriptor read/64, error -32 [ 1011.554064][ T7] r8152-cfgselector 7-1: reset high-speed USB device number 7 using dummy_hcd [ 1011.616007][ T26] kauditd_printk_skb: 46 callbacks suppressed [ 1011.616036][ T26] audit: type=1326 audit(2000003482.163:1245): auid=4294967295 uid=1982771711 gid=0 ses=4294967295 subj=unconfined pid=28277 comm="syz.7.6622" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3f2659e0d9 code=0x0 [ 1011.653921][ T7] r8152-cfgselector 7-1: device descriptor read/8, error -32 [ 1011.924163][ T7] r8152-cfgselector 7-1: reset high-speed USB device number 7 using dummy_hcd [ 1011.975390][ T7] r8152-cfgselector 7-1: device descriptor read/8, error -32 [ 1012.119878][ T7] r8152 7-1:1.0: USB reset failed, errno=-19 [ 1012.120379][T28291] netlink: 'syz.2.6628': attribute type 4 has an invalid length. [ 1012.139912][ T7] r8152-cfgselector 7-1: Unknown version 0x0000 [ 1012.147578][T28301] netlink: 'syz.2.6628': attribute type 4 has an invalid length. [ 1012.194251][ T7] r8152-cfgselector 7-1: USB disconnect, device number 7 [ 1012.385442][ T7] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1012.553300][ T7] usb 7-1: device descriptor read/64, error -32 [ 1012.843291][ T7] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1013.005392][ T7] usb 7-1: device descriptor read/64, error -32 [ 1013.123982][ T7] usb usb7-port1: attempt power cycle [ 1015.628624][T28366] netlink: 'syz.2.6652': attribute type 1 has an invalid length. [ 1015.767753][T28366] bond20: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 1015.799848][T28380] futex_wake_op: syz.1.6654 tries to shift op by 144; fix this program [ 1015.921523][T28381] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6652'. [ 1016.806448][T28390] netlink: 1319 bytes leftover after parsing attributes in process `syz.2.6655'. [ 1017.334943][T28395] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1019.408939][T28428] loop6: detected capacity change from 0 to 512 [ 1019.476073][T28428] EXT4-fs error (device loop6): ext4_orphan_get:1405: inode #15: comm syz.6.6668: inode has both inline data and extents flags [ 1019.582966][T28428] EXT4-fs error (device loop6): ext4_orphan_get:1410: comm syz.6.6668: couldn't read orphan inode 15 (err -117) [ 1019.652627][T28428] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1019.698540][T28434] netlink: 'syz.5.6670': attribute type 12 has an invalid length. [ 1021.348051][T25343] EXT4-fs (loop6): unmounting filesystem. [ 1021.809758][T28452] futex_wake_op: syz.6.6672 tries to shift op by 144; fix this program [ 1023.641081][T28471] wlan0 speed is unknown, defaulting to 1000 [ 1023.647473][T28478] netlink: 'syz.5.6684': attribute type 4 has an invalid length. [ 1023.687654][T28478] netlink: 'syz.5.6684': attribute type 4 has an invalid length. [ 1023.918501][T28482] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[5082] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[28482] [ 1026.324135][T28509] futex_wake_op: syz.7.6690 tries to shift op by 144; fix this program [ 1029.435954][T28544] sch_tbf: burst 5 is lower than device syzkaller0 mtu (1514) ! [ 1029.453075][T28544] device syzkaller0 entered promiscuous mode [ 1033.208533][T28567] futex_wake_op: syz.2.6707 tries to shift op by 144; fix this program [ 1033.947799][T28589] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6718'. [ 1033.963146][T28589] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6718'. [ 1034.228612][T28589] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6718'. [ 1034.635291][T28591] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6718'. [ 1034.753807][T28589] netlink: 2 bytes leftover after parsing attributes in process `syz.2.6718'. [ 1034.764955][T28589] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6718'. [ 1037.656657][T28632] netlink: 'syz.7.6733': attribute type 12 has an invalid length. [ 1037.846393][T28641] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1037.855479][T28641] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 1037.863104][T28641] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 1037.873312][T28641] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 1037.881147][T28641] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 1037.888728][T28641] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 1037.896404][T28641] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 1037.905345][T28641] device bond0 left promiscuous mode [ 1037.910770][T28641] device bond_slave_0 left promiscuous mode [ 1037.916843][T28641] device bond_slave_1 left promiscuous mode [ 1037.923673][T28641] bridge0: port 6(bond0) entered disabled state [ 1037.944403][T28641] device team0 left promiscuous mode [ 1037.949764][T28641] device team_slave_1 left promiscuous mode [ 1037.955962][T28641] device bridge1 left promiscuous mode [ 1037.961880][T28641] bridge0: port 4(team0) entered disabled state [ 1037.982102][T28641] device bridge_slave_0 left promiscuous mode [ 1037.988410][T28641] bridge0: port 1(bridge_slave_0) entered disabled state [ 1037.997427][T28641] device bridge_slave_1 left promiscuous mode [ 1038.003783][T28641] bridge0: port 2(bridge_slave_1) entered disabled state [ 1038.026168][T28641] bond0: (slave bond_slave_0): Releasing backup interface [ 1038.040309][T28641] bond0: (slave bond_slave_1): Releasing backup interface [ 1038.058933][T28641] team0: Port device team_slave_1 removed [ 1038.080616][T28641] team0: Port device bridge1 removed [ 1038.087081][T28641] bond1: (slave gre3): Releasing backup interface [ 1038.095789][T28641] bond2: (slave bridge4): Releasing backup interface [ 1038.104901][T28641] bond5: (slave bond6): Releasing backup interface [ 1038.113786][T28641] bond9: (slave ip6gretap1): Releasing backup interface [ 1038.133431][T28641] bond10: (slave veth9): Releasing active interface [ 1038.155310][T28641] bond11: (slave geneve2): Releasing active interface [ 1038.183491][T28641] bond12: (slave ip6gretap2): Releasing active interface [ 1038.226313][T28641] bond13: (slave geneve3): Releasing active interface [ 1038.263403][T28641] bond14: (slave geneve4): Releasing active interface [ 1038.273751][T28641] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1038.283338][T28641] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1038.292387][T28641] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1038.301379][T28641] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1038.348827][T28643] team0: Mode changed to "loadbalance" [ 1038.573400][T28652] wlan0 speed is unknown, defaulting to 1000 [ 1042.421474][T28736] loop6: detected capacity change from 0 to 1024 [ 1042.465403][T28736] EXT4-fs (loop6): The Hurd can't support 64-bit file systems [ 1042.551181][ T26] audit: type=1326 audit(2000003513.107:1246): auid=4294967295 uid=1982771711 gid=0 ses=4294967295 subj=unconfined pid=28735 comm="syz.6.6759" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f39ce39e0d9 code=0x0 [ 1044.813736][T28780] overlayfs: failed to clone upperpath [ 1046.246367][T28792] overlayfs: failed to clone upperpath [ 1047.829184][T28812] futex_wake_op: syz.5.6780 tries to shift op by 144; fix this program [ 1048.954394][T28823] loop6: detected capacity change from 0 to 512 [ 1048.990501][T28823] EXT4-fs: Ignoring removed oldalloc option [ 1049.055343][T28823] EXT4-fs (loop6): 1 truncate cleaned up [ 1049.061505][T28823] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1049.126083][T28825] wlan0 speed is unknown, defaulting to 1000 [ 1049.136568][T28823] tipc: Started in network mode [ 1049.143089][T28823] tipc: Node identity 2007ff, cluster identity 4711 [ 1049.149844][T28823] tipc: Node number set to 2099199 [ 1049.294850][T25343] EXT4-fs (loop6): unmounting filesystem. [ 1052.868430][T28866] loop6: detected capacity change from 0 to 256 [ 1054.191805][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.198216][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.277228][ T1280] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 1057.279873][T28913] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6813'. [ 1057.379967][T28918] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 1057.399154][T28913] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6813'. [ 1057.430699][T28913] device bond3 entered promiscuous mode [ 1057.436448][T28913] device bridge1 entered promiscuous mode [ 1057.445804][T28913] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1057.456412][T21379] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 1058.677084][T28956] 9pnet_fd: p9_fd_create_unix (28956): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1059.044274][T28966] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6823'. [ 1059.201759][T28966] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6823'. [ 1059.307266][T28966] netdevsim netdevsim8 eth21: set [0, 0] type 1 family 0 port 8472 - 0 [ 1059.316075][T28966] netdevsim netdevsim8 eth22: set [0, 0] type 1 family 0 port 8472 - 0 [ 1059.324542][T28966] netdevsim netdevsim8 eth23: set [0, 0] type 1 family 0 port 8472 - 0 [ 1059.333012][T28966] netdevsim netdevsim8 eth24: set [0, 0] type 1 family 0 port 8472 - 0 [ 1059.341404][T28966] netdevsim netdevsim9 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1059.349701][T28966] netdevsim netdevsim9 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1059.357901][T28966] netdevsim netdevsim9 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1059.366302][T28966] netdevsim netdevsim9 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 1059.374640][T28966] netdevsim netdevsim3 eth5: set [0, 0] type 1 family 0 port 8472 - 0 [ 1059.382943][T28966] netdevsim netdevsim3 eth6: set [0, 0] type 1 family 0 port 8472 - 0 [ 1059.391848][T28966] netdevsim netdevsim3 eth7: set [0, 0] type 1 family 0 port 8472 - 0 [ 1059.400167][T28966] netdevsim netdevsim3 eth8: set [0, 0] type 1 family 0 port 8472 - 0 [ 1059.408452][T28966] netdevsim netdevsim0 eth9: set [0, 0] type 1 family 0 port 8472 - 0 [ 1059.416658][T28966] netdevsim netdevsim0 eth10: set [0, 0] type 1 family 0 port 8472 - 0 [ 1059.425010][T28966] netdevsim netdevsim0 eth11: set [0, 0] type 1 family 0 port 8472 - 0 [ 1059.433386][T28966] netdevsim netdevsim0 eth12: set [0, 0] type 1 family 0 port 8472 - 0 [ 1060.660144][T28966] IPv6: ADDRCONF(NETDEV_CHANGE): vxlan0: link becomes ready [ 1060.675133][T28966] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6823'. [ 1060.779000][T28966] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6823'. [ 1061.407991][T26542] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1061.598029][T26542] usb 7-1: Using ep0 maxpacket: 16 [ 1061.608759][T26542] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1061.631198][T26542] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 8 [ 1061.674150][T26542] usb 7-1: New USB device found, idVendor=0582, idProduct=0060, bcdDevice= 0.40 [ 1061.704282][T26542] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1061.734727][T26542] usb 7-1: Product: syz [ 1061.748284][T26542] usb 7-1: Manufacturer: syz [ 1061.760057][T26542] usb 7-1: SerialNumber: syz [ 1061.794946][T28974] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1062.131506][T26542] usb 7-1: USB disconnect, device number 11 [ 1062.489893][T29002] udevd[29002]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1063.642700][T29018] smc: net device lo applied user defined pnetid SYZ0 [ 1069.343822][T29069] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1069.352569][T29069] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 1069.360069][T29069] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 1069.367387][T29069] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 1069.374985][T29069] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 1069.382596][T29069] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 1069.390177][T29069] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 1069.414923][T29073] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1069.449593][T29073] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1069.469398][T29073] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1069.517489][T29073] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1069.599210][T29073] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1069.649392][T29073] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1069.701564][T29073] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1069.750522][T29073] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1069.787523][T29073] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1069.824148][T29073] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1070.523482][T29089] device vlan6 entered promiscuous mode [ 1070.543253][T29089] device vlan5 entered promiscuous mode [ 1070.560755][T29089] device erspan0 entered promiscuous mode [ 1076.327532][T29118] overlayfs: failed to clone upperpath [ 1079.056454][T29165] loop6: detected capacity change from 0 to 1024 [ 1079.157865][T29165] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1079.186349][T29165] ext4 filesystem being mounted at /147/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1080.561779][T25343] EXT4-fs (loop6): unmounting filesystem. [ 1081.090345][T29207] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1081.804945][T29211] loop6: detected capacity change from 0 to 2048 [ 1081.927617][T29211] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1082.122208][T29211] EXT4-fs warning (device loop6): dx_probe:833: inode #2: comm syz.6.6890: Unrecognised inode hash code 20 [ 1082.144176][T29211] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.6890: Corrupt directory, running e2fsck is recommended [ 1082.178758][T29155] udevd[29155]: incorrect ext4 checksum on /dev/loop6 [ 1082.239137][T25343] EXT4-fs (loop6): unmounting filesystem. [ 1082.264061][T29155] udevd[29155]: incorrect ext4 checksum on /dev/loop6 [ 1082.333314][T29223] sch_tbf: burst 5 is lower than device syzkaller0 mtu (1514) ! [ 1082.418161][T29225] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6892'. [ 1082.429995][T29225] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6892'. [ 1082.448990][T29225] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6892'. [ 1082.464614][T29225] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6892'. [ 1088.260902][T29328] loop6: detected capacity change from 0 to 520 [ 1088.273264][T29325] tipc: Enabled bearer , priority 0 [ 1088.367642][T29328] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 1088.435271][T29328] EXT4-fs (loop6): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 1088.469333][T29334] device team0 entered promiscuous mode [ 1088.490769][T29334] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1088.543593][T29328] EXT4-fs error (device loop6): __ext4_fill_super:5465: inode #2: comm syz.6.6922: iget: special inode unallocated [ 1088.566241][T29334] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 1088.668892][T29339] bridge0: port 1(vlan1) entered blocking state [ 1088.873196][T29328] EXT4-fs (loop6): get root inode failed [ 1088.903708][T29328] EXT4-fs (loop6): mount failed [ 1088.911129][T29339] bridge0: port 1(vlan1) entered disabled state [ 1088.939866][T29344] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1089.221566][T29327] wlan0 speed is unknown, defaulting to 1000 [ 1091.612798][T29389] MPTCP: kernel_bind error, err=-99 [ 1093.562869][T29410] device syzkaller0 entered promiscuous mode [ 1097.435555][T29451] batman_adv: batadv0: Adding interface: veth0 [ 1097.441860][T29451] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1097.467511][T29451] batman_adv: batadv0: Interface activated: veth0 [ 1101.330058][T29544] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1104.019355][T29603] input: syz0 as /devices/virtual/input/input7 [ 1105.927693][T29650] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1108.839436][T29686] fuse: Bad value for 'fd' [ 1109.115282][T29690] bridge0: port 1(vxlan0) entered blocking state [ 1109.130450][T29690] bridge0: port 1(vxlan0) entered disabled state [ 1109.145333][T29690] device vxlan0 entered promiscuous mode [ 1109.270564][T29695] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1109.290064][T29695] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 1109.309979][T29695] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 1109.362028][T29695] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 1109.375896][T29695] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 1109.387991][T29695] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 1109.400673][T29695] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 1109.517484][T29696] sctp_transport_update_pmtu: 38 callbacks suppressed [ 1109.517515][T29696] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1109.536442][T29696] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1109.549506][T29696] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1109.559684][T29696] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1109.577145][T29696] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1109.588410][T29696] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1109.599429][T29696] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1109.610399][T29696] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1109.621394][T29696] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1109.632931][T29696] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1110.255763][T29705] device team0 entered promiscuous mode [ 1110.281679][T29705] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1110.326263][T29705] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 1110.542982][T27646] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1110.610049][T29708] bridge0: port 1(vlan7) entered blocking state [ 1110.616663][T29708] bridge0: port 1(vlan7) entered disabled state [ 1110.624134][T29708] device vlan7 entered promiscuous mode [ 1110.629764][T29708] device bond0 entered promiscuous mode [ 1110.638159][T29708] device macvlan2 entered promiscuous mode [ 1110.645546][T29715] gre0: Caught tx_queue_len zero misconfig [ 1111.979061][T29725] netlink: 'syz.7.7024': attribute type 49 has an invalid length. [ 1112.436232][T29725] device veth0_to_bond entered promiscuous mode [ 1112.694893][T27646] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1112.730435][T27646] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1112.750441][T27646] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1112.773487][T27646] usb 7-1: config 0 descriptor?? [ 1112.782214][T27646] pwc: Askey VC010 type 2 USB webcam detected. [ 1113.792866][T27646] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1113.832402][T27646] pwc: recv_control_msg error -32 req 02 val 2700 [ 1113.844815][T27646] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1113.872396][T27646] pwc: recv_control_msg error -32 req 04 val 1000 [ 1113.883152][T27646] pwc: recv_control_msg error -32 req 04 val 1300 [ 1113.900471][T27646] pwc: recv_control_msg error -32 req 04 val 1400 [ 1113.909860][T27646] pwc: recv_control_msg error -32 req 02 val 2000 [ 1113.920865][T27646] pwc: recv_control_msg error -32 req 02 val 2100 [ 1113.928690][T27646] pwc: recv_control_msg error -32 req 04 val 1500 [ 1114.171044][T27646] pwc: recv_control_msg error -71 req 02 val 2400 [ 1114.192662][T27646] pwc: recv_control_msg error -71 req 02 val 2600 [ 1114.199644][T27646] pwc: recv_control_msg error -71 req 02 val 2900 [ 1114.210416][T27646] pwc: recv_control_msg error -71 req 02 val 2800 [ 1114.233855][T27646] pwc: recv_control_msg error -71 req 04 val 1100 [ 1114.242833][T27646] pwc: recv_control_msg error -71 req 04 val 1200 [ 1114.932045][T29758] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1114.944404][T29758] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 1114.977873][T27646] pwc: Registered as video103. [ 1114.996948][T27646] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input8 [ 1115.012744][T29758] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 1115.074130][T29758] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 1115.100300][T29758] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 1115.123533][T27646] usb 7-1: USB disconnect, device number 12 [ 1115.146124][T29758] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 1115.206864][T29758] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 1115.639260][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.646663][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.659642][ T1280] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 1117.203789][ T4283] Bluetooth: hci4: Invalid handle: 0x20c9 > 0x0eff [ 1118.535168][ T26] audit: type=1326 audit(2000003589.095:1247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29817 comm="syz.1.7045" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba8dd9e0d9 code=0x7ffc0000 [ 1118.602042][ T26] audit: type=1326 audit(2000003589.115:1248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29817 comm="syz.1.7045" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba8dd9e0d9 code=0x7ffc0000 [ 1118.875484][ T26] audit: type=1326 audit(2000003589.125:1249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29817 comm="syz.1.7045" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=204 compat=0 ip=0x7fba8dd9e0d9 code=0x7ffc0000 [ 1119.470745][ T26] audit: type=1326 audit(2000003589.125:1250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29817 comm="syz.1.7045" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba8dd9e0d9 code=0x7ffc0000 [ 1119.664569][ T26] audit: type=1326 audit(2000003589.125:1251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29817 comm="syz.1.7045" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba8dd9e0d9 code=0x7ffc0000 [ 1120.708031][T29841] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1123.339601][T29874] device team0 entered promiscuous mode [ 1123.392718][T29874] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 1123.489378][T29879] bridge0: port 1(vlan4) entered blocking state [ 1123.537507][T29879] bridge0: port 1(vlan4) entered disabled state [ 1123.598364][T29879] device vlan4 entered promiscuous mode [ 1123.622895][T29879] device bond0 entered promiscuous mode [ 1123.652496][T29879] device macvlan2 entered promiscuous mode [ 1126.868312][T29950] bridge0: port 2(vlan1) entered blocking state [ 1126.904525][T29950] bridge0: port 2(vlan1) entered disabled state [ 1126.932417][T29950] device vlan1 entered promiscuous mode [ 1126.943784][T29950] device bond0 entered promiscuous mode [ 1127.909187][T29965] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7078'. [ 1131.463600][T30031] loop6: detected capacity change from 0 to 128 [ 1131.535731][T30031] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 1131.581301][T30034] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7097'. [ 1131.756990][T30031] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1131.810238][T30031] ext2 filesystem being mounted at /180/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1132.038988][T30038] bond21: (slave veth11): Enslaving as an active interface with an up link [ 1132.987419][T30043] wlan0 speed is unknown, defaulting to 1000 [ 1133.775625][T25343] EXT4-fs (loop6): unmounting filesystem. [ 1134.917552][T30085] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7110'. [ 1135.032100][T30085] device bond22 entered promiscuous mode [ 1135.956409][T30101] wlan0 speed is unknown, defaulting to 1000 [ 1138.960509][T30137] loop6: detected capacity change from 0 to 512 [ 1139.059814][T30137] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1139.068961][T30137] ext4 filesystem being mounted at /185/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1139.245757][T25343] EXT4-fs (loop6): unmounting filesystem. [ 1141.900142][T30189] MPTCP: kernel_bind error, err=-99 [ 1143.026812][T30204] gre0: MTU too low for tipc bearer [ 1143.043853][T21090] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 1143.053168][T30204] tipc: Enabling of bearer rejected, failed to enable media [ 1143.720628][T30230] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1145.598261][T30243] loop6: detected capacity change from 0 to 32768 [ 1145.823765][T30260] device team0 entered promiscuous mode [ 1145.899213][T30260] device team_slave_1 entered promiscuous mode [ 1145.937013][T30260] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1145.975899][T30260] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 1146.046993][T30264] bridge0: port 3(vlan3) entered blocking state [ 1146.066646][T30264] bridge0: port 3(vlan3) entered disabled state [ 1146.087349][T30264] device vlan3 entered promiscuous mode [ 1146.106114][T30264] device bond0 entered promiscuous mode [ 1146.129699][T30264] device bond_slave_0 entered promiscuous mode [ 1146.150898][T30264] device bond_slave_1 entered promiscuous mode [ 1146.157403][T30264] device macvlan2 entered promiscuous mode [ 1146.171933][T30272] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7160'. [ 1146.189817][T30272] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1146.198901][T30272] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1146.207687][T30272] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1146.216560][T30272] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1146.255134][T30274] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7160'. [ 1146.265249][T30274] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7160'. [ 1146.335675][T30277] netlink: 'syz.5.7162': attribute type 49 has an invalid length. [ 1146.513966][T30283] loop6: detected capacity change from 0 to 736 [ 1146.676746][T30283] rock: directory entry would overflow storage [ 1146.690741][T30283] rock: sig=0x3b10, size=4, remaining=3 [ 1148.315052][T30327] bridge0: port 1(macvlan1) entered blocking state [ 1148.322446][T30327] bridge0: port 1(macvlan1) entered disabled state [ 1148.331665][T30327] device gretap0 entered promiscuous mode [ 1148.342505][T30327] bridge0: port 1(macvlan1) entered blocking state [ 1148.349187][T30327] bridge0: port 1(macvlan1) entered forwarding state [ 1150.654460][T30360] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1150.916126][T30367] loop6: detected capacity change from 0 to 512 [ 1150.929848][T30367] EXT4-fs: Ignoring removed bh option [ 1151.702551][T30367] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 1151.761058][T30367] EXT4-fs (loop6): 1 truncate cleaned up [ 1151.788520][T30367] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1153.029061][T25343] EXT4-fs (loop6): unmounting filesystem. [ 1154.565548][T30407] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7205'. [ 1154.806593][T30407] bond8: (slave veth9): Enslaving as an active interface with an up link [ 1157.561067][T30460] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7221'. [ 1157.632494][T30460] bond15: (slave veth13): Enslaving as an active interface with an up link [ 1157.674968][T30458] device syzkaller0 entered promiscuous mode [ 1157.681915][T30463] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7220'. [ 1161.988682][T30463] device bond23 entered promiscuous mode [ 1162.179030][T30504] netlink: 'syz.6.7235': attribute type 11 has an invalid length. [ 1162.200799][T30504] netlink: 36 bytes leftover after parsing attributes in process `syz.6.7235'. [ 1164.210040][T30531] sctp: [Deprecated]: syz.7.7242 (pid 30531) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1164.210040][T30531] Use struct sctp_sack_info instead [ 1165.574437][T30545] loop6: detected capacity change from 0 to 256 [ 1165.611936][T30545] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 1166.495181][T30549] sock: sock_set_timeout: `syz.1.7251' (pid 30549) tries to set negative timeout [ 1167.654171][T30569] device syzkaller0 entered promiscuous mode [ 1167.770897][T30576] netlink: 'syz.2.7259': attribute type 1 has an invalid length. [ 1167.972956][T30576] 8021q: adding VLAN 0 to HW filter on device bond24 [ 1169.075049][T30608] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7267'. [ 1170.300465][T30614] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7268'. [ 1173.212813][T30637] loop6: detected capacity change from 0 to 4096 [ 1173.408223][ T26] audit: type=1800 audit(2000003643.971:1252): pid=30637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.7274" name="file1" dev="loop6" ino=33 res=0 errno=0 [ 1174.661517][T30672] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[7044] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[30672] [ 1176.428355][T30690] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1177.306128][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.312496][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.339432][ T1280] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 1180.808106][T30722] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7303'. [ 1180.835471][ T8081] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1181.125373][ T8081] usb 7-1: Using ep0 maxpacket: 32 [ 1181.141539][ T8081] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1181.173002][ T8081] usb 7-1: config 254 has an invalid interface number: 103 but max is 0 [ 1181.193805][ T8081] usb 7-1: config 254 has an invalid descriptor of length 0, skipping remainder of the config [ 1181.219021][ T8081] usb 7-1: config 254 has no interface number 0 [ 1181.338646][ T8081] usb 7-1: config 254 interface 103 has no altsetting 0 [ 1181.506755][ T8081] usb 7-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=64.5b [ 1181.621806][ T8081] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1181.845172][ T8081] usb 7-1: Product: syz [ 1181.849777][ T8081] usb 7-1: Manufacturer: syz [ 1181.854793][ T8081] usb 7-1: SerialNumber: syz [ 1182.090746][ T8081] usbserial_generic 7-1:254.103: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 1182.114076][ T8081] usbserial_generic 7-1:254.103: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 1182.143647][ T8081] usbserial_generic 7-1:254.103: device has no bulk endpoints [ 1182.180003][ T8081] usb 7-1: USB disconnect, device number 13 [ 1182.672015][T30736] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1183.387213][T30733] netlink: 'syz.7.7305': attribute type 1 has an invalid length. [ 1183.480109][T30751] CIFS: Attempting to mount \\127.0.0.1\share [ 1183.487920][T30751] CIFS: VFS: No username specified [ 1183.684182][T30756] loop6: detected capacity change from 0 to 4096 [ 1184.024542][T30756] NILFS error (device loop6): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 1184.035285][T30772] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1184.109598][T30756] Remounting filesystem read-only [ 1184.959365][T30779] NILFS error (device loop6): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 1184.969773][T30779] NILFS error (device loop6): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 1184.979661][T30779] NILFS error (device loop6): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 1185.004855][ T26] audit: type=1800 audit(2000003655.562:1253): pid=30779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.7313" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 1185.190255][T30785] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1185.432489][T30790] xt_CONNSECMARK: invalid mode: 0 [ 1187.549593][T30820] batman_adv: batadv0: Interface deactivated: veth0 [ 1187.566851][T30820] batman_adv: batadv0: Removing interface: veth0 [ 1188.396972][T30829] bond17: (slave veth0_to_bond): Releasing active interface [ 1188.832682][T30829] team0: Port device xfrm0 removed [ 1189.002750][T30829] bond7: (slave gretap2): Releasing active interface [ 1189.129296][T30829] bond9: (slave geneve2): Releasing active interface [ 1189.231760][T30829] bond11: (slave macvlan2): Releasing backup interface [ 1189.292129][T30829] bond12: (slave bond13): Releasing backup interface [ 1189.335612][T30829] bond14: (slave bridge4): Releasing backup interface [ 1189.357349][T30829] bond16: (slave bridge8): Releasing backup interface [ 1189.396496][T30829] bond19: (slave erspan1): Releasing active interface [ 1189.413631][T30829] device erspan1 left promiscuous mode [ 1189.448007][T30829] bond20: (slave ip6gretap1): Releasing backup interface [ 1189.487078][T30829] device vxlan0 left promiscuous mode [ 1189.492643][T30829] bridge0: port 1(vxlan0) entered disabled state [ 1189.516254][T30829] device vlan1 left promiscuous mode [ 1189.521598][T30829] device bond0 left promiscuous mode [ 1189.534738][T30829] bridge0: port 2(vlan1) entered disabled state [ 1189.543694][T30829] bond21: (slave veth11): Releasing backup interface [ 1189.580284][T30834] team0: Mode changed to "activebackup" [ 1189.668903][T30857] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7334'. [ 1189.734165][T30859] device bond9 entered promiscuous mode [ 1191.993978][T30884] netlink: 'syz.2.7341': attribute type 1 has an invalid length. [ 1192.475724][T30893] netlink: 'syz.6.7348': attribute type 1 has an invalid length. [ 1193.041751][T30880] sock: sock_set_timeout: `syz.5.7339' (pid 30880) tries to set negative timeout [ 1193.132285][T30896] device bond4 entered promiscuous mode [ 1193.156533][T30896] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1193.232655][T30899] wlan0 speed is unknown, defaulting to 1000 [ 1193.256569][T30898] device bridge2 entered promiscuous mode [ 1193.262908][T30898] bond4: (slave bridge2): Enslaving as a backup interface with an up link [ 1193.335122][T22406] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1193.353771][T30893] device bridge3 entered promiscuous mode [ 1193.369303][T30893] bond4: (slave bridge3): Enslaving as a backup interface with a down link [ 1193.417992][T22405] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready [ 1193.486209][ T8989] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1196.942843][T30965] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7361'. [ 1196.978562][T30965] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1198.101739][T30987] netlink: 'syz.1.7367': attribute type 8 has an invalid length. [ 1198.304893][T30991] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7369'. [ 1200.610201][T31024] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7379'. [ 1200.726493][T31029] netlink: 'syz.1.7380': attribute type 1 has an invalid length. [ 1201.379299][T31029] device bond10 entered promiscuous mode [ 1201.421148][T31029] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1201.532811][T31029] bond10: (slave bridge2): making interface the new active one [ 1201.565391][T31029] device bridge2 entered promiscuous mode [ 1201.577881][T31029] bond10: (slave bridge2): Enslaving as an active interface with an up link [ 1201.623458][ T9497] IPv6: ADDRCONF(NETDEV_CHANGE): bond10: link becomes ready [ 1201.905411][ T26] audit: type=1800 audit(2000003672.474:1254): pid=31055 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.7386" name="addr_trtype" dev="configfs" ino=116159 res=0 errno=0 [ 1201.951595][T31055] nvmet_rdma: enabling port 1 (127.0.0.1:44) [ 1201.961921][ T26] audit: type=1800 audit(2000003672.504:1255): pid=31055 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.7386" name="addr_adrfam" dev="configfs" ino=116160 res=0 errno=0 [ 1202.041356][ T26] audit: type=1800 audit(2000003672.504:1256): pid=31055 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.7386" name="addr_traddr" dev="configfs" ino=116161 res=0 errno=0 [ 1202.119295][ T26] audit: type=1800 audit(2000003672.504:1257): pid=31055 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.7386" name="addr_trsvcid" dev="configfs" ino=116162 res=0 errno=0 [ 1204.831314][T31079] netlink: 'syz.7.7392': attribute type 1 has an invalid length. [ 1205.563800][T31079] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1205.873156][T31085] device gretap1 entered promiscuous mode [ 1205.912874][T31085] bond16: (slave gretap1): making interface the new active one [ 1205.946115][T31085] bond16: (slave gretap1): Enslaving as an active interface with an up link [ 1205.976704][ T8965] IPv6: ADDRCONF(NETDEV_CHANGE): bond16: link becomes ready [ 1208.680561][T31108] netlink: 'syz.1.7404': attribute type 1 has an invalid length. [ 1209.358294][T31108] bond11: (slave veth11): Enslaving as an active interface with a down link [ 1209.369426][T31112] bond2: (slave veth0_to_bond): Releasing active interface [ 1209.470994][T31112] bond11: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1210.989387][T31135] sch_tbf: burst 255 is lower than device syzkaller0 mtu (65589) ! [ 1214.493092][T31180] netlink: 14 bytes leftover after parsing attributes in process `syz.7.7419'. [ 1214.793101][T31189] device syzkaller0 entered promiscuous mode [ 1214.870133][T31196] netlink: 'syz.1.7425': attribute type 1 has an invalid length. [ 1217.512179][T31199] device bond12 entered promiscuous mode [ 1217.528524][T31199] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1218.278838][T31196] device bridge3 entered promiscuous mode [ 1218.294939][T21084] bond12: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1218.307637][T31196] bond12: (slave bridge3): Enslaving as an active interface with an up link [ 1218.329476][T31206] device bridge4 entered promiscuous mode [ 1218.346156][T31206] bond12: (slave bridge4): Enslaving as a backup interface with a down link [ 1218.369960][ T8965] IPv6: ADDRCONF(NETDEV_CHANGE): bond12: link becomes ready [ 1218.462360][ T8993] bond12: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1218.624541][T31230] exfat: Deprecated parameter 'debug' [ 1218.640327][T31230] /dev/loop5: Can't open blockdev [ 1218.815463][T31238] xt_TCPMSS: Only works on TCP SYN packets [ 1219.014343][T31245] loop6: detected capacity change from 0 to 128 [ 1219.074257][T31245] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1219.131990][T31245] ext4 filesystem being mounted at /238/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1220.277454][T31245] fscrypt: Adiantum using implementation "adiantum(xchacha12-simd,aes-aesni,nhpoly1305-avx2)" [ 1220.346199][T31271] netlink: 'syz.7.7446': attribute type 1 has an invalid length. [ 1220.428023][T25343] EXT4-fs (loop6): unmounting filesystem. [ 1220.503838][T31273] device bond17 entered promiscuous mode [ 1220.512025][T31273] 8021q: adding VLAN 0 to HW filter on device bond17 [ 1220.592781][T31277] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1221.349147][T31274] device bridge10 entered promiscuous mode [ 1221.359633][T21084] bond17: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1221.409876][T31274] bond17: (slave bridge10): Enslaving as an active interface with an up link [ 1221.671271][ T8998] IPv6: ADDRCONF(NETDEV_CHANGE): bond17: link becomes ready [ 1221.729690][T31271] device bridge11 entered promiscuous mode [ 1221.744523][T31271] bond17: (slave bridge11): Enslaving as a backup interface with a down link [ 1222.300859][T21084] bond17: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1223.719903][T31306] netlink: 'syz.5.7459': attribute type 1 has an invalid length. [ 1223.895436][T31306] bond16: (slave veth19): Enslaving as an active interface with a down link [ 1223.961461][T31310] bond13: (slave veth0_to_bond): Releasing active interface [ 1223.970663][T31299] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 1224.015129][T31310] bond16: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1226.071656][T31321] device syzkaller0 entered promiscuous mode [ 1228.591963][T31354] netlink: 'syz.6.7473': attribute type 1 has an invalid length. [ 1228.812823][T31358] bond5: (slave veth7): Enslaving as an active interface with a down link [ 1228.908809][T31353] bond5: (slave veth0_to_bond): making interface the new active one [ 1228.955213][T31353] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1230.275956][T31388] xt_TCPMSS: Only works on TCP SYN packets [ 1233.807358][T31413] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7490'. [ 1235.058966][T31428] kvm: pic: level sensitive irq not supported [ 1235.059109][T31428] kvm: pic: level sensitive irq not supported [ 1235.145291][T31437] netlink: 'syz.2.7493': attribute type 1 has an invalid length. [ 1236.331125][T31440] bond25: (slave veth13): Enslaving as an active interface with a down link [ 1236.358355][T31446] bond25: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1238.126029][T31450] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1238.149436][T31450] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 1238.158850][T31450] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 1238.192507][T31450] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 1238.205731][T31450] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 1238.214498][T31450] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 1238.226812][T31450] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 1238.297957][T31450] bond0: (slave macvlan2): Releasing backup interface [ 1238.312892][T31450] device macvlan2 left promiscuous mode [ 1238.323066][T31450] device team0 left promiscuous mode [ 1238.339084][T31450] device vlan4 left promiscuous mode [ 1238.352705][T31450] device bond0 left promiscuous mode [ 1238.358339][T31450] bridge0: port 1(vlan4) entered disabled state [ 1238.370311][T31450] bond15: (slave veth13): Releasing backup interface [ 1238.391581][T31450] bond16: (slave gretap1): Releasing active interface [ 1238.412972][T31450] bond17: (slave bridge10): Removing an active aggregator [ 1238.420783][T31450] bond17: (slave bridge10): Releasing backup interface [ 1238.427676][T31450] bond17: (slave bridge10): the permanent HWaddr of slave - 86:17:90:e9:15:02 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1238.447140][T31450] device bridge10 left promiscuous mode [ 1238.466234][T31450] bond17: (slave bridge11): Releasing backup interface [ 1238.475639][T31450] device bridge11 left promiscuous mode [ 1238.493065][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.499564][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.508179][ T1280] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 1238.524161][T31456] tipc: Enabled bearer , priority 0 [ 1239.281053][T31495] xt_CONNSECMARK: invalid mode: 0 [ 1239.413730][T31499] netlink: 'syz.2.7507': attribute type 1 has an invalid length. [ 1239.478415][T31499] device bond26 entered promiscuous mode [ 1239.725171][T31499] 8021q: adding VLAN 0 to HW filter on device bond26 [ 1240.498189][T31499] bond26: (slave bridge10): making interface the new active one [ 1240.524987][T31499] device bridge10 entered promiscuous mode [ 1240.552976][T31499] bond26: (slave bridge10): Enslaving as an active interface with an up link [ 1240.562510][T20744] IPv6: ADDRCONF(NETDEV_CHANGE): bond26: link becomes ready [ 1240.614088][T31514] device syzkaller0 entered promiscuous mode [ 1243.078942][T31535] netem: change failed [ 1243.147875][T31537] netlink: 'syz.7.7519': attribute type 1 has an invalid length. [ 1243.241737][T31543] bond18: (slave veth17): Enslaving as an active interface with a down link [ 1244.461760][T31559] netlink: 'syz.6.7536': attribute type 1 has an invalid length. [ 1244.993674][T31559] bond6: (slave veth9): Enslaving as an active interface with a down link [ 1245.028882][T31559] bond5: (slave veth0_to_bond): Releasing active interface [ 1245.047632][T31559] bond6: (slave veth0_to_bond): making interface the new active one [ 1245.246056][T31559] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1245.985197][T31576] netlink: 188 bytes leftover after parsing attributes in process `syz.5.7531'. [ 1246.110234][T31581] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000 [ 1246.960753][ T26] audit: type=1326 audit(2000003717.528:1258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31589 comm="syz.5.7547" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f040fd9e0d9 code=0x7ffc0000 [ 1246.998968][T31593] syz.5.7547 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1247.034326][ T26] audit: type=1326 audit(2000003717.568:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31589 comm="syz.5.7547" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f040fd9e0d9 code=0x7ffc0000 [ 1247.095558][ T26] audit: type=1326 audit(2000003717.588:1260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31589 comm="syz.5.7547" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f040fd9e0d9 code=0x7ffc0000 [ 1247.245247][ T26] audit: type=1326 audit(2000003717.588:1261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31589 comm="syz.5.7547" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f040fd9e0d9 code=0x7ffc0000 [ 1248.140984][ T26] audit: type=1326 audit(2000003717.588:1262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31589 comm="syz.5.7547" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f040fd9e0d9 code=0x7ffc0000 [ 1248.165913][ T26] audit: type=1326 audit(2000003717.588:1263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31589 comm="syz.5.7547" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f040fd9e0d9 code=0x7ffc0000 [ 1248.295682][ T26] audit: type=1326 audit(2000003717.588:1264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31589 comm="syz.5.7547" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f040fd9e0d9 code=0x7ffc0000 [ 1248.320830][ T26] audit: type=1326 audit(2000003717.588:1265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31589 comm="syz.5.7547" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f040fd9e0d9 code=0x7ffc0000 [ 1248.345348][ T26] audit: type=1326 audit(2000003717.588:1266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31589 comm="syz.5.7547" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f040fd9e0d9 code=0x7ffc0000 [ 1248.372978][ T26] audit: type=1326 audit(2000003717.588:1267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31589 comm="syz.5.7547" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f040fd9e0d9 code=0x7ffc0000 [ 1248.469607][T31607] bond0: (slave bridge0): Releasing backup interface [ 1248.482015][T31607] bond0: (slave bridge0): the permanent HWaddr of slave - aa:aa:aa:aa:aa:0c - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1248.505363][T31607] bridge0: port 1(macvlan1) entered disabled state [ 1249.546535][T31607] bond11: (slave veth0_to_bond): Releasing active interface [ 1249.580487][T31607] bond1: (slave ip6gretap1): Releasing active interface [ 1249.594898][T31607] bond3: (slave veth3): Releasing active interface [ 1249.628586][T31607] bond4: (slave veth1): Releasing backup interface [ 1249.650530][T31607] bond6: (slave veth5): Releasing backup interface [ 1249.689172][T31607] bond7: (slave geneve2): Releasing active interface [ 1249.709380][T31607] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1249.728624][T31607] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1249.747804][T31607] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1249.768216][T31607] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1249.880101][T31607] bond0: (slave macvlan0): Releasing backup interface [ 1249.946026][T31607] device team0 left promiscuous mode [ 1249.982907][T31607] device gretap0 left promiscuous mode [ 1249.999549][T31607] bridge0: port 1(macvlan1) entered disabled state [ 1250.185694][T31607] bond8: (slave veth9): Releasing backup interface [ 1250.498805][T31607] bond10: (slave bridge2): Releasing backup interface [ 1250.515258][T31607] device bridge2 left promiscuous mode [ 1250.969674][T31607] bond11: (slave veth11): Releasing active interface [ 1251.112971][T31607] bond12: (slave bridge3): Removing an active aggregator [ 1251.123033][T31607] bond12: (slave bridge3): Releasing backup interface [ 1251.131048][T31607] bond12: (slave bridge3): the permanent HWaddr of slave - b2:5e:33:fe:ca:7f - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1251.158891][T31607] device bridge3 left promiscuous mode [ 1251.188779][T31607] bond12: (slave bridge4): Releasing backup interface [ 1251.199065][T31607] device bridge4 left promiscuous mode [ 1251.253925][T31611] netlink: 'syz.5.7541': attribute type 1 has an invalid length. [ 1251.460827][T31622] netlink: 'syz.6.7544': attribute type 1 has an invalid length. [ 1251.547442][T31624] bond6: (slave veth0_to_bond): Releasing active interface [ 1251.570468][T31634] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7546'. [ 1253.816133][T31677] loop6: detected capacity change from 0 to 512 [ 1253.849473][T31677] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1254.283533][T31677] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1254.698106][T31677] ext4 filesystem being mounted at /260/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1255.050223][T31680] netlink: 176 bytes leftover after parsing attributes in process `syz.2.7561'. [ 1255.069749][T25343] EXT4-fs (loop6): unmounting filesystem. [ 1255.195550][T31701] netlink: 'syz.6.7559': attribute type 2 has an invalid length. [ 1255.510515][T31710] xt_cgroup: path and classid specified [ 1255.680653][T31713] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7565'. [ 1256.642235][T31729] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7572'. [ 1257.836270][T31746] device syzkaller0 entered promiscuous mode [ 1264.338697][ T26] kauditd_printk_skb: 14 callbacks suppressed [ 1264.338715][ T26] audit: type=1800 audit(2000003734.910:1282): pid=31799 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.7590" name="bus" dev="ramfs" ino=118385 res=0 errno=0 [ 1264.558556][T31820] netlink: 'syz.6.7601': attribute type 30 has an invalid length. [ 1264.569746][T31820] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7601'. [ 1265.525428][T31836] overlayfs: failed to clone lowerpath [ 1266.730712][T31858] netlink: 'syz.1.7611': attribute type 1 has an invalid length. [ 1266.780104][T31858] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1266.948572][T31858] device macvlan2 entered promiscuous mode [ 1268.581946][T31893] netem: change failed [ 1269.419706][T31900] ================================================================== [ 1269.427940][T31900] BUG: KASAN: slab-out-of-bounds in ieee80211_monitor_select_queue+0x23a/0x240 [ 1269.436936][T31900] Read of size 2 at addr ffff88802ab6edfb by task syz.1.7627/31900 [ 1269.444864][T31900] [ 1269.447231][T31900] CPU: 1 PID: 31900 Comm: syz.1.7627 Not tainted syzkaller #0 [ 1269.454720][T31900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1269.464811][T31900] Call Trace: [ 1269.468148][T31900] [ 1269.471106][T31900] dump_stack_lvl+0x188/0x24e [ 1269.475847][T31900] ? __lock_acquire+0x7c40/0x7c40 [ 1269.480916][T31900] ? show_regs_print_info+0x12/0x12 [ 1269.486176][T31900] ? load_image+0x410/0x410 [ 1269.490729][T31900] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 1269.496226][T31900] ? __virt_addr_valid+0x188/0x540 [ 1269.501386][T31900] ? __virt_addr_valid+0x467/0x540 [ 1269.506539][T31900] ? ieee80211_monitor_select_queue+0x23a/0x240 [ 1269.512826][T31900] print_report+0xa8/0x210 [ 1269.517286][T31900] kasan_report+0x10b/0x140 [ 1269.521838][T31900] ? ieee80211_monitor_select_queue+0x23a/0x240 [ 1269.528131][T31900] ieee80211_monitor_select_queue+0x23a/0x240 [ 1269.534252][T31900] ? ieee80211_activate_links_work+0x60/0x60 [ 1269.540291][T31900] netdev_core_pick_tx+0x12c/0x360 [ 1269.545473][T31900] __dev_queue_xmit+0xb45/0x3810 [ 1269.550455][T31900] ? __dev_queue_xmit+0x281/0x3810 [ 1269.555604][T31900] ? netdev_core_pick_tx+0x360/0x360 [ 1269.561366][T31900] ? virtio_net_hdr_to_skb+0x787/0x12a0 [ 1269.566965][T31900] ? packet_extra_vlan_len_allowed+0x200/0x200 [ 1269.573161][T31900] packet_sendmsg+0x3b95/0x4de0 [ 1269.578043][T31900] ? aa_sk_perm+0x950/0x950 [ 1269.582595][T31900] ? __might_sleep+0xd0/0xd0 [ 1269.587215][T31900] ? finish_task_switch+0x25d/0x8e0 [ 1269.592469][T31900] ? verify_lock_unused+0x140/0x140 [ 1269.597710][T31900] ? aa_sk_perm+0x81f/0x950 [ 1269.602255][T31900] ? aa_af_perm+0x340/0x340 [ 1269.606791][T31900] ? packet_getsockopt+0x980/0x980 [ 1269.611941][T31900] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1269.617530][T31900] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1269.622852][T31900] ? security_socket_sendmsg+0x7c/0xa0 [ 1269.628344][T31900] ? packet_getsockopt+0x980/0x980 [ 1269.633483][T31900] ____sys_sendmsg+0x5ed/0x9a0 [ 1269.638293][T31900] ? __sys_sendmsg_sock+0x30/0x30 [ 1269.643371][T31900] ? __import_iovec+0x306/0x510 [ 1269.648271][T31900] ? import_iovec+0x6f/0xa0 [ 1269.652809][T31900] ___sys_sendmsg+0x2a2/0x360 [ 1269.657539][T31900] ? __sys_sendmsg+0x2a0/0x2a0 [ 1269.662360][T31900] __se_sys_sendmsg+0x1c3/0x2b0 [ 1269.667255][T31900] ? __x64_sys_sendmsg+0x80/0x80 [ 1269.672239][T31900] ? trace_event_buffer_commit+0x254/0x780 [ 1269.678085][T31900] ? trace_event_raw_event_sys_enter+0xf0/0x120 [ 1269.684376][T31900] ? trace_sys_enter+0x22/0x80 [ 1269.689187][T31900] do_syscall_64+0x4c/0xa0 [ 1269.693660][T31900] ? clear_bhb_loop+0x60/0xb0 [ 1269.698385][T31900] ? clear_bhb_loop+0x60/0xb0 [ 1269.703116][T31900] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1269.709054][T31900] RIP: 0033:0x7fba8dd9e0d9 [ 1269.713515][T31900] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1269.733148][T31900] RSP: 002b:00007fba8ec9b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1269.741600][T31900] RAX: ffffffffffffffda RBX: 00007fba8e025fa0 RCX: 00007fba8dd9e0d9 [ 1269.749615][T31900] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 1269.757623][T31900] RBP: 00007fba8de35024 R08: 0000000000000000 R09: 0000000000000000 [ 1269.765632][T31900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1269.773635][T31900] R13: 00007fba8e026038 R14: 00007fba8e025fa0 R15: 00007fffaa3c6268 [ 1269.781674][T31900] [ 1269.784715][T31900] [ 1269.787067][T31900] Allocated by task 11391: [ 1269.791522][T31900] kasan_set_track+0x4b/0x70 [ 1269.796155][T31900] __kasan_kmalloc+0x8e/0xa0 [ 1269.800815][T31900] __kmalloc+0xb3/0x240 [ 1269.805008][T31900] gtp_newlink+0x2ac/0xf70 [ 1269.809473][T31900] rtnl_newlink+0x14b3/0x1f90 [ 1269.814187][T31900] rtnetlink_rcv_msg+0x863/0xfb0 [ 1269.819170][T31900] netlink_rcv_skb+0x1ef/0x440 [ 1269.823982][T31900] netlink_unicast+0x7ad/0x920 [ 1269.828790][T31900] netlink_sendmsg+0x8ad/0xbd0 [ 1269.833599][T31900] ____sys_sendmsg+0x5ed/0x9a0 [ 1269.838425][T31900] ___sys_sendmsg+0x2a2/0x360 [ 1269.843141][T31900] __se_sys_sendmsg+0x1c3/0x2b0 [ 1269.848035][T31900] do_syscall_64+0x4c/0xa0 [ 1269.852519][T31900] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1269.858448][T31900] [ 1269.860796][T31900] The buggy address belongs to the object at ffff88802ab6c000 [ 1269.860796][T31900] which belongs to the cache kmalloc-8k of size 8192 [ 1269.874886][T31900] The buggy address is located 3579 bytes to the right of [ 1269.874886][T31900] 8192-byte region [ffff88802ab6c000, ffff88802ab6e000) [ 1269.888914][T31900] [ 1269.891270][T31900] The buggy address belongs to the physical page: [ 1269.897719][T31900] page:ffffea0000aada00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2ab68 [ 1269.907911][T31900] head:ffffea0000aada00 order:3 compound_mapcount:0 compound_pincount:0 [ 1269.916301][T31900] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 1269.924330][T31900] raw: 00fff00000010200 ffffea0001e16c00 dead000000000003 ffff888017442280 [ 1269.932952][T31900] raw: 0000000000000000 0000000080020002 00000001ffffffff 0000000000000000 [ 1269.941570][T31900] page dumped because: kasan: bad access detected [ 1269.948047][T31900] page_owner tracks the page as allocated [ 1269.953796][T31900] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4288, tgid 4288 (syz-executor), ts 83370097785, free_ts 83331605193 [ 1269.975200][T31900] post_alloc_hook+0x173/0x1a0 [ 1269.980016][T31900] get_page_from_freelist+0x206b/0x2180 [ 1269.985622][T31900] __alloc_pages+0x1ec/0x4f0 [ 1269.990259][T31900] alloc_slab_page+0x5d/0x180 [ 1269.994994][T31900] new_slab+0x87/0x2d0 [ 1269.999108][T31900] ___slab_alloc+0xbc5/0x1240 [ 1270.003816][T31900] __kmem_cache_alloc_node+0x126/0x270 [ 1270.009318][T31900] __kmalloc_node+0xa2/0x240 [ 1270.013988][T31900] kvmalloc_node+0x6c/0x180 [ 1270.018545][T31900] pfifo_fast_init+0x109/0x6a0 [ 1270.023346][T31900] qdisc_create_dflt+0x11a/0x490 [ 1270.028322][T31900] mq_init+0x2c3/0x650 [ 1270.032425][T31900] qdisc_create_dflt+0x11a/0x490 [ 1270.037393][T31900] dev_activate+0x1dc/0x1150 [ 1270.042026][T31900] __dev_open+0x343/0x430 [ 1270.046424][T31900] __dev_change_flags+0x1e4/0x6a0 [ 1270.051494][T31900] page last free stack trace: [ 1270.056190][T31900] free_unref_page_prepare+0x8e5/0x9e0 [ 1270.061688][T31900] free_unref_page+0x2e/0x3f0 [ 1270.066407][T31900] qlist_free_all+0x76/0xe0 [ 1270.070943][T31900] kasan_quarantine_reduce+0x144/0x160 [ 1270.076441][T31900] __kasan_slab_alloc+0x1e/0x80 [ 1270.081334][T31900] slab_post_alloc_hook+0x4b/0x490 [ 1270.086510][T31900] kmem_cache_alloc_bulk+0x3ba/0x4e0 [ 1270.091814][T31900] mas_alloc_nodes+0x449/0x880 [ 1270.096597][T31900] mas_preallocate+0x162/0x3b0 [ 1270.101381][T31900] do_mas_align_munmap+0x239/0x12d0 [ 1270.106619][T31900] do_mas_munmap+0x240/0x2b0 [ 1270.111239][T31900] __vm_munmap+0x1aa/0x2d0 [ 1270.115683][T31900] elf_map+0x247/0x2f0 [ 1270.119783][T31900] load_elf_interp+0x495/0xdb0 [ 1270.124572][T31900] load_elf_binary+0x1a7f/0x2820 [ 1270.129538][T31900] bprm_execve+0xaf7/0x17e0 [ 1270.134088][T31900] [ 1270.136429][T31900] Memory state around the buggy address: [ 1270.142076][T31900] ffff88802ab6ec80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1270.150159][T31900] ffff88802ab6ed00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1270.158227][T31900] >ffff88802ab6ed80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1270.166299][T31900] ^ [ 1270.174293][T31900] ffff88802ab6ee00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1270.182369][T31900] ffff88802ab6ee80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1270.190440][T31900] ================================================================== [ 1270.198634][T31900] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1270.205882][T31900] CPU: 1 PID: 31900 Comm: syz.1.7627 Not tainted syzkaller #0 [ 1270.213364][T31900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1270.223442][T31900] Call Trace: [ 1270.226750][T31900] [ 1270.229697][T31900] dump_stack_lvl+0x188/0x24e [ 1270.234413][T31900] ? memcpy+0x3c/0x60 [ 1270.238430][T31900] ? show_regs_print_info+0x12/0x12 [ 1270.243677][T31900] ? load_image+0x410/0x410 [ 1270.248227][T31900] panic+0x2d3/0x710 [ 1270.252156][T31900] ? asm_common_interrupt+0x22/0x40 [ 1270.257403][T31900] ? bpf_jit_dump+0xd0/0xd0 [ 1270.261940][T31900] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 1270.267873][T31900] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1270.273827][T31900] ? _raw_spin_unlock+0x40/0x40 [ 1270.278732][T31900] check_panic_on_warn+0x80/0xa0 [ 1270.283718][T31900] ? ieee80211_monitor_select_queue+0x23a/0x240 [ 1270.290012][T31900] end_report+0x66/0x110 [ 1270.294294][T31900] kasan_report+0x118/0x140 [ 1270.298839][T31900] ? ieee80211_monitor_select_queue+0x23a/0x240 [ 1270.305117][T31900] ieee80211_monitor_select_queue+0x23a/0x240 [ 1270.311248][T31900] ? ieee80211_activate_links_work+0x60/0x60 [ 1270.317266][T31900] netdev_core_pick_tx+0x12c/0x360 [ 1270.322409][T31900] __dev_queue_xmit+0xb45/0x3810 [ 1270.327382][T31900] ? __dev_queue_xmit+0x281/0x3810 [ 1270.332525][T31900] ? netdev_core_pick_tx+0x360/0x360 [ 1270.337842][T31900] ? virtio_net_hdr_to_skb+0x787/0x12a0 [ 1270.343429][T31900] ? packet_extra_vlan_len_allowed+0x200/0x200 [ 1270.349615][T31900] packet_sendmsg+0x3b95/0x4de0 [ 1270.354490][T31900] ? aa_sk_perm+0x950/0x950 [ 1270.359051][T31900] ? __might_sleep+0xd0/0xd0 [ 1270.363662][T31900] ? finish_task_switch+0x25d/0x8e0 [ 1270.368918][T31900] ? verify_lock_unused+0x140/0x140 [ 1270.374158][T31900] ? aa_sk_perm+0x81f/0x950 [ 1270.378699][T31900] ? aa_af_perm+0x340/0x340 [ 1270.383236][T31900] ? packet_getsockopt+0x980/0x980 [ 1270.388377][T31900] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1270.393961][T31900] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1270.399283][T31900] ? security_socket_sendmsg+0x7c/0xa0 [ 1270.404779][T31900] ? packet_getsockopt+0x980/0x980 [ 1270.409922][T31900] ____sys_sendmsg+0x5ed/0x9a0 [ 1270.414724][T31900] ? __sys_sendmsg_sock+0x30/0x30 [ 1270.419799][T31900] ? __import_iovec+0x306/0x510 [ 1270.424712][T31900] ? import_iovec+0x6f/0xa0 [ 1270.429257][T31900] ___sys_sendmsg+0x2a2/0x360 [ 1270.433981][T31900] ? __sys_sendmsg+0x2a0/0x2a0 [ 1270.438813][T31900] __se_sys_sendmsg+0x1c3/0x2b0 [ 1270.443739][T31900] ? __x64_sys_sendmsg+0x80/0x80 [ 1270.448719][T31900] ? trace_event_buffer_commit+0x254/0x780 [ 1270.454578][T31900] ? trace_event_raw_event_sys_enter+0xf0/0x120 [ 1270.460869][T31900] ? trace_sys_enter+0x22/0x80 [ 1270.465689][T31900] do_syscall_64+0x4c/0xa0 [ 1270.470139][T31900] ? clear_bhb_loop+0x60/0xb0 [ 1270.474864][T31900] ? clear_bhb_loop+0x60/0xb0 [ 1270.479588][T31900] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1270.485523][T31900] RIP: 0033:0x7fba8dd9e0d9 [ 1270.489972][T31900] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1270.509627][T31900] RSP: 002b:00007fba8ec9b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1270.518078][T31900] RAX: ffffffffffffffda RBX: 00007fba8e025fa0 RCX: 00007fba8dd9e0d9 [ 1270.526076][T31900] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 1270.534075][T31900] RBP: 00007fba8de35024 R08: 0000000000000000 R09: 0000000000000000 [ 1270.542085][T31900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1270.550093][T31900] R13: 00007fba8e026038 R14: 00007fba8e025fa0 R15: 00007fffaa3c6268 [ 1270.558103][T31900] [ 1270.561724][T31900] Kernel Offset: disabled [ 1270.566059][T31900] Rebooting in 86400 seconds..