last executing test programs: 12m53.925757156s ago: executing program 4 (id=210): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x4, 0xfffffffd}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r1, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r0, 0x0, 0x0) 12m53.667028832s ago: executing program 4 (id=214): mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x304a800, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x39b3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r1, &(0x7f0000000040), &(0x7f0000004880)=@udp=r0}, 0x20) recvmmsg(r0, &(0x7f0000005b80)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/163, 0xa3}], 0x1}, 0x6}], 0x1, 0x23, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) connect$inet6(r0, &(0x7f0000001180)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00', 0x7ff}, 0x1c) 12m53.489874896s ago: executing program 4 (id=215): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) listen(r0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x1, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f00000008c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x7fff, r1, &(0x7f0000000140)="b7", 0x1, 0x0, 0x0, 0x2}]) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x4) 12m52.92370446s ago: executing program 4 (id=219): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f00000043c0)={0x2020}, 0x2020) 12m52.737213434s ago: executing program 4 (id=221): r0 = msgget$private(0x0, 0x19b) msgsnd(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="02"], 0x401, 0x0) msgrcv(r0, 0x0, 0x0, 0x3, 0x3000) msgctl$IPC_RMID(r0, 0x0) msgrcv(r0, &(0x7f0000000000)={0x0, ""/30}, 0x26, 0x1, 0x2800) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) socket$nl_route(0x10, 0x3, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) truncate(&(0x7f0000000080)='./file0\x00', 0x400000f030) 12m52.190988456s ago: executing program 4 (id=224): close(0x3) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @dev={0xfe, 0x80, '\x00', 0xf}, 0x8}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000180)={r2, 0x9}, 0x8) 12m51.577776951s ago: executing program 32 (id=224): close(0x3) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @dev={0xfe, 0x80, '\x00', 0xf}, 0x8}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000180)={r2, 0x9}, 0x8) 8m24.28000152s ago: executing program 0 (id=1993): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f000000bbc0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001180)="dd9e", 0x2}], 0x1, 0x0, 0x0, 0x20000041}}], 0x1, 0xc004) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) recvmmsg(r1, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}}], 0x700, 0x2, 0x0) 8m24.052803675s ago: executing program 0 (id=1995): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x4) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xe}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x34, r5, 0x211, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x34}}, 0x0) 8m23.570094496s ago: executing program 0 (id=2000): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @mcast2, 0x2}}}, 0x30) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0xf3a, 0x0) write$binfmt_misc(r6, &(0x7f0000000980), 0xfdef) splice(r2, 0x0, r6, 0x0, 0x80, 0x4) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) read$FUSE(r5, &(0x7f0000000980)={0x2020}, 0x2020) 8m22.523673239s ago: executing program 0 (id=2007): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, 0x0) set_mempolicy(0x8006, 0x0, 0x5) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) r1 = socket$inet6(0xa, 0x80000, 0x8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0x800, 0x0, 0x3, 0x1}, 0x20) connect$inet6(r1, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4) 8m21.13551597s ago: executing program 0 (id=2017): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYRESDEC=0x0, @ANYRES32=0x0, @ANYRES64], 0x4, 0x1291, &(0x7f0000001ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file0\x00', 0x1000) renameat2(0xffffffffffffff9c, &(0x7f0000000900)='./file0/../file0/../file0/../file0/file0\x00', 0xffffffffffffff9c, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x20, 0x1) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) fsopen(0x0, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) wait4(0x0, 0x0, 0x8, 0x0) ptrace$poke(0x4, 0x0, 0x0, 0xfffffffffffffffe) 8m19.518530905s ago: executing program 0 (id=2024): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000, 0x0, &(0x7f00005b0000/0x4000)=nil) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x108}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0xd59, &(0x7f00000001c0)={0x0, 0xc339, 0x200, 0x1, 0x35c}, &(0x7f0000000080), &(0x7f0000ff4000), 0x0) close_range(r1, r1, 0x0) 8m19.063335995s ago: executing program 33 (id=2024): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000, 0x0, &(0x7f00005b0000/0x4000)=nil) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x108}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0xd59, &(0x7f00000001c0)={0x0, 0xc339, 0x200, 0x1, 0x35c}, &(0x7f0000000080), &(0x7f0000ff4000), 0x0) close_range(r1, r1, 0x0) 8m17.788158204s ago: executing program 3 (id=2033): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0x1e, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x9, 0x1c) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x34, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xd0}]}, 0x34}}, 0x0) 8m17.278064715s ago: executing program 3 (id=2037): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x3, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8m16.133315911s ago: executing program 3 (id=2041): openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000280)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000240)={@hyper}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x8000, 0x0, 0x1, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) 8m13.835410592s ago: executing program 3 (id=2050): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x43, 0x0, 0x3}, 0x10) bind$tipc(r0, 0x0, 0x0) close(r0) 8m13.547081999s ago: executing program 3 (id=2052): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_io_uring_setup(0x141c, &(0x7f0000000200)={0x0, 0x2af2, 0x1, 0x1, 0x139}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_modify_offsets$generic(r1, r2, 0x2c, 0x10000) r4 = eventfd2(0xbd49, 0x800) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000000)=r4, 0x1) io_uring_enter(r0, 0x4119, 0x869e, 0xc, 0x0, 0x0) io_uring_enter(r0, 0x7f9d, 0xf427, 0x8, 0x0, 0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000340)={0x2e, 0x52, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000300)=@any_dev={0x2, 0xda4, 0x0, 0x0, 0x1000, 0x100, 0x0, 0x0, 0xde}}}, 0x0) syz_io_uring_complete(r1, r2) io_uring_enter(r0, 0x20, 0x20, 0x1, 0x0, 0x0) 8m7.61101247s ago: executing program 3 (id=2076): syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000b3838108480b0310547b01020301090212000100000000090401"], 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000080), 0x1, 0x4c02) pipe2(&(0x7f0000000300), 0x4080) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f00000010c0)={0x100095, 0x70, 0x20000}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000002040)='net/snmp6\x00') read$FUSE(r1, &(0x7f0000000000)={0x2020}, 0xfffffc7a) read$FUSE(r0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="5800000002060102000034e40000000004000008050005000a000000050001000600000005000400000000000900020073797a310000000011000300686173683a69702c706f727400001f000c00078008000640"], 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x5c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4622}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 7m52.440497418s ago: executing program 34 (id=2076): syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000b3838108480b0310547b01020301090212000100000000090401"], 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000080), 0x1, 0x4c02) pipe2(&(0x7f0000000300), 0x4080) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f00000010c0)={0x100095, 0x70, 0x20000}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000002040)='net/snmp6\x00') read$FUSE(r1, &(0x7f0000000000)={0x2020}, 0xfffffc7a) read$FUSE(r0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="5800000002060102000034e40000000004000008050005000a000000050001000600000005000400000000000900020073797a310000000011000300686173683a69702c706f727400001f000c00078008000640"], 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x5c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4622}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 8.805718535s ago: executing program 1 (id=3874): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[], 0x50) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r2, @ANYBLOB="0100000002"], 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r3}, &(0x7f00000000c0), &(0x7f0000000140)='%pK \x00'}, 0x20) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) 8.715563197s ago: executing program 6 (id=3875): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x846f01) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000840)=@newtfilter={0x87c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x5, 0x0, 0x2, 0x3ff, 0x40d, 0xffffff81, 0xc0, 0x1, 0x2fa, 0x6, 0x4, 0x2, 0x8, 0x1ff, 0x1a7, 0xce, 0x6, 0x4, 0x7, 0x1, 0x7, 0x0, 0x8, 0x8001, 0x8001, 0x2, 0x7, 0x3, 0x8, 0x1, 0x9, 0x10000, 0x0, 0x8, 0xa3, 0x0, 0x0, 0x1, 0x0, 0xd1c8, 0x88c9, 0x1000, 0x7, 0x800, 0x8007, 0xc76, 0xdd, 0x386, 0x101, 0x5, 0xfd, 0x21, 0x66b6, 0xd4, 0x9, 0x8, 0x932, 0x10000, 0x0, 0x7, 0x7, 0x401, 0x8, 0x7, 0x66c53844, 0xb7, 0x5, 0x913c, 0x7fffffff, 0x401, 0x7, 0x7, 0x8, 0x9, 0xfffffffe, 0x5, 0x63, 0x9, 0x4, 0xffffff6a, 0x4, 0x401, 0x2, 0x5, 0x800, 0x5, 0x10001, 0x7, 0x9, 0x3, 0x5, 0x81, 0x3b932d, 0x8000, 0x4, 0x44c0, 0x8001, 0x5, 0x8, 0xa2e, 0xd, 0x3c8b, 0x3, 0x8001, 0x2, 0x40, 0x0, 0x0, 0x2, 0x101, 0x3ff, 0x2, 0x6, 0x7f, 0x36d8, 0x8, 0x10, 0x8, 0x3, 0x4, 0x40, 0x1, 0x22af662d, 0x7, 0x5, 0x387, 0x400, 0x81, 0x0, 0xffff, 0xa5e, 0x7ff, 0x8, 0x4, 0xf1, 0xffff, 0xa849, 0x2, 0x0, 0x400, 0x1ff, 0x6c, 0x0, 0x7b, 0x400, 0xd33c, 0x8, 0x56, 0x3, 0x800, 0x9, 0x6, 0x2, 0x4, 0x1, 0x1, 0x7, 0x4000007, 0x4, 0xaee, 0x5, 0x8, 0xef19, 0x7, 0x2, 0x7f, 0x5, 0x7, 0x800, 0xfff, 0x6, 0x4, 0x800, 0x800, 0x4, 0xffffffff, 0x4338, 0xb, 0x7, 0xea, 0x8, 0xffff33fd, 0x0, 0x8000, 0xa, 0x9, 0x0, 0x8, 0x30aa0000, 0x7, 0x6, 0x8, 0x60000000, 0x7f, 0x3, 0x5, 0x9, 0x5, 0xfffffffd, 0x4, 0x0, 0x9, 0xffffff91, 0x80000000, 0x1, 0x5, 0x51, 0x10, 0x7, 0x1, 0x9, 0xed, 0x1, 0xac39, 0xb, 0x6, 0x0, 0x2, 0x1, 0x0, 0x1, 0xc6, 0xfff, 0x3, 0x8, 0x400, 0x2, 0x0, 0x1, 0x5, 0xb, 0x73073418, 0x2, 0x9, 0x3, 0x4, 0x40, 0x18000000, 0xa, 0x5, 0x9, 0x0, 0x2, 0xf1, 0x0, 0x3, 0x1, 0x8000, 0x4, 0x9, 0x7fffffff, 0x7, 0x5, 0x1, 0xffff2581]}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0xfffffffe, 0x9, 0x2, 0x73b5, 0x80000000, 0x400, 0x8, 0x8000, 0x4, 0x8, 0x100, 0x217, 0x1000, 0x99, 0x6, 0x6, 0x7, 0x0, 0x7, 0x5, 0x1, 0x3, 0x4, 0xc22, 0xf14, 0x8092, 0x7, 0x4, 0x80, 0xec, 0xeff, 0x7, 0x3, 0x2, 0x0, 0x3, 0x2, 0x4, 0x2, 0xd010, 0xffffff0b, 0x2, 0x1, 0x3ff, 0x8, 0x1, 0x3, 0x228, 0x29, 0x80000001, 0x7000000, 0x1, 0xffff, 0x7, 0xf, 0xd, 0x9, 0x9, 0x7, 0x7, 0x10, 0x5, 0xe7b, 0x4, 0x3, 0x7, 0x6, 0x7, 0x5, 0x4, 0x100, 0x0, 0x3, 0x9, 0x9, 0x80000001, 0x10, 0x2, 0x9, 0x9, 0x7ff, 0x401, 0x8, 0x8, 0x99c2, 0x4, 0x7, 0x61, 0x3, 0xc, 0x5, 0x7fff, 0x100, 0x76, 0x9, 0xc, 0xf, 0x50, 0x0, 0xffffffff, 0x3, 0x1, 0x767c, 0x6, 0x8000, 0x8, 0xd, 0x6, 0xffffffc0, 0x7, 0x101, 0x8, 0x3, 0x7066211e, 0x2, 0x6, 0x5, 0x3, 0x5, 0x8, 0x400, 0x2a4, 0xd, 0x10001, 0xfffffffa, 0x6, 0x80000000, 0x3, 0x9, 0x8, 0x0, 0x40, 0x2, 0xfffff801, 0x6, 0x7, 0xcc0, 0xfffffff4, 0x8, 0x5, 0x9, 0x9, 0x1, 0x17, 0x1, 0x0, 0x400, 0x9, 0x5, 0x100, 0xffff8000, 0x2, 0x6, 0x10, 0x4, 0x80, 0xfff, 0x5, 0xfffffffb, 0x8, 0x0, 0x24, 0x3, 0x0, 0x3ff, 0x4, 0xdd5, 0x0, 0x10000000, 0x4fcf, 0x1, 0xe0000000, 0x3, 0x8, 0x6, 0x4, 0x2, 0x80, 0x4, 0x8, 0x81, 0x0, 0x6, 0x5, 0x8, 0xffffff3a, 0xfffffffb, 0x8, 0x80000, 0x0, 0x9, 0x8, 0x44ca0699, 0x6, 0x3b326896, 0x495, 0x52, 0x8, 0x3, 0x1, 0x101, 0x4, 0x5, 0x2, 0x6e, 0x5, 0x40, 0x7, 0x0, 0x52b, 0xd, 0x0, 0x1, 0x3, 0x5, 0xe0ae, 0x10001, 0x7, 0x4, 0xa4, 0x7, 0xd, 0x7f, 0x864, 0xfa, 0x0, 0x81, 0x0, 0x9, 0x1, 0x0, 0x3, 0x3, 0x6, 0xd, 0x1, 0x42, 0x81, 0x4, 0x101, 0x8, 0x7, 0x4, 0x3, 0x7, 0xfff, 0xfffffff8, 0x0, 0xf, 0x4, 0x2, 0x9, 0x8, 0x6, 0x90000000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffffd, 0x3, 0x1, 0x9, 0xef, {0x2, 0x2, 0x1, 0x7ff, 0x84cc, 0x5}, {0x2, 0x2, 0x4, 0x5, 0x1, 0x6}, 0x100, 0x2, 0x7}}]}]}}]}, 0x87c}}, 0x0) write$tun(r0, &(0x7f0000000400)=ANY=[], 0x7a) 8.57440138s ago: executing program 1 (id=3876): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r1, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) flock(r2, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x10a) flock(r3, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 8.491231932s ago: executing program 6 (id=3877): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000140)={[{@min_batch_time={'min_batch_time', 0x3d, 0xd}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@noblock_validity}]}, 0x1, 0x7ad, &(0x7f00000007c0)="$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") quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cgroup.stat\x00', 0x275a, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000000)='./file1\x00', 0x2000494, &(0x7f0000000440)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c00484516000000000037c015c57600912233eefc80e89be5a1ef2c27ebf5171169dcfa4805d89c7e1f70d73d649ba4afab8b2194a9e8b537ad2ed68f8319883b84237da3bf9213365872b3f3"], 0x1, 0x2dc, &(0x7f0000000500)="$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") openat$incfs(0xffffffffffffffff, 0x0, 0xa4d80, 0x10) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006180)="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", 0x2000, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x200) 8.170680879s ago: executing program 6 (id=3880): openat$sequencer(0xffffffffffffff9c, 0x0, 0xa0602, 0x0) socket(0x2, 0x2, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x540000, r1}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x6, 0x0, 0x100, 0x6, 0x180107, r1}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0x4, 0xfff3}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd60303bbb00282b00fc020000000000000000000000000000fe8000000000000000000000000000aa"], 0x0) 8.042675232s ago: executing program 7 (id=3883): syz_usb_connect(0x2, 0x0, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000042000100000000000000000003010000000063d82600010000010100005566778899aabb0800450000140000000001ea0000010203040506070800000c00020006000600894f00000c0003"], 0x58}}, 0x0) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r3, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8804}, 0x4845) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 7.844023236s ago: executing program 2 (id=3884): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x34, 0x2c, 0xd27, 0x170bd29, 0x2, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x884}, 0x40) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008084}, 0x4004960) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000440)={[{@grpid}, {@grpquota}]}, 0x4, 0x500, &(0x7f0000000a40)="$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") 7.438771405s ago: executing program 1 (id=3886): request_key(0x0, 0x0, 0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x44000880}, 0x4080) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x358}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) 6.259971632s ago: executing program 1 (id=3887): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x10) r1 = syz_io_uring_setup(0x10, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000100)=[0xffffffff], 0x1) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x1}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x1, 0x0, @fd_index, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000200)="00000080fe534d42400001000000000000000100010000000000000000000000000000000000000000000000000000000000000000000000000000004100010011030000000000000000000000000000000000000000000000001000000010000000100000000000000000000000000000000000800000000000000000000048fe534d42400001000000000001000100010000000000000001000000000000000000000000000000010000000000000000000000000000000000000000000000090000004800000000000050fe534d42400001000000000002000100010000000000000002000000000000000000000001000000010000000000000000000000000000000000000000000000100001000000000008000000ff011f00", 0x124}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x2, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./cifs\x00', 0x1ed) mount(&(0x7f0000000800)=@filename='\\\\::1\\share\x00', &(0x7f0000000300)='./cifs\x00', &(0x7f0000000400)='cifs\x00', 0x0, &(0x7f0000000500)='ip=::1,port=20000,user=root,password=root,vers=3.1.1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./proc\x00', 0x1ed) mount(&(0x7f0000000a00)=@filename='proc\x00', &(0x7f0000000900)='./proc\x00', &(0x7f0000000a00)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./proc/fs/cifs/Stats\x00', 0x0, 0x0) read(r5, &(0x7f0000000c00), 0x1000) 6.194163133s ago: executing program 2 (id=3889): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="14000000040000000800000006"], 0x48) lseek(0xffffffffffffffff, 0x7, 0x2) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r3, &(0x7f0000000280), &(0x7f0000000a80)=@udp6}, 0x20) 6.126666924s ago: executing program 6 (id=3890): r0 = inotify_init() r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x1) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x14) ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0x1) write$uinput_user_dev(r1, &(0x7f0000000040)={'syz0\x00', {0x1, 0x1, 0x1, 0x1}, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x10000, 0x0, 0x0, 0x9], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) write$input_event(r1, &(0x7f0000000140)={{}, 0x1, 0x1, 0x1}, 0x18) write$input_event(r1, &(0x7f0000000160), 0x18) close_range(r0, 0xffffffffffffffff, 0x0) syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x804cd8, &(0x7f0000000e00)=ANY=[@ANYRES8=0x0, @ANYRESDEC], 0x3, 0x232, &(0x7f0000000500)="$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") r2 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r2, 0x0, &(0x7f00000000c0)='async\x00', 0x0, 0x0) 5.787107762s ago: executing program 6 (id=3891): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xd, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xb9}}, &(0x7f0000000480)='GPL\x00'}, 0x80) 4.169117328s ago: executing program 5 (id=3892): r0 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000004c0)='j\x95\'\x8aC\x16\xca\\', &(0x7f0000000c40)='\xe6usek\v\xf6u%\x9b\x00\x00\xad\xeb\x00\x00\x00\x00\x01\x80\x00\x00\xcf\x9b\x9f\b\xb6\xfe\xc8\xda~-\xf5S>\xb8\x86\xfc\x9cVR\x82\x9a\xbdp\xbd\x83w\xf9Z\xd2\xcb\xcdF\xd0#N7\x17\xfc\x1e\xf1\x97\xffxi\xe0KE}]\x8e\xca\xe3+\xc8\x98\x03\x91\x88(\bn\x7f\x0e\x85\xa5\xb4\n?_\xc9\xef\xe0Q\xdb\xb6\xa5\x81t\x06\xda\x95\x935\xf1\x18\xac\x00\xf0\xff\xff\xbd\xb5\xa1\x06\xfd\x01\x00\x00\x00\x0f\xf8\xe3\x8a\x1f\x9c\xf3\xc5\x1f\xf9\xbf[\xd13\xb3\xd3j\r6\x7f', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='{:\'@-\x00', &(0x7f0000000180)='%*.\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000003c0)='\x00', &(0x7f0000000400)='(\xa1\x00\x00\x00(\\N]\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000480)='\x00', &(0x7f0000000540)="82", 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b80)='\xe0\"\xef\xb1\xea\xe6\x9c\xe6\xc8M\xdb\x86\xb3\x8b\xbe\xd5\xbdB\x92\xa0\x19-+a\x13qQ\xd5f39hSr\xafbB\xe2\xe8\xcd\x1bf\x18\x7f\xf27E#\"\xab\x99\xec\x88\x8d\xd8C\x0f\x95\xff\xfeG\xf9t\xb1 \xcc\xc5\xbb\x88\xb6\xd2\xf2Jwq\xf8oG0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 4.146131528s ago: executing program 2 (id=3894): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x2, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x8001}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 4.007212061s ago: executing program 7 (id=3895): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$kcm(0x11, 0x2, 0x300) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x334ecc4b, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) ftruncate(0xffffffffffffffff, 0x6000000) 2.965680235s ago: executing program 1 (id=3896): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6a72c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x28, 0x801, 0x0) shutdown(r3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="61154c00000000006113500000000000bfa00000000000001505000008004e002d3501000000000095004100000000006916360000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf530000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffbd4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076ebae3f55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932c9a6aa57f1ad2e99e0e67ab93716d20000009fbb0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000f4000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b30410856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff010404faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202ee1192b81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9b5a8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18487b6feb89752cd600000000abc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d5454d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873df904c2bdbef81f246d26f4b40df949e12bdac18533d4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684e62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961cf4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fd0407de31d6e5532f360d379f20f054692b47207922fe6c14eba96c9a7ae906abc1ae1ae8c4fae92883cfa1978a04bbff4bbe0000000000000000000000000044585397feaadda3fcc64e7b0c08f7ac5c64cb190f1712a3b10fc34eb758705f1751d8c8b712eb39d2b8ad44f129c2c9aedb15"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 2.965365645s ago: executing program 5 (id=3897): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(&(0x7f0000000180)='./file0\x00', 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x18}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1a}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xa, 0x9}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.613508713s ago: executing program 2 (id=3898): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="c0000000190001000000000010000000e0000002000000000000000000000000ac1414bb00000000000000000000000000000000000000000a00008006000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000002ee0000000000001910be1a000000000000000000000000000000000000000008000000000000000000000000000000fdfffffffffeffff000000000000000000000000000000000000000000000000000000000000000000000000b86b6e00000100010000000008001f0001000000072feb3449062d474345581a836386bbb150252cba4b9380b93f4a9a1c21e7393d7810ff7adfb7333484e98e1eb97bc160fddd002514510509467387cf5f807784adec223d51d71bfaee4f"], 0xc0}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="d40000001b001d0328bd7000fcdbdf25ffffffff000000000000000000000000fe8000000000000000000000000000264e2000014e2404000200000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000000000000100010000000000f4ffffffffffffff04000000000000000200000000000000ba410000000091ad07000000000000000000008000000000ffffff7f0000000003000000000000000400000000000000080000000000000003000000b86b6e000000030100000000040000000000000008001f0001"], 0xd4}, 0x1, 0x0, 0x0, 0x20044001}, 0x0) 1.858812609s ago: executing program 5 (id=3899): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x6, 0x0) r4 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r3, 0x5) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) 901.56738ms ago: executing program 7 (id=3900): setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0xe0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200000) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) 900.5607ms ago: executing program 2 (id=3901): socket$netlink(0x10, 0x3, 0x0) setitimer(0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = getpid() syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_pidfd_open(r1, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions'], 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) setns(r2, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 711.513075ms ago: executing program 5 (id=3903): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_LIMIT={0x8, 0x2, 0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240048e4}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 711.226735ms ago: executing program 2 (id=3904): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x6, 0x1000, 0x1, 0x1ba}, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_ublk_setup_io_uring(0x1a3b, &(0x7f0000000540)={0x0, 0xbe8, 0x400, 0x7, 0x2af, 0x0, r0}, &(0x7f00000005c0), &(0x7f0000000600), &(0x7f0000000640)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) syz_ublk_add_dev(r0, 0x0, r1, r2, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000280)) socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) migrate_pages(0x0, 0x5, &(0x7f0000000040)=0x5, &(0x7f00000009c0)=0x272) 573.800158ms ago: executing program 7 (id=3905): sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40) setns(0xc9, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x4140045e}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) 534.616279ms ago: executing program 5 (id=3906): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=@base={0x9, 0x1c, 0x8, 0x40, 0x42, 0x1}, 0x50) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{r3, 0xffffffffffffffff}, &(0x7f00000009c0), &(0x7f0000000a00)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r0, &(0x7f00000002c0), &(0x7f0000000380)=""/100}, 0x20) 406.209261ms ago: executing program 7 (id=3907): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x2, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x40}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240048e4}, 0x44840) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 106.055978ms ago: executing program 5 (id=3908): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000180)) r1 = eventfd2(0x80, 0x800) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1}) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, 0x0, 0x4000042) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 0s ago: executing program 7 (id=3909): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/events/kvm/enable\x00', 0x80201, 0x8) kernel console output (not intermixed with test programs): 84] binder: 8283:8284 ioctl c0306201 2000000003c0 returned -14 [ 286.872513][ T8349] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 286.879898][ T8349] IPv6: NLM_F_CREATE should be set when creating new route [ 287.055384][ T8349] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.111651][ T8341] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 287.573459][ T8349] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 288.944006][ T8349] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.957558][ T8349] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.976755][ T8349] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.996981][ T8349] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.984319][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 289.984336][ T26] audit: type=1326 audit(1787854975.386:2578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8399 comm="syz.0.1199" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87f859e0d9 code=0x7ffc0000 [ 290.086534][ T26] audit: type=1326 audit(1787854975.426:2579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8399 comm="syz.0.1199" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87f859e0d9 code=0x7ffc0000 [ 290.231190][ T26] audit: type=1326 audit(1787854975.436:2580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8399 comm="syz.0.1199" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87f859e0d9 code=0x7ffc0000 [ 290.355936][ T26] audit: type=1326 audit(1787854975.436:2581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8399 comm="syz.0.1199" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87f859e0d9 code=0x7ffc0000 [ 290.373120][ T8405] netlink: 'syz.5.1203': attribute type 2 has an invalid length. [ 290.471178][ T26] audit: type=1326 audit(1787854975.436:2582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8399 comm="syz.0.1199" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f87f859e0d9 code=0x7ffc0000 [ 290.526914][ T26] audit: type=1326 audit(1787854975.436:2583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8399 comm="syz.0.1199" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87f859e0d9 code=0x7ffc0000 [ 290.560550][ T8407] I/O error, dev loop0, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 290.607219][ T8407] EXT4-fs (loop0): unable to read superblock [ 290.617180][ T26] audit: type=1326 audit(1787854975.436:2584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8399 comm="syz.0.1199" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87f859e0d9 code=0x7ffc0000 [ 290.727096][ T26] audit: type=1326 audit(1787854975.436:2585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8399 comm="syz.0.1199" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87f859e0d9 code=0x7ffc0000 [ 290.799578][ T26] audit: type=1326 audit(1787854975.436:2586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8399 comm="syz.0.1199" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87f859e0d9 code=0x7ffc0000 [ 290.974226][ T26] audit: type=1326 audit(1787854975.436:2587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8399 comm="syz.0.1199" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f87f859e0d9 code=0x7ffc0000 [ 290.991409][ T8418] fuse: Bad value for 'fd' [ 291.381377][ T8428] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1219'. [ 292.224442][ T8445] capability: warning: `syz.2.1213' uses 32-bit capabilities (legacy support in use) [ 292.520378][ T8456] netlink: 'syz.5.1218': attribute type 39 has an invalid length. [ 293.741658][ T8464] loop1: detected capacity change from 0 to 40427 [ 293.810768][ T8464] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 293.820748][ T8464] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 293.882096][ T8464] F2FS-fs (loop1): invalid crc value [ 293.974739][ T8492] device ip6gretap1 entered promiscuous mode [ 294.031717][ T8492] bond2: (slave ip6gretap1): no link monitoring support [ 294.039540][ T8464] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 294.063263][ T8492] bond2: (slave ip6gretap1): MII and ETHTOOL support not available for slave, and arp_interval/arp_ip_target module parameters not specified, thus bonding will not detect link failures! see bonding.txt for details [ 294.202254][ T8492] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 294.285908][ T8464] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 294.313632][ T8464] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 295.681972][ T8520] netlink: 'syz.1.1235': attribute type 1 has an invalid length. [ 295.757454][ T8520] device bond6 entered promiscuous mode [ 295.831906][ T8520] 8021q: adding VLAN 0 to HW filter on device bond6 [ 296.004520][ T8523] 8021q: adding VLAN 0 to HW filter on device bond7 [ 296.040730][ T8523] bond6: (slave bond7): making interface the new active one [ 296.078420][ T8523] device bond7 entered promiscuous mode [ 296.091930][ T8523] bond6: (slave bond7): Enslaving as an active interface with an up link [ 296.110838][ T4912] IPv6: ADDRCONF(NETDEV_CHANGE): bond6: link becomes ready [ 296.236993][ T8528] netlink: 'syz.2.1239': attribute type 1 has an invalid length. [ 296.350495][ T8528] 8021q: adding VLAN 0 to HW filter on device bond2 [ 296.398443][ T8531] bond2: (slave geneve2): making interface the new active one [ 296.474042][ T8531] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 296.511533][ T4912] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 299.532771][ T8598] fuse: Bad value for 'fd' [ 299.854790][ T8611] MTD: Couldn't look up './dev/mtdblock0': -2 [ 300.152657][ T8630] netlink: 'syz.5.1270': attribute type 1 has an invalid length. [ 300.235773][ T8630] 8021q: adding VLAN 0 to HW filter on device bond4 [ 300.340632][ T8630] bond4: (slave ip6gretap2): making interface the new active one [ 300.360407][ T8630] bond4: (slave ip6gretap2): Enslaving as an active interface with an up link [ 300.370158][ T4911] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready [ 301.436889][ T8664] loop1: detected capacity change from 0 to 512 [ 301.525391][ T8664] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: comm syz.1.1282: inode #1: comm syz.1.1282: iget: illegal inode # [ 301.555602][ T8664] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.1282: error while reading EA inode 1 err=-117 [ 301.597224][ T8664] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: comm syz.1.1282: inode #1: comm syz.1.1282: iget: illegal inode # [ 301.612492][ T8664] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.1282: error while reading EA inode 1 err=-117 [ 301.625916][ T8664] EXT4-fs (loop1): 1 orphan inode deleted [ 301.631881][ T8664] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 301.660990][ T26] kauditd_printk_skb: 39 callbacks suppressed [ 301.661008][ T26] audit: type=1800 audit(1787854987.056:2627): pid=8664 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1282" name="file1" dev="loop1" ino=18 res=0 errno=0 [ 301.945248][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 302.420604][ T4317] libceph: connect (1)[c::]:6789 error -101 [ 302.477431][ T4317] libceph: mon0 (1)[c::]:6789 connect error [ 302.500537][ T8685] ceph: No mds server is up or the cluster is laggy [ 302.517407][ T4319] libceph: connect (1)[c::]:6789 error -101 [ 302.524644][ T8684] VFS: Mount too revealing [ 302.533337][ T4319] libceph: mon0 (1)[c::]:6789 connect error [ 303.113113][ T8705] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1295'. [ 303.170311][ T8707] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1294'. [ 303.269623][ T8709] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1294'. [ 304.090492][ T26] audit: type=1804 audit(1787854989.486:2628): pid=8726 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1301" name="/newroot/261/file0" dev="fuse" ino=1 res=1 errno=0 [ 304.611089][ T4798] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 304.803532][ T4798] usb 2-1: unable to get BOS descriptor or descriptor too short [ 304.831097][ T4798] usb 2-1: not running at top speed; connect to a high speed hub [ 304.852969][ T4798] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 208, changing to 4 [ 304.890746][ T4798] usb 2-1: New USB device found, idVendor=041e, idProduct=0005, bcdDevice= 0.40 [ 304.920625][ T4798] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.941028][ T4798] usb 2-1: Product: syz [ 304.947518][ T4798] usb 2-1: Manufacturer: syz [ 304.961799][ T4798] usb 2-1: SerialNumber: syz [ 305.245301][ T4798] usb 2-1: USB disconnect, device number 8 [ 306.546801][ T8788] netlink: 'syz.3.1321': attribute type 2 has an invalid length. [ 307.273907][ T8801] device batadv_slave_1 entered promiscuous mode [ 307.287699][ T8801] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1325'. [ 307.310280][ T8801] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 307.402291][ T8803] overlayfs: failed to clone upperpath [ 307.559248][ T8801] device batadv_slave_1 left promiscuous mode [ 307.581476][ T8801] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 309.292696][ T8869] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1346'. [ 310.768515][ T8906] netlink: 'syz.2.1357': attribute type 1 has an invalid length. [ 310.927587][ T8906] 8021q: adding VLAN 0 to HW filter on device bond3 [ 310.985917][ T8911] bond3: (slave ip6gretap1): making interface the new active one [ 310.998431][ T8911] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 311.013095][ T4911] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 312.123351][ T8919] netlink: 'syz.1.1360': attribute type 2 has an invalid length. [ 312.149206][ T8919] netlink: 11575 bytes leftover after parsing attributes in process `syz.1.1360'. [ 312.181513][ T8919] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1360'. [ 316.043467][ T9021] netlink: 'syz.0.1398': attribute type 39 has an invalid length. [ 317.193705][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.200179][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.358017][ T9063] mmap: syz.5.1417 (9063) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 318.043775][ T9088] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 318.492455][ T9097] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1426'. [ 318.835178][ T9114] tipc: Failed to remove unknown binding: 66,0,0/0:2260111065/2260111066 [ 318.895860][ T9117] tipc: Failed to remove unknown binding: 66,0,0/0:2260111065/2260111066 [ 319.111425][ T30] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 321.395744][ T26] audit: type=1804 audit(1787855006.776:2629): pid=9188 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1456" name="bus" dev="ramfs" ino=52908 res=1 errno=0 [ 321.422005][ T26] audit: type=1804 audit(1787855006.776:2630): pid=9188 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1456" name="bus" dev="ramfs" ino=52908 res=1 errno=0 [ 322.492764][ T9222] overlayfs: failed to clone upperpath [ 324.112533][ T9272] x_tables: ip_tables: osf match: only valid for protocol 6 [ 324.403205][ T9291] sch_tbf: burst 15 is lower than device syzkaller0 mtu (1514) ! [ 324.445026][ T9291] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1493'. [ 326.478766][ T9337] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 327.643075][ T9345] netlink: 'syz.2.1510': attribute type 1 has an invalid length. [ 327.763664][ T9345] 8021q: adding VLAN 0 to HW filter on device bond4 [ 327.796239][ T9353] netlink: 'syz.1.1512': attribute type 11 has an invalid length. [ 327.923805][ T9350] bond4: (slave veth5): Enslaving as an active interface with a down link [ 328.056456][ T9345] bond4: (slave dummy0): making interface the new active one [ 328.105930][ T9345] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 328.146334][ T9354] netlink: 'syz.2.1510': attribute type 10 has an invalid length. [ 328.176766][ T9354] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1510'. [ 328.217286][ T9354] device dummy0 entered promiscuous mode [ 328.246672][ T9354] bond4: (slave dummy0): Releasing active interface [ 328.407677][ T9372] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1519'. [ 328.572351][ T9372] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1519'. [ 328.900492][ T9394] capability: warning: `syz.0.1525' uses deprecated v2 capabilities in a way that may be insecure [ 330.353191][ T26] audit: type=1804 audit(1787855015.756:2631): pid=9433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1538" name="bus" dev="ramfs" ino=54140 res=1 errno=0 [ 330.428263][ T26] audit: type=1804 audit(1787855015.776:2632): pid=9433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1538" name="bus" dev="ramfs" ino=54140 res=1 errno=0 [ 330.564690][ T9436] overlayfs: failed to clone upperpath [ 331.055293][ T9444] MPTCP: kernel_bind error, err=-99 [ 331.157074][ T9446] zram0: detected capacity change from 0 to 8 [ 331.573958][ T9461] overlayfs: failed to clone upperpath [ 332.936671][ T9497] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1574'. [ 333.053958][ T9502] overlayfs: failed to clone upperpath [ 335.438467][ T26] audit: type=1804 audit(1787855020.836:2633): pid=9587 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1595" name="bus" dev="ramfs" ino=55549 res=1 errno=0 [ 335.483696][ T26] audit: type=1804 audit(1787855020.866:2634): pid=9587 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1595" name="bus" dev="ramfs" ino=55549 res=1 errno=0 [ 336.007370][ T9598] device veth0 left promiscuous mode [ 336.016454][ T9598] bridge0: port 2(veth0) entered disabled state [ 336.047564][ T9598] device veth1 left promiscuous mode [ 336.058127][ T9598] bridge0: port 3(veth1) entered disabled state [ 336.073874][ T9598] device bridge_slave_0 left promiscuous mode [ 336.088735][ T9598] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.113227][ T9598] bond0: (slave bond_slave_0): Releasing backup interface [ 336.130067][ T9598] bond0: (slave bond_slave_1): Releasing backup interface [ 336.184184][ T9598] team0: Port device team_slave_1 removed [ 336.200379][ T9598] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 336.229872][ T9598] bond3: (slave geneve2): Releasing active interface [ 336.264663][ T9598] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.298565][ T9598] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.338586][ T9598] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.374555][ T9598] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.271084][ T26] audit: type=1804 audit(1787855022.666:2635): pid=9608 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1612" name="bus" dev="ramfs" ino=54776 res=1 errno=0 [ 337.351247][ T26] audit: type=1804 audit(1787855022.666:2636): pid=9608 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1612" name="bus" dev="ramfs" ino=54776 res=1 errno=0 [ 339.922202][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807a5d0800: rx timeout, send abort [ 339.935001][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807a5d0800: 0x30100: (3) A timeout occurred and this is the connection abort to close the session. [ 339.950197][ C1] vcan0: j1939_xtp_rx_cmd_bad_pgn: 0xffff888074413c00: CMD 0xff with PGN 0x30100 for running session with different PGN 0x10000. [ 339.963913][ C1] vcan0: j1939_tp_rxtimer: 0xffff888074413c00: rx timeout, send abort [ 340.380852][ C0] sched: RT throttling activated [ 340.433673][ T9644] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 340.472235][ C1] vcan0: j1939_tp_rxtimer: 0xffff888074413c00: abort rx timeout. Force session deactivation [ 340.508843][ T9646] netlink: 'syz.1.1625': attribute type 1 has an invalid length. [ 340.745140][ T9650] bond8: (slave veth3): Enslaving as an active interface with a down link [ 340.759506][ T9653] device bond8 entered promiscuous mode [ 340.772544][ T9653] 8021q: adding VLAN 0 to HW filter on device bond8 [ 342.060352][ T9658] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.067979][ T9658] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.055745][ T9658] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.065227][ T9658] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.076676][ T9658] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.085746][ T9658] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.094748][ T9658] netdevsim netdevsim10 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.236298][ T9658] device ip6gretap1 left promiscuous mode [ 343.451624][ T26] audit: type=1804 audit(1787855028.856:2637): pid=9679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1620" name="bus" dev="ramfs" ino=55862 res=1 errno=0 [ 343.503126][ T26] audit: type=1804 audit(1787855028.876:2638): pid=9680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.1620" name="bus" dev="ramfs" ino=55862 res=1 errno=0 [ 345.401964][ T9715] 8021q: VLANs not supported on ip6tnl0 [ 346.115743][ T9723] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1643'. [ 346.129931][ T9713] null_blk: disk nullb1 created [ 346.235965][ T9728] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1643'. [ 346.341756][ T26] audit: type=1804 audit(1787855031.746:2639): pid=9733 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1646" name="bus" dev="ramfs" ino=55961 res=1 errno=0 [ 346.388841][ T26] audit: type=1804 audit(1787855031.746:2640): pid=9733 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1646" name="bus" dev="ramfs" ino=55961 res=1 errno=0 [ 348.500091][ T9777] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1661'. [ 353.327406][ T9844] io-wq is not configured for unbound workers [ 353.946507][ T9847] bridge0: port 3(syz_tun) entered blocking state [ 353.997362][ T9847] bridge0: port 3(syz_tun) entered disabled state [ 354.035518][ T9847] device syz_tun entered promiscuous mode [ 354.238712][ T9849] netlink: 'syz.5.1688': attribute type 4 has an invalid length. [ 354.305011][ T9849] netlink: 'syz.5.1688': attribute type 17 has an invalid length. [ 354.389468][ T9849] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 355.458187][ T26] audit: type=1804 audit(1787855040.856:2641): pid=9868 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1695" name="bus" dev="ramfs" ino=57117 res=1 errno=0 [ 355.559150][ T26] audit: type=1804 audit(1787855040.856:2642): pid=9868 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.1695" name="bus" dev="ramfs" ino=57117 res=1 errno=0 [ 356.160539][ T9880] tipc: Failed to remove unknown binding: 66,1,1/0:289615341/289615343 [ 356.179652][ T9880] tipc: Failed to remove unknown binding: 66,1,1/0:289615341/289615343 [ 356.195637][ T26] audit: type=1326 audit(1787855041.596:2643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9877 comm="syz.2.1698" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb72779e0d9 code=0x7fc00000 [ 356.226314][ T26] audit: type=1326 audit(1787855041.626:2644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9877 comm="syz.2.1698" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fb72779e0d9 code=0x7fc00000 [ 356.281603][ T9880] tipc: Failed to remove unknown binding: 66,1,1/0:289615341/289615343 [ 356.377731][ T9883] overlayfs: failed to clone upperpath [ 357.327013][ T9900] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 357.352643][ T9900] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 357.447693][ T9900] bond2: (slave geneve2): Releasing active interface [ 357.485442][ T9903] loop1: detected capacity change from 0 to 1024 [ 357.519382][ T9900] bond3: (slave ip6gretap1): Releasing active interface [ 357.556496][ T9900] bond4: (slave veth5): Releasing active interface [ 357.582251][ T9903] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 357.611275][ T9903] ext4 filesystem being mounted at /339/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 357.753068][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 359.265887][ T9949] xt_hashlimit: max too large, truncated to 1048576 [ 359.276071][ T9949] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 359.389106][ T9951] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1723'. [ 359.866128][ T9955] overlayfs: failed to clone upperpath [ 360.065790][ T9960] device syz_tun left promiscuous mode [ 360.090913][ T9960] bridge0: port 3(syz_tun) entered disabled state [ 360.125612][ T9960] device bridge_slave_0 left promiscuous mode [ 360.157436][ T9960] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.195227][ T9960] device bridge_slave_1 left promiscuous mode [ 360.222182][ T9960] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.273781][ T9960] bond0: (slave bond_slave_0): Releasing backup interface [ 360.300740][ T9960] bond0: (slave bond_slave_1): Releasing backup interface [ 360.383640][ T9960] team0: Port device team_slave_0 removed [ 360.448242][ T9960] team0: Port device team_slave_1 removed [ 360.470427][ T9960] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 360.508101][ T9960] bond1: (slave vlan2): Releasing active interface [ 360.545632][ T9960] bond2: (slave geneve2): Releasing active interface [ 360.582632][ T9960] bond5: (slave bridge1): Releasing backup interface [ 360.611003][ T9960] bond6: (slave bond7): Releasing backup interface [ 360.626750][ T9960] device bond7 left promiscuous mode [ 360.663469][ T9960] bond8: (slave veth3): Releasing active interface [ 360.992520][ T9970] overlayfs: failed to clone upperpath [ 362.770877][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 363.147698][T10017] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1745'. [ 364.083227][T10035] overlayfs: failed to clone upperpath [ 366.581403][ T26] audit: type=1326 audit(1787855051.986:2645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10064 comm="syz.2.1763" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb72779e0d9 code=0x7fc00000 [ 366.621253][ T26] audit: type=1326 audit(1787855052.016:2646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10064 comm="syz.2.1763" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fb72779e0d9 code=0x7fc00000 [ 366.979353][T10079] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 367.209731][T10085] device gretap1 entered promiscuous mode [ 367.223052][T10085] loop1: detected capacity change from 0 to 256 [ 367.650954][ T130] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 367.843054][ T130] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 367.877361][ T130] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 367.932509][ T130] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 367.982144][ T130] usb 2-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 368.025456][ T130] usb 2-1: Product: syz [ 368.068488][ T130] usb 2-1: config 0 descriptor?? [ 368.127891][ T130] hub 2-1:0.0: USB hub found [ 368.346384][ T130] hub 2-1:0.0: 1 port detected [ 368.979466][ T130] hub 2-1:0.0: activate --> -90 [ 369.415967][ T130] usb 2-1-port1: cannot disable (err = -71) [ 369.422293][ T4794] usb 2-1: USB disconnect, device number 9 [ 370.888512][T10135] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1787'. [ 371.780261][T10153] device dummy0 left promiscuous mode [ 371.792201][T10153] device bridge1 left promiscuous mode [ 371.800022][T10153] device bond6 left promiscuous mode [ 371.827713][T10153] device bond8 left promiscuous mode [ 371.845261][T10153] device gretap1 left promiscuous mode [ 371.959193][T10158] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.968520][T10158] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.977526][T10158] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.988013][T10158] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.997341][T10158] device geneve3 entered promiscuous mode [ 372.079534][T10161] netlink: 'syz.2.1797': attribute type 1 has an invalid length. [ 372.126481][T10161] 8021q: adding VLAN 0 to HW filter on device bond5 [ 372.156348][T10165] bond5: (slave veth7): Enslaving as an active interface with a down link [ 372.180433][T10161] device dummy0 left promiscuous mode [ 372.190268][T10161] bond5: (slave dummy0): making interface the new active one [ 372.200614][T10161] device dummy0 entered promiscuous mode [ 372.206874][T10161] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 372.279640][ T4903] IPv6: ADDRCONF(NETDEV_CHANGE): bond5: link becomes ready [ 372.666055][T10184] overlayfs: failed to clone lowerpath [ 372.674139][T10184] overlayfs: failed to clone lowerpath [ 374.650639][T10223] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 374.717740][T10223] device bridge_slave_0 left promiscuous mode [ 374.750099][T10223] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.039867][T10228] overlayfs: failed to clone upperpath [ 375.066632][T10223] device bridge_slave_1 left promiscuous mode [ 375.073281][T10223] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.432049][T10223] bond0: (slave bond_slave_0): Releasing backup interface [ 375.451613][T10223] bond0: (slave bond_slave_1): Releasing backup interface [ 375.477134][T10223] team0: Port device team_slave_1 removed [ 375.490096][T10223] bond1: (slave gretap1): Releasing active interface [ 375.533833][T10223] bond2: (slave ip6gretap1): Releasing backup interface [ 375.550781][T10223] bond4: (slave ip6gretap2): Releasing active interface [ 375.571046][T10238] device wlan0 entered promiscuous mode [ 378.396303][T10273] netlink: 'syz.1.1839': attribute type 17 has an invalid length. [ 378.633666][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.640118][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.878182][T10295] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1847'. [ 379.210781][T10302] netlink: 'syz.5.1845': attribute type 4 has an invalid length. [ 379.851147][ T5044] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 380.058244][ T5044] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 380.087362][ T5044] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 380.117992][ T5044] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 380.140543][ T5044] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.191306][T10306] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 382.596049][ T4317] usb 2-1: USB disconnect, device number 10 [ 382.815917][T10367] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 383.374629][T10380] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1873'. [ 385.321394][ T4903] device dummy0 left promiscuous mode [ 385.781479][T10450] netlink: 1320 bytes leftover after parsing attributes in process `syz.1.1898'. [ 386.848517][T10465] loop1: detected capacity change from 0 to 512 [ 386.892425][T10465] EXT4-fs: Ignoring removed i_version option [ 386.929136][T10465] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 387.009594][T10465] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.1905: invalid indirect mapped block 4294967295 (level 1) [ 387.031118][T10465] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.1905: invalid indirect mapped block 4294967295 (level 1) [ 387.047061][T10465] EXT4-fs (loop1): 2 truncates cleaned up [ 387.053152][T10465] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 387.126335][T10465] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.1905: Invalid inode bitmap blk 4 in block_group 0 [ 387.217031][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 387.598886][T10476] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 389.478524][T10525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 389.748288][T10533] netlink: 'syz.1.1928': attribute type 1 has an invalid length. [ 389.818408][T10533] 8021q: adding VLAN 0 to HW filter on device bond9 [ 389.902528][T10539] bond9: (slave veth5): Enslaving as an active interface with a down link [ 389.938836][T10533] bond9: (slave dummy0): making interface the new active one [ 389.992952][T10533] device dummy0 entered promiscuous mode [ 390.017287][T10533] bond9: (slave dummy0): Enslaving as an active interface with an up link [ 390.054906][ T8620] IPv6: ADDRCONF(NETDEV_CHANGE): bond9: link becomes ready [ 391.338330][T10560] device bridge_slave_0 left promiscuous mode [ 391.399858][T10560] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.512946][T10560] device bridge_slave_1 left promiscuous mode [ 391.659554][T10560] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.679768][T10560] bond0: (slave bond_slave_0): Releasing backup interface [ 391.705790][T10560] bond0: (slave bond_slave_1): Releasing backup interface [ 391.717184][T10560] team0: Port device team_slave_1 removed [ 391.725704][T10560] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 391.735990][T10560] batman_adv: batadv0: Removing interface: gretap1 [ 391.748212][T10560] bond2: (slave geneve2): Releasing active interface [ 391.759687][T10560] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.771513][T10560] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.874961][T10560] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.899656][T10560] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.026971][T10584] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1941'. [ 393.029463][ T26] audit: type=1326 audit(1787855078.426:2647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10605 comm="syz.2.1949" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb72779e0d9 code=0x0 [ 399.580500][T10674] 8021q: adding VLAN 0 to HW filter on device team0 [ 399.664867][T10674] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 399.856930][ T5044] libceph: connect (1)[c::]:6789 error -97 [ 399.864307][ T5044] libceph: mon0 (1)[c::]:6789 connect error [ 399.881205][ T5044] libceph: connect (1)[c::]:6789 error -97 [ 399.904542][ T5044] libceph: mon0 (1)[c::]:6789 connect error [ 399.981671][T10691] ceph: No mds server is up or the cluster is laggy [ 400.535141][T10713] netlink: 'syz.0.1983': attribute type 1 has an invalid length. [ 400.645409][T10713] 8021q: adding VLAN 0 to HW filter on device bond4 [ 400.752185][T10713] bond4: (slave ip6gretap1): making interface the new active one [ 400.816696][T10713] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 401.280737][T10734] loop1: detected capacity change from 0 to 128 [ 401.312804][T10731] 9pnet: p9_errstr2errno: server reported unknown error Àñ'IÓ$íÛ·=¼ [ 401.501086][T10743] loop1: detected capacity change from 0 to 128 [ 401.565941][T10743] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 401.605618][T10743] ext4 filesystem being mounted at /400/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 402.276688][T10767] netlink: 'syz.5.1994': attribute type 10 has an invalid length. [ 402.294435][T10767] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 402.409439][T10770] MPTCP: addr_signal error, add_addr=2, echo=1 [ 402.418070][ C0] MPTCP: addr_signal error, add_addr=2, echo=1 [ 402.475792][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 402.795457][ T4918] device dummy0 left promiscuous mode [ 404.080098][T10832] bond4: (slave ip6gretap1): Releasing active interface [ 404.228257][T10838] netlink: 'syz.1.2008': attribute type 10 has an invalid length. [ 404.287219][T10838] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 406.498196][T10886] netlink: 'syz.2.2021': attribute type 10 has an invalid length. [ 408.438818][ T4288] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 408.452201][ T4288] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 408.464265][ T4288] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 408.477607][ T4288] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 408.485919][ T4288] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 408.497876][ T4288] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 409.532010][T10915] chnl_net:caif_netlink_parms(): no params data found [ 410.154602][T10915] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.185115][T10915] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.267566][T10915] device bridge_slave_0 entered promiscuous mode [ 410.391658][T10915] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.473076][T10915] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.551069][ T4287] Bluetooth: hci0: command 0x0409 tx timeout [ 410.663493][T10915] device bridge_slave_1 entered promiscuous mode [ 411.097795][T10915] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 411.199600][T10915] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 411.287498][T10915] team0: Port device team_slave_0 added [ 411.298144][T10915] team0: Port device team_slave_1 added [ 411.334584][T10915] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 411.346247][T10915] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 411.379557][T10915] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 411.398296][T10915] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 411.406899][T10915] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 411.448467][T10915] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 411.509551][T10915] device hsr_slave_0 entered promiscuous mode [ 411.518144][T10915] device hsr_slave_1 entered promiscuous mode [ 411.530182][T10915] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 411.538289][T10915] Cannot create hsr debugfs directory [ 411.728959][T10915] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 411.740338][T10915] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 411.752801][T10915] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 411.768258][T10915] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 411.864664][T10915] 8021q: adding VLAN 0 to HW filter on device bond0 [ 411.890536][T10915] 8021q: adding VLAN 0 to HW filter on device team0 [ 411.899848][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 411.936641][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 411.950355][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 411.968108][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 411.977507][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 411.987470][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.994690][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 412.004190][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 412.027027][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 412.039798][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 412.076952][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.084197][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 412.127022][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 412.156762][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 412.184616][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 412.199031][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 412.212055][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 412.232533][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 412.243089][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 412.261750][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 412.270704][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 412.281282][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 412.290299][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 412.305690][T10915] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 412.407370][T10971] futex_wake_op: syz.5.2049 tries to shift op by 144; fix this program [ 412.631151][ T4287] Bluetooth: hci0: command 0x041b tx timeout [ 412.663716][T10978] tipc: Failed to remove unknown binding: 66,0,0/0:2081610056/2081610058 [ 412.676034][T10978] tipc: Failed to remove unknown binding: 66,0,0/0:2081610056/2081610057 [ 412.687811][T10978] tipc: Failed to remove unknown binding: 66,0,0/0:2081610056/2081610058 [ 412.696815][T10978] tipc: Failed to remove unknown binding: 66,0,0/0:2081610056/2081610057 [ 412.720080][ T4911] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 412.731179][ T4911] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 412.769354][T10915] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 412.878286][T10984] netlink: 'syz.2.2053': attribute type 1 has an invalid length. [ 412.943209][T10986] bond6: (slave vti0): The slave device specified does not support setting the MAC address [ 412.955484][T10986] bond6: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 412.972558][T10986] bond6: (slave vti0): making interface the new active one [ 412.985591][T10986] bond6: (slave vti0): Enslaving as an active interface with an up link [ 413.005418][T10984] bond6 (unregistering): (slave vti0): Releasing backup interface [ 413.060049][T10984] bond6 (unregistering): Released all slaves [ 413.348108][T10995] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2055'. [ 413.538477][T11003] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2057'. [ 413.566770][ T130] libceph: connect (1)[c::]:6789 error -101 [ 413.581045][ T130] libceph: mon0 (1)[c::]:6789 connect error [ 413.701090][T11001] ceph: No mds server is up or the cluster is laggy [ 414.048350][ T4911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 414.059874][ T4911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 414.098875][T11018] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2060'. [ 414.123180][T10434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 414.141961][T10434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 414.160635][T10434] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 414.177149][T10434] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 414.204431][T10915] device veth0_vlan entered promiscuous mode [ 414.265138][T10915] device veth1_vlan entered promiscuous mode [ 414.329931][ T4911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 414.350341][ T4911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 414.382587][T10915] device veth0_macvtap entered promiscuous mode [ 414.407306][T10915] device veth1_macvtap entered promiscuous mode [ 414.429154][T10915] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 414.438015][ T4911] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 414.472721][ T4911] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 414.496525][ T4911] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 414.516408][ T4911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 414.710942][ T4287] Bluetooth: hci0: command 0x040f tx timeout [ 414.731124][T10915] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 414.742731][T10915] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.753150][T10915] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.761989][T10915] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.770730][T10915] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.786216][T10434] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 414.796237][T10434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 415.683128][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.699146][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.707323][T10434] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 415.802396][ T4907] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.813964][ T4907] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.858035][ T4907] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 416.792392][ T4287] Bluetooth: hci0: command 0x0419 tx timeout [ 419.683182][T11073] loop6: detected capacity change from 0 to 512 [ 419.717521][T11073] EXT4-fs: inline encryption not supported [ 420.851544][T11073] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 420.860349][T11073] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 421.079899][T11073] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 421.148804][T11073] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.2080: bg 0: block 248: padding at end of block bitmap is not set [ 421.201670][T11073] Quota error (device loop6): write_blk: dquota write failed [ 421.225378][T11073] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 421.277995][T11073] EXT4-fs error (device loop6): ext4_acquire_dquot:6841: comm syz.6.2080: Failed to acquire dquot type 1 [ 421.385444][T11073] EXT4-fs (loop6): 1 truncate cleaned up [ 421.411879][T11073] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 421.486111][T11073] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2080'. [ 421.731604][T11093] binder: 11092:11093 ioctl c018620c 200000000240 returned -22 [ 421.823667][T10915] EXT4-fs (loop6): unmounting filesystem. [ 421.849812][T10434] Quota error (device loop6): do_check_range: Getting block 0 out of range 1-5 [ 421.893186][T10434] EXT4-fs error (device loop6): ext4_release_dquot:6877: comm kworker/u4:33: Failed to release dquot type 1 [ 422.483894][T11109] loop6: detected capacity change from 0 to 256 [ 423.056742][T11118] tipc: Failed to remove unknown binding: 66,0,0/0:1389103959/1389103961 [ 423.102670][T11118] tipc: Failed to remove unknown binding: 66,0,0/0:1389103959/1389103960 [ 423.295535][T11119] tipc: Failed to remove unknown binding: 66,0,0/0:1389103959/1389103961 [ 423.820430][T11119] tipc: Failed to remove unknown binding: 66,0,0/0:1389103959/1389103960 [ 429.854710][T11194] device vlan2 entered promiscuous mode [ 430.000930][ T26] audit: type=1400 audit(1787855115.396:2648): apparmor="STATUS" operation="profile_replace" info="not policy admin" error=-13 profile="unconfined" pid=11196 comm="syz.6.2116" [ 430.305834][T11206] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2120'. [ 430.359909][T11208] sch_tbf: burst 1520 is lower than device lo mtu (32783) ! [ 431.691458][T11244] 8021q: adding VLAN 0 to HW filter on device bond6 [ 431.716932][T11244] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 431.738660][T11244] bond6: (slave macvlan2): Enslaving as a backup interface with a down link [ 433.255869][T11266] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2138'. [ 433.399644][T11272] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2140'. [ 433.419524][T11272] bridge3: port 1(dummy0) entered blocking state [ 433.426471][T11272] bridge3: port 1(dummy0) entered disabled state [ 433.435570][T11272] device dummy0 entered promiscuous mode [ 433.451048][T11272] netlink: 'syz.5.2140': attribute type 10 has an invalid length. [ 433.459497][T11272] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2140'. [ 433.480693][T11272] bridge3: port 1(dummy0) entered blocking state [ 433.487280][T11272] bridge3: port 1(dummy0) entered forwarding state [ 433.510079][T11272] bridge3: port 1(dummy0) entered disabled state [ 433.671106][ T4287] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 434.315816][T11282] futex_wake_op: syz.2.2145 tries to shift op by 144; fix this program [ 434.562116][T11286] device syzkaller0 entered promiscuous mode [ 435.080194][ T4288] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 435.093129][ T4288] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 435.102823][ T4288] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 435.117921][ T4288] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 435.136703][ T4288] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 435.144677][ T4288] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 436.399471][T11290] chnl_net:caif_netlink_parms(): no params data found [ 436.624740][T11290] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.632217][T11290] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.642214][T11290] device bridge_slave_0 entered promiscuous mode [ 436.655759][T11290] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.690172][T11290] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.753765][T11290] device bridge_slave_1 entered promiscuous mode [ 436.896365][T11290] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 436.981848][T11290] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 437.144234][T11290] team0: Port device team_slave_0 added [ 437.154763][T11339] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2159'. [ 437.192688][ T4287] Bluetooth: hci5: command 0x0409 tx timeout [ 437.338147][T11290] team0: Port device team_slave_1 added [ 437.475401][T11290] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 437.524271][T11290] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 437.630309][T11290] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 437.665701][T11290] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 437.697845][T11290] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 437.818173][T11290] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 438.151221][T11290] device hsr_slave_0 entered promiscuous mode [ 438.158382][T11290] device hsr_slave_1 entered promiscuous mode [ 438.191503][T11290] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 438.469767][T11290] Cannot create hsr debugfs directory [ 439.167445][T11376] bridge0: port 1(syz_tun) entered blocking state [ 439.179915][T11376] bridge0: port 1(syz_tun) entered disabled state [ 439.208774][T11376] device syz_tun entered promiscuous mode [ 439.271178][ T4287] Bluetooth: hci5: command 0x041b tx timeout [ 439.540932][T11385] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2173'. [ 439.558124][T11385] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2173'. [ 439.593423][T11385] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2173'. [ 439.605076][T11385] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2173'. [ 439.760897][T11290] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 439.803155][T11290] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 439.814363][T11290] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 439.828789][T11390] netlink: 'syz.6.2174': attribute type 12 has an invalid length. [ 440.027244][T11290] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 440.700840][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 440.777720][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.790071][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.351150][ T4287] Bluetooth: hci5: command 0x040f tx timeout [ 441.926910][T11412] device syz_tun left promiscuous mode [ 441.939444][T11412] bridge0: port 1(syz_tun) entered disabled state [ 442.438670][T11290] 8021q: adding VLAN 0 to HW filter on device bond0 [ 442.714996][ T4907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 442.736201][ T4907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 443.431197][ T4287] Bluetooth: hci5: command 0x0419 tx timeout [ 443.550154][T11290] 8021q: adding VLAN 0 to HW filter on device team0 [ 443.606264][ T4907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 443.638435][ T4907] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 443.695433][ T4907] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.702684][ T4907] bridge0: port 1(bridge_slave_0) entered forwarding state [ 443.785009][ T4907] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 443.837691][ T4907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 443.930003][ T4907] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 443.981844][ T4907] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.989044][ T4907] bridge0: port 2(bridge_slave_1) entered forwarding state [ 444.041204][ T4907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 444.187530][ T4907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 444.217511][ T4907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 444.263250][ T4907] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 444.324381][ T4907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 444.368169][ T4907] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 444.447663][T11290] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 444.509759][T11290] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 444.581321][ T4907] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 444.596688][ T4907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 444.637870][ T4907] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 444.702436][ T4907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 444.731575][ T4907] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 444.763690][ T4907] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 446.333038][ T4907] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 446.348184][ T4907] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 446.397916][T11290] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 447.187149][T11516] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2206'. [ 447.908952][T11522] device gretap0 entered promiscuous mode [ 447.937456][T11522] device macvlan3 entered promiscuous mode [ 447.956836][T11522] device vlan3 entered promiscuous mode [ 447.995325][T11524] loop1: detected capacity change from 0 to 1024 [ 448.025781][T11522] device vlan3 left promiscuous mode [ 448.037552][T11522] device gretap0 left promiscuous mode [ 448.339916][T11527] netlink: 'syz.6.2208': attribute type 1 has an invalid length. [ 448.361323][ T26] audit: type=1800 audit(1787855133.756:2649): pid=11513 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2214" name="file2" dev="loop1" ino=5 res=0 errno=0 [ 448.503517][T11528] bond1: (slave veth0_to_bond): making interface the new active one [ 448.556510][T11528] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 448.610988][T11526] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2208'. [ 448.646278][T11526] 8021q: adding VLAN 0 to HW filter on device bond1 [ 448.699832][ T57] device hsr_slave_0 left promiscuous mode [ 448.757714][ T57] device hsr_slave_1 left promiscuous mode [ 448.889182][ T57] bond3 (unregistering): Released all slaves [ 449.776052][ T26] audit: type=1326 audit(1787855135.176:2650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11552 comm="syz.6.2215" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f281979e0d9 code=0x0 [ 450.109608][ T57] bond2 (unregistering): Released all slaves [ 450.788734][ T57] bond1 (unregistering): Released all slaves [ 453.435196][ T57] bond0 (unregistering): Released all slaves [ 453.620769][T11599] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2229'. [ 453.665366][T11601] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2229'. [ 453.700467][T11618] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2236'. [ 453.740961][ T4911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 453.749852][ T4911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 453.872677][ T4911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 453.908514][ T4911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 453.934422][ T4911] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 453.961626][ T4911] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 453.998816][T11290] device veth0_vlan entered promiscuous mode [ 454.046742][T11641] netlink: 'syz.5.2245': attribute type 1 has an invalid length. [ 454.094705][T11290] device veth1_vlan entered promiscuous mode [ 454.134164][T11641] bond5: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 454.235245][T11643] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2245'. [ 454.313942][T11643] 8021q: adding VLAN 0 to HW filter on device bond5 [ 454.382351][T11290] device veth0_macvtap entered promiscuous mode [ 454.430668][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 454.464885][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 454.538239][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 454.581714][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 454.635304][T11650] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.2246'. [ 454.686319][T11290] device veth1_macvtap entered promiscuous mode [ 454.762290][T11650] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.2246'. [ 454.786584][T11290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 454.917801][T11290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.645013][T11290] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 455.709545][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 455.744484][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 455.807274][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 455.852357][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 455.912045][T11290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 455.983620][T11290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.057974][T11290] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 456.099641][ T4903] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 456.116488][ T4903] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 456.445989][T11290] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.843315][T11290] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.397869][T11290] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.440460][T11290] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.926071][ T8338] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 460.008108][ T8338] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 460.048300][ T4903] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 460.116206][ T8338] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 460.140281][ T8338] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 460.187248][ T8338] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 463.075670][T11742] netlink: 'syz.5.2270': attribute type 1 has an invalid length. [ 463.486223][T11742] device bond6 entered promiscuous mode [ 463.556094][T11742] 8021q: adding VLAN 0 to HW filter on device bond6 [ 463.780665][T11746] bond6: (slave erspan2): making interface the new active one [ 463.921362][T11746] device erspan2 entered promiscuous mode [ 463.957497][T11746] bond6: (slave erspan2): Enslaving as an active interface with an up link [ 464.060064][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bond6: link becomes ready [ 464.411125][T11746] syz.5.2270 (11746) used greatest stack depth: 19376 bytes left [ 464.425414][ T26] audit: type=1326 audit(1787855149.826:2651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11754 comm="syz.2.2274" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb72779e0d9 code=0x0 [ 464.620317][ T26] audit: type=1326 audit(1787855150.016:2652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11765 comm="syz.1.2277" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f36a4f9e0d9 code=0x0 [ 467.125056][T11803] netlink: 'syz.5.2286': attribute type 4 has an invalid length. [ 467.233277][T11809] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2288'. [ 468.127005][T11831] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2296'. [ 471.284375][T11891] overlayfs: statfs failed on './file0' [ 471.683829][T11901] netlink: 'syz.7.2315': attribute type 11 has an invalid length. [ 472.185042][T11913] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 472.933462][T11918] tipc: Failed to remove unknown binding: 66,0,0/0:1401297655/1401297657 [ 473.011823][T11918] tipc: Failed to remove unknown binding: 66,0,0/0:1401297655/1401297656 [ 473.020714][T11918] tipc: Failed to remove unknown binding: 66,0,0/0:1401297655/1401297657 [ 473.118481][T11918] tipc: Failed to remove unknown binding: 66,0,0/0:1401297655/1401297656 [ 473.307011][T11930] netlink: 'syz.7.2325': attribute type 10 has an invalid length. [ 473.615117][T11934] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 473.706111][T11938] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2327'. [ 473.915482][T11938] bond0: (slave bridge0): Releasing backup interface [ 475.370197][T11951] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 475.841814][T11969] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2336'. [ 475.926363][T11973] netlink: 'syz.1.2338': attribute type 1 has an invalid length. [ 476.064775][T11973] 8021q: adding VLAN 0 to HW filter on device bond10 [ 480.055516][T12075] device batadv_slave_0 entered promiscuous mode [ 480.085854][T12075] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2367'. [ 480.209183][T12074] device batadv_slave_0 left promiscuous mode [ 480.597695][T12083] netlink: 'syz.7.2369': attribute type 1 has an invalid length. [ 481.495169][T12111] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 481.530161][T12111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 481.615260][T12111] 8021q: adding VLAN 0 to HW filter on device team0 [ 481.680561][T12111] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 485.142270][T12149] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2384'. [ 485.289986][T12157] sch_tbf: burst 19872 is lower than device lo mtu (32783) ! [ 485.764658][T12167] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.830078][T12167] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.956370][T12174] xt_CT: You must specify a L4 protocol and not use inversions on it [ 486.086903][T12166] netlink: 'syz.6.2389': attribute type 16 has an invalid length. [ 486.113427][T12166] netlink: 'syz.6.2389': attribute type 17 has an invalid length. [ 486.260434][T12166] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 486.302939][T12166] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 486.393680][T12166] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 490.841991][T12269] device team0 entered promiscuous mode [ 490.848429][T12269] device team_slave_0 entered promiscuous mode [ 490.910600][T12269] device team_slave_1 entered promiscuous mode [ 490.936434][T12269] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 490.975192][T12269] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 491.050066][T12270] bridge0: port 3(vlan4) entered blocking state [ 491.099602][T12270] bridge0: port 3(vlan4) entered disabled state [ 491.135336][T12270] device vlan4 entered promiscuous mode [ 491.161458][T12270] device bond0 entered promiscuous mode [ 491.180460][T12270] device bond_slave_0 entered promiscuous mode [ 491.214421][T12270] device bond_slave_1 entered promiscuous mode [ 491.231978][T12270] device syz_tun entered promiscuous mode [ 491.252326][T12270] device macvlan2 entered promiscuous mode [ 492.179501][T12288] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2422'. [ 492.256868][T12288] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 492.338114][T12288] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 493.646348][T12314] jffs2: notice: (12314) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 493.696389][ T4287] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 494.313064][ T4287] Bluetooth: hci5: command 0x0406 tx timeout [ 497.547304][T12381] netlink: 'syz.6.2448': attribute type 12 has an invalid length. [ 498.948466][ T4287] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 500.321423][T12425] smc: net device lo applied user defined pnetid SYZ0 [ 501.513626][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.520071][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.799044][ T4287] Bluetooth: hci5: link tx timeout [ 502.805310][ T4287] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 503.488884][ T26] audit: type=1326 audit(1787855188.886:2653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12460 comm="syz.7.2470" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2d539e0d9 code=0x7ffc0000 [ 503.607988][ T26] audit: type=1326 audit(1787855188.916:2654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12460 comm="syz.7.2470" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2d539e0d9 code=0x7ffc0000 [ 503.657906][T12456] IPVS: fo: FWM 3 0x00000003 - no destination available [ 503.737465][ T26] audit: type=1326 audit(1787855188.916:2655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12460 comm="syz.7.2470" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2d539e0d9 code=0x7ffc0000 [ 503.877137][ T26] audit: type=1326 audit(1787855188.916:2656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12460 comm="syz.7.2470" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fb2d539e0d9 code=0x7ffc0000 [ 504.045196][ T26] audit: type=1326 audit(1787855188.926:2657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12460 comm="syz.7.2470" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2d539e0d9 code=0x7ffc0000 [ 504.196125][ T26] audit: type=1326 audit(1787855188.926:2658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12460 comm="syz.7.2470" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2d539e0d9 code=0x7ffc0000 [ 504.330985][ T26] audit: type=1326 audit(1787855188.936:2659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12460 comm="syz.7.2470" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2d539e0d9 code=0x7ffc0000 [ 504.441149][ T26] audit: type=1326 audit(1787855188.936:2660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12460 comm="syz.7.2470" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2d539e0d9 code=0x7ffc0000 [ 504.710484][ T26] audit: type=1326 audit(1787855188.936:2661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12460 comm="syz.7.2470" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb2d539e0d9 code=0x7ffc0000 [ 505.300235][ T26] audit: type=1326 audit(1787855188.936:2662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12460 comm="syz.7.2470" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2d539e0d9 code=0x7ffc0000 [ 508.712836][T12509] bridge0: port 1(erspan0) entered blocking state [ 508.757918][T12509] bridge0: port 1(erspan0) entered disabled state [ 508.785410][T12509] device erspan0 entered promiscuous mode [ 508.829655][T12523] device erspan0 left promiscuous mode [ 508.838752][T12523] bridge0: port 1(erspan0) entered disabled state [ 517.474582][T12650] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2518'. [ 517.510220][ T26] kauditd_printk_skb: 69 callbacks suppressed [ 517.510322][ T26] audit: type=1326 audit(1787855202.906:2732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12652 comm="syz.1.2519" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36a4f9e0d9 code=0x7ffc0000 [ 517.601713][T12650] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 517.612271][T12650] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 517.621269][T12650] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 517.624670][ T26] audit: type=1326 audit(1787855202.946:2733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12652 comm="syz.1.2519" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36a4f9e0d9 code=0x7ffc0000 [ 517.630407][T12650] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 517.787316][ T26] audit: type=1326 audit(1787855202.956:2734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12652 comm="syz.1.2519" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36a4f9e0d9 code=0x7ffc0000 [ 517.813614][T12650] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2518'. [ 517.885150][ T26] audit: type=1326 audit(1787855202.956:2735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12652 comm="syz.1.2519" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36a4f9e0d9 code=0x7ffc0000 [ 518.016724][ T26] audit: type=1326 audit(1787855202.956:2736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12652 comm="syz.1.2519" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f36a4f9e0d9 code=0x7ffc0000 [ 518.108822][ T26] audit: type=1326 audit(1787855202.956:2737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12652 comm="syz.1.2519" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36a4f9e0d9 code=0x7ffc0000 [ 518.266653][ T26] audit: type=1326 audit(1787855202.956:2738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12652 comm="syz.1.2519" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36a4f9e0d9 code=0x7ffc0000 [ 518.397884][ T26] audit: type=1326 audit(1787855202.956:2739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12652 comm="syz.1.2519" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36a4f9e0d9 code=0x7ffc0000 [ 519.295921][ T26] audit: type=1326 audit(1787855202.956:2740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12652 comm="syz.1.2519" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36a4f9e0d9 code=0x7ffc0000 [ 519.435300][ T26] audit: type=1326 audit(1787855202.956:2741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12652 comm="syz.1.2519" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f36a4f9e0d9 code=0x7ffc0000 [ 519.690209][T12696] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2532'. [ 520.958548][ T130] libceph: connect (1)[c::]:6789 error -101 [ 520.965234][ T130] libceph: mon0 (1)[c::]:6789 connect error [ 520.996895][T12720] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2540'. [ 521.089743][T12720] device bond7 entered promiscuous mode [ 521.234722][ T130] libceph: connect (1)[c::]:6789 error -101 [ 521.248145][ T130] libceph: mon0 (1)[c::]:6789 connect error [ 521.963510][ T4797] libceph: connect (1)[c::]:6789 error -101 [ 521.975120][ T4797] libceph: mon0 (1)[c::]:6789 connect error [ 522.050218][T12712] ceph: No mds server is up or the cluster is laggy [ 522.549755][ T26] kauditd_printk_skb: 47 callbacks suppressed [ 522.549768][ T26] audit: type=1326 audit(1787855207.946:2789): auid=4294967295 uid=1982771711 gid=0 ses=4294967295 subj=unconfined pid=12749 comm="syz.7.2547" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb2d539e0d9 code=0x0 [ 522.997148][T12765] 9pnet_fd: Insufficient options for proto=fd [ 523.883421][ T4287] Bluetooth: hci3: command 0x0406 tx timeout [ 534.393201][ T4287] Bluetooth: hci0: command 0x0406 tx timeout [ 535.096877][T12928] netlink: 'syz.2.2589': attribute type 1 has an invalid length. [ 537.537341][T12968] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2599'. [ 537.548081][T12968] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2599'. [ 537.613070][T12971] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2600'. [ 540.949961][T13038] 8021q: adding VLAN 0 to HW filter on device bond7 [ 541.043588][T13044] bond7: (slave ip6erspan0): making interface the new active one [ 541.097431][T13044] bond7: (slave ip6erspan0): Enslaving as an active interface with an up link [ 541.148832][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bond7: link becomes ready [ 544.247845][T13070] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.257429][T13070] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.268739][T13070] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.278167][T13070] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.603074][T13098] netlink: 'syz.6.2629': attribute type 49 has an invalid length. [ 544.772491][T13098] bond1: (slave veth0_to_bond): Releasing active interface [ 544.967794][ T4286] Bluetooth: hci5: Ignoring HCI_Connection_Complete for existing connection [ 544.979659][T13098] device veth0_to_bond entered promiscuous mode [ 545.735593][ T4286] Bluetooth: hci5: link tx timeout [ 545.740971][ T4286] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 545.759997][ T4286] Bluetooth: hci5: link tx timeout [ 545.765408][ T4286] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 545.796652][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 547.831188][ T4286] Bluetooth: hci5: command 0x0406 tx timeout [ 552.129815][T13222] fuse: Bad value for 'fd' [ 552.690032][T13232] tipc: Enabling of bearer rejected, failed to enable media [ 553.601149][T13246] 9pnet_fd: p9_fd_create_unix (13246): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 556.590053][T13255] Set syz1 is full, maxelem 1021 reached [ 561.597164][T13307] 8021q: adding VLAN 0 to HW filter on device bond1 [ 561.691215][T13307] bond1: (slave ip6erspan0): making interface the new active one [ 561.737278][T13307] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 561.960981][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 562.964069][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.970453][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.418700][T13335] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2688'. [ 568.461718][T13394] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 569.368328][T13370] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.375819][T13370] bridge0: port 1(bridge_slave_0) entered disabled state [ 570.574217][T13415] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2707'. [ 570.670507][T13370] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 570.737967][T13370] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 571.368430][T13370] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.380055][T13370] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.399551][T13370] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.409504][T13370] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.217527][T13370] netdevsim netdevsim7 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 572.227146][T13370] netdevsim netdevsim7 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 572.236287][T13370] netdevsim netdevsim7 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 572.245358][T13370] netdevsim netdevsim7 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 579.216950][T13500] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2729'. [ 581.777625][T13549] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2741'. [ 581.827034][T13549] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2741'. [ 583.468821][T13580] device bond8 entered promiscuous mode [ 583.707628][T13593] netlink: 'syz.5.2750': attribute type 4 has an invalid length. [ 583.758297][T13593] netlink: 'syz.5.2750': attribute type 4 has an invalid length. [ 585.994846][T13614] tipc: New replicast peer: 255.255.255.255 [ 586.038242][T13614] tipc: Enabled bearer , priority 10 [ 586.790712][T13632] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2761'. [ 587.261078][T13632] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 587.270023][T13632] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 587.279005][T13632] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 587.287878][T13632] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 587.527536][T13632] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2761'. [ 590.305670][T13661] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 590.409410][T13661] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 596.029333][T13740] device bridge_slave_0 left promiscuous mode [ 596.035922][T13740] bridge0: port 1(bridge_slave_0) entered disabled state [ 596.090348][T13740] device bridge_slave_1 left promiscuous mode [ 596.096896][T13740] bridge0: port 2(bridge_slave_1) entered disabled state [ 596.180494][T13740] bond0: (slave bond_slave_0): Releasing backup interface [ 596.210120][T13740] bond0: (slave bond_slave_1): Releasing backup interface [ 596.227348][T13740] team0: Port device team_slave_0 removed [ 596.236067][T13740] team0: Port device team_slave_1 removed [ 596.242340][T13740] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 596.286662][T13740] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 596.410182][T13743] team0: Mode changed to "loadbalance" [ 597.420951][T13765] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2794'. [ 598.699239][T13777] futex_wake_op: syz.7.2797 tries to shift op by 144; fix this program [ 598.783614][T13781] tipc: Enabling of bearer rejected, failed to enable media [ 600.421274][T13806] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2805'. [ 602.564706][T13834] CIFS: Attempting to mount \\127.0.0.1\share [ 603.635040][T13834] CIFS: VFS: Error connecting to socket. Aborting operation. [ 603.683049][T13834] CIFS: VFS: cifs_mount failed w/return code = -4 [ 603.899482][T13844] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2810'. [ 610.064685][T13923] bond0: (slave bridge0): Releasing backup interface [ 610.093891][T13923] bond5: (slave veth0_to_bond): Releasing active interface [ 611.294862][T13923] bond6: (slave erspan2): Releasing active interface [ 611.301782][T13923] device erspan2 left promiscuous mode [ 612.248835][T13923] bond7: (slave ip6erspan0): Releasing active interface [ 612.353658][T13927] team0: Mode changed to "loadbalance" [ 612.657999][T13948] SET target dimension over the limit! [ 614.819355][T13993] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2851'. [ 614.920447][T13993] bond8: (slave veth9): Enslaving as an active interface with an up link [ 615.049249][T14003] netlink: 'syz.1.2853': attribute type 4 has an invalid length. [ 615.267850][T14003] netlink: 'syz.1.2853': attribute type 4 has an invalid length. [ 619.407716][T14054] device vlan6 entered promiscuous mode [ 619.428567][T14054] device vlan5 entered promiscuous mode [ 619.434816][T14054] device gretap0 entered promiscuous mode [ 619.576759][T14056] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4274] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[14056] [ 623.664142][T14101] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2878'. [ 624.394216][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.400686][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.913393][T14109] futex_wake_op: syz.6.2883 tries to shift op by 144; fix this program [ 626.042613][T14089] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.052082][T14089] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.063098][T14089] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.073570][T14089] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.094683][T14089] device geneve3 left promiscuous mode [ 627.352904][T14126] netlink: 156 bytes leftover after parsing attributes in process `syz.7.2888'. [ 627.544463][T14089] device vlan6 left promiscuous mode [ 627.550073][T14089] device vlan5 left promiscuous mode [ 627.557910][T14089] device gretap0 left promiscuous mode [ 629.100404][T14149] Cannot find add_set index 0 as target [ 629.894163][T14164] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 631.449895][T14179] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2911'. [ 631.465516][T14179] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2911'. [ 631.481293][T14179] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 631.490175][T14179] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 631.499218][T14179] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 631.508012][T14179] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 631.529159][T14179] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2911'. [ 631.543098][T14179] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2911'. [ 631.576260][T14180] netlink: 'syz.1.2911': attribute type 10 has an invalid length. [ 631.605678][T14180] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 633.808118][T14218] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2910'. [ 633.920268][T14218] device bond9 entered promiscuous mode [ 635.359094][T14245] xt_TCPMSS: Only works on TCP SYN packets [ 635.805690][T14249] netlink: 'syz.2.2923': attribute type 1 has an invalid length. [ 636.279074][T14249] 8021q: adding VLAN 0 to HW filter on device bond9 [ 636.387620][T14263] device gretap1 entered promiscuous mode [ 636.421945][T14263] bond9: (slave gretap1): making interface the new active one [ 636.466189][T14263] bond9: (slave gretap1): Enslaving as an active interface with an up link [ 636.525548][ T8341] IPv6: ADDRCONF(NETDEV_CHANGE): bond9: link becomes ready [ 638.755112][T14285] netlink: 'syz.1.2933': attribute type 3 has an invalid length. [ 638.829095][T14285] netlink: 11575 bytes leftover after parsing attributes in process `syz.1.2933'. [ 640.927338][T14314] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 640.936610][T14314] overlayfs: missing 'lowerdir' [ 642.800379][T14325] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2944'. [ 642.867447][ T26] audit: type=1800 audit(1787855328.266:2790): pid=14322 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2941" name="bus" dev="ramfs" ino=78137 res=0 errno=0 [ 642.978292][T14329] bond10: (slave veth11): Enslaving as an active interface with an up link [ 643.236412][T14337] netlink: 'syz.2.2949': attribute type 2 has an invalid length. [ 643.280273][T14340] x_tables: duplicate underflow at hook 4 [ 643.297320][T14340] sctp: [Deprecated]: syz.5.2951 (pid 14340) Use of int in maxseg socket option. [ 643.297320][T14340] Use struct sctp_assoc_value instead [ 643.476555][T14344] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2953'. [ 646.735304][T14388] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan0: link becomes ready [ 646.825396][T14388] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan0: link becomes ready [ 646.833585][T14388] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 647.141184][T14395] bond2: (slave vlan5): making interface the new active one [ 647.185462][T14395] bond2: (slave vlan5): Enslaving as an active interface with an up link [ 647.226317][T14407] netlink: 176 bytes leftover after parsing attributes in process `syz.5.2967'. [ 647.283258][T14409] netlink: 'syz.1.2969': attribute type 1 has an invalid length. [ 647.424920][T14409] 8021q: adding VLAN 0 to HW filter on device bond11 [ 647.477658][T14412] bond11: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 647.630877][T14409] device bond11 entered promiscuous mode [ 648.072480][T14412] device macvlan2 entered promiscuous mode [ 648.288260][T14412] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 649.379523][T14441] ip6gretap0 speed is unknown, defaulting to 1000 [ 649.423174][T14441] ip6gretap0 speed is unknown, defaulting to 1000 [ 649.456045][T14441] ip6gretap0 speed is unknown, defaulting to 1000 [ 651.228605][ T14] ip6gretap0 speed is unknown, defaulting to 1000 [ 651.271012][T14441] infiniband syz1: set down [ 651.276727][T14441] infiniband syz1: added ip6gretap0 [ 651.286144][T14441] rdma_rxe: unable to create cq [ 651.295452][T14441] infiniband syz1: Couldn't create ib_mad CQ [ 651.312022][T14441] infiniband syz1: Couldn't open port 1 [ 651.415349][T14441] RDS/IB: syz1: added [ 651.425670][T14441] smc: adding ib device syz1 with port count 1 [ 651.433803][T14441] smc: ib device syz1 port 1 has pnetid [ 651.447490][ T5043] ip6gretap0 speed is unknown, defaulting to 1000 [ 651.464219][T14441] ip6gretap0 speed is unknown, defaulting to 1000 [ 651.809522][T14441] ip6gretap0 speed is unknown, defaulting to 1000 [ 652.766913][T14441] ip6gretap0 speed is unknown, defaulting to 1000 [ 653.115381][T14483] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2990'. [ 653.348414][T14441] ip6gretap0 speed is unknown, defaulting to 1000 [ 654.266115][T14441] ip6gretap0 speed is unknown, defaulting to 1000 [ 655.471041][T14441] ip6gretap0 speed is unknown, defaulting to 1000 [ 656.721879][T14516] netlink: 'syz.6.2998': attribute type 1 has an invalid length. [ 656.938996][T14514] netlink: 'syz.6.2998': attribute type 1 has an invalid length. [ 658.102286][T14536] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3006'. [ 663.681213][T14637] netlink: 'syz.2.3033': attribute type 1 has an invalid length. [ 663.817596][T14640] tipc: Started in network mode [ 663.829364][T14640] tipc: Node identity 16572832803b, cluster identity 4711 [ 663.839849][T14640] tipc: Enabled bearer , priority 0 [ 665.521002][T14670] futex_wake_op: syz.5.3048 tries to shift op by -1; fix this program [ 666.049417][ T14] tipc: Node number set to 2523670578 [ 667.477069][T14698] netlink: 'syz.1.3058': attribute type 30 has an invalid length. [ 667.649740][T14698] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3058'. [ 672.137434][T14779] gadgetfs: bound to dummy_udc driver [ 672.463124][ T4317] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 672.475350][ C1] gadgetfs: connected [ 672.483543][ T4317] gadgetfs: disconnected [ 672.993545][ T26] audit: type=1326 audit(1787855358.396:2791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14814 comm="syz.5.3092" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f447399e0d9 code=0x7ffc0000 [ 673.071313][ T26] audit: type=1326 audit(1787855358.396:2792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14814 comm="syz.5.3092" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f447399e0d9 code=0x7ffc0000 [ 673.181939][ T26] audit: type=1326 audit(1787855358.396:2793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14814 comm="syz.5.3092" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f447399e0d9 code=0x7ffc0000 [ 673.256888][ T26] audit: type=1326 audit(1787855358.396:2794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14814 comm="syz.5.3092" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f447399e0d9 code=0x7ffc0000 [ 673.318924][ T26] audit: type=1326 audit(1787855358.396:2795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14814 comm="syz.5.3092" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f447399e0d9 code=0x7ffc0000 [ 673.345219][T14824] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3094'. [ 673.374914][ T26] audit: type=1326 audit(1787855358.396:2796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14814 comm="syz.5.3092" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f447399e0d9 code=0x7ffc0000 [ 673.467201][ T26] audit: type=1326 audit(1787855358.396:2797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14814 comm="syz.5.3092" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f447399e0d9 code=0x7ffc0000 [ 673.567386][ T26] audit: type=1326 audit(1787855358.416:2798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14814 comm="syz.5.3092" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f447399e0d9 code=0x7ffc0000 [ 673.592755][ T26] audit: type=1326 audit(1787855358.416:2799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14814 comm="syz.5.3092" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f447399e0d9 code=0x7ffc0000 [ 673.617504][ T26] audit: type=1326 audit(1787855358.416:2800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14814 comm="syz.5.3092" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f447399e0d9 code=0x7ffc0000 [ 676.607820][T14868] No such timeout policy "syz1" [ 680.420938][ T4286] Bluetooth: hci2: failed to read key size for handle 200 [ 681.062815][ T26] kauditd_printk_skb: 62 callbacks suppressed [ 681.062847][ T26] audit: type=1326 audit(1787855366.466:2863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14904 comm="syz.5.3118" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f447399e0d9 code=0x0 [ 682.224097][T14923] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 682.284620][T14927] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 683.675496][T14943] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 683.692259][T14943] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 683.907939][T14949] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3134'. [ 684.634928][T14953] device bond11 entered promiscuous mode [ 685.825691][T14969] netlink: 'syz.5.3140': attribute type 8 has an invalid length. [ 685.850950][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.857342][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.230221][ T26] audit: type=1326 audit(1787855371.626:2864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14995 comm="syz.5.3144" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f447399e0d9 code=0x7ffc0000 [ 686.300038][ T26] audit: type=1326 audit(1787855371.626:2865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14995 comm="syz.5.3144" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f447399e0d9 code=0x7ffc0000 [ 686.395970][ T26] audit: type=1326 audit(1787855371.626:2866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14995 comm="syz.5.3144" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f447399e0d9 code=0x7ffc0000 [ 686.480253][ T26] audit: type=1326 audit(1787855371.656:2867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14995 comm="syz.5.3144" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f447399e0d9 code=0x7ffc0000 [ 686.578832][ T26] audit: type=1326 audit(1787855371.656:2868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14995 comm="syz.5.3144" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f447399e0d9 code=0x7ffc0000 [ 686.673729][ T26] audit: type=1326 audit(1787855371.656:2869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14995 comm="syz.5.3144" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f447399e0d9 code=0x7ffc0000 [ 686.737741][ T26] audit: type=1326 audit(1787855371.656:2870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14995 comm="syz.5.3144" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f447399e0d9 code=0x7ffc0000 [ 687.772168][ T26] audit: type=1326 audit(1787855371.656:2871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14995 comm="syz.5.3144" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f447399e0d9 code=0x7ffc0000 [ 687.922800][ T26] audit: type=1326 audit(1787855371.656:2872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14995 comm="syz.5.3144" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f447399e0d9 code=0x7ffc0000 [ 688.047362][ T26] audit: type=1326 audit(1787855371.656:2873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14995 comm="syz.5.3144" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f447399e0d9 code=0x7ffc0000 [ 689.900193][T15058] device bond11 left promiscuous mode [ 689.910174][T15058] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3163'. [ 690.091201][T15063] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3166'. [ 690.100574][T15063] netlink: 17 bytes leftover after parsing attributes in process `syz.7.3166'. [ 690.111211][T15063] tipc: Invalid UDP bearer configuration [ 690.111264][T15063] tipc: Enabling of bearer rejected, failed to enable media [ 690.164406][T15065] using random self ethernet address [ 690.170422][T15065] using random host ethernet address [ 690.265986][T15067] xt_cgroup: path and classid specified [ 690.800414][T15084] xt_CT: You must specify a L4 protocol and not use inversions on it [ 691.395342][ T26] kauditd_printk_skb: 54 callbacks suppressed [ 691.395364][ T26] audit: type=1800 audit(1787855376.786:2928): pid=15081 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3173" name="addr_adrfam" dev="configfs" ino=80265 res=0 errno=0 [ 691.464220][T15081] nvmet_rdma: enabling port 1 (127.0.0.1:44) [ 691.579586][ T26] audit: type=1800 audit(1787855376.836:2929): pid=15081 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3173" name="addr_traddr" dev="configfs" ino=80270 res=0 errno=0 [ 691.888832][ T26] audit: type=1800 audit(1787855376.836:2930): pid=15081 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3173" name="addr_trsvcid" dev="configfs" ino=80271 res=0 errno=0 [ 692.564941][ T26] audit: type=1326 audit(1787855377.256:2931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15091 comm="syz.6.3178" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f281979e0d9 code=0x7ffc0000 [ 692.610976][ T26] audit: type=1326 audit(1787855377.256:2932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15091 comm="syz.6.3178" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f281979e0d9 code=0x7ffc0000 [ 693.754847][ T26] audit: type=1326 audit(1787855377.256:2933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15091 comm="syz.6.3178" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f281979e0d9 code=0x7ffc0000 [ 693.903510][ T26] audit: type=1326 audit(1787855377.256:2934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15091 comm="syz.6.3178" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f281979e0d9 code=0x7ffc0000 [ 693.927861][ T26] audit: type=1326 audit(1787855377.256:2935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15091 comm="syz.6.3178" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f281979e0d9 code=0x7ffc0000 [ 694.116279][ T26] audit: type=1326 audit(1787855377.256:2936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15091 comm="syz.6.3178" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f281979e0d9 code=0x7ffc0000 [ 694.143826][ T26] audit: type=1326 audit(1787855377.256:2937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15091 comm="syz.6.3178" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f281979e0d9 code=0x7ffc0000 [ 694.449707][T15113] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 694.449707][T15113] The task syz.7.3184 (15113) triggered the difference, watch for misbehavior. [ 698.155501][T15156] xt_CONNSECMARK: invalid mode: 0 [ 698.791790][T15180] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3197'. [ 698.834581][T15178] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3199'. [ 699.039898][T15187] ip_tables: iptables: counters copy to user failed while replacing table [ 700.343275][T15212] netlink: 188 bytes leftover after parsing attributes in process `syz.2.3206'. [ 701.706171][ T26] kauditd_printk_skb: 10 callbacks suppressed [ 701.706190][ T26] audit: type=1800 audit(1787855387.106:2948): pid=15229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3216" name="max_speed" dev="configfs" ino=80461 res=0 errno=0 [ 703.476019][T15267] IPVS: Unknown mcast interface: pim6reg [ 703.887985][T15276] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 704.951202][ C0] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 706.371423][T15301] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[15307] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[15301] [ 707.561465][T15323] bond7: option mode: unable to set because the bond device is up [ 708.314619][T15323] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3249'. [ 712.761105][T15368] netlink: 'syz.7.3263': attribute type 2 has an invalid length. [ 717.302318][T15412] netlink: 'syz.7.3275': attribute type 4 has an invalid length. [ 717.440367][T15412] netlink: 'syz.7.3275': attribute type 4 has an invalid length. [ 717.577349][T15417] netlink: 'syz.2.3278': attribute type 1 has an invalid length. [ 717.642624][T15423] netlink: 180 bytes leftover after parsing attributes in process `syz.1.3276'. [ 718.284400][T15417] 8021q: adding VLAN 0 to HW filter on device bond12 [ 718.326269][T15420] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3279'. [ 718.614174][T15445] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3282'. [ 719.852470][T15458] netlink: 92 bytes leftover after parsing attributes in process `syz.6.3286'. [ 720.543941][T15463] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3288'. [ 724.268963][T15527] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3308'. [ 725.089949][T15540] sctp: [Deprecated]: syz.6.3313 (pid 15540) Use of struct sctp_assoc_value in delayed_ack socket option. [ 725.089949][T15540] Use struct sctp_sack_info instead [ 725.599428][T15555] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3318'. [ 726.609896][T15572] netlink: 'syz.1.3325': attribute type 1 has an invalid length. [ 726.633205][T15572] 8021q: adding VLAN 0 to HW filter on device bond12 [ 728.229310][T15587] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3326'. [ 728.782527][T15600] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 730.112703][T15611] sctp: [Deprecated]: syz.7.3334 (pid 15611) Use of struct sctp_assoc_value in delayed_ack socket option. [ 730.112703][T15611] Use struct sctp_sack_info instead [ 730.751958][T15623] netlink: 'syz.7.3337': attribute type 1 has an invalid length. [ 730.860205][T15623] 8021q: adding VLAN 0 to HW filter on device bond1 [ 731.010309][T15623] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.050552][T15623] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.090896][T15623] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.120203][T15623] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.186108][T15623] bond1: (slave geneve2): making interface the new active one [ 731.199793][T15623] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 731.219164][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 735.034867][T15672] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3352'. [ 736.703836][T15695] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3359'. [ 736.714475][T15697] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3361'. [ 736.838756][T15697] bond10: (slave veth3): Enslaving as an active interface with an up link [ 736.989557][T15704] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3363'. [ 737.277549][T15711] device bond2 entered promiscuous mode [ 740.525709][T15734] netlink: 'syz.5.3373': attribute type 2 has an invalid length. [ 742.827778][T15768] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3381'. [ 742.837056][T15768] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3381'. [ 742.850600][T15768] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 742.859621][T15768] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 742.868564][T15768] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 742.877517][T15768] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 742.901639][T15770] netlink: 'syz.2.3381': attribute type 10 has an invalid length. [ 745.481364][T15791] netlink: 'syz.6.3387': attribute type 1 has an invalid length. [ 745.505963][T15791] 8021q: adding VLAN 0 to HW filter on device bond3 [ 745.558126][T15791] bond3: (slave geneve2): making interface the new active one [ 745.569320][T15791] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 745.578647][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 745.766526][T15801] netlink: 'syz.1.3389': attribute type 2 has an invalid length. [ 745.966514][T15806] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3393'. [ 745.977434][T15806] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3393'. [ 746.637009][T15806] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 746.646283][T15806] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 746.655132][T15806] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 746.664052][T15806] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 746.672924][T15806] netdevsim netdevsim10 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 748.181747][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 748.188152][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.444130][T15841] xt_TCPMSS: Only works on TCP SYN packets [ 750.579872][ T26] audit: type=1326 audit(1787855435.976:2949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15852 comm="syz.6.3407" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f281979e0d9 code=0x7ffc0000 [ 750.745407][T15853] syz.6.3407 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 750.861517][ T26] audit: type=1326 audit(1787855436.146:2950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15852 comm="syz.6.3407" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f281979e0d9 code=0x7ffc0000 [ 750.965556][ T26] audit: type=1326 audit(1787855436.266:2951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15852 comm="syz.6.3407" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f281979e0d9 code=0x7ffc0000 [ 751.081980][ T26] audit: type=1326 audit(1787855436.266:2952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15852 comm="syz.6.3407" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f281979e0d9 code=0x7ffc0000 [ 751.194277][ T26] audit: type=1326 audit(1787855436.306:2953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15852 comm="syz.6.3407" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7f281979e0d9 code=0x7ffc0000 [ 751.318682][ T26] audit: type=1326 audit(1787855436.316:2954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15852 comm="syz.6.3407" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f281979e0d9 code=0x7ffc0000 [ 751.412214][ T26] audit: type=1326 audit(1787855436.326:2955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15852 comm="syz.6.3407" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f281979e0d9 code=0x7ffc0000 [ 751.489925][ T26] audit: type=1326 audit(1787855436.756:2956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15859 comm="syz.2.3420" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb72779e0d9 code=0x0 [ 754.058772][T15910] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 754.068019][T15910] overlayfs: missing 'lowerdir' [ 754.400453][T15911] overlayfs: failed to clone upperpath [ 755.772260][T15930] netlink: 'syz.7.3433': attribute type 1 has an invalid length. [ 758.967697][T15961] CIFS: Attempting to mount \\::1\share [ 759.350306][T15961] CIFS: VFS: Error connecting to socket. Aborting operation. [ 759.406061][T15961] CIFS: VFS: cifs_mount failed w/return code = -4 [ 760.375411][ T4286] Bluetooth: hci0: failed to read key size for handle 200 [ 760.982360][T15977] netlink: 'syz.5.3447': attribute type 1 has an invalid length. [ 761.381030][ T4286] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 761.390309][ T4286] Bluetooth: hci5: Injecting HCI hardware error event [ 761.401338][ T4286] Bluetooth: hci5: hardware error 0x00 [ 762.014561][T15977] 8021q: adding VLAN 0 to HW filter on device bond11 [ 762.069677][T15991] netlink: 'syz.2.3450': attribute type 1 has an invalid length. [ 762.122918][T15991] 8021q: adding VLAN 0 to HW filter on device bond13 [ 762.135409][T15994] bond13: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 762.201535][T15995] device bond13 entered promiscuous mode [ 762.230502][T15999] device macvlan3 entered promiscuous mode [ 762.243776][T15999] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 762.314027][T15993] device gretap2 entered promiscuous mode [ 762.327160][T15993] bond11: (slave gretap2): making interface the new active one [ 762.336982][T15993] bond11: (slave gretap2): Enslaving as an active interface with an up link [ 762.347009][T16004] netlink: 'syz.1.3453': attribute type 12 has an invalid length. [ 762.358955][T16004] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3453'. [ 762.388343][T16004] 8021q: adding VLAN 0 to HW filter on device bond0 [ 762.402916][T16004] device wlan1 entered promiscuous mode [ 762.417996][T16005] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3452'. [ 762.427698][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bond11: link becomes ready [ 762.438751][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 763.701231][ T4286] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 766.655670][T16053] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3464'. [ 767.697832][T16061] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3472'. [ 767.968615][T16070] bond3: (slave veth5): Enslaving as an active interface with an up link [ 768.111236][T16078] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3467'. [ 768.135342][T16077] netlink: 'syz.7.3476': attribute type 1 has an invalid length. [ 768.168977][T16077] netlink: 'syz.7.3476': attribute type 1 has an invalid length. [ 769.445733][ T26] audit: type=1800 audit(1787855454.846:2957): pid=16088 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3477" name="bus" dev="ramfs" ino=81842 res=0 errno=0 [ 777.047551][ T26] audit: type=1326 audit(1787855462.446:2958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16185 comm="syz.7.3508" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb2d539e0d9 code=0x0 [ 777.442011][T16199] bond7: option mode: unable to set because the bond device is up [ 777.478014][T16200] siw: device registration error -23 [ 777.525059][T16199] bond7: (slave vlan3): Opening slave failed [ 777.535393][T16201] rdma_rxe: rxe_register_device failed with error -23 [ 777.558423][T16201] rdma_rxe: failed to add ip6gretap0 [ 778.001661][T16211] netlink: 'syz.6.3516': attribute type 1 has an invalid length. [ 778.896887][T16214] tipc: Started in network mode [ 778.910993][T16214] tipc: Node identity 080211000001, cluster identity 4711 [ 778.918735][T16214] tipc: Enabled bearer , priority 0 [ 779.123021][T16221] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3519'. [ 779.345137][T16236] IPv6: ADDRCONF(NETDEV_CHANGE): vlan3: link becomes ready [ 779.428529][T16237] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3523'. [ 780.024647][T16236] device vlan4 entered promiscuous mode [ 780.067257][T16236] device vlan3 entered promiscuous mode [ 780.093973][T16236] device gretap0 entered promiscuous mode [ 780.133532][ T4317] tipc: Node number set to 134418688 [ 780.447896][ T8624] IPv6: ADDRCONF(NETDEV_CHANGE): vlan3: link becomes ready [ 782.522820][T16257] sch_tbf: burst 1369 is lower than device syzkaller0 mtu (65589) ! [ 787.359985][T16321] xt_nat: multiple ranges no longer supported [ 787.867591][ T26] audit: type=1326 audit(1787855473.266:2959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16333 comm="syz.5.3551" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f447399e0d9 code=0x7ffc0000 [ 787.940803][ T26] audit: type=1326 audit(1787855473.266:2960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16333 comm="syz.5.3551" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f447399e0d9 code=0x7ffc0000 [ 788.039127][ T26] audit: type=1326 audit(1787855473.296:2961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16333 comm="syz.5.3551" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f447399e0d9 code=0x7ffc0000 [ 788.134170][ T26] audit: type=1326 audit(1787855473.296:2962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16333 comm="syz.5.3551" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f447399e0d9 code=0x7ffc0000 [ 788.206154][T16344] tipc: Started in network mode [ 788.227221][ T26] audit: type=1326 audit(1787855473.296:2963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16333 comm="syz.5.3551" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f447399e0d9 code=0x7ffc0000 [ 788.308151][T16344] tipc: Node identity 12a1b0dca91e, cluster identity 4711 [ 788.318238][ T26] audit: type=1326 audit(1787855473.306:2964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16333 comm="syz.5.3551" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f447399e0d9 code=0x7ffc0000 [ 788.507943][T16344] tipc: Enabled bearer , priority 0 [ 789.379238][ T26] audit: type=1326 audit(1787855473.306:2965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16333 comm="syz.5.3551" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f447399e0d9 code=0x7ffc0000 [ 789.505652][ T26] audit: type=1326 audit(1787855473.306:2966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16333 comm="syz.5.3551" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f447399e0d9 code=0x7ffc0000 [ 789.545668][ T26] audit: type=1326 audit(1787855473.306:2967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16333 comm="syz.5.3551" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f447399e0d9 code=0x7ffc0000 [ 789.620928][ T5043] tipc: Node number set to 3149902044 [ 789.630304][ T26] audit: type=1326 audit(1787855473.306:2968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16333 comm="syz.5.3551" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f447399e0d9 code=0x7ffc0000 [ 795.450850][T16390] futex_wake_op: syz.1.3566 tries to shift op by -1; fix this program [ 796.236278][T16398] fuse: Unknown parameter '0x0000000000000004' [ 796.386995][T16397] ip6gretap0 speed is unknown, defaulting to 1000 [ 797.068438][T16411] CIFS: Attempting to mount \\127.0.0.1\share [ 797.889686][T16411] CIFS: VFS: Error connecting to socket. Aborting operation. [ 797.906013][T16411] CIFS: VFS: cifs_mount failed w/return code = -4 [ 798.449928][T16425] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3574'. [ 799.553777][T16435] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3577'. [ 799.662070][T16435] device bond4 entered promiscuous mode [ 802.483552][T16475] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3589'. [ 809.241799][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.255243][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.588767][T16546] fuse: Unknown parameter 'group_i' [ 809.611409][T16548] xt_nfacct: accounting object `syz0' does not exist [ 813.283606][T16582] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3615'. [ 823.597575][T16669] xt_CONNSECMARK: invalid mode: 0 [ 825.432701][T16675] bond5: (slave vlan5): Opening slave failed [ 825.488901][T16684] fuse: Unknown parameter 'group_i' [ 828.247340][T16728] ip6gretap0 speed is unknown, defaulting to 1000 [ 828.374932][T16738] netlink: 'syz.1.3663': attribute type 21 has an invalid length. [ 828.567055][T16736] Cannot find set identified by id 0 to match [ 828.948773][T16748] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3664'. [ 828.958125][T16748] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3664'. [ 829.829973][T16748] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 829.839351][T16748] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 829.848452][T16748] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 829.857735][T16748] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 833.157177][T16793] fuse: Unknown parameter '0x0000000000000004' [ 834.308496][T16797] ip6gretap0 speed is unknown, defaulting to 1000 [ 834.398687][T16810] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3682'. [ 842.451576][T16875] ip6gretap0 speed is unknown, defaulting to 1000 [ 844.733638][T16900] xt_CT: No such helper "pptp" [ 846.605161][T16933] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 849.536572][ T26] kauditd_printk_skb: 25 callbacks suppressed [ 849.536589][ T26] audit: type=1326 audit(1787855534.936:2994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16968 comm="syz.2.3726" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb72779e0d9 code=0x7ffc0000 [ 849.573419][ T26] audit: type=1326 audit(1787855534.936:2995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16968 comm="syz.2.3726" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb72779e0d9 code=0x7ffc0000 [ 849.607396][ T26] audit: type=1326 audit(1787855534.976:2996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16968 comm="syz.2.3726" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb72779e0d9 code=0x7ffc0000 [ 849.667620][ T26] audit: type=1326 audit(1787855534.976:2997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16968 comm="syz.2.3726" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb72779e0d9 code=0x7ffc0000 [ 849.705395][ T26] audit: type=1326 audit(1787855534.976:2998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16968 comm="syz.2.3726" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fb72779e0d9 code=0x7ffc0000 [ 849.736260][ T26] audit: type=1326 audit(1787855534.976:2999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16968 comm="syz.2.3726" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb72779e0d9 code=0x7ffc0000 [ 849.836100][ T26] audit: type=1326 audit(1787855534.976:3000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16968 comm="syz.2.3726" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb72779e0d9 code=0x7ffc0000 [ 849.916867][ T26] audit: type=1326 audit(1787855534.976:3001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16968 comm="syz.2.3726" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb72779e0d9 code=0x7ffc0000 [ 849.979235][ T26] audit: type=1326 audit(1787855534.976:3002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16968 comm="syz.2.3726" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb72779e0d9 code=0x7ffc0000 [ 850.040787][ T26] audit: type=1326 audit(1787855535.006:3003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16968 comm="syz.2.3726" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb72779e0d9 code=0x7ffc0000 [ 850.276122][T16982] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 852.230269][T16980] xt_CT: You must specify a L4 protocol and not use inversions on it [ 852.510384][T17000] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3736'. [ 857.925169][T17060] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3750'. [ 858.517877][T17071] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 858.953038][ T4286] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 858.962864][ T4286] Bluetooth: hci2: Injecting HCI hardware error event [ 858.978859][T15988] Bluetooth: hci2: hardware error 0x00 [ 859.879734][T17084] Cannot find add_set index 0 as target [ 860.714322][T17095] device bridge_slave_0 entered promiscuous mode [ 860.741525][T17095] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 860.824618][T17098] netlink: 'syz.1.3757': attribute type 9 has an invalid length. [ 861.241022][T17108] xt_TCPMSS: Only works on TCP SYN packets [ 861.602349][T15988] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 865.728474][T17144] device bridge_slave_0 entered promiscuous mode [ 865.768327][T17144] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 865.939145][T17144] netlink: 'syz.5.3774': attribute type 9 has an invalid length. [ 866.996317][ T26] kauditd_printk_skb: 47 callbacks suppressed [ 866.996334][ T26] audit: type=1800 audit(1787855552.396:3051): pid=17154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3776" name="memory_backed" dev="configfs" ino=85382 res=0 errno=0 [ 867.245732][ T26] audit: type=1800 audit(1787855552.496:3052): pid=17162 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3776" name="zone_nr_conv" dev="configfs" ino=85385 res=0 errno=0 [ 867.668829][ T26] audit: type=1800 audit(1787855552.496:3053): pid=17162 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3776" name="power" dev="configfs" ino=85386 res=0 errno=0 [ 870.156479][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.163434][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.519412][T17192] Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 871.222681][T17204] netlink: 180 bytes leftover after parsing attributes in process `syz.6.3790'. [ 875.303335][T15988] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 875.312901][T15988] Bluetooth: hci3: Injecting HCI hardware error event [ 875.331451][ T4286] Bluetooth: hci3: hardware error 0x00 [ 877.841276][ T4286] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 882.610093][T17311] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 882.617631][T17311] IPv6: NLM_F_CREATE should be set when creating new route [ 883.536010][T17316] netlink: 276 bytes leftover after parsing attributes in process `syz.2.3823'. [ 883.589157][T17316] tipc: Enabling of bearer rejected, failed to enable media [ 883.668528][T17320] overlayfs: failed to clone lowerpath [ 883.869238][T17327] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3828'. [ 885.178309][T17340] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 885.358720][T17343] tipc: Enabling of bearer rejected, already enabled [ 885.780088][T17359] 9pnet_fd: Insufficient options for proto=fd [ 888.593801][T17385] tipc: Failed to remove unknown binding: 66,0,0/3149902044:1925354016/1925354017 [ 888.624016][T17388] tipc: Failed to remove unknown binding: 66,0,0/3149902044:3308584561/3308584563 [ 888.651031][T17385] tipc: Failed to remove unknown binding: 66,0,0/3149902044:1925354016/1925354017 [ 888.898100][T17398] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3849'. [ 888.966223][T17401] trusted_key: encrypted_key: insufficient parameters specified [ 893.826761][T17436] PKCS8: Unsupported PKCS#8 version [ 897.856779][T17490] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 897.924527][T17482] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3862'. [ 897.947087][T17495] netlink: 256 bytes leftover after parsing attributes in process `syz.7.3879'. [ 897.972410][T17495] unsupported nlmsg_type 40 [ 898.446778][T17499] netlink: 'syz.7.3883': attribute type 10 has an invalid length. [ 898.653618][T17499] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 898.743118][T17502] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3880'. [ 898.769136][T17502] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 899.336328][T17502] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 899.965110][T17499] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3883'. [ 900.148466][T17522] CIFS: Attempting to mount \\::1\share [ 900.171567][T17522] CIFS: VFS: Error connecting to socket. Aborting operation. [ 900.190548][T17499] bond0: (slave bridge0): Releasing backup interface [ 900.225808][T17522] CIFS: VFS: cifs_mount failed w/return code = -97 [ 902.178447][T17537] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 904.772221][T17560] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3898'. [ 905.529628][T17569] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 906.391011][ C1] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 906.403011][ C1] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 906.411455][ C1] CPU: 1 PID: 17572 Comm: syz.2.3904 Not tainted syzkaller #0 [ 906.418975][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 906.429072][ C1] RIP: 0010:fq_codel_enqueue+0xc80/0x1610 [ 906.435010][ C1] Code: 24 24 48 8b 44 24 20 80 3c 10 00 74 12 4c 89 ef e8 e5 69 70 f9 48 ba 00 00 00 00 00 fc ff df 4d 8b 65 00 4c 89 e0 48 c1 e8 03 <80> 3c 10 00 74 12 4c 89 e7 e8 c2 69 70 f9 48 ba 00 00 00 00 00 fc [ 906.454678][ C1] RSP: 0018:ffffc900001e0520 EFLAGS: 00010246 [ 906.460841][ C1] RAX: 0000000000000000 RBX: 1ffff9200003c104 RCX: 1ffff1100e88335a [ 906.468844][ C1] RDX: dffffc0000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 906.476827][ C1] RBP: ffffc900001e0670 R08: ffffffff90b1348f R09: 1ffffffff2162691 [ 906.484814][ C1] R10: dffffc0000000000 R11: fffffbfff2162692 R12: 0000000000000000 [ 906.492809][ C1] R13: ffff8880434e0000 R14: 0000000000000000 R15: 0000000000000000 [ 906.500816][ C1] FS: 00007fb7285b56c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 906.509784][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 906.516413][ C1] CR2: 00007f281a72aff8 CR3: 00000000627df000 CR4: 00000000003506e0 [ 906.524411][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 906.532422][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 906.540444][ C1] Call Trace: [ 906.543821][ C1] [ 906.546779][ C1] ? INET_ECN_set_ce+0x960/0x960 [ 906.551806][ C1] tbf_enqueue+0x225/0x6e0 [ 906.556244][ C1] ? __rwlock_init+0x140/0x140 [ 906.561092][ C1] dev_qdisc_enqueue+0x4c/0x2b0 [ 906.566046][ C1] __dev_queue_xmit+0x1031/0x3810 [ 906.571114][ C1] ? __dev_queue_xmit+0x281/0x3810 [ 906.576271][ C1] ? tipc_net+0x45/0x270 [ 906.580639][ C1] ? netdev_core_pick_tx+0x360/0x360 [ 906.586216][ C1] ? tipc_crypto_xmit+0x1d6/0x23e0 [ 906.591561][ C1] ? net_generic+0x1e/0x240 [ 906.596207][ C1] ? __lock_acquire+0x7c40/0x7c40 [ 906.601282][ C1] ? eth_header+0x117/0x200 [ 906.605855][ C1] ? memcpy+0x3c/0x60 [ 906.609933][ C1] ? eth_header+0x117/0x200 [ 906.614457][ C1] ? llc_sysctl_exit+0x60/0x60 [ 906.619327][ C1] tipc_l2_send_msg+0x2f0/0x3b0 [ 906.624233][ C1] tipc_bearer_xmit_skb+0x2a9/0x3f0 [ 906.629512][ C1] ? tipc_bearer_xmit_skb+0xa6/0x3f0 [ 906.634857][ C1] ? tipc_bearer_min_mtu+0x1c0/0x1c0 [ 906.640161][ C1] tipc_disc_timeout+0x5e1/0x740 [ 906.645204][ C1] ? tipc_disc_init_msg+0x560/0x560 [ 906.650430][ C1] call_timer_fn+0x1ac/0x670 [ 906.655154][ C1] ? tipc_disc_init_msg+0x560/0x560 [ 906.660404][ C1] ? call_timer_fn+0xcf/0x670 [ 906.665105][ C1] ? __run_timers+0x810/0x810 [ 906.669810][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 906.675087][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 906.680427][ C1] ? tipc_disc_init_msg+0x560/0x560 [ 906.685653][ C1] __run_timers+0x56c/0x810 [ 906.690185][ C1] ? detach_timer+0x350/0x350 [ 906.694886][ C1] ? lock_chain_count+0x20/0x20 [ 906.699764][ C1] run_timer_softirq+0x63/0xf0 [ 906.704536][ C1] handle_softirqs+0x291/0x910 [ 906.709399][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 906.714286][ C1] ? do_softirq+0x210/0x210 [ 906.718805][ C1] ? hrtimer_interrupt+0x775/0x980 [ 906.724055][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 906.729304][ C1] __irq_exit_rcu+0x13b/0x230 [ 906.734027][ C1] ? irq_exit_rcu+0x20/0x20 [ 906.738664][ C1] irq_exit_rcu+0x5/0x20 [ 906.742935][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 906.748597][ C1] [ 906.751571][ C1] [ 906.754586][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 906.760659][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xbc/0x120 [ 906.767182][ C1] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 df a9 1d f7 65 8b 05 e0 5a c7 75 85 c0 74 3c 48 c7 04 24 0e 36 [ 906.786914][ C1] RSP: 0018:ffffc9000de075c0 EFLAGS: 00000206 [ 906.793012][ C1] RAX: dffffc0000000004 RBX: 0000000000000a06 RCX: 4d3204cdb6e7a200 [ 906.801026][ C1] RDX: dffffc0000000000 RSI: ffffffff8a8c1820 RDI: 0000000000000001 [ 906.809079][ C1] RBP: ffffc9000de07650 R08: ffffffff90b132ef R09: 1ffffffff216265d [ 906.817078][ C1] R10: dffffc0000000000 R11: fffffbfff216265e R12: dffffc0000000000 [ 906.825090][ C1] R13: 0000000000000000 R14: ffff888026dc56c0 R15: 1ffff92001bc0eb8 [ 906.833143][ C1] ? _raw_spin_unlock+0x40/0x40 [ 906.838047][ C1] ? __wake_up_common+0x28e/0x4d0 [ 906.843105][ C1] __wake_up_sync_key+0x128/0x190 [ 906.848204][ C1] ? __wake_up_locked_key_bookmark+0x20/0x20 [ 906.854227][ C1] ? sock_load_diag_module+0x130/0x130 [ 906.860017][ C1] __unix_dgram_recvmsg+0x4b7/0xda0 [ 906.865355][ C1] ? unix_unhash+0x10/0x10 [ 906.869790][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 906.875961][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 906.881288][ C1] ? unix_dgram_recvmsg+0xa9/0xd0 [ 906.886364][ C1] ? unix_dgram_sendmsg+0x16f0/0x16f0 [ 906.891754][ C1] ____sys_recvmsg+0x2c8/0x5b0 [ 906.896558][ C1] ? __sys_recvmsg_sock+0x40/0x40 [ 906.901592][ C1] ? import_iovec+0x6f/0xa0 [ 906.906137][ C1] ___sys_recvmsg+0x210/0x590 [ 906.910822][ C1] ? __sys_recvmsg+0x2a0/0x2a0 [ 906.915614][ C1] ? __lock_acquire+0x7c40/0x7c40 [ 906.920673][ C1] ? __might_fault+0xc2/0x120 [ 906.925455][ C1] ? __might_fault+0xa6/0x120 [ 906.930146][ C1] do_recvmmsg+0x370/0x810 [ 906.934588][ C1] ? __sys_recvmmsg+0x290/0x290 [ 906.939485][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 906.945415][ C1] __x64_sys_recvmmsg+0x195/0x250 [ 906.950471][ C1] ? do_recvmmsg+0x810/0x810 [ 906.955075][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 906.960284][ C1] do_syscall_64+0x4c/0xa0 [ 906.964742][ C1] ? clear_bhb_loop+0x60/0xb0 [ 906.969431][ C1] ? clear_bhb_loop+0x60/0xb0 [ 906.974125][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 906.980035][ C1] RIP: 0033:0x7fb72779e0d9 [ 906.984465][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 907.004088][ C1] RSP: 002b:00007fb7285b5028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 907.012540][ C1] RAX: ffffffffffffffda RBX: 00007fb727a26090 RCX: 00007fb72779e0d9 [ 907.020524][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000005 [ 907.028503][ C1] RBP: 00007fb727835024 R08: 0000000000000000 R09: 0000000000000000 [ 907.036493][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 907.044487][ C1] R13: 00007fb727a26128 R14: 00007fb727a26090 R15: 00007ffd0c799ee8 [ 907.052474][ C1] [ 907.055509][ C1] Modules linked in: [ 907.059479][ C1] ---[ end trace 0000000000000000 ]--- [ 907.064991][ C1] RIP: 0010:fq_codel_enqueue+0xc80/0x1610 [ 907.070753][ C1] Code: 24 24 48 8b 44 24 20 80 3c 10 00 74 12 4c 89 ef e8 e5 69 70 f9 48 ba 00 00 00 00 00 fc ff df 4d 8b 65 00 4c 89 e0 48 c1 e8 03 <80> 3c 10 00 74 12 4c 89 e7 e8 c2 69 70 f9 48 ba 00 00 00 00 00 fc [ 907.090528][ C1] RSP: 0018:ffffc900001e0520 EFLAGS: 00010246 [ 907.096646][ C1] RAX: 0000000000000000 RBX: 1ffff9200003c104 RCX: 1ffff1100e88335a [ 907.104755][ C1] RDX: dffffc0000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 907.112774][ C1] RBP: ffffc900001e0670 R08: ffffffff90b1348f R09: 1ffffffff2162691 [ 907.121031][ C1] R10: dffffc0000000000 R11: fffffbfff2162692 R12: 0000000000000000 [ 907.129057][ C1] R13: ffff8880434e0000 R14: 0000000000000000 R15: 0000000000000000 [ 907.137082][ C1] FS: 00007fb7285b56c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 907.146095][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 907.152759][ C1] CR2: 00007f281a72aff8 CR3: 00000000627df000 CR4: 00000000003506e0 [ 907.160785][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 907.168770][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 907.176931][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 907.184755][ C1] Kernel Offset: disabled [ 907.189100][ C1] Rebooting in 86400 seconds..