last executing test programs: 16m46.875883466s ago: executing program 32 (id=139): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) futex(0x0, 0x85, 0x100002, 0x0, 0x0, 0xfffffffc) syz_mount_image$erofs(&(0x7f0000000100), &(0x7f0000000580)='./file1\x00', 0x1000c01, &(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYRESHEX], 0x2, 0x231, &(0x7f0000000240)="$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") getdents64(0xffffffffffffffff, 0x0, 0x0) chdir(&(0x7f00000000c0)='./sys\x00') syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1204401, &(0x7f00000000c0)={[{@grpjquota}, {@errors_continue}, {@noblock_validity}]}, 0x1, 0x4ca, &(0x7f0000000500)="$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") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008054}}, {{&(0x7f00000003c0)=@file={0x1, './file1\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x80}}], 0x2, 0x0) 16m9.483977212s ago: executing program 33 (id=400): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0xfffffe14) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0xfffe, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x90, {0x8, 0x3, 0x0, {0xfffffffffffffffd, 0xfffffffffffffa25, 0xfffffffffffffffc, 0x0, 0x8, 0xfffffffb, 0xfffffffe, 0x0, 0x80000, 0x8000, 0x0, 0x0, r2, 0x1, 0xc}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000380)=@mmap={0x1, 0x3, 0x4, 0x100, 0x81, {}, {0x5, 0x8, 0x8, 0x5, 0x5, 0xfa, "0adb3fb8"}, 0x2, 0x1, {}, 0x3ff}) lseek(r3, 0xf184, 0x2) 15m58.611424219s ago: executing program 34 (id=440): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x11000) writev(r2, &(0x7f0000000e00)=[{&(0x7f0000000a40)='^', 0x1}], 0x1) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 15m56.318108537s ago: executing program 1 (id=451): bpf$ENABLE_STATS(0x20, 0x0, 0x0) mount$bpf(0x200000000000, 0x0, 0x0, 0x989046, 0x0) r0 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) fchdir(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x7, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r4, r2}, 0x14) syz_emit_ethernet(0xd81, &(0x7f0000001580)=ANY=[], 0x0) 15m55.93825653s ago: executing program 1 (id=453): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1c, r2, 0x331, 0x1ffc, 0x40000000, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400400c}, 0x0) 15m54.629234771s ago: executing program 1 (id=456): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x7, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2d, &(0x7f0000000100)=0x6, 0x4) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x200000000009, 0x0, 0xfffffffffffffffe, 0x8000000000000000, 0x0, 0x4002004c4, 0x1004, 0x8000000000000003, 0xdd37, 0xfda, 0xfffffffffffffffe, 0xffffffffffffffff, 0x3, 0xb3, 0x48d], 0xeeee8000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15m54.232039706s ago: executing program 1 (id=457): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) r1 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x7, 0xe26, 0x0, 0x0, 0x1000, 0x10000}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x20fb89, 0x800, 0x1, 0x32c}, &(0x7f0000000840)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8000, 0x1006, 0x27b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x8, 0x2, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x400, 0x3, 0xfffffffc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf82e, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x871629fa8e454117, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff5, 0x8a2, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) 15m52.989936864s ago: executing program 1 (id=462): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x475, 0x4, 0x3}, 0x1c) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x4003, 0x2, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmsg$unix(r2, &(0x7f0000000100)={0x0, 0x1d, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000700)=""/4080, 0xff0}], 0x1}, 0x20) 15m51.173089881s ago: executing program 1 (id=468): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x2002, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x1, 0x8}, @window={0x3, 0x6, 0x7}, @sack_perm, @window={0x3, 0x0, 0x4}, @mss={0x2, 0x4}, @timestamp, @window={0x3, 0x1, 0x10}, @sack_perm], 0x20000000000002a1) sendmsg$inet(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000080)="e48a9e5e6645f507e38fed89cdd27e3e72e44ed9b423b84ee6", 0x19}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 15m50.959752042s ago: executing program 35 (id=468): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x2002, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x1, 0x8}, @window={0x3, 0x6, 0x7}, @sack_perm, @window={0x3, 0x0, 0x4}, @mss={0x2, 0x4}, @timestamp, @window={0x3, 0x1, 0x10}, @sack_perm], 0x20000000000002a1) sendmsg$inet(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000080)="e48a9e5e6645f507e38fed89cdd27e3e72e44ed9b423b84ee6", 0x19}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 15m47.648909824s ago: executing program 5 (id=483): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r1, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0xb, 0x0, 0x0) sendmsg$rds(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0) 15m46.714173573s ago: executing program 5 (id=486): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x1}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x73682a85, 0x1001}, @flat=@binder={0x73622a85, 0x1001}, @flat=@handle={0x73682a85, 0x110b, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 15m45.854181917s ago: executing program 5 (id=488): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) sendmmsg(r0, &(0x7f0000001100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4010) 15m44.094389364s ago: executing program 5 (id=491): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) write(0xffffffffffffffff, &(0x7f0000000380)='100000', 0x6) write(0xffffffffffffffff, &(0x7f0000000200)='1', 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r0, &(0x7f0000000280)='0', 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000a40)={[{@nobh}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@oldalloc}, {@lazytime}, {@noinit_itable}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$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") syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000180)={'veth1_macvtap\x00', 0x44}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[], 0xd8}}, 0x0) 15m43.528772152s ago: executing program 5 (id=492): timer_create(0x3, 0x0, &(0x7f00000001c0)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0xfffffffd, 0x0, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r1 = gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x6, 0x7fc00100}]}) timer_create(0x4, 0x0, 0x0) tkill(r1, 0x7) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r2, 0xffffffffffffffff, 0x0) 15m42.880518416s ago: executing program 5 (id=497): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) semget(0x0, 0x4, 0x39c) sched_setaffinity(0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) semop(0x0, &(0x7f00000000c0)=[{0x1, 0xff80, 0x1400}], 0x1) semop(0x0, &(0x7f0000000600)=[{0x3, 0x7f, 0x800}, {0x1, 0xbbdb}, {0x1, 0x5, 0x800}], 0x3) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000140)=[0x6, 0x7fff]) 15m42.170544361s ago: executing program 36 (id=497): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) semget(0x0, 0x4, 0x39c) sched_setaffinity(0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) semop(0x0, &(0x7f00000000c0)=[{0x1, 0xff80, 0x1400}], 0x1) semop(0x0, &(0x7f0000000600)=[{0x3, 0x7f, 0x800}, {0x1, 0xbbdb}, {0x1, 0x5, 0x800}], 0x3) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000140)=[0x6, 0x7fff]) 15m26.050202581s ago: executing program 2 (id=533): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$kcm(r1, &(0x7f0000005140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/182, 0xb6}], 0x1}, 0x100b6) close(r3) 15m24.880906205s ago: executing program 2 (id=536): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000001bc0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x100, 0x2) setxattr$trusted_overlay_upper(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x0, 0x0, 0x3) fchownat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff, 0x100) 15m24.211513973s ago: executing program 2 (id=538): r0 = socket(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480), 0x4) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000140)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000002, 0x204031, 0xffffffffffffffff, 0xe60d3000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001e40)=""/174, 0xae}], 0x1}, 0x1}], 0x1, 0x40002122, 0x0) sendmsg$tipc(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x2}}, 0x10, 0x0}, 0x4800) 15m23.700224431s ago: executing program 2 (id=539): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000000)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x103c41, 0x114) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r0, &(0x7f0000000180)='p:s/p ./file0:0', 0xf) 15m23.063021363s ago: executing program 2 (id=541): r0 = gettid() wait4(0x0, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) statfs(0x0, 0x0) fsopen(0x0, 0x1) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000680)=@filter={'filter\x00', 0xe, 0x4, 0x3b0, 0xffffffff, 0x240, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x328, 0x328, 0x328, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xd0}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth0_to_team\x00', {0x74, 0x5, 0x6, 0x3, 0x8, 0xc, 0x4, 0x20, 0x78}, {0xfffffffffffff4bc}}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}, {{@ipv6={@mcast1, @empty, [0x0, 0x0, 0xffffff00], [], '\x00', 'syzkaller1\x00', {}, {}, 0x0, 0x0, 0x5}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x5, 0x3, 0x9, 0x1, 0x1, 0x3, 0x10, 0x200]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410) 15m21.019441713s ago: executing program 2 (id=550): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @multicast2}, 0x10) listen(r0, 0x203) setsockopt$inet_int(r0, 0x0, 0xa, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, 0x0, 0x0) listen(r1, 0x74a) 15m20.612450081s ago: executing program 37 (id=550): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @multicast2}, 0x10) listen(r0, 0x203) setsockopt$inet_int(r0, 0x0, 0xa, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, 0x0, 0x0) listen(r1, 0x74a) 11m17.691765884s ago: executing program 3 (id=1739): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000080)={[{@grpid}, {@usrjquota_path={'usrjquota', 0x3d, './file0'}}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) futex(&(0x7f0000000200)=0x1, 0x6, 0x0, &(0x7f0000000240)={0x77359400}, 0x0, 0xffffffff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r1, 0x0) 11m15.948189291s ago: executing program 3 (id=1747): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="0383", 0x2}], 0x1}, 0x4011) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x16f}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x40, 0x20ff, 0x10000004, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0x2, 0x200148}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x2b060a919de89952, 0x0, 0x1f0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd9b4, 0x2000, 0x2, 0x363}}], 0x1, &(0x7f0000000340)={0x2e, 0x26, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, r5, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x28}}, 0x0) 11m14.598337275s ago: executing program 3 (id=1752): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000002c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) semctl$SEM_INFO(0x0, 0x1, 0x13, 0x0) keyctl$get_security(0x11, 0x0, 0x0, 0x0) 11m13.110540778s ago: executing program 3 (id=1758): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@discard}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x563, &(0x7f0000001240)="$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") open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x5) io_setup(0x400, &(0x7f0000000080)=0x0) io_submit(r2, 0x1, &(0x7f0000001240)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r1, &(0x7f0000000000)="0300ffff0000", 0x6}]) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x9c42, 0x140) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write$cgroup_netprio_ifpriomap(r3, &(0x7f0000000240)=ANY=[], 0xfff5) 11m12.448846738s ago: executing program 3 (id=1765): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000003700)) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x1003ffffffc]}, 0x8, 0x800) poll(0x0, 0x0, 0x90) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) sync() prctl$PR_SET_SECUREBITS(0x1c, 0x2c) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x3c, 0x3) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/profiling', 0x1, 0x1cc) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)='9,', 0x2}], 0x1) 11m10.288535972s ago: executing program 3 (id=1771): openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) r0 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040110700090001010203010902200001010080fa0904000002070102000705810200020007050202"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001ec0)={0x2c, &(0x7f0000001c40), 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_emit_ethernet(0xde, 0x0, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0x11}], 0x2) pselect6(0x40, &(0x7f0000000080)={0x5, 0x3, 0x248, 0x5d92, 0x9, 0x1ce, 0x7fff, 0x2}, 0x0, &(0x7f0000000140)={0x3ff, 0x80, 0x5, 0x0, 0x101, 0xafc2, 0x5, 0x1}, 0x0, 0x0) close(0x3) 11m9.626192512s ago: executing program 38 (id=1771): openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) r0 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040110700090001010203010902200001010080fa0904000002070102000705810200020007050202"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001ec0)={0x2c, &(0x7f0000001c40), 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_emit_ethernet(0xde, 0x0, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0x11}], 0x2) pselect6(0x40, &(0x7f0000000080)={0x5, 0x3, 0x248, 0x5d92, 0x9, 0x1ce, 0x7fff, 0x2}, 0x0, &(0x7f0000000140)={0x3ff, 0x80, 0x5, 0x0, 0x101, 0xafc2, 0x5, 0x1}, 0x0, 0x0) close(0x3) 2m17.627503608s ago: executing program 8 (id=3681): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xa}, 0x94) mount(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_open_procfs(0x0, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys\x00', 0x1ff) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') pread64(r1, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) syz_ublk_setup_io_uring(0x20, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140)) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 2m16.84966762s ago: executing program 8 (id=3684): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x9, &(0x7f0000000300)=ANY=[@ANYBLOB="b7020000000000007b2ac0ff00000000632ac8ff00000000bfa200000000000007020000c0ffffffb703000040000000b704000000000000850000004500000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r2, @ANYRES32=r2], 0x44}}, 0x2000800) 2m15.856613837s ago: executing program 8 (id=3696): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c"], 0x1c}, 0x1, 0x0, 0x0, 0x20005891}, 0x20000000) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x20}) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0xd, 0x80}]}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000200)=[@rdmsr={0x66, 0x18, {0x400000f3}}], 0x18}) memfd_create(&(0x7f00000000c0)=',\xea\xc9t\x8b\xb7\x04\x1d^s^\t5\xa1i\x01\x00\xd4\xd7\x02\x8dmbs\x0f3\x92\'\x94N\b\xe0m\xa4\x01\x00\xe5\x00\x00\x00\x00\x00-\xb3\x8d\xa1v\xe5\x8a0\x05\x00\xa4\xed\x94 \x15Y\x1f\xccY\xff\xb4\xa2\xa62:\xfa\xf9\xb7\x05q\xa4d\xda0y\xd3\xd6\x98\x9f\x11\n\xf44Q\xff\xff)\xb3|\x04\x00\x00\x80FD\xb8\xc2\x8a\x99Y\xf6:\xfeT\xa1', 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0x1c, 0x0, 0x5, 0x1], 0x0, 0x41981}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m15.187778716s ago: executing program 8 (id=3687): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x9, 0x4, 0x4, 0x100, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r0}, 0x0, &(0x7f0000000400)}, 0x20) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x2000000, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c636865636b3d72656c617865642c646d61736b3d30303030303030303030303030303030303030303036322c666c7573682c00ed65503ccec9beef4e3a71579390a78893cf794eabe67967531177a5a8a723cb36529bc238be0bc2df664dee9ab34c2269c61c143e0c11a83b8a7214e0a160bcc29b3c030bf99ccb18520651f6cb1a99bbe9b6f8235a156c38c8cb2a8312538163a9da8fb380c7caa6475b7003c0e3003e88bd4ef6abe8b7c2dad0d8e397576687df8ae41502420d0aba004f5b98e9a286"], 0x1, 0x2cb, &(0x7f0000000540)="$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") r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x1, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x2) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x20000, {0xa, 0x38, 0x30, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14, 0x6, {0x2, 0x2, 0x6, 0xfff}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0xfffffffe, 0x0, {0xa, 0x0, 0x46, 0xfe, r6}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_RT_PRIORITY={0x8, 0x9, 0x2}]}, 0x34}}, 0x0) 2m13.528073322s ago: executing program 8 (id=3691): socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f00000000c0)=0x8, 0x4) syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102384, 0x18ff0) ioctl$SNDRV_PCM_IOCTL_PAUSE(0xffffffffffffffff, 0x40044145, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 2m11.911535439s ago: executing program 8 (id=3693): r0 = socket$rds(0x15, 0x5, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) listen(0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mkdirat(0xffffffffffffffff, &(0x7f0000000200)='./config/file0\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000680), 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x4, 0x8, &(0x7f00000006c0)='\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) 1m56.314701508s ago: executing program 39 (id=3693): r0 = socket$rds(0x15, 0x5, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) listen(0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mkdirat(0xffffffffffffffff, &(0x7f0000000200)='./config/file0\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000680), 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x4, 0x8, &(0x7f00000006c0)='\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) 14.084686416s ago: executing program 0 (id=3958): socket$unix(0x1, 0x2, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) listen(r0, 0x0) accept(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$unix(0x1, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x304}, "04e7ffffff00", "fc094e36a7e397030000007e580400030000000000000000ffff00", "c700", "fffffffffffffffd"}, 0x38) writev(r2, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x10000000003, 0x3, 0x8000000000000000, 0x80, 0x1, 0xffffffffffffffff}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x1ff, 0x7fffffff}, 0x0, 0x0) 12.267828204s ago: executing program 4 (id=3973): openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0xc) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x442, 0x1ff) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x1008400, &(0x7f0000000080)=ANY=[], 0x85, 0x676, &(0x7f0000000800)="$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") setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, 0x0, 0x0) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x18e) write$binfmt_elf64(r3, 0x0, 0x78) 11.048427369s ago: executing program 6 (id=3967): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8000000000100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00'}) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x8001, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {0x0, 0x0, 0x0, 0x800, 0x7}, {0x0, 0x0, 0xe6}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@remote, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe8) r4 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) 10.815580007s ago: executing program 0 (id=3969): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) statfs(&(0x7f0000000000)='./cgroup\x00', &(0x7f00000000c0)=""/216) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x6}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0xa, 0x4, 0x1, 0x0, r3}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) 10.290562746s ago: executing program 0 (id=3971): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', 0x0}) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000980)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0x3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0x7}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000300)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x7}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200080314000e00072f01000000000000113cfdcb00000080ed00827600000000000100", 0x26}, {&(0x7f0000000780)="9942d6af00007f8f", 0xdd86}], 0x2}, 0x5) 10.010995325s ago: executing program 6 (id=3972): openat$nullb(0xffffffffffffff9c, 0x0, 0x8280, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(r0, &(0x7f0000000280)=""/59, 0x5e) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000f80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) syz_open_procfs(0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x34, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x1c4, 0x1}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4044) setns(0xc9, 0x0) r3 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00e}, 0x40800) openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x1a1) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x2b, 0x2, 0x8, "5af98c8013823e641dcf924502cf746dd86e1f9876f02214f83c793d5b3f9cc7", 0x32314d56}) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, &(0x7f00000000c0)={'filter\x00', 0x2, [{}, {}]}, 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4040080) 9.751533779s ago: executing program 7 (id=3974): ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f00000000c0)=0x2001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = syz_clone(0x0, 0x0, 0x29, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace(0x8, r3) wait4(0x0, 0x0, 0x0, 0x0) 9.670623976s ago: executing program 6 (id=3975): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x474c, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, 0x0, 0x0, 0x45833af92e4b38ff, 0x0) 9.64914618s ago: executing program 0 (id=3976): connect$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000280)=@secondary) unshare(0x480) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000780)="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", 0x559, r3) mount(0x0, 0x0, &(0x7f0000000100)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) 8.080505517s ago: executing program 7 (id=3978): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$key(0xf, 0x3, 0x2) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, 0x0, &(0x7f0000000100)) getsockopt$bt_hci(r2, 0x84, 0x7d, &(0x7f0000000840)=""/4127, &(0x7f0000000000)=0x101f) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000440)) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x8000, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) dup(r5) socket$nl_route(0x10, 0x3, 0x0) 8.079937077s ago: executing program 0 (id=3979): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000080)={0x60, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) 8.079673857s ago: executing program 6 (id=3980): socket$unix(0x1, 0x2, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) listen(r0, 0x0) accept(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$unix(0x1, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x304}, "04e7ffffff00", "fc094e36a7e397030000007e580400030000000000000000ffff00", "c700", "fffffffffffffffd"}, 0x38) writev(r2, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x10000000003, 0x3, 0x8000000000000000, 0x80, 0x1, 0xffffffffffffffff}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x1ff, 0x7fffffff}, 0x0, 0x0) 7.877983569s ago: executing program 7 (id=3981): socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f000001b080)=""/102400, 0x19000) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="68000000000905040000000000000000020000000900010073797a3000000000140002800600014000020000050002000600000008000500000000002c0004800800010000000001200002800c000100706f6c69637930000800020000000043950003000000001e", 0x68}], 0x1}, 0x4008040) 6.894999644s ago: executing program 7 (id=3984): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', 0x0, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r3, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) connect$inet(r3, &(0x7f0000000240)={0x2, 0x4e23, @private=0xa010100}, 0x10) listen(r3, 0xda8d) accept$inet(r3, 0x0, 0x0) inotify_init() eventfd2(0x4, 0x80000) 6.402339266s ago: executing program 9 (id=3985): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) statfs(&(0x7f0000000000)='./cgroup\x00', &(0x7f00000000c0)=""/216) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x6}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0xa, 0x4, 0x1, 0x0, r3}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) 5.883580515s ago: executing program 9 (id=3986): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./rpc_pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./rpc_pipefs\x00', &(0x7f0000000080)='rpc_pipefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./rpc_pipefs/gssd/clntXX/gssd\x00', 0x0, 0x49) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 5.768787788s ago: executing program 4 (id=3987): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1040, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x40) write(r5, &(0x7f0000004200)='t', 0x1) sendfile(r5, r4, 0x0, 0x7fffffff) ftruncate(r3, 0x2007ffb) sendfile(r3, r3, 0x0, 0x1000000201005) 4.862434887s ago: executing program 9 (id=3988): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', 0x0}) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000980)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0x3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0x7}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000300)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x7}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200080314000e00072f01000000000000113cfdcb00000080ed00827600000000000100", 0x26}, {&(0x7f0000000780)="9942d6af00007f8f", 0xdd86}], 0x2}, 0x5) 4.810902198s ago: executing program 6 (id=3989): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, 0x0, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000080)=0x1, 0x4) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @loopback}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) r2 = accept4$inet(r0, 0x0, 0x0, 0x0) close(r1) nanosleep(0x0, 0x0) close(r2) nanosleep(0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e21, @loopback}, 0x10) connect$inet(r3, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10) 4.524815148s ago: executing program 9 (id=3990): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000bc0)=ANY=[@ANYRES32=0x0, @ANYRESHEX=0x0, @ANYRES8=0x0], 0x1, 0x1537, &(0x7f0000001140)="$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") syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4b3, 0x0, 0x1, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) write$binfmt_script(r4, &(0x7f0000000100)={'#! ', './file1'}, 0xb) close(r4) execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0) 4.234230288s ago: executing program 4 (id=3991): ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f00000000c0)=0x2001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = syz_clone(0x0, 0x0, 0x29, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace(0x8, r3) wait4(0x0, 0x0, 0x0, 0x0) 2.649876748s ago: executing program 7 (id=3992): socket$inet_tcp(0x2, 0x1, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$unix(0x1, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$netlink(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 2.648783038s ago: executing program 4 (id=3993): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcffffff, 0x20031, 0xffffffffffffffff, 0xbe9f5000) connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e20, 0x80000000, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 2.645664469s ago: executing program 9 (id=3994): socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001b080)=""/102400, 0x19000) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="68000000000905040000000000000000020000000900010073797a3000000000140002800600014000020000050002000600000008000500000000002c0004800800010000000001200002800c000100706f6c69637930000800020000000043950003000000001e", 0x68}], 0x1}, 0x4008040) 2.439528122s ago: executing program 0 (id=3995): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x80}, 0x400000e0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x0, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c84, 0x8000, 0x3, 0xbab}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2ced, 0x2, 0x1, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x20ec4b, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 2.439326482s ago: executing program 6 (id=3996): syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000280)={0x0, 0x0}) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) sigaltstack(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket(0xa, 0x5, 0x0) sendmmsg$inet_sctp(r4, &(0x7f0000002280)=[{&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x5, @loopback, 0x5}, 0x1c, &(0x7f0000001a00)=[{&(0x7f00000003c0)="14", 0x1}], 0x1, &(0x7f0000001ac0)=[@init={0x18, 0x84, 0x0, {0xd8, 0x4, 0x135, 0x9}}], 0x18, 0x20040040}], 0x1, 0x50) 934.410035ms ago: executing program 4 (id=3997): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) statfs(&(0x7f0000000000)='./cgroup\x00', &(0x7f00000000c0)=""/216) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x6}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0xa, 0x4, 0x1, 0x0, r3}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) 826.351398ms ago: executing program 9 (id=3998): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x5, '\x00', 0x0, 0x0}, 0x50) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b00)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000500)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x18, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r6}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000780)=@generic={0x0, r7}, 0x18) 163.046436ms ago: executing program 7 (id=3999): socket$unix(0x1, 0x2, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) listen(r0, 0x0) accept(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$unix(0x1, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x304}, "04e7ffffff00", "fc094e36a7e397030000007e580400030000000000000000ffff00", "c700", "fffffffffffffffd"}, 0x38) writev(r2, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x10000000003, 0x3, 0x8000000000000000, 0x80, 0x1, 0xffffffffffffffff}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x1ff, 0x7fffffff}, 0x0, 0x0) 0s ago: executing program 4 (id=4000): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000300)={'wlan0\x00', 0x1000}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000dc0)={0x28, r1, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x85}, 0x4c040) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000032c0)={0x2c, r4, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xf9}]}, 0x2c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) kernel console output (not intermixed with test programs): lave_1): Releasing backup interface [ 482.413993][ T27] audit: type=1326 audit(1790868643.281:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12098 comm="syz.6.1857" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7f445df97ed7 code=0x0 [ 485.733239][ C0] net_ratelimit: 24 callbacks suppressed [ 486.633962][T12176] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 486.683621][T12179] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1874'. [ 487.543593][T12179] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1874'. [ 489.201586][T12214] batman_adv: batadv0: Adding interface: veth0 [ 489.255713][T12214] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 489.436512][T12214] batman_adv: batadv0: Interface activated: veth0 [ 489.503580][T12219] batman_adv: batadv0: Interface deactivated: veth0 [ 490.533020][T12219] batman_adv: batadv0: Removing interface: veth0 [ 491.093249][ C0] net_ratelimit: 26 callbacks suppressed [ 491.985001][ T27] audit: type=1804 audit(1790868658.856:182): pid=12252 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.1890" name="bus" dev="ramfs" ino=59436 res=1 errno=0 [ 492.043252][ T27] audit: type=1804 audit(1790868658.856:183): pid=12252 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.1890" name="bus" dev="ramfs" ino=59436 res=1 errno=0 [ 492.075257][T12254] loop4: detected capacity change from 0 to 512 [ 492.132412][T12254] EXT4-fs: Ignoring removed mblk_io_submit option [ 492.263972][T12254] EXT4-fs error (device loop4): ext4_iget_extra_inode:4763: inode #15: comm syz.4.1889: corrupted in-inode xattr [ 492.286915][T12254] EXT4-fs error (device loop4): ext4_orphan_get:1414: comm syz.4.1889: couldn't read orphan inode 15 (err -117) [ 492.299324][T12254] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 492.725245][T11610] EXT4-fs (loop4): unmounting filesystem. [ 496.569580][ C0] net_ratelimit: 25 callbacks suppressed [ 496.854789][T12312] ecryptfs_parse_options: eCryptfs doesn't support cipher: aes [ 496.864135][T12312] Error parsing options; rc = [-22] [ 498.963057][ T27] audit: type=1326 audit(1790868665.826:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12319 comm="syz.7.1904" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7f5884197ed7 code=0x0 [ 501.876074][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.893180][ C0] net_ratelimit: 26 callbacks suppressed [ 501.900764][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.537602][ T27] audit: type=1326 audit(1790868669.406:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12370 comm="syz.7.1914" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f588419e159 code=0x7ffc0000 [ 502.684190][ T27] audit: type=1326 audit(1790868669.466:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12370 comm="syz.7.1914" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f588419e159 code=0x7ffc0000 [ 502.908775][ T27] audit: type=1326 audit(1790868669.466:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12370 comm="syz.7.1914" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f588419e159 code=0x7ffc0000 [ 503.103349][ T27] audit: type=1326 audit(1790868669.466:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12370 comm="syz.7.1914" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f588419e159 code=0x7ffc0000 [ 503.280610][ T27] audit: type=1326 audit(1790868669.476:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12370 comm="syz.7.1914" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f588419e159 code=0x7ffc0000 [ 503.464674][ T27] audit: type=1326 audit(1790868669.476:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12370 comm="syz.7.1914" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f588419e159 code=0x7ffc0000 [ 503.518877][ T27] audit: type=1326 audit(1790868669.476:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12370 comm="syz.7.1914" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f588419e159 code=0x7ffc0000 [ 503.544356][ T27] audit: type=1326 audit(1790868669.476:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12370 comm="syz.7.1914" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f588419e159 code=0x7ffc0000 [ 503.570020][ T27] audit: type=1326 audit(1790868669.476:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12370 comm="syz.7.1914" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f588419e159 code=0x7ffc0000 [ 506.588959][ T27] kauditd_printk_skb: 23 callbacks suppressed [ 506.588973][ T27] audit: type=1326 audit(1790868673.456:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12410 comm="syz.8.1922" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7f501a397ed7 code=0x0 [ 507.093180][ C0] net_ratelimit: 24 callbacks suppressed [ 507.133291][ T7] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 507.343472][ T7] usb 5-1: Using ep0 maxpacket: 16 [ 507.353999][ T7] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 507.390081][ T7] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 507.420439][ T7] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 507.466080][ T7] usb 5-1: config 0 interface 0 has no altsetting 0 [ 507.487663][ T7] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 507.526082][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.577254][ T7] usb 5-1: config 0 descriptor?? [ 508.148804][ T27] audit: type=1326 audit(2000000001.280:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12475 comm="syz.6.1938" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f445df9e159 code=0x7ffc0000 [ 508.224175][ T27] audit: type=1326 audit(2000000001.280:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12475 comm="syz.6.1938" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f445df9e159 code=0x7ffc0000 [ 508.303792][ T27] audit: type=1326 audit(2000000001.310:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12475 comm="syz.6.1938" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f445df9e159 code=0x7ffc0000 [ 508.397539][ T7] usbhid 5-1:0.0: can't add hid device: -71 [ 508.406836][ T7] usbhid: probe of 5-1:0.0 failed with error -71 [ 508.421486][ T27] audit: type=1326 audit(2000000001.310:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12475 comm="syz.6.1938" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f445df9e159 code=0x7ffc0000 [ 508.468638][ T7] usb 5-1: USB disconnect, device number 7 [ 508.536213][ T27] audit: type=1326 audit(2000000001.310:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12475 comm="syz.6.1938" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7f445df9e159 code=0x7ffc0000 [ 508.618593][ T27] audit: type=1326 audit(2000000001.310:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12475 comm="syz.6.1938" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f445df9e159 code=0x7ffc0000 [ 508.701120][ T27] audit: type=1326 audit(2000000001.310:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12475 comm="syz.6.1938" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f445df9e159 code=0x7ffc0000 [ 508.793907][ T27] audit: type=1326 audit(2000000001.310:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12475 comm="syz.6.1938" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f445df9e159 code=0x7ffc0000 [ 508.793940][ T27] audit: type=1326 audit(2000000001.310:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12475 comm="syz.6.1938" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f445df9e159 code=0x7ffc0000 [ 512.165094][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 512.165104][ T27] audit: type=1326 audit(2000000005.300:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12568 comm="syz.6.1963" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f445df9e159 code=0x0 [ 512.213631][ T7675] net_ratelimit: 28 callbacks suppressed [ 513.343972][T12588] overlayfs: failed to clone upperpath [ 513.609666][ T27] audit: type=1326 audit(2000000006.740:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12597 comm="syz.6.1972" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f445df9e159 code=0x7ffc0000 [ 513.710553][ T27] audit: type=1326 audit(2000000006.740:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12597 comm="syz.6.1972" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f445df9e159 code=0x7ffc0000 [ 513.790823][T12601] 9pnet: p9_errstr2errno: server reported unknown error Àñ'IÓ$íÛ·=¼¼ [ 513.839140][ T27] audit: type=1326 audit(2000000006.740:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12597 comm="syz.6.1972" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f445df9e159 code=0x7ffc0000 [ 513.892179][ T27] audit: type=1326 audit(2000000006.740:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12597 comm="syz.6.1972" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f445df9e159 code=0x7ffc0000 [ 513.935235][ T27] audit: type=1326 audit(2000000006.740:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12597 comm="syz.6.1972" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7f445df9e159 code=0x7ffc0000 [ 514.228797][ T27] audit: type=1326 audit(2000000006.740:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12597 comm="syz.6.1972" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f445df9e159 code=0x7ffc0000 [ 514.553387][ T27] audit: type=1326 audit(2000000006.740:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12597 comm="syz.6.1972" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f445df9e159 code=0x7ffc0000 [ 514.680961][ T27] audit: type=1326 audit(2000000006.740:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12597 comm="syz.6.1972" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f445df9e159 code=0x7ffc0000 [ 514.705204][ T27] audit: type=1326 audit(2000000006.740:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12597 comm="syz.6.1972" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f445df9e159 code=0x7ffc0000 [ 515.184796][ T7] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 515.383237][ T7] usb 5-1: Using ep0 maxpacket: 16 [ 515.400450][ T7] usb 5-1: config 1 has an invalid descriptor of length 245, skipping remainder of the config [ 515.464814][ T7] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 515.535970][ T7] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 515.578978][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.627255][T12642] ecryptfs_parse_options: eCryptfs doesn't support cipher: aes [ 515.635228][T12642] Error parsing options; rc = [-22] [ 515.779902][ T7] usb 5-1: Product: syz [ 515.889349][ T7] usb 5-1: Manufacturer: syz [ 516.001100][ T7] usb 5-1: SerialNumber: syz [ 516.604202][ T7] usb 5-1: 0:2 : does not exist [ 516.619096][ T7] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 517.273710][ C0] net_ratelimit: 23 callbacks suppressed [ 517.401883][ T7] usb 5-1: USB disconnect, device number 8 [ 517.675994][T12610] udevd[12610]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 518.480060][T12692] ecryptfs_parse_options: eCryptfs doesn't support cipher: aes [ 518.489819][T12692] Error parsing options; rc = [-22] [ 520.657824][T12720] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2005'. [ 520.668471][T12720] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2005'. [ 520.683257][T12720] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2005'. [ 520.707945][T12720] netlink: 2 bytes leftover after parsing attributes in process `syz.9.2005'. [ 520.954078][T12726] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2005'. [ 521.347703][T12720] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2005'. [ 521.361132][T12723] device macvlan2 left promiscuous mode [ 521.372161][T12725] overlayfs: failed to clone upperpath [ 521.883744][T12735] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2020'. [ 522.242572][T12750] ecryptfs_parse_options: eCryptfs doesn't support cipher: aes [ 522.250251][T12750] Error parsing options; rc = [-22] [ 522.373573][ T4428] net_ratelimit: 26 callbacks suppressed [ 523.826220][T12810] device lo entered promiscuous mode [ 523.862841][T12810] device lo left promiscuous mode [ 525.049423][ T27] kauditd_printk_skb: 61 callbacks suppressed [ 525.049436][ T27] audit: type=1326 audit(2000000018.180:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12840 comm="syz.6.2031" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f445df9e159 code=0x7ffc0000 [ 525.153256][ T27] audit: type=1326 audit(2000000018.180:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12840 comm="syz.6.2031" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f445df9e159 code=0x7ffc0000 [ 525.326448][ T27] audit: type=1326 audit(2000000018.200:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12840 comm="syz.6.2031" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f445df9e159 code=0x7ffc0000 [ 525.351254][ T27] audit: type=1326 audit(2000000018.200:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12840 comm="syz.6.2031" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f445df9e159 code=0x7ffc0000 [ 525.393195][ T27] audit: type=1326 audit(2000000018.220:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12840 comm="syz.6.2031" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f445df9e159 code=0x7ffc0000 [ 525.502457][ T27] audit: type=1326 audit(2000000018.220:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12840 comm="syz.6.2031" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f445df9e159 code=0x7ffc0000 [ 525.623242][ T27] audit: type=1326 audit(2000000018.220:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12840 comm="syz.6.2031" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f445df9e159 code=0x7ffc0000 [ 525.712710][ T27] audit: type=1326 audit(2000000018.220:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12840 comm="syz.6.2031" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f445df9e159 code=0x7ffc0000 [ 525.752829][T12855] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2034'. [ 525.841170][ T27] audit: type=1326 audit(2000000018.220:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12840 comm="syz.6.2031" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f445df9e159 code=0x7ffc0000 [ 525.945657][ T27] audit: type=1326 audit(2000000018.220:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12840 comm="syz.6.2031" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f445df9e159 code=0x7ffc0000 [ 526.155461][T12870] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 527.190716][T12884] loop4: detected capacity change from 0 to 256 [ 527.584112][ T6722] net_ratelimit: 24 callbacks suppressed [ 528.657416][T12916] tipc: Started in network mode [ 528.785165][T12916] tipc: Node identity 1001001, cluster identity 4711 [ 528.804474][T12916] tipc: Node number set to 16781313 [ 528.846161][T12918] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2050'. [ 532.693226][ C0] net_ratelimit: 16 callbacks suppressed [ 534.312645][T13022] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2076'. [ 535.273509][ T4319] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 535.517728][ T4319] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 535.538547][ T4319] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.576256][ T4319] usb 5-1: Product: syz [ 535.590748][ T4319] usb 5-1: Manufacturer: syz [ 535.611030][ T4319] usb 5-1: SerialNumber: syz [ 536.757008][ T27] kauditd_printk_skb: 46 callbacks suppressed [ 536.757020][ T27] audit: type=1326 audit(2000000005.730:355): auid=4294967295 uid=1982771711 gid=0 ses=4294967295 subj=unconfined pid=13063 comm="syz.7.2084" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f588419e159 code=0x0 [ 537.145973][ T4319] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 537.237615][ T4319] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 537.296330][ T4319] lan78xx: probe of 5-1:1.0 failed with error -71 [ 537.322491][T13080] loop4: detected capacity change from 0 to 1024 [ 537.355460][ T4319] usb 5-1: USB disconnect, device number 9 [ 537.390225][T13080] hfsplus: invalid length 32517 has been corrected to 255 [ 537.531089][ T27] audit: type=1800 audit(2000000006.500:356): pid=13080 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2087" name="file1" dev="loop4" ino=20 res=0 errno=0 [ 537.813143][ C1] net_ratelimit: 15 callbacks suppressed [ 537.831585][T13093] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2088'. [ 538.711153][ T7675] hfsplus: b-tree write err: -5, ino 20 [ 541.247985][T13146] __vm_enough_memory: pid: 13146, comm: syz.4.2103, no enough memory for the allocation [ 542.942322][ T4451] net_ratelimit: 14 callbacks suppressed [ 543.250874][T13178] futex_wake_op: syz.8.2112 tries to shift op by 144; fix this program [ 543.906897][T13196] netlink: 'syz.6.2114': attribute type 12 has an invalid length. [ 545.273390][T13225] bridge0: port 3(bond0) entered blocking state [ 545.311386][T13225] bridge0: port 3(bond0) entered disabled state [ 545.378293][T13225] device bond0 entered promiscuous mode [ 545.412119][T13225] device bond_slave_0 entered promiscuous mode [ 545.436697][T13225] device bond_slave_1 entered promiscuous mode [ 545.455460][T13225] bridge0: port 3(bond0) entered blocking state [ 545.463025][T13225] bridge0: port 3(bond0) entered forwarding state [ 545.811257][T13245] device team0 entered promiscuous mode [ 545.859677][T13245] device team_slave_0 entered promiscuous mode [ 545.895795][T13245] device team_slave_1 entered promiscuous mode [ 545.918555][T13245] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 545.962161][T13245] device macvlan2 entered promiscuous mode [ 546.003751][T13245] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 546.131040][T13248] bridge0: port 4(vlan2) entered blocking state [ 546.167600][T13248] bridge0: port 4(vlan2) entered disabled state [ 546.252355][T13248] device vlan2 entered promiscuous mode [ 546.750688][T13264] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2131'. [ 546.798452][T13264] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2131'. [ 548.053228][ T4367] net_ratelimit: 12 callbacks suppressed [ 549.841802][T13311] autofs4:pid:13311:autofs_fill_super: called with bogus options [ 552.720351][T13359] overlayfs: failed to clone upperpath [ 553.174054][ T4448] net_ratelimit: 15 callbacks suppressed [ 553.361654][T13382] overlayfs: failed to clone upperpath [ 554.711987][T13402] pit: kvm: requested 100571 ns i8254 timer period limited to 200000 ns [ 554.772266][T13402] pit: kvm: requested 51123 ns i8254 timer period limited to 200000 ns [ 554.822315][T13402] pit: kvm: requested 41066 ns i8254 timer period limited to 200000 ns [ 554.870375][T13402] pit: kvm: requested 43580 ns i8254 timer period limited to 200000 ns [ 554.972332][T13402] pit: kvm: requested 16761 ns i8254 timer period limited to 200000 ns [ 555.008001][T13402] pit: kvm: requested 21790 ns i8254 timer period limited to 200000 ns [ 555.034716][T13413] xt_socket: unknown flags 0x4 [ 555.042810][T13402] pit: kvm: requested 112304 ns i8254 timer period limited to 200000 ns [ 555.111891][T13402] pit: kvm: requested 103923 ns i8254 timer period limited to 200000 ns [ 555.134008][T13402] pit: kvm: requested 21790 ns i8254 timer period limited to 200000 ns [ 555.156976][T13402] pit: kvm: requested 179352 ns i8254 timer period limited to 200000 ns [ 556.784484][ T27] audit: type=1326 audit(2000000025.760:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13440 comm="syz.7.2176" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f588419e159 code=0x7ffc0000 [ 556.863422][ T27] audit: type=1326 audit(2000000025.790:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13440 comm="syz.7.2176" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f588419e159 code=0x7ffc0000 [ 556.986373][ T27] audit: type=1326 audit(2000000025.790:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13440 comm="syz.7.2176" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f588419e159 code=0x7ffc0000 [ 557.091521][ T27] audit: type=1326 audit(2000000025.790:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13440 comm="syz.7.2176" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f588419e159 code=0x7ffc0000 [ 557.227745][ T27] audit: type=1326 audit(2000000025.800:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13440 comm="syz.7.2176" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f588419e159 code=0x7ffc0000 [ 557.323394][ T27] audit: type=1326 audit(2000000025.800:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13440 comm="syz.7.2176" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f588419e159 code=0x7ffc0000 [ 557.347819][ T27] audit: type=1326 audit(2000000025.800:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13440 comm="syz.7.2176" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f588419e159 code=0x7ffc0000 [ 557.374877][ T27] audit: type=1326 audit(2000000025.800:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13440 comm="syz.7.2176" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f588419e159 code=0x7ffc0000 [ 557.503322][ T27] audit: type=1326 audit(2000000025.800:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13440 comm="syz.7.2176" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f588419e159 code=0x7ffc0000 [ 557.549477][T13454] 8021q: adding VLAN 0 to HW filter on device bond3 [ 557.580655][ T27] audit: type=1326 audit(2000000025.800:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13440 comm="syz.7.2176" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f588419e159 code=0x7ffc0000 [ 557.607931][T13458] smc: net device lo applied user defined pnetid SYZ0 [ 557.884373][T13468] netlink: 'syz.6.2181': attribute type 1 has an invalid length. [ 557.912515][T13468] netlink: 'syz.6.2181': attribute type 4 has an invalid length. [ 557.951468][T13468] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.2181'. [ 557.975221][T13469] netlink: 'syz.6.2181': attribute type 1 has an invalid length. [ 558.014587][T13469] netlink: 'syz.6.2181': attribute type 4 has an invalid length. [ 558.051129][T13469] netlink: 9491 bytes leftover after parsing attributes in process `syz.6.2181'. [ 558.293351][ T4327] net_ratelimit: 14 callbacks suppressed [ 561.869691][T13573] xt_CT: No such helper "pptp" [ 562.849334][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.867422][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.318454][T13596] loop4: detected capacity change from 0 to 128 [ 563.413231][ C0] net_ratelimit: 12 callbacks suppressed [ 563.444609][T13596] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 563.532911][T13596] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 563.627533][T13602] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 563.753521][T13602] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 563.836074][T13603] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 563.959873][T13602] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 564.039710][T11610] EXT4-fs (loop4): unmounting filesystem. [ 568.564986][ T4451] net_ratelimit: 32 callbacks suppressed [ 569.091517][T13687] loop4: detected capacity change from 0 to 8 [ 570.784649][T13735] netlink: 15672 bytes leftover after parsing attributes in process `syz.9.2240'. [ 573.465595][ T27] kauditd_printk_skb: 82 callbacks suppressed [ 573.465610][ T27] audit: type=1326 audit(2000000042.440:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13764 comm="syz.9.2248" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1736b9e159 code=0x7ffc0000 [ 573.606635][ T27] audit: type=1326 audit(2000000042.440:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13764 comm="syz.9.2248" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1736b9e159 code=0x7ffc0000 [ 573.653125][ C0] net_ratelimit: 10 callbacks suppressed [ 573.782490][ T27] audit: type=1326 audit(2000000042.470:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13764 comm="syz.9.2248" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1736b9e159 code=0x7ffc0000 [ 573.930527][ T27] audit: type=1326 audit(2000000042.470:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13764 comm="syz.9.2248" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1736b9e159 code=0x7ffc0000 [ 574.074593][ T27] audit: type=1326 audit(2000000042.470:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13764 comm="syz.9.2248" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f1736b9e159 code=0x7ffc0000 [ 574.186802][ T27] audit: type=1326 audit(2000000042.470:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13764 comm="syz.9.2248" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1736b9e159 code=0x7ffc0000 [ 574.291207][ T27] audit: type=1326 audit(2000000042.480:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13764 comm="syz.9.2248" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1736b9e159 code=0x7ffc0000 [ 574.383299][ T27] audit: type=1326 audit(2000000042.480:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13764 comm="syz.9.2248" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1736b9e159 code=0x7ffc0000 [ 574.468671][ T27] audit: type=1326 audit(2000000042.480:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13764 comm="syz.9.2248" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1736b9e159 code=0x7ffc0000 [ 574.762631][ T27] audit: type=1326 audit(2000000042.480:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13764 comm="syz.9.2248" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1736b9e159 code=0x7ffc0000 [ 575.103189][ T4274] Bluetooth: hci0: command 0x0406 tx timeout [ 578.065537][T13822] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2262'. [ 579.013150][ C0] net_ratelimit: 14 callbacks suppressed [ 579.746947][T13848] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2268'. [ 582.748688][T13911] syz.7.2283 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 584.106035][ T27] kauditd_printk_skb: 62 callbacks suppressed [ 584.106050][ T27] audit: type=1326 audit(2000000053.080:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13947 comm="syz.8.2289" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f501a39e159 code=0x7ffc0000 [ 584.234529][ T27] audit: type=1326 audit(2000000053.080:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13947 comm="syz.8.2289" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f501a39e159 code=0x7ffc0000 [ 584.355454][ T27] audit: type=1326 audit(2000000053.080:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13947 comm="syz.8.2289" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f501a39e159 code=0x7ffc0000 [ 584.492211][ T27] audit: type=1326 audit(2000000053.080:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13947 comm="syz.8.2289" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f501a39e159 code=0x7ffc0000 [ 584.600469][ T27] audit: type=1326 audit(2000000053.110:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13947 comm="syz.8.2289" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f501a39e159 code=0x7ffc0000 [ 584.686939][ T27] audit: type=1326 audit(2000000053.110:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13947 comm="syz.8.2289" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f501a39e159 code=0x7ffc0000 [ 584.946726][ T27] audit: type=1326 audit(2000000053.110:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13947 comm="syz.8.2289" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f501a39e159 code=0x7ffc0000 [ 585.143734][ C0] net_ratelimit: 16 callbacks suppressed [ 585.189135][ T27] audit: type=1326 audit(2000000053.110:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13947 comm="syz.8.2289" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f501a39e159 code=0x7ffc0000 [ 585.310754][ T27] audit: type=1326 audit(2000000053.110:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13947 comm="syz.8.2289" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f501a39e159 code=0x7ffc0000 [ 585.409767][ T27] audit: type=1326 audit(2000000053.110:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13947 comm="syz.8.2289" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f501a39e159 code=0x7ffc0000 [ 586.306851][T13970] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.351978][T13974] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2296'. [ 586.439131][T13974] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2296'. [ 586.782412][T13970] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.160078][T13970] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.186012][T13982] netlink: 'syz.6.2297': attribute type 3 has an invalid length. [ 587.226085][T13982] netlink: 11575 bytes leftover after parsing attributes in process `syz.6.2297'. [ 587.300558][T13987] futex_wake_op: syz.7.2299 tries to shift op by 144; fix this program [ 587.310101][T13970] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.428943][T13970] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.451852][T13970] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.472551][T13970] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.493206][T13970] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.329371][ T7675] net_ratelimit: 17 callbacks suppressed [ 590.762636][T14039] jffs2: notice: (14039) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 593.017264][T14059] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.579175][ C0] net_ratelimit: 12 callbacks suppressed [ 595.641224][T14059] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.863360][T14059] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.043949][T14059] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.173547][T14059] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.197553][T14059] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.218052][T14059] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.239200][T14059] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.345752][T14139] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2333'. [ 598.939330][T14139] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2333'. [ 599.055379][T14145] netlink: 'syz.4.2335': attribute type 30 has an invalid length. [ 599.080084][T14148] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2336'. [ 599.080996][T14145] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2335'. [ 599.984466][T14148] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2336'. [ 600.060235][T14148] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2336'. [ 600.217505][T14148] bond4: (slave veth5): Enslaving as an active interface with an up link [ 600.588484][T14187] jffs2: notice: (14187) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 601.081875][ C0] net_ratelimit: 16 callbacks suppressed [ 604.094196][T14239] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 604.110578][T14239] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 604.118922][T14239] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 604.541565][T14247] fuse: Bad value for 'fd' [ 604.568718][ T27] kauditd_printk_skb: 61 callbacks suppressed [ 604.568732][ T27] audit: type=1326 audit(2000000073.540:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14250 comm="syz.6.2359" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f445df9e159 code=0x7ffc0000 [ 604.614186][ T27] audit: type=1326 audit(2000000073.580:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14250 comm="syz.6.2359" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f445df9e159 code=0x7ffc0000 [ 604.790507][ T27] audit: type=1326 audit(2000000073.580:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14250 comm="syz.6.2359" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f445df9e159 code=0x7ffc0000 [ 604.932367][T14270] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2361'. [ 604.953139][ T27] audit: type=1326 audit(2000000073.580:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14250 comm="syz.6.2359" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f445df9e159 code=0x7ffc0000 [ 605.068061][ T27] audit: type=1326 audit(2000000073.580:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14250 comm="syz.6.2359" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f445df9e159 code=0x7ffc0000 [ 605.223020][ T27] audit: type=1326 audit(2000000073.580:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14250 comm="syz.6.2359" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f445df9e159 code=0x7ffc0000 [ 605.303501][ T27] audit: type=1326 audit(2000000073.580:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14250 comm="syz.6.2359" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f445df9e159 code=0x7ffc0000 [ 605.369536][ T27] audit: type=1326 audit(2000000073.580:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14250 comm="syz.6.2359" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f445df9e159 code=0x7ffc0000 [ 605.487647][ T27] audit: type=1326 audit(2000000073.580:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14250 comm="syz.6.2359" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f445df9e159 code=0x7ffc0000 [ 605.525096][T14285] xt_cgroup: path and classid specified [ 605.559536][ T27] audit: type=1326 audit(2000000073.580:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14250 comm="syz.6.2359" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f445df9e159 code=0x7ffc0000 [ 606.373120][ C0] net_ratelimit: 17 callbacks suppressed [ 606.401363][T14310] netlink: 104 bytes leftover after parsing attributes in process `syz.8.2372'. [ 606.476023][T14312] netlink: 104 bytes leftover after parsing attributes in process `syz.8.2372'. [ 606.491357][T14313] overlayfs: missing 'lowerdir' [ 606.546618][T14315] overlayfs: bad mount option "redirect_dir=nofollow:/" [ 610.868111][T14352] device syzkaller0 entered promiscuous mode [ 610.994657][T14359] futex_wake_op: syz.9.2381 tries to shift op by 144; fix this program [ 611.424903][ T6721] net_ratelimit: 15 callbacks suppressed [ 613.339983][T14395] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan0: link becomes ready [ 613.351612][T14395] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan0: link becomes ready [ 615.014645][T14425] device macvlan2 left promiscuous mode [ 615.023695][T14425] device syzkaller0 left promiscuous mode [ 615.915466][T14435] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2400'. [ 616.580747][ T4327] net_ratelimit: 12 callbacks suppressed [ 616.689768][T14433] netlink: 'syz.4.2401': attribute type 1 has an invalid length. [ 616.735787][T14441] device bond5 entered promiscuous mode [ 617.914507][ T3933] device veth0_vlan left promiscuous mode [ 618.539737][ T3933] device veth0_vlan entered promiscuous mode [ 618.566303][T14460] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2407'. [ 618.811271][T14472] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 621.663188][ C1] net_ratelimit: 14 callbacks suppressed [ 622.123760][T14525] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2420'. [ 623.531840][T14543] tipc: Started in network mode [ 623.536860][T14543] tipc: Node identity 1001001, cluster identity 4711 [ 623.543614][T14543] tipc: Node number set to 16781313 [ 623.550709][T14543] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2423'. [ 624.224313][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.238028][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.764157][ T27] kauditd_printk_skb: 96 callbacks suppressed [ 624.764168][ T27] audit: type=1326 audit(2000000093.740:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14562 comm="syz.9.2427" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1736b9e159 code=0x7ffc0000 [ 624.901098][ T27] audit: type=1326 audit(2000000093.780:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14562 comm="syz.9.2427" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f1736b9e159 code=0x7ffc0000 [ 625.444430][ T27] audit: type=1326 audit(2000000093.780:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14562 comm="syz.9.2427" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1736b9e159 code=0x7ffc0000 [ 625.716914][ T27] audit: type=1326 audit(2000000093.780:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14562 comm="syz.9.2427" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1736b9e159 code=0x7ffc0000 [ 625.741870][ T27] audit: type=1326 audit(2000000093.790:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14562 comm="syz.9.2427" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f1736b9e159 code=0x7ffc0000 [ 625.848333][ T27] audit: type=1326 audit(2000000093.790:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14562 comm="syz.9.2427" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1736b9e159 code=0x7ffc0000 [ 625.932936][T14585] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2432'. [ 625.953252][ T27] audit: type=1326 audit(2000000093.790:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14562 comm="syz.9.2427" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1736b9e159 code=0x7ffc0000 [ 626.053989][ T27] audit: type=1326 audit(2000000093.790:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14562 comm="syz.9.2427" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f1736b9e159 code=0x7ffc0000 [ 626.103837][T14585] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2432'. [ 626.113314][T14585] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2432'. [ 626.147608][T14585] bond1: (slave veth3): Enslaving as an active interface with an up link [ 626.156498][ T27] audit: type=1326 audit(2000000093.790:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14562 comm="syz.9.2427" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1736b9e159 code=0x7ffc0000 [ 626.221498][ T27] audit: type=1326 audit(2000000093.790:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14562 comm="syz.9.2427" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1736b9e159 code=0x7ffc0000 [ 626.773160][ C0] net_ratelimit: 15 callbacks suppressed [ 627.521734][T14613] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 627.537903][T14613] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 627.697234][T14613] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 627.704872][T14613] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 628.562017][T14619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 629.369437][T14650] tipc: Failed to remove unknown binding: 66,0,0/4:2619451267/2619451269 [ 629.401288][T14650] tipc: Failed to remove unknown binding: 66,0,0/4:2619451267/2619451268 [ 629.656973][T14650] tipc: Failed to remove unknown binding: 66,0,0/4:2619451267/2619451269 [ 629.852873][T14650] tipc: Failed to remove unknown binding: 66,0,0/4:2619451267/2619451268 [ 631.480679][T14681] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 631.489284][T14681] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 631.497698][T14681] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 631.506330][T14681] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 631.514913][T14681] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 631.523316][T14681] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 631.907353][ T6721] net_ratelimit: 20 callbacks suppressed [ 634.068800][T14713] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2462'. [ 634.176540][T14716] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2462'. [ 636.998700][ T4317] net_ratelimit: 14 callbacks suppressed [ 641.536312][T14828] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2483'. [ 641.551460][T14832] netlink: 'syz.8.2490': attribute type 1 has an invalid length. [ 641.704636][T14832] 8021q: adding VLAN 0 to HW filter on device bond6 [ 641.872365][T14837] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.965202][T14837] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.008786][T14837] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.053115][ C0] net_ratelimit: 12 callbacks suppressed [ 642.066147][T14837] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.204668][T14837] bond6: (slave geneve2): making interface the new active one [ 642.291812][T14837] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 642.360289][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): bond6: link becomes ready [ 643.633362][T14861] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2497'. [ 644.052386][T14864] bond3: (slave veth1): Enslaving as an active interface with an up link [ 647.254645][ T4451] net_ratelimit: 14 callbacks suppressed [ 647.544425][ T6721] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 648.121356][ T27] kauditd_printk_skb: 25 callbacks suppressed [ 648.121371][ T27] audit: type=1326 audit(2000000117.070:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14927 comm="syz.6.2511" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f445df9e159 code=0x7ffc0000 [ 648.221176][ T27] audit: type=1326 audit(2000000117.070:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14927 comm="syz.6.2511" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f445df9e159 code=0x7ffc0000 [ 649.053329][ T27] audit: type=1326 audit(2000000117.070:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14927 comm="syz.6.2511" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f445df9e159 code=0x7ffc0000 [ 649.252369][ T27] audit: type=1326 audit(2000000117.070:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14927 comm="syz.6.2511" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f445df9e159 code=0x7ffc0000 [ 649.408311][ T27] audit: type=1326 audit(2000000117.070:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14927 comm="syz.6.2511" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f445df9e159 code=0x7ffc0000 [ 649.488827][ T27] audit: type=1326 audit(2000000117.070:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14927 comm="syz.6.2511" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f445df9e159 code=0x7ffc0000 [ 649.521048][ T27] audit: type=1326 audit(2000000117.070:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14927 comm="syz.6.2511" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f445df9e159 code=0x7ffc0000 [ 649.640658][T14949] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2517'. [ 650.395063][ T27] audit: type=1326 audit(2000000117.080:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14927 comm="syz.6.2511" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f445df9e159 code=0x7ffc0000 [ 650.419585][ T27] audit: type=1326 audit(2000000117.080:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14927 comm="syz.6.2511" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f445df9e159 code=0x7ffc0000 [ 650.541650][ T27] audit: type=1326 audit(2000000117.080:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14927 comm="syz.6.2511" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f445df5e98e code=0x7ffc0000 [ 650.922803][T14967] 8021q: adding VLAN 0 to HW filter on device bond4 [ 651.052616][T14969] bond4: (slave geneve2): making interface the new active one [ 651.121500][T14969] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 651.176462][ T6721] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready [ 651.635410][T14989] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2536'. [ 652.374114][ T6721] net_ratelimit: 12 callbacks suppressed [ 652.955494][T15004] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2528'. [ 657.191481][T15074] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 657.503875][ T7675] net_ratelimit: 10 callbacks suppressed [ 659.624874][T15120] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2562'. [ 661.086118][T15153] netlink: 104 bytes leftover after parsing attributes in process `syz.9.2569'. [ 661.215938][T15155] xt_socket: unknown flags 0x40 [ 663.260034][ T6722] net_ratelimit: 14 callbacks suppressed [ 666.009179][T15215] futex_wake_op: syz.8.2594 tries to shift op by 144; fix this program [ 666.453853][T15224] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2597'. [ 668.904257][T15223] net_ratelimit: 13 callbacks suppressed [ 669.230535][T15223] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 669.286562][T15223] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 670.479331][T15223] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.495759][T15223] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.504928][T15223] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.513907][T15223] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.661187][T15255] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2603'. [ 670.676128][T15256] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2603'. [ 670.919923][T15276] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2608'. [ 672.610103][T15295] netlink: 'syz.7.2618': attribute type 1 has an invalid length. [ 672.755812][T15301] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2618'. [ 672.835581][T15301] device bond4 entered promiscuous mode [ 673.231459][T15301] 8021q: adding VLAN 0 to HW filter on device bond4 [ 673.445551][T15295] device bridge1 entered promiscuous mode [ 673.575335][T15295] bond4: (slave bridge1): making interface the new active one [ 673.616591][T15295] bond4: (slave bridge1): Enslaving as an active interface with an up link [ 673.725785][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready [ 674.501665][T15325] device batadv_slave_1 entered promiscuous mode [ 674.558001][T15325] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2626'. [ 674.812549][T15337] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 675.584221][ T4448] net_ratelimit: 16 callbacks suppressed [ 675.709215][T15325] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 676.240591][T15330] batman_adv: batadv0: Adding interface: veth0 [ 676.648447][T15330] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 676.687675][T15330] batman_adv: batadv0: Interface activated: veth0 [ 676.712780][T15341] batman_adv: batadv0: Interface deactivated: veth0 [ 676.724495][T15354] overlayfs: failed to clone upperpath [ 676.979311][T15341] batman_adv: batadv0: Removing interface: veth0 [ 677.668424][T15368] xt_TCPMSS: Only works on TCP SYN packets [ 678.261552][T15372] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 678.319100][T15374] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2638'. [ 678.537016][T15382] device bond2 entered promiscuous mode [ 679.385161][ T27] kauditd_printk_skb: 47 callbacks suppressed [ 679.385171][ T27] audit: type=1326 audit(2000000148.360:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15390 comm="syz.9.2646" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1736b9e159 code=0x0 [ 679.672590][T15402] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 679.709079][T15402] 8021q: adding VLAN 0 to HW filter on device bond0 [ 679.741222][T15402] 8021q: adding VLAN 0 to HW filter on device team0 [ 680.452707][T15410] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 681.184772][ T4449] net_ratelimit: 8 callbacks suppressed [ 685.664899][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.671263][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.058758][ T4327] net_ratelimit: 10 callbacks suppressed [ 691.113385][T15562] netlink: 'syz.9.2688': attribute type 1 has an invalid length. [ 691.197336][T15562] bond5: (slave veth3): Enslaving as an active interface with a down link [ 692.139046][T15571] bond5: (slave veth0_to_bond): making interface the new active one [ 692.249840][T15571] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 692.979914][ T47] net_ratelimit: 6 callbacks suppressed [ 697.392395][T15670] netlink: 'syz.8.2718': attribute type 2 has an invalid length. [ 697.416289][T15670] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2718'. [ 697.881010][T15690] 9pnet_virtio: no channels available for device 127.0.0.1 [ 699.000328][ T6720] net_ratelimit: 7 callbacks suppressed [ 699.125754][T15692] xt_TCPMSS: Only works on TCP SYN packets [ 700.021618][T15705] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2730'. [ 700.774067][T15705] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2730'. [ 700.991125][T15725] futex_wake_op: syz.8.2734 tries to shift op by 144; fix this program [ 701.948305][T15736] xt_TCPMSS: Only works on TCP SYN packets [ 702.468663][T15725] futex_wake_op: syz.8.2734 tries to shift op by 144; fix this program [ 703.834078][T15759] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2745'. [ 704.213072][ C0] net_ratelimit: 11 callbacks suppressed [ 705.022042][ T49] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 705.033068][ T49] CPU: 1 PID: 49 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 705.040464][ T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 705.050510][ T49] Workqueue: hci0 hci_rx_work [ 705.055293][ T49] [ 705.055303][ T49] Call Trace: [ 705.055311][ T49] [ 705.055319][ T49] dump_stack_lvl+0x188/0x24e [ 705.055368][ T49] ? show_regs_print_info+0x12/0x12 [ 705.055425][ T49] ? load_image+0x410/0x410 [ 705.058239][ T49] sysfs_create_dir_ns+0x26a/0x290 [ 705.084247][ T49] ? sysfs_warn_dup+0xa0/0xa0 [ 705.088955][ T49] ? do_raw_spin_unlock+0x11d/0x230 [ 705.094252][ T49] kobject_add_internal+0x617/0xca0 [ 705.099499][ T49] kobject_add+0x160/0x230 [ 705.103934][ T49] ? kobject_init+0x1c0/0x1c0 [ 705.108628][ T49] ? __raw_spin_lock_init+0x41/0x100 [ 705.113928][ T49] ? klist_children_get+0x50/0x50 [ 705.119027][ T49] ? get_device_parent+0x121/0x3e0 [ 705.124196][ T49] device_add+0x470/0x1050 [ 705.128632][ T49] hci_conn_add_sysfs+0xd1/0x1e0 [ 705.133667][ T49] le_conn_complete_evt+0xf93/0x15c0 [ 705.138988][ T49] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 705.145248][ T49] ? param_get_dyndbg_classes+0x160/0x160 [ 705.151082][ T49] ? mutex_unlock+0x10/0x10 [ 705.155644][ T49] hci_le_conn_complete_evt+0x183/0x440 [ 705.161213][ T49] ? hci_remote_host_features_evt+0x230/0x230 [ 705.167293][ T49] hci_event_packet+0x7b3/0x1290 [ 705.172254][ T49] ? lock_chain_count+0x20/0x20 [ 705.177151][ T49] ? bis_list+0x280/0x280 [ 705.181495][ T49] ? lockdep_hardirqs_on+0x94/0x140 [ 705.186712][ T49] ? hci_send_to_monitor+0x9c/0x4a0 [ 705.191930][ T49] hci_rx_work+0x3eb/0xd40 [ 705.196392][ T49] ? _raw_spin_unlock+0x40/0x40 [ 705.201336][ T49] ? process_one_work+0x7b4/0x1160 [ 705.206503][ T49] process_one_work+0x8ab/0x1160 [ 705.211464][ T49] ? worker_detach_from_pool+0x240/0x240 [ 705.217111][ T49] ? _raw_spin_lock_irq+0xb7/0xf0 [ 705.222159][ T49] ? _raw_spin_lock_irqsave+0x100/0x100 [ 705.227734][ T49] ? wq_worker_running+0x97/0x190 [ 705.232781][ T49] worker_thread+0xaf5/0x12a0 [ 705.237530][ T49] kthread+0x29d/0x330 [ 705.241703][ T49] ? worker_clr_flags+0x1a0/0x1a0 [ 705.246751][ T49] ? kthread_blkcg+0xd0/0xd0 [ 705.251359][ T49] ret_from_fork+0x1f/0x30 [ 705.255912][ T49] [ 705.315008][ T49] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 705.328488][ T49] Bluetooth: hci0: failed to register connection device [ 706.465411][T15783] xt_TCPMSS: Only works on TCP SYN packets [ 707.141182][T15789] xt_CONNSECMARK: invalid mode: 66 [ 710.548455][ T4299] net_ratelimit: 10 callbacks suppressed [ 710.634195][T15821] netlink: 180 bytes leftover after parsing attributes in process `syz.7.2763'. [ 711.024755][T15829] batman_adv: batadv0: Adding interface: veth0 [ 711.054154][T15829] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 711.159414][T15829] batman_adv: batadv0: Interface activated: veth0 [ 711.181039][T15828] netlink: 'syz.4.2766': attribute type 1 has an invalid length. [ 711.321648][T15828] 8021q: adding VLAN 0 to HW filter on device bond3 [ 711.413718][T15831] bond3: (slave veth7): Enslaving as an active interface with a down link [ 711.499295][T15833] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 711.542311][T15833] bond3: (slave batadv1): making interface the new active one [ 711.608584][T15833] device batadv1 entered promiscuous mode [ 711.776449][T15833] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 711.813470][T15838] batman_adv: batadv0: Interface deactivated: veth0 [ 712.410445][T15838] batman_adv: batadv0: Removing interface: veth0 [ 713.297045][T15839] bond3: (slave veth9): Enslaving as an active interface with a down link [ 713.396309][ T7661] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 715.660581][ T7681] net_ratelimit: 9 callbacks suppressed [ 716.739339][T15902] lo: Caught tx_queue_len zero misconfig [ 716.840368][T15907] batman_adv: batadv0: Adding interface: veth0 [ 716.851606][T15907] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 716.883181][T15907] batman_adv: batadv0: Interface activated: veth0 [ 716.940142][T15913] netlink: 'syz.8.2790': attribute type 2 has an invalid length. [ 716.955390][T15907] batman_adv: batadv0: Interface deactivated: veth0 [ 717.061243][T15907] batman_adv: batadv0: Removing interface: veth0 [ 718.238306][T15939] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 718.281381][T15939] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 719.578295][T15956] CIFS mount error: No usable UNC path provided in device string! [ 719.578295][T15956] [ 719.588773][T15956] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 720.497095][T15958] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 720.694738][T15961] batman_adv: batadv0: Adding interface: veth0 [ 720.700936][T15961] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 720.728859][T15961] batman_adv: batadv0: Interface activated: veth0 [ 720.765343][T15966] batman_adv: batadv0: Interface deactivated: veth0 [ 720.875300][ T4299] net_ratelimit: 11 callbacks suppressed [ 721.108392][T15966] batman_adv: batadv0: Removing interface: veth0 [ 722.131449][T15975] netlink: 'syz.6.2808': attribute type 8 has an invalid length. [ 722.727489][T16001] xt_CONNSECMARK: invalid mode: 0 [ 725.298448][T16030] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2820'. [ 725.997444][T15893] net_ratelimit: 6 callbacks suppressed [ 726.474976][T16030] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2820'. [ 726.868590][T16055] netlink: 'syz.9.2831': attribute type 8 has an invalid length. [ 726.887563][T16055] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2831'. [ 726.957994][T16055] device bond0 entered promiscuous mode [ 727.003227][T16055] device bond_slave_0 entered promiscuous mode [ 727.023385][T16055] device bond_slave_1 entered promiscuous mode [ 727.108604][T16055] device gretap0 entered promiscuous mode [ 727.147389][T16055] device team0 entered promiscuous mode [ 727.184100][T16055] device team_slave_0 entered promiscuous mode [ 727.234386][T16055] device team_slave_1 entered promiscuous mode [ 727.285400][T16055] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 727.309263][T16055] Cannot create hsr debugfs directory [ 727.336399][T16055] device hsr1 entered promiscuous mode [ 727.399100][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 729.447671][T15990] device batadv1 left promiscuous mode [ 729.674496][T16094] netlink: 96 bytes leftover after parsing attributes in process `syz.9.2842'. [ 729.731602][ T27] audit: type=1326 audit(2000000198.700:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16097 comm="syz.6.2845" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f445df9e159 code=0x0 [ 731.738787][ T6719] net_ratelimit: 6 callbacks suppressed [ 734.732690][T16192] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 734.773487][T16192] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 737.493723][ T6719] net_ratelimit: 8 callbacks suppressed [ 737.603670][T16221] futex_wake_op: syz.6.2879 tries to shift op by 144; fix this program [ 737.853128][T16231] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2882'. [ 739.698644][T16249] netdevsim netdevsim8: loading /lib/firmware/. failed with error -22 [ 739.714802][T16249] netdevsim netdevsim8: Direct firmware load for . failed with error -22 [ 739.742006][T16248] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2887'. [ 739.743088][T16249] netdevsim netdevsim8: Falling back to sysfs fallback for: . [ 741.769579][T16273] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 741.799567][T16273] bridge0: port 1(bridge_slave_0) entered disabled state [ 741.840988][T16276] netlink: 'syz.4.2897': attribute type 9 has an invalid length. [ 741.853876][T16275] netem: change failed [ 742.801861][ T4448] net_ratelimit: 9 callbacks suppressed [ 743.164180][T16294] batman_adv: batadv0: Adding interface: veth0 [ 743.170664][T16294] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 743.356950][T16294] batman_adv: batadv0: Interface activated: veth0 [ 743.395342][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 743.429969][T16294] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 743.463869][T16294] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 743.734501][T16294] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 743.785647][T16294] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 743.857477][T16294] batman_adv: batadv0: Interface deactivated: veth0 [ 743.864451][T16294] batman_adv: batadv0: Removing interface: veth0 [ 747.103621][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.109965][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.515428][T16346] "syz.8.2917" (16346) uses obsolete ecb(arc4) skcipher [ 748.447785][T15992] net_ratelimit: 7 callbacks suppressed [ 748.744747][T16360] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 748.771933][T16360] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 748.823241][T16360] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 751.363559][T16390] netlink: 'syz.4.2932': attribute type 8 has an invalid length. [ 751.391680][T16390] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2932'. [ 753.493047][ C0] net_ratelimit: 9 callbacks suppressed [ 755.844824][T16441] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2941'. [ 758.613334][T15987] net_ratelimit: 4 callbacks suppressed [ 758.676148][T16481] bridge0: port 1(bridge_slave_0) entered disabled state [ 758.850943][T16481] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 758.917325][T16484] netlink: 'syz.8.2954': attribute type 9 has an invalid length. [ 763.733895][ T7661] net_ratelimit: 7 callbacks suppressed [ 765.414160][ T27] audit: type=1326 audit(2000000234.250:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16548 comm="syz.8.2974" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f501a39e159 code=0x7ffc0000 [ 765.873362][ T27] audit: type=1326 audit(2000000234.250:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16548 comm="syz.8.2974" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f501a39e159 code=0x7ffc0000 [ 765.963280][ T27] audit: type=1326 audit(2000000234.250:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16548 comm="syz.8.2974" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f501a39e159 code=0x7ffc0000 [ 766.053472][ T27] audit: type=1326 audit(2000000234.250:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16548 comm="syz.8.2974" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f501a39e159 code=0x7ffc0000 [ 766.165341][ T27] audit: type=1326 audit(2000000234.250:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16548 comm="syz.8.2974" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f501a39e159 code=0x7ffc0000 [ 766.285958][ T27] audit: type=1326 audit(2000000234.250:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16548 comm="syz.8.2974" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f501a39e159 code=0x7ffc0000 [ 766.311003][ T27] audit: type=1326 audit(2000000234.250:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16548 comm="syz.8.2974" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f501a39e159 code=0x7ffc0000 [ 766.380099][ T27] audit: type=1326 audit(2000000234.250:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16548 comm="syz.8.2974" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f501a39e159 code=0x7ffc0000 [ 767.007704][ T27] audit: type=1326 audit(2000000234.250:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16548 comm="syz.8.2974" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f501a39e159 code=0x7ffc0000 [ 767.062665][ T27] audit: type=1326 audit(2000000234.250:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16548 comm="syz.8.2974" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f501a39e159 code=0x7ffc0000 [ 767.393941][T15992] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 768.899590][ T7681] net_ratelimit: 5 callbacks suppressed [ 769.427514][T16599] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 769.427514][T16599] The task syz.8.2987 (16599) triggered the difference, watch for misbehavior. [ 770.423841][ T27] kauditd_printk_skb: 88 callbacks suppressed [ 770.423852][ T27] audit: type=1326 audit(2000000239.390:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16604 comm="syz.6.2990" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f445df5e98e code=0x7ffc0000 [ 770.519364][ T27] audit: type=1326 audit(2000000239.430:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16604 comm="syz.6.2990" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f445df5e98e code=0x7ffc0000 [ 770.568141][ T27] audit: type=1326 audit(2000000239.430:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16604 comm="syz.6.2990" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f445df5e98e code=0x7ffc0000 [ 770.595506][ T27] audit: type=1326 audit(2000000239.440:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16604 comm="syz.6.2990" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f445df5e98e code=0x7ffc0000 [ 770.739146][ T27] audit: type=1326 audit(2000000239.440:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16604 comm="syz.6.2990" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f445df5e98e code=0x7ffc0000 [ 770.836313][ T27] audit: type=1326 audit(2000000239.440:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16604 comm="syz.6.2990" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f445df5e98e code=0x7ffc0000 [ 771.021589][ T27] audit: type=1326 audit(2000000239.440:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16604 comm="syz.6.2990" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f445df5e98e code=0x7ffc0000 [ 771.129701][ T27] audit: type=1326 audit(2000000239.440:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16604 comm="syz.6.2990" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f445df5e98e code=0x7ffc0000 [ 771.154686][ T27] audit: type=1326 audit(2000000239.440:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16604 comm="syz.6.2990" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f445df5e98e code=0x7ffc0000 [ 772.383162][ T27] audit: type=1326 audit(2000000239.440:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16604 comm="syz.6.2990" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f445df5e98e code=0x7ffc0000 [ 773.766913][T16659] netlink: 'syz.4.3006': attribute type 1 has an invalid length. [ 773.857860][T16661] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3006'. [ 773.928756][T16661] 8021q: adding VLAN 0 to HW filter on device bond4 [ 773.973104][ C0] net_ratelimit: 5 callbacks suppressed [ 774.075621][T16659] 8021q: adding VLAN 0 to HW filter on device bond4 [ 774.086437][T16659] bond4: (slave geneve2): Error -99 calling set_mac_address [ 778.212184][T16727] MPTCP: addr_signal error, add_addr=2, echo=1 [ 778.225124][ C1] MPTCP: addr_signal error, add_addr=2, echo=1 [ 778.234569][ C1] MPTCP: addr_signal error, add_addr=2, echo=1 [ 779.984418][ T6717] net_ratelimit: 7 callbacks suppressed [ 780.493418][T16738] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3029'. [ 781.069441][T16765] netlink: 'syz.9.3035': attribute type 4 has an invalid length. [ 781.378645][ C1] MPTCP: addr_signal error, add_addr=2, echo=1 [ 781.398646][ C1] MPTCP: addr_signal error, add_addr=2, echo=1 [ 784.407572][T16805] netlink: 'syz.6.3049': attribute type 4 has an invalid length. [ 785.127661][ T7661] net_ratelimit: 6 callbacks suppressed [ 785.385917][T16819] netlink: 'syz.7.3052': attribute type 1 has an invalid length. [ 785.594077][T16819] device bond5 entered promiscuous mode [ 785.640757][T16819] 8021q: adding VLAN 0 to HW filter on device bond5 [ 785.764272][T16825] 8021q: adding VLAN 0 to HW filter on device bond5 [ 785.919044][T16825] bond5: (slave gre1): The slave device specified does not support setting the MAC address [ 785.947461][T16825] bond5: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 786.670142][T16825] bond5: (slave gre1): making interface the new active one [ 786.749305][T16825] device gre1 entered promiscuous mode [ 786.760520][T16825] bond5: (slave gre1): Enslaving as an active interface with an up link [ 786.834811][T16827] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3052'. [ 788.758463][T16827] bond5 (unregistering): (slave gre1): Releasing backup interface [ 788.782385][T16827] device gre1 left promiscuous mode [ 788.818722][T16827] bond5 (unregistering): Released all slaves [ 788.945650][T16870] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 788.953988][T16870] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 788.962185][T16870] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 788.970411][T16870] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 789.159346][T16870] device vxlan0 entered promiscuous mode [ 789.181850][T16870] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 789.327165][T16878] overlayfs: failed to clone upperpath [ 790.096212][T16896] xt_nat: multiple ranges no longer supported [ 790.580993][T15893] net_ratelimit: 7 callbacks suppressed [ 790.937168][T16909] netlink: 'syz.9.3076': attribute type 11 has an invalid length. [ 792.625929][T16921] netlink: 'syz.9.3077': attribute type 13 has an invalid length. [ 792.695640][T16921] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3077'. [ 792.783199][T16921] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 793.299644][T16934] netlink: 'syz.4.3083': attribute type 4 has an invalid length. [ 793.730758][T16939] sctp: [Deprecated]: syz.7.3086 (pid 16939) Use of struct sctp_assoc_value in delayed_ack socket option. [ 793.730758][T16939] Use struct sctp_sack_info instead [ 796.374032][ T7675] net_ratelimit: 8 callbacks suppressed [ 796.868975][T16974] overlayfs: failed to clone upperpath [ 801.040426][T17002] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 801.171517][T17002] CIFS: Attempting to mount \\127.0.0.1\share [ 801.201457][T17002] CIFS: VFS: Error connecting to socket. Aborting operation. [ 801.203702][T17007] overlayfs: failed to clone upperpath [ 801.219826][T17002] CIFS: VFS: cifs_mount failed w/return code = -101 [ 801.389670][T17011] netlink: 'syz.4.3108': attribute type 1 has an invalid length. [ 801.494869][ T7681] net_ratelimit: 6 callbacks suppressed [ 804.725112][T17055] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3101'. [ 805.533356][T17055] bridge2: port 1(erspan0) entered blocking state [ 805.539896][T17055] bridge2: port 1(erspan0) entered disabled state [ 805.599074][T17055] device erspan0 entered promiscuous mode [ 805.635840][T17055] bridge2: port 1(erspan0) entered blocking state [ 805.642503][T17055] bridge2: port 1(erspan0) entered forwarding state [ 807.253113][T15992] net_ratelimit: 6 callbacks suppressed [ 807.303622][T17096] tipc: Enabling of bearer rejected, failed to enable media [ 807.666284][T17104] device vlan2 left promiscuous mode [ 808.547064][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.553543][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.571001][T15893] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 809.588235][T17125] fuse: Unknown parameter 'group_i' [ 812.373118][ T7681] net_ratelimit: 8 callbacks suppressed [ 818.022309][T17223] netlink: 'syz.9.3165': attribute type 10 has an invalid length. [ 818.102873][T17223] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3165'. [ 818.142570][ T4299] net_ratelimit: 4 callbacks suppressed [ 818.245195][T17226] ip_tables: iptables: counters copy to user failed while replacing table [ 819.447071][T17238] futex_wake_op: syz.6.3171 tries to shift op by 144; fix this program [ 820.127456][T17256] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3174'. [ 820.137906][T17256] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3174'. [ 820.147780][T17256] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3174'. [ 820.157577][T17256] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3174'. [ 820.167001][T17256] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3174'. [ 823.121756][T17299] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3186'. [ 823.893390][T15992] net_ratelimit: 5 callbacks suppressed [ 825.284331][T17326] bond3: option mode: unable to set because the bond device is up [ 825.350910][T17326] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.440678][T17326] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.511711][T17326] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.562488][T17326] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.613149][T17326] bond3: (slave geneve2): making interface the new active one [ 825.665430][T17326] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 825.722582][T17331] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 825.791721][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 825.814633][T17336] netlink: 'syz.9.3196': attribute type 1 has an invalid length. [ 825.865768][T17346] trusted_key: encrypted_key: insufficient parameters specified [ 826.102349][T17340] bond6: (slave veth5): Enslaving as an active interface with a down link [ 826.248015][T17343] bond6: (slave veth7): Enslaving as an active interface with a down link [ 826.286671][T17348] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3196'. [ 826.326164][T17348] 8021q: adding VLAN 0 to HW filter on device bond6 [ 828.209625][T17386] PKCS8: Unsupported PKCS#8 version [ 829.014348][ C0] net_ratelimit: 9 callbacks suppressed [ 829.481019][T17409] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 829.495053][T17409] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 829.503279][T17409] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 829.517106][T17409] device bridge_slave_0 left promiscuous mode [ 829.523970][T17409] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 829.584477][T17409] device bond2 left promiscuous mode [ 830.217422][T17414] ip_tables: iptables: counters copy to user failed while replacing table [ 831.493905][T17425] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3219'. [ 831.604509][T17425] bridge0: port 3(bond0) entered disabled state [ 831.611302][T17425] bridge0: port 2(bridge_slave_1) entered disabled state [ 831.736807][T17427] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3219'. [ 831.918886][T17427] bridge0: port 3(bond0) entered blocking state [ 831.925371][T17427] bridge0: port 3(bond0) entered forwarding state [ 831.932102][T17427] bridge0: port 2(bridge_slave_1) entered blocking state [ 831.939262][T17427] bridge0: port 2(bridge_slave_1) entered forwarding state [ 832.248261][T17427] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3219'. [ 832.275711][T17427] bridge0: port 3(bond0) entered disabled state [ 832.282230][T17427] bridge0: port 2(bridge_slave_1) entered disabled state [ 834.135906][ T4448] net_ratelimit: 8 callbacks suppressed [ 835.136891][ T27] kauditd_printk_skb: 12 callbacks suppressed [ 835.136902][ T27] audit: type=1326 audit(2000000304.110:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17472 comm="syz.9.3231" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1736b9e159 code=0x0 [ 835.221150][T17480] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3234'. [ 835.269471][T17484] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3232'. [ 835.345474][T17480] bridge1: port 1(erspan0) entered blocking state [ 835.352253][T17480] bridge1: port 1(erspan0) entered disabled state [ 835.367405][T17480] device erspan0 entered promiscuous mode [ 838.599535][T17529] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 838.607554][T17529] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 838.615537][T17529] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 838.623532][T17529] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 838.631122][T17529] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 838.639571][T17529] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 838.649986][T17529] device dummy0 left promiscuous mode [ 838.656107][T17529] bridge0: port 1(dummy0) entered disabled state [ 838.667668][T17529] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 838.675973][T17529] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 838.683609][T17529] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 838.851890][T17529] bond5: (slave veth0_to_bond): Releasing active interface [ 838.873614][T17529] bond0: (slave bond_slave_0): Releasing backup interface [ 838.881615][T17529] device bond_slave_0 left promiscuous mode [ 839.580692][ T4327] net_ratelimit: 10 callbacks suppressed [ 839.626585][T17529] bond0: (slave bond_slave_1): Releasing backup interface [ 839.648591][T17529] device bond_slave_1 left promiscuous mode [ 839.670537][T17529] device team_slave_0 left promiscuous mode [ 839.710395][T17529] team0: Port device team_slave_0 removed [ 839.717313][T17529] device team_slave_1 left promiscuous mode [ 839.829387][T17529] team0: Port device team_slave_1 removed [ 839.839719][T17529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 839.847946][T17529] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 839.856211][T17529] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan0: link becomes ready [ 839.908035][T17529] bond1: (slave bridge0): Releasing backup interface [ 839.922645][T17529] device bond2 left promiscuous mode [ 839.942767][T17529] team0: Port device macvlan2 removed [ 840.039709][T17529] bond3: (slave veth1): Releasing backup interface [ 840.070999][T17529] bond4: (slave geneve2): Releasing active interface [ 840.106344][T17529] bond5: (slave veth3): Releasing active interface [ 840.121979][T17529] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 840.136573][T17529] bond6: (slave veth5): Releasing active interface [ 840.143404][T17529] bond6: (slave veth5): the permanent HWaddr of slave - 02:03:95:c5:64:20 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 840.245518][T17529] bond6: (slave veth7): Releasing active interface [ 840.466423][ T14] bond0 speed is unknown, defaulting to 1000 [ 840.806130][T17557] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3257'. [ 840.817571][T17557] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3257'. [ 840.827730][T17557] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3257'. [ 840.837895][T17557] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3257'. [ 840.847660][T17557] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3257'. [ 841.368710][T17560] Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 841.685913][ T14] libceph: connect (2)127.0.0.1:6789 error -101 [ 841.692793][ T14] libceph: ceph_tcp_connect failed: -101 [ 842.419311][T17564] ceph: No mds server is up or the cluster is laggy [ 842.589324][T17581] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 842.738920][T17581] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 842.822189][T17581] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 843.003045][ T14] libceph: mon0 (2)127.0.0.1:6789 connect error [ 843.918376][T17581] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 843.960613][T17581] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 844.027984][T17581] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 844.310288][T17601] device erspan0 left promiscuous mode [ 844.346573][T17601] bridge1: port 1(erspan0) entered disabled state [ 844.388953][T17601] bond0: (slave bond_slave_0): Releasing backup interface [ 844.414843][T17601] team0: Port device team_slave_0 removed [ 844.435454][T17601] team0: Port device team_slave_1 removed [ 844.453687][T17601] bond1: (slave gretap1): Releasing active interface [ 844.480150][T17604] team0: Mode changed to "activebackup" [ 844.864217][T17626] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3273'. [ 844.875789][T17626] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3273'. [ 844.885680][T17626] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3273'. [ 844.895622][T17626] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3273'. [ 844.905578][T17626] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3273'. [ 845.038095][ T11] net_ratelimit: 7 callbacks suppressed [ 847.987011][T17690] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3288'. [ 847.999662][T17690] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3288'. [ 848.009598][T17690] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3288'. [ 848.020839][T17690] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3288'. [ 848.030930][T17690] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3288'. [ 850.408086][ T11] net_ratelimit: 5 callbacks suppressed [ 852.612671][T17744] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3303'. [ 852.625062][T17744] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3303'. [ 852.635318][T17744] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3303'. [ 852.647914][T17744] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3303'. [ 852.657746][T17744] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3303'. [ 853.377811][T17753] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 853.672744][T17753] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 854.172039][T17753] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 854.280491][T17753] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 854.341557][T17753] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 854.376097][T17753] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 854.423658][T17753] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 855.893141][T17630] net_ratelimit: 6 callbacks suppressed [ 856.010379][ T27] audit: type=1326 audit(2000000324.980:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17779 comm="syz.9.3305" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1736b9e159 code=0x0 [ 857.211033][T17797] device geneve3 entered promiscuous mode [ 857.480351][T17803] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 857.518969][T17803] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 857.543699][T17803] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 857.572078][T17803] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 857.602529][T17803] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 857.633357][T17803] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 861.013475][ T11] net_ratelimit: 2 callbacks suppressed [ 861.186365][T17841] bond0 speed is unknown, defaulting to 1000 [ 862.157349][T17866] tipc: Enabled bearer , priority 0 [ 863.830118][T17883] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 863.839273][T17883] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 865.129850][T17903] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3351'. [ 865.141383][T17903] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3351'. [ 865.150605][T17903] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3351'. [ 865.159796][T17903] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3351'. [ 865.168860][T17903] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3351'. [ 866.133765][ T47] net_ratelimit: 6 callbacks suppressed [ 867.327522][T17925] futex_wake_op: syz.8.3360 tries to shift op by 144; fix this program [ 870.047526][T17943] netdevsim netdevsim8: Direct firmware load for ~ failed with error -2 [ 870.056000][T17943] netdevsim netdevsim8: Falling back to sysfs fallback for: ~ [ 870.075464][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.081814][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 872.046140][ T4299] net_ratelimit: 6 callbacks suppressed [ 873.129604][T17993] netlink: 'syz.9.3379': attribute type 1 has an invalid length. [ 873.297178][T17998] 8021q: adding VLAN 0 to HW filter on device bond8 [ 873.336690][T17998] bond7: (slave bond8): making interface the new active one [ 873.348060][T17998] bond7: (slave bond8): Enslaving as an active interface with an up link [ 874.888140][T17993] bond7: (slave gretap1): Enslaving as a backup interface with an up link [ 877.653290][ T6720] net_ratelimit: 8 callbacks suppressed [ 880.362583][T18099] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3400'. [ 880.833547][ T27] audit: type=1800 audit(2000000349.800:914): pid=18089 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3399" name="bus" dev="ramfs" ino=81059 res=0 errno=0 [ 882.693108][ T4451] net_ratelimit: 4 callbacks suppressed [ 883.972045][T18142] MPTCP: kernel_bind error, err=-98 [ 885.300853][T18164] futex_wake_op: syz.9.3415 tries to shift op by 144; fix this program [ 885.638290][T18170] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3418'. [ 887.405373][T18178] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 888.677304][ T76] net_ratelimit: 7 callbacks suppressed [ 889.076914][T18203] futex_wake_op: syz.7.3426 tries to shift op by 144; fix this program [ 889.905106][T18203] syz.7.3426 sent an empty control message without MSG_MORE. [ 892.823213][T18242] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[5896] was attempted by " [ 893.758938][T18258] No such timeout policy "syz1" [ 894.109522][ T76] net_ratelimit: 9 callbacks suppressed [ 894.571607][T18264] MPTCP: kernel_bind error, err=-99 [ 899.897497][T15990] net_ratelimit: 7 callbacks suppressed [ 900.023698][T18311] bond0 speed is unknown, defaulting to 1000 [ 905.108235][T15990] net_ratelimit: 6 callbacks suppressed [ 905.347768][T18359] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 905.355894][T18359] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 905.363710][T18359] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 905.371680][T18359] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 905.402884][T18359] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 905.438764][T18359] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 905.465282][T18359] bridge0: port 3(bond0) entered disabled state [ 905.504363][T18359] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 905.564566][T18359] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 905.641954][T18359] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 905.666225][T18359] device bridge_slave_1 left promiscuous mode [ 905.712891][T18359] bridge0: port 2(bridge_slave_1) entered disabled state [ 906.515398][T18359] bond0: (slave bond_slave_0): Releasing backup interface [ 906.591502][T18359] device bond_slave_0 left promiscuous mode [ 907.141258][T18359] bond0: (slave bond_slave_1): Releasing backup interface [ 907.340519][T18359] device bond_slave_1 left promiscuous mode [ 907.369139][T18359] device team_slave_0 left promiscuous mode [ 907.941564][T18359] team0: Port device team_slave_0 removed [ 907.985902][T18359] device team_slave_1 left promiscuous mode [ 908.010351][T18359] team0: Port device team_slave_1 removed [ 908.670580][T18359] bond0: (slave macvlan2): Releasing backup interface [ 908.680953][T18359] device macvlan2 left promiscuous mode [ 908.704953][T18359] device team0 left promiscuous mode [ 908.727087][T18359] device vlan2 left promiscuous mode [ 908.732518][T18359] device bond0 left promiscuous mode [ 908.738750][T18359] device vxlan0 left promiscuous mode [ 908.745144][T18359] bridge0: port 4(vlan2) entered disabled state [ 908.756914][T18359] bond1: (slave veth3): Releasing backup interface [ 908.912670][T18359] bond3: (slave veth7): Releasing active interface [ 909.085591][T18359] bond3: (slave veth7): the permanent HWaddr of slave - 16:f6:5e:0e:8f:98 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 909.304483][T18359] device batadv1 entered promiscuous mode [ 909.461616][T18359] bond3: (slave batadv1): Releasing active interface [ 909.471974][T18359] device batadv1 left promiscuous mode [ 909.488826][T18359] bond3: (slave veth9): Releasing active interface [ 909.517053][T18359] bond0: (slave vxlan0): Releasing backup interface [ 909.527843][T18359] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 909.536497][T18359] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 909.545062][T18359] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 909.553473][T18359] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 909.695869][T18363] team0: Mode changed to "activebackup" [ 909.756352][T18398] MPTCP: kernel_bind error, err=-99 [ 910.935932][ T4428] net_ratelimit: 6 callbacks suppressed [ 911.243210][T18424] nftables ruleset with unbound set [ 913.669006][T18452] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 913.713467][T18452] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 914.802319][T18452] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 914.858477][T18452] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 914.867132][T18452] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 914.874978][T18452] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 914.888595][T18452] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 914.907484][T18452] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 914.925646][T18452] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 915.029553][T18452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 915.081126][T18452] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 915.112080][T18452] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan0: link becomes ready [ 915.133754][T18462] futex_wake_op: syz.4.3496 tries to shift op by 144; fix this program [ 915.155464][T18452] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 915.216310][T18452] bond7: (slave bond8): Releasing backup interface [ 915.222850][T18452] bond7: (slave bond8): the permanent HWaddr of slave - ca:2e:d1:27:6a:2d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 915.355405][T18452] bond7: (slave gretap1): making interface the new active one [ 915.989208][T18452] bond7: (slave gretap1): Releasing backup interface [ 916.059807][ T11] net_ratelimit: 8 callbacks suppressed [ 916.104570][T18454] team0: Mode changed to "activebackup" [ 921.179475][ T76] net_ratelimit: 9 callbacks suppressed [ 925.903396][ T4274] Bluetooth: Wrong link type (-22) [ 926.111303][T18584] tipc: Enabling of bearer rejected, failed to enable media [ 926.295712][T17630] net_ratelimit: 4 callbacks suppressed [ 926.730863][T18598] netlink: 'syz.4.3531': attribute type 1 has an invalid length. [ 928.459239][T18598] bond5: (slave bridge2): making interface the new active one [ 928.478903][T18598] bond5: (slave bridge2): Enslaving as an active interface with an up link [ 928.874563][T18626] futex_wake_op: syz.9.3536 tries to shift op by 144; fix this program [ 928.988559][T18631] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3535'. [ 929.133539][T18638] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3537'. [ 931.672341][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.691496][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.704353][ T11] net_ratelimit: 4 callbacks suppressed [ 932.534572][T18664] netlink: 'syz.8.3544': attribute type 1 has an invalid length. [ 932.606497][T18664] 8021q: adding VLAN 0 to HW filter on device bond7 [ 932.629476][T18666] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 932.712685][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bond7: link becomes ready [ 932.761528][T18664] device bridge2 entered promiscuous mode [ 932.817368][T18664] bond7: (slave bridge2): Enslaving as an active interface with an up link [ 933.916806][T18681] ip_tables: iptables: counters copy to user failed while replacing table [ 936.734413][ T4428] net_ratelimit: 7 callbacks suppressed [ 938.385426][T18725] 9pnet_fd: Insufficient options for proto=fd [ 943.133800][T15987] net_ratelimit: 4 callbacks suppressed [ 946.418616][T18807] netlink: 'syz.4.3573': attribute type 4 has an invalid length. [ 948.731905][T15987] net_ratelimit: 8 callbacks suppressed [ 951.709574][ T27] audit: type=1800 audit(2000000420.680:915): pid=18872 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.3593" name="bus" dev="ramfs" ino=82365 res=0 errno=0 [ 954.478157][ T7661] net_ratelimit: 26 callbacks suppressed [ 956.227716][ T49] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 957.611388][T18953] IPVS: set_ctl: invalid protocol: 137 172.30.0.10:20001 [ 957.707487][T18958] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3617'. [ 957.717064][T18958] bond0: option resend_igmp: invalid value (18446744072707910257) [ 957.725575][T18958] bond0: option resend_igmp: allowed values 0 - 255 [ 959.573188][ C0] net_ratelimit: 9 callbacks suppressed [ 960.426334][T18985] jffs2: notice: (18985) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 963.688058][T19016] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3634'. [ 963.920853][T19022] netlink: 'syz.8.3635': attribute type 4 has an invalid length. [ 964.023544][T19026] netlink: 2 bytes leftover after parsing attributes in process `syz.9.3624'. [ 964.669525][T19033] overlayfs: failed to clone upperpath [ 964.995506][ T4449] net_ratelimit: 6 callbacks suppressed [ 965.106424][T19035] device dummy0 entered promiscuous mode [ 965.113601][T19035] device vlan1 entered promiscuous mode [ 970.728087][T15987] net_ratelimit: 8 callbacks suppressed [ 971.303189][ T27] audit: type=1804 audit(2000000440.250:916): pid=19117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.3661" name="bus" dev="ramfs" ino=82752 res=1 errno=0 [ 972.210393][ T27] audit: type=1804 audit(2000000440.250:917): pid=19117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.3661" name="bus" dev="ramfs" ino=82752 res=1 errno=0 [ 973.377611][T19143] RDS: rds_bind could not find a transport for fec0:ffff:ffff:ffff::1, load rds_tcp or rds_rdma? [ 976.213147][ C0] net_ratelimit: 9 callbacks suppressed [ 981.252959][ C0] net_ratelimit: 6 callbacks suppressed [ 982.332412][T19229] overlayfs: failed to clone lowerpath [ 982.594659][T19232] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3682'. [ 985.778790][T19257] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3672'. [ 987.239549][ C1] net_ratelimit: 10 callbacks suppressed [ 992.857002][ T7675] net_ratelimit: 10 callbacks suppressed [ 992.863898][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.872509][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 995.230659][T19325] tipc: Enabling of bearer rejected, failed to enable media [ 998.372948][ C0] net_ratelimit: 12 callbacks suppressed [ 1000.709025][T19382] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3724'. [ 1003.451739][ T4274] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1003.473941][ T4274] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1003.493230][ T4274] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1003.513097][ T4274] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1003.525813][ T4274] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1003.533578][ T4274] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1004.372966][ C0] net_ratelimit: 11 callbacks suppressed [ 1004.397448][ T76] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1004.734931][T19409] 9pnet_fd: Insufficient options for proto=fd [ 1005.573156][ T4274] Bluetooth: hci1: command 0x0409 tx timeout [ 1005.630325][ T76] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1005.707144][T19417] tipc: Enabling of bearer rejected, failed to enable media [ 1005.732970][T19398] bond0 speed is unknown, defaulting to 1000 [ 1005.937656][ T76] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1006.657292][T19430] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3728'. [ 1007.686254][ T4274] Bluetooth: hci1: command 0x041b tx timeout [ 1008.198261][ T76] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1009.077278][T19462] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1009.086671][T19462] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1009.096403][T19462] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1009.111872][ T27] audit: type=1800 audit(2000000478.050:918): pid=19462 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3739" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 1009.181739][T19462] syz.7.3739 (19462) used greatest stack depth: 17280 bytes left [ 1009.432723][T19398] chnl_net:caif_netlink_parms(): no params data found [ 1009.743130][T18934] Bluetooth: hci1: command 0x040f tx timeout [ 1010.220602][ T9] net_ratelimit: 11 callbacks suppressed [ 1010.717739][ T76] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1010.956921][ T76] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1011.014399][ T76] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1011.157297][ T76] netdevsim netdevsim8 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 1011.187954][T19490] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3741'. [ 1011.205538][T19398] bridge0: port 1(bridge_slave_0) entered blocking state [ 1011.247397][T19398] bridge0: port 1(bridge_slave_0) entered disabled state [ 1011.320719][T19398] device bridge_slave_0 entered promiscuous mode [ 1011.391729][ T76] tipc: Disabling bearer [ 1011.399315][ T76] tipc: Left network mode [ 1011.407081][T19398] bridge0: port 2(bridge_slave_1) entered blocking state [ 1011.460344][T19398] bridge0: port 2(bridge_slave_1) entered disabled state [ 1011.486051][T19398] device bridge_slave_1 entered promiscuous mode [ 1011.813114][T18934] Bluetooth: hci1: command 0x0419 tx timeout [ 1011.873871][T19500] futex_wake_op: syz.9.3746 tries to shift op by 144; fix this program [ 1011.939559][T19398] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1012.126398][T19398] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1013.353172][T19398] team0: Port device team_slave_0 added [ 1013.371533][T19398] team0: Port device team_slave_1 added [ 1015.253198][ C0] net_ratelimit: 8 callbacks suppressed [ 1016.218906][T19398] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1016.232990][T19398] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1016.378637][T19398] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1016.489789][ T76] device erspan0 left promiscuous mode [ 1016.530434][T19398] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1016.550832][T19398] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1016.643024][T19398] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1016.819476][ T76] device gretap0 left promiscuous mode [ 1017.353845][T19563] netlink: 104 bytes leftover after parsing attributes in process `syz.7.3750'. [ 1017.822336][T19398] device hsr_slave_0 entered promiscuous mode [ 1018.104129][T19398] device hsr_slave_1 entered promiscuous mode [ 1020.933365][T15987] net_ratelimit: 10 callbacks suppressed [ 1021.809294][ T76] device hsr_slave_0 left promiscuous mode [ 1021.870418][T19615] sctp: [Deprecated]: syz.6.3765 (pid 19615) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1021.870418][T19615] Use struct sctp_sack_info instead [ 1022.048945][ T76] device hsr_slave_1 left promiscuous mode [ 1022.340140][ T76] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1022.467754][ T76] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1022.476324][ T76] device bridge_slave_1 left promiscuous mode [ 1022.482569][ T76] bridge0: port 2(bridge_slave_1) entered disabled state [ 1022.669441][T19626] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3771'. [ 1022.765879][T19629] RDS: rds_bind could not find a transport for fec0:ffff:ffff:ffff::1, load rds_tcp or rds_rdma? [ 1022.789967][ T76] bond7 (unregistering): (slave bridge2): Releasing backup interface [ 1023.927335][T19642] overlayfs: failed to clone upperpath [ 1025.159599][ T76] bond7 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 1025.179504][ T76] bond7 (unregistering): Released all slaves [ 1025.301636][ T76] bond6 (unregistering): (slave geneve2): Releasing active interface [ 1025.373772][T19657] overlayfs: failed to clone lowerpath [ 1026.268436][ T76] bond6 (unregistering): Released all slaves [ 1026.285870][ T76] bond5 (unregistering): Released all slaves [ 1026.396964][ T76] bond4 (unregistering): (slave veth5): Releasing backup interface [ 1026.666376][ T76] bond4 (unregistering): Released all slaves [ 1026.792704][ T11] net_ratelimit: 11 callbacks suppressed [ 1027.139389][ T76] bond3 (unregistering): (slave veth3): Releasing backup interface [ 1027.158852][ T76] bond3 (unregistering): Released all slaves [ 1027.184280][ T76] bond2 (unregistering): Released all slaves [ 1027.292963][ T76] team0 (unregistering): Port device macvlan2 removed [ 1027.666029][ T76] bond1 (unregistering): Released all slaves [ 1028.589494][ T76] team0 (unregistering): Port device team_slave_1 removed [ 1028.664179][ T76] team0 (unregistering): Port device team_slave_0 removed [ 1028.747315][ T76] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1028.825409][ T76] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1029.346391][ T76] bond0 (unregistering): Released all slaves [ 1029.460527][ T76] smc: removing net device lo with user defined pnetid SYZ0 [ 1029.529320][T19653] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1029.538760][T19653] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1029.548386][T19653] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1029.569194][ T27] audit: type=1800 audit(2000000498.500:919): pid=19653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3778" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 1029.589916][T19663] tipc: Enabling of bearer rejected, failed to enable media [ 1031.945299][T17630] net_ratelimit: 9 callbacks suppressed [ 1033.354322][T19398] netdevsim netdevsim0 eth8 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1033.562855][T19735] tipc: Enabling of bearer rejected, failed to enable media [ 1034.713913][T19398] netdevsim netdevsim0 eth7 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1036.085474][T19398] netdevsim netdevsim0 eth6 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1037.093205][ C0] net_ratelimit: 8 callbacks suppressed [ 1038.030192][T19398] netdevsim netdevsim0 eth5 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1039.453078][T19398] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1039.619862][T19398] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1040.040571][T19398] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1041.034495][T19398] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1042.133205][ T76] net_ratelimit: 10 callbacks suppressed [ 1042.219297][T19398] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1042.252730][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1042.269954][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1042.287657][T19398] 8021q: adding VLAN 0 to HW filter on device team0 [ 1042.809960][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1042.919872][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1042.985386][ T4327] bridge0: port 1(bridge_slave_0) entered blocking state [ 1042.992534][ T4327] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1043.005080][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1043.049727][T15988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1043.114152][T15988] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1043.153719][T15988] bridge0: port 2(bridge_slave_1) entered blocking state [ 1043.160856][T15988] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1043.379244][T15988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1043.388348][T15988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1043.521216][T19845] tipc: Enabling of bearer rejected, failed to enable media [ 1043.937019][T15988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1043.972316][T15988] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1044.005124][T15988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1044.028746][T15988] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1044.102537][T15988] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1044.158668][T19398] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1044.197748][T19398] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1044.408542][T15988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1044.417826][T15988] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1044.426992][T15988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1044.444124][T15988] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1044.610149][T15988] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1046.427730][T17630] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1046.475167][T17630] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1046.547204][T19398] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1047.253314][ T76] net_ratelimit: 6 callbacks suppressed [ 1047.356041][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1047.379685][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1047.522347][T19398] device veth0_vlan entered promiscuous mode [ 1047.593258][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1047.645785][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1047.911363][T15990] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1048.097030][T15990] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1048.303387][T19398] device veth1_vlan entered promiscuous mode [ 1048.600666][T19398] device veth0_macvtap entered promiscuous mode [ 1048.654045][T19398] device veth1_macvtap entered promiscuous mode [ 1048.893325][ T7661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1048.984314][T19927] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 1049.137603][ T7661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1049.187973][ T7661] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1049.602828][T19398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1049.663062][T19398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1049.703984][T19398] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1049.722072][ T7661] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1049.731833][ T7661] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1049.752724][ T7661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1049.859908][T19398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1050.631196][T19398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1050.713042][T19398] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1050.750763][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1050.766427][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1050.959552][T19398] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1051.000781][T19398] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1051.693709][T19398] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1051.703548][T19398] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1051.789854][T19952] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1052.100963][T19973] tipc: Enabling of bearer rejected, failed to enable media [ 1052.138101][ T7661] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1052.157087][ T7661] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1052.197643][ T7661] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1052.346873][T15990] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1052.372624][T15990] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1052.391664][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1052.703822][ C0] net_ratelimit: 45 callbacks suppressed [ 1052.849165][T19994] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3839'. [ 1053.966584][T20002] sctp: [Deprecated]: syz.7.3841 (pid 20002) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1053.966584][T20002] Use struct sctp_sack_info instead [ 1054.272278][T20003] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3840'. [ 1054.312541][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.350475][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1057.739996][ T7675] net_ratelimit: 20 callbacks suppressed [ 1058.372086][T18934] Bluetooth: hci1: unexpected cc 0x042d length: 63 > 7 [ 1059.988283][T20076] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1062.197343][T20101] netlink: 'syz.9.3865': attribute type 1 has an invalid length. [ 1062.460208][T18934] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1062.470193][T18934] Bluetooth: hci1: Injecting HCI hardware error event [ 1062.484235][ T4274] Bluetooth: hci1: hardware error 0x00 [ 1062.749575][ C1] net_ratelimit: 44 callbacks suppressed [ 1064.550078][T20152] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1065.173052][ T4274] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1067.649058][T20174] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3880'. [ 1068.362729][ C1] net_ratelimit: 18 callbacks suppressed [ 1071.964970][T20223] loop0: detected capacity change from 0 to 256 [ 1072.230551][T20223] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x5d6de3ec, utbl_chksum : 0xe619d30d) [ 1072.953822][T20232] tc action pedit offset must be on 32 bit boundaries [ 1072.962295][T20232] tc action pedit offset must be on 32 bit boundaries [ 1072.969146][T20232] tc action pedit offset must be on 32 bit boundaries [ 1072.975969][T20232] tc action pedit offset must be on 32 bit boundaries [ 1072.982748][T20232] tc action pedit offset must be on 32 bit boundaries [ 1072.989608][T20232] tc action pedit offset must be on 32 bit boundaries [ 1072.996423][T20232] tc action pedit offset must be on 32 bit boundaries [ 1073.003237][T20232] tc action pedit offset must be on 32 bit boundaries [ 1073.010451][T20232] tc action pedit offset must be on 32 bit boundaries [ 1073.017288][T20232] tc action pedit offset must be on 32 bit boundaries [ 1073.391714][T20243] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1073.492948][ C0] net_ratelimit: 23 callbacks suppressed [ 1078.740636][ C0] net_ratelimit: 24 callbacks suppressed [ 1084.132921][ C0] net_ratelimit: 21 callbacks suppressed [ 1084.541925][T20352] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3920'. [ 1084.602178][T20352] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3920'. [ 1085.039637][T20352] device geneve2 entered promiscuous mode [ 1085.330196][T20352] IPv6: ADDRCONF(NETDEV_CHANGE): geneve2: link becomes ready [ 1087.913142][T20370] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3925'. [ 1089.334106][T15987] net_ratelimit: 25 callbacks suppressed [ 1093.014428][ T27] audit: type=1326 audit(2000000561.940:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20407 comm="syz.4.3933" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff73a39e159 code=0x7ffc0000 [ 1093.014464][ T27] audit: type=1326 audit(2000000561.940:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20407 comm="syz.4.3933" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff73a39e159 code=0x7ffc0000 [ 1093.257573][T20418] tipc: Enabling of bearer rejected, failed to enable media [ 1093.468469][ T27] audit: type=1326 audit(2000000561.940:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20407 comm="syz.4.3933" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7ff73a39e159 code=0x7ffc0000 [ 1094.153582][ T27] audit: type=1326 audit(2000000561.940:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20407 comm="syz.4.3933" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff73a39e159 code=0x7ffc0000 [ 1094.178284][ T27] audit: type=1326 audit(2000000561.940:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20407 comm="syz.4.3933" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff73a39e159 code=0x7ffc0000 [ 1094.289608][ T27] audit: type=1326 audit(2000000561.940:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20407 comm="syz.4.3933" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7ff73a39e159 code=0x7ffc0000 [ 1094.406642][ T27] audit: type=1326 audit(2000000561.940:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20407 comm="syz.4.3933" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff73a39e159 code=0x7ffc0000 [ 1094.477987][ T27] audit: type=1326 audit(2000000561.940:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20407 comm="syz.4.3933" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff73a39e159 code=0x7ffc0000 [ 1094.613601][T15987] net_ratelimit: 25 callbacks suppressed [ 1100.024366][ T7661] net_ratelimit: 23 callbacks suppressed [ 1100.315815][T20534] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1105.093257][ T4449] net_ratelimit: 18 callbacks suppressed [ 1106.050329][T20610] tipc: Enabling of bearer rejected, already enabled [ 1106.949595][T20626] device syzkaller0 entered promiscuous mode [ 1109.983166][T20664] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3981'. [ 1110.233452][ T14] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1110.433051][ T14] usb 1-1: Using ep0 maxpacket: 8 [ 1110.448119][ T14] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1110.477993][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1110.501977][ T14] usb 1-1: Product: syz [ 1110.522219][ T14] usb 1-1: Manufacturer: syz [ 1110.533498][ T14] usb 1-1: SerialNumber: syz [ 1110.574200][ T14] usb 1-1: config 0 descriptor?? [ 1110.613765][ T4448] net_ratelimit: 18 callbacks suppressed [ 1110.786480][ T14] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1111.465223][ T27] audit: type=1804 audit(2000000580.430:928): pid=20687 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3987" name="bus" dev="ramfs" ino=88561 res=1 errno=0 [ 1111.772439][ T27] audit: type=1804 audit(2000000580.430:929): pid=20687 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.3987" name="bus" dev="ramfs" ino=88561 res=1 errno=0 [ 1112.547154][T20656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1112.580603][T20656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1112.622328][ T14] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 1112.652788][ T14] usb 1-1: USB disconnect, device number 5 [ 1116.181497][T20727] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3994'. [ 1116.191307][ C0] net_ratelimit: 19 callbacks suppressed [ 1116.205772][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.212116][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1117.309112][T20747] ------------[ cut here ]------------ [ 1117.315931][T20747] WARNING: CPU: 1 PID: 20747 at net/mac80211/iface.c:532 ieee80211_do_stop+0x1b14/0x2020 [ 1117.326150][T20747] Modules linked in: [ 1117.330066][T20747] CPU: 1 PID: 20747 Comm: syz.4.4000 Not tainted syzkaller #0 [ 1117.338098][T20747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1117.348347][T20747] RIP: 0010:ieee80211_do_stop+0x1b14/0x2020 [ 1117.354326][T20747] Code: f7 49 81 c4 98 06 00 00 4c 89 e0 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 d2 04 00 00 41 ff 0c 24 e9 f9 f5 ff ff e8 7c 3f d5 f7 <0f> 0b e9 11 e9 ff ff e8 70 3f d5 f7 48 c7 c7 00 fd a6 8b 89 de e8 [ 1117.373994][T20747] RSP: 0018:ffffc9000e3df660 EFLAGS: 00010283 [ 1117.380064][T20747] RAX: ffffffff89acf364 RBX: 0000000000000001 RCX: 0000000000080000 [ 1117.388126][T20747] RDX: ffffc90003d59000 RSI: 0000000000028ba3 RDI: 0000000000028ba4 [ 1117.396128][T20747] RBP: ffffc9000e3df848 R08: ffffc9000e3df507 R09: 1ffff92001c7bea0 [ 1117.404120][T20747] R10: dffffc0000000000 R11: fffff52001c7bea1 R12: ffffc9000e3df7b0 [ 1117.412085][T20747] R13: dffffc0000000000 R14: 0000000000000001 R15: ffff888055862760 [ 1117.412101][T20747] FS: 00007ff73b2616c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1117.429039][T20747] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1117.429056][T20747] CR2: 00007ff73b240d58 CR3: 0000000037a01000 CR4: 00000000003506e0 [ 1117.443682][T20747] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1117.451677][T20747] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1117.459721][T20747] Call Trace: [ 1117.463050][T20747] [ 1117.466008][T20747] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1117.472019][T20747] ? rcu_is_watching+0x11/0xa0 [ 1117.476974][T20747] ? __mutex_lock+0x1ab/0xae0 [ 1117.481679][T20747] ? ieee80211_sdata_stop+0x80/0x80 [ 1117.486954][T20747] ? mutex_lock_nested+0x10/0x10 [ 1117.491923][T20747] ? __local_bh_enable_ip+0x136/0x1c0 [ 1117.497365][T20747] ? dev_deactivate_many+0xb49/0xcd0 [ 1117.502760][T20747] ieee80211_stop+0x41f/0x490 [ 1117.507475][T20747] ? dev_deactivate_many+0x242/0xcd0 [ 1117.512760][T20747] ? ieee80211_open+0x200/0x200 [ 1117.512783][T20747] __dev_close_many+0x1d1/0x2b0 [ 1117.522475][T20747] ? dev_close_many+0x400/0x400 [ 1117.522506][T20747] __dev_change_flags+0x2c9/0x6a0 [ 1117.532388][T20747] ? dev_get_flags+0x1c0/0x1c0 [ 1117.537246][T20747] dev_change_flags+0x78/0x1a0 [ 1117.542024][T20747] devinet_ioctl+0x84f/0x1bf0 [ 1117.542058][T20747] inet_ioctl+0x2fa/0x460 [ 1117.551125][T20747] ? inet_shutdown+0x370/0x370 [ 1117.555967][T20747] ? slab_free_freelist_hook+0x133/0x1b0 [ 1117.561766][T20747] ? tomoyo_path_number_perm+0x4fb/0x650 [ 1117.567623][T20747] ? __kmem_cache_free+0xb6/0x200 [ 1117.572690][T20747] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1117.578242][T20747] sock_do_ioctl+0xfb/0x320 [ 1117.582931][T20747] ? sock_show_fdinfo+0xb0/0xb0 [ 1117.587825][T20747] sock_ioctl+0x48a/0x700 [ 1117.592180][T20747] ? sock_poll+0x420/0x420 [ 1117.596674][T20747] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1117.601740][T20747] ? security_file_ioctl+0x7c/0xa0 [ 1117.606983][T20747] ? sock_poll+0x420/0x420 [ 1117.611410][T20747] __se_sys_ioctl+0xfa/0x170 [ 1117.616075][T20747] do_syscall_64+0x4c/0xa0 [ 1117.620503][T20747] ? clear_bhb_loop+0x60/0xb0 [ 1117.625247][T20747] ? clear_bhb_loop+0x60/0xb0 [ 1117.629935][T20747] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1117.635900][T20747] RIP: 0033:0x7ff73a39e159 [ 1117.640333][T20747] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1117.659991][T20747] RSP: 002b:00007ff73b261028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1117.668446][T20747] RAX: ffffffffffffffda RBX: 00007ff73a625fa0 RCX: 00007ff73a39e159 [ 1117.668463][T20747] RDX: 0000200000000300 RSI: 0000000000008914 RDI: 0000000000000004 [ 1117.668474][T20747] RBP: 00007ff73a43506b R08: 0000000000000000 R09: 0000000000000000 [ 1117.668484][T20747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1117.668493][T20747] R13: 00007ff73a626038 R14: 00007ff73a625fa0 R15: 00007fffd35cd688 [ 1117.668515][T20747] [ 1117.669045][ C0] nf_nat: Already setup manip DST for ct ffff888027466600 (status bits 0x188) [ 1117.677072][T20747] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1117.677083][T20747] CPU: 1 PID: 20747 Comm: syz.4.4000 Not tainted syzkaller #0 [ 1117.677098][T20747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1117.677108][T20747] Call Trace: [ 1117.677117][T20747] [ 1117.677125][T20747] dump_stack_lvl+0x188/0x24e [ 1117.677148][T20747] ? memcpy+0x3c/0x60 [ 1117.677167][T20747] ? show_regs_print_info+0x12/0x12 [ 1117.677186][T20747] ? load_image+0x410/0x410 [ 1117.677217][T20747] panic+0x2d3/0x710 [ 1117.677243][T20747] ? bpf_jit_dump+0xd0/0xd0 [ 1117.677276][T20747] __warn+0x2f8/0x4f0 [ 1117.677295][T20747] ? ieee80211_do_stop+0x1b14/0x2020 [ 1117.677317][T20747] ? ieee80211_do_stop+0x1b14/0x2020 [ 1117.677335][T20747] report_bug+0x2ba/0x4f0 [ 1117.677353][T20747] ? ieee80211_do_stop+0x1b14/0x2020 [ 1117.677377][T20747] handle_bug+0x3a/0x70 [ 1117.677394][T20747] exc_invalid_op+0x16/0x40 [ 1117.677411][T20747] asm_exc_invalid_op+0x16/0x20 [ 1117.677428][T20747] RIP: 0010:ieee80211_do_stop+0x1b14/0x2020 [ 1117.677449][T20747] Code: f7 49 81 c4 98 06 00 00 4c 89 e0 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 d2 04 00 00 41 ff 0c 24 e9 f9 f5 ff ff e8 7c 3f d5 f7 <0f> 0b e9 11 e9 ff ff e8 70 3f d5 f7 48 c7 c7 00 fd a6 8b 89 de e8 [ 1117.677463][T20747] RSP: 0018:ffffc9000e3df660 EFLAGS: 00010283 [ 1117.677480][T20747] RAX: ffffffff89acf364 RBX: 0000000000000001 RCX: 0000000000080000 [ 1117.677492][T20747] RDX: ffffc90003d59000 RSI: 0000000000028ba3 RDI: 0000000000028ba4 [ 1117.677504][T20747] RBP: ffffc9000e3df848 R08: ffffc9000e3df507 R09: 1ffff92001c7bea0 [ 1117.677516][T20747] R10: dffffc0000000000 R11: fffff52001c7bea1 R12: ffffc9000e3df7b0 [ 1117.677529][T20747] R13: dffffc0000000000 R14: 0000000000000001 R15: ffff888055862760 [ 1117.677548][T20747] ? ieee80211_do_stop+0x1b14/0x2020 [ 1117.677574][T20747] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1117.677601][T20747] ? rcu_is_watching+0x11/0xa0 [ 1117.677629][T20747] ? __mutex_lock+0x1ab/0xae0 [ 1117.677648][T20747] ? ieee80211_sdata_stop+0x80/0x80 [ 1117.677675][T20747] ? mutex_lock_nested+0x10/0x10 [ 1117.677693][T20747] ? __local_bh_enable_ip+0x136/0x1c0 [ 1117.677716][T20747] ? dev_deactivate_many+0xb49/0xcd0 [ 1117.677745][T20747] ieee80211_stop+0x41f/0x490 [ 1117.677772][T20747] ? dev_deactivate_many+0x242/0xcd0 [ 1117.677794][T20747] ? ieee80211_open+0x200/0x200 [ 1117.677812][T20747] __dev_close_many+0x1d1/0x2b0 [ 1117.677833][T20747] ? dev_close_many+0x400/0x400 [ 1117.677860][T20747] __dev_change_flags+0x2c9/0x6a0 [ 1117.677890][T20747] ? dev_get_flags+0x1c0/0x1c0 [ 1117.677920][T20747] dev_change_flags+0x78/0x1a0 [ 1117.677946][T20747] devinet_ioctl+0x84f/0x1bf0 [ 1117.677975][T20747] inet_ioctl+0x2fa/0x460 [ 1117.677997][T20747] ? inet_shutdown+0x370/0x370 [ 1117.678013][T20747] ? slab_free_freelist_hook+0x133/0x1b0 [ 1117.678037][T20747] ? tomoyo_path_number_perm+0x4fb/0x650 [ 1117.678058][T20747] ? __kmem_cache_free+0xb6/0x200 [ 1117.678085][T20747] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1117.678112][T20747] sock_do_ioctl+0xfb/0x320 [ 1117.678134][T20747] ? sock_show_fdinfo+0xb0/0xb0 [ 1117.678166][T20747] sock_ioctl+0x48a/0x700 [ 1117.678187][T20747] ? sock_poll+0x420/0x420 [ 1117.678213][T20747] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1117.678236][T20747] ? security_file_ioctl+0x7c/0xa0 [ 1117.678255][T20747] ? sock_poll+0x420/0x420 [ 1117.678273][T20747] __se_sys_ioctl+0xfa/0x170 [ 1117.678298][T20747] do_syscall_64+0x4c/0xa0 [ 1117.678315][T20747] ? clear_bhb_loop+0x60/0xb0 [ 1117.678330][T20747] ? clear_bhb_loop+0x60/0xb0 [ 1117.678348][T20747] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1117.678372][T20747] RIP: 0033:0x7ff73a39e159 [ 1117.678388][T20747] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1117.678402][T20747] RSP: 002b:00007ff73b261028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1117.678419][T20747] RAX: ffffffffffffffda RBX: 00007ff73a625fa0 RCX: 00007ff73a39e159 [ 1117.678432][T20747] RDX: 0000200000000300 RSI: 0000000000008914 RDI: 0000000000000004 [ 1117.678443][T20747] RBP: 00007ff73a43506b R08: 0000000000000000 R09: 0000000000000000 [ 1117.678454][T20747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1117.678465][T20747] R13: 00007ff73a626038 R14: 00007ff73a625fa0 R15: 00007fffd35cd688 [ 1117.678490][T20747] [ 1117.685150][T20747] Kernel Offset: disabled [ 1118.138628][T20747] Rebooting in 86400 seconds..