last executing test programs: 13.211605472s ago: executing program 2 (id=4100): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) kexec_load(0x80, 0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x40000000, 0x2000000}], 0xa0000) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') pread64(r4, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000480), 0xffffffffffffffff) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$UBLK_U_CMD_GET_DEV_INFO(r0, 0x80207502, &(0x7f00000190c0)={0x0, 0xffff, 0x40, &(0x7f0000019080)}) ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f0000000000)={'vlan0\x00'}) mremap(&(0x7f0000a94000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000259000/0x4000)=nil) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b"], 0x0) 11.734382325s ago: executing program 0 (id=4108): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x35, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) 10.844506553s ago: executing program 0 (id=4110): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000001140)={{0x12, 0x1, 0x0, 0xee, 0x9c, 0x1, 0x40, 0x1e59, 0x2, 0x98ed, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0xfd, 0x4, 0x0, 0x7, "", [{{0x9, 0x4, 0x82, 0x5, 0x2, 0x44, 0x48, 0xcf, 0x7, [], [{{0x9, 0x5, 0x5, 0x10, 0x20, 0x9, 0x2}}, {{0x9, 0x5, 0x9, 0x8, 0x8, 0x80, 0xf, 0x4}}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, &(0x7f0000001800)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_open_dev$ublk_bdev(0x0, 0x0, 0x181400) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x10, 0x0, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x3}}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@multicast, @random="8a0a63cdec59", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @remote}}}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="3400000011000500feffff00feffffff07", @ANYRES32, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x4040010) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) 8.771269402s ago: executing program 4 (id=4114): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETDEBUG(r1, 0x400454c9, &(0x7f00000007c0)=0x2) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_devices(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close(r2) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mount_setattr(0xffffffffffffff9c, 0x0, 0xa000, 0x0, 0x0) 8.742342828s ago: executing program 2 (id=4115): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./security/apparmor/.replace\x00', 0x1, 0x0) write(r3, &(0x7f0000000300)="04080076657273696f6e00020500000004080070726f66696c650007050400223a6f00040600666c616773000702000000000200000000020000000008020000000002000000000200000000020000000008", 0x52) 8.711553515s ago: executing program 1 (id=4116): read$msr(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8000000001000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x0, 0x0, 0x3e8}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000081}, 0x84) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000008c0)=@newtfilter={0x40, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xf, 0x8}}]}}]}, 0x40}}, 0x0) 8.438407803s ago: executing program 4 (id=4117): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) syz_clone(0xc2002000, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r3, &(0x7f0000002980), 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040), 0x10}, 0x94) 7.865836964s ago: executing program 0 (id=4118): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000140)={@rand_addr, @initdev}, &(0x7f00000001c0)=0xc) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x8000) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0x1c, 0x0, 0x5, 0x1], 0x0, 0x41981}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.731242703s ago: executing program 2 (id=4119): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) readv(r4, &(0x7f0000000240)=[{&(0x7f0000000140)=""/16, 0x10}], 0x1) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x1b) 7.674220715s ago: executing program 3 (id=4120): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r3 = socket$inet6(0xa, 0x80802, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000000)=0x1) sendmmsg$inet6(r3, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x1}}], 0x3, 0x1c000) syz_io_uring_setup(0x2b41, &(0x7f00000002c0)={0x0, 0x7e8, 0x400, 0x2, 0x10c}, 0x0, 0x0, 0x0) 6.962867875s ago: executing program 2 (id=4121): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000780)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x1011f, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000004) openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0xcaf8, 0x40000) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) close_range(r3, 0xffffffffffffffff, 0x0) 6.962340775s ago: executing program 0 (id=4122): exit(0xef1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x4) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) write$binfmt_misc(r0, &(0x7f0000000000), 0xfffffecc) mremap(&(0x7f00005a7000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f00004fe000/0x4000)=nil) mremap(&(0x7f0000498000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='maps\x00') read$FUSE(r2, &(0x7f0000005200)={0x2020}, 0x2020) 5.998371s ago: executing program 3 (id=4123): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) kexec_load(0x80, 0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x40000000, 0x2000000}], 0xa0000) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') pread64(r4, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000480), 0xffffffffffffffff) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$UBLK_U_CMD_GET_DEV_INFO(r0, 0x80207502, &(0x7f00000190c0)={0x0, 0xffff, 0x40, &(0x7f0000019080)}) ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f0000000000)={'vlan0\x00'}) mremap(&(0x7f0000a94000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000259000/0x4000)=nil) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b"], 0x0) 5.931357524s ago: executing program 1 (id=4124): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000020c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1f2) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r3, 0xc1105511, &(0x7f0000000040)={0x9, 0x0, 0x40, 0x10000, 'syz1\x00', 0x6}) 5.927390895s ago: executing program 4 (id=4125): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) kexec_load(0x80, 0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x40000000, 0x2000000}], 0xa0000) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') pread64(r4, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000480), 0xffffffffffffffff) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$UBLK_U_CMD_GET_DEV_INFO(r0, 0x80207502, &(0x7f00000190c0)={0x0, 0xffff, 0x40, &(0x7f0000019080)}) ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f0000000000)={'vlan0\x00'}) mremap(&(0x7f0000a94000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000259000/0x4000)=nil) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b"], 0x0) 5.794396403s ago: executing program 0 (id=4126): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB], 0x7) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000002140)='net/netstat\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r4, &(0x7f0000000000)='7', 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x50) read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x229) mkdirat(0xffffffffffffffff, 0x0, 0x67) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x80000000}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x19}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x90}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0x7, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/sys/vm/nr_hugepages\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000000)=0x7ff, 0x12) landlock_create_ruleset(&(0x7f0000000040)={0x1010, 0x3}, 0x30, 0x0) 4.938464424s ago: executing program 1 (id=4127): syz_usb_connect(0x0, 0x3f, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00') r3 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r3, r3, r3}, 0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={'streebog256\x00'}}) 2.983843198s ago: executing program 2 (id=4128): setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x8) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800000, &(0x7f0000000380)=ANY=[], 0x1, 0x14fd, &(0x7f0000002a80)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x8840, 0xa2) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x232780, 0x43}, 0x18) mkdirat(r2, &(0x7f00000001c0)='./file1\x00', 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f00000003c0)={r1, &(0x7f0000000200)='/dev/loop', 0x400, &(0x7f00000002c0)={@align=0x6, {0x0, 0x9, 0x7ff, 0x3}}, 0x9, &(0x7f0000000300)={@_ha_fsid}, &(0x7f0000000340)=0x1}) sendmsg$AUDIT_GET_FEATURE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3fb, 0x0, 0x70bd24}, 0x10}}, 0x0) sendmsg$AUDIT_TTY_GET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x3f8, 0x200, 0x7, 0x1}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) recvmmsg(r3, &(0x7f0000001980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x12000, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x101) write(r5, &(0x7f0000000100)='?', 0x1) sendfile(r5, r1, 0x0, 0x3ffff) 2.890339098s ago: executing program 3 (id=4129): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x330, 0x1f0, 0xa8, 0xfeffffff, 0x0, 0x148, 0x298, 0x298, 0xffffffff, 0x298, 0x298, 0x5, 0x0, {[{{@ip={@broadcast, @broadcast, 0xffffff00, 0xff000000, 'netdevsim0\x00', 'ip6gretap0\x00', {}, {0xff}, 0x8, 0x1, 0x26}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0xb1, {0x1b633403eb653ce6, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @icmp_id=0x65, @port=0x4e24}}}}, {{@ip={@remote, @empty, 0xffffff, 0xffffff00, 'ipvlan1\x00', 'veth1_vlan\x00', {0xff}, {0xff}, 0x1, 0x1, 0x43}, 0x0, 0x70, 0xa0, 0x0, {0x0, 0x7}}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x4, 0x4, 0xe4447d2cdf7ef33e}, {0x3, 0x2, 0x7}, 0x9, 0x5e4}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0xd, @rand_addr, @local}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @gre_key=0x7, @icmp_id=0x64}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) syz_emit_ethernet(0x56, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) syz_emit_ethernet(0x36, &(0x7f0000000800)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x0, 0x2c, 0x0, @remote, @local}}}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001a0)='./nfsd/max_block_size\x00', 0x1, 0x0) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x9) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x202000, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) 2.440049803s ago: executing program 4 (id=4130): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x842, 0x0) fcntl$setstatus(r4, 0x4, 0x2000) close_range(r0, 0xffffffffffffffff, 0x0) 2.371220938s ago: executing program 3 (id=4131): openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa62d6000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r3, 0x6, 0x1e, 0x0, &(0x7f0000000280)) 1.251496585s ago: executing program 1 (id=4132): syz_mount_image$udf(&(0x7f0000000280), &(0x7f00000000c0)='./file0\x00', 0x4, &(0x7f00000003c0)=ANY=[], 0x46, 0xc11, &(0x7f0000000d00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000340)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4000000) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) 1.251151435s ago: executing program 4 (id=4133): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) recvmmsg(r0, &(0x7f0000005900)=[{{0x0, 0x0, &(0x7f0000004180)}, 0x6}], 0x1, 0x9ef0fe8c4979d826, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0xa, &(0x7f0000000040)=0x4, 0x4) sendmsg(r1, &(0x7f0000002c40)={&(0x7f0000000140)=@in={0x2, 0x4e24, @empty}, 0x80, &(0x7f0000001780)=[{&(0x7f00000001c0)='k', 0x1}], 0x1}, 0x0) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, 0x0, 0x404c01c) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x790, &(0x7f0000006a80)="$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") r2 = openat(0xffffffffffffff9c, 0x0, 0x80342, 0x168) getpid() sendmmsg$unix(r2, 0x0, 0x0, 0x20040000) 1.217297312s ago: executing program 3 (id=4134): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xd4) ioctl$KVM_TDX_CAPABILITIES(r0, 0x4c05, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000300)={[{@grpid}, {@jqfmt_vfsold}, {@nodioread_nolock}, {@errors_remount}, {@inode_readahead_blks}, {@nodelalloc}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x1, 0xbaf, &(0x7f00000025c0)="$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") quotactl$Q_GETINFO(0xffffffff80000500, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000140)) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000180)={0x4c, r1, 0x801, 0x400, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY={0x24, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "64ac8e2b1a"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac09}, @NL80211_KEY_DEFAULT={0x4}]}]}, 0x4c}}, 0x0) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r2) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x64, r4, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xb7}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x2000c0c1) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000700)={0x0, 0x3, 0x7, 0x1}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f0000000b00)={r6, 0x401, 0x1, 0x1}) 1.123566652s ago: executing program 2 (id=4135): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r2) socket$inet6_tcp(0xa, 0x1, 0x0) fdatasync(0xffffffffffffffff) syz_clone(0x4400, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002600)="657e42d4c2f1834dde2bf76db7ef690696e891c3c4392efac5b2281ecde49807e4fcfbd79a6a4ac84335a518611fb57e617ea3c285924c6f4c7cb9fb55db3cc1c412d38b9d22c172e27a152deeaa1a626d261cc48c13468b693e09a3f3a17f7089f39a62a10be285706902") 222.619743ms ago: executing program 1 (id=4136): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x2, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004854}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0x7, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x4}, @TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x100}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 170.776474ms ago: executing program 0 (id=4137): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000100)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}}) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40242, 0x1) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x800005}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f00000002c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) sendmsg$inet(r1, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) sendmsg$inet(r1, &(0x7f0000000cc0)={&(0x7f0000000340)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000000d00)=[@ip_retopts={{0x10}}], 0x10}, 0x0) 64.458447ms ago: executing program 3 (id=4138): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r0 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socket(0x2, 0x2, 0xff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x48050) 666.24µs ago: executing program 1 (id=4139): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) kexec_load(0x80, 0x0, 0x0, 0xa0000) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') pread64(r4, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000480), 0xffffffffffffffff) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$UBLK_U_CMD_GET_DEV_INFO(r0, 0x80207502, &(0x7f00000190c0)={0x0, 0xffff, 0x40, &(0x7f0000019080)}) ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f0000000000)={'vlan0\x00'}) mremap(&(0x7f0000a94000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000259000/0x4000)=nil) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b"], 0x0) 0s ago: executing program 4 (id=4140): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) kexec_load(0x80, 0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x40000000, 0x2000000}], 0xa0000) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') pread64(r4, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000480), 0xffffffffffffffff) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$UBLK_U_CMD_GET_DEV_INFO(r0, 0x80207502, &(0x7f00000190c0)={0x0, 0xffff, 0x40, &(0x7f0000019080)}) ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f0000000000)={'vlan0\x00'}) mremap(&(0x7f0000a94000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000259000/0x4000)=nil) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b"], 0x0) kernel console output (not intermixed with test programs): 0) entered blocking state [ 71.734927][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.742550][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.753563][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.762423][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.769632][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.778860][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.787153][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.794991][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.815390][ T4276] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.834276][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.845345][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.876264][ T4285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.911700][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.920471][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.940255][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.950817][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.963921][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.971561][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.980118][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.989081][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.998277][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.005431][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.013551][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.022137][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.041563][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.070892][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.111602][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.128691][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.144512][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.156561][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.194329][ T4285] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.214732][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.230228][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.240825][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.254089][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.262708][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.272126][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.280708][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.289463][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.297497][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.306100][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.314734][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.323145][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.323716][ T4287] Bluetooth: hci3: command 0x041b tx timeout [ 72.331686][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.337143][ T4283] Bluetooth: hci0: command 0x041b tx timeout [ 72.337173][ T4283] Bluetooth: hci4: command 0x041b tx timeout [ 72.364139][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.377531][ T4276] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.392726][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.403318][ T4280] Bluetooth: hci1: command 0x041b tx timeout [ 72.403814][ T4287] Bluetooth: hci2: command 0x041b tx timeout [ 72.421601][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.430323][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.438992][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.463754][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.499907][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.518260][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.525473][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.563769][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.585937][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.609513][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.616834][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.662766][ T4272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.675870][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.694397][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.702039][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.752235][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.775647][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.793101][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.828889][ T4274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.859516][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.869696][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.879866][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.897670][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.908424][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.917569][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.927155][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.938616][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.949104][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.964836][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.981094][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.990222][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.005585][ T4272] device veth0_vlan entered promiscuous mode [ 73.018916][ T4285] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.030393][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.058955][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.069081][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.078726][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.087332][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.096371][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.105533][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.124352][ T4276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.146961][ T4272] device veth1_vlan entered promiscuous mode [ 73.159968][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.169065][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.178376][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.187194][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.197006][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.205362][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.213376][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.229734][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.238894][ T4274] device veth0_vlan entered promiscuous mode [ 73.259844][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.269386][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.289205][ T4274] device veth1_vlan entered promiscuous mode [ 73.303519][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.312581][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.321396][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.331911][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.355725][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.366011][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.398585][ T4272] device veth0_macvtap entered promiscuous mode [ 73.422492][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.432492][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.441820][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.451377][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.466520][ T4276] device veth0_vlan entered promiscuous mode [ 73.484954][ T4274] device veth0_macvtap entered promiscuous mode [ 73.495261][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.506131][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.515484][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.525518][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.534973][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.544885][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.555127][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.565426][ T4272] device veth1_macvtap entered promiscuous mode [ 73.587431][ T4276] device veth1_vlan entered promiscuous mode [ 73.626595][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.634362][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.642344][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.650586][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.659000][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.668191][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.677127][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.686432][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.695085][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.704435][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.713519][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.721424][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.738026][ T4274] device veth1_macvtap entered promiscuous mode [ 73.750336][ T4285] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.760983][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.782855][ T4273] device veth0_vlan entered promiscuous mode [ 73.799581][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.810001][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.825201][ T4272] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.835322][ T4272] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.844830][ T4272] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.853962][ T4272] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.874795][ T4273] device veth1_vlan entered promiscuous mode [ 73.884840][ T4276] device veth0_macvtap entered promiscuous mode [ 73.896064][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.906278][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.916053][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.929096][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.948950][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.961766][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.983084][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.992133][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.012373][ T4276] device veth1_macvtap entered promiscuous mode [ 74.020389][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.035096][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.050384][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.105168][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.115446][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.124678][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.135045][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.144327][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.160473][ T4274] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.170946][ T4274] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.186028][ T4274] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.198277][ T4274] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.214418][ T4273] device veth0_macvtap entered promiscuous mode [ 74.225555][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.238846][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.249608][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.260363][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.271739][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.291161][ T4273] device veth1_macvtap entered promiscuous mode [ 74.300097][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.315969][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.329548][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.342652][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.358206][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.383138][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.398210][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.403486][ T4287] Bluetooth: hci3: command 0x040f tx timeout [ 74.411790][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.415713][ T4287] Bluetooth: hci4: command 0x040f tx timeout [ 74.431832][ T4287] Bluetooth: hci0: command 0x040f tx timeout [ 74.440474][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.474993][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.482978][ T4287] Bluetooth: hci2: command 0x040f tx timeout [ 74.483377][ T4287] Bluetooth: hci1: command 0x040f tx timeout [ 74.501817][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.549168][ T4327] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.557814][ T4327] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.569237][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.581590][ T4276] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.595435][ T4276] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.604668][ T4276] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.616526][ T4276] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.627925][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.642306][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.653605][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.664128][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.674016][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.685143][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.696836][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.726606][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.736263][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.737223][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.749387][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.753626][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.768968][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.779514][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.789657][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.800938][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.811736][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.822677][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.835393][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.846428][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.858144][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.883964][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.892604][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.931701][ T4273] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.942111][ T4273] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.951252][ T4273] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.960068][ T4273] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.033348][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.041218][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.057986][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.066438][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.074983][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.084855][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.092772][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.106279][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.119579][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.137682][ T4285] device veth0_vlan entered promiscuous mode [ 75.159473][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.191928][ T4285] device veth1_vlan entered promiscuous mode [ 75.219242][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.253186][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.289749][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.304212][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.312347][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.321572][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.331742][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.355601][ T4285] device veth0_macvtap entered promiscuous mode [ 75.386663][ T4285] device veth1_macvtap entered promiscuous mode [ 75.394096][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.401949][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.421706][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.441950][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.479003][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.508417][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.529574][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.540477][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.551090][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.568321][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.581793][ T4285] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.607389][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.373064][ T4362] loop1: detected capacity change from 0 to 32768 [ 76.611719][ T4280] Bluetooth: hci0: command 0x0419 tx timeout [ 76.623210][ T4280] Bluetooth: hci1: command 0x0419 tx timeout [ 76.633218][ T4280] Bluetooth: hci2: command 0x0419 tx timeout [ 76.643016][ T4280] Bluetooth: hci4: command 0x0419 tx timeout [ 76.651218][ T4287] Bluetooth: hci3: command 0x0419 tx timeout [ 77.026388][ T4362] (syz.1.2,4362,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 77.041570][ T4362] (syz.1.2,4362,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 77.042227][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.064642][ T4362] (syz.1.2,4362,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x656d756e, computed 0x8514aa1d. Applying ECC. [ 77.097214][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.107371][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.116462][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.127703][ T4362] JBD2: Ignoring recovery information on journal [ 77.179840][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.194276][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.204949][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.217145][ T4362] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 77.230902][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.241494][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.252690][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.280383][ T4285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.312223][ T4285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.330579][ T4285] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.364100][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.385484][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.402076][ T4333] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.419614][ T4285] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.430269][ T4333] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.437922][ T4285] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.524515][ T4285] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.542906][ T4285] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.565529][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.644909][ T4364] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.680871][ T4364] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.716045][ T4272] ocfs2: Unmounting device (7,1) on (node local) [ 77.716841][ T26] audit: type=1326 audit(1790872972.455:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4372 comm="syz.2.6" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5a5b9e159 code=0x7ffc0000 [ 77.760084][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.801823][ T26] audit: type=1326 audit(1790872972.455:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4372 comm="syz.2.6" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5a5b9e159 code=0x7ffc0000 [ 77.844565][ T26] audit: type=1326 audit(1790872972.495:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4372 comm="syz.2.6" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7fa5a5b9e159 code=0x7ffc0000 [ 77.935781][ T4376] loop0: detected capacity change from 0 to 2048 [ 77.957554][ T26] audit: type=1326 audit(1790872972.495:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4372 comm="syz.2.6" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5a5b9e159 code=0x7ffc0000 [ 77.984930][ T26] audit: type=1326 audit(1790872972.495:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4372 comm="syz.2.6" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5a5b9e159 code=0x7ffc0000 [ 78.002972][ T4364] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.316716][ T4364] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.335644][ T26] audit: type=1326 audit(1790872972.495:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4372 comm="syz.2.6" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fa5a5b9e159 code=0x7ffc0000 [ 78.463694][ T26] audit: type=1326 audit(1790872972.495:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4372 comm="syz.2.6" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5a5b9e159 code=0x7ffc0000 [ 78.494731][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.586637][ T4376] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 78.621281][ T4376] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.640842][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.663658][ T26] audit: type=1326 audit(1790872972.495:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4372 comm="syz.2.6" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5a5b9e159 code=0x7ffc0000 [ 78.678682][ T4388] loop2: detected capacity change from 0 to 512 [ 78.696792][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.719292][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.726996][ T4282] Bluetooth: hci2: command 0x0409 tx timeout [ 78.760463][ T26] audit: type=1326 audit(1790872972.495:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4372 comm="syz.2.6" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fa5a5b9e159 code=0x7ffc0000 [ 78.823258][ T26] audit: type=1326 audit(1790872972.495:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4372 comm="syz.2.6" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5a5b9e159 code=0x7ffc0000 [ 78.882490][ T4384] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 78.915653][ T4388] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 78.975416][ T4388] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.998482][ T4396] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 14 with error 28 [ 79.023477][ T4396] EXT4-fs (loop0): This should not happen!! Data will be lost [ 79.023477][ T4396] [ 79.033812][ T4396] EXT4-fs (loop0): Total free blocks count 0 [ 79.213058][ T4400] loop1: detected capacity change from 0 to 64 [ 79.927298][ T4396] EXT4-fs (loop0): Free/Dirty block details [ 80.090588][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 80.140307][ T4396] EXT4-fs (loop0): free_blocks=0 [ 80.362823][ C0] sched: RT throttling activated [ 80.503616][ T4396] EXT4-fs (loop0): dirty_blocks=32 [ 80.508797][ T4396] EXT4-fs (loop0): Block reservation details [ 80.664320][ T4396] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 80.714776][ T4415] loop4: detected capacity change from 0 to 8 [ 81.122057][ T4423] loop1: detected capacity change from 0 to 8 [ 81.306674][ T4415] SQUASHFS error: zlib decompression failed, data probably corrupt [ 81.374480][ T4415] SQUASHFS error: Failed to read block 0x9b: -5 [ 81.393881][ T4415] SQUASHFS error: Unable to read metadata cache entry [99] [ 81.422534][ T4415] SQUASHFS error: Unable to read inode 0x127 [ 81.966434][ T4429] loop2: detected capacity change from 0 to 256 [ 82.301564][ T4415] loop4: detected capacity change from 0 to 4096 [ 82.308514][ T4415] ======================================================= [ 82.308514][ T4415] WARNING: The mand mount option has been deprecated and [ 82.308514][ T4415] and is ignored by this kernel. Remove the mand [ 82.308514][ T4415] option from the mount to silence this warning. [ 82.308514][ T4415] ======================================================= [ 82.368486][ T4431] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 82.392673][ T4429] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 82.472852][ T0] NOHZ tick-stop error: local softirq work is pending, handler #12!!! [ 82.492845][ T0] NOHZ tick-stop error: local softirq work is pending, handler #12!!! [ 82.502834][ T0] NOHZ tick-stop error: local softirq work is pending, handler #12!!! [ 82.512837][ T0] NOHZ tick-stop error: local softirq work is pending, handler #12!!! [ 82.522838][ T0] NOHZ tick-stop error: local softirq work is pending, handler #92!!! [ 82.532835][ T0] NOHZ tick-stop error: local softirq work is pending, handler #92!!! [ 82.542833][ T0] NOHZ tick-stop error: local softirq work is pending, handler #92!!! [ 82.552836][ T0] NOHZ tick-stop error: local softirq work is pending, handler #92!!! [ 82.562835][ T0] NOHZ tick-stop error: local softirq work is pending, handler #192!!! [ 82.572846][ T0] NOHZ tick-stop error: local softirq work is pending, handler #192!!! [ 83.104229][ T4327] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 15 with error 28 [ 83.349030][ T4438] loop2: detected capacity change from 0 to 512 [ 83.369832][ T4440] netlink: 'syz.4.17': attribute type 1 has an invalid length. [ 83.612205][ T4438] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 84.188959][ T4453] __vm_enough_memory: pid: 4453, comm: syz.2.16, no enough memory for the allocation [ 84.643246][ T4445] device lo entered promiscuous mode [ 85.253483][ T4465] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4273] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[4465] [ 85.720640][ T4465] netlink: 388 bytes leftover after parsing attributes in process `syz.3.19'. [ 85.956174][ T4445] device tunl0 entered promiscuous mode [ 86.160606][ T4445] device gre0 entered promiscuous mode [ 86.256888][ T4445] device gretap0 entered promiscuous mode [ 86.392367][ T4445] device erspan0 entered promiscuous mode [ 87.040593][ T126] cfg80211: failed to load regulatory.db [ 87.054672][ T4445] device ip_vti0 entered promiscuous mode [ 87.083735][ T4445] device ip6_vti0 entered promiscuous mode [ 87.091803][ T4476] "syz.2.23" (4476) uses obsolete ecb(arc4) skcipher [ 89.233261][ T4445] device sit0 entered promiscuous mode [ 90.421565][ T4445] device ip6tnl0 entered promiscuous mode [ 90.536512][ T4445] device ip6gre0 entered promiscuous mode [ 90.676794][ T4480] ALSA: mixer_oss: invalid OSS volume '' [ 90.682566][ T4480] ALSA: mixer_oss: invalid OSS volume '9[&?ļx;Bb[rSHٝsr' [ 90.691176][ T4480] ALSA: mixer_oss: invalid OSS volume '`~'5{&]c} {x.e8' [ 90.699644][ T4480] ALSA: mixer_oss: invalid OSS volume 'j'|]jpi?.>̡|' [ 90.708167][ T4480] ALSA: mixer_oss: invalid OSS volume '\SO\ ,4Qx' [ 90.716553][ T4480] ALSA: mixer_oss: invalid OSS volume 'Qq*h0;bZ1#<3 P' [ 90.726590][ T4480] ALSA: mixer_oss: invalid OSS volume 'S ߌ_q' [ 90.733987][ T4480] ALSA: mixer_oss: invalid OSS volume '):{bvijp"g_6fݢ' [ 90.742465][ T4480] ALSA: mixer_oss: invalid OSS volume 'Xr]X[*ۇ8tf;v6' [ 90.751958][ T4480] ALSA: mixer_oss: invalid OSS volume '8L&wrˍ' [ 90.758783][ T4480] ALSA: mixer_oss: invalid OSS volume 'zap1oRR|/`' [ 90.765847][ T4480] ALSA: mixer_oss: invalid OSS volume '_y4"PI]Yye3O|K7qa' [ 90.774911][ T4480] ALSA: mixer_oss: invalid OSS volume '\Qa2` g34%aFa v' [ 90.783358][ T4480] ALSA: mixer_oss: invalid OSS volume 'Avb4xf[k'3Rg' [ 90.791108][ T4480] ALSA: mixer_oss: invalid OSS volume 'uneB?' [ 90.798267][ T4480] ALSA: mixer_oss: invalid OSS volume 'Y*)i-?9j(/1G:ECWw' [ 90.904432][ T4445] device syz_tun entered promiscuous mode [ 90.997463][ T4445] device ip6gretap0 entered promiscuous mode [ 91.945589][ T4445] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.954414][ T4445] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.020761][ T4445] device bridge0 entered promiscuous mode [ 92.227704][ T4445] syz.4.17 (4445) used greatest stack depth: 20528 bytes left [ 92.670063][ T4511] Bluetooth: MGMT ver 1.22 [ 94.346042][ T4521] loop4: detected capacity change from 0 to 256 [ 94.740802][ T4526] process 'syz.3.35' launched '/dev/fd/8' with NULL argv: empty string added [ 95.109391][ T4521] exfat: Deprecated parameter 'utf8' [ 95.162686][ T4521] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 95.289670][ T4531] loop1: detected capacity change from 0 to 64 [ 96.445569][ T4542] xt_policy: output policy not valid in PREROUTING and INPUT [ 97.203684][ T4547] device bridge_slave_0 left promiscuous mode [ 97.210424][ T4547] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.730801][ T4364] rpcbind: server 127.0.0.1 not responding, timed out [ 99.781340][ T4561] Zero length message leads to an empty skb [ 101.253618][ T4565] loop0: detected capacity change from 0 to 512 [ 101.307631][ T4565] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 101.364713][ T4565] System zones: 1-12 [ 101.413394][ T4565] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #12: comm syz.0.33: missing EA_INODE flag [ 101.473491][ T4565] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.33: error while reading EA inode 12 err=-117 [ 101.519025][ T4565] EXT4-fs (loop0): 1 orphan inode deleted [ 101.531813][ T4565] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 101.965455][ T4580] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 102.559883][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 102.751633][ T4586] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 102.751633][ T4586] [ 102.766095][ T4586] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 103.458145][ T4586] CIFS: Attempting to mount \\127.0.0.1\share [ 104.002255][ T4598] loop2: detected capacity change from 0 to 16 [ 104.157835][ T4586] CIFS: VFS: Error connecting to socket. Aborting operation. [ 104.184171][ T4598] erofs: (device loop2): erofs_read_inode: unsupported datalayout 7 of nid 36 [ 105.358571][ T4586] CIFS: VFS: cifs_mount failed w/return code = -4 [ 105.407244][ T4598] loop2: detected capacity change from 0 to 512 [ 105.439967][ T4598] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 105.493076][ T4598] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 106.374861][ T4598] EXT4-fs (loop2): 1 truncate cleaned up [ 106.404429][ T4598] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 106.732880][ T4618] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2805: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 106.824909][ T4619] overlayfs: missing 'lowerdir' [ 107.844219][ T4624] loop4: detected capacity change from 0 to 128 [ 107.916084][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 108.550208][ T4634] loop2: detected capacity change from 0 to 2048 [ 108.651530][ T4634] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 109.537844][ T4650] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 110.111027][ T4655] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 111.078455][ T4657] loop0: detected capacity change from 0 to 1024 [ 111.460350][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 111.647057][ T4665] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 111.698681][ T4662] loop2: detected capacity change from 0 to 512 [ 111.707254][ T7] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 111.787369][ T4668] FAULT_INJECTION: forcing a failure. [ 111.787369][ T4668] name failslab, interval 1, probability 0, space 0, times 1 [ 111.868356][ T4670] netlink: 168 bytes leftover after parsing attributes in process `syz.0.59'. [ 111.983294][ T4668] CPU: 1 PID: 4668 Comm: syz.1.63 Not tainted syzkaller #0 [ 111.990545][ T4668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 112.000632][ T4668] Call Trace: [ 112.003925][ T4668] [ 112.006862][ T4668] dump_stack_lvl+0x188/0x24e [ 112.011553][ T4668] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 112.017198][ T4668] ? show_regs_print_info+0x12/0x12 [ 112.022408][ T4668] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 112.028066][ T4668] should_fail_ex+0x390/0x4c0 [ 112.032770][ T4668] should_failslab+0x5/0x20 [ 112.037282][ T4668] slab_pre_alloc_hook+0x59/0x300 [ 112.042323][ T4668] ? fib_create_info+0xa78/0x2370 [ 112.047365][ T4668] __kmem_cache_alloc_node+0x4f/0x270 [ 112.052756][ T4668] ? fib_create_info+0xa78/0x2370 [ 112.057803][ T4668] __kmalloc+0xa3/0x240 [ 112.061982][ T4668] fib_create_info+0xa78/0x2370 [ 112.066856][ T4668] ? dev_mc_add+0xcc/0x110 [ 112.071294][ T4668] fib_table_insert+0xc2/0x1af0 [ 112.076150][ T4668] ? l3mdev_fib_table+0x18/0x160 [ 112.081103][ T4668] ? __lock_acquire+0x7c40/0x7c40 [ 112.086146][ T4668] ? mark_lock+0x94/0x320 [ 112.090492][ T4668] ? l3mdev_fib_table+0x18/0x160 [ 112.095444][ T4668] ? fib_new_table+0x106/0x2d0 [ 112.100227][ T4668] fib_magic+0x2ca/0x3b0 [ 112.104491][ T4668] ? fib_add_ifaddr+0x5c0/0x5c0 [ 112.109366][ T4668] ? lockdep_rtnl_is_held+0x22/0x30 [ 112.114583][ T4668] ? ip_mc_up+0x27f/0x2f0 [ 112.118928][ T4668] fib_add_ifaddr+0x135/0x5c0 [ 112.123627][ T4668] fib_netdev_event+0x361/0x470 [ 112.128502][ T4668] raw_notifier_call_chain+0xcb/0x160 [ 112.133916][ T4668] __dev_notify_flags+0x1a7/0x310 [ 112.138974][ T4668] ? __dev_change_flags+0x6a0/0x6a0 [ 112.144189][ T4668] ? __dev_change_flags+0x4ce/0x6a0 [ 112.149413][ T4668] ? trace_raw_output_contention_end+0xd0/0xd0 [ 112.155589][ T4668] ? dev_get_flags+0x1c0/0x1c0 [ 112.160382][ T4668] ? rcu_is_watching+0x11/0xa0 [ 112.165166][ T4668] ? trace_contention_end+0x5f/0x170 [ 112.170470][ T4668] dev_change_flags+0xda/0x1a0 [ 112.175260][ T4668] dev_ifsioc+0x130/0xd50 [ 112.179617][ T4668] ? dev_ioctl+0xe80/0xe80 [ 112.184057][ T4668] ? apparmor_capable+0x12c/0x190 [ 112.189097][ T4668] ? full_name_hash+0x8e/0xe0 [ 112.193778][ T4668] ? dev_load+0x1d/0x1e0 [ 112.198018][ T4668] ? dev_load+0x1d/0x1e0 [ 112.202257][ T4668] dev_ioctl+0x55e/0xe80 [ 112.206500][ T4668] sock_do_ioctl+0x245/0x320 [ 112.211089][ T4668] ? sock_show_fdinfo+0xb0/0xb0 [ 112.215945][ T4668] sock_ioctl+0x48a/0x700 [ 112.220272][ T4668] ? sock_poll+0x420/0x420 [ 112.224691][ T4668] ? bpf_lsm_file_ioctl+0x5/0x10 [ 112.229627][ T4668] ? security_file_ioctl+0x7c/0xa0 [ 112.234739][ T4668] ? sock_poll+0x420/0x420 [ 112.239180][ T4668] __se_sys_ioctl+0xfa/0x170 [ 112.243777][ T4668] do_syscall_64+0x4c/0xa0 [ 112.248193][ T4668] ? clear_bhb_loop+0x60/0xb0 [ 112.252862][ T4668] ? clear_bhb_loop+0x60/0xb0 [ 112.257531][ T4668] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 112.263429][ T4668] RIP: 0033:0x7fb24eb9e159 [ 112.267866][ T4668] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.287470][ T4668] RSP: 002b:00007fb24fa65028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 112.295879][ T4668] RAX: ffffffffffffffda RBX: 00007fb24ee26090 RCX: 00007fb24eb9e159 [ 112.303843][ T4668] RDX: 0000200000000100 RSI: 0000000000008914 RDI: 0000000000000009 [ 112.311804][ T4668] RBP: 00007fb24ec3506b R08: 0000000000000000 R09: 0000000000000000 [ 112.319781][ T4668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.327745][ T4668] R13: 00007fb24ee26128 R14: 00007fb24ee26090 R15: 00007ffd1f581308 [ 112.335722][ T4668] [ 112.417868][ T4662] fscrypt (loop2, inode 2): Error -61 getting encryption context [ 112.443019][ T7] usb 5-1: Using ep0 maxpacket: 32 [ 112.643521][ T4662] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -61 [ 113.272740][ T7] usb 5-1: device descriptor read/all, error -71 [ 113.308270][ T4662] EXT4-fs error (device loop2): ext4_orphan_get:1409: inode #13: comm syz.2.62: iget: bad i_size value: 12154757448730 [ 113.355574][ T4662] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm syz.2.62: couldn't read orphan inode 13 (err -117) [ 113.437164][ T4662] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 114.935549][ T41] hfsplus: bad catalog file entry [ 115.142786][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 115.945640][ T4760] qnx4: no qnx4 filesystem (no root dir). [ 117.698826][ T4768] loop0: detected capacity change from 0 to 2048 [ 118.034817][ T4768] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 122.683598][ T4815] autofs4:pid:4815:autofs_fill_super: called with bogus options [ 124.549745][ T4828] overlayfs: failed to resolve './bus': -2 [ 124.653341][ T4318] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 125.246450][ T4318] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 125.262468][ T4318] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 125.283210][ T4318] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 125.291823][ T4837] netlink: 4 bytes leftover after parsing attributes in process `syz.3.87'. [ 125.292265][ T4318] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.432872][ T4827] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 125.454861][ T4839] Cannot find add_set index 0 as target [ 125.615923][ T4841] loop2: detected capacity change from 0 to 2048 [ 125.648468][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 125.648481][ T26] audit: type=1800 audit(1790873020.385:20): pid=4845 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.89" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0 [ 125.762166][ T4841] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 125.875242][ T4373] usb 1-1: USB disconnect, device number 2 [ 126.098069][ T26] audit: type=1800 audit(1790873020.835:21): pid=4853 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.92" name="c_chmask" dev="configfs" ino=35103 res=0 errno=0 [ 126.107377][ T4853] configfs-gadget.g1 gadget.0: afunc_bind:1261 Error! [ 126.127926][ T4853] udc dummy_udc.0: failed to start g1: -19 [ 126.136812][ T4853] UDC core: g1: couldn't find an available UDC or it's busy [ 126.151203][ T26] audit: type=1800 audit(1790873020.845:22): pid=4853 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.92" name="UDC" dev="configfs" ino=35105 res=0 errno=0 [ 127.587622][ T4861] autofs4:pid:4861:autofs_fill_super: called with bogus options [ 128.551767][ T4883] 0x000000000006-0x000000020000 : "" [ 128.568838][ T4883] ftl_cs: FTL header corrupt! [ 128.640407][ T4876] loop4: detected capacity change from 0 to 4096 [ 128.698179][ T4876] ntfs3: loop4: Failed to load $Extend. [ 129.035354][ T4891] netlink: 44 bytes leftover after parsing attributes in process `syz.2.112'. [ 129.433602][ T4890] overlayfs: failed to resolve './bus': -2 [ 130.111317][ T4895] loop0: detected capacity change from 0 to 2048 [ 130.166809][ T4895] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 131.761559][ T4903] loop4: detected capacity change from 0 to 2048 [ 132.114039][ T4903] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 132.970447][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.977771][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.509265][ T4926] loop2: detected capacity change from 0 to 2048 [ 134.563040][ T4926] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 134.662062][ T4921] loop1: detected capacity change from 0 to 32768 [ 134.846714][ T4936] overlayfs: failed to resolve './file1': -2 [ 135.122250][ T4921] XFS (loop1): Mounting V5 Filesystem [ 135.745998][ T4921] XFS (loop1): Ending clean mount [ 135.759941][ T4921] XFS (loop1): Quotacheck needed: Please wait. [ 135.905510][ T4921] XFS (loop1): Quotacheck: Done. [ 136.804715][ T4272] XFS (loop1): Unmounting Filesystem [ 137.131000][ T26] audit: type=1800 audit(1790873031.865:23): pid=4961 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.110" name="c_chmask" dev="configfs" ino=35970 res=0 errno=0 [ 137.176231][ T4961] configfs-gadget.g1 gadget.0: afunc_bind:1261 Error! [ 137.193124][ T4961] udc dummy_udc.0: failed to start g1: -19 [ 137.199159][ T26] audit: type=1800 audit(1790873031.915:24): pid=4961 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.110" name="UDC" dev="configfs" ino=35971 res=0 errno=0 [ 137.230616][ T4961] UDC core: g1: couldn't find an available UDC or it's busy [ 137.629968][ T4972] loop1: detected capacity change from 0 to 128 [ 137.656566][ T4972] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 140.033160][ T4998] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 140.975669][ T5002] loop0: detected capacity change from 0 to 2048 [ 141.065314][ T5003] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 141.660853][ T26] audit: type=1326 audit(1790873036.395:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5008 comm="syz.4.135" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9fb739e159 code=0x0 [ 142.703949][ T5019] capability: warning: `syz.1.136' uses 32-bit capabilities (legacy support in use) [ 143.020919][ T5027] mmap: syz.4.140 (5027) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 143.318248][ T5032] fuse: Bad value for 'fd' [ 144.080910][ T5034] loop0: detected capacity change from 0 to 512 [ 144.147628][ T5034] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #2: comm syz.0.142: missing EA_INODE flag [ 144.319665][ T5034] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.142: error while reading EA inode 2 err=-117 [ 144.378539][ T5034] EXT4-fs (loop0): 1 orphan inode deleted [ 144.412964][ T5034] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 146.735286][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 148.091672][ T5074] loop1: detected capacity change from 0 to 2048 [ 148.180609][ T5074] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 148.425686][ T26] audit: type=1326 audit(1790873043.165:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5042 comm="syz.4.145" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9fb739e159 code=0x0 [ 148.701034][ T5079] loop0: detected capacity change from 0 to 32768 [ 148.895201][ T5079] XFS (loop0): Mounting V5 Filesystem [ 149.022275][ T5079] XFS (loop0): Ending clean mount [ 149.035775][ T5079] XFS (loop0): Quotacheck needed: Please wait. [ 149.543967][ T5079] XFS (loop0): Quotacheck: Done. [ 149.811930][ T4276] XFS (loop0): Unmounting Filesystem [ 154.946517][ T5133] loop0: detected capacity change from 0 to 32768 [ 154.991774][ T5133] XFS (loop0): Mounting V5 Filesystem [ 155.086716][ T5133] XFS (loop0): Ending clean mount [ 155.093981][ T5133] XFS (loop0): Quotacheck needed: Please wait. [ 155.201569][ T5133] XFS (loop0): Quotacheck: Done. [ 155.871153][ T4276] XFS (loop0): Unmounting Filesystem [ 156.091210][ T5157] fuse: Unknown parameter '0xffffffffffffffff' [ 158.486880][ T5193] futex_wake_op: syz.2.181 tries to shift op by 144; fix this program [ 162.600549][ T5242] overlayfs: failed to clone upperpath [ 162.615457][ T5242] overlayfs: failed to clone upperpath [ 162.778009][ T5249] EXT4-fs warning (device sda1): ext4_group_extend:1870: can't shrink FS - resize aborted [ 167.272579][ T5291] overlayfs: failed to clone upperpath [ 170.736271][ T5319] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 171.042960][ T126] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 171.274688][ T126] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.292110][ T126] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 171.314470][ T126] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 171.336316][ T126] usb 1-1: Product: syz [ 171.343293][ T126] usb 1-1: Manufacturer: syz [ 171.376838][ T126] hub 1-1:4.0: bad descriptor, ignoring hub [ 171.391307][ T126] hub: probe of 1-1:4.0 failed with error -5 [ 171.407875][ T126] usbhid 1-1:4.0: couldn't find an input interrupt endpoint [ 173.686347][ T126] usb 1-1: USB disconnect, device number 3 [ 173.961930][ T5357] loop0: detected capacity change from 0 to 32768 [ 174.245461][ T5357] XFS (loop0): Mounting V5 Filesystem [ 174.288604][ T5357] XFS (loop0): Ending clean mount [ 174.295826][ T5357] XFS (loop0): Quotacheck needed: Please wait. [ 174.362874][ T5357] XFS (loop0): Quotacheck: Done. [ 174.400208][ T4276] XFS (loop0): Unmounting Filesystem [ 179.871143][ T5412] loop0: detected capacity change from 0 to 32768 [ 179.945103][ T5412] XFS (loop0): Mounting V5 Filesystem [ 180.024176][ T5412] XFS (loop0): Ending clean mount [ 180.031756][ T5412] XFS (loop0): Quotacheck needed: Please wait. [ 180.089234][ T5412] XFS (loop0): Quotacheck: Done. [ 180.955283][ T4276] XFS (loop0): Unmounting Filesystem [ 181.308352][ T26] audit: type=1326 audit(1790873076.045:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5429 comm="syz.1.238" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb24eb9e159 code=0x0 [ 181.543835][ T5445] loop0: detected capacity change from 0 to 32768 [ 181.578902][ T5445] XFS (loop0): Mounting V5 Filesystem [ 181.606220][ T5445] XFS (loop0): Ending clean mount [ 181.619046][ T5445] XFS (loop0): Quotacheck needed: Please wait. [ 181.673989][ T5445] XFS (loop0): Quotacheck: Done. [ 182.991277][ T4276] XFS (loop0): Unmounting Filesystem [ 186.087276][ T5484] loop0: detected capacity change from 0 to 2048 [ 186.132849][ T5484] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 192.903598][ T5543] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 194.408392][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.419698][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 214.024995][ T5665] fuse: Bad value for 'fd' [ 219.974342][ T5728] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 221.372509][ T5741] Cannot find set identified by id 0 to match [ 225.418117][ T5794] netlink: 8 bytes leftover after parsing attributes in process `syz.1.338'. [ 228.321046][ T5824] 9pnet_fd: Insufficient options for proto=fd [ 229.326422][ T5839] tmpfs: Unknown parameter 'quota' [ 233.484186][ T5886] tipc: Started in network mode [ 233.567695][ T5886] tipc: Node identity 4, cluster identity 4711 [ 233.655598][ T5886] tipc: Node number set to 4 [ 233.681104][ T5896] netlink: 8 bytes leftover after parsing attributes in process `syz.0.370'. [ 233.714139][ T5896] netlink: 72 bytes leftover after parsing attributes in process `syz.0.370'. [ 233.810818][ T5896] netlink: 24 bytes leftover after parsing attributes in process `syz.0.370'. [ 234.207442][ T5901] syz.0.370 uses obsolete (PF_INET,SOCK_PACKET) [ 234.294199][ T5896] netlink: 4 bytes leftover after parsing attributes in process `syz.0.370'. [ 239.244040][ T5959] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 239.262317][ T5959] batman_adv: batadv0: Adding interface: ip6gretap1 [ 239.269081][ T5959] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.303395][ T5959] batman_adv: batadv0: Interface activated: ip6gretap1 [ 243.540816][ T6002] netlink: 24 bytes leftover after parsing attributes in process `syz.2.396'. [ 243.561025][ T6002] netlink: 4 bytes leftover after parsing attributes in process `syz.2.396'. [ 243.681716][ T6012] tipc: Started in network mode [ 243.688078][ T6012] tipc: Node identity 4, cluster identity 4711 [ 243.694458][ T6012] tipc: Node number set to 4 [ 243.707205][ T6012] tipc: Enabled bearer , priority 0 [ 243.742004][ T6012] tipc: Resetting bearer [ 244.545017][ T6012] tipc: Disabling bearer [ 246.849480][ T6045] netlink: 20 bytes leftover after parsing attributes in process `syz.0.407'. [ 248.237661][ T6057] netlink: 168 bytes leftover after parsing attributes in process `syz.1.411'. [ 250.870407][ T6076] tipc: Started in network mode [ 251.034079][ T6076] tipc: Node identity 4, cluster identity 4711 [ 251.040303][ T6076] tipc: Node number set to 4 [ 251.091754][ T6086] netlink: 'syz.1.419': attribute type 27 has an invalid length. [ 252.216262][ T6076] tipc: Enabled bearer , priority 0 [ 252.235011][ T6076] tipc: Resetting bearer [ 252.277134][ T6076] tipc: Disabling bearer [ 256.101221][ T6117] overlayfs: failed to clone upperpath [ 256.167379][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.175373][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.753191][ T6127] netlink: 4 bytes leftover after parsing attributes in process `syz.2.428'. [ 257.579455][ T6134] fuse: Bad value for 'fd' [ 258.743159][ T32] libceph: connect (1)[c::]:6789 error -101 [ 258.749763][ T32] libceph: mon0 (1)[c::]:6789 connect error [ 258.757927][ T6144] ceph: No mds server is up or the cluster is laggy [ 260.035503][ T6168] netlink: 8 bytes leftover after parsing attributes in process `syz.0.438'. [ 267.519390][ T6257] Could not find key with description: [syz] [ 268.207465][ T6257] process_request_key_err: No key [ 268.257828][ T6257] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 268.273032][ T6236] netlink: 28 bytes leftover after parsing attributes in process `syz.2.453'. [ 268.294218][ T6257] One or more global auth toks could not properly register; rc = [-2] [ 268.333780][ T6257] Error parsing options; rc = [-2] [ 270.008653][ T26] audit: type=1326 audit(1790873164.745:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6292 comm="syz.2.471" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5a5b9e159 code=0x7ffc0000 [ 270.244203][ T26] audit: type=1326 audit(1790873164.785:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6292 comm="syz.2.471" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa5a5b9e159 code=0x7ffc0000 [ 271.021731][ T26] audit: type=1326 audit(1790873164.785:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6292 comm="syz.2.471" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5a5b9e159 code=0x7ffc0000 [ 271.147751][ T26] audit: type=1326 audit(1790873164.785:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6292 comm="syz.2.471" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa5a5b9e159 code=0x7ffc0000 [ 271.171742][ T26] audit: type=1326 audit(1790873164.785:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6292 comm="syz.2.471" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5a5b9e159 code=0x7ffc0000 [ 271.231490][ T26] audit: type=1326 audit(1790873164.785:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6292 comm="syz.2.471" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fa5a5b9e159 code=0x7ffc0000 [ 271.298286][ T6301] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 271.347694][ T26] audit: type=1326 audit(1790873164.785:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6292 comm="syz.2.471" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5a5b9e159 code=0x7ffc0000 [ 271.385246][ T6308] overlayfs: failed to clone upperpath [ 271.406003][ T6310] autofs4:pid:6310:autofs_fill_super: called with bogus options [ 272.094015][ T26] audit: type=1326 audit(1790873164.785:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6292 comm="syz.2.471" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa5a5b9e159 code=0x7ffc0000 [ 272.264006][ T26] audit: type=1326 audit(1790873164.785:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6292 comm="syz.2.471" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5a5b9e159 code=0x7ffc0000 [ 272.424249][ T26] audit: type=1326 audit(1790873164.785:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6292 comm="syz.2.471" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fa5a5b9e159 code=0x7ffc0000 [ 274.369609][ T6340] No such timeout policy "syz1" [ 275.132868][ T26] kauditd_printk_skb: 112 callbacks suppressed [ 275.132881][ T26] audit: type=1326 audit(1790873169.865:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6334 comm="syz.3.482" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f56acb9e159 code=0x7ffc0000 [ 275.857878][ T26] audit: type=1326 audit(1790873170.025:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6334 comm="syz.3.482" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56acb9e159 code=0x7ffc0000 [ 275.882224][ T26] audit: type=1326 audit(1790873170.025:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6334 comm="syz.3.482" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56acb9e159 code=0x7ffc0000 [ 275.913527][ T26] audit: type=1326 audit(1790873170.035:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6334 comm="syz.3.482" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f56acb9e159 code=0x7ffc0000 [ 278.063210][ T6367] netlink: 16 bytes leftover after parsing attributes in process `syz.3.490'. [ 282.284592][ T6402] kAFS: No cell specified [ 291.126166][ T6486] futex_wake_op: syz.0.521 tries to shift op by 144; fix this program [ 297.643387][ T6565] capability: warning: `syz.2.543' uses deprecated v2 capabilities in a way that may be insecure [ 298.498168][ T6569] could not allocate digest TFM handle  [ 301.593603][ T26] audit: type=1326 audit(1790873196.325:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6614 comm="syz.1.558" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb24eb9e159 code=0x0 [ 302.030720][ T6619] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 303.224844][ T6634] overlayfs: failed to clone upperpath [ 303.360249][ T6638] Bluetooth: ISO socket layer initialized [ 304.677552][ T6664] netlink: 'syz.1.569': attribute type 8 has an invalid length. [ 310.718801][ T6704] netlink: 4 bytes leftover after parsing attributes in process `syz.1.580'. [ 311.287328][ T6717] overlayfs: failed to clone upperpath [ 311.298085][ T6717] overlayfs: missing 'lowerdir' [ 312.893225][ T6731] IPv6: NLM_F_CREATE should be specified when creating new route [ 313.233463][ T6733] kAFS: unable to lookup cell '.' [ 315.307231][ T6775] SET target dimension over the limit! [ 315.600839][ T6770] SET target dimension over the limit! [ 315.610830][ T6772] overlayfs: failed to clone upperpath [ 317.287103][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.293475][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.316266][ T6831] xt_policy: output policy not valid in PREROUTING and INPUT [ 319.565843][ T6828] overlayfs: failed to clone upperpath [ 324.912419][ T6910] futex_wake_op: syz.1.632 tries to shift op by 144; fix this program [ 328.386783][ T26] audit: type=1326 audit(1790873223.125:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6939 comm="syz.2.644" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa5a5b9e159 code=0x0 [ 331.609912][ T6983] overlayfs: failed to clone upperpath [ 332.221652][ T6987] overlayfs: failed to clone upperpath [ 333.599078][ T6994] netlink: 8 bytes leftover after parsing attributes in process `syz.3.653'. [ 337.358002][ T7038] overlayfs: failed to clone upperpath [ 338.911677][ T7048] futex_wake_op: syz.2.671 tries to shift op by 144; fix this program [ 338.930255][ T7048] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 339.565489][ T7050] futex_wake_op: syz.0.670 tries to shift op by 144; fix this program [ 341.916741][ T7075] ipt_REJECT: TCP_RESET invalid for non-tcp [ 344.617986][ T26] audit: type=1326 audit(1790873238.555:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7098 comm="syz.1.682" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24eb9e159 code=0x7ffc0000 [ 344.926230][ T26] audit: type=1326 audit(1790873238.555:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7098 comm="syz.1.682" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24eb9e159 code=0x7ffc0000 [ 345.155419][ T26] audit: type=1326 audit(1790873238.555:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7098 comm="syz.1.682" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7fb24eb9e159 code=0x7ffc0000 [ 345.918135][ T7112] netlink: 36 bytes leftover after parsing attributes in process `syz.3.685'. [ 346.062037][ T26] audit: type=1326 audit(1790873238.555:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7098 comm="syz.1.682" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24eb9e159 code=0x7ffc0000 [ 346.283473][ T26] audit: type=1326 audit(1790873238.555:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7098 comm="syz.1.682" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24eb9e159 code=0x7ffc0000 [ 346.323096][ T26] audit: type=1326 audit(1790873238.555:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7098 comm="syz.1.682" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fb24eb9e159 code=0x7ffc0000 [ 346.533058][ T26] audit: type=1326 audit(1790873238.555:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7098 comm="syz.1.682" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24eb9e159 code=0x7ffc0000 [ 347.345726][ T26] audit: type=1326 audit(1790873238.555:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7098 comm="syz.1.682" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24eb9e159 code=0x7ffc0000 [ 347.821182][ T26] audit: type=1326 audit(1790873238.555:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7098 comm="syz.1.682" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fb24eb9e159 code=0x7ffc0000 [ 347.989762][ T26] audit: type=1326 audit(1790873238.555:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7098 comm="syz.1.682" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24eb9e159 code=0x7ffc0000 [ 348.273691][ T7150] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 350.316007][ T7168] netlink: 8 bytes leftover after parsing attributes in process `syz.4.702'. [ 353.846475][ T7205] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 354.109789][ T7210] futex_wake_op: syz.3.711 tries to shift op by 144; fix this program [ 354.870286][ T7219] overlayfs: failed to clone upperpath [ 355.717684][ T7229] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.724909][ T7229] bridge0: port 2(bridge_slave_1) entered forwarding state [ 355.812049][ T7229] device bridge0 left promiscuous mode [ 355.859247][ T4729] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 357.446713][ T7255] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 357.458207][ T7255] infiniband syz5: RDMA CMA: cma_listen_on_dev, error -98 [ 358.412398][ T7262] ecryptfs_mount: kern_path() failed [ 358.421317][ T7262] Reading sb failed; rc = [-2] [ 358.480828][ T7266] netlink: 'syz.2.729': attribute type 3 has an invalid length. [ 359.719311][ T7283] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 359.726767][ T7283] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 359.735367][ T7283] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 359.742767][ T7283] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 360.576853][ T7297] overlayfs: failed to clone upperpath [ 371.197888][ T7481] lo speed is unknown, defaulting to 1000 [ 371.252932][ T7481] lo speed is unknown, defaulting to 1000 [ 371.521707][ T7481] lo speed is unknown, defaulting to 1000 [ 372.327052][ T7481] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 372.531120][ T7481] lo speed is unknown, defaulting to 1000 [ 373.194248][ T7481] lo speed is unknown, defaulting to 1000 [ 373.357897][ T7481] lo speed is unknown, defaulting to 1000 [ 373.386513][ T7481] lo speed is unknown, defaulting to 1000 [ 373.392741][ T7481] lo speed is unknown, defaulting to 1000 [ 378.696641][ T7622] 9pnet_fd: p9_fd_create_tcp (7622): problem connecting socket to 127.0.0.1 [ 378.762011][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.769474][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.931477][ T7656] futex_wake_op: syz.4.783 tries to shift op by 144; fix this program [ 381.133437][ T7656] lo speed is unknown, defaulting to 1000 [ 386.248060][ T7742] futex_wake_op: syz.1.799 tries to shift op by 144; fix this program [ 386.358641][ T7742] lo speed is unknown, defaulting to 1000 [ 389.524665][ T7781] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 391.115267][ T7804] netlink: 8 bytes leftover after parsing attributes in process `syz.0.813'. [ 392.619727][ T7836] futex_wake_op: syz.1.817 tries to shift op by 144; fix this program [ 392.766481][ T7836] lo speed is unknown, defaulting to 1000 [ 405.660061][ T8015] netlink: 8 bytes leftover after parsing attributes in process `syz.1.864'. [ 405.679631][ T8015] netlink: 72 bytes leftover after parsing attributes in process `syz.1.864'. [ 405.701622][ T8015] netlink: 24 bytes leftover after parsing attributes in process `syz.1.864'. [ 405.717300][ T8015] netlink: 4 bytes leftover after parsing attributes in process `syz.1.864'. [ 426.076339][ T8327] futex_wake_op: syz.1.963 tries to shift op by 144; fix this program [ 426.277733][ T8327] lo speed is unknown, defaulting to 1000 [ 429.294496][ T8372] futex_wake_op: syz.1.977 tries to shift op by 144; fix this program [ 429.392664][ T8373] lo speed is unknown, defaulting to 1000 [ 432.278870][ T8414] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 435.830075][ T8462] kAFS: No cell specified [ 437.146197][ T8480] "syz.4.1006" (8480) uses obsolete ecb(arc4) skcipher [ 437.827883][ T8492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 440.165702][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.172081][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.783310][ T8534] overlayfs: failed to clone upperpath [ 444.478106][ T8595] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1033'. [ 445.071206][ T8602] lo speed is unknown, defaulting to 1000 [ 446.099291][ T8611] Could not find key with description: [syz] [ 446.105431][ T8611] process_request_key_err: No key [ 446.110446][ T8611] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 446.120581][ T8611] One or more global auth toks could not properly register; rc = [-2] [ 446.128830][ T8611] Error parsing options; rc = [-2] [ 455.322451][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 455.322544][ T26] audit: type=1326 audit(1790873350.055:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8736 comm="syz.4.1069" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fb739e159 code=0x7ffc0000 [ 455.507083][ T26] audit: type=1326 audit(1790873350.105:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8736 comm="syz.4.1069" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fb739e159 code=0x7ffc0000 [ 456.195820][ T26] audit: type=1326 audit(1790873350.105:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8736 comm="syz.4.1069" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9fb739e159 code=0x7ffc0000 [ 456.250278][ T26] audit: type=1326 audit(1790873350.105:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8736 comm="syz.4.1069" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fb739e159 code=0x7ffc0000 [ 456.342174][ T26] audit: type=1326 audit(1790873350.105:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8736 comm="syz.4.1069" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fb739e159 code=0x7ffc0000 [ 456.419203][ T26] audit: type=1326 audit(1790873350.105:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8736 comm="syz.4.1069" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9fb739e159 code=0x7ffc0000 [ 456.582574][ T26] audit: type=1326 audit(1790873350.115:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8736 comm="syz.4.1069" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fb739e159 code=0x7ffc0000 [ 456.879359][ T26] audit: type=1326 audit(1790873350.115:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8736 comm="syz.4.1069" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fb739e159 code=0x7ffc0000 [ 457.722988][ T26] audit: type=1326 audit(1790873350.115:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8736 comm="syz.4.1069" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f9fb739e159 code=0x7ffc0000 [ 458.015023][ T8762] netlink: 'syz.0.1075': attribute type 1 has an invalid length. [ 458.351588][ T26] audit: type=1326 audit(1790873350.115:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8736 comm="syz.4.1069" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fb739e159 code=0x7ffc0000 [ 459.193633][ T8764] device lo entered promiscuous mode [ 459.553888][ T8764] device tunl0 entered promiscuous mode [ 459.963684][ T8764] device gre0 entered promiscuous mode [ 460.008346][ T8764] device gretap0 entered promiscuous mode [ 460.153306][ T8764] device erspan0 entered promiscuous mode [ 460.259885][ T8764] device ip_vti0 entered promiscuous mode [ 460.313450][ T8764] device ip6_vti0 entered promiscuous mode [ 460.377686][ T8764] device sit0 entered promiscuous mode [ 460.447700][ T8764] device ip6tnl0 entered promiscuous mode [ 460.489878][ T8764] device ip6gre0 entered promiscuous mode [ 460.539065][ T8764] device syz_tun entered promiscuous mode [ 460.572304][ T8764] device ip6gretap0 entered promiscuous mode [ 460.620876][ T8764] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.628431][ T8764] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.649413][ T8764] device bridge0 entered promiscuous mode [ 464.463256][ T8840] futex_wake_op: syz.2.1092 tries to shift op by 144; fix this program [ 464.605709][ T8840] lo speed is unknown, defaulting to 1000 [ 471.250873][ T8579] libceph: connect (1)[c::]:6789 error -101 [ 471.257930][ T8579] libceph: mon0 (1)[c::]:6789 connect error [ 472.373381][ T8931] ceph: No mds server is up or the cluster is laggy [ 478.080719][ T9030] __vm_enough_memory: pid: 9030, comm: syz.0.1129, no enough memory for the allocation [ 479.203857][ T4300] rpcbind: server 127.0.0.1 not responding, timed out [ 482.747497][ T9070] fuse: Bad value for 'fd' [ 483.358696][ T9098] __vm_enough_memory: pid: 9098, comm: syz.1.1142, no enough memory for the allocation [ 485.959254][ T4300] rpcbind: server 127.0.0.1 not responding, timed out [ 489.741268][ T9164] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 489.758324][ T9164] batman_adv: batadv0: Adding interface: ip6gretap1 [ 489.765068][ T9164] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 489.798657][ T9164] batman_adv: batadv0: Interface activated: ip6gretap1 [ 494.410232][ T9217] overlayfs: failed to clone upperpath [ 495.031261][ T9232] netlink: 'syz.2.1170': attribute type 1 has an invalid length. [ 495.236829][ T9234] device lo entered promiscuous mode [ 495.345234][ T9234] device tunl0 entered promiscuous mode [ 495.417427][ T9234] device gre0 entered promiscuous mode [ 496.249070][ T4300] rpcbind: server 127.0.0.1 not responding, timed out [ 497.580985][ T9234] device gretap0 entered promiscuous mode [ 497.629097][ T9234] device erspan0 entered promiscuous mode [ 497.913914][ T9234] device ip_vti0 entered promiscuous mode [ 497.937674][ T9234] device ip6_vti0 entered promiscuous mode [ 497.966325][ T9234] device sit0 entered promiscuous mode [ 498.650050][ T9234] device ip6tnl0 entered promiscuous mode [ 498.683724][ T9234] device ip6gre0 entered promiscuous mode [ 498.709404][ T9234] device ip6gretap0 entered promiscuous mode [ 498.760150][ T9234] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.767457][ T9234] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.796877][ T9234] device bridge0 entered promiscuous mode [ 501.029246][ T9315] __vm_enough_memory: pid: 9315, comm: syz.4.1180, no enough memory for the allocation [ 501.633332][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.639670][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.553683][ T9390] __vm_enough_memory: pid: 9390, comm: syz.3.1196, no enough memory for the allocation [ 507.317671][ T9395] Could not find key with description: [syz] [ 507.323704][ T9395] process_request_key_err: No key [ 507.328709][ T9395] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 507.338810][ T9395] One or more global auth toks could not properly register; rc = [-2] [ 507.347036][ T9395] Error parsing options; rc = [-2] [ 512.462232][ T9454] __vm_enough_memory: pid: 9454, comm: syz.4.1212, no enough memory for the allocation [ 513.358977][ T9470] futex_wake_op: syz.1.1223 tries to shift op by 144; fix this program [ 514.050208][ T9462] IPv6: NLM_F_CREATE should be specified when creating new route [ 514.103647][ T9470] lo speed is unknown, defaulting to 1000 [ 517.397730][ T9508] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1222'. [ 519.706375][ T9544] __vm_enough_memory: pid: 9544, comm: syz.0.1230, no enough memory for the allocation [ 526.263495][ T9623] kAFS: unable to lookup cell '.' [ 527.902987][ T9641] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1248'. [ 531.729214][ T9688] kAFS: unable to lookup cell '.' [ 533.261935][ T9704] futex_wake_op: syz.0.1261 tries to shift op by 144; fix this program [ 534.562742][ T9722] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1262'. [ 535.830979][ T9749] tipc: Enabling of bearer rejected, failed to enable media [ 538.814979][ T9778] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1277'. [ 540.337302][ T9806] IPv6: NLM_F_CREATE should be specified when creating new route [ 547.795988][ T9916] Cannot find add_set index 0 as target [ 549.164440][ T9941] overlayfs: failed to clone upperpath [ 551.966039][ T9970] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1323'. [ 553.134711][ T9995] siw: device registration error -23 [ 556.720378][T10027] overlayfs: failed to clone upperpath [ 557.128589][T10035] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1334'. [ 561.279307][T10079] overlayfs: failed to clone upperpath [ 562.145096][T10092] xt_HMARK: spi-set and port-set can't be combined [ 562.449314][T10098] netlink: 'syz.3.1349': attribute type 8 has an invalid length. [ 563.413498][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.419849][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.472548][T10131] overlayfs: failed to clone lowerpath [ 566.286927][T10157] PKCS7: Unknown OID: [4] 0.0 [ 566.292134][T10157] PKCS7: Only support pkcs7_signedData type [ 566.305293][T10157] xt_policy: output policy not valid in PREROUTING and INPUT [ 567.323757][T10162] futex_wake_op: syz.3.1359 tries to shift op by 144; fix this program [ 568.830653][T10176] netlink: 'syz.2.1362': attribute type 8 has an invalid length. [ 571.744251][ T3598] Process accounting resumed [ 575.967516][T10245] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1380'. [ 575.987015][T10245] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1380'. [ 577.523588][T10261] fuse: Bad value for 'fd' [ 581.912694][T10312] IPVS: lc: FWM 3 0x00000003 - no destination available [ 582.176078][T10329] netlink: 'syz.4.1395': attribute type 8 has an invalid length. [ 583.849072][ T3598] libceph: connect (1)[c::]:6789 error -101 [ 583.864230][ T3598] libceph: mon0 (1)[c::]:6789 connect error [ 584.762423][T10344] ceph: No mds server is up or the cluster is laggy [ 587.360567][T10391] netlink: 'syz.0.1409': attribute type 8 has an invalid length. [ 592.822674][T10444] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1422'. [ 593.248493][T10451] No such timeout policy "syz1" [ 595.442068][T10472] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 595.473044][T10472] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 595.584447][T10472] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 597.831160][T10491] fuse: Bad value for 'fd' [ 598.151972][T10506] ip_tables: iptables: counters copy to user failed while replacing table [ 606.063723][T10586] overlayfs: failed to clone upperpath [ 608.117571][T10617] device lo left promiscuous mode [ 608.122766][T10617] device tunl0 left promiscuous mode [ 608.128246][T10617] device gre0 left promiscuous mode [ 608.133680][T10617] device gretap0 left promiscuous mode [ 608.139246][T10617] device erspan0 left promiscuous mode [ 608.144884][T10617] device ip_vti0 left promiscuous mode [ 608.150454][T10617] device ip6_vti0 left promiscuous mode [ 608.156140][T10617] device sit0 left promiscuous mode [ 608.161448][T10617] device ip6tnl0 left promiscuous mode [ 608.167050][T10617] device ip6gre0 left promiscuous mode [ 608.172610][T10617] device ip6gretap0 left promiscuous mode [ 608.178621][T10617] device bridge0 left promiscuous mode [ 608.184282][T10617] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 608.194332][T10617] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 608.201810][T10617] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 609.690312][T10639] overlayfs: failed to clone upperpath [ 610.921206][T10656] netlink: 'syz.4.1475': attribute type 8 has an invalid length. [ 612.924717][T10692] netlink: 'syz.0.1489': attribute type 8 has an invalid length. [ 614.569140][T10693] overlayfs: failed to clone upperpath [ 622.300599][T10833] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1532'. [ 624.741241][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.012017][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.930496][T10881] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1547'. [ 627.163594][T10901] netlink: 'syz.2.1554': attribute type 8 has an invalid length. [ 643.455278][T11157] Illegal XDP return value 4294967262 on prog (id 22) dev N/A, expect packet loss! [ 648.167310][T11223] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1668'. [ 649.130470][T11235] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1674'. [ 650.232968][ T26] kauditd_printk_skb: 21 callbacks suppressed [ 650.233001][ T26] audit: type=1326 audit(1790873550.901:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11239 comm="syz.3.1676" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56acb9e159 code=0x7ffc0000 [ 650.333192][ T26] audit: type=1326 audit(1790873550.951:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11239 comm="syz.3.1676" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56acb9e159 code=0x7ffc0000 [ 650.413258][ T26] audit: type=1326 audit(1790873550.961:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11239 comm="syz.3.1676" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f56acb9e159 code=0x7ffc0000 [ 650.545217][ T26] audit: type=1326 audit(1790873551.011:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11239 comm="syz.3.1676" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56acb9e159 code=0x7ffc0000 [ 650.593515][ T26] audit: type=1326 audit(1790873551.011:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11239 comm="syz.3.1676" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56acb9e159 code=0x7ffc0000 [ 654.387343][T11300] netlink: 'syz.4.1698': attribute type 10 has an invalid length. [ 654.430316][T11300] team0: Port device virt_wifi0 added [ 658.186841][T11346] netlink: 'syz.3.1713': attribute type 29 has an invalid length. [ 658.195073][T11345] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 658.222988][T11346] netlink: 'syz.3.1713': attribute type 29 has an invalid length. [ 658.285911][T11348] ecryptfs_mount: kern_path() failed [ 658.298007][T11348] Reading sb failed; rc = [-2] [ 658.434072][T11358] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1719'. [ 661.740466][T11398] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 661.747947][T11398] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 661.756484][T11398] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 661.763911][T11398] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 661.968426][T11405] netlink: 'syz.2.1735': attribute type 13 has an invalid length. [ 661.980199][T11405] gretap0: refused to change device tx_queue_len [ 661.987735][T11405] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 662.468346][T11415] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1738'. [ 663.145464][T11421] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1740'. [ 665.229000][T11473] siw: device registration error -23 [ 665.550188][T11490] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 665.558434][T11490] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 665.566966][T11490] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 666.931684][T11498] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1771'. [ 666.973108][T11498] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1771'. [ 666.982112][T11498] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1771'. [ 667.936308][T11542] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1786'. [ 669.551032][T11559] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1793'. [ 669.580649][T11559] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1793'. [ 669.715779][T11564] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 672.826876][T11643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1813'. [ 676.065162][T11673] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1832'. [ 676.103078][T11675] netlink: 'syz.1.1831': attribute type 10 has an invalid length. [ 676.110927][T11675] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1831'. [ 676.159360][T11675] bridge0: port 3(team0) entered blocking state [ 676.169276][T11675] bridge0: port 3(team0) entered disabled state [ 676.198914][T11675] device team0 entered promiscuous mode [ 676.213027][T11675] device team_slave_0 entered promiscuous mode [ 676.239926][T11675] device team_slave_1 entered promiscuous mode [ 676.254161][T11675] bridge0: port 3(team0) entered blocking state [ 676.260560][T11675] bridge0: port 3(team0) entered forwarding state [ 681.918115][T11762] fuse: Bad value for 'fd' [ 684.619759][T11802] PKCS7: Unknown OID: [4] 0.0 [ 684.624737][T11802] PKCS7: Only support pkcs7_signedData type [ 684.640461][T11802] xt_policy: output policy not valid in PREROUTING and INPUT [ 685.241034][T11808] ip_tables: iptables: counters copy to user failed while replacing table [ 685.653619][T11830] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1886'. [ 685.665979][T11830] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1886'. [ 685.924324][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 687.329843][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.774146][T11852] PKCS7: Unknown OID: [4] 0.0 [ 687.778926][T11852] PKCS7: Only support pkcs7_signedData type [ 687.793984][T11852] xt_policy: output policy not valid in PREROUTING and INPUT [ 688.738917][T11864] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1888'. [ 689.773854][ T4319] libceph: connect (1)[c::]:6789 error -101 [ 689.779865][ T4319] libceph: mon0 (1)[c::]:6789 connect error [ 691.118016][T11871] ceph: No mds server is up or the cluster is laggy [ 691.138851][ T4319] libceph: connect (1)[c::]:6789 error -101 [ 691.144991][ T4319] libceph: mon0 (1)[c::]:6789 connect error [ 691.549938][T11902] PKCS7: Unknown OID: [4] 0.0 [ 691.554952][T11902] PKCS7: Only support pkcs7_signedData type [ 691.569171][T11902] xt_policy: output policy not valid in PREROUTING and INPUT [ 693.879816][T11927] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1913'. [ 697.714200][T11987] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1937'. [ 699.632096][T12001] PKCS7: Unknown OID: [4] 0.0 [ 699.636933][T12001] PKCS7: Only support pkcs7_signedData type [ 699.652127][T12001] xt_policy: output policy not valid in PREROUTING and INPUT [ 702.562016][T12028] netlink: 'syz.0.1953': attribute type 29 has an invalid length. [ 702.604283][T12028] netlink: 'syz.0.1953': attribute type 29 has an invalid length. [ 702.628256][T12033] netlink: 'syz.0.1953': attribute type 29 has an invalid length. [ 702.995882][T12040] PKCS7: Unknown OID: [4] 0.0 [ 703.000768][T12040] PKCS7: Only support pkcs7_signedData type [ 703.015372][T12040] xt_policy: output policy not valid in PREROUTING and INPUT [ 709.484591][T12121] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1986'. [ 711.460016][T12161] No such timeout policy "syz1" [ 717.232123][T12217] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2019'. [ 720.348603][T12258] ip_tables: iptables: counters copy to user failed while replacing table [ 726.595349][T12351] netlink: 'syz.1.2062': attribute type 6 has an invalid length. [ 726.909912][T12363] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2066'. [ 727.123775][T12373] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2070'. [ 730.931784][T12441] 9pnet_fd: Insufficient options for proto=fd [ 730.970947][T12443] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2091'. [ 733.798193][T12501] netlink: 'syz.0.2111': attribute type 3 has an invalid length. [ 738.922287][T12612] netlink: 'syz.0.2147': attribute type 25 has an invalid length. [ 738.942622][T12612] netlink: 'syz.0.2147': attribute type 25 has an invalid length. [ 742.418132][T12688] ip_tables: iptables: counters copy to user failed while replacing table [ 746.033182][T12733] ip_tables: iptables: counters copy to user failed while replacing table [ 748.213908][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 748.220273][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 753.600172][T12861] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2227'. [ 755.221709][T12926] 8021q: adding VLAN 0 to HW filter on device bond1 [ 755.588585][T12953] 9pnet_fd: Insufficient options for proto=fd [ 755.940044][T12976] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2286'. [ 755.983407][T12978] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 756.097601][T12982] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2289'. [ 758.389948][ T4731] wlan1: Trigger new scan to find an IBSS to join [ 758.856898][T13044] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2312'. [ 759.245827][T13058] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2316'. [ 760.573232][T13101] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2334'. [ 762.003034][ T4716] wlan1: Trigger new scan to find an IBSS to join [ 763.288354][T13134] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2353'. [ 763.524451][ T4731] wlan1: Creating new IBSS network, BSSID ea:95:b9:46:de:13 [ 763.904277][T13151] tipc: Failed to obtain node identity [ 763.909811][T13151] tipc: Enabling of bearer rejected, failed to enable media [ 775.876179][T13436] IPVS: Scheduler module ip_vs_sip not found [ 777.094383][T13474] netlink: 136 bytes leftover after parsing attributes in process `syz.3.2482'. [ 778.715823][T13503] overlayfs: failed to clone upperpath [ 779.073034][T13508] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2505'. [ 779.405841][T13508] netlink: 'syz.0.2505': attribute type 1 has an invalid length. [ 782.192928][T13587] netlink: 'syz.2.2523': attribute type 1 has an invalid length. [ 784.452789][T13651] netlink: 'syz.4.2538': attribute type 4 has an invalid length. [ 784.461065][T13651] netlink: 17 bytes leftover after parsing attributes in process `syz.4.2538'. [ 785.869572][T13672] overlayfs: failed to clone upperpath [ 786.668528][T13696] netlink: 180 bytes leftover after parsing attributes in process `syz.0.2551'. [ 788.719646][T13694] overlayfs: failed to clone upperpath [ 790.020494][T13754] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2568'. [ 790.030580][T13754] bridge0: port 2(bridge_slave_1) entered disabled state [ 790.037814][T13754] bridge0: port 1(bridge_slave_0) entered disabled state [ 790.061825][T13754] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2568'. [ 791.198811][T13765] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2572'. [ 793.187549][T13816] netlink: 'syz.0.2585': attribute type 4 has an invalid length. [ 793.198626][T13816] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2585'. [ 795.470791][T13882] lo speed is unknown, defaulting to 1000 [ 795.851721][T13897] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2616'. [ 796.004717][ T4735] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 796.939995][T13918] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2624'. [ 797.122407][T13918] syz.2.2624 (13918) used greatest stack depth: 16288 bytes left [ 797.156894][T13925] lo speed is unknown, defaulting to 1000 [ 797.205375][T13927] overlayfs: failed to clone upperpath [ 802.672702][T14051] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2674'. [ 802.854065][T14059] xt_hashlimit: size too large, truncated to 1048576 [ 802.861059][T14059] xt_hashlimit: max too large, truncated to 1048576 [ 802.868575][T14059] xt_hashlimit: Unknown mode mask B2F8C501, kernel too old? [ 804.804878][T14115] lo speed is unknown, defaulting to 1000 [ 805.273101][T14127] process '/newroot/538/file0' started with executable stack [ 807.677813][T14175] xt_hashlimit: size too large, truncated to 1048576 [ 807.685845][T14175] xt_hashlimit: max too large, truncated to 1048576 [ 807.692449][T14175] xt_hashlimit: Unknown mode mask B2F8C501, kernel too old? [ 808.134631][T14191] netlink: 'syz.0.2724': attribute type 1 has an invalid length. [ 808.173025][T14191] netlink: 'syz.0.2724': attribute type 2 has an invalid length. [ 808.225137][T14191] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2724'. [ 808.250827][T14191] bridge0: port 2(bridge_slave_1) entered disabled state [ 808.388319][T14199] bridge0: port 4(vlan2) entered blocking state [ 808.395449][T14199] bridge0: port 4(vlan2) entered disabled state [ 808.402776][T14199] device vlan2 entered promiscuous mode [ 808.408771][T14199] device geneve0 entered promiscuous mode [ 808.415830][T14199] bridge0: port 4(vlan2) entered blocking state [ 808.422201][T14199] bridge0: port 4(vlan2) entered forwarding state [ 808.490885][T14204] overlayfs: failed to clone upperpath [ 808.805616][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.811983][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.950017][T14222] 9pnet_fd: Insufficient options for proto=fd [ 809.835034][ T26] audit: type=1326 audit(1790873710.571:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14250 comm="syz.2.2748" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa5a5b9e159 code=0x0 [ 814.262135][T14409] netlink: 'syz.3.2805': attribute type 13 has an invalid length. [ 814.289278][T14409] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2805'. [ 814.306298][T14409] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 814.315516][T14409] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 814.324335][T14409] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 814.333041][T14409] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 814.348525][T14409] netlink: 'syz.3.2805': attribute type 13 has an invalid length. [ 814.357480][T14409] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2805'. [ 816.014054][ T26] audit: type=1326 audit(1790873716.731:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14445 comm="syz.4.2817" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9fb739e159 code=0x0 [ 816.648873][T14457] lo speed is unknown, defaulting to 1000 [ 816.785854][T14460] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2821'. [ 817.094165][T14463] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2821'. [ 818.626778][T14500] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2835'. [ 819.057476][ T26] audit: type=1326 audit(1790873719.791:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14515 comm="syz.1.2839" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb24eb9e159 code=0x0 [ 823.255395][T14679] netlink: 'syz.4.2908': attribute type 13 has an invalid length. [ 823.276712][T14679] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2908'. [ 823.299487][T14679] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 823.308361][T14679] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 823.317129][T14679] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 823.326371][T14679] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 823.384297][T14679] netlink: 'syz.4.2908': attribute type 13 has an invalid length. [ 823.463516][T14679] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2908'. [ 824.622186][T14728] "syz.0.2927" (14728) uses obsolete ecb(arc4) skcipher [ 824.793657][T14738] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2930'. [ 824.831075][T14738] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2930'. [ 825.958924][T14795] MTD: Couldn't look up './dev/mtdblock0': -2 [ 826.736793][T14833] overlayfs: failed to clone upperpath [ 827.766663][T14872] device batadv_slave_0 entered promiscuous mode [ 827.797670][T14872] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2986'. [ 827.823251][T14872] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 827.946701][T14872] device batadv_slave_0 left promiscuous mode [ 827.963527][T14872] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 828.004236][ T4735] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 828.741706][T14907] overlayfs: failed to clone lowerpath [ 828.759295][T14907] overlayfs: failed to clone upperpath [ 829.167402][T14917] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 829.176273][T14917] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 829.185174][T14917] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 829.193907][T14917] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 829.210450][T14917] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 829.219695][T14917] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 829.228735][T14917] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 829.237667][T14917] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 830.164216][T14944] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3011'. [ 830.200767][T14944] device ipvlan1 entered promiscuous mode [ 830.208066][T14944] device ipvlan1 left promiscuous mode [ 830.228977][T14946] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3011'. [ 830.241625][T14946] device ipvlan1 entered promiscuous mode [ 830.249747][T14946] device ipvlan1 left promiscuous mode [ 832.103704][T14978] futex_wake_op: syz.0.3022 tries to shift op by 144; fix this program [ 832.112142][T14978] futex_wake_op: syz.0.3022 tries to shift op by 144; fix this program [ 832.816177][T14994] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4272] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[14994] [ 833.871488][T15039] overlayfs: failed to clone lowerpath [ 836.848398][T15135] overlayfs: failed to clone lowerpath [ 836.862020][T15135] overlayfs: failed to clone upperpath [ 838.752647][T15217] overlayfs: failed to clone upperpath [ 838.887947][T15223] overlayfs: failed to clone upperpath [ 839.145473][T15232] overlayfs: failed to clone upperpath [ 840.165509][T15268] ip_tables: iptables: counters copy to user failed while replacing table [ 840.872783][T15293] device veth0_macvtap left promiscuous mode [ 841.258031][T15308] overlayfs: failed to clone upperpath [ 842.386687][ T3934] device veth0_macvtap entered promiscuous mode [ 842.938048][T15375] netlink: 'syz.0.3146': attribute type 1 has an invalid length. [ 842.975968][T15375] 8021q: adding VLAN 0 to HW filter on device bond1 [ 843.015795][T15375] bond1: (slave geneve2): making interface the new active one [ 843.025939][T15375] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 843.056650][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 843.598982][T15395] overlayfs: failed to clone upperpath [ 843.918297][T15413] overlayfs: failed to clone upperpath [ 845.075694][T15467] infiniband s`z1: RDMA CMA: cma_listen_on_dev, error -98 [ 846.656544][T15522] netlink: 'syz.3.3196': attribute type 5 has an invalid length. [ 847.042457][T15535] netlink: 'syz.0.3202': attribute type 1 has an invalid length. [ 847.077753][T15535] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3202'. [ 848.611738][T15605] overlayfs: failed to clone upperpath [ 849.389612][T15649] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3249'. [ 849.431385][T15652] overlayfs: failed to clone upperpath [ 850.131003][T15670] ip_tables: iptables: counters copy to user failed while replacing table [ 850.320719][T15674] overlayfs: failed to clone upperpath [ 850.517610][T15690] overlayfs: failed to clone upperpath [ 853.666923][T15819] overlayfs: failed to clone upperpath [ 853.697917][T15819] overlayfs: failed to clone upperpath [ 853.847567][T15823] netlink: 'syz.3.3308': attribute type 1 has an invalid length. [ 853.913509][T15823] 8021q: adding VLAN 0 to HW filter on device bond2 [ 853.953016][T15837] bond2: (slave geneve3): making interface the new active one [ 854.035705][T15837] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 854.045608][ T4724] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 854.059444][T15841] overlayfs: failed to clone upperpath [ 854.608445][T15871] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 854.668483][T15871] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 854.701855][T15871] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 855.428693][T15901] overlayfs: failed to clone upperpath [ 855.473739][T15903] overlayfs: failed to clone upperpath [ 856.981784][T15956] IPVS: fo: FWM 3 0x00000003 - no destination available [ 857.016109][ C0] IPVS: fo: FWM 3 0x00000003 - no destination available [ 858.169875][T15984] overlayfs: failed to clone upperpath [ 858.207515][T15984] overlayfs: failed to clone upperpath [ 859.364485][ T4716] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 859.622977][T16004] 9pnet_fd: p9_fd_create_tcp (16004): problem connecting socket to 127.0.0.1 [ 863.800361][T16151] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 864.798365][T16206] bond0: option prio: mode dependency failed, not supported in mode balance-rr(0) [ 865.087630][T16222] netlink: 'syz.0.3432': attribute type 5 has an invalid length. [ 865.342808][T16230] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3436'. [ 865.391912][T16232] ip_tables: iptables: counters copy to user failed while replacing table [ 866.036791][ T26] audit: type=1326 audit(1790873766.767:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16252 comm="syz.4.3445" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fb739e159 code=0x7ffc0000 [ 866.102309][ T26] audit: type=1326 audit(1790873766.797:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16252 comm="syz.4.3445" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f9fb739e159 code=0x7ffc0000 [ 866.154316][ T26] audit: type=1326 audit(1790873766.797:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16252 comm="syz.4.3445" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fb739e159 code=0x7ffc0000 [ 866.207358][ T26] audit: type=1326 audit(1790873766.797:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16252 comm="syz.4.3445" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9fb739e159 code=0x7ffc0000 [ 866.271152][ T26] audit: type=1326 audit(1790873766.807:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16252 comm="syz.4.3445" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fb739e159 code=0x7ffc0000 [ 866.362631][ T26] audit: type=1326 audit(1790873766.807:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16252 comm="syz.4.3445" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f9fb739e159 code=0x7ffc0000 [ 866.431838][ T26] audit: type=1326 audit(1790873766.807:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16252 comm="syz.4.3445" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fb739e159 code=0x7ffc0000 [ 866.597012][ T26] audit: type=1326 audit(1790873766.807:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16252 comm="syz.4.3445" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9fb739e159 code=0x7ffc0000 [ 867.839181][ T26] audit: type=1326 audit(1790873766.807:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16252 comm="syz.4.3445" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fb739e159 code=0x7ffc0000 [ 867.930124][ T26] audit: type=1326 audit(1790873766.807:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16252 comm="syz.4.3445" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7f9fb739e159 code=0x7ffc0000 [ 868.454194][T16287] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 868.495130][T16287] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 868.523238][T16287] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 868.535493][T16287] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 868.890098][T16295] bridge0: port 4(vlan2) entered disabled state [ 868.896607][T16295] bridge0: port 3(team0) entered disabled state [ 868.903446][T16295] bridge0: port 2(bridge_slave_1) entered disabled state [ 868.910800][T16295] bridge0: port 1(bridge_slave_0) entered disabled state [ 868.960522][T16298] device vlan2 left promiscuous mode [ 868.972228][T16298] device geneve0 left promiscuous mode [ 868.982267][T16298] bridge0: port 4(vlan2) entered disabled state [ 869.005416][T16298] device team0 left promiscuous mode [ 869.015115][T16298] device team_slave_0 left promiscuous mode [ 869.033818][T16298] device team_slave_1 left promiscuous mode [ 869.044771][T16298] bridge0: port 3(team0) entered disabled state [ 869.068635][T16298] device bridge_slave_1 left promiscuous mode [ 869.077188][T16298] bridge0: port 2(bridge_slave_1) entered disabled state [ 869.098279][T16298] device bridge_slave_0 left promiscuous mode [ 869.111867][T16298] bridge0: port 1(bridge_slave_0) entered disabled state [ 869.880146][T16324] overlayfs: failed to clone upperpath [ 870.257444][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.263928][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.638336][T16363] overlayfs: failed to clone upperpath [ 871.969944][T16427] overlayfs: failed to clone upperpath [ 873.142883][T16487] lo speed is unknown, defaulting to 1000 [ 873.344557][T16493] overlayfs: failed to clone upperpath [ 874.531838][T16513] overlayfs: failed to clone upperpath [ 877.156173][T16598] lo speed is unknown, defaulting to 1000 [ 877.832040][T16628] overlayfs: failed to clone upperpath [ 877.863650][T16628] overlayfs: failed to clone upperpath [ 879.499132][T16689] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3590'. [ 882.088245][T16744] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3606'. [ 883.381529][T16783] overlayfs: failed to clone upperpath [ 884.969437][T16845] jffs2: notice: (16845) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 885.498537][T16883] overlayfs: failed to clone upperpath [ 885.520202][T16883] overlayfs: failed to clone upperpath [ 885.534499][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 885.559806][T16880] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 885.895089][T16899] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3654'. [ 885.915620][T16899] 8021q: adding VLAN 0 to HW filter on device bond1 [ 885.932932][T16899] bond1: (slave ip6erspan0): making interface the new active one [ 885.943017][T16899] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 885.965188][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 886.044148][T16903] lo speed is unknown, defaulting to 1000 [ 887.061888][T16954] lo speed is unknown, defaulting to 1000 [ 887.285550][T16961] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3672'. [ 887.526822][T16971] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3675'. [ 887.635221][T16975] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3679'. [ 888.135621][T16995] overlayfs: failed to clone upperpath [ 889.832603][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 889.851005][T17070] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 890.758320][ T7600] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 892.403529][T17171] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3744'. [ 892.464493][T17139] ceph: No mds server is up or the cluster is laggy [ 892.601967][T17176] tipc: Failed to remove unknown binding: 66,0,0/0:348631267/348631269 [ 892.630750][T17176] tipc: Failed to remove unknown binding: 66,0,0/0:348631267/348631268 [ 892.659930][T17176] tipc: Failed to remove unknown binding: 66,0,0/0:348631267/348631269 [ 892.676854][T17176] tipc: Failed to remove unknown binding: 66,0,0/0:348631267/348631268 [ 893.115851][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 893.115866][ T26] audit: type=1326 audit(1790873793.833:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17194 comm="syz.3.3753" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56acb9e159 code=0x7ffc0000 [ 893.177821][ T26] audit: type=1326 audit(1790873793.833:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17194 comm="syz.3.3753" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56acb9e159 code=0x7ffc0000 [ 893.229069][ T26] audit: type=1326 audit(1790873793.833:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17194 comm="syz.3.3753" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f56acb9e159 code=0x7ffc0000 [ 893.291815][ T26] audit: type=1326 audit(1790873793.833:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17194 comm="syz.3.3753" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56acb9e159 code=0x7ffc0000 [ 893.334507][ T26] audit: type=1326 audit(1790873793.833:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17194 comm="syz.3.3753" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56acb9e159 code=0x7ffc0000 [ 893.384879][ T26] audit: type=1326 audit(1790873793.833:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17194 comm="syz.3.3753" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f56acb9e159 code=0x7ffc0000 [ 893.434139][ T26] audit: type=1326 audit(1790873793.833:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17194 comm="syz.3.3753" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56acb9e159 code=0x7ffc0000 [ 893.477946][ T26] audit: type=1326 audit(1790873793.833:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17194 comm="syz.3.3753" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56acb9e159 code=0x7ffc0000 [ 893.529006][ T26] audit: type=1326 audit(1790873793.833:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17194 comm="syz.3.3753" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f56acb9e159 code=0x7ffc0000 [ 893.603109][ T26] audit: type=1326 audit(1790873793.833:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17194 comm="syz.3.3753" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56acb9e159 code=0x7ffc0000 [ 895.817099][T17277] overlayfs: failed to clone upperpath [ 896.876581][T17308] bond2: (slave bridge4): Enslaving as an active interface with an up link [ 898.079033][T17343] lo speed is unknown, defaulting to 1000 [ 898.132486][T17347] lo speed is unknown, defaulting to 1000 [ 898.865266][T17362] tipc: Enabling of bearer rejected, failed to enable media [ 900.308256][T17393] netlink: 'syz.0.3825': attribute type 1 has an invalid length. [ 900.421608][T17393] bond3: (slave veth0_to_bond): making interface the new active one [ 900.440387][T17393] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 900.466449][T17397] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3825'. [ 900.488035][T17397] 8021q: adding VLAN 0 to HW filter on device bond3 [ 901.385546][ T4740] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 902.573927][T17457] netlink: 'syz.1.3846': attribute type 4 has an invalid length. [ 906.683479][T17570] jffs2: notice: (17570) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 907.000525][T17577] lo speed is unknown, defaulting to 1000 [ 907.151995][T17579] lo speed is unknown, defaulting to 1000 [ 908.757804][T17615] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3890'. [ 919.699352][T17826] netlink: 'syz.2.3948': attribute type 1 has an invalid length. [ 919.879284][T17835] bridge0: port 2(bridge_slave_1) entered blocking state [ 919.886467][T17835] bridge0: port 2(bridge_slave_1) entered forwarding state [ 919.893876][T17835] bridge0: port 1(bridge_slave_0) entered blocking state [ 919.901036][T17835] bridge0: port 1(bridge_slave_0) entered forwarding state [ 919.942858][T17835] device bridge0 left promiscuous mode [ 919.975462][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 920.205712][T17849] device veth1_to_bond entered promiscuous mode [ 920.216443][T17849] bridge0: port 3(veth1_to_bond) entered blocking state [ 920.223730][T17849] bridge0: port 3(veth1_to_bond) entered disabled state [ 920.242026][T17849] bridge0: port 3(veth1_to_bond) entered blocking state [ 920.249165][T17849] bridge0: port 3(veth1_to_bond) entered forwarding state [ 920.379891][T17854] overlayfs: failed to clone upperpath [ 920.570535][T17866] tipc: Enabling of bearer rejected, failed to enable media [ 921.861767][ C1] TC_ACT_REPEAT abuse ? [ 922.001259][ C1] TC_ACT_REPEAT abuse ? [ 922.695704][ C1] TC_ACT_REPEAT abuse ? [ 922.783949][ C1] TC_ACT_REPEAT abuse ? [ 922.886252][ C1] TC_ACT_REPEAT abuse ? [ 922.988674][ C1] TC_ACT_REPEAT abuse ? [ 923.091241][ C1] TC_ACT_REPEAT abuse ? [ 923.193609][ C1] TC_ACT_REPEAT abuse ? [ 923.296135][ C1] TC_ACT_REPEAT abuse ? [ 923.398470][ C1] TC_ACT_REPEAT abuse ? [ 927.083146][ C1] net_ratelimit: 24 callbacks suppressed [ 927.083219][ C1] TC_ACT_REPEAT abuse ? [ 927.094817][ C1] TC_ACT_REPEAT abuse ? [ 927.189068][ C1] TC_ACT_REPEAT abuse ? [ 927.291624][ C1] TC_ACT_REPEAT abuse ? [ 927.394076][ C1] TC_ACT_REPEAT abuse ? [ 927.496547][ C1] TC_ACT_REPEAT abuse ? [ 927.598974][ C1] TC_ACT_REPEAT abuse ? [ 927.701420][ C1] TC_ACT_REPEAT abuse ? [ 927.803867][ C1] TC_ACT_REPEAT abuse ? [ 927.906306][ C1] TC_ACT_REPEAT abuse ? [ 928.000903][T17963] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 928.019548][ T22] wlan1: authenticate with 08:02:11:00:00:00 [ 928.031434][ T22] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 928.097571][ T4716] wlan1: authenticated [ 928.097695][T17963] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 928.102415][ T22] mac80211_hwsim hwsim11 wlan1: disabling HT/VHT/HE as WMM/QoS is not supported by the AP [ 928.140850][ T4716] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 928.151247][ T4716] wlan1: associate with 08:02:11:00:00:00 (try 2/3) [ 928.169643][ T4716] wlan1: associate with 08:02:11:00:00:00 (try 3/3) [ 928.187813][ T4716] wlan1: association with 08:02:11:00:00:00 timed out [ 928.291840][T17963] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 931.703672][T18019] netlink: 'syz.0.4007': attribute type 1 has an invalid length. [ 931.725403][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.731783][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.106771][ C1] net_ratelimit: 30 callbacks suppressed [ 932.106788][ C1] TC_ACT_REPEAT abuse ? [ 932.209275][ C1] TC_ACT_REPEAT abuse ? [ 932.325458][ C1] TC_ACT_REPEAT abuse ? [ 932.414148][ C1] TC_ACT_REPEAT abuse ? [ 932.516584][ C1] TC_ACT_REPEAT abuse ? [ 933.335900][ C1] TC_ACT_REPEAT abuse ? [ 933.340430][ C1] TC_ACT_REPEAT abuse ? [ 933.438712][ C1] TC_ACT_REPEAT abuse ? [ 933.514734][T18055] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 933.604102][ C1] TC_ACT_REPEAT abuse ? [ 933.643537][ C1] TC_ACT_REPEAT abuse ? [ 933.648397][T18055] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 934.751703][ T4735] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 934.867500][T18055] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 934.917089][T18055] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 934.949922][T18055] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 937.126905][ C1] net_ratelimit: 30 callbacks suppressed [ 937.126924][ C1] TC_ACT_REPEAT abuse ? [ 937.229291][ C1] TC_ACT_REPEAT abuse ? [ 937.401341][ C1] TC_ACT_REPEAT abuse ? [ 937.434298][ C1] TC_ACT_REPEAT abuse ? [ 937.536699][ C1] TC_ACT_REPEAT abuse ? [ 937.639141][ C1] TC_ACT_REPEAT abuse ? [ 937.741746][ C1] TC_ACT_REPEAT abuse ? [ 937.844087][ C1] TC_ACT_REPEAT abuse ? [ 938.917060][ C1] TC_ACT_REPEAT abuse ? [ 938.922391][ C1] TC_ACT_REPEAT abuse ? [ 939.030073][T18114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 939.215342][T18120] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 939.568788][T18120] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 941.876840][T18158] lo speed is unknown, defaulting to 1000 [ 941.957094][T18160] lo speed is unknown, defaulting to 1000 [ 942.147059][ C1] net_ratelimit: 11 callbacks suppressed [ 942.147077][ C1] TC_ACT_REPEAT abuse ? [ 942.249455][ C1] TC_ACT_REPEAT abuse ? [ 942.284126][T18175] device syz_tun left promiscuous mode [ 942.351902][ C1] TC_ACT_REPEAT abuse ? [ 942.454363][ C1] TC_ACT_REPEAT abuse ? [ 942.556721][ C1] TC_ACT_REPEAT abuse ? [ 942.659233][ C1] TC_ACT_REPEAT abuse ? [ 942.851798][ C1] TC_ACT_REPEAT abuse ? [ 943.696742][ C1] TC_ACT_REPEAT abuse ? [ 943.786343][ C1] TC_ACT_REPEAT abuse ? [ 943.888597][ C1] TC_ACT_REPEAT abuse ? [ 947.167117][ C1] net_ratelimit: 23 callbacks suppressed [ 947.167136][ C1] TC_ACT_REPEAT abuse ? [ 947.766341][ C1] TC_ACT_REPEAT abuse ? [ 947.781793][ C1] TC_ACT_REPEAT abuse ? [ 947.884270][ C1] TC_ACT_REPEAT abuse ? [ 947.942288][T18244] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4066'. [ 947.986694][ C1] TC_ACT_REPEAT abuse ? [ 948.089181][ C1] TC_ACT_REPEAT abuse ? [ 948.191629][ C1] TC_ACT_REPEAT abuse ? [ 948.294063][ C1] TC_ACT_REPEAT abuse ? [ 948.396522][ C1] TC_ACT_REPEAT abuse ? [ 949.007303][ C1] TC_ACT_REPEAT abuse ? [ 951.510418][T18281] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 951.551224][T18281] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 951.559740][T18282] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4074'. [ 952.695162][ C1] net_ratelimit: 25 callbacks suppressed [ 952.695180][ C1] TC_ACT_REPEAT abuse ? [ 952.713163][ C1] TC_ACT_REPEAT abuse ? [ 952.801940][ C1] TC_ACT_REPEAT abuse ? [ 952.904346][ C1] TC_ACT_REPEAT abuse ? [ 952.939524][T18306] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4082'. [ 953.006831][ C1] TC_ACT_REPEAT abuse ? [ 953.109381][ C1] TC_ACT_REPEAT abuse ? [ 953.213417][ C1] TC_ACT_REPEAT abuse ? [ 953.314199][ C1] TC_ACT_REPEAT abuse ? [ 953.416653][ C1] TC_ACT_REPEAT abuse ? [ 953.519102][ C1] TC_ACT_REPEAT abuse ? [ 957.743230][ C1] net_ratelimit: 20 callbacks suppressed [ 957.743250][ C1] TC_ACT_REPEAT abuse ? [ 957.758764][ C1] TC_ACT_REPEAT abuse ? [ 957.904893][ C1] TC_ACT_REPEAT abuse ? [ 958.064021][ C1] TC_ACT_REPEAT abuse ? [ 958.273306][ C1] TC_ACT_REPEAT abuse ? [ 958.278423][ C1] TC_ACT_REPEAT abuse ? [ 958.334333][ C1] TC_ACT_REPEAT abuse ? [ 958.436765][ C1] TC_ACT_REPEAT abuse ? [ 958.539191][ C1] TC_ACT_REPEAT abuse ? [ 958.684167][ C1] TC_ACT_REPEAT abuse ? [ 958.955386][T18359] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4099'. [ 960.677124][T18402] futex_wake_op: syz.1.4109 tries to shift op by 144; fix this program [ 963.488007][ C1] net_ratelimit: 23 callbacks suppressed [ 963.488019][ C1] TC_ACT_REPEAT abuse ? [ 963.559280][ C1] TC_ACT_REPEAT abuse ? [ 963.661762][ C1] TC_ACT_REPEAT abuse ? [ 963.764220][ C1] TC_ACT_REPEAT abuse ? [ 963.866751][ C1] TC_ACT_REPEAT abuse ? [ 963.969148][ C1] TC_ACT_REPEAT abuse ? [ 964.071591][ C1] TC_ACT_REPEAT abuse ? [ 964.174051][ C1] TC_ACT_REPEAT abuse ? [ 964.276617][ C1] TC_ACT_REPEAT abuse ? [ 964.378979][ C1] TC_ACT_REPEAT abuse ? [ 964.553241][T18426] lo speed is unknown, defaulting to 1000 [ 965.428281][ T26] kauditd_printk_skb: 20 callbacks suppressed [ 965.428296][ T26] audit: type=1326 audit(1790873866.117:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18435 comm="syz.0.4122" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f94a639e159 code=0x0 [ 968.193884][ T4499] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 968.579360][ C1] net_ratelimit: 36 callbacks suppressed [ 968.579378][ C1] TC_ACT_REPEAT abuse ? [ 969.157637][ C1] TC_ACT_REPEAT abuse ? [ 969.194129][ C1] TC_ACT_REPEAT abuse ? [ 969.296500][ C1] TC_ACT_REPEAT abuse ? [ 969.399152][ C1] TC_ACT_REPEAT abuse ? [ 969.501463][ C1] TC_ACT_REPEAT abuse ? [ 969.603935][ C1] TC_ACT_REPEAT abuse ? [ 969.706389][ C1] TC_ACT_REPEAT abuse ? [ 969.808837][ C1] TC_ACT_REPEAT abuse ? [ 969.911207][ C1] TC_ACT_REPEAT abuse ? [ 972.118583][T18501] tipc: Enabled bearer , priority 0 [ 972.260812][ C0] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 972.272726][ C0] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 972.281120][ C0] CPU: 0 PID: 4285 Comm: syz-executor Not tainted syzkaller #0 [ 972.288642][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 972.298685][ C0] RIP: 0010:fq_codel_enqueue+0xc80/0x1610 [ 972.304549][ C0] Code: 24 24 48 8b 44 24 20 80 3c 10 00 74 12 4c 89 ef e8 55 84 6f f9 48 ba 00 00 00 00 00 fc ff df 4d 8b 65 00 4c 89 e0 48 c1 e8 03 <80> 3c 10 00 74 12 4c 89 e7 e8 32 84 6f f9 48 ba 00 00 00 00 00 fc [ 972.324225][ C0] RSP: 0018:ffffc90000007340 EFLAGS: 00010246 [ 972.330286][ C0] RAX: 0000000000000000 RBX: 1ffff92000000eb8 RCX: 1ffff1100ee8e15a [ 972.338242][ C0] RDX: dffffc0000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 972.346199][ C0] RBP: ffffc90000007490 R08: ffffffff90b0f407 R09: 1ffffffff2161e80 [ 972.354157][ C0] R10: dffffc0000000000 R11: fffffbfff2161e81 R12: 0000000000000000 [ 972.362116][ C0] R13: ffff88802308f600 R14: 0000000000000000 R15: 0000000000000000 [ 972.370081][ C0] FS: 00005555812be500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 972.379001][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 972.385915][ C0] CR2: 00005555812d9a38 CR3: 000000005bb79000 CR4: 00000000003506f0 [ 972.393873][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 972.401824][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 972.409775][ C0] Call Trace: [ 972.413124][ C0] [ 972.416020][ C0] ? INET_ECN_set_ce+0x960/0x960 [ 972.421032][ C0] netem_dequeue+0xcbb/0x1390 [ 972.425698][ C0] ? ktime_get_real_ts64+0x440/0x440 [ 972.431057][ C0] ? netem_enqueue+0x37f0/0x37f0 [ 972.435977][ C0] ? netem_enqueue+0x1771/0x37f0 [ 972.440904][ C0] __qdisc_run+0x25a/0x1660 [ 972.445490][ C0] __dev_queue_xmit+0x1121/0x3810 [ 972.450563][ C0] ? __dev_queue_xmit+0x281/0x3810 [ 972.455676][ C0] ? tipc_net+0x45/0x270 [ 972.459948][ C0] ? netdev_core_pick_tx+0x360/0x360 [ 972.465220][ C0] ? tipc_crypto_xmit+0x1d6/0x23e0 [ 972.470315][ C0] ? net_generic+0x1e/0x240 [ 972.474848][ C0] ? __lock_acquire+0x7c40/0x7c40 [ 972.479909][ C0] ? eth_header+0x117/0x200 [ 972.484763][ C0] ? memcpy+0x3c/0x60 [ 972.488772][ C0] ? eth_header+0x117/0x200 [ 972.493263][ C0] ? llc_sysctl_exit+0x60/0x60 [ 972.498008][ C0] tipc_l2_send_msg+0x2f0/0x3b0 [ 972.502844][ C0] tipc_bearer_xmit_skb+0x2a9/0x3f0 [ 972.508027][ C0] ? tipc_bearer_xmit_skb+0xa6/0x3f0 [ 972.513293][ C0] ? tipc_bearer_min_mtu+0x1c0/0x1c0 [ 972.518569][ C0] tipc_disc_timeout+0x5e1/0x740 [ 972.523547][ C0] ? tipc_disc_init_msg+0x560/0x560 [ 972.528735][ C0] call_timer_fn+0x1ac/0x670 [ 972.533307][ C0] ? tipc_disc_init_msg+0x560/0x560 [ 972.538491][ C0] ? call_timer_fn+0xcf/0x670 [ 972.543152][ C0] ? __run_timers+0x810/0x810 [ 972.547811][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 972.553077][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 972.558274][ C0] ? tipc_disc_init_msg+0x560/0x560 [ 972.563486][ C0] __run_timers+0x56c/0x810 [ 972.567978][ C0] ? detach_timer+0x350/0x350 [ 972.572636][ C0] ? lock_chain_count+0x20/0x20 [ 972.577477][ C0] run_timer_softirq+0x63/0xf0 [ 972.582223][ C0] handle_softirqs+0x291/0x910 [ 972.586993][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 972.591827][ C0] ? do_softirq+0x210/0x210 [ 972.596311][ C0] ? hrtimer_interrupt+0x775/0x980 [ 972.601407][ C0] __irq_exit_rcu+0x13b/0x230 [ 972.606068][ C0] ? irq_exit_rcu+0x20/0x20 [ 972.610555][ C0] irq_exit_rcu+0x5/0x20 [ 972.614783][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 972.620400][ C0] [ 972.623313][ C0] [ 972.626289][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 972.632252][ C0] RIP: 0010:kasan_check_range+0x77/0x290 [ 972.637920][ C0] Code: df 4f 8d 1c 16 4c 8d 44 3e ff 4d 89 c1 49 c1 e9 03 4b 8d 1c 21 49 89 df 4d 29 df 49 83 ff 10 7f 29 4d 85 ff 0f 84 38 01 00 00 <4c> 89 cb 48 f7 d3 4c 01 f3 41 80 3b 00 0f 85 86 01 00 00 49 ff c3 [ 972.657508][ C0] RSP: 0018:ffffc900042e7a40 EFLAGS: 00000202 [ 972.663559][ C0] RAX: 0000000000000001 RBX: ffffed1005b20969 RCX: ffffffff83d3ae14 [ 972.671522][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff88802d904b40 [ 972.679490][ C0] RBP: ffff88802d904b10 R08: ffff88802d904b47 R09: 1ffff11005b20968 [ 972.687465][ C0] R10: dffffc0000000000 R11: ffffed1005b20968 R12: dffffc0000000001 [ 972.695426][ C0] R13: 0000000000000089 R14: 1ffff11005b20968 R15: 0000000000000001 [ 972.703389][ C0] ? tomoyo_check_acl+0x2d4/0x3f0 [ 972.708480][ C0] tomoyo_check_acl+0x2d4/0x3f0 [ 972.713315][ C0] ? tomoyo_path_number_perm+0x650/0x650 [ 972.718935][ C0] tomoyo_path_number_perm+0x379/0x650 [ 972.724394][ C0] ? tomoyo_path_number_perm+0x205/0x650 [ 972.730008][ C0] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 972.735478][ C0] ? __lock_acquire+0x7c40/0x7c40 [ 972.740510][ C0] ? do_raw_spin_lock+0x128/0x2f0 [ 972.745529][ C0] ? d_set_d_op+0x25b/0x370 [ 972.750039][ C0] ? hook_path_mkdir+0x3a0/0x460 [ 972.755021][ C0] ? simple_lookup+0xc1/0xf0 [ 972.759649][ C0] ? lookup_one_qstr_excl+0x11c/0x240 [ 972.765005][ C0] tomoyo_path_mkdir+0xad/0xf0 [ 972.769793][ C0] ? tomoyo_path_unlink+0xf0/0xf0 [ 972.774801][ C0] ? kern_path_create+0x50/0x50 [ 972.779629][ C0] security_path_mkdir+0xe0/0x130 [ 972.784677][ C0] do_mkdirat+0x15e/0x440 [ 972.788990][ C0] ? vfs_mkdir+0x570/0x570 [ 972.793390][ C0] __x64_sys_mkdirat+0x85/0x90 [ 972.798135][ C0] do_syscall_64+0x4c/0xa0 [ 972.802535][ C0] ? clear_bhb_loop+0x60/0xb0 [ 972.807193][ C0] ? clear_bhb_loop+0x60/0xb0 [ 972.811854][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 972.817734][ C0] RIP: 0033:0x7f9fb739cfc7 [ 972.822142][ C0] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 972.841732][ C0] RSP: 002b:00007ffffa09fbf8 EFLAGS: 00000202 ORIG_RAX: 0000000000000102 [ 972.850125][ C0] RAX: ffffffffffffffda RBX: 00007ffffa09fc50 RCX: 00007f9fb739cfc7 [ 972.858102][ C0] RDX: 00000000000001ff RSI: 00007ffffa09fc50 RDI: 00000000ffffff9c [ 972.866053][ C0] RBP: 00007ffffa09fc3c R08: 0000000000000003 R09: 00000000fffffffd [ 972.874007][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000326 [ 972.881958][ C0] R13: 00000000000927c0 R14: 00000000000ed52e R15: 00007ffffa09fc90 [ 972.889916][ C0] [ 972.892927][ C0] Modules linked in: [ 972.896915][ C0] ---[ end trace 0000000000000000 ]--- [ 972.902387][ C0] RIP: 0010:fq_codel_enqueue+0xc80/0x1610 [ 972.908125][ C0] Code: 24 24 48 8b 44 24 20 80 3c 10 00 74 12 4c 89 ef e8 55 84 6f f9 48 ba 00 00 00 00 00 fc ff df 4d 8b 65 00 4c 89 e0 48 c1 e8 03 <80> 3c 10 00 74 12 4c 89 e7 e8 32 84 6f f9 48 ba 00 00 00 00 00 fc [ 972.927762][ C0] RSP: 0018:ffffc90000007340 EFLAGS: 00010246 [ 972.933832][ C0] RAX: 0000000000000000 RBX: 1ffff92000000eb8 RCX: 1ffff1100ee8e15a [ 972.941802][ C0] RDX: dffffc0000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 972.949758][ C0] RBP: ffffc90000007490 R08: ffffffff90b0f407 R09: 1ffffffff2161e80 [ 972.957721][ C0] R10: dffffc0000000000 R11: fffffbfff2161e81 R12: 0000000000000000 [ 972.965688][ C0] R13: ffff88802308f600 R14: 0000000000000000 R15: 0000000000000000 [ 972.973654][ C0] FS: 00005555812be500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 972.982579][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 972.989145][ C0] CR2: 00005555812d9a38 CR3: 000000005bb79000 CR4: 00000000003506f0 [ 972.997112][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 973.005084][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 973.013084][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 973.020503][ C0] Kernel Offset: disabled [ 973.024819][ C0] Rebooting in 86400 seconds..