last executing test programs: 4.084176243s ago: executing program 3 (id=829): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "d1"}]}, @NFTA_SET_ELEM_USERDATA={0x5, 0x6, 0x1, 0x0, 'C'}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 3.856437566s ago: executing program 3 (id=833): unshare(0x2c020400) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r0, &(0x7f0000000000), 0x12) 3.787444147s ago: executing program 2 (id=834): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) r4 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r4, &(0x7f0000000000), 0x10) r5 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r5, &(0x7f00000001c0), 0x10) dup3(r3, r4, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b0000000f000000cc000200060000ec05"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, &(0x7f0000000540)=""/245, &(0x7f00000000c0), &(0x7f0000000680), 0x2, r6}, 0x38) r7 = socket$kcm(0x10, 0x2, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r7, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000006c0)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 3.527339559s ago: executing program 3 (id=838): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0x4, 0xb}, {0x9, 0xd}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x657, 0xf8a0, 0x1e, 0x401, 0x4, 0x0, 0x0, 0x22ee64ea}}}}]}, 0x58}}, 0x4010804) 3.45245993s ago: executing program 1 (id=839): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000440)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 3.040606255s ago: executing program 2 (id=840): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0xfffffffffffffff4, 0x2, 0x7fffffff, 0x0, 0x5, 0x7}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x4, 0xb}, {0x9, 0xd}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x657, 0xf8a0, 0x1e, 0x401, 0x4, 0x0, 0x0, 0x22ee64ea}}}}]}, 0x58}}, 0x4010804) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.363279152s ago: executing program 1 (id=841): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_USERDATA={0x5, 0x6, 0x1, 0x0, 'C'}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 2.362287703s ago: executing program 3 (id=842): openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/fib_triestat\x00') preadv(r0, &(0x7f0000000640)=[{&(0x7f0000000480)=""/134, 0x86}], 0x1, 0x800, 0x78) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(0xffffffffffffffff, 0x1) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x87d4b69a72310a97) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) 2.332449953s ago: executing program 0 (id=843): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) write$nci(r0, &(0x7f0000000500)=@NCI_OP_CORE_CONN_CREDITS_NTF={0x0, 0x0, 0x3, 0x6, 0x6, {0x3, [{0x3, 0x6}, {0x2, 0x4}, {0x2}]}}, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.149991385s ago: executing program 1 (id=844): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001040)) socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @loopback, 0xa098}, {0xa, 0x4e21, 0x1000, @local, 0x2}, r3, 0x8401}}, 0x48) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 2.149271905s ago: executing program 0 (id=845): sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f00000000c0)='./file1\x00') symlinkat(&(0x7f0000000400)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, r1) setpgid(0x0, r1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) 2.087573956s ago: executing program 2 (id=846): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) get_robust_list(0x0, 0x0, &(0x7f0000000340)) 1.958169927s ago: executing program 2 (id=847): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x10000, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x4a8}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2) 1.159819286s ago: executing program 0 (id=848): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) r4 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r4, &(0x7f0000000000), 0x10) r5 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r5, &(0x7f00000001c0), 0x10) dup3(r3, r4, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b0000000f000000cc000200060000ec05"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, &(0x7f0000000540)=""/245, &(0x7f00000000c0), &(0x7f0000000680), 0x2, r6}, 0x38) r7 = socket$kcm(0x10, 0x2, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r7, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000006c0)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 1.159243657s ago: executing program 2 (id=849): openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/fib_triestat\x00') preadv(r0, &(0x7f0000000640)=[{&(0x7f0000000480)=""/134, 0x86}], 0x1, 0x800, 0x78) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(0xffffffffffffffff, 0x1) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x87d4b69a72310a97) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0xe4}, 0x94) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) tkill(0x0, 0xb) syz_open_dev$tty1(0xc, 0x4, 0x1) connect$llc(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 1.103398887s ago: executing program 1 (id=850): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000440)={{0xffbe, 0x5, 0x2, 0x5}, 'syz1\x00', 0x53}) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x12) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x2) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$KIOCSOUND(r0, 0x4b2f, 0x0) 1.098311807s ago: executing program 3 (id=851): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r2 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[], 0xfffffdef}}, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r4, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0) 508.001384ms ago: executing program 0 (id=852): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_USERDATA={0x5, 0x6, 0x1, 0x0, 'C'}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 391.548185ms ago: executing program 1 (id=853): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x80, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x45, 0xe, {{{}, {}, @broadcast, @broadcast}, 0x0, @default, 0x1, @void, @val, @void, @void, @val={0x6, 0x2, 0x6}, @void, @void, @void, @val={0x3c, 0x4, {0x1, 0xb, 0xa1, 0x4}}, @void, @void, @val={0x71, 0x7, {0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xff, 0x60}}, @val={0x76, 0x6, {0x5, 0x0, 0x17, 0xfa}}}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x5}, @NL80211_ATTR_HE_OBSS_PD={0x4}]}, 0x80}, 0x1, 0x0, 0x0, 0x84}, 0x0) 386.756775ms ago: executing program 0 (id=854): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010000000000000000002c0000000c000000ff0f00000000000008001c00c900000014003100fc01000000bf06cffa887d0000000000000000000001ef948c95c530b78d405e13e70f8c004507df7200ccf002d2b87459afe968b1615070db6d58f2a45b89f70631a569c8aa967c896fae"], 0x3c}], 0x1, 0x0, 0x0, 0xb305e06d8ab48273}, 0x48800) 353.520566ms ago: executing program 1 (id=855): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {}, 0xfd}, 0x18) connect$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0x0, 0x2}, 0xfe}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) r2 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0xd) 85.252439ms ago: executing program 2 (id=856): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00', @ANYRES16, @ANYBLOB="010003000000000000000000000008000100", @ANYBLOB="080003000000"], 0x30}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) 27.162059ms ago: executing program 3 (id=857): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0xc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4f24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x2000000000000000, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x48}, [], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) 0s ago: executing program 0 (id=858): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x8, 0x1c, &(0x7f00000103c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b702000000000000ac700892359302627b9a20fe00000000b609080090ffffff7b9af0ff00000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb7020000", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000001500000086ffffffbf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.72' (ED25519) to the list of known hosts. [ 73.580586][ T5762] cgroup: Unknown subsys name 'net' [ 73.714750][ T5762] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.428853][ T5762] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.907425][ T5776] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.927917][ T5776] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.935902][ T5776] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.944544][ T5776] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.954426][ T5776] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 76.963456][ T5776] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.971692][ T5776] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.011885][ T5085] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.026703][ T5085] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.058620][ T5778] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.066498][ T5778] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 77.074495][ T5778] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.075875][ T5776] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.095424][ T5776] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.107390][ T5776] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.117446][ T5776] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.125332][ T5776] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 77.140825][ T5776] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.148762][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.174008][ T5085] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.182929][ T5085] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.198833][ T5085] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.217902][ T5085] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 77.225884][ T5085] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.546435][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 77.659168][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 77.680352][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 77.768741][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.776664][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.784861][ T5777] bridge_slave_0: entered allmulticast mode [ 77.792556][ T5777] bridge_slave_0: entered promiscuous mode [ 77.831979][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.839475][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.846620][ T5777] bridge_slave_1: entered allmulticast mode [ 77.854016][ T5777] bridge_slave_1: entered promiscuous mode [ 77.915526][ T5783] chnl_net:caif_netlink_parms(): no params data found [ 77.942915][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.950167][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.957438][ T5774] bridge_slave_0: entered allmulticast mode [ 77.964317][ T5774] bridge_slave_0: entered promiscuous mode [ 77.983386][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.990683][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.998271][ T5781] bridge_slave_0: entered allmulticast mode [ 78.005161][ T5781] bridge_slave_0: entered promiscuous mode [ 78.032295][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.039548][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.046677][ T5774] bridge_slave_1: entered allmulticast mode [ 78.053919][ T5774] bridge_slave_1: entered promiscuous mode [ 78.063107][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.076338][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.083716][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.091100][ T5781] bridge_slave_1: entered allmulticast mode [ 78.098190][ T5781] bridge_slave_1: entered promiscuous mode [ 78.131854][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.184840][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.201134][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.215996][ T5777] team0: Port device team_slave_0 added [ 78.224250][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.243533][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.256759][ T5777] team0: Port device team_slave_1 added [ 78.321885][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.329283][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.336528][ T5783] bridge_slave_0: entered allmulticast mode [ 78.343833][ T5783] bridge_slave_0: entered promiscuous mode [ 78.354653][ T5774] team0: Port device team_slave_0 added [ 78.375057][ T5781] team0: Port device team_slave_0 added [ 78.381245][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.391770][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.399258][ T5783] bridge_slave_1: entered allmulticast mode [ 78.406041][ T5783] bridge_slave_1: entered promiscuous mode [ 78.425271][ T5774] team0: Port device team_slave_1 added [ 78.443836][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.451274][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.477509][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.491366][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.498430][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.524445][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.537228][ T5781] team0: Port device team_slave_1 added [ 78.577969][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.585048][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.612160][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.635125][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.650825][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.662860][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.670215][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.696820][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.723715][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.730871][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.757355][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.800931][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.808425][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.837927][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.852218][ T5783] team0: Port device team_slave_0 added [ 78.891797][ T5777] hsr_slave_0: entered promiscuous mode [ 78.899309][ T5777] hsr_slave_1: entered promiscuous mode [ 78.908665][ T5783] team0: Port device team_slave_1 added [ 78.928825][ T5774] hsr_slave_0: entered promiscuous mode [ 78.935350][ T5774] hsr_slave_1: entered promiscuous mode [ 78.942153][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.950461][ T5774] Cannot create hsr debugfs directory [ 79.009933][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.019580][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.046471][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.064400][ T5781] hsr_slave_0: entered promiscuous mode [ 79.071357][ T5781] hsr_slave_1: entered promiscuous mode [ 79.077784][ T5778] Bluetooth: hci0: command tx timeout [ 79.084577][ T5781] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.092430][ T5781] Cannot create hsr debugfs directory [ 79.113202][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.120280][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.146510][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.157637][ T5778] Bluetooth: hci1: command tx timeout [ 79.237060][ T5778] Bluetooth: hci2: command tx timeout [ 79.278045][ T5783] hsr_slave_0: entered promiscuous mode [ 79.284957][ T5783] hsr_slave_1: entered promiscuous mode [ 79.292008][ T5783] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.299731][ T5783] Cannot create hsr debugfs directory [ 79.317032][ T5778] Bluetooth: hci3: command tx timeout [ 79.657112][ T5781] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.670663][ T5781] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.682550][ T5781] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.701906][ T5781] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.760363][ T5774] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.778065][ T5774] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.788436][ T5774] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.800449][ T5774] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.891087][ T5777] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.911097][ T5777] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.921274][ T5777] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.935870][ T5777] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.059026][ T5783] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.085805][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.095279][ T5783] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.106558][ T5783] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.120144][ T5783] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.174490][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.215023][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.246707][ T2904] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.254235][ T2904] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.288684][ T2904] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.295990][ T2904] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.330848][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.367679][ T3544] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.375131][ T3544] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.426124][ T2904] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.433410][ T2904] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.468224][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.525893][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.596570][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.603867][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.639922][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.647400][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.678009][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.783360][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.824365][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.831903][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.893435][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.900775][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.030825][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.152102][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.167735][ T5778] Bluetooth: hci0: command tx timeout [ 81.205378][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.238605][ T5778] Bluetooth: hci1: command tx timeout [ 81.263063][ T5781] veth0_vlan: entered promiscuous mode [ 81.309415][ T5781] veth1_vlan: entered promiscuous mode [ 81.318194][ T5778] Bluetooth: hci2: command tx timeout [ 81.397903][ T5778] Bluetooth: hci3: command tx timeout [ 81.414364][ T5774] veth0_vlan: entered promiscuous mode [ 81.423046][ T5777] veth0_vlan: entered promiscuous mode [ 81.445826][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.469846][ T5777] veth1_vlan: entered promiscuous mode [ 81.482422][ T5774] veth1_vlan: entered promiscuous mode [ 81.511532][ T5781] veth0_macvtap: entered promiscuous mode [ 81.548193][ T5774] veth0_macvtap: entered promiscuous mode [ 81.566740][ T5781] veth1_macvtap: entered promiscuous mode [ 81.584007][ T5774] veth1_macvtap: entered promiscuous mode [ 81.622375][ T5777] veth0_macvtap: entered promiscuous mode [ 81.634217][ T5783] veth0_vlan: entered promiscuous mode [ 81.650747][ T5777] veth1_macvtap: entered promiscuous mode [ 81.663493][ T5783] veth1_vlan: entered promiscuous mode [ 81.676108][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.686038][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.698265][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.710739][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.732355][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.764889][ T5781] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.774672][ T5781] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.785155][ T5781] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.795320][ T5781] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.811013][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.824353][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.834602][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.845309][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.858087][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.866071][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.879801][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.892782][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.905607][ T5774] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.914963][ T5774] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.924568][ T5774] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.933540][ T5774] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.009326][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.026156][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.040300][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.051040][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.062537][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.101786][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.119420][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.122992][ T5777] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.139123][ T5777] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.148365][ T5777] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.157530][ T5777] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.248647][ T5783] veth0_macvtap: entered promiscuous mode [ 82.267329][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.277844][ T2194] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.286335][ T2194] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.302159][ T5783] veth1_macvtap: entered promiscuous mode [ 82.307002][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.423534][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.423659][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.436840][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.455973][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.468183][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.479136][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.492435][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.503508][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.515104][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.526241][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.543466][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.555565][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.567407][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.583793][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.596561][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.610640][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.676730][ T5783] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.695322][ T5783] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.709357][ T5783] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.718956][ T5783] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.829031][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.864836][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.033690][ T3544] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.065062][ T3544] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.093765][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.126943][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.226453][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.237824][ T5778] Bluetooth: hci0: command tx timeout [ 83.242126][ T5842] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8'. [ 83.253203][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.317308][ T5778] Bluetooth: hci1: command tx timeout [ 83.367968][ T5844] netlink: 'syz.0.9': attribute type 10 has an invalid length. [ 83.399664][ T5778] Bluetooth: hci2: command tx timeout [ 83.476755][ T5844] team0: Port device netdevsim0 added [ 83.478335][ T5778] Bluetooth: hci3: command tx timeout [ 83.502344][ T5845] netlink: 'syz.0.9': attribute type 10 has an invalid length. [ 83.550349][ T5845] team0: Port device netdevsim0 removed [ 83.561744][ T5845] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 84.654520][ T5883] C: renamed from team_slave_0 (while UP) [ 84.676228][ T5883] netlink: 'syz.1.20': attribute type 1 has an invalid length. [ 84.695011][ T5883] netlink: 116 bytes leftover after parsing attributes in process `syz.1.20'. [ 84.865992][ T5888] fuse: Bad value for 'user_id' [ 85.317724][ T5778] Bluetooth: hci0: command tx timeout [ 85.396330][ T5909] tipc: Enabling of bearer rejected, failed to enable media [ 85.398011][ T5778] Bluetooth: hci1: command tx timeout [ 85.542070][ T5778] Bluetooth: hci2: command tx timeout [ 85.557284][ T5778] Bluetooth: hci3: command tx timeout [ 86.333781][ T5919] warning: `syz.0.32' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 86.698135][ T5932] fuse: Bad value for 'user_id' [ 86.743680][ T5934] sch_tbf: peakrate 3 is lower than or equals to rate 183 ! [ 88.866075][ T5970] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.52'. [ 88.891518][ T5975] Zero length message leads to an empty skb [ 90.057077][ T5985] netlink: 'syz.3.58': attribute type 1 has an invalid length. [ 90.082671][ T5985] netlink: 'syz.3.58': attribute type 4 has an invalid length. [ 90.143017][ T5989] Driver unsupported XDP return value 0 on prog (id 7) dev N/A, expect packet loss! [ 90.427216][ T5994] netlink: 'syz.2.57': attribute type 10 has an invalid length. [ 91.146298][ T5994] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.159338][ T5994] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 92.149117][ T6012] netlink: 'syz.1.68': attribute type 29 has an invalid length. [ 92.261473][ T787] cfg80211: failed to load regulatory.db [ 92.269101][ T6012] netlink: 'syz.1.68': attribute type 29 has an invalid length. [ 92.360607][ T6010] netlink: 'syz.1.68': attribute type 29 has an invalid length. [ 92.417829][ T6014] netlink: 'syz.1.68': attribute type 29 has an invalid length. [ 92.477522][ T6019] process 'syz.0.71' launched './file0' with NULL argv: empty string added [ 92.534531][ T6020] syzkaller1: entered promiscuous mode [ 92.557338][ T6020] syzkaller1: entered allmulticast mode [ 92.600633][ T6026] netlink: 'syz.1.73': attribute type 10 has an invalid length. [ 92.625185][ T6026] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.655977][ T6026] team0: Port device bond0 added [ 92.834953][ T6029] netlink: 60 bytes leftover after parsing attributes in process `syz.0.74'. [ 95.017544][ T6067] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 95.017740][ T6071] syz.3.85[6071]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 95.183348][ T6071] loop3: detected capacity change from 0 to 1024 [ 95.361033][ T6086] netlink: 32 bytes leftover after parsing attributes in process `syz.0.90'. [ 95.420988][ T6071] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.600633][ T6090] vlan2: entered promiscuous mode [ 95.606504][ T6071] EXT4-fs (loop3): shut down requested (2) [ 95.697295][ T6090] dummy0: entered promiscuous mode [ 96.008846][ T5781] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.160238][ T6102] loop1: detected capacity change from 0 to 512 [ 96.330022][ T6102] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.476970][ T6102] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.755115][ T6112] loop0: detected capacity change from 0 to 1024 [ 96.791202][ T6112] EXT4-fs: inline encryption not supported [ 96.820371][ T6112] EXT4-fs: Ignoring removed bh option [ 96.837181][ T6085] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 97.628271][ T6112] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 97.643709][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.742532][ T6112] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.879059][ T6126] loop2: detected capacity change from 0 to 128 [ 97.930714][ T6112] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 98.013138][ T6126] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 98.026706][ T6133] loop1: detected capacity change from 0 to 512 [ 98.061563][ T6133] EXT4-fs: Ignoring removed bh option [ 98.097954][ T6133] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 98.120104][ T6126] ext4 filesystem being mounted at /19/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 98.214482][ T6133] EXT4-fs (loop1): 1 truncate cleaned up [ 98.253121][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.261095][ T6133] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.360545][ T6126] netlink: 8 bytes leftover after parsing attributes in process `syz.2.100'. [ 98.408113][ T5778] Bluetooth: Unknown BR/EDR signaling command 0x0d [ 98.415058][ T5778] Bluetooth: Wrong link type (-22) [ 98.500299][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.823386][ T5783] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 98.886613][ T6151] binder: 6148:6151 ioctl 40046205 0 returned -22 [ 99.062905][ T6159] tipc: Enabling of bearer rejected, failed to enable media [ 99.258414][ T6167] loop1: detected capacity change from 0 to 1024 [ 99.313724][ T6167] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.632405][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.799838][ T5778] Bluetooth: hci3: Invalid handle: 0x20c9 > 0x0eff [ 100.698142][ T6192] syzkaller0: entered promiscuous mode [ 100.703710][ T6192] syzkaller0: entered allmulticast mode [ 101.146466][ T6202] tipc: Enabling of bearer rejected, failed to enable media [ 101.177136][ T6204] netlink: 'syz.1.123': attribute type 4 has an invalid length. [ 101.218811][ T6208] netlink: 'syz.1.123': attribute type 4 has an invalid length. [ 101.809174][ T6223] netlink: 'syz.2.125': attribute type 10 has an invalid length. [ 102.349268][ T6225] netlink: 'syz.0.127': attribute type 4 has an invalid length. [ 103.134006][ T6243] tipc: Enabling of bearer rejected, failed to enable media [ 104.810305][ T6271] netlink: 'syz.0.137': attribute type 10 has an invalid length. [ 105.348355][ T6271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.359692][ T6271] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 105.374778][ T6275] netlink: 4 bytes leftover after parsing attributes in process `syz.2.144'. [ 105.597664][ T6279] tipc: Enabling of bearer rejected, failed to enable media [ 105.850978][ T6290] loop0: detected capacity change from 0 to 1024 [ 105.945814][ T6290] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.074691][ T6301] loop3: detected capacity change from 0 to 128 [ 106.179242][ T6301] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 106.240678][ T6301] ext4 filesystem being mounted at /37/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 106.258860][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.264964][ T6306] loop1: detected capacity change from 0 to 8 [ 106.301862][ T5765] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 107.741731][ T5781] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 109.108828][ T6334] netlink: 'syz.0.159': attribute type 10 has an invalid length. [ 111.022977][ T6361] tipc: Started in network mode [ 111.030805][ T6361] tipc: Node identity aa7f204c63d3, cluster identity 4711 [ 111.063166][ T6361] tipc: Enabled bearer , priority 0 [ 111.095379][ T6361] tipc: Resetting bearer [ 111.158425][ T6360] tipc: Disabling bearer [ 111.178710][ T6363] loop0: detected capacity change from 0 to 4096 [ 111.208784][ T6363] EXT4-fs: Ignoring removed nomblk_io_submit option [ 111.240492][ T6363] EXT4-fs (loop0): Test dummy encryption mode enabled [ 111.301114][ T6363] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 111.354713][ T6363] System zones: 0-5 [ 111.442068][ T6363] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.513397][ T6380] capability: warning: `syz.2.180' uses deprecated v2 capabilities in a way that may be insecure [ 111.848221][ T6363] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 111.917567][ T6394] fuse: Unknown parameter 'use00000000000000000000' [ 111.920737][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.051653][ T6399] tipc: Enabled bearer , priority 0 [ 112.072269][ T6399] tipc: Resetting bearer [ 112.112705][ T6397] tipc: Disabling bearer [ 112.279867][ T6407] loop1: detected capacity change from 0 to 512 [ 112.326570][ T6407] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.365759][ T6407] ext4 filesystem being mounted at /50/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 112.558886][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.691684][ T28] audit: type=1326 audit(1778153130.815:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6440 comm="syz.0.203" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42e499cdd9 code=0x7ffc0000 [ 115.733629][ T28] audit: type=1326 audit(1778153130.815:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6440 comm="syz.0.203" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42e499cdd9 code=0x7ffc0000 [ 115.759174][ T28] audit: type=1326 audit(1778153130.855:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6440 comm="syz.0.203" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7f42e499cdd9 code=0x7ffc0000 [ 115.867004][ T28] audit: type=1326 audit(1778153130.855:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6440 comm="syz.0.203" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42e499cdd9 code=0x7ffc0000 [ 115.930658][ T28] audit: type=1326 audit(1778153130.855:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6440 comm="syz.0.203" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42e499cdd9 code=0x7ffc0000 [ 115.967105][ T6453] capability: warning: `syz.0.209' uses 32-bit capabilities (legacy support in use) [ 120.531121][ T6463] sched: RT throttling activated [ 121.156361][ T6483] syz.2.215 uses obsolete (PF_INET,SOCK_PACKET) [ 121.176710][ T6486] netlink: 20 bytes leftover after parsing attributes in process `syz.0.216'. [ 121.515463][ T6498] syzkaller0: entered promiscuous mode [ 121.531919][ T6498] syzkaller0: entered allmulticast mode [ 122.024985][ T6513] netlink: 12 bytes leftover after parsing attributes in process `syz.2.229'. [ 122.075668][ T6513] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.085104][ T6513] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.094264][ T6513] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.103117][ T6513] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.125222][ T6513] netlink: 12 bytes leftover after parsing attributes in process `syz.2.229'. [ 122.547976][ T6525] fuse: Unknown parameter 'user_id00000000000000000000' [ 123.358107][ T6546] netlink: 12 bytes leftover after parsing attributes in process `syz.1.244'. [ 123.423993][ T6550] fuse: Unknown parameter 'user_id00000000000000000000' [ 125.040990][ T6584] netlink: 12 bytes leftover after parsing attributes in process `syz.0.255'. [ 125.686088][ T6607] fuse: Unknown parameter 'user_id00000000000000000000' [ 126.470452][ T6629] fuse: Bad value for 'fd' [ 126.862616][ T6644] loop1: detected capacity change from 0 to 256 [ 127.072941][ T6650] loop3: detected capacity change from 0 to 512 [ 127.574956][ T6644] FAT-fs (loop1): Directory bread(block 64) failed [ 127.637534][ T6650] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.678719][ T6644] FAT-fs (loop1): Directory bread(block 65) failed [ 127.714324][ T6650] ext4 filesystem being mounted at /67/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.727852][ T6644] FAT-fs (loop1): Directory bread(block 66) failed [ 127.734813][ T6644] FAT-fs (loop1): Directory bread(block 67) failed [ 127.804146][ T6644] FAT-fs (loop1): Directory bread(block 68) failed [ 127.847145][ T6644] FAT-fs (loop1): Directory bread(block 69) failed [ 127.947114][ T6644] FAT-fs (loop1): Directory bread(block 70) failed [ 127.953747][ T6644] FAT-fs (loop1): Directory bread(block 71) failed [ 127.976467][ T6644] FAT-fs (loop1): Directory bread(block 72) failed [ 127.997308][ T6644] FAT-fs (loop1): Directory bread(block 73) failed [ 128.025879][ T5781] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.086154][ T6662] fuse: Bad value for 'fd' [ 129.025184][ T6691] netlink: 56 bytes leftover after parsing attributes in process `syz.2.298'. [ 130.299087][ T6701] fuse: Bad value for 'fd' [ 132.167543][ T6731] fuse: Unknown parameter '0x0000000000000006' [ 132.438502][ T6738] syzkaller0: entered promiscuous mode [ 132.444070][ T6738] syzkaller0: entered allmulticast mode [ 133.261685][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.269107][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.498240][ T6750] loop2: detected capacity change from 0 to 4096 [ 133.610191][ T6750] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.773288][ T6760] autofs4:pid:6760:autofs_fill_super: called with bogus options [ 134.667172][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.788320][ T6766] netlink: 'syz.1.322': attribute type 10 has an invalid length. [ 135.489440][ T5085] Bluetooth: hci3: link tx timeout [ 135.495111][ T5085] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 135.520917][ T6766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 135.535793][ T6766] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 135.903441][ T6778] syzkaller0: entered promiscuous mode [ 135.909686][ T6778] syzkaller0: entered allmulticast mode [ 136.817641][ T6787] tipc: Enabled bearer , priority 0 [ 136.825801][ T6787] syzkaller0: entered promiscuous mode [ 136.832065][ T6787] syzkaller0: entered allmulticast mode [ 136.881126][ T6787] tipc: Resetting bearer [ 136.904220][ T6789] fuse: Unknown parameter '0x0000000000000006' [ 136.915957][ T6786] tipc: Resetting bearer [ 136.993782][ T6786] tipc: Disabling bearer [ 137.562872][ T5778] Bluetooth: hci3: command 0x0406 tx timeout [ 137.625498][ T6798] autofs4:pid:6798:autofs_fill_super: called with bogus options [ 138.438803][ T6805] overlayfs: upper fs does not support file handles, falling back to index=off. [ 138.676732][ T6811] netlink: 'syz.0.336': attribute type 10 has an invalid length. [ 139.518104][ T6820] fuse: Unknown parameter '0x0000000000000004' [ 139.673575][ T6822] loop2: detected capacity change from 0 to 4096 [ 139.767989][ T6827] netlink: 12 bytes leftover after parsing attributes in process `syz.0.346'. [ 139.910653][ T6822] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.028732][ T6835] autofs4:pid:6835:autofs_fill_super: called with bogus options [ 140.884306][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.905316][ T6833] veth3: entered allmulticast mode [ 140.942733][ T6833] bond1: (slave veth3): Enslaving as an active interface with an up link [ 141.920532][ T6858] netlink: 'syz.1.350': attribute type 10 has an invalid length. [ 142.938801][ T6868] fuse: Unknown parameter '0x0000000000000006' [ 142.959873][ T6866] loop2: detected capacity change from 0 to 4096 [ 142.997845][ T6866] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 143.026896][ T6866] EXT4-fs (loop2): Test dummy encryption mode enabled [ 143.068295][ T6866] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.140851][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.275911][ T6894] netlink: 'syz.0.363': attribute type 10 has an invalid length. [ 144.691716][ T6901] loop1: detected capacity change from 0 to 256 [ 147.167094][ T2194] wlan1: Trigger new scan to find an IBSS to join [ 148.590458][ T6929] netlink: 'syz.0.373': attribute type 10 has an invalid length. [ 150.424038][ T6961] loop2: detected capacity change from 0 to 1024 [ 150.433219][ T6961] ======================================================= [ 150.433219][ T6961] WARNING: The mand mount option has been deprecated and [ 150.433219][ T6961] and is ignored by this kernel. Remove the mand [ 150.433219][ T6961] option from the mount to silence this warning. [ 150.433219][ T6961] ======================================================= [ 150.602440][ T6963] netlink: 'syz.3.387': attribute type 10 has an invalid length. [ 151.297607][ T12] wlan1: Trigger new scan to find an IBSS to join [ 151.390127][ T6963] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.401601][ T6963] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 151.537567][ T6961] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.620336][ T6969] netlink: 4 bytes leftover after parsing attributes in process `syz.0.390'. [ 151.809634][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.962216][ T6982] loop3: detected capacity change from 0 to 1024 [ 151.979205][ T6982] EXT4-fs: Ignoring removed orlov option [ 152.002600][ T6982] EXT4-fs: Ignoring removed bh option [ 152.032759][ T6982] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 152.114872][ T6982] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.150351][ T6984] syzkaller0: entered promiscuous mode [ 152.156018][ T6984] syzkaller0: entered allmulticast mode [ 152.366570][ T2917] wlan1: Creating new IBSS network, BSSID b6:fb:42:8c:e5:f4 [ 152.410346][ T5781] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.587499][ T6998] loop3: detected capacity change from 0 to 1024 [ 152.601285][ T6998] EXT4-fs: Ignoring removed bh option [ 152.665635][ T6998] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.769953][ T5781] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.082020][ T7023] syzkaller0: entered promiscuous mode [ 154.087700][ T7023] syzkaller0: entered allmulticast mode [ 154.882346][ T7049] loop2: detected capacity change from 0 to 512 [ 154.898631][ T7049] EXT4-fs: Ignoring removed nobh option [ 154.957338][ T7049] EXT4-fs (loop2): orphan cleanup on readonly fs [ 154.993571][ T7049] EXT4-fs error (device loop2): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.2.421: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 155.077228][ T7049] EXT4-fs (loop2): Remounting filesystem read-only [ 155.084446][ T7049] EXT4-fs warning (device loop2): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.2.421: ea_inode dec ref err=-117 [ 155.099481][ T7049] EXT4-fs (loop2): 1 orphan inode deleted [ 155.227760][ T7049] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 155.337109][ T7055] netlink: 'syz.1.422': attribute type 10 has an invalid length. [ 155.871041][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.351801][ T7066] netlink: 'syz.3.427': attribute type 1 has an invalid length. [ 156.518994][ T7066] bond1: entered promiscuous mode [ 156.551956][ T7075] IPVS: length: 173 != 24 [ 156.556394][ T7066] 8021q: adding VLAN 0 to HW filter on device bond1 [ 156.755798][ T7073] 8021q: adding VLAN 0 to HW filter on device bond1 [ 156.782397][ T7073] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 156.817042][ T7073] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 156.869480][ T7073] bond1: (slave ip6gre1): making interface the new active one [ 156.892873][ T7073] ip6gre1: entered promiscuous mode [ 156.940594][ T7073] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 156.981683][ T7084] tipc: Started in network mode [ 156.986664][ T7084] tipc: Node identity ac141427, cluster identity 4711 [ 157.039491][ T7084] tipc: Enabled bearer , priority 10 [ 158.158810][ T5809] tipc: Node number set to 2886997031 [ 159.577475][ T7098] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 161.150183][ T7086] Set syz1 is full, maxelem 65536 reached [ 162.130893][ T28] audit: type=1326 audit(1778153177.255:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7127 comm="syz.0.454" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f42e499cdd9 code=0x0 [ 163.297494][ T7124] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 166.896960][ T5085] Bluetooth: hci2: unexpected subevent 0x1a length: 10 > 6 [ 167.211732][ T28] audit: type=1326 audit(1778153182.335:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7162 comm="syz.3.466" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6e3c39cdd9 code=0x0 [ 168.568423][ T7172] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 168.854723][ T28] audit: type=1326 audit(1778153183.975:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7180 comm="syz.0.473" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42e499cdd9 code=0x7ffc0000 [ 168.903842][ T28] audit: type=1326 audit(1778153183.975:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7180 comm="syz.0.473" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42e499cdd9 code=0x7ffc0000 [ 168.916966][ T7183] netlink: 32 bytes leftover after parsing attributes in process `syz.1.474'. [ 168.964102][ T28] audit: type=1326 audit(1778153183.975:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7180 comm="syz.0.473" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f42e499cdd9 code=0x7ffc0000 [ 169.017544][ T28] audit: type=1326 audit(1778153183.975:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7180 comm="syz.0.473" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42e499cdd9 code=0x7ffc0000 [ 169.080174][ T28] audit: type=1326 audit(1778153183.975:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7180 comm="syz.0.473" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42e499cdd9 code=0x7ffc0000 [ 170.339776][ T7207] netlink: 'syz.1.482': attribute type 10 has an invalid length. [ 173.019826][ T7201] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 173.405630][ T28] audit: type=1326 audit(1778153188.525:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7228 comm="syz.1.492" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f387119cdd9 code=0x0 [ 173.499473][ T5085] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 173.510273][ T5085] Bluetooth: hci0: Injecting HCI hardware error event [ 173.535488][ T5778] Bluetooth: hci0: hardware error 0x00 [ 175.635808][ T5778] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 176.511667][ T7279] netlink: 12 bytes leftover after parsing attributes in process `syz.2.511'. [ 178.558200][ T7307] netlink: 'syz.2.522': attribute type 2 has an invalid length. [ 180.011046][ T7324] netlink: 'syz.0.527': attribute type 10 has an invalid length. [ 181.280835][ T28] audit: type=1326 audit(1778153196.395:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7341 comm="syz.1.536" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f387119cdd9 code=0x7ffc0000 [ 181.322077][ T7343] futex_wake_op: syz.2.535 tries to shift op by 32; fix this program [ 182.022622][ T7351] netlink: 'syz.0.538': attribute type 10 has an invalid length. [ 182.644679][ T3507] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 182.682205][ T28] audit: type=1326 audit(1778153196.395:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7341 comm="syz.1.536" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f387119cdd9 code=0x7ffc0000 [ 182.848121][ T28] audit: type=1326 audit(1778153196.405:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7341 comm="syz.1.536" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f387119cdd9 code=0x7ffc0000 [ 184.012625][ T28] audit: type=1326 audit(1778153196.405:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7341 comm="syz.1.536" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f387119cdd9 code=0x7ffc0000 [ 184.116071][ T28] audit: type=1326 audit(1778153196.405:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7341 comm="syz.1.536" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f387119cdd9 code=0x7ffc0000 [ 185.404643][ T7387] netlink: 'syz.1.548': attribute type 10 has an invalid length. [ 185.799009][ T7396] TCP: TCP_TX_DELAY enabled [ 186.638883][ T7418] netlink: 'syz.0.562': attribute type 10 has an invalid length. [ 187.187315][ T7420] tipc: Enabling of bearer rejected, failed to enable media [ 188.017052][ T5778] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 188.572028][ T7455] netlink: 'syz.3.575': attribute type 10 has an invalid length. [ 189.395669][ T7457] tipc: Enabling of bearer rejected, failed to enable media [ 189.933369][ T7467] netlink: 4172 bytes leftover after parsing attributes in process `syz.3.578'. [ 191.684074][ T7479] netlink: 8 bytes leftover after parsing attributes in process `syz.3.583'. [ 192.677100][ T7488] tipc: Enabling of bearer rejected, failed to enable media [ 192.741299][ T7486] syzkaller0: entered promiscuous mode [ 192.757139][ T7486] syzkaller0: entered allmulticast mode [ 192.797935][ T5778] Bluetooth: Unexpected continuation frame (len 4) [ 193.094445][ T7497] loop1: detected capacity change from 0 to 512 [ 193.332950][ T7497] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.397119][ T7497] ext4 filesystem being mounted at /143/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 194.602584][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.610866][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.336658][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.453425][ T5778] Bluetooth: hci2: Malformed LE Event: 0x1b [ 195.989634][ T7524] syzkaller0: entered promiscuous mode [ 195.995269][ T7524] syzkaller0: entered allmulticast mode [ 200.389867][ T7581] overlayfs: failed to clone upperpath [ 201.876977][ T5778] Bluetooth: hci1: command 0x0406 tx timeout [ 201.883104][ T5778] Bluetooth: hci2: command 0x0406 tx timeout [ 201.893482][ T5779] Bluetooth: hci3: command 0x0406 tx timeout [ 202.192893][ T7601] tipc: Enabling of bearer rejected, failed to enable media [ 202.252471][ T7603] syzkaller0: entered promiscuous mode [ 202.264886][ T7603] syzkaller0: entered allmulticast mode [ 203.256353][ T7632] syzkaller0: entered promiscuous mode [ 203.273558][ T7632] syzkaller0: entered allmulticast mode [ 206.272113][ T7679] netlink: 12 bytes leftover after parsing attributes in process `syz.2.647'. [ 207.260620][ T7689] loop1: detected capacity change from 0 to 1024 [ 207.288413][ T7689] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 207.335044][ T7689] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.429706][ T7689] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #11: comm syz.1.650: missing EA_INODE flag [ 207.528395][ T7689] EXT4-fs (loop1): Remounting filesystem read-only [ 207.588694][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.906626][ T7713] loop1: detected capacity change from 0 to 256 [ 208.005194][ T7713] FAT-fs (loop1): Directory bread(block 64) failed [ 208.046545][ T7713] FAT-fs (loop1): Directory bread(block 65) failed [ 208.338503][ T7713] FAT-fs (loop1): Directory bread(block 66) failed [ 208.742799][ T7713] FAT-fs (loop1): Directory bread(block 67) failed [ 208.814834][ T7713] FAT-fs (loop1): Directory bread(block 68) failed [ 209.036981][ T7713] FAT-fs (loop1): Directory bread(block 69) failed [ 209.043739][ T7713] FAT-fs (loop1): Directory bread(block 70) failed [ 209.111660][ T7713] FAT-fs (loop1): Directory bread(block 71) failed [ 209.146267][ T7713] FAT-fs (loop1): Directory bread(block 72) failed [ 209.177348][ T7713] FAT-fs (loop1): Directory bread(block 73) failed [ 210.737338][ T1699] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 210.952115][ T1699] usb 2-1: no configurations [ 210.970023][ T1699] usb 2-1: can't read configurations, error -22 [ 211.809526][ T1699] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 212.038056][ T1699] usb 2-1: no configurations [ 212.043003][ T1699] usb 2-1: can't read configurations, error -22 [ 212.076122][ T1699] usb usb2-port1: attempt power cycle [ 212.498566][ T1699] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 212.559435][ T1699] usb 2-1: no configurations [ 212.564338][ T1699] usb 2-1: can't read configurations, error -22 [ 212.706484][ T7597] Bluetooth: hci3: unexpected event for opcode 0x1004 [ 212.727050][ T1699] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 212.778368][ T1699] usb 2-1: no configurations [ 212.783160][ T1699] usb 2-1: can't read configurations, error -22 [ 212.795607][ T1699] usb usb2-port1: unable to enumerate USB device [ 214.230056][ T7809] fuse: Bad value for 'fd' [ 214.435767][ T7817] fuse: Bad value for 'fd' [ 214.474074][ T7819] overlayfs: failed to clone upperpath [ 214.790358][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 215.580555][ T7850] fuse: Bad value for 'fd' [ 216.558802][ T7876] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 216.808589][ T7597] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 217.135517][ T7597] Bluetooth: hci3: Injecting HCI hardware error event [ 217.144217][ T7597] Bluetooth: hci3: hardware error 0x00 [ 217.149370][ T7874] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 217.519368][ T28] audit: type=1326 audit(1778153232.645:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7881 comm="syz.2.716" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a7ab9cdd9 code=0x7ffc0000 [ 217.555571][ T7882] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[7884] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7882] [ 217.616033][ T28] audit: type=1326 audit(1778153232.675:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7881 comm="syz.2.716" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a7ab9cdd9 code=0x7ffc0000 [ 217.666813][ T28] audit: type=1326 audit(1778153232.675:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7881 comm="syz.2.716" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=438 compat=0 ip=0x7f2a7ab9cdd9 code=0x7ffc0000 [ 217.711628][ T28] audit: type=1326 audit(1778153232.705:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7881 comm="syz.2.716" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a7ab9cdd9 code=0x7ffc0000 [ 217.736071][ C0] vkms_vblank_simulate: vblank timer overrun [ 219.192243][ T7931] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 219.222365][ T7934] fuse: Bad value for 'fd' [ 219.747191][ T7597] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 220.214549][ T7943] ceph: No mds server is up or the cluster is laggy [ 220.810758][ T7972] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 221.064699][ T7980] netlink: 12 bytes leftover after parsing attributes in process `syz.2.751'. [ 221.414734][ T7982] Set syz1 is full, maxelem 6117 reached [ 221.874076][ T7995] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 221.973474][ T8001] netlink: 12 bytes leftover after parsing attributes in process `syz.2.760'. [ 223.361209][ T8036] netlink: 'syz.2.770': attribute type 10 has an invalid length. [ 223.386315][ T8033] netlink: 12 bytes leftover after parsing attributes in process `syz.3.772'. [ 224.256259][ T8043] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 224.490601][ T8040] ceph: No mds server is up or the cluster is laggy [ 224.516497][ T1699] libceph: connect (1)[c::]:6789 error -101 [ 224.562312][ T1699] libceph: mon0 (1)[c::]:6789 connect error [ 224.691746][ T8047] fuse: Bad value for 'fd' [ 224.864431][ T8056] netlink: 'syz.3.778': attribute type 1 has an invalid length. [ 224.968685][ T8056] 8021q: adding VLAN 0 to HW filter on device bond2 [ 225.069311][ T8059] bond2: (slave geneve2): making interface the new active one [ 225.122604][ T8059] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 225.163434][ T8067] netlink: 'syz.2.783': attribute type 10 has an invalid length. [ 225.211686][ T8067] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.253388][ T8067] team0: Port device bond0 added [ 225.439197][ T8059] syz.3.778 (8059) used greatest stack depth: 18512 bytes left [ 225.493922][ T8076] netlink: 'syz.0.785': attribute type 10 has an invalid length. [ 226.272005][ T5811] libceph: connect (1)[c::]:6789 error -101 [ 226.287785][ T5811] libceph: mon0 (1)[c::]:6789 connect error [ 226.573571][ T5811] libceph: connect (1)[c::]:6789 error -101 [ 226.583254][ T5811] libceph: mon0 (1)[c::]:6789 connect error [ 227.143046][ T8119] netlink: 'syz.1.801': attribute type 10 has an invalid length. [ 227.273230][ T27] libceph: connect (1)[c::]:6789 error -101 [ 227.279759][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 227.312697][ T8099] ceph: No mds server is up or the cluster is laggy [ 228.888841][ T8146] netlink: 'syz.3.811': attribute type 10 has an invalid length. [ 229.282121][ T5811] libceph: connect (1)[c::]:6789 error -101 [ 229.317800][ T5811] libceph: mon0 (1)[c::]:6789 connect error [ 229.836462][ T8157] ceph: No mds server is up or the cluster is laggy [ 230.227611][ T8170] overlayfs: failed to clone upperpath [ 231.124032][ T8181] netlink: 'syz.0.822': attribute type 10 has an invalid length. [ 232.118765][ T8189] ceph: No mds server is up or the cluster is laggy [ 232.190109][ T8191] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 232.886387][ T5809] libceph: connect (1)[c::]:6789 error -101 [ 233.050646][ T5809] libceph: mon0 (1)[c::]:6789 connect error [ 233.230408][ T8206] ceph: No mds server is up or the cluster is laggy [ 233.737578][ T8225] netlink: 'syz.2.834': attribute type 10 has an invalid length. [ 236.411707][ T8271] netlink: 'syz.0.848': attribute type 10 has an invalid length. [ 236.740904][ T8274] netlink: 36 bytes leftover after parsing attributes in process `syz.3.851'. [ 236.755078][ T8273] input: syz1 as /devices/virtual/input/input7 [ 236.835171][ T27] libceph: connect (1)[c::]:6789 error -101 [ 236.903248][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 236.911021][ T8280] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 237.079948][ T8287] netlink: 'syz.0.854': attribute type 49 has an invalid length. [ 237.167297][ T8277] ceph: No mds server is up or the cluster is laggy [ 237.179555][ T27] libceph: connect (1)[c::]:6789 error -101 [ 237.190336][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 237.201549][ T8287] ip6gretap0: entered promiscuous mode [ 237.263339][ T8287] ip6gretap0: entered allmulticast mode [ 237.483770][ T8292] netlink: 44 bytes leftover after parsing attributes in process `syz.2.856'. [ 237.501098][ T8292] ------------[ cut here ]------------ [ 237.506685][ T8292] memcpy: detected field-spanning write (size 32) of single field "&new->sel" at net/sched/cls_u32.c:855 (size 16) [ 237.548467][ T8292] WARNING: CPU: 0 PID: 8292 at net/sched/cls_u32.c:855 u32_change+0x1c5a/0x24f0 [ 237.558069][ T8292] Modules linked in: [ 237.562009][ T8292] CPU: 0 PID: 8292 Comm: syz.2.856 Not tainted syzkaller #0 [ 237.569826][ T8292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 237.580010][ T8292] RIP: 0010:u32_change+0x1c5a/0x24f0 [ 237.585443][ T8292] Code: f8 eb 59 e8 48 93 d8 f8 c6 05 51 30 c7 05 01 b9 10 00 00 00 48 c7 c7 00 6b c7 8b 4c 89 f6 48 c7 c2 80 6b c7 8b e8 a6 49 a2 f8 <0f> 0b e9 86 f0 ff ff e8 1a 93 d8 f8 eb 24 e8 13 93 d8 f8 c6 05 eb [ 237.605569][ T8292] RSP: 0018:ffffc9000b7ded40 EFLAGS: 00010246 [ 237.611997][ T8292] RAX: b16d319bea423c00 RBX: ffff88801db24c00 RCX: 0000000000080000 [ 237.620146][ T8292] RDX: ffffc9000d069000 RSI: 0000000000006329 RDI: 000000000000632a [ 237.628815][ T8292] RBP: ffffc9000b7deef8 R08: ffffc9000b7de947 R09: 1ffff920016fbd28 [ 237.637054][ T8292] R10: dffffc0000000000 R11: fffff520016fbd29 R12: ffff888025509000 [ 237.645172][ T8292] R13: ffff8880255090e8 R14: 0000000000000020 R15: ffff88802d091dc0 [ 237.653273][ T8292] FS: 00007f2a7ba8c6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 237.662830][ T8292] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 237.669930][ T8292] CR2: 00007f56cb30e440 CR3: 000000002f2cb000 CR4: 00000000003506f0 [ 237.678055][ T8292] Call Trace: [ 237.681384][ T8292] [ 237.684359][ T8292] ? tc_new_tfilter+0x8f7/0x17c0 [ 237.689438][ T8292] ? u32_get+0x370/0x370 [ 237.693748][ T8292] ? u32_get+0x370/0x370 [ 237.698526][ T8292] tc_new_tfilter+0x11f9/0x17c0 [ 237.703745][ T8292] ? tcf_proto_signal_destroying+0x240/0x240 [ 237.710023][ T8292] ? rcu_read_unlock+0x8c/0xa0 [ 237.714859][ T8292] ? tcf_proto_signal_destroying+0x240/0x240 [ 237.721384][ T8292] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 237.726549][ T8292] ? tcf_proto_signal_destroying+0x240/0x240 [ 237.733416][ T8292] rtnetlink_rcv_msg+0x8b8/0xfa0 [ 237.738927][ T8292] ? lockdep_hardirqs_on+0x98/0x150 [ 237.744351][ T8292] ? rtnetlink_bind+0x80/0x80 [ 237.749328][ T8292] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 237.755322][ T8292] ? lock_chain_count+0x20/0x20 [ 237.760717][ T8292] ? __local_bh_enable_ip+0x13a/0x1c0 [ 237.766132][ T8292] ? lockdep_hardirqs_on+0x98/0x150 [ 237.771741][ T8292] ? __local_bh_enable_ip+0x13a/0x1c0 [ 237.777644][ T8292] ? _local_bh_enable+0xa0/0xa0 [ 237.782576][ T8292] ? __dev_queue_xmit+0x265/0x3660 [ 237.788141][ T8292] ? __dev_queue_xmit+0x265/0x3660 [ 237.793315][ T8292] ? __dev_queue_xmit+0x1b2c/0x3660 [ 237.798918][ T8292] ? __dev_queue_xmit+0x265/0x3660 [ 237.804095][ T8292] ? ref_tracker_free+0x690/0x840 [ 237.809574][ T8292] netlink_rcv_skb+0x241/0x4d0 [ 237.814742][ T8292] ? rtnetlink_bind+0x80/0x80 [ 237.819860][ T8292] ? netlink_ack+0x1180/0x1180 [ 237.824694][ T8292] ? __lock_acquire+0x7d40/0x7d40 [ 237.830638][ T8292] ? netlink_deliver_tap+0x2e/0x1b0 [ 237.836031][ T8292] netlink_unicast+0x751/0x8d0 [ 237.840995][ T8292] netlink_sendmsg+0x8d0/0xbf0 [ 237.845822][ T8292] ? netlink_getsockopt+0x590/0x590 [ 237.851456][ T8292] ? aa_sock_msg_perm+0x94/0x150 [ 237.856464][ T8292] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 237.861987][ T8292] ? security_socket_sendmsg+0x80/0xa0 [ 237.867715][ T8292] ? netlink_getsockopt+0x590/0x590 [ 237.872957][ T8292] ____sys_sendmsg+0x5ba/0x960 [ 237.878071][ T8292] ? __asan_memset+0x22/0x40 [ 237.882831][ T8292] ? __sys_sendmsg_sock+0x30/0x30 [ 237.887979][ T8292] ? __import_iovec+0x5f2/0x850 [ 237.892881][ T8292] ? import_iovec+0x73/0xa0 [ 237.897515][ T8292] ___sys_sendmsg+0x2a6/0x360 [ 237.902426][ T8292] ? __sys_sendmsg+0x2a0/0x2a0 [ 237.907365][ T8292] __sys_sendmmsg+0x2ca/0x510 [ 237.912120][ T8292] ? __ia32_sys_sendmsg+0x90/0x90 [ 237.917299][ T8292] ? __ia32_sys_get_robust_list+0x110/0x110 [ 237.923270][ T8292] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 237.929391][ T8292] ? lock_chain_count+0x20/0x20 [ 237.934899][ T8292] __x64_sys_sendmmsg+0xa0/0xb0 [ 237.940061][ T8292] do_syscall_64+0x55/0xa0 [ 237.944572][ T8292] ? clear_bhb_loop+0x40/0x90 [ 237.949384][ T8292] ? clear_bhb_loop+0x40/0x90 [ 237.954133][ T8292] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 237.960207][ T8292] RIP: 0033:0x7f2a7ab9cdd9 [ 237.964687][ T8292] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 237.984698][ T8292] RSP: 002b:00007f2a7ba8c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 237.993216][ T8292] RAX: ffffffffffffffda RBX: 00007f2a7ae15fa0 RCX: 00007f2a7ab9cdd9 [ 238.001319][ T8292] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000005 [ 238.009405][ T8292] RBP: 00007f2a7ac32d69 R08: 0000000000000000 R09: 0000000000000000 [ 238.017553][ T8292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 238.025623][ T8292] R13: 00007f2a7ae16038 R14: 00007f2a7ae15fa0 R15: 00007ffd10f1e1a8 [ 238.033714][ T8292] [ 238.037432][ T8292] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 238.044744][ T8292] CPU: 0 PID: 8292 Comm: syz.2.856 Not tainted syzkaller #0 [ 238.052308][ T8292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 238.062476][ T8292] Call Trace: [ 238.065827][ T8292] [ 238.068769][ T8292] dump_stack_lvl+0x18c/0x250 [ 238.073566][ T8292] ? show_regs_print_info+0x20/0x20 [ 238.078803][ T8292] ? load_image+0x420/0x420 [ 238.083338][ T8292] panic+0x2dc/0x730 [ 238.087352][ T8292] ? bpf_jit_dump+0xd0/0xd0 [ 238.091885][ T8292] __warn+0x2e0/0x470 [ 238.095885][ T8292] ? u32_change+0x1c5a/0x24f0 [ 238.100579][ T8292] ? u32_change+0x1c5a/0x24f0 [ 238.105378][ T8292] report_bug+0x2be/0x4f0 [ 238.109739][ T8292] ? u32_change+0x1c5a/0x24f0 [ 238.114462][ T8292] ? u32_change+0x1c5a/0x24f0 [ 238.119183][ T8292] ? u32_change+0x1c5c/0x24f0 [ 238.123889][ T8292] handle_bug+0xcf/0x120 [ 238.128158][ T8292] exc_invalid_op+0x1a/0x50 [ 238.132879][ T8292] asm_exc_invalid_op+0x1a/0x20 [ 238.137745][ T8292] RIP: 0010:u32_change+0x1c5a/0x24f0 [ 238.143232][ T8292] Code: f8 eb 59 e8 48 93 d8 f8 c6 05 51 30 c7 05 01 b9 10 00 00 00 48 c7 c7 00 6b c7 8b 4c 89 f6 48 c7 c2 80 6b c7 8b e8 a6 49 a2 f8 <0f> 0b e9 86 f0 ff ff e8 1a 93 d8 f8 eb 24 e8 13 93 d8 f8 c6 05 eb [ 238.163025][ T8292] RSP: 0018:ffffc9000b7ded40 EFLAGS: 00010246 [ 238.169200][ T8292] RAX: b16d319bea423c00 RBX: ffff88801db24c00 RCX: 0000000000080000 [ 238.177198][ T8292] RDX: ffffc9000d069000 RSI: 0000000000006329 RDI: 000000000000632a [ 238.185208][ T8292] RBP: ffffc9000b7deef8 R08: ffffc9000b7de947 R09: 1ffff920016fbd28 [ 238.193220][ T8292] R10: dffffc0000000000 R11: fffff520016fbd29 R12: ffff888025509000 [ 238.201225][ T8292] R13: ffff8880255090e8 R14: 0000000000000020 R15: ffff88802d091dc0 [ 238.209233][ T8292] ? tc_new_tfilter+0x8f7/0x17c0 [ 238.214224][ T8292] ? u32_get+0x370/0x370 [ 238.218588][ T8292] ? u32_get+0x370/0x370 [ 238.222844][ T8292] tc_new_tfilter+0x11f9/0x17c0 [ 238.227735][ T8292] ? tcf_proto_signal_destroying+0x240/0x240 [ 238.233744][ T8292] ? rcu_read_unlock+0x8c/0xa0 [ 238.238629][ T8292] ? tcf_proto_signal_destroying+0x240/0x240 [ 238.244636][ T8292] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 238.249761][ T8292] ? tcf_proto_signal_destroying+0x240/0x240 [ 238.255764][ T8292] rtnetlink_rcv_msg+0x8b8/0xfa0 [ 238.260721][ T8292] ? lockdep_hardirqs_on+0x98/0x150 [ 238.265965][ T8292] ? rtnetlink_bind+0x80/0x80 [ 238.270660][ T8292] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 238.276751][ T8292] ? lock_chain_count+0x20/0x20 [ 238.281631][ T8292] ? __local_bh_enable_ip+0x13a/0x1c0 [ 238.287016][ T8292] ? lockdep_hardirqs_on+0x98/0x150 [ 238.292227][ T8292] ? __local_bh_enable_ip+0x13a/0x1c0 [ 238.297868][ T8292] ? _local_bh_enable+0xa0/0xa0 [ 238.302742][ T8292] ? __dev_queue_xmit+0x265/0x3660 [ 238.308045][ T8292] ? __dev_queue_xmit+0x265/0x3660 [ 238.313177][ T8292] ? __dev_queue_xmit+0x1b2c/0x3660 [ 238.318425][ T8292] ? __dev_queue_xmit+0x265/0x3660 [ 238.323563][ T8292] ? ref_tracker_free+0x690/0x840 [ 238.328621][ T8292] netlink_rcv_skb+0x241/0x4d0 [ 238.333445][ T8292] ? rtnetlink_bind+0x80/0x80 [ 238.338174][ T8292] ? netlink_ack+0x1180/0x1180 [ 238.343078][ T8292] ? __lock_acquire+0x7d40/0x7d40 [ 238.348142][ T8292] ? netlink_deliver_tap+0x2e/0x1b0 [ 238.353547][ T8292] netlink_unicast+0x751/0x8d0 [ 238.358745][ T8292] netlink_sendmsg+0x8d0/0xbf0 [ 238.363630][ T8292] ? netlink_getsockopt+0x590/0x590 [ 238.368867][ T8292] ? aa_sock_msg_perm+0x94/0x150 [ 238.373851][ T8292] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 238.379268][ T8292] ? security_socket_sendmsg+0x80/0xa0 [ 238.384751][ T8292] ? netlink_getsockopt+0x590/0x590 [ 238.390117][ T8292] ____sys_sendmsg+0x5ba/0x960 [ 238.394908][ T8292] ? __asan_memset+0x22/0x40 [ 238.399515][ T8292] ? __sys_sendmsg_sock+0x30/0x30 [ 238.404638][ T8292] ? __import_iovec+0x5f2/0x850 [ 238.409596][ T8292] ? import_iovec+0x73/0xa0 [ 238.414113][ T8292] ___sys_sendmsg+0x2a6/0x360 [ 238.418812][ T8292] ? __sys_sendmsg+0x2a0/0x2a0 [ 238.423628][ T8292] __sys_sendmmsg+0x2ca/0x510 [ 238.428344][ T8292] ? __ia32_sys_sendmsg+0x90/0x90 [ 238.433475][ T8292] ? __ia32_sys_get_robust_list+0x110/0x110 [ 238.439393][ T8292] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 238.445394][ T8292] ? lock_chain_count+0x20/0x20 [ 238.450544][ T8292] __x64_sys_sendmmsg+0xa0/0xb0 [ 238.455420][ T8292] do_syscall_64+0x55/0xa0 [ 238.459846][ T8292] ? clear_bhb_loop+0x40/0x90 [ 238.464537][ T8292] ? clear_bhb_loop+0x40/0x90 [ 238.469320][ T8292] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 238.475313][ T8292] RIP: 0033:0x7f2a7ab9cdd9 [ 238.479744][ T8292] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 238.499363][ T8292] RSP: 002b:00007f2a7ba8c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 238.507973][ T8292] RAX: ffffffffffffffda RBX: 00007f2a7ae15fa0 RCX: 00007f2a7ab9cdd9 [ 238.515963][ T8292] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000005 [ 238.524126][ T8292] RBP: 00007f2a7ac32d69 R08: 0000000000000000 R09: 0000000000000000 [ 238.532125][ T8292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 238.540290][ T8292] R13: 00007f2a7ae16038 R14: 00007f2a7ae15fa0 R15: 00007ffd10f1e1a8 [ 238.548582][ T8292] [ 238.552193][ T8292] Kernel Offset: disabled [ 238.556601][ T8292] Rebooting in 86400 seconds..